Method for transmitting profiles to a chip module and for operating the chip module, chip module, and device comprising such a chip module

Abstract

The invention relates to: a method for transmitting profiles to a chip module and for operating the chip module; a chip module for storing a plurality of optionally activatable profiles; and a device comprising a communication module and a chip module. A plurality of profiles of different profile types can be stored on the chip module, each profile being assigned the relevant profile type and profile data. The chip module is operated using one or more profiles. Depending on the profile type of the activated profile, the chip module operates in a first operating mode or a second operating mode.

Description

[0001] Method for transmitting profiles to a chip module and for operating the chip module, chip module and device with such a chip module

[0002] Technical area

[0003] The invention relates to a method for transmitting profiles to a chip module and for operating the chip module, a chip module for maintaining a plurality of selectively activatable profiles, and a device with a communication module and said chip module.

[0004] background

[0005] Chip modules, for example in the form of chip cards or integrated circuits, are used in many areas to grant or deny authorization to access services. A chip module contains data that can uniquely identify a person or device. A chip module also contains a processor that can perform computational steps.

[0006] If a chip module is designed as a chip card, the chip card comprises, for example, a card body and an integrated circuit embedded in the card body, for example, in the form of a chip module with a chip. The chip module is inserted into a cavity or module opening in the card body.

[0007] A chip module can also be designed as an integrated electronic circuit. Therefore, it should be understood that references to a chip card and explanations relating to a chip card in the context of this description always also generally apply to a chip module and its implementation as an integrated electronic circuit. Before chip cards can be used to access services, they usually have to be equipped with a profile. One or more profiles can be stored on a chip card, with each profile enabling or requiring either different access rights or different operating modes for the chip card and the device containing the chip card.

[0008] When accessing mobile communication services, chip modules such as SIM cards (subscriber identity modules) or eSIMs (embedded SIMs) are used to grant a device or user appropriate access rights. A profile is stored on a chip module to configure access to a communication service.

[0009] Configurations exist in which a device can use different profiles to transmit data over a communications network. For example, it is conceivable for a device to contain multiple chip modules, for example, to transmit a user's data with a first profile and to exchange data between the device and the manufacturer for maintenance or other purposes with a second profile.

[0010] It is also conceivable that a device should be operated with different profile types at different times or in different environments.

[0011] In the consumer sector, the relevant GMSA standard is SGP.22, and in the IoT sector, SGP.32. SGP.22 and SGP.32 differ in the way profiles are transmitted to a chip module and also in the way profiles are managed. Currently, this requires that a separate chip module be used for SGP.22 and SGP.32.

[0012] US 20210368329 A1 discloses a method for adaptively generating a profile package for installing a profile on an embedded universal integrated circuit card (eUICC). According to the method, various profile descriptions, each specific to a specific use case, are received from a mobile network operator server. The profile descriptions correspond to different configurations of the eUICC. Furthermore, the eUICC, a data preparation server, or the MNO server receives configuration information. A profile description matching the received configuration information is selected. Profile data is provided on the data preparation server. From the profile description and profile data, the data preparation server generates a profile package that can be loaded onto the eUICC.

[0013] US 20190327605 A1 describes a method for loading a profile onto an eUICC using a local profile wizard on the eUICC. In response to an instruction from a local profile wizard on the eUICC to download a target profile from a download server indicated by the download information using a local eUICC profile wizard, a user terminal sends a target profile specified in the download information to the eUICC.

[0014] US 20170077975 A1 discloses a method for loading and managing a profile on an eUlCC. The eUlCC captures configuration information from the terminal device in which the eUlCC is embedded and sends it to a subscription management platform. The subscription management platform generates a profile based on the configuration information.

[0015] US 20190098488 A1 discloses an eSIM management system that acts as an abstraction layer between various partners, mobile network operators, mobile virtual network operators, and / or enterprises, and SIM or eSIM providers, supporting real-time profile provisioning. To serve a profile request and provision a profile on demand, the system loads network information into a relational database, receives a profile request from a subscription management application, calls a data preparation platform to assign an Integrated Circuit Card Identifier (ICCID) for the profile request, and loads details of the ICCID into a real-time memory network database.

