中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

147 records (took 0.035 seconds)

    Profile installation based on privilege level
    131.
    发明授权
    Profile installation based on privilege level 有权

    公开(公告)号：US11070355B2

    公开(公告)日：2021-07-20

    申请号：US16024025

    申请日：2018-06-29

    Applicant: Apple Inc.

    Inventor： Li Li ,  Dennis D. Conway

    IPC: H04L29/06 ,  H04L9/00 ,  H04L9/14 ,  H04L9/32 ,  H04W12/04 ,  H04L9/08 ,  H04W12/08 ,  H04W12/30 ,  H04W12/37 ,  H04W12/069 ,  H04W12/10 ,  H04W12/40

    Abstract: A secure element (SE) determines a profile type and a privilege level. The privilege level, in some embodiments, is associated with a key used successfully by the SE to verify a cryptographic signature. In some embodiments, the privilege level is indicated by a privilege value read from an extension field of a root certificate. The SE determines, in some instances, whether to accept or reject a profile installation after comparing the profile type with the determined privilege level. Thus, a test server is allowed to provision a test profile to an SE even if the test server does not have commercial certification required of an electronic subscriber identity module (eSIM) server that provisions operational profiles. Because the test profile does not include credentials useful for network access, the lower-security test server does not create a risk of improper access to the network of a mobile network operator (MNO).

    Techniques for dynamically supporting different authentication algorithms
    132.
    发明授权
    Techniques for dynamically supporting different authentication algorithms 有权

    公开(公告)号：US10785645B2

    公开(公告)日：2020-09-22

    申请号：US14868257

    申请日：2015-09-28

    Applicant: Apple Inc.

    Inventor： Li Li ,  Jerrold Von Hauck ,  Arun G. Mathias

    IPC: H04W12/06 ,  H04W12/04 ,  H04L29/06 ,  H04W12/08 ,  H04W4/60 ,  H04W4/70 ,  H04W12/00 ,  H04W8/20

    Abstract: Disclosed herein are different techniques for enabling a mobile device to dynamically support different authentication algorithms. A first technique involves configuring an eUICC included in the mobile device to implement various authentication algorithms that are utilized by MNOs (e.g., MNOs with which the mobile device can interact). Specifically, this technique involves the eUICC storing executable code for each of the various authentication algorithms. According to this technique, the eUICC is configured to manage at least one eSIM, where the eSIM includes (i) an identifier that corresponds to one of the various authentication algorithms implemented by the eUICC, and (ii) authentication parameters that are compatible with the authentication algorithm. A second technique involves configuring the eUICC to interface with an eSIM to extract (i) executable code for an authentication algorithm used by an MNO that corresponds to the eSIM, and (ii) authentication parameters that are compatible with the authentication algorithm.

    EUICC secure timing and certificate revocation
    133.
    发明授权
    EUICC secure timing and certificate revocation 有权

    公开(公告)号：US10764066B2

    公开(公告)日：2020-09-01

    申请号：US15598220

    申请日：2017-05-17

    Applicant: Apple Inc.

    Inventor： Li Li ,  Arun G. Mathias

    IPC: H04L9/32 ,  H04L29/06 ,  H04W12/06

    Abstract: Secure reception of a certificate revocation list (CRL) is determined. In some embodiments, a device initiates a CRL update by sending a message with a timestamp to an embedded universal integrated circuit card (eUICC). The eUICC generates a session identifier, nonce, or random number and builds a payload including an internal time value based on a server time, and an internal time value based on a past message received from the device. The eUICC cryptographically signs over the payload and sends it to the device. The device obtains a CRL from a host server, checks the CRL, and, if the CRL passes the device check, sends it to the eUICC along with a second device timestamp and the nonce. The eUICC then performs checks based on the timestamps, the nonce, the CRL and the internal time values to determine whether the CRL has been securely received.

    Pre-personalization of eSIMs to support large-scale eSIM delivery
    134.
    发明授权
    Pre-personalization of eSIMs to support large-scale eSIM delivery 有权

    公开(公告)号：US10554487B2

    公开(公告)日：2020-02-04

    申请号：US15157332

    申请日：2016-05-17

    Applicant: Apple Inc.

