Giesecke+Devrient IP

Sicherheitselement, das einem Betrachter ein Wechselbild mit mindestens zwei verschiedenen Ansichten darbietet, wobei die erste Ansicht ein erstes Motiv und die zweite Ansicht ein zweites Motiv zeigt, die im gleichen oder zumindest überlappenden Flächenbereichen erscheinen. Erfindungsgemäß bestehen das erste und zweite Motiv jeweils aus einem hell erscheinenden Vordergrundbereich und einem diesen Vordergrundbereich umgebenden dunkel erscheinenden Hintergrundbereich. Unter gerichteter Beleuchtung erscheint beim Kippen des Sicherheitselements um eine erste Achse das erste Motiv nur in einem ersten Betrachtungswinkelbereich und das zweite Motiv nur in einem zweiten Betrachtungswinkelbereich, wobei die beiden Betrachtungswinkelbereiche unterschiedlich sind und sich nicht überlappen. Im ersten bzw. zweiten Betrachtungswinkelbereich kann das Flächenmuster um eine zweite Achse in einem Winkelbereich von mindestens 5° gekippt werden, ohne dass die erste bzw. zweite Ansicht verschwindet oder sich wesentlich verändert, weil die Mikrospiegel viele unterschiedliche Orientierungen oder eine gekrümmte Oberfläche haben.

Method for manufacturing an embedded universal integrated circuit card (eUICC) device, said method comprising:a) the step of conducting a data generation step, in which a so-called master key is generated and so-called In-Factory Provisioning (IFPP) management keys are derived from the master key;b) the step of transferring the master key and/or the IFPP management keys to an In-Factory Provisioning (IFPP) server;c) the step of providing a device for communication in a mobile communication network, said device comprising an eUICC;d) the step of providing the eUICC with a script, namely a so-called preScript, containing data in a protected form, wherein said data are encrypted by the IFPP management keys and are required to set the eUICC to the In-Factory mode;e) the step of providing the eUICC with a Bound Profile Package (BPP);f) the step of providing the eUICC with a script, namely a so-called postScript, in order to remove the data inserted by the preScript;g) the step of collecting at least the installation results of steps e) and f) and forwarding the collected data to the IFPP server.

There is provided a secure token wallet (1) of a token system (10) including multiple token wallets (1, 2) and a token register (9). The secure token wallet, comprising - a token exchange unit (11) configured for exchanging a token with another token wallet, wherein in an offline token exchange (100; 100d) the token exchange unit (11) receives a wallet information of the other token wallet (2) and receives a token (15) from the other token wallet (2); and - a storage unit (12) configured for storing the received token (15) and token registration data (16d) to be sent to the token register (9). The token exchange unit (11) is configured to select a first wallet information share (21d) from wallet information shares (21a-21d), wherein the wallet information (21) of the other token wallet (2) is derivable only based on two or more of the wallet information shares (21a-21d). The token registration data (16d) stored for the received token (15) comprises the first wallet information share (21d).

A method transferring a profile (P) from a source eUICC (e1) to a target eUICC (e2), characterized in that the profile transfer is effected via an intermediate eUICC (eint), to which the profile (P) is exported from the source eUICC (e1), and from which the profile (P) is exported to the target eUICC (e2).

According to the present solution a digital currency wallet (10), comprises - a storage unit (12) comprising digital currency (15) and a digital currency wallet mode (24); and - a transaction unit (11) is configured to check the stored digital currency wallet mode (24) before using the digital currency in a digital currency exchange (100, 300, 400); the digital currency wallet (10) supporting a first digital currency wallet mode, the first digital currency wallet mode being a normal digital currency wallet mode, and a second digital currency wallet mode; the transaction unit (11) - when using the digital currency (15) in a digital currency exchange (100) in the normal digital currency wallet mode - is configured to create and/or receive exchange data (16) and to store the exchange data (16) in the storage unit (12). The second digital currency wallet mode is a crisis digital currency wallet mode; wherein the digital currency wallet (10) is configured to switch from the normal digital currency wallet mode to the crisis digital currency wallet mode, if crisis switching data are received. The crisis switching data are public crisis switching data (30) and the public crisis switching data (30) will be published and/or distributed in a crisis situation.