[0016] Description of the invention

[0017] It can therefore be considered a task to simplify the use of profiles of different profile types in communication devices.

[0018] This object is achieved by a method for transmitting profiles to a chip module and for operating the chip module, a chip module for maintaining multiple selectively activatable profiles, and a device comprising a communication module and a chip module. Further embodiments emerge from the dependent claims and the following description.

[0019] According to one aspect, a method for transmitting profiles to a chip module and for operating the chip module is specified. The method comprises the following steps: triggering a transmission of a profile to the chip module; transmitting profile type information to the chip module, wherein the profile type information is linked to the triggered transmission of the profile; requesting profile data from a profile provision unit; transmitting the profile data by the profile provision unit to a profile management unit; transferring the profile data by the profile management unit to the chip module; linking the profile data with the profile type information to generate a profile; storing the generated profile in a profile storage location of the chip module.

[0020] A profile is used to identify a device and / or person to a service provider and to assign access rights and / or roles to the device and / or person. Using the profile, a service provider can grant or deny access to a service.

[0021] Before a device accesses a service for the first time, it must be prepared for this access. This includes, among other things, storing a profile. In the case described here, these are profiles for accessing communication networks, such as wireless mobile communication networks. For the device to receive a profile, the transfer process is first initiated. This transfer process causes a profile to be written to the chip module.

[0022] The procedure described here involves assigning a profile type to a profile. A profile type can particularly influence how a profile is managed and how the chip module behaves when the corresponding profile is activated.

[0023] For example, a profile type can indicate whether a profile is a profile of a natural person's device in their capacity as a consumer (so-called consumer devices) or a profile of a networked device (so-called IoT devices) used in an IoT environment. The process for deploying and using a profile for consumer devices is defined in the GSMA SGP.22 specification family. The process for deploying and using a profile for IoT devices is defined in the SGP.32 specification family. SGP.22 and SGP.32 describe how a profile is deployed to a chip module and how a device behaves when using a corresponding profile.

[0024] A special aspect is that, in this case, profile type information is transmitted to the chip module before profile data is transmitted from the profile provision unit to the profile management unit and the chip module. Thus, the chip module has the relevant information about which profile type will be transmitted next. Accordingly, the chip module can link the next received profile data to this profile type. Furthermore, the chip module can also apply a communication behavior that corresponds to the transmitted profile type. To stay with the example described above, the chip module must behave differently in the case of an SGP.22 profile than in the case of an SGP.32 profile. Once this information about the profile type is available to the chip module, the chip module can apply the appropriate behavior in accordance with the corresponding specification family during the profile data transmission phase.

[0025] In this way, it is possible for the chip module to receive different profile types and for the chip module to be informed of which profile type a profile belongs to.

[0026] Once the chip module has the information about the profile type, profile data can be requested from a profile provisioning unit. The requested profile data is uniquely identified using known mechanisms (i.e., a profile is requested and provided for a specific person and / or device, and this profile is identified by a unique identifier, such as a number) to be provided accordingly by the profile provisioning unit.

[0027] The requested profile data is transmitted from the profile provisioning unit to the profile management unit. The profile provisioning unit is, for example, a central entity of a service provider, such as a mobile network operator. The profile provisioning unit can be, for example, a so-called SM-DP+ (Subscription Manager - Data Preparation), which is defined in the GSMA protocols.

[0028] The profile management unit is a local module that runs on a decentralized device or the chip module. The profile management unit receives the profile data from the profile provision unit and transfers it to the chip module. In particular, the profile management unit implements the function of an LPA (Local Profile Assistant) and / or an IPA (IoT Profile Assistant, where IoT refers to Internet of Things). The profile management unit also serves, in particular, to handle the transfer of profile data from the profile provision unit to the chip module. For example, the profile management unit can temporarily store the profile data and convert it into a format in which it is subsequently transferred to the chip module.

[0029] For the transmission of profile data by the profile provision unit to the profile management unit, all known security and confidentiality mechanisms can be used to protect the content of the transmitted data packets from unauthorized access.

[0030] In the chip module, the profile data is linked to the profile type information, thereby creating a profile. The generated profile is stored in a profile memory location of the chip module.

