Method for establishing a bidirectional communication channel between a server and a secure element, corresponding servers and secure element

1. Method for establishing a bidirectional communication channel between a server and a secure element cooperating with a terminal in a cellular telecommunication network for exchanging data and commands, said method comprising:

a—Sending a first attachment request signaling message from said terminal to said server, said first message comprising an IMSI field including an MCC, an MNC of said server, a dedicated digit, and at least a part of a unique identifier of said secure element, said server being provisioned with said unique identifier;

b—Sending from said server to said secure element, in at least a first signaling message:

At least a command;

A correlation identifier for further messages that have to be sent from said secure element to said server, wherein the correlation identifier is defined such that a first digit of the correlation identifier cannot be the same as the dedicated digit;

A first payload comprising data;

c—Executing at said secure element said command.

2. Method according to claim 1 , wherein a second signaling message also containing data is sent by said server with said first signaling message.

3. Method according to claim 1 , wherein said data contain an MCC and an MNC of a server of an MNO and a temporary IMSI permitting said secure element to attach to the network of said MNO.

4. Method according to claim 1 , wherein said correlation identifier is used for pairing the messages exchanged between said server and said secure element and is changed at each sending of a new message by said server.

5. Method according to claim 1 , wherein said unique identifier is:

a EID of said secure element, or

a key derived from said EID.

6. A secure element comprising an operating system comprising instructions to:

a—send to a server through the baseband of a telecommunication terminal cooperating with said secure element when it is first powered on, a first attachment request signaling message, said first attachment request signaling message comprising an IMSI field including an MCC, an MNC, a dedicated digit, and at least a part of a unique identifier of said secure element, said server being provisioned with said unique identifier;

b—receive from said server, in at least a first signaling message:

At least a command;

A correlation identifier for further messages that have to be sent from said secure element to said server, wherein the correlation identifier is defined such that a first digit of the correlation identifier cannot be the same as the dedicated digit;

A first payload comprising data;

c—executing at said secure element said command.

7. A secure element according to claim 6 , wherein said operating system:

d—sends to said server in at least a second attachment request signaling message, said MCC, said MNC, the correlation identifier received from said server and a second payload containing data and wherein said operating system repeats steps -a- to -d- if necessary until said secure element and said server do not need to exchange further data or commands.

8. A secure element according to claim 6 , wherein the secure element comprises:

a UICC, or

an eUICC, or

an iUICC.

9. A terminal comprising a secure element according to claim 6 .