According to the present solution a digital currency wallet (10), comprises- a storage unit (12) comprising digital currency (15) and a digital currency wallet mode (24); and- a transaction unit (11) is configured to check the stored digital currency wallet mode (24) before using the digital currency in a digital currency exchange (100, 300, 400);the digital currency wallet (10) supporting a first digital currency wallet mode, the first digital currency wallet mode being a normal digital currency wallet mode, and a second digital currency wallet mode;the transaction unit (11) - when using the digital currency (15) in a digital currency exchange (100) in the normal digital currency wallet mode - is configured to create and/or receive exchange data (16) and to store the exchange data (16) in the storage unit (12);characterized in thatthe second digital currency wallet mode is a crisis digital currency wallet mode;the digital currency wallet (10) is configured to switch from the normal digital currency wallet mode to the crisis digital currency wallet mode; andthe transaction unit (11) - when using the digital currency (15) or crisis digital currency (25) in an offline digital currency exchange (300) in the crisis digital currency wallet mode - is configured for reduced exchange data storage in order to increase a number of possible offline digital currency exchanges (300) in the crisis digital currency wallet mode.

Device for use in wireless communication, said device comprising an embedded universal integrated circuit card (eUICC) and a communication modem, wherein the eUICC comprises a first part and a second part, wherein the first part of the eUICC denoted as SGP.22 part comprises a first profile denoted as MNO1 profile and a first Issuer Security Domain Root (ISD-R) and the second part of the eUICC denoted as SGP.32 part comprises a second profile denoted as MNO2 profile and a second Issuer Security Domain Root (ISD-R), wherein at least two baseband processors for wireless communication are mounted in the communication modem and the MNO1 profile occupies a first baseband processor and the MNO2 profile occupies a second baseband processor, wherein the first ISD-R is selectable by a Local Profile Assistant (LPA) managing the MNO1 profile, and the second ISD-R is selectable by an IoT Profile Assistant (IPA) managing the MNO2 profile, wherein the device is configured in such a way that at least one of the MNO1 profile and the MNO2 profile is in the enabled state.

Method for manufacturing an embedded universal integrated circuit card (eUICC) device, comprising: providing an eUICC device comprising a memory, in which an Operating System (OS) software is stored, wherein said OS software is adapted to exhibit an enabled in-factory-mode and a disabled in-factory-mode and said OS software is incorporated with a particular flag, namely a so-called "in-factory-flag", indicating whether the eUICC device is present in an enabled in-factory-mode or in a disabled in-factory mode.

A method of establishing, in an eUICC, at least one profile, comprising: a) generate, in the eUICC, at least some of the profile data, referred to as on-board generated profile data (OP); the method characterized by the steps: c) transfer, all or part of, the on-board generated profile data (OP) from the eUICC to a verifier entity (VER); d) at the verifier entity (VER), based on the transferred on-board generated profile data (OP) and verification criteria and verification information, generate a verification result, which represents either successful verification or non-successful verification of the on-board generated profile data (OP), and send the verification result from the verifier entity (VER) to a state manager entity; e) by the state manager entity, provide an operative state of the profile in the eUICC only under a condition that the verification result represents a successful verification of the on-board generated profile data (OP), and under a condition that the verification result represents a non-successful verification of the on-board generated profile data (OP), prevent an operative state of the profile in the eUICC..

A secure wallet hosting unit (1), the secure wallet hosting unit (1) hosting monetary value token wallets (2, 3, 4) of different users and comprising: - a payment processor (20) configured for performing an exchange of an exchanged monetary value token (50) between a monetary value token wallet (2) of the secure wallet hosting unit (1) and another monetary value token wallet (7); and - a secured storage (30); wherein the hosted monetary value token wallets (2, 3, 4) respectively comprise at least one monetary value token (50) and a wallet identifier (11), wherein each monetary value token (50) comprises a secret token data element (12), and wherein the monetary value token wallets (2, 3, 4) are at least partly stored in the secured storage (30). In the present solution the secured storage (30) comprises multiple sub-units (31-34). The sub-units (31-34) respectively store a partial secret (51-54) of the secret token data element (12) of the monetary value token (50) and the sub-units (31-34) are configured to use their partial secrets (51-54) of the secret token data element (12) of the monetary value token (50) in a common digital signature creation process.