Methods and apparatus for use in transferring an assignment of a secure chip between subscription managers
Techniques for use in transferring an assignment of a secure chip of a wireless device from a current subscription manager (SM) of a current mobile network operator (MNO) to a new SM of a new MNO are described. In one illustrative example, the current SM receives a request for transferring the assignment and produces transfer permission data in response. The transfer permission data includes an identifier of the secure chip, an identifier of the current SM, and a digital signature of the current SM. The current SM then sends to the secure chip a transfer permission message which includes the transfer permission data. The transfer permission data indicates a permission for the secure chip to transfer the assignment from the current SM to the new SM. Additional techniques are performed by the secure chip, and the new SM, as described.
1. A method comprising:
storing a first profile and a second profile at a secure chip of a wireless device, the first profile including data for accessing a first network and the second profile including data for accessing a second network, the first profile and the second profile being active one at a time, the first profile being active such that the wireless device is initially in communication with the first network, and the second profile being inactive such that the wireless device is initially not in communication with the second network;
receiving a message from a server at the secure chip, the message causing a profile switch such that the first profile is deactivated and the second profile is activated, the message comprising a permission for the secure chip to transfer an assignment of a server of the first network to a respective server of the second network; and
using the second profile, after receipt of the message from the server, to establish communication between the secure chip and the second network, wherein the message further comprises transfer permission data, and the using the second profile to establish communication between the secure chip and the second network comprises sending, to the respective server of the second network, a transfer request message comprising the transfer permission data, an identifier of the respective server of the second network, and a digital signature of the secure chip.
2. The method of claim 1 , further comprising before the storing, receiving another message comprising at least one of the first and second profiles.
3. The method of claim 1 , wherein the message further comprises an identifier of the server and a digital signature of the server, the method further comprising verifying the digital signature of the server prior to the establishing communication between the secure chip and the second network using the second profile.
4. The method of claim 1 , further comprising: receiving a digital certificate of the respective server of the second network; and verifying the digital certificate of the respective server of the second network.
5. The method of claim 4 , further comprising sending a transfer request message to the respective server of the second network only when the digital signature is positively verified by the secure chip.
6. The method of claim 1 , further comprising receiving a transfer activation code from the server of the first network.
7. The method of claim 1 , wherein the secure chip is an Embedded Universal Integrated Circuit Card (eUICC).
8. A wireless device comprising:
a secure chip, and a processor configured to:
store a first profile and a second profile at the secure chip, the first profile including data for accessing a first network and the second profile including data for accessing a second network, the first profile and the second profile being active one at a time, the first profile being active such that the wireless device is initially in communication with the first network, and the second profile being inactive such that the wireless device is initially not in communication with the second network;
receive a message from a server at the secure chip, the message causing a profile switch such that the first profile is deactivated and the second profile is activated, the message comprising a permission for the secure chip to transfer an assignment of a server of the first network to a respective server of the second network; and
use the second profile, after receipt of the message from the server, to establish communication between the secure chip and the second network, wherein the message further comprises transfer permission data, and the using the second profile to establish communication between the secure chip and the second network comprises sending, to the respective server of the second network, a transfer request message comprising the transfer permission data, an identifier of the respective server of the second network, and a digital signature of the secure chip.
9. The device of claim 8 , wherein the processor is further configured to, before the first profile and the second profile are stored at the secure chip, receive another message comprising at least one of the first and second profiles.
10. The device of claim 8 , wherein the message further comprises an identifier of the server and a digital signature of the server, the processor further configured to verify the digital signature of the server prior to establishment of communication between the secure chip and the second network using the second profile.
11. The device of claim 8 , the processor is further configured to: receive a digital certificate of the respective server of the second network; and verify the digital certificate of the respective server of the second network.
12. The device of claim 11 , the processor is further configured to send a transfer request message to the respective server of the second network only when the digital signature is positively verified by the secure chip.
13. The device of claim 8 , the processor is further configured to receive a transfer activation code from the server of the first network.
14. The device of claim 8 , wherein the secure chip is an Embedded Universal Integrated Circuit Card (eUICC).
15. A non-transitory computer-readable medium storing a computer program, wherein execution of the computer program is for:
storing a first profile and a second profile at a secure chip of a wireless device, the first profile including data for accessing a first network and the second profile including data for accessing a second network, the first profile and the second profile being active one at a time, the first profile being active such that the wireless device is initially in communication with the first network, and the second profile being inactive such that the wireless device is initially not in communication with the second network;
receiving a message from a server at the secure chip, the message causing a profile switch such that the first profile is deactivated and the second profile is activated, the message comprising a permission for the secure chip to transfer an assignment of a server of the first network to a respective server of the second network; and
using the second profile, after receipt of the message from the server, to establish communication between the secure chip and the second network, wherein the message further comprises transfer permission data, and the using the second profile to establish communication between the secure chip and the second network comprises sending, to the respective server of the second network, a transfer request message comprising the transfer permission data, an identifier of the respective server of the second network, and a digital signature of the secure chip.
16. The non-transitory computer-readable medium of claim 15 , wherein execution is further for before the storing, receiving another message comprising at least one of the first and second profiles.
17. The non-transitory computer-readable medium of claim 15 , wherein the message further comprises an identifier of the server and a digital signature of the server, wherein execution is further for verifying the digital signature of the server prior to the establishing communication between the secure chip and the second network using the second profile.
18. The non-transitory computer-readable medium of claim 15 , wherein execution is further for receiving a digital certificate of the respective server of the second network; and verifying the digital certificate of the respective server of the second network.
19. The non-transitory computer-readable medium of claim 18 , wherein execution is further for sending a transfer request message to the respective server of the second network only when the digital signature is positively verified by the secure chip.
20. The non-transitory computer-readable medium of claim 15 , wherein execution is further for receiving a transfer activation code from the server of the first network.
21. The non-transitory computer-readable medium of claim 15 , wherein the secure chip is an Embedded Universal Integrated Circuit card.