Method, configuration program, user profile dataset, computer-readable data carrier as well as server device for configuring a user device and same

Abstract

A method, as well as a corresponding configuration program (10), a user profile dataset (P), a computer-readable data carrier (11, 12, 13), a user device (5), and a server device (3) are provided, wherein for configuring the user device (5), in particular for communication via mobile telecommunication networks, the method comprises the steps of preparing a user profile dataset (P) for a user (U) to operate a secure element (6), such as an eUICC, of the user device (5), based on diversified data (L) for personalizing the se-cure element (6); defining a dynamic data subset (A) of the user profile dataset (P) based on the diversified data (L); and selecting the static data subset (B) of the user profile dataset (P) according to the definition of the dynamic data subset (A).

Description

[0001] Method, Configuration Program, User Profile Dataset, computer-readable Data Carrier as well as Server Device for Configuring a User Device and Same

[0002] Technical Field

[0003] The present disclosure relates to the field of configuring user devices, for example, mobile devices or Internet-of-Things (loT) devices, for participating in communication networks. In particular, the present disclosure relates to a method of configuring a user device, in particular, for communication via mobile telecommimic ation networks, to a configuration program for configuring a user device, in particular for communication via mobile telecommunication networks, to user profile dataset for a secure element of a user device, such as an eUICC, for operating the secure element by a user, to a computer-readable data carrier, to a user device, in particular a mobile device or an loT device to be configured for communication via mobile telecommunication networks, and to a server device, in particular a security server providing a secure location for handling user profiles for communication via mobile telecommunication networks.

[0004] Background of the Invention

[0005] User devices, such as personal mobile devices or loT-devices, configured to employ electronic user and / or subscriber profiles for communicating on mobile networks, are known from the prior art. Such user devices are typically equipped with an electronic / embedded secure element (SE, eSE), also known as tamper resistant element (TRE), which may take the form of an UICC, eUICC, iUICC, SIM, eSIM, iSIM, or alike, configured to store one or more electronic user or subscriber profiles that may allow the user devices to connect to one or more mobile networks. A subscriber profile (e.g., an eSIM profile) may be generated by a mobile network operator (MNO) and may be stored, e.g., downloaded to a mobile user device.

[0006] The secure elements are rim by operation systems (OS) containing software and / or firmware for operating the secure elements. Those OS need to be up to date in order to provide full and reliable functionality of the secure elements. An OS Update is especially relevant with the deployment of embedded Secure Elements (eSE) in the form of eUICC or alike. As opposite of traditional pluggable SIMs that can be inserted and removed, eSEs are soldered into user devices, making it very difficult (or costly) to replace them during the life cycle of the user devices.

[0007] Consequently, there is a need for so-called firmware-upgrades and / or updates that allow to modify the content of the eSE in the event that it has to be kept up to date and / or a technical issue has to be fixed. For example, one possible reason for that firmware has to be kept up to date is if a related standard, such as a GSMA specification, relating to the user device changes or is being newly implemented. In any case, such updates can be carried out with the help of an Open Firmware Loader (OFL), or alike, which is specifically designed software component in charge of firmware upgrades including OS updates in the secure element. The need to be able to update the software for certain SE / TRE has generated many different approaches worldwide. In some solutions, there is a separate entity (ITL - Image Trusted Loader, OFL, Update Agent) which is kept in charge in the SE / TRE while the full OS, or only part of it, is changed.

[0008] The user and / or subscriber profile is commonly based on so-called diversified data relating to an intended user and installed on a secure element of the user device to be used for communication over a corresponding mobile network by the user device. A respective user or subscriber can then activate the profile by means of respective security credentials, such as profile identifiers, authentication certificates and / or security keys which can be stored on the secure element along with the OS. This commonly requires a so-called trusted party or entity that can be provided on SE / TREs and / or servers, such as eSIM download servers, from which respective SE / TRE data records can be obtained or managed, such as Subscription Manager Data Preparation platforms (SM-DP+) while fulfilling respective security requirements.

[0009] Hence, the subscriber profile, i.e. a structure and format thereof, as well as the respective diversified data, including security credentials, etc., should be adapted to the respective OS. According to the prior art, there are a number of ways of installing the subscriber profile on a SE / TRE, which may include providing the diversified and / or personalized data to the SE / TRE. In general, this can be done either via normal commands communicating with the OS or in other ways during production in factory, for example, by a so-called "Diversified Data Injection" referring to a deployment of different data for each SE / TRE in factory before issuance of the SE / TRE to a customer. For example, respective data can be provided "Over-the-air" (OTA) in that a production facility for secure elements and / or a manufacturing facility for user devices downloads the data over a network "OTA" for installation.