[0031] In this way, multiple profiles of different profile types can be stored and used in one chip module. In particular, it is possible for a single physical chip module to contain multiple profiles of different profile types and also behave in accordance with the respective profile type.

[0032] In one embodiment, the profile type information is configured to display a profile type selected from a group comprising at least two different profile types.

[0033] The profile type information tells the chip module which profile type the next transmitted profile data belongs to and which profile type the resulting profile will be. Accordingly, the chip module can, for example, be switched to an operating mode in which it must operate for the corresponding profile type, which applies to both receiving a profile type and operating with a specific profile type.

[0034] The profile type information can be a data field or a value that is uniquely assigned to a specific profile type. For example, a first value for the profile type information can point to an SGP.22 profile and a second value to an SGP.32 profile.

[0035] In a further embodiment, the transmission of a profile to the chip module is triggered via a profile activation unit, wherein the profile activation unit is an activation module of a device in which the chip module is contained, or a remote access unit.

[0036] Depending on the profile type, the transmission of the profile to the chip module is triggered either locally by an activation module or remotely via a remote access unit.

[0037] For example, if the profile is a consumer profile according to SGP.22, initiating the transmission of the profile is typically the responsibility of an operator of the corresponding device. The activation module can, for example, be a software module running on the device that allows the user to trigger the transmission of a profile to the chip module.

[0038] For an IoT device, which often lacks a direct user interface for inputs and outputs, this approach via a local activation module is not always possible or practical. Therefore, for a profile according to SGP.32, the transmission of the profile is triggered via a remote access unit.

[0039] If the transmission of the profile is triggered, the profile type information can be transmitted to the chip module at the same time so that the chip module operates in the corresponding mode and that the next transmitted profile is linked to the appropriate profile type and stored in its memory. For example, the activation module can send a message to the chip module that a profile according to SGP.22 is being transmitted. When the chip module then receives the profile, it links it to the corresponding profile type. A remote access unit sends a message to the chip module that a profile according to SGP.32 is being transmitted and, upon receiving this profile, the chip module proceeds accordingly and links it to the corresponding profile type. This means that the chip module receives a message that a new profile is being transmitted to the chip module and which profile type this new profile is.This message is transmitted to the chip module before the new profile is saved on the chip module. The chip module is now ready to receive a profile. Once the profile arrives at the chip module, it is assigned to the profile type according to the previously received message.

[0040] In another embodiment, linking the profile data with the profile type information to create a profile includes storing the profile data and the profile type information together under a unique profile number.

[0041] For a profile to be complete, it requires both the profile data and the profile type. The profile data contains values ​​and parameters of a service provider and is used by the provider, for example, to configure access parameters for the services offered. The profile type indicates the type of the corresponding profile and thus influences how the chip module must be operated with a specific profile.

[0042] A profile contains a unique profile number that distinguishes it from other profiles. The profile number can be used to select and activate a profile.

[0043] In a further embodiment, the method further comprises the following steps: selecting a profile from the profile storage location of the chip module; operating the chip module according to the selected profile.

[0044] The chip module can contain multiple profiles in its profile memory. The number of profiles is only limited by the size of the profile memory.

[0045] Preferably, new profiles can be transmitted to the chip module at any time, even after the chip module already contains one or more profiles. One of the profiles stored in the profile memory can be selected to operate the chip module with the corresponding profile. The selected profile can also be referred to as the active profile.

[0046] According to a further aspect, a chip module for maintaining a plurality of selectively activatable profiles is specified. The chip module has a processor, a memory, and a communication interface. The chip module is configured to receive profile type information and profile data via the communication interface. The processor is configured to store the profile type information and the profile data as a profile in the memory. The memory is configured to contain a plurality of profiles, of which at least two profiles differ from one another with regard to their respective profile type information. The chip module is configured to be operated in an operating mode according to a profile type, and the chip module is operable with a first profile type in a first operating mode or with a second profile type in a second operating mode.

[0047] The chip module described here implements the function described above in connection with the method. This chip module is suitable for operation as a single physical hardware module with different profiles. Thus, the chip module can be operated and configured in a terminal device in different operating modes, for example, according to the specifications of SGP.22 in a first operating mode and according to the specifications of SGP.32 in a second operating mode.

