Contents management for mobile station having runtime environment
View Patent ↗The invention creates a mobile station comprising a mobile end device (ME) with a secured runtime environment (TEE) and a removable or firmly implemented security element (SE), with an end device send server (TEE-TSM) arranged in the security element (SE), which is arranged to send to the secured runtime environment (TEE) end device messages which can be received by the secured runtime environment (TEE). The end device messages are sent by a trusted service manager (SE-TSM), which is provided for the security element (SE), to the security element (SE), thereby higher efficiency being guaranteed at maintained security.
1. A mobile station comprising a mobile end device and a security element, the mobile end device having a secured runtime environment, and the security element being removably or firmly implemented,
wherein the security element includes a security element receiving unit configured to receive security element messages sent to the security element,
wherein an end device receiving unit is arranged in the secured runtime environment of the end device, the end device receiving unit being configured to receive end device messages sent to the secured runtime environment of the end device from a mobile network provider system,
wherein the security element receiving unit is further configured to receive secured end device messages, and
wherein the security element further includes an end device send server arranged to send secured end device messages to the secured runtime environment, the secured end device messages being receivable by the secured runtime environment as said end device messages.
2. The mobile station of claim 1 , wherein the security element and the security element messages are specified according to ETSI and the secured runtime environment and the end device messages are specified according to Global Platform.
3. A contents management system comprising at least one mobile station according to claim 1 .
4. The contents management system of claim 3 , further comprising a contents server by which contents including data or/and programs for storage in the secured runtime environment of a mobile end device can be supplied to the security element send server.
5. A management server for mobile stations, the respective mobile station comprising a mobile end device having and a security element, the mobile end device having a secured runtime environment, and the security element being removably or firmly implemented,
wherein the management server comprises a security element send server and, wherein the security element send server is arranged to send security element messages to the security element, wherein the security element messages can be received by the security element,
wherein
the management server is arranged to accept end device messages which can be received by the secured runtime environment of the end device and to pass the end device messages on to an end device send server arranged in the security element of the mobile end device, wherein the security element messages are receivable by the secured runtime environment as said end device messages.
6. A contents management system comprising at least one management server according to claim 5 .
7. The contents management system of claim 6 , further comprising a contents server by which contents including data or/and programs for storage in the secured runtime environment of a mobile end device can be supplied to the security element send server.
8. A method, for a mobile station comprising a mobile end device and a security element, the mobile end device having a secured runtime environment, and the security element being removably or firmly implemented, for storing a content including data or a program in the secured runtime environment of the mobile end device, the mobile end device having an end device receiving unit arranged in the secured runtime environment of the mobile end device, the end device receiving unit being configured to receive end device messages sent to the secured runtime environment of the end device from a mobile network provider system, the method comprising the steps of:
supplying the content from a contents server to a security element send server, wherein the contents server is provided outside the mobile station and the security element send server is provided outside the mobile station;
sending the content in a security element message from the security element send server to an end device send server arranged in the security element of the mobile end device; and
sending the content in an end device message from the end device send server to the secured runtime environment.
9. The method of claim 8 , wherein the security element and the security element messages are specified according to ETSI and the secured runtime environment and the end device messages are specified according to Global Platform.