[0010] WO 2023 / 274583 Al, for example, relates to a method, on a data generation server, for preparing generating a profile image for download from a profile server to an eUlCC hosted in a device, for the purpose of installing a profile corresponding to the profile image in the eUlCC, the method comprising the steps: a) at a data generation server, generate, for multiple devices, multiple non-personalized profile images, each non-personalized profile image comprising at least one functionality identifier specific for the respective device, and each non-personalized profile image not comprising any individual global identifier specific of an individual eUlCC, and store the generated multiple non-personalized profile images for providing to the profile server; b) at the data generation server, generate at least one profile-data image, said profile-data image comprising at least one individual global identifier of an individual eUlCC, and store the generated at least one profile-data image (RD) for providing (GD) to the profile server.

[0011] WO 2022 / 159355 Al refers to an eSIM software for creating eSIMs running within a trusted, secure private network of a wireless communication services provider ("WSP"), receiving information entered by a user via a user interface to create or modify eSIM profile templates. Realtime alerts may notify that user-entered mismatched data precludes generation of eSIMs that will function in authenticating to the network. eSIMs created within the WSP secure private network may be shared outside of the secure private network using information entered via a Partner user interface accessed using credentials that grant limited access to modify an eSIM profile template. An eSIM profile may be generated and stored on a case-by-case basis instead of generating all of a large quantity, or batch, and then storing all of the batch. Transport of highly guarded security information, like master keys, outside of the secure private network does not occur.

[0012] WO 2019 / 120609 Al describes a method of adaptive generation of a profile package, said profile package being constructed to, when being downloaded to an eUICC and installed in the eUICC, install a profile in the eUICC. Further described is a method of adaptive generation of a code package, said code package being constructed to, when being downloaded to a device and installed in the device, install an executable code in the device. The executable code can be an operating system. Accordingly, a batch of multiple profile (or code) descriptions is provided, instead of providing a batch of ready-made profile (or code) packages. When a target eUICC / target device requests to the transfer server download of a profile (code) package, the target eUICC / target device or some other competent instance provides the transfer server with configuration information of the target eUICC I target device. The transfer server retrieves, instead of a ready-made profile (code) package (eSIM), only a profile (code) description and profile (code) data. The transfer server then, via execution of the profile description together with the profile data, generates the profile package adaptively, therein flexibly considering the configuration information on the target eUICC / target device. By this adaptive way of profile generation, profile packages matching with the real target eUICC I target device are generated. Such a matching profile package can be successfully installed in the eUICC.

[0013] US 2014 / 128050 Al proposes a method of provisioning connectivity service data for a device when the device attaches to a telecommunications network. The connectivity service data comprises information required to enable connectivity between the device and at least one further device of the network. Dynamic data relating to the device is obtained as part of one of the devices attaching to the telecommimic ations network and a previous attachment of the device to the network. The dynamic data is of a type that may change from one such attachment to another such attachment of the same device. The connectivity service data is then selected based on the obtained dynamic data. It is then arranged for the selected connectivity service data to be provisioned to the device.

[0014] Methods for configuring and upgrading / updating secure elements of user devices, involving OS updates and the provision of user profiles, including diversified and / or personalized data, as described above, may not fully satisfy all requirements regarding their deployability and availability on the one hand, as well as functional safety and security on the other hand. In particular the provision of diversified and / or personalized data, such as in "Diversified Data Injection" generally happens in factory during production and is generally blocked afterwards, such as after when the SE / TRE is issued to a customer. Many of the data diversified and / or personalized here cannot be provided via common commands after issuance for different reasons.

[0015] It is desirable that both, the OS, and the secure elements have the same origin and preferably same state of development in order to ensure functional safety and security. However, due to deployability and availability restrictions, it may not be always assured that the OS, as well as the secure elements have the same origin, corresponding versions, and / or meet certain future requirements, especially if an implementation of a new specification or standard for operating the user devices is expected to be issued during lifetime of the user device and / or respective secure element. Consequently, production may be complicated when different parties are involved in the production process, for example, if one party produces the SE / TRE as well as respective personalized software images, and another party provides the OS, while a third one may be in charge of the diversified data. In such cases, special processes are required for data provisioning within each of the facilities involved. Even though, such processes may be partially covered by in-factory personalization functionalities as known from the prior art, different provisioning methods for different factories and manufacturers may occur, which may in turn again compromise certain requirements regarding deployability and availability of SE / TRE on the one hand, as well as their functional safety and security on the other hand.

[0016] Furthermore, when the provisioning of certain pieces of data, such as diversified data, is restricted to certain phases of the production process, it places heavy restrictions on timelines and planning. This potentially complicates certain aspects of production, such as stock accumulation, especially if data requirements cannot be well defined in advance. Such restrictions in timelines and definitions may further limit the functionality, especially a spectrum of (future) capabilities, of the user device, may compromise their functional safety and security when operating user devices, or may even lead to that the devices cannot be configured properly, keeping in mind that not only the OS but also related data structures including diversified data can be affected by timeline-related restrictions and possible updating procedures.

