EP3243340A1 - Subscriber identification module and application executable on a subscriber identification module - Google Patents

Abstract

The invention relates to a subscriber identification module (10) for use in a mobile device (20). The subscriber identification module (10) has a processor (12), a memory (14), and a location determining device (16). The location determining device (16) is configured to determine the location of the subscriber identification module (10). The subscriber identification module (10) provides a plurality of functions.

Description

 Subscriber identity module and on a subscriber identity module executable application

Technical area

The present invention relates to a subscriber identity module for use in a mobile device, such as a mobile device

Mobile phone, a wearable and / or a tablet PC and an executable on a subscriber identity module application.

State of the art

From EP 1 106 025 a method for providing intelligent network support to a mobile subscriber is known. According to the method, a mobile device, in particular a mobile telephone, sends a signaling message from the SIM card to an intermediate unit that interacts with a Home Mobile Land Mobile Network (HPLMN) service control device. In response to the message, a message is sent back to the SIM card, the message containing INAP (Intelligent Network Application Part), CORBA, RMI, HTTP or XML messages.

Furthermore, it is known in the art that SIM cards in mobile

Units are embedded (eUICC, embedded Universal Integrated Circuit Card) or delivered as separate units in different form factors IFF to 4FF.

It is also known that SIM cards are delivered to different countries, and in different countries - possibly roaming - Conditions, ie a modified fee structure - can be used for the handling of telephone calls, data transfers, etc.

Depending on the country in which SIM cards are delivered, there are different requirements for the functions that a SIM card may provide. These requirements are on the one hand by the local mobile network operator (Mobile Network Operator;

MNOs) and by government agencies. For example, the functions may be different

Security requirement profiles of encryption or

Crypto algorithms act.

DESCRIPTION OF THE INVENTION The invention is based on the object of providing a subscriber identity module for use in a mobile device as well as a subscriber identity module

Participant identity module to provide executable application that solve the known problems of the prior art and are also suitable for the security and adaptability of

Optimize subscriber identity modules in different markets.

The object is achieved by the subject matter of the independent claims. Preferred embodiments will be apparent from the

Dependent claims.

The invention is based on the idea that the

Subscriber identity module and / or an application on the

Subscriber identity module taking into account a determined Site can define a scope of functionality of the subscriber identity module.

Accordingly, a subscriber identity module for use in a mobile device includes a processor, a memory in communication with the processor

 A location determining device adapted to determine a location of the subscriber identity module, wherein the

Subscriber identity module is adapted to a variety of

Provide functions available, wherein the subscriber identity module, depending on the determined location at least a part of the functions limited and / or not available.

With the subscriber identity module according to the invention, it is particularly advantageous possible identical or largely identical

 Produce subscriber identity modules and depending on the location where the subscriber identity modules are used or to which the subscriber identity modules are delivered, the

To provide functionality or the functions provided by the subscriber identity module in full, limited or not at all. Consequently, it is possible

Full featured subscriber identity modules, i. with all the features to ship around the world, and the subscriber identity module will then determine which features it can provide based on where it's being used. There is

Provisions that do not allow a manufacturer certain

To provide functions of a subscriber identity module in certain countries. With the invention Subscriber identity module can be particularly advantageous account of this circumstance.

According to one embodiment, the memory is in a volatile

Memory area (Random Access Memory; RAM) and a non-volatile memory area (Read Only Memory; ROM, EEPROM). This ensures an efficient memory architecture.

According to a further particularly preferred embodiment, the location-determining device is set up to determine the location on the basis of a mobile radio cell in which the subscriber identity module is registered or with which the subscriber identity module (which is arranged in a mobile device) is connected. Taking advantage of the mobile radio cell, in which the subscriber identity module is booked, it is particularly advantageous possible to quickly find the location of the

Determine subscriber identity module.

Alternatively, the location determining device for determining the

Site capable of using a position detection module, wherein the position detection module can be integrated into the mobile device and / or the subscriber identity module. In which

 Position acquisition module may be a GPS

Position acquisition module and / or a GLONASS

Position capture module act. By means of such

Position capture modules, it is particularly fast and accurate, the

Position of a subscriber identity module.

According to another embodiment, the location comprises at least one piece of information in which country the subscriber identity module is located located. In this way it is very quickly possible to find out where the subscriber identity module is located, in particular in which country the subscriber identity module is located. The subscriber identity module may be a SIM card, a UICC and / or an embedded Universal Integrated Circuit Card (eUICC).

