Method and System for Updating a Firmware of a Security Module

1 - 15 . (canceled)

16 . A method for updating a firmware of a security module in an equipment (E) comprising a device and the security module which are arranged such that data can be exchanged between the security module and the device, comprising the steps:

receiving a first message by the security module, wherein the first message indicates the availability of a firmware update provided by a provider (P) and wherein the first message contains a transaction number which is individual for the security module;

transferring a second message from the equipment (E) to the provider (P) with which the firmware update is requested from the provider (P), wherein the second message contains the individual transaction number to enable the provider (P) to conduct an identification of the security module;

transferring the firmware update from the provider (P) to the equipment (E) based on an evaluation of the individual transaction number and storing the firmware update in a memory of the device; and

unpacking the firmware by a boot loader of the equipment (E) or the security module.

17 . The method according to claim 16 , wherein the first message further comprises a first unlock secret and after the step of transferring the firmware update the method further comprises the steps:

transferring a second unlock secret from the provider (P) to the equipment (E);

verifying whether the second unlock secret corresponds to the first unlock secret by the equipment (E); and

unpacking the firmware by the boot loader of the equipment (E) or the security module in case that the verification results in a corresponding unlock secret.

18 . The method according to claim 16 , wherein unpacking the firmware update comprises transferring of those data from the device to the security module which are processed directly by the boot loader.

19 . The method according to claim 16 , wherein unpacking of the firmware update comprises a decryption of data received from the device by the security module.

20 . The method according to claim 16 , wherein the boot loader creates a backup of the actual firmware before starting unpacking of the firmware update.

21 . The method according to claim 16 , wherein the boot loader checks the success of updating the firmware by calculating a checksum of the unpacked firmware and comparing the calculated checksum with a received checksum.

22 . The method according to claim 16 , wherein the unlock secret is stored within the security module only in case a firmware update is necessary.

23 . The method according to claim 16 , wherein the first message is transferred by a subscription manager of the provider (P) due to the reception of a release message from a security module vendor of the provider (P) wherein the release message contains the firmware update and an information about a version and/or a type of the available firmware update.

24 . The method according to claim 23 , wherein at least the firmware update of the release message is encrypted with a first key (Key FW ), wherein the first key (Key FW ) is specific according to a type of the security module and known to the security module of the equipment (E) and the security module vendor.

25 . The method according to claim 24 , wherein the release message contains a checksum being encrypted with the first key (Key FW ).

26 . The method according to claim 16 , wherein the first message is encrypted with a second key (Key eUICC ), which is known to the security module of the equipment (E) and the subscription manager.

27 . The method according to claim 26 , wherein the second message is encrypted with the second key (KeyeUICC).

28 . The method according to claim 16 , wherein the second message is triggered by the security module and the second message is transferred from the device to the provider (P).

29 . The method according to claim 28 , wherein the second message is encrypted with the second key (Key eUICC ).

30 . The method according to claim 16 , wherein the second unlock secret is transferred from the provider (P) to the equipment (E) after the complete transfer of the firmware update.

31 . A system for updating a firmware of a security module in an equipment (E) comprising a device and the security module which are arranged such that data can be exchanged between the security module and the device, the system being adapted to:

receive a first message by the security module, wherein the first message indicates the availability of a firmware update provided by a provider (P) and wherein the first message contains a transaction number which is individual for the security module and a first unlock secret;

transfer a second message from the equipment (E) to the provider (P) with which the firmware update is requested from the provider (P), wherein the second message contains the individual transaction number to enable the provider (P) to conduct an identification of the security module;

transfer the firmware update from the provider (P) to the equipment (E) based on an evaluation of the individual transaction number and storing the firmware update in a memory of the device;

transfer a second unlock secret from the provider (P) to the equipment (E);

verify whether the second unlock secret corresponds to the first unlock secret; and

unpack the firmware by a boot loader of the equipment (E) or the security module in case that the verification of the further unlock secret is positive.