[0017] Summary of the Invention

[0018] It may be seen as an object to provide user devices and / or secure elements which can be configured in a flexible manner according to current and / or future requirements at least until they are delivered to a user or manufacturer. In particular, it can be regarded as an objective to provide a way of handling secure elements and their operating systems and data structures in such a way that a future-proof range of functions, security and protection can be guaranteed without impairing the usability, availability and / or data integrity, in particular communication capability, of the user devices or their secure elements. These objects are at least partly achieved by the subject-matter of the independent claims.

[0019] According to an aspect, a method of configuring a user device, in particular for communication via mobile telecommunication networks, is provided, the method comprising the steps of preparing a user profile dataset for a user to operate a secure element, such as an eUICC, of the user device, based on diversified data for personalizing the secure element; defining a dynamic data subset of the user profile dataset based on the diversified data; and selecting the static data subset of the user profile dataset according to the definition of the dynamic data subset.

[0020] According to an aspect, a configuration program for configuring a user device, in particular for communication via mobile telecommunication networks, is provided, wherein the configuration program comprises instructions which, when the configuration program is executed by a server device, a user device, and / or a secure element, cause the server device, the user device, and / or the secure element to carry out a corresponding method.

[0021] According to an aspect, a user profile dataset for a secure element of a user device, such as an eUICC, for operating the secure element by a user, is provided, the user profile dataset comprising a dynamic data subset and a static data subset configured by a corresponding method and / or with a corresponding configuration program.

[0022] According to an aspect, a computer-readable data carrier having stored thereon a corresponding configuration program and / or user profile dataset is provided.

[0023] According to an aspect, a user device, in particular a mobile device or an loT device to be configured for communication via mobile telecommunication networks, is provided, wherein the user device is configured to carry out a corresponding method, comprises a corresponding configuration program, a corresponding user profile dataset, and / or a corresponding computer- readable data carrier.

[0024] According to an aspect, a server device, in particular a security server providing a secure location for handling subscriber profiles for communication via mobile telecommunication networks, is provided, wherein the server device is configured to carry out a corresponding method, comprises a corresponding configuration program, comprises a corresponding operating system dataset, and / or comprises a corresponding computer-readable data carrier.

[0025] The static data subset can determine a structure of the user profile dataset. Hence, in contrast to the prior art, a selection of a structure of the user profile dataset is not carried out according to the type of the eUICC, but based on the dynamic data subset which in turn is defined based on respective diversified data. Such diversified data can be defined and / or provided by a Connectivity Service Provider (CSP). The dynamic profile subsets can be associated with several different structures of static profile subsets having the same or at least similar user profile dataset configuration in common. Thereby, the user profile dataset can be adapted to requirements and / or demands according to a respective subscription and / or user device for which the user profile dataset is intended, in the sense of an Adaptive Profile Management (AMP).

[0026] The proposed solution allows to provide a single profile (Profile Type) that can work with different variants of products, i.e. different kinds of user devices, and that may be employed by a CSP, for example. Thereby, a variation and number of settings that trusted entities and / or CSPs have to handle for a specific product or range of products can be reduced. In splitting data content common to a certain number, such as a batch of user profiles, and the content that is unique for each single user profile enables data generation processes to be carried out in an efficient way since a single dynamic data subset can attend profile generation for several use cases.

[0027] The solution has the advantage over the prior art, that respective user profile datasets can be delivered to any manufacturing facility, including OEM / ODM vendor facilities, as well as fabrication facilities of the secure element, regardless of a change to standards and / or specifications relating to the user device between the delivery and a later point of the time of deployment of user devices and / or the secure elements to customers. At first, the diversification data allows for generating the dynamic data subsets. Then, the static data subsets are selected for generating the user profiles in a way that they can be deployed to customers for the configuration of the user devices and / or the secure elements, allowing them to adopt upcoming or following standards and / or specifications along with a respective functional spectrum, safety, and security as required for the deployment of the user devices and / or the secure elements. Further developments can be derived from the dependent claims and from the following description. Features described with reference to a user device, secure element, server device and components thereof may be implemented as method steps, or vice versa. Therefore, the description provided in the context of the user device, secure element, server device and their components apply in an analogous manner also to respective methods. In particular, features and functions of the user device, secure element, server device and their components may be implemented as method steps which in turn may be implemented as respective device features or functions.

[0028] According to a possible embodiment of the method, the dynamic data subset includes security credentials. The security credentials can be provided as a set of security credentials based on the respective definition of the dynamic data subset. This helps in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements.

[0029] According to a possible embodiment of the method, the static data subset is at least partly created based on the security credentials. For example, certain components of structures of the static data subset may be selected according to a type of or respective specifications for security credentials to be used by the respective user profile dataset. This further helps in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements.

