Giesecke+Devrient IP

Proposed is a method of configuring a secure element (10) with an operational profile (B) using a provisioning unit (22). The provisioning unit (22) is provided with profile data (D) of an operational profile (B). I a memory (16) of the secure element (10) a generic installation key (I), a temporal network contact credentials (T) and a unique identifier of the secure element (E) re installed. A base profile is installed (A) in the secure element (10) using the generic installation key (I). A confirmation information (T) confirming installation of the base profile (A) including the unique identifier (E) is received. A temporal connection between secure element (10) and profile provisioning unit (22) using the temporal contact credentials (T) is established. Profile data (D) corresponding to the unique identifier (E) are provided to the secure element using (10) the temporal connection. The profile data (D) are integrated into the base profile (A) to create an operational profile (B).

Process for migration of an Internet of Things (IoT) device, namely an eUICC device, from a first eSIM IoT Remote Manager (eIM1) to a second eSIM IoT Remote Manager (eIM2), said process comprising: a) the step of providing an eUICC device, in which the configuration data of a first eSIM IoT Remote Manager (eIM1) are added; and providing an IoT Profile Assistant (IPA); b) the step of providing the eUICC device with a specific key, said key being usable for carrying out a protected operation with the capability to delete the configuration data of the first eSIM IoT Remote Manager (eIM1) within the eUICC by an eligible entity; c) the step of triggering the IoT Profile Assistant (IPA) to perform a protected eUICC Memory Reset operation, thereby deleting the configuration data of the first eSIM IoT Remote Manager (eIM1) within the eUICC and optionally creating a new, second eSIM IoT Remote Manager (eIM2) within the eUICC.

System comprising an accessed device and a key device, wherein said accessed device is a computer device comprising a Trusted Platform Module (TPM) and said key device is an em-bedded universal integrated circuit card (eUICC) device comprising a secure element (SE), wherein said system further comprises a communication means for enabling said accessed device to communicate with said key device by exchanging an encrypted code in response to an access request during a power-up sequence, wherein said encrypted code is generated by encrypting executable code on the basis of a secret key.

Sicherheitselement, das einem Betrachter ein Wechselbild mit mindestens zwei verschiedenen Ansichten darbietet, wobei die erste Ansicht ein erstes Motiv und die zweite Ansicht ein zweites Motiv zeigt, die im gleichen oder zumindest überlappenden Flächenbereichen erscheinen. Erfindungsgemäß bestehen das erste und zweite Motiv jeweils aus einem hell erscheinenden Vordergrundbereich und einem diesen Vordergrundbereich umgebenden dunkel erscheinenden Hintergrundbereich. Unter gerichteter Beleuchtung erscheint beim Kippen des Sicherheitselements um eine erste Achse das erste Motiv nur in einem ersten Betrachtungswinkelbereich und das zweite Motiv nur in einem zweiten Betrachtungswinkelbereich, wobei die beiden Betrachtungswinkelbereiche unterschiedlich sind und sich nicht überlappen. Im ersten bzw. zweiten Betrachtungswinkelbereich kann das Flächenmuster um eine zweite Achse in einem Winkelbereich von mindestens 5° gekippt werden, ohne dass die erste bzw. zweite Ansicht verschwindet oder sich wesentlich verändert, weil die Mikrospiegel viele unterschiedliche Orientierungen oder eine gekrümmte Oberfläche haben.

Method for manufacturing an embedded universal integrated circuit card (eUICC) device, said method comprising:a) the step of conducting a data generation step, in which a so-called master key is generated and so-called In-Factory Provisioning (IFPP) management keys are derived from the master key;b) the step of transferring the master key and/or the IFPP management keys to an In-Factory Provisioning (IFPP) server;c) the step of providing a device for communication in a mobile communication network, said device comprising an eUICC;d) the step of providing the eUICC with a script, namely a so-called preScript, containing data in a protected form, wherein said data are encrypted by the IFPP management keys and are required to set the eUICC to the In-Factory mode;e) the step of providing the eUICC with a Bound Profile Package (BPP);f) the step of providing the eUICC with a script, namely a so-called postScript, in order to remove the data inserted by the preScript;g) the step of collecting at least the installation results of steps e) and f) and forwarding the collected data to the IFPP server.