[0048] This is made possible by the chip module first receiving a message indicating the profile type of the next transmitted profile. This allows the chip module to directly assign the desired profile type to the received profile data and save the profile data along with the profile type information. If this profile is later activated, the chip module can read the profile type and operate in the corresponding mode. The chip module described here can also be referred to as a profile-type-independent chip module because it can store profiles of different profile types and thus be operated selectively.

[0049] In one embodiment, the chip module is designed such that in the first operating mode at least two profiles of the first profile type can be activated simultaneously.

[0050] Particularly in the consumer sector according to SGP.22, more than one profile can be activated at a time and a corresponding communication device can be operated in such a way that both profiles of this same profile type are active at the same time.

[0051] In a further embodiment, the chip module is designed such that the profiles of the second profile type can be managed via a remote access unit.

[0052] The second operating mode corresponds to the operation according to SGP.32. The profiles for this operating mode are generally only accessible via the remote access unit. Conversely, this means that the profiles for the second operating mode are not accessible locally to a user of the device. Preferably, the chip module is designed so that the remote access unit has access only to the profiles of the second profile type, while access to the profiles of the first profile type is excluded.

[0053] This structure allows a user of the device to configure it locally and load and activate corresponding profiles onto the chip module, but it is also possible to store profiles of a different profile type with the same chip module, which can only be managed via remote access.

[0054] In a further embodiment, the chip module is designed to deny the remote access unit access to profiles of the first profile type.

[0055] This can be achieved, for example, by the chip module filtering the profiles by profile type and forwarding information to the remote access unit only regarding profiles of the second profile type. Thus, information about profiles of the first profile type is not transmitted to the remote access unit at all. However, other mechanisms are also conceivable. For example, profiles of the first profile type and the second profile type can be stored in different areas of the chip module's memory, and the remote access unit is granted access rights only to the area of ​​the memory containing the profiles of the second profile type.

[0056] In the event that the profile activation unit contains a local activation module and the profile management unit contains a sub-module implemented as an LPA and uses this for profile management and activation, such a local activation module and the LPA can be denied access to profiles of the second profile type.

[0057] In other words, this means that an IPA and the corresponding remote access unit can only access profiles of the second profile type (SGP.32) and an LPA and the local activation module can only access profiles of the first profile type (SGP.22).

[0058] According to a further aspect, a device with a communication module and a chip module as described herein is specified. The chip module is assigned to the communication module and enables the communication module to access a communication service via at least one profile. The device has a profile management unit configured to receive profile data from a profile provision unit. The profile management unit is configured to receive profile type information and to forward the profile type information and the profile data such that a profile is generated and stored in the memory of the chip module. This aspect describes the chip module explained above in the context of a device with a communication module. The chip module is used in the communication module to activate one or more profiles and to enable the use of communication services via the communication module.

[0059] The device can be, for example, a smartphone or other personal device used by a human user to access communication services. However, the device can also be another networked device, such as a sensor, a medical device, a controller, an entertainment device, etc., that uses the communication module to receive and send data.

[0060] For details regarding the chip module, please refer to the corresponding description. The features and functions of the chip module are not repeated here, but nevertheless also apply to the chip module in the context of the device described here. The device is particularly designed to execute the method described herein for transmitting profiles to a chip module and for operating the chip module, or steps of this method. The steps of the aforementioned method can be implemented as functions of the device, even without these steps being explicitly repeated here.

[0061] In one embodiment, the profile management unit comprises a first sub-module and a second sub-module, wherein the first sub-module is configured to process profile type information of a first profile type and the second sub-module is configured to process profile type information of a second profile type.

[0062] The first sub-module is designed, for example, to send a message to the processor of the chip module that a profile according to SGP.22 is being transmitted, whereas the second sub-module is designed, for example, to send a message to the processor of the chip module that a profile according to SGP.32 is being transmitted.

[0063] The first sub-module is a so-called LPA (Local Profile Assistant) and the second sub-module is a so-called IPA (loT Profile Assistant).