[0030] According to a possible embodiment of the method, the diversified data comprises at least one profile identifier, at least one subscription identifier, and / or at least one security key. The at least one profile identifier can be provided in the form of a unique serial number of the user profile dataset, such as an ICCID. The at least one subscription identifier can be provided in the form of a unique subscriber number of the secure element, such as an IMSI. The at least one security key can be provided in the form of a unique individual key per profile dataset. Consequently, the dynamic data subset may be created based on the at least one profile identifier, at least one subscription identifier, and / or at least one security key. This additionally helps in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements. According to a possible embodiment of the method, the dynamic data subset is being composed according to at least one pre-defined diversification range of the diversified data. The pre-defined diversification range may relate to certain ranges of profile identifiers and / or subscription identifiers, such as different ICCID / IMSI ranges. Such ranges, i.e., a certain amount of diversified data elements, may be defined by the customer, such as a CSP assigning different v ICCID / IMSI ranges to be specific product types to determine the application and usage. Respective ICCID and / or IMSI variables can be populated into the dynamic data subsets as Dynamic Profile Data during personalization of the secure elements. In turn, the respective static data subsets selected based upon the dynamic data subsets can have structures corresponding to specific product types identified by certain ICCID / IMSI ranges, e.g., per CSP Stock Keeping Unit (SKU). This provides a highly flexible APM, thus further helping in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements.

[0031] According to a possible embodiment of the method, the step of selecting the static data subset is carried out based on a pre-defined diversification range of the diversified data. ICCID / IMSI codes may obtained by reading them from the dynamic profile datasets, and the static data subsets may be selected according related to specific ranges of the codes. Such as selection may be carried out in the course of the APM. This helps in further enhancing flexibility of the APM, thus further helping in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements.

[0032] According to a possible embodiment of the method, the step of pre-configuring a set of dynamic data subsets and / or a set of static data subsets based on at least one pre-defined diversification range of the diversified data. The pre-configured set of dynamic data subsets and / or a set of static data subsets may be stored in order to be use the dynamic data subsets and / or static data subsets contained therein as desired or required for configuring secure elements, and thus respective user devices. This further enhances availability of the of dynamic data subsets and / or a set of static data subsets.

[0033] According to a possible embodiment of the method, the method further comprises the step of obtaining the pre-defined diversification range. The pre-defined diversification range can be obtained for example in that ICCID and / or IMSI-data is provided in tables, excel-sheets, and / or are defined as increments from starting values, or alike. Respective input data may determine the pre-defined diversification ranges. This further helps in providing pre-configured sets or groups of dynamic data subsets and / or a set of stake data subsets according to respective requirements.

[0034] According to a possible embodiment of the method, the method further comprising the step of merging the dynamic data subset and the static data subset to be provided to the secure element upon receiving a data request command for enabling a provision of the profile dataset to the user device. The user device and / or a respective secure element may authenticate itself for downloading the profile data subset. A respective user profile dataset may thus be created dynamically at a time of download, adapting it to demands of the respective subscription, secure element, and / or user device. This additionally helps in assuring a future-proof functional spectrum, safety, and security, while not compromising deployability and availability of user devices and their secure elements.

[0035] According to a possible embodiment of the method, the method further comprising the step of marking a profile dataset as provided to a secure element. For example, a download order for a profile dataset may be confirmed. A respective confirmation message may be provided to a provider and / or user of the user device. This enables to systematically provide the user profile datasets upon demand. This further enhances distribution of the user profile datasets based on pre-configured sets of dynamic data subsets and / or a set of static data subsets.

[0036] The mentioned ranges can be configured such that they are device and / or standard-independent (e.g., 4G, 5G, LTE, etc.). Both, dynamic data subsets and social static data subsets can be selected according to a desired / required ICCID-IMSI-Range. The static data can be constructed according to ranges with respective directories. Dynamic data can be flagged for the respective range, so that in the process of selecting the static data subsets, static data packages are attached for the specific range. Dynamic data may have the same structure for all ranges. This allows for dynamic configuration for files has to be the same for all static files. Ranges of ICCID / IMSI can be checked by reading it from the dynamic structure. Brief Description of the Drawings

[0037] Fig. 1 is a schematic illustration of a configuration system for carrying out a method according to the present invention.

[0038] Fig. 2 is a schematic illustration of the preparation of a user profile dataset from dynamic data subsets and a static data subset according to the present invention.

[0039] Fig. 3 is a schematic illustration of the preparation of a user profile dataset from dynamic data subsets and static data subsets according to the present invention based on diversification ranges.

[0040] Fig. 4 is a schematic illustration of a process according to the present invention for adapting a user profile dataset to updated communication requirements.

[0041] Fig. 5 is a schematic illustration of a process according to the present invention for adapting a user profile dataset to updated profile structures.

[0042] Fig. 6 is a schematic illustration of a process according to the present invention for selecting a static data subset based on a respective communication standard.

[0043] Fig. 7 is a schematic illustration of a process according to the present invention for selecting static data subsets based on respective diversification range.

[0044] Detailed Description of Embodiments

[0045] The following detailed description is merely exemplary in nature and is not intended to limit the invention and uses of the invention. Furthermore, there is no intention to be bound by any theory presented in the preceding background or the following detailed description. The representations and illustrations in the drawings are schematic and not to scale. Like numerals denote like elements. A greater understanding of the described subject matter may be obtained through a review of the illustrations together with a review of the detailed description that follows.

