Secure element for a telecommunications terminal

1. A telecommunications terminal comprising:

a network communications interface;

a secure element comprising a trusted services management application configured to manage a trusted application of the telecommunications terminal;

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to:

receive a request for management of the trusted application, wherein the request for management includes a management action corresponding to one of: installing, deleting, activating, deactivating, blocking, deblocking, updating, or personalizing the trusted application;

determine, based on the management action included in the request for management, whether management of the trusted application is to be performed locally or remotely;

switch the request for management of the trusted application to the trusted services management application upon determination that the management of the trusted application is to be performed locally; and

switch the request for management of the trusted application to a remote trusted service manager server upon determination that the management of the trusted application is to be performed remotely,

wherein the remote trusted service manager server is connected to the network communications interface via a telecommunications network,

wherein the processor is further caused to:

account for a quality of the connection between the telecommunications terminal and the remote trusted service manager in determining whether the management of the trusted application is to be performed locally or remotely, and

when the request for management is switched to the trusted services management application, verify a security policy relating to the management action and perform the management action using a cryptographic key, and

wherein an execution environment in which the trusted application is run includes an operating system under the control of which the trusted application is executed, wherein the operating system includes a secure start mechanism.

2. A telecommunications terminal according to claim 1 , wherein the network communications interface operates in an execution environment distinct from an execution environment in which the trusted application is run.

3. A telecommunications terminal according to claim 1 , wherein the trusted services management application is configured to authorize an installation, an activation, a deblocking operation, updating, or personalizing the trusted application or is configured to cause the trusted application to be deleted, deactivated, or blocked.

4. A telecommunications terminal according to claim 1 , wherein the trusted services management application is configured to select information about an activity of the trusted application.

5. A telecommunications terminal according to claim 1 , wherein an execution environment in which the trusted application is run includes a secure processor on which the trusted application is executed.

6. A telecommunications terminal according to claim 1 , wherein an execution environment in which the trusted application is run includes a secure rewritable non-volatile memory storing instructions for executing the trusted application.

7. A telecommunications terminal according to claim 1 , further including a versatile execution environment running at least one application suitable for requesting access to the trusted application.

8. A telecommunications terminal according to claim 1 , wherein:

an execution environment in which the trusted application is run includes an operating system under the control of which the trusted application is executed, and

the telecommunications terminal further includes a versatile execution environment having a versatile operating system.

9. A telecommunications terminal according to claim 1 , wherein the secure element is configured to transmit an activity report to a trusted service manager server, wherein the activity report is prepared by the trusted services management application.

10. A telecommunications terminal according to claim 1 , wherein the secure element comprises a removable secure element from the group consisting of:

a microcircuit card; and

a universal integrated circuit card.

11. A telecommunications terminal according to claim 1 , wherein the secure element comprises an embedded secure element that is integrated with the telecommunications terminal.

12. A telecommunications terminal according to claim 11 , wherein the embedded secure element comprises an embedded universal integrated circuit card.

13. A telecommunications terminal according to claim 1 , wherein the trusted application comprises one of the group consisting of:

an application for a payment service;

an application for a content supply service; and

an application for a service for guaranteeing the integrity of the telecommunications terminal.

14. A telecommunications terminal according to claim 1 , further comprising:

an execution environment that is distinct from an execution environment of the secure element; and

wherein the trusted application is executed by the execution environment that is distinct from the execution environment of the secure element.

15. A method for managing a trusted application in a terminal, comprising:

receiving a request for management of a trusted application, wherein the request for management includes a management action corresponding to one of: installing, deleting, activating, deactivating, blocking, deblocking, updating, or personalizing the trusted application;

determining, based on the management action included in the request for management, whether management of the trusted application is to be performed locally or remotely;

switching the request for management to a trusted services management application contained in a secure element of the terminal, upon determination that the management of the trusted application is to be performed locally; and

switching the request for management to a remote trusted services manager, connected to the terminal via a network connection, upon determination that the management of the trusted application is to be performed remotely,

wherein the determining comprises accounting for a quality of the network connection between the terminal and the remote trusted service manager, and

wherein, when the request for management is switched to the trusted services management application, the method further comprises:

verifying a security policy relating to the management action; and

performing the management action using a cryptographic key, and

wherein the method further comprises verifying, by the secure element, that the terminal starts in a trusted state.

16. The method of claim 15 , wherein receiving the request for management of the trusted application comprises receiving the request for management from an application running in a versatile execution environment of the terminal.

17. The method of claim 15 , wherein said determining and switching steps are performed by the trusted services management application.

18. A system comprising:

a network communications interface;

a secure element comprising a trusted services management application configured to manage a trusted application of a telecommunications terminal;

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to:

receive a request for management of the trusted application, wherein the request for management includes a management action corresponding to one of: installing, deleting, activating, deactivating, blocking, deblocking, updating, or personalizing the trusted application;

determine, based on the management action included in the request for management, whether management of the trusted application is to be performed locally or remotely;

switch the request for management of the trusted application to the trusted services management application when the management of the trusted application is performed locally; and

switch the request for management of the trusted application to a remote trusted service manager server when the management is performed remotely,

wherein the remote trusted service manager server is connected to the network communications interface via a telecommunications network,

wherein the processor is further caused to:

account for a quality of the connection between the telecommunications terminal and the remote trusted service manager in determining whether the management of the trusted application is to be performed locally or remotely, and

when the request for management is switched to the trusted services management application, verify a security policy relating to the management action and perform the management action using a cryptographic key, and

wherein the secure element is configured to verify that the telecommunications terminal starts in a trusted state.