[0064] The profile management unit implements two sub-modules and can therefore handle two different profile types. Depending on the profile type, either the first sub-module or the second sub-module addresses the chip module and sends a corresponding message when a profile of the first or second profile type is written to the chip module. Likewise, the first sub-module or the second sub-module, depending on the profile type, requests the profile data from the profile provision unit, receives the profile data, prepares it, and transfers it to the memory in the chip module. In terms of basic functionality, the first sub-module and the second sub-module operate identically, although the first sub-module is accessed via a local activation module and the second sub-module via a remote access unit.

[0065] In a further embodiment, the profile management unit is a functional module which is executed in the device or on the chip module.

[0066] Depending on the available computing power in the chip module, the profile management unit can be a software-implemented module executed by the chip module's processor. However, it is also conceivable to provide the profile management unit as a functional module in the device that is separate from the chip module.

[0067] In a further embodiment, the device comprises an activation module, wherein the activation module is a local functional module executed on the device and is configured to receive an input from a user and, based on the input, to send a message to the first submodule, thereby triggering the transmission of a profile of a first profile type to the chip card.

[0068] The activation module is, for example, an application or program that runs on the device. The activation module enables a user of the device to load a profile of the first profile type, for example, according to SGP.22, onto the chip module. The activation module outputs information that the profile to be loaded is a profile of the first profile type, so that the chip module links the profile to the appropriate profile type. When the profile is activated, the chip module and the device operate in the corresponding operating mode.

[0069] In a further embodiment, the second sub-module is designed to receive a message from a remote access unit and thereby trigger the transmission of a profile of a second profile type to the chip card.

[0070] If a profile of the second profile type, for example according to SGP.32, is to be loaded onto the chip module, this is initiated by a remote access unit by sending a corresponding command to the second sub-module of the profile management unit. The second sub-module generates and outputs a corresponding message so that the chip module is prepared for transmitting a profile of the second profile type. Furthermore, the second sub-module can retrieve the profile data from the profile provision unit and forward this profile data to the memory of the chip module. In the chip module, the corresponding data is marked so that it is linked to the profile type and the chip module and the device operate in the second operating mode when the profile of the second profile type is activated.

[0071] In summary, the method, chip module, and device described here allow multiple profiles of different profile types to be stored on a single physical chip module, which can be selectively activated. Depending on the profile type of the activated profile (or profiles), the chip module and device can be operated in a first operating mode or a second operating mode. This applies both to the transmission of the respective profiles and to the operation using a profile. This eliminates the need to use multiple physical chip modules if, for example, a communication device is to be operated with both SGP.22 and SGP.32 profiles.Profiles according to both standards can be stored on the same chip module because, before transmitting profile data, the chip module is informed of the profile type to which the profile data belongs, and the profile data and the profile type are stored together in one profile.

[0072] Reference to SGP.22 and SGP.32 is merely exemplary. It should be understood that the method, chip module, and device described here can also be operated with profiles according to other standards.

[0073] Short description of the characters

[0074] Some details are described in more detail below using the attached drawings. The illustrations are schematic and not to scale. Like reference numerals refer to like or similar elements. They show:

[0075] Fig. 1 is a schematic diagram of a chip module;

[0076] Fig. 2 is a schematic representation of the components involved in transmitting profiles to a chip module;

[0077] Fig. 3 is a schematic representation of the message exchange in the configuration of Fig. 2; Fig. 4 is a schematic representation of a chip module;

[0078] Fig. 5 is a schematic diagram of a device with a communication module and a chip module;

[0079] Fig. 6 is a schematic representation of the steps of a method for transmitting profiles to a chip module and for operating the chip module.

[0080] Detailed description

[0081] Fig. 1 shows a chip module 10. The chip module 10 contains a processor 12 and a memory 14. The memory 14 is, for example, a non-volatile memory. The processor 12 is configured to execute instructions, in particular those instructions stored in the memory 14. The chip module 10 also has a communication interface 16. Data can be written to the memory 14 via the communication interface 16.

[0082] Fig. 2 schematically shows the components involved in transmitting a profile to a chip module 10. A profile activation unit 40, for example, an application operated by a user or a remote access unit, sends a message to the profile management unit 20. The profile management unit 20, in turn, sends a message to the chip module 10 indicating that a new profile should be created.