[0046] Fig. 1 shows a schematic illustration of a configuration system 1 comprising a computing device 2, for instance, in the form of a server device 3 controlled by a trusted entity T, having a hardware security module 4 adapted to store, manage and / or provide user profile datasets P for configuring a further computing devices 2, for example, in the form of a user device 5 which may be embodied as an Internet of Things (loT) device, such as a multimedia device, camera, speaker, household appliance, measurement device, industrial installation, vehicle, vending machine, or alike, to be associated with a machine entity, and / or as a personal mobile device, such as a smartphone, smartwatch, etc., to be associated with a personal entity. For example, the server device 3 of the trusted entity T may be provided in the form of a Server for Subscription Manager Data Preparation + (SM-DP+).

[0047] In the present example, the user device 5 may be adapted for communication via a telecommunication network (not shown) by means of at least one user profile dataset P to be saved in a respective secure element 6 or tamper resistant element (TRE), such as an UICC, eUICC, iUICC, SIM, eSIM, iSIM, SE, eSE, or alike, provided in the form of a computer chip. The user profile data sets P are generated based on respective personal records contained as diversified data L in perspective data files on the computer device 2, in particular, the hardware security module 4 thereof, controlled by the trusted entity T. For storing and managing user profile data sets P on the secure elements 6, an operating system dataset O is installed on the secure element 6, for example, in a secure storage location 7 provided on the secure element 6. A further computing device 2, for instance, the form of this device 3, can be controlled by a network and / or connectivity provider N which may provide the diversified data L to the trusted entity T for creating the user proper datasets P.

[0048] The user profile datasets P comprise a dynamic data subset A and a static data subset B which may provide enable application according to a first communication standard C and / or second communication standard D a first profile structure E and a second profile structure F, respectively. The first profile structure E and the second profile structure F may relate to the first communication standard C and / or the second communication standard D, respectively. Furthermore, the dynamic data subset A and static data subset B may be associated to certain diversification ranges of the diversified data L, such as a first diversification range X, a second identification range Y, and / or a third diversification range Z. A management application 8 may be provided for managing the diversified data L and the diversification ranges X, Y, Z, for example, by the network provider N and / or trusted entity T

[0049] The network provider N, entity T and / or user U may communicate with the user device 5, in particular the secure element 6, for example, through a communication interface 9 of the the user device 5. The communication interface 9 may be provided in the form of a logical end-to- end interface enabling secure communications between the hyper security module 4, and / or the remote management application 8 and the secure element 6, which can be used to transfer data packages, such as eUICC Packages. For example, the communication interface 9 may be provided as a part of a local management application, such as a Local profile assistant (LPA), or an loT Profile Assistant (IPA), which may take the form of a Local / loT Profile Assistant (L / IPAd) provided to the user device 5, and / or a Local / loT Profile Assistant provided (L / IPAe) arranged in the secure element 6.

[0050] Furthermore, the operating system dataset O and / or the user profile P comprises security credentials H, which may include a profile identifier I, authentication certificates J and / or security keys K. The security credentials H may comprise any kind of credentials defined by e.g., the GSMA, or alike. The security keys K may comprise any kind of cryptographic code or key element which may be adapted to interact with the user devices 5, the secure elements 6, and / or the server device 3 of the trusted entity T as an issuer of any part of the operating system dataset O and / or any component thereof. The authentication certificates J may be any kind of electronic certificate, for example, that can be issued by the trusted entity T, for authenticating an origin of the user devices 5, the secure elements 6, the secure storage location 7, and / or the operating system dataset O. Transmission lines (not shown) may be provided for handling and / or transferring the operating system dataset O and / or user profile dataset P may comprise any kind of wired and / or wireless transmission chains, including the Internet (for transmissions "Over-The-Air") as well as other physical and / or non-physical data carriers, which can be configured and secured as desired and required. Furthermore, a request signal Q or activation command may be provided which may be allowed to be executed in order to obtain an activation signal R or for confirmation message when activating the operating system dataset O and / or user profile dataset P. In any of the embodiments of the configuration system 1 as described herein, in particular the computing devices 2, can be configured to execute a computer program in the form of a configuration program 10. A computer-readable data carrier 11 can have stored thereon the configuration program 10 and may take the form of a computer-readable medium 12 and / or data carrier signal 13. When carrying out the configuration program 10, the configuration system 1 and any components thereof communicate as specified in the security program 10. Parameters associated with and / or underlying the security system 1, any of the components thereof and / or any steps S carried out thereby, can be defined in and / or by the configuration program 10.

[0051] In a first step SI, the network provider N and / or secure entity T, for example by using the respective server device 3, hardware security module for and / or management application 8 and / or may provide can be provided with, respectively, the diversified data L, possibly as diversification ranges X, Y, Z, thereof. In a second step S2, the dynamic data subset A and / or static data subset B may be selected and / or created. In a third step S3, a set G or group of dynamic data subsets A and / or of static data subsets B may be prepared and / or created.