The options available depending on the location determined are stored in a whitelist in the memory of the subscriber identity module according to a preferred embodiment. The whitelist can be used to determine which functions are allowed in the country. These functions are then made available and the remaining functions are advantageously available only to a limited extent.

Alternatively, according to another embodiment, the functions not available at the determined location may be stored in a blacklist. Consequently, the subscriber identity module advantageously releases all functions except for the functions stored in the blacklist.

According to a particularly preferred embodiment, the function is a functional scope of a

 Encryption algorithm. In other words, the function determines the extent to which encryption takes place, that is, how much

is encrypted. The reason for this is that in some countries only low strength encryption is allowed. Thus, depending on the location of the subscriber identity module, the correct encryption level can be selected. According to another embodiment, the

Subscriber identity module depending on the

Mobile network operator (ΜΝΌ) to which the subscriber identity module is connected, at least part of the

Functions restricted or not available. Accordingly, it is particularly advantageously possible to determine the scope of functions not only in dependence on the location at which the subscriber identity module is located, but also in dependence on the

Mobile network operator to which the subscriber identity module is connected.

Furthermore, the advantages of the invention also become apparent in an application executable on a subscriber identity module, which is set up to restrict or not make available at least part of the functions depending on the determined location, the application being adapted to determine the location of the subscriber

Subscriber identity module using a

Determine location detection device.

The benefits detailed above also apply to the application executable on the subscriber identity module. Furthermore, all the features described above with reference to the

Participant identity module were listed, also with advantage in

Combined with the brought on the subscriber identity module application to be brought. Short description of the drawing

Fig. 1 shows a schematic view of a mobile device in which a subscriber identity module is arranged, wherein the

Subscriber identity module additionally shown in Fig. 1 is enlarged.

Detailed description of preferred embodiments of the invention

An inventive subscriber identity module and an application executable on a subscriber identity module according to the invention are described below with reference to the embodiment shown by way of example in FIG. 1.

Fig. 1 shows a mobile device 20 which is provided with a display device 22. The mobile device 20 may be, for example, a mobile phone, a tablet PC, a wearable or the like. In the example shown, the mobile device 20 is a mobile phone provided with the display device 22. In the

Display device 22 may be a capacitive display device on which a user can make inputs by touching the surface of display device 22.

The mobile device 20 is, as shown in Fig. 1, with a

Subscriber identity module 10 provided. The subscriber identity module 10 may be fixed in the mobile device in the form of an integrated one

 Subscriber Identity Module 10 be installed or as exchangeable

Subscriber identity module 10 may be installed in the mobile device 20. An integrated subscriber identity module is also known as eUICC (embedded Universal Integrated Circuit Card). The changeable Subscriber identity module 10 is also under the term SIM card

(Subscriber Identity Module) known.

The subscriber identity module 10 known in the prior art serves to identify the user to the mobile network operator. In the subscriber identity module, a processor 12 and a memory 14 are formed. The memory 14 can be divided into a volatile and a non-volatile memory,

In particular, the memory may be divided into a ROM area, a RAM area, and an EEPROM area. The operating system is usually stored in the ROM area. There can also for

different mobile network operators are stored different properties. In the memory 14 is also the IMSI (International

 Mobile Subscriber Identity; International Mobile Subscriber Identity). This serves the mobile network operator for the unique identification of the user. For more details about

Subscriber identity module 10 as well as the IMSI is referred to the prior art, which is hereby explicitly included.

Depending on the country to which the subscriber identity module is delivered, there are regulations or restrictions that govern which functions the subscriber identity module 10 may provide in the corresponding country. The following functions are given by way of example: cryptographic algorithms or

Key lengths for cryptographic algorithms, licenses for

Applications / data or accesses to these (for example, media files,

Database access), access to applications, for example Payment / banking applications). Accordingly, according to a restriction, for example, the length of a key for a

be shortened cryptographic algorithm. Alternatively, access to certain applications may be restricted or prohibited depending on the location.

This poses a problem for the manufacturers of subscriber identity modules 10, depending on the countries in which

Subscriber identity module is to be delivered, a variety of

Subscriber identity modules 10 must be kept available depending on the permissible range of functions in the respective countries.

