IP Library Granted Patent US 10,587,599
Granted Patent B2
US 10,587,599 · App. 15/519,669 · Granted Mar 10, 2020

Method of sending data from a secure token to a distant server

Inventors: Xavier Berard (Gemenos, FR); Antoine Galland (Gemenos, FR)
Assignee: Thales DIS France SA
H04L63/08H04W4/50H04W12/0017H04W12/0023H04W4/70
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,587,599
App. No.
15/519,669
Granted
Mar 10, 2020
Kind
B2
Abstract

The invention is a method for managing a response from an application embedded in a secure token acting as an UICC, in response to a command requesting opening a proactive session. The command is sent by an applicative server to the secure token via an OTA server providing a security layer. The method comprises the steps of sending another command from the applicative server to the secure token using the security layer provided by the OTA server, and in response to this second command, the secure token send the response of the first command to the applicative server using the security layer provided by the OTA server.

Claims (16)

1. A computer-implemented method, comprising the steps:

a secure token receives from an applicative server via an OTA server a first command requesting opening a proactive session, said first command being secured with a security layer provided by the OTA server, wherein the secure token is a hardware device that implements a universal integrated circuit card,

the secure token receives from the applicative server a second command, said second command requesting the sending of a response to said first command and being secured by the security layer provided by the OTA server, and

in response to receipt of the second command, an application embedded in the secure token builds a secured response packet comprising the response secured with the security layer provided by the OTA server and sends the secured response packet to the OTA server which in turn sends the response to the applicative server.

2. A method according to claim 1 , wherein the secure token sends to the applicative server an intermediate response to said first command, said intermediate response comprising a request for a time extension, said intermediate response being secured with the security layer provided by the OTA server.

3. A method according to claim 2 , wherein the request comprises a time extension expressed as a fixed duration, an indefinite duration or the occurrence of a specified event.

4. A method according to claim 1 , wherein the secure token sends to the applicative server a message indicating that the response can be retrieved.

5. A method according to claim 4 , wherein, said message is sent directly to the applicative server without using the security layer provided by the OTA server.

6. A secure token including instructions stored thereon that, when executed, cause said secure token to:

run, by an application of the secure token, a first command requesting opening a proactive session, said first command being initiated by an applicative server and secured with a security layer provided by an OTA server, wherein the application generates a response corresponding to the first command, wherein the secure token is a hardware device that implements a universal integrated circuit card,

handle a second command requesting the sending of the response, and

build a secured response packet comprising the response secured with the security layer provided by the OTA server and send the secured response packet to the OTA server in response to receipt of the second command.

7. A secure token according to claim 6 , wherein the secure token is configured to send to the applicative server an intermediate response to said first command, said intermediate response comprising a request for a time extension, said intermediate response being secured with the security layer provided by the OTA server.

8. A secure token according to claim 6 , wherein the secure token is configured to send to the applicative server a message indicating that the response can be retrieved.

9. A system including an applicative server and a secure token according to claim 6 , wherein the applicative server is configured to send the second command after an event and to get the response from the OTA server in response to sending of the second command.

10. A system according to claim 9 , wherein the event is selected from a set comprising the receipt of a message indicating that the response can be retrieved, a specific duration after the receipt of a request for a time extension and a predefined duration after the sending of the first command.

Assignments (2)
CHANGE OF NAME Recorded Jan 27, 2020
From: GEMALTO SA
To: THALES DIS FRANCE SA
Reel/Frame 051706/0817 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 24, 2018
From: BERARD, XAVIER; GALLAND, ANTOINE
To: GEMALTO SA
Reel/Frame 046693/0952 →
Priority Claims (1)
EP 14306684 · Oct 23, 2014 · regional
Continuity (1)
Related Publication 20170244691A1 · Aug 24, 2017