[0052] In a fourth step S4 an order may be placed, for example, based on specifying diversified data L which may be intended to create at least one specific user profile dataset P for a specific user U or group of users U. The order can be placed by the network provider N and can be sent to the trusted entity T and may comprise an indication of the communication standard C, D for which the user profile dataset P of the group of profiles is intended to be used. Based on the order, in the fifth step S5, the user profile P may be created, for example, based on the first profile structure E and / or second profile structure F which can be determined based on the respective communication standard C, D. In the course of creating the user profiles P, they may be provided with respective security credentials H. In a sixth step S6, execution and / or preparation of the order may be confirmed by means of a respective confirmation message M that can be sent from the trusted entity T to the network provider N.

[0053] In the seventh step S7, the user U or group of users U that are intended to be provided with user profile data sets P based on the respective order, can stand request command Q to the trusted entity T, for example, in that the operating system O of the secure element 6 contacts the server device 3 of the trusted entity T through the communication interface 9 of the user device 5. Such a request command Q can involve respective security credentials H, such as the profile identifier I, authentication certificate J, and / or security key K with which the respective user device 5 and / or the secret element 6 thereof, may authenticate itself. In an eighth step S8, the respective user profile P or group of profiles may be prepared for download, for example, by merging the respective dynamic data subset A with the corresponding static data subset B. In a ninth step S9, the user U may download the profile P from the same device 3 of the trusted entity T, for example, in that the profile P is downloaded via the communication interface 9 onto the secure element 6 in order to be stored in the secure storage location 7.

[0054] In a tenth step S10, the user U may activate the user profile dataset P, for example, by means of respective security credentials H, such as the profile identifier I, authentication certificate J, and / or security key K. In an eleventh step Sil, an activation signal R, such as a registration signal or activation confirmation message, may be sent from the user device 5 to the trusted entity T. The activation signal R can be triggered by the user U through activation or can be automatically sent, for example, by the secure element 6 through the communication interface 9 to the server device 3 of the trusted entity T. In the twelfth step, another confirmation message M may be sent to the network provider N, for example, by the trusted entity T, in order to confirm activation of the user profile dataset P and thus trigger a possible finalization of the process of providing the user profile dataset P. Such a finalization of the process may involve marking the respective diversified data L of the user U or group of users U as processed. At least in part, such a marking may already be performed in step S6 when the order for the respective user profile dataset P or sets G or groups thereof is being confirmed.

[0055] Fig. 2 shows a schematic illustration of the preparation of a user profile dataset P from dynamic data subsets A and a static data subset B according to the present invention. Upon receipt of the order or a respective request for preparation of at least one user profile dataset P in the fourth step S4, for example, at the server device 3 of the trusted entity T, a corresponding set G or group of dynamic data subsets A and at least one static data subset B may be created and / or prepared in respective substeps S5a and S5b of the fifth step S5, respectively. Upon request from the user device 5 and / or the secure element 6, for example, by means of the request command Q in the seventh step S7, the corresponding user data profile P may be prepared for download in the server device S3, for example, an SMDP+, by merging the corresponding dynamic data subset A with the static data subset B and thus providing user profile dataset P. Fig. 3 shows a schematic illustration of the preparation of a user profile dataset from dynamic data subsets A and static data subsets B according to the present invention based on diversification ranges X, Y, Z. Upon receipt of the order or a respective request for preparation of at least one user profile dataset P in the fourth step S4, for example, at the server device 3 of the trusted entity T, a corresponding set G or group of dynamic data subsets A and a corresponding set G or group static data subsets B may be created and / or prepared a respective substeps S5a and S5b of the fifth step S5 , respectively, based on the specified diversification ranges X, Y, Z. Upon request from the user device 5 and / or the secure element 6, for example, by means of the request command Q and the seventh step S7, which may indicate a specific diversification range X, Y, Z, in the present example, the first diversification range X, the corresponding user data profile P may be prepared for download in the server device S3, for example, an SMDP+, by merging the corresponding dynamic data subset A configured for the first diversification range X with the corresponding static data subset B configured for the first diversification range X and thus providing a corresponding user profile dataset P configured for and belonging to the first diversification range X. In the sixth and I or twelfth step S61 S12, a confirmation message M may be provided that the specific user dataset P belonging to the first diversification range X has been provided, thus enabling to mark or flag the underlying diversified data L in the management application 8.