There is provided a secure token wallet (1) of a token system (10) including multiple token wallets (1, 2) and a token register (9). The secure token wallet, comprising - a token exchange unit (11) configured for exchanging a token with another token wallet, wherein in an offline token exchange (100; 100d) the token exchange unit (11) receives a wallet information of the other token wallet (2) and receives a token (15) from the other token wallet (2); and - a storage unit (12) configured for storing the received token (15) and token registration data (16d) to be sent to the token register (9). The token exchange unit (11) is configured to select a first wallet information share (21d) from wallet information shares (21a-21d), wherein the wallet information (21) of the other token wallet (2) is derivable only based on two or more of the wallet information shares (21a-21d). The token registration data (16d) stored for the received token (15) comprises the first wallet information share (21d).

A method transferring a profile (P) from a source eUICC (e1) to a target eUICC (e2), characterized in that the profile transfer is effected via an intermediate eUICC (eint), to which the profile (P) is exported from the source eUICC (e1), and from which the profile (P) is exported to the target eUICC (e2).

According to the present solution a digital currency wallet (10), comprises - a storage unit (12) comprising digital currency (15) and a digital currency wallet mode (24); and - a transaction unit (11) is configured to check the stored digital currency wallet mode (24) before using the digital currency in a digital currency exchange (100, 300, 400); the digital currency wallet (10) supporting a first digital currency wallet mode, the first digital currency wallet mode being a normal digital currency wallet mode, and a second digital currency wallet mode; the transaction unit (11) - when using the digital currency (15) in a digital currency exchange (100) in the normal digital currency wallet mode - is configured to create and/or receive exchange data (16) and to store the exchange data (16) in the storage unit (12). The second digital currency wallet mode is a crisis digital currency wallet mode; wherein the digital currency wallet (10) is configured to switch from the normal digital currency wallet mode to the crisis digital currency wallet mode, if crisis switching data are received. The crisis switching data are public crisis switching data (30) and the public crisis switching data (30) will be published and/or distributed in a crisis situation.

According to the present solution a digital currency wallet (10), comprises- a storage unit (12) comprising digital currency (15) and a digital currency wallet mode (24); and- a transaction unit (11) is configured to check the stored digital currency wallet mode (24) before using the digital currency in a digital currency exchange (100, 300, 400);the digital currency wallet (10) supporting a first digital currency wallet mode, the first digital currency wallet mode being a normal digital currency wallet mode, and a second digital currency wallet mode;the transaction unit (11) - when using the digital currency (15) in a digital currency exchange (100) in the normal digital currency wallet mode - is configured to create and/or receive exchange data (16) and to store the exchange data (16) in the storage unit (12);characterized in thatthe second digital currency wallet mode is a crisis digital currency wallet mode;the digital currency wallet (10) is configured to switch from the normal digital currency wallet mode to the crisis digital currency wallet mode; andthe transaction unit (11) - when using the digital currency (15) or crisis digital currency (25) in an offline digital currency exchange (300) in the crisis digital currency wallet mode - is configured for reduced exchange data storage in order to increase a number of possible offline digital currency exchanges (300) in the crisis digital currency wallet mode.

Device for use in wireless communication, said device comprising an embedded universal integrated circuit card (eUICC) and a communication modem, wherein the eUICC comprises a first part and a second part, wherein the first part of the eUICC denoted as SGP.22 part comprises a first profile denoted as MNO1 profile and a first Issuer Security Domain Root (ISD-R) and the second part of the eUICC denoted as SGP.32 part comprises a second profile denoted as MNO2 profile and a second Issuer Security Domain Root (ISD-R), wherein at least two baseband processors for wireless communication are mounted in the communication modem and the MNO1 profile occupies a first baseband processor and the MNO2 profile occupies a second baseband processor, wherein the first ISD-R is selectable by a Local Profile Assistant (LPA) managing the MNO1 profile, and the second ISD-R is selectable by an IoT Profile Assistant (IPA) managing the MNO2 profile, wherein the device is configured in such a way that at least one of the MNO1 profile and the MNO2 profile is in the enabled state.