    Inventor： Li Li ,  Yousuf H. Vaid ,  Christopher B. Sharp ,  Arun G. Mathias ,  David T. Haggerty ,  Jerrold Von Hauck

    IPC: H04L29/06 ,  H04L12/24 ,  H04B1/3816 ,  H04B1/3827

    Abstract: Representative embodiments described herein set forth techniques for optimizing large-scale deliveries of electronic Subscriber Identity Modules (eSIMs) to mobile devices. Specifically, instead of generating and assigning eSIMs when mobile devices are being activated—which can require significant processing overhead—eSIMs are pre-generated with a basic set of information, and are later-assigned to the mobile devices when they are activated. This can provide considerable benefits over conventional approaches that involve generating and assigning eSIMs during mobile device activation, especially when new mobile devices (e.g., smartphones, tablets, etc.) are being launched and a large number of eSIM assignment requests are to be fulfilled in an efficient manner.

    Apparatus and methods for electronic subscriber identity module (eSIM) installation and interoperability
    135.
    发明授权
    Apparatus and methods for electronic subscriber identity module (eSIM) installation and interoperability 有权

    公开(公告)号：US10462654B2

    公开(公告)日：2019-10-29

    申请号：US16102189

    申请日：2018-08-13

    Applicant: Apple Inc.

    Inventor： Xiangying Yang ,  Li Li ,  Arun G. Mathias

    IPC: H04L29/06 ,  H04W12/02 ,  H04W4/50 ,  H04W12/00

    Abstract: Methods and apparatus for managing processing of electronic Subscriber Identity Modules (eSIM) data at a mobile device are disclosed. An eSIM management entity of an embedded Universal Integrated Circuit Card (eUICC) in the mobile device obtains an encrypted eSIM package, decrypts the eSIM package to obtain eSIM contents formatted generically and not specifically tailored to requirements of the eUICC. In some embodiments, the eSIM contents are formatted based on an abstract syntax notation (ASN) distinguished encoding rules (DER) format. The eSIM management entity parses the formatted eSIM contents to retrieve individual eSIM components and installs each eSIM component for the eSIM in an eSIM security domain on the eUICC. In some embodiments, the eSIM management entity acts as a local, personalization server to provide local Trusted Service Manager (TSM) server functionality for eSIM installation that transforms “generically formatted” eSIM contents into eSIM components that match specific requirements of the eUICC.

    Electronic subscriber identity module (eSIM) installation and testing
    137.
    发明授权
    Electronic subscriber identity module (eSIM) installation and testing 有权

    公开(公告)号：US10367810B2

    公开(公告)日：2019-07-30

    申请号：US15720454

    申请日：2017-09-29

    Applicant: Apple Inc.

    Inventor： Li Li ,  Arun G. Mathias

    IPC: H04W8/20 ,  H04W12/06 ,  H04W12/08 ,  H04B1/3816 ,  H04W12/04 ,  G06F21/57 ,  H04L29/06 ,  H04W12/10 ,  G06F21/72

    Abstract: Provisioning of an electronic subscriber identity module (eSIM) to an embedded universal integrated circuit card (eUICC) is observed to acquire a captured payload. The captured payload is then used in replay test sessions. In a live test session, test equipment can be used to monitor the communication between an eSIM server and the eUICC in order to capture the payload transmitted from the eSIM server. In the live test session, the eUICC can be in a debug mode that persists an ability to generate the same keys. In the replay test sessions, the payload captured can be reused and the eUICC can regenerate the same keys to decrypt an encrypted eSIM in the payload. After an installation attempt, the eUICC can provide notifications to the test equipment. The eUICC can be stress-tested using methods described herein without consuming a large number of eSIMs from an eSIM server inventory.

    System and method for policy control functions management mechanism
    140.
    发明授权
    System and method for policy control functions management mechanism 有权

    公开(公告)号：US09763081B2

    公开(公告)日：2017-09-12

    申请号：US14549088

    申请日：2014-11-20

    Applicant: APPLE INC.

    Inventor： Mehdi Ziat ,  Christopher Sharp ,  Kevin P. McLaughlin ,  Li Li ,  Jerrold V. Hauck ,  Yousuf H. Vaid

    IPC: H04W4/00 ,  H04W8/22 ,  G06F9/445 ,  G06F9/50

    CPC classification number: H04W8/22 ,  G06F9/44505 ,  G06F9/5011

    Abstract: Systems and methods for validating and applying modifications to a policy control function (PCF) of a station. The methods include generating a PCF package including a modification to a PCF, and determining whether the PCF package is to be transmitted to the station by a first or second entity. The methods further include when the PCF package is to be transmitted by the first entity, including a first signature of the first entity in a deliverer field of the PCF package, and when the PCF package is to be transmitted by the second entity, including the first signature in an owner field and a second signature of the second entity in the deliverer field. The methods further include receiving the PCF package from the first or second entity, determining whether the PCF package is valid, and applying the modification to the PCF when it is determined the PCF package is valid.

Patent Agency Ranking