[0056] Fig. 4 shows a schematic illustration of a process according to the present invention for adapting a user profile dataset P to updated communication requirements. For example, in a thirteenth step S13, the change or update of a user profile dataset P from a first communication standard C to a second communication standard D may be performed, for example, from 4G to 5G, respectively. In other to achieve such a change or update, the user device 5 configured for the second communication standard D may re-download the user profile dataset P. For preparation of the re-download, while the dynamic data subset A underlying the user provide dataset P may remain essentially the same, the static data subset B may be replaced for example, by replacing stating that a subset B(C) configured for use according to the first communication standard C with a static data subset B(D) configured for use according to the second communication standard D. Such a change or update may be performed over-the-air (OTA). Fig. 5 shows a schematic illustration of a process according to the present invention for adapting a user profile dataset P to updated profile structures. For example, in a fourteenth step S14, the change or update of a user profile dataset P from a previous version V to a following version W may be performed, for example, from a previous version V of a communication standard to a following version W of a communication standard, respectively. In other to achieve such a change or update, the user device 5 may re-download the user profile dataset P. For preparation of the re-download, while the dynamic data subset A underlying the user provide dataset P may remain essentially the same, the static data subset B may be replaced for example, by replacing stating that a subset B(V) with a structure configured for use according to the previous version V with a static data subset B(W) with the structure configured for use according to the following version W. Such a change or update may be performed over-the-air (OTA).

[0057] Different parameters from the request command Q, which may involve a function for authenticating the user device 5 and / or secure element 6, such as "Authenticate Client" can be used for evaluating Selection Rules, enabling to establish decisions that are based on a combination of one or more filters, e.g., Profile Version Supported, EID value, TAC value, eUICC Capabilities (as defined in SGP.22), Device Capabilities (as defined in SGP.22), and / or ICCID / IMSI Ranges (new) as diversification ranges X, Y, Z. Corresponding decision rules can be defined and created uniquely per customer, such as a specific network provider N and / or CSP. Any updated and / or changed user profile data sets P can be retained for re-downloads.

[0058] Fig. 6 shows a schematic illustration of a process according to the present invention for selecting a static data subset B based on a respective communication standard C, D. For example, in the fifth step S5, it may be decided according to respective an evaluation rule, whether a static data subset B for a user profile dataset P configured to be used according to a first communication standard C and / or second communication standard D, such as 4G and 5G, respectively, are supposed to be provided. Such an evaluation can be based on whether there is a support for a certain profile version V, W, such as profileVersion 2.3.1, support for eUICC capabilities, such as "getldentity" and "profile-b-p256", and / or support for Device capabilities, such as "nrEpcSupportedRelease", "nr5gcSupportedRelease", and "eutran5gcSupportedRelease".

[0059] Fig. 7 shows a schematic illustration of a process according to the present invention for selecting static data subsets based on respective diversification range X, Y, Z, for example corresponding ICCID / IMSI ranges. Such decisions may be done and respective substeps S5x, S5y, S5z of the fifth step S5. In the present example, in a first diversification range X substep S5x it may be checked whether a dynamic data subset A(X) from the first diversification range X is at hand. If that is true, a static data subset B(X) configured for the first diversification range X can be selected and merged with the dynamic data subset A(X) to provide a user profile dataset P(X) configured for the first diversification range X. If that is not true, then in a second diversification range Y substep S5y it may be checked whether a dynamic data subset A(Y) from the second diversification range Y is at hand. If that is true, a static data subset B(Y) configured for the second diversification range Y can be selected and merged with the dynamic data subset A(Y) to provide a user profile dataset P(Y) configured for the second diversification range Y. If that is not true, then in a third diversification range Z substep S5z it may be checked whether a dynamic data subset A(Z) from the third diversification range Z is at hand. If that is true, a static data subset B(Z) configured for the third diversification range Z can be selected and merged with the dynamic data subset A(Z) to provide a user profile dataset P(Z) configured for the third diversification range Z. If that is not true, then the procedure may end.

[0060] Any dynamics profile subset A as described herein can comprise personalized identifiers (IC- CID, IMSI, etc.), personalized keys (network keys, SIM OTA keys) and / or any personalized (= distinctive value per eSIM profile , "per ICCID", e.g., PIN codes) content of the eSIM profile. Corresponding Dynamic Profile Data can always be bound to a certain profile type, to allow ICCID addressing. Which files that are included in the dynamic profile subset A can be defined by the customer but, for example, as a part of the input / order file. Any static profile subsets B may provide a static part of the eSIM profile definition, containing files and applets. In an AirOn360 APM context, each static profile structure may be identified by a Profile Structure ID and cus- tomerMaterial-Id, as there might be multiple static profile structures per Profile Type. In "classic" AirOn inventory, the customerMaterial-Id may be associated with a Profile Type. A corresponding adaptive profile type may consist of one or more static profile structures and set of dynamic profile data.

[0061] While at least one exemplary embodiment has been presented in the foregoing detailed description, it should be appreciated that a vast number of variations exist. It should also be appreciated that the exemplary embodiment or exemplary embodiments are only examples, and are not intended to limit the scope, applicability, or configuration of the invention in any way. Rather, the foregoing detailed description will provide those skilled in the art with a convenient road map for implementing an exemplary embodiment of the invention. It will be understood that various changes may be made in the function and arrangement of elements described in an exemplary embodiment without departing from the scope of the claims.

[0062] Additionally, it is noted that "comprising" or "including" does not exclude any other elements or steps and "a" or "an" does not exclude a multitude or plurality. It is further noted that features or steps which are described with reference to one of the above exemplary embodiments may also be used in combination with other features or steps of other exemplary embodiments described above. Reference signs in the claims are not to be construed as a limitation.

