Procedure for the preparation and performing of a post issuance process on a secure element

摘要

The invention relates to a method for enabling post issuance operation on a secure element connectable to a communication device. The method allows an SE controlling party to perform remotely operations such as creation of new security domains for an external party, loading, and installation of applications of an external party and management functions including personalization and activation of applications loaded on the SE for an external party. The method includes the steps of:
collecting data stored on the SE suitable for identification of the SE and data for contacting the SE controlling party;creating an initial data packet from the collected data,sending the data packet to a party which can be the external party, an agent of the external party, the SE controlling party, an agent of the SE controlling party.;The invention further relates to a communication device and a software application for implementing the method.

主权项

1. A method for enabling a post issuance operation on a secure element (SE) controlled by a SE controlling party, the method comprising:
performing the following in a communication device comprising a secure element (SE), wherein the SE has at least one security domain and is already personalized, the security domain requiring access parameters to perform at least one operation on the security domain, the method comprising:
receiving by the communication device a request to enable the post issuance operation on the SE, the post issuance operation comprising an operation performed on the SE after personalization of the SE;querying the SE by the communication device for data suitable for the identification of the SE and data for contacting an SE controlling party, the data existing in a determined data group of the SE;collecting from the SE by the communication device the data suitable for the identification of the SE and the data for contacting the SE controlling party;creating by the communication device a data packet containing at least the collected data suitable for the identification of the SE and the collected data for contacting the SE controlling party; andelectronically sending by the communication device the data packet via a remote communication channel to a party selected from a group consisting of an external party and an agent of the external party.