Secure element for mobile network services
In a secure element ( 4 ) that comprises an application ( 17 B) and/or a security domain ( 17 A) a mode is proved, in which mode a transfer of data (AD) to said application ( 17 B) and/or security domain ( 17 A) requires pre-authorization.
1. A method of operating a mobile communication network ( 1 ), the network ( 1 ) comprises:
at least one mobile device ( 5 ) that comprises a secure element ( 4 ), wherein a first party ( 3 ) is responsible for the secure element ( 4 ), and the secure element ( 4 ) comprises an application ( 17 B) and/or a security domain ( 17 A) for which a service provider ( 9 ) that is different from the first party ( 3 ) is responsible,
the method comprises the steps of
transferring application data (AD) for said application ( 17 B) and/or security domain ( 17 A) via a communication link, in particular an over-the-air link (OTAL) from a second party ( 7 ) to the mobile device ( 5 ), wherein the service provider ( 9 ) bears responsibility for the application data (AD),
characterized in that a pre-authorization is acquired by the second party ( 7 ) from the first party ( 3 ) and provided to the secure element ( 4 ), wherein the secure element ( 4 ) provides a mode in which a transfer of application data (AD) to said application ( 17 B) and/or security domain ( 17 A) requires pre-authorization, and
wherein the second party ( 7 ) acquires as a pre-authorization a data-transfer-token (DTT) from the first party ( 3 ) via a communication link, in particular via an Internet based communication channel (IL 2 ), wherein the data-transfer-token (DTT) is computed by the first party ( 3 ) according to a token computation algorithm by using the application data (AD) received upfront from the second party ( 7 ) and a private key of a key pair of the first party ( 3 ).
2. A method of operating a mobile communication network ( 1 ), the network ( 1 ) comprises:
at least one mobile device ( 5 ) that comprises a secure element ( 4 ), wherein a first party ( 3 ) is responsible for the secure element ( 4 ), and the secure element ( 4 ) comprises an application ( 17 B) and/or a security domain ( 17 A) for which a service provider ( 9 ) that is different from the first party ( 3 ) is responsible,
the method comprises the steps of
transferring application data (AD) for said application ( 17 B) and/or security domain ( 17 A) via a communication link, in particular an over-the-air link (OTAL) from a second party ( 7 ) to the mobile device ( 5 ), wherein the service provider ( 9 ) bears responsibility for the application data (AD),
characterized in that a pre-authorization is acquired by the second party ( 7 ) from the first party ( 3 ) and provided to the secure element ( 4 ) wherein the secure element ( 4 ) provides a mode in which a transfer of application data (AD) to said application ( 17 B) and/or security domain ( 17 A) requires pre-authorization and, wherein the first party ( 3 ) logs each event or a group of events of providing a pre-authorization to said second party ( 7 ) and the logged event(s) is (are) assigned a monetary value to be paid by the second party ( 7 ) or the Service Provider ( 9 ) to the first party ( 3 ).