Enabling users to select between secure service providers using a central trusted service manager

摘要

Systems and methods are described herein for enabling users to select from available secure service providers (each having a Trusted Service Manager (TSM)) for provisioning applications and services on a secure element installed on a device of the user. The device includes a service provider selector (SPS) module that provides a user interface for selecting the secure service provider. In one embodiment, the SPS communicates with a key escrow service that maintains cryptographic keys for the secure element and distributes the keys to the user selected secure service provider. The key escrow service also revokes the keys from deselected secure service providers. In another embodiment, the SPS communicates with a central TSM that provisions applications and service on behalf of the user selected secure service provider. The central TSM serves as a proxy between the secure service providers and the secure element.