[0083] In connection with this message, the profile management unit 20 can transmit information about the profile type of the profile to be created to the chip module 10. The profile management unit 20 can either receive the information about the profile type explicitly from the profile activation unit 40, or the profile management unit 20 can derive the profile type from the type of message exchange between the profile activation unit 40 and the profile management unit 20.

[0084] Furthermore, the profile management unit 20 queries the profile provision unit 30 for profile data. In this query, the profile management unit 20 can transmit information to the profile provision unit 30 that identifies the profile data to be provided. The profile provision unit 30 sends profile data to the profile management unit 20. The profile data can be protected against unauthorized access using cryptographic mechanisms.

[0085] The chip module 10 is placed into receive mode by the message from the profile management unit 20. After the profile management unit 20 has received the profile data from the profile provision unit 30, the profile management unit 20 can perform certain processing or preparation steps on the profile data. The profile management unit 20 then transmits the profile data to the chip module 10.

[0086] The chip module 10 links the profile type that it has received from the profile management unit 20 with the subsequently received profile data and forms a profile therefrom, which is stored in a profile storage location 50 in the memory 14.

[0087] Fig. 3 shows a schematic representation of the exchange of messages and information between the components shown in Fig. 2. The message or

[0088] The exchange of information is indicated by arrows. The arrows show which entity is sending a message and which entity is receiving the message. The illustration in Fig. 3 shows two branches for different profile types. On the left side, the process for a first profile type is shown (for example SGP.22, marked with the letter A next to the reference symbols) and on the right side, the process for a second profile type (for example SGP.32, marked with the letter B next to the reference symbols). The transmission and generation of a profile of the first profile type is triggered by an activation module 40A, which requests a profile from the first sub-module 20A of the profile management unit 20 with a message 61A. The first sub-module 20A then sends a message 62A to the chip module 10. The message 62A contains at least one piece of information about the profile type (in this case the first profile type, for example SGP.22) and instructs the chip module 10 to create a first profile 50A in the memory 14 and to assign it the first profile type. The first sub-module 20A requests profile data from the profile provision unit 30 with a message 63A. The profile provision unit 30 sends profile data to the profile management unit 20, which forwards it to the chip module 10, as indicated by the direct message path 64A. This profile data from the message 64A is assigned to the first profile 50A.

[0089] The transmission and generation of a profile of the second profile type is triggered by a remote access unit 40B, which requests a profile from the second sub-module 20B of the profile management unit 20 with a message 61B. The second sub-module 20B then sends a message 62B to the chip module 10. The message 62B contains at least one piece of information about the profile type (in this case, the second profile type, for example, SGP.32) and instructs the chip module 10 to create a second profile 50B in the memory 14 and assign the second profile type to it. The second sub-module 20B requests profile data from the profile provision unit 30 with the message 63B. The profile provision unit 30 sends profile data to the profile management unit 20, which forwards it to the chip module 10, as indicated by the direct message path 64B. This profile data from message 64B is assigned to the second profile 50B.

[0090] Chip module 10 now contains two profiles 50A, 50B of different profile types. Chip module 10 can be operated with profiles of different profile types because profile management unit 20 can handle different profile types accordingly, and the profiles are stored in memory 14 of chip module 10 in such a way that each profile type is included. Profiles 50A, 50B can be selectively activated, and chip module 10 can be operated in the corresponding operating mode.

[0091] Arrows 61A / B, 62A / B, 63A / B, and 64A / B are not necessarily intended to represent the direct path of a message exchange. Rather, these arrows indicate the entity sending a message and the entity receiving the message. However, the path a message takes can also deviate from the schematic representation in Fig. 3. Thus, the profile data that the profile provision unit 30 sends to the chip module 10 can be transmitted via different paths.

