Abstract: A method for geolocating a terminal of a wireless communication system from measurements of a parameter representative of a radio signal exchanged between the terminal and base stations of the communication system. The method uses fixed base stations and a mobile base station which is displaced in a determined search area. During a predefined search period, the terminal emits several radio signals to the fixed base stations and the mobile base station. A precise geographical position can then be determined, on the one hand, from the measurements carried out during the search period for the different base stations, and on the other hand, from the geographical positions of the fixed base stations and from the geographical positions of the mobile base station at the different times of emission of the radio signals by the terminal.

Abstract: A terminal provided with an eUICC card having an incomplete provisioning profile. At least one missing datum essential to the establishment of a communication between the terminal and an access network of a first wireless communication system is not defined by default in the provisioning profile. In order to remotely configure the eUICC card, prior communication is established between the terminal and an access network of a second wireless communication system to transmit the missing data to complete the provisioning profile.

Abstract: A method for transmitting, by a transmitter, a packet to a receiver of a communication system. The packet including data encrypted according to a symmetric key encryption protocol by determining the value of a generation information and determining an encryption key according to the value of the generation information. The data to be included in the encrypted packet to be transmitted is encrypted according to the encryption key. A truncated information is calculated based on the generation information. A verification code for the encrypted packet is calculated according to the encrypted data and the first portion of the generation information. The encrypted packet to be transmitted is formed according to the truncated information, the verification code and the encrypted data.

Abstract: Notification devices and methods for configuring a secure element incorporated into a terminal connected to a network are disclosed. The devices and methods may perform steps implemented by an application of the secure element, such as obtaining at least one item of information that can be used to configure the secure element stored in a memory of the terminal outside the secure element, sending the item of information and an identifier of the secure element to a configuration system, and obtaining configuration data originating from the configuration system, the configuration data being supplied to the secure element depending on the item of information.

Abstract: A terminal provided with an eUICC card having an incomplete provisioning profile. At least one missing datum essential to the establishment of a communication between the terminal and an access network of a first wireless communication system is not defined by default in the provisioning profile. In order to remotely configure the eUICC card, prior communication is established between the terminal and an access network of a second wireless communication system to transmit the missing data to complete the provisioning profile.

Abstract: Authentication device and method for a system that includes a subscriber device and a companion device. The authentication method includes the subscriber device delivering to the companion device a temporary profile and an authentication response signed by the subscriber device for sending to a server, installing the temporary profile to configure a second wireless communication interface of the companion device, and requesting a second authentication from the server via the second interface by using the delivered authentication response so as to authorize the second interface when the companion device and the subscriber device are not in communication with each other via the first communication interface. The device and method may be used by systems that include a subscriber device (e.g., a mobile telephone) and a companion device, e.g. a connected watch or object.

Abstract: Described are methods and systems for provisioning a subscriber profile in a secure module, such as a SIM card. The methods and systems may perform operations that may include receiving a request for provisioning a subscriber profile accompanied by parameters of a mobile terminal associated with the subscriber profile, and configuring the terminal when notification is received of the profile being activated, the notification coming from the secure module. Variations of the systems and methods are applicable to terminals including a secure module for hosting a subscriber profile to a mobile communications network.

Abstract: A method for transmitting, by a transmitter, a packet to a receiver of a communication system. The packet including data encrypted according to a symmetric key encryption protocol by determining the value of a generation information and determining an encryption key according to the value of the generation information. The data to be included in the encrypted packet to be transmitted is encrypted according to the encryption key. A truncated information is calculated based on the generation information. A verification code for the encrypted packet is calculated according to the encrypted data and the first portion of the generation information. The encrypted packet to be transmitted is formed according to the truncated information, the verification code and the encrypted data.

Abstract: The disclosure relates to the notification of an SM-SR subscription management server by an eUICC card or an eSE element. The card includes, in local memory, at least one short number (or “short code”), and more generally an address identifier, unique to a mobile-phone operator, wherein the number is associated with an operator subscriber profile within the secure card. The card is configured to retrieve, from the local memory, a short code associated with a subscriber profile in use to send, using the retrieved short code, a card status notification to the SM-SR server. In the absence of a short code, the card uses a unique international telephone number as the recipient of the notification.

Abstract: Devices, systems, and methods related to an embedded subscriber identity module (eUICC) suitable for co-operating with a communication device (T) are described. The module may include a communication profile (P1) configured to enable the embedded subscriber identity module to communicate with a telecommunications network (R) when the profile (P1) is active; a reception module (PSM) for receiving, from a remote server (SM-SR) of the mobile telephone network (R), a communication profile management request; and a profile manager module (MGP). The profile manager module may be configured such as, on receiving the management request, to determine whether a rule from a predefined set of at least one rule (RL) is applicable; and if so, to execute an action specified by the applicable rule in association with a communication profile of the embedded subscriber identity module.