Here, the present invention attacks. The subscriber identity module 10 according to the invention additionally has a

Location Detection Facility 16. The location detection facility 16 is configured to control the location, i. determine the geographic position of the subscriber identity module 10. The

Location-determining device 16 can determine the location, for example, by sending it from a mobile radio cell into which the

Subscriber identity module 10 is logged in, i. with that

 Subscriber identity module 10 communicates, location data queried and determined based on this location data, in which country the mobile device 20 and thus the subscriber identity module 10 are located. Alternatively, the location-determining device 16 can

Use position detection module (not shown). The

Position detection module may be integrated in the mobile device 20 and / or in the subscriber identity module 10. The

Position detection module is adapted to position data, in particular GPS and / or GLON ASS data / information too

to process. Based on this data or information, a location of the subscriber identity module 10 can be determined and thus the country in which the subscriber identity module is located.

The location determination device 16 may have a device that can detect an incorrect location information. In this way, it is possible to detect manipulations on the subscriber identity module 10 or the location-determining device 16.

Depending on the country in which the subscriber identity module 10 is located, for example, certain functions of the

Subscriber identity module should not be allowed. The

Subscriber identity module 10, depending on the determined location, in particular the determined country, at least a part of the functions restricted or not available.

For example, some countries require that they use a particularly strong encryption or a particularly weak encryption of the data transmitted with the subscriber identity module 10. Alternatively, licenses for an application might only work with limited functionality depending on the location, or the application might not be available at all. For example, a payment application or a banking application can only work in certain countries. In this way, it is advantageously possible to allow access to a payment application and / or banking application only in "secure" countries, whereby it is possible to store in the memory 14 of the subscriber identity module which functions in Whitelist or which functions are not allowed in a country (blacklist).

The range of functions permitted in a certain country can also be determined by the mobile network operator (MNO) with whom the subscriber identity module 10 has established a connection. In

Depending on the mobile network or the mobile network operator to which the subscriber identity module 10 is connected, at least part of the above-mentioned functions can be restricted or not made available.

According to the invention, it is further provided that an application which is stored in the memory 14 of the subscriber identity module 10, the

Checking at which location the

Subscriber identity module 10 is located. Depending on the location, the application is able to restrict some of the functions of the subscriber identity module or not provide it.

Claims

Patent claims A subscriber identity module (10) for use in a mobile device (20), comprising: a processor (12),  a memory (14),  a location determination device (16) which is set up to determine a location of the subscriber identity module, wherein the subscriber identity module is adapted to provide a plurality of functions ¹ , characterized in that the subscriber identity module, depending on the determined location, restricts or does not provide at least some of the functions, where the function is the scope of a Encryption algorithm is and / or wherein the function is access to data and / or Applications is. 2. subscriber identity module according to claim 1, characterized characterized in that the memory comprises a volatile memory area and a nonvolatile memory area. 3. Subscriber identity module according to claim 1 or 2, characterized in that the location-determining device is adapted to determine the location based on a mobile radio cell, in which the subscriber identity module is checked. 4. Subscriber identity module according to one of the preceding Claims, characterized in that the Site detection device for determining the location configured to use a position detection module, wherein the position detection module can be integrated into the mobile device and / or the subscriber identity module. 5. subscriber identity module according to claim 4, characterized characterized in that the position detection module is arranged to process GPS and / or GLONASS information. 6. Subscriber identity module according to one of the preceding Claims, characterized in that the location comprises at least one piece of information in which country the subscriber identity module is located. 7. Subscriber identity module according to one of the preceding Claims, characterized in that it is in the Subscriber identity module is a SIM card, a UICC and / or an eUICC. 8. Subscriber identity module according to one of the preceding Claims, characterized in that the functions available in dependence on the determined location are stored in a whitelist. 9. Subscriber identity module according to one of the preceding Claims, characterized in that depending on the determined location not available features are stored in a blacklist. 10. Subscriber identity module according to one of the preceding Claims, characterized in that the function is the key length of a cryptographic algorithm, in particular a signature and / or hash algorithm. 11. Subscriber identity module according to one of the preceding Claims, characterized in that the subscriber identity module in dependence on the mobile network operator (MNO) to which the subscriber identity module is connected, at least part of Functions restricted or not available. 12. Application executable on a subscriber identity module, which is set up depending on the determined location at least a part of the functions restricted or not To provide the location of the subscriber identity module using a Determine location detection device.