[0092] In a first variant, the profile data is sent from the profile provision unit 30 to the profile management unit 20, which receives the profile data, temporarily stores it, and prepares it for further transmission to the chip module 10, e.g., transmits it using a different protocol. In a second variant, the profile data is sent from the profile provision unit 30 directly to the chip module 10. In the second variant, the functionality of the profile management unit 20 with the first sub-module 20A and the second sub-module 20B can be implemented on the chip module 10 and essentially fulfill the same task as in the first variant. In a third variant, the profile data is sent from the profile provision unit 30 to the profile activation unit 40, from there to the profile management unit 20, and then from the profile management unit 20 to the chip module 10.In a fourth variant, the profile data is sent from the profile provision unit 30 to the profile activation unit 40 and from there to the chip module 10. In some or all of these four variants, the profile data can be transmitted between the profile provision unit 30 and the chip module 10 via an end-to-end encrypted data transmission connection.

[0093] Fig. 4 shows a chip module 10 with a memory 14 and two profiles 50A, 50B stored therein. Profile 50A schematically shows the content of a profile. Each profile contains a unique profile number 51, an indication of the profile type 52, and the profile data 53. A profile can be selected and activated using the profile number 51. The profile type 52 contains a unique and distinguishable character string assigned to a profile type. The chip module uses this character string to identify the profile type of a profile.

[0094] Even though only two profiles are shown in Fig. 4, it should be understood that the number of profiles stored in the memory 14 is limited solely by the available storage space in the memory 14.

[0095] Fig. 5 shows a schematic representation of a device 100 with a communication module 105. A chip module 10 according to one of the examples described above is assigned to the communication module 105. The chip module 10 enables the communication module 105 to register in a communication network and to receive and send data via the communication network.

[0096] The device can be a user's personal device, such as a smartphone, or a networked device without direct interaction with a user, such as an IoT device. The IoT device can perform any function, transmitting or receiving captured values ​​and then performing an action based on the received values.

[0097] The chip module and method described here allows the operating mode of the device 100 to be changed by loading a profile with a corresponding profile type onto the chip module 10. For example, the device can be operated according to SGP.22 and / or SGP.32, depending on which profile is activated.

[0098] Fig. 6 schematically shows a method 200 with steps 201 to 207. This method maps the functions that were described in connection with Figs. 1 to 5. In step 201, a transmission of a profile 50A, 50B to the chip module 10 is triggered. In step 202, profile type information is transmitted

[0099] 52 to the chip module 10, wherein the profile type information 52 is linked to the triggered transmission of the profile 50A, 50B. The profile type information 52 is linked to a property that indicates which instance—such as a remote management unit or an application—triggered the transmission of the profile and which operating mode corresponds to it.

[0100] In step 203, profile data 53 is requested from a profile provision unit 30. In step 204, the profile data 53 is transmitted 204 by the profile provision unit 30 to a profile management unit 20. In step 205, the profile data is transferred

[0101] 53 by the profile management unit 20 to the chip module 10. In step 206, the profile data 53 is linked to the profile type information 52 to generate a profile 50A, 50B. In step 207, the generated profile 50A, 50B is stored in a profile storage location 50 of the chip module 10.

[0102] Additionally, it should be noted that "comprising" or "having" does not exclude other elements or steps, and "a" or "an" does not exclude a plurality. Furthermore, it should be noted that features or steps described with reference to one of the above embodiments may also be used in combination with other features or steps of other embodiments described above. Reference signs in the claims are not to be considered as limitations.

[0103] List of reference symbols

[0104] 10 Chip module (card or electronic component)

[0105] 12 processors

[0106] 14 storage

[0107] 16 Communication interface

[0108] 20 Profile Management Unit (LPA, IPA)

[0109] 20A first sub-module (LPA)

[0110] 20B second sub-module (IPA)

[0111] 30 Profile Provisioning Unit (SM-DP+)

[0112] 40 Profile activation unit (end user, elM)

