Secure Element Profile Loading Suspension and Resumption

Solution Overview

Problem

Existing methods for loading communication profiles into eUICC-type secure elements integrated into communication devices are time-consuming, leading to inefficiencies and productivity losses in manufacturing.

Innovation Solution

A method involving a secure element and a profile management unit, where the profile is initially loaded into the communication device's memory, and then cryptographically linked to the secure element by generating session keys and sending a token, allowing for suspension and later resumption of the loading process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If communication profiles are loaded into secure elements during factory production, then devices can access network services immediately after manufacture, but the loading process takes excessive time and reduces manufacturing productivity

Engineering Contradiction:

Improvemanufacturing productivityVSAvoidprofile loading time

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

The profile loading process is divided into two distinct phases: a first phase performed during factory production where only essential profile elements are loaded, and a second phase performed after device deployment where remaining elements are loaded. This segmentation allows the device to be partially functional at factory exit while completing profile loading after deployment, thereby reducing manufacturing time and improving productivity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Essential profile elements are pre-loaded into secure elements during factory production before the device reaches the customer. This preliminary action ensures that devices can immediately access network services after manufacture, while the remaining profile loading is deferred to a later stage, thus resolving the contradiction between immediate functionality and complete profile installation.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If profile loading is completed during factory production, then devices are fully functional upon delivery, but it creates a bottleneck in the manufacturing process

Engineering Contradiction:

Improvedevice functionalityVSAvoidmanufacturing efficiency

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The profile loading process is divided into two distinct phases: a first phase performed during factory production where only essential profile elements are loaded, and a second phase performed after device deployment where remaining elements are loaded. This segmentation allows the device to be partially functional at factory exit while completing profile loading after deployment, thereby reducing manufacturing time and improving productivity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The profile loading process transitions from a static factory-based process to a dynamic two-stage process that adapts to different operational contexts. The first phase handles factory production requirements, while the second phase handles post-deployment functionality, allowing the system to be flexible and adaptive across different operational scenarios.

Inventive Principle:

Principle #15Dynamics

3Quantity of substance

If all profile elements are loaded into secure elements during factory production, then devices have complete profile data, but the time-consuming decryption and installation operations reduce manufacturing efficiency

Engineering Contradiction:

Improveprofile data completenessVSAvoidmanufacturing efficiency

Core Design Contradiction:

Quantity of substanceVSProductivity

Solution Approach 1:

The profile elements are segmented into two groups: essential elements loaded during factory production and remaining elements loaded after deployment. This segmentation allows complete profile data to be available eventually while avoiding the time-consuming decryption and installation of all elements during the critical factory production phase, thus maintaining manufacturing efficiency.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Essential profile elements are pre-loaded into secure elements during factory production before the device reaches the customer. This preliminary action ensures that devices can immediately access network services after manufacture, while the remaining profile loading is deferred to a later stage, thus resolving the contradiction between immediate functionality and complete profile installation.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP4561138A1Methods for loading a communication profile into a secure element, and associated secure element, profile management unit, and communication device

Publication Date: 2025.05.28 IDEMIA FRANCE SAS

Figure 1
Figure 2A~2C
Figure 3A

AI summary

The present invention relates to methods for loading a communication profile into a secure element (SE), as well as an associated secure element (SE), a profile management unit (LPA), and a communication device (APP). More particularly, the present invention relates to a method implemented by a secure element (SE) equipping a communication device (APP), the method comprising, for a communication profile, a first phase of loading the profile into the secure element (SE) comprising: - following receipt of a loading suspension command from the profile management unit, a suspension of the loading of the profile comprising: - a recording of the generated session keys (S-ENC, S-MAC); and - a sending, to the profile management unit (LPA), of a token (PTK) signed by the secure element (SE).