Abstract: Methods and device for personalizing a secure element (e.g., a eUICC) may include or implement operations for receiving a personalization request issued by an operator to download a personalized profile in compliance with a model into the secure element, and the request may include personalization data, an identifier of the secure element and the identifier of the model.

Abstract: Authentication device and method for a system that includes a subscriber device and a companion device. The authentication method includes the subscriber device delivering to the companion device a temporary profile and an authentication response signed by the subscriber device for sending to a server, installing the temporary profile to configure a second wireless communication interface of the companion device, and requesting a second authentication from the server via the second interface by using the delivered authentication response so as to authorize the second interface when the companion device and the subscriber device are not in communication with each other via the first communication interface. The device and method may be used by systems that include a subscriber device (e.g., a mobile telephone) and a companion device, e.g. a connected watch or object.

Abstract: A method that may be performed by a profile management server for managing the profiles of a secure entity, such as an embedded universal integrated circuit card. The method may include sending a message to the secure entity in order to modify the active profile of the entity; initializing and starting a timer; and in the event that the server does not receive a message indicating which profile is active in the secure entity before the expiry of a predetermined duration after the starting of the timer, then starting an audit procedure for determining which profile is actually active in the secure entity.

Abstract: The disclosure relates to the notification of an SM-SR subscription management server by an eUICC card or an eSE element. The card includes, in local memory, at least one short number (or “short code”), and more generally an address identifier, unique to a mobile-phone operator, wherein the number is associated with an operator subscriber profile within the secure card. The card is configured to retrieve, from the local memory, a short code associated with a subscriber profile in use to send, using the retrieved short code, a card status notification to the SM-SR server. In the absence of a short code, the card uses a unique international telephone number as the recipient of the notification.

Abstract: Devices, systems, and methods related to an embedded subscriber identity module (eUICC) suitable for co-operating with a communication device (T) are described. The module may include a communication profile (P1) configured to enable the embedded subscriber identity module to communicate with a telecommunications network (R) when the profile (P1) is active; a reception module (PSM) for receiving, from a remote server (SM-SR) of the mobile telephone network (R), a communication profile management request; and a profile manager module (MGP). The profile manager module may be configured such as, on receiving the management request, to determine whether a rule from a predefined set of at least one rule (RL) is applicable; and if so, to execute an action specified by the applicable rule in association with a communication profile of the embedded subscriber identity module.

Abstract: A method that may be performed by a profile management server for managing the profiles of a secure entity, such as an embedded universal integrated circuit card. The method may include sending a message to the secure entity in order to modify the active profile of the entity; initializing and starting a timer; and in the event that the server does not receive a message indicating which profile is active in the secure entity before the expiry of a predetermined duration after the starting of the timer, then starting an audit procedure for determining which profile is actually active in the secure entity.

Abstract: A method and system for managing an embedded secure element (50) accessible as a slave of the resident applications (App1-3) of a host device of the eSE. The eSE includes an issuer security domain (51), ISD, with which cryptographic keys are associated. The method includes, in an application agent embedded in an OS of the host device: sending (420) the ISD a random value; receiving (435) a cryptogram corresponding to the random value encrypted using a key associated with the ISD; sending (440, 450) the random value and the cryptogram to a first extern entity entered in the application agent. The method includes: sending (455, 4555) the random value and the cryptogram from the first entity to a second external entity; verifying (4556) that the second entity possesses keys associated with the ISD from the cryptogram and the random value.

Abstract: Notification devices and methods for configuring a secure element incorporated into a terminal connected to a network are disclosed. The devices and methods may perform steps implemented by an application of the secure element, such as obtaining at least one item of information that can be used to configure the secure element stored in a memory of the terminal outside the secure element, sending the item of information and an identifier of the secure element to a configuration system, and obtaining configuration data originating from the configuration system, the configuration data being supplied to the secure element depending on the item of information.

Abstract: Methods and device for personalizing a secure element (e.g., a eUICC) may include or implement operations for receiving a personalization request issued by an operator to download a personalized profile in compliance with a model into the secure element, and the request may include personalization data, an identifier of the secure element and the identifier of the model.

Abstract: Described are methods and systems for provisioning a subscriber profile in a secure module, such as a SIM card. The methods and systems may perform operations that may include receiving a request for provisioning a subscriber profile accompanied by parameters of a mobile terminal associated with the subscriber profile, and configuring the terminal when notification is received of the profile being activated, the notification coming from the secure module. Variations of the systems and methods are applicable to terminals including a secure module for hosting a subscriber profile to a mobile communications network.