[0113] 40A activation module

[0114] 40B Remote Access Unit

[0115] 50 profile storage space

[0116] 50A first profile

[0117] 50B second profile

[0118] 51 Profile number

[0119] 52 Profile type

[0120] 53 profile data

[0121] 61 Request profile

[0122] 62 Create profile space

[0123] 63 Request profile data

[0124] 64 Submit profile data

[0125] 100 devices

[0126] 105 Communication module

[0127] 200 procedures

[0128] 201-207 Procedural steps

Claims

Patent claims 1 . Method (200) for transmitting profiles (50A, 50B) to a chip module (10) and for operating the chip module (10), the method comprising the following steps: Triggering (201) a transmission of a profile (50A, 50B) to the chip module (10); Transmitting (202) profile type information (52) to the chip module (10), wherein the profile type information (52) is linked to the triggered transmission of the profile (50A, 50B); Requesting (203) profile data (53) from a profile provision unit (30); Transmitting (204) the profile data (53) by the profile provision unit (30) to a profile management unit (20); Transferring (205) the profile data (53) by the profile management unit (20) to the chip module (10); Linking (206) the profile data (53) with the profile type information (52) to generate a profile (50A, 50B); Storing (207) the generated profile (50A, 50B) in a profile storage location (50) of the chip module (10).

2. The method (200) according to claim 1, wherein the profile type information (52) is configured to display a profile type selected from a group comprising at least two different profile types.

3. The method (200) according to claim 1 or 2, wherein the transmission of a profile (50A, 50B) to the chip module (10) is initiated (201) via a profile activation unit (40); wherein the profile activation unit (40) is an activation module (40A) of a device (100) in which the chip module (10) is contained, or a remote access unit (40B).

4. The method (200) according to any one of the preceding claims, wherein linking (206) the profile data (53) with the profile type information (52) to generate a profile (50A, 50B) includes storing the profile data (53) and the profile type information (52) together under a unique profile number (51).

5. The method (200) according to any one of the preceding claims, further comprising: Selecting a profile (50A, 50B) from the profile memory location (50) of the chip module (10); Operating the chip module (10) according to the selected profile (50A, 50B).

6. A chip module (10) for maintaining a plurality of selectively activatable profiles (50A, 50B), the chip module (10) comprising: a processor (12); a memory (14); a communication interface (16); wherein the chip module (10) is configured to receive profile type information (52) and profile data (53) via the communication interface (16); wherein the processor (12) is configured to store the profile type information (52) and the profile data (53) as a profile (50A, 50B) in the memory (14); wherein the memory (14) is configured to contain a plurality of profiles (50A, 50B), of which at least two profiles (50A, 50B) differ from one another with regard to their respective profile type information; wherein the chip module (10) is designed to be operated in an operating mode according to a profile type and the chip module (10) is operable with a first profile type in a first operating mode or with a second profile type in a second operating mode.

7. Chip module (10) according to claim 6, wherein the chip module (10) is designed such that in the first operating mode at least two profiles of the first profile type are simultaneously can be activated.

8. Chip module (10) according to claim 6 or 7, wherein the chip module (10) is designed such that the profiles of the second profile type can be managed via a remote access unit (40B).

9. Chip module (10) according to claim 8, wherein the chip module (10) is configured to deny the remote access unit (40B) access to profiles of the first profile type.

10. A device (100) comprising a communication module (105) and a chip module (10) according to any one of claims 6 to 9, wherein the chip module (10) is assigned to the communication module (105) and enables the communication module (105) to access a communication service via at least one profile; wherein the device (100) comprises a profile management unit (20) configured to receive profile data (53) from a profile provision unit (30); wherein the profile management unit (20) is configured to receive profile type information (52); wherein the profile management unit (20) is configured to forward the profile type information (52) and the profile data (53) such that a profile (50A, 50B) is generated and stored in the memory (14) of the chip module (10).

11. The device (100) according to claim 10, wherein the profile management unit (20) comprises a first sub-module (20A) and a second sub-module (20B); wherein the first sub-module (20A) is configured to process profile type information (52) of a first profile type; wherein the second sub-module (20B) is configured to process profile type information (52) of a second profile type.

12. Device (100) according to claim 11, wherein the profile management unit (20) is a functional module which is executed in the device (100) or on the chip module (10).

13. Device (100) according to claim 11 or 12, comprising an activation module (40A); wherein the activation module (40A) is a local function module executed on the device (100) and is configured to receive an input from a user and, based on the input, to send a message to the first submodule (20A), thereby triggering the transmission of a profile of a first profile type to the chip card.

14. Device (100) according to one of claims 11 to 13, wherein the second sub-module (20B) is configured to receive a message from a remote access unit (40B) and thereby trigger the transmission of a profile of a second profile type to the chip card.

Images