[0063] Reference Signs

[0064] 1 configuration system R activation signal

[0065] 2 computing device 35 S step

[0066] 3 server device T trusted entity

[0067] 4 hardware security module U user

[0068] 5 user device V previous version

[0069] 6 secure element W following version

[0070] 7 secure storage location 40 X first diversification range

[0071] 8 management application Y second diversification range

[0072] 9 communication interface Z third diversification range

[0073] 10 configuration program

[0074] 11 computer-readable data carrier 51 provide diversified data

[0075] 12 computer-readable medium 45 52 select / create data subsets

[0076] 13 data carrier signal 53 provide sets

[0077] 54 provide / receive order

[0078] A dynamic data subset 55 prepare profile components

[0079] B static data subset S5a prepare dynamic part

[0080] C first communication standard 50 S5b prepare static part

[0081] D second communication standard S5x check first range

[0082] E first profile structure S5y check second range

[0083] F second profile structure S5z check that range

[0084] G set / group 56 confirm order

[0085] H security credentials 55 57 request profile

[0086] I profile identifier 58 prepare profile download

[0087] J authentication certificate 59 download profile

[0088] K security key 510 activate profile

[0089] L diversified data 511 notify activation

[0090] M confirmation message 60 512 confirm activation / finalise provision

[0091] N network I connectivity provider 513 change / update standard

[0092] O operating system dataset 514 change / update version

[0093] P user profile dataset

[0094] Q request command

Claims

Claims1. Method of configuring a user device (5), in particular for communication via mobile telecommunication networks, the method comprising the steps of preparing a user profile dataset (P) for a user (U) to operate a secure element (6), such as an eUICC, of the user device (5), based on diversified data (L) for personalizing the secure element (6); defining a dynamic data subset (A) of the user profile dataset (P) based on the diversified data (L); and selecting the static data subset (B) of the user profile dataset (P) according to the definition of the dynamic data subset (A).

2. Method according to claim 1, wherein the dynamic data subset (A) includes security credentials (H).

3. Method according to claim 2, wherein the static data subset (B) is at least partly created based on the security credentials (H).

4. Method according to at least one of claims 1 to 3, wherein the diversified data (L) comprises at least one profile identifier (I), at least one subscription identifier (J), and / or at least one security key (K).

5. Method according to at least one of claims 1 to 4, wherein the dynamic data subset (A) is being composed according to at least one pre-defined diversification range (X, Y, Z) of the diversified data (L).

6. The method according to at least one of claims 1 to 5, wherein the step of selecting the static data subset (B) is carried out based on a pre-defined diversification range (X, Y, Z) of the diversified data (L).

7. Method according to claim at least one of claims 1 to 6, further comprising the step of pre-configuring a set of dynamic data subsets (A) and / or a set of static data subsets (B)based on at least one pre-defined diversification range (X, Y, Z) of the diversified data (L).

8. Method according to at least one of claim 5 to 7 , further comprising the step of obtaining the pre-defined diversification range (X, Y, Z).

9. Method according to at least one of claim 1 to 8, further comprising the step of merging the dynamic data subset (A) and the static data subset (B) to be provided to the secure element (6) upon receiving a data request command (R) for enabling a provision of the profile dataset (P) to the user device (5).

10. Method according to at least one of claim 1 to 9, further comprising the step of marking a profile dataset (P) as provided to a secure element (6).

11. Configuration program (10) for configuring a user device (5), in particular for communication via mobile telecommimic ation networks, wherein the configuration program (10) comprises instructions which, when the configuration program (10) is executed by a server device (4), a user device (5), and / or a secure element (6), cause the server device (4), the user device (5), and / or the secure element (6) to carry out a method of at least one of claims 1 to 10.

12. User profile dataset (P) for a secure element (6) of a user device (5), such as an eUICC, for operating the secure element (6) by a user (U), the user profile dataset (P) comprising a dynamic data subset (A) and a static data subset (B) configured by a method according to at least one of claims 1 to 10 and / or with a configuration program (10) according to claim 11.

13. Computer-readable data carrier (11, 12, 13) having stored thereon a configuration program (10) according to claim 11 and / or a user profile dataset (P) according to claim 12.

14. User device (3), in particular a mobile device or an loT device to be configured for communication via mobile telecommunication networks by a user (U), wherein the user device (3) is configured to carry out a method according to at least one of claims 1 to 10,comprises a configuration program (10) according to claim 11, a user profile dataset (P) according to claim 12 and / or a computer-readable data carrier (11, 12, 13) according to claim 13.

15. Server device (4), in particular a security server providing a secure location for handling user profiles (P) for communication via mobile telecommimic ation networks, wherein the server device (4) is configured to carry out a method according to at least one of claims 1 to 10, comprises a configuration program (10) according to claim 11, a user profile dataset (P) according to claim 12 and / or a computer-readable data carrier (11, 12, 13) according to claim 13.

Images