| 摘要 |
<p>In order to enable SIMs in a GSM mobile telephone system to be used for transactions with a third party, such as but not limited to commercial transactions, information required for such transactions (e.g. public-private key information) is associated with a subscriber identifier (e.g. the IMSI or a function thereof) at the time when the SIM is manufactured. The association is authenticated by means of a widely recognised Certificate, preferably issued by a Certificate Authority. Therefore, although the third party may not recognise the trust relationship between the network operator and the SIM manufacturer, the existence of the Certificate will enable the third party to carry out the transaction with confidence. For cases where the subscriber's identity (e.g. name and address, credit card details) are required (e.g. for e-commerce transactions), the Certificate may contain a reference to an entry in a secure external database. The further information relating to the subscriber is placed in the appropriate entry in the external database, and can be accessed and checked when required by the third party. In this way, such details can be provided and authenticated even though they are not known when the SIM is initially manufactured. <IMAGE></p> |
