Abstract: A method of providing a secure element of a mobile terminal with a subscription profile in which the mobile terminal is configured to communicate with a cellular communications network and the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the mobile terminal and/or the secure element. The method comprises the steps of: assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the subscription profile over-the-air to the secure element. A corresponding secure element, mobile terminal and subscription management backend system involves features of the method.

Abstract: A portable data carrier with a card body in which an integrated circuit is embedded may include a token, a token holder, and one or more fixing portions. The token may comprise the integrated circuit. The token holder may include a first end and a second end, the first end configured to flexibly extend from the card body, and the second end configured to be releasably attached to the token, and a separation line along a length of the token holder between the token holder and the token, the separation line configured to allow the token to be detached from the token holder. The one or more fixing portions may be configured to releasably hold the token and the token holder to corresponding portions of the card body surrounding the token and the token holder.

Abstract: A method for updating a firmware of a security module in equipment comprises a device and the security module arranged such that data can be exchanged between the security module and the device. A first message is received by the security module and indicates the availability of a firmware update provided by a provider and wherein the first message contains a transaction number individual for the security module. A second message is transferred from the equipment to the provider and the firmware update is requested from the provider. The second message contains the individual transaction number to enable the provider to conduct an identification of the security module. The firmware update is transferred from the provider to the equipment based on the individual transaction number, and is stored in a memory of the device. The firmware is unpacked by a boot loader of the equipment or the security module.

Abstract: A portable data carrier (1) comprises an executable training module (8) which provides in a memory (4, 5) of the data carrier (1) a reference model (10; M) for the biometric recognition of a user of the data carrier (1) by a recognition module (9), whereby a biometric comparison vector (16) which lies within the acceptance range (A) of the reference model (10; M) is accepted by the recognition module (9) as coming from the user. In so doing, the training module (8) defines the reference model (10; M) by model nodes (P, P0-P4) which are formed from biometric reference vectors (17; N) in each case coming from the user, whereby a new model node (P, P0-P4) is added to the reference model (10; M) when the associated reference vector (17; N) lies outside the acceptance range (A) of the reference model (10; M).

Abstract: A portable data carrier (1) comprises an executable training module (8) which provides in a memory (4, 5) of the data carrier (1) a reference model (10; M) for the biometric recognition of a user of the data carrier (1) by a recognition module (9), whereby a biometric comparison vector (16) which lies within the acceptance range (A) of the reference model (10; M) is accepted by the recognition module (9) as coming from the user. In so doing, the training module (8) defines the reference model (10; M) by model nodes (P, P0-P4) which are formed from biometric reference vectors (17; N) in each case coming from the user, whereby a new model node (P, P0-P4) is added to the reference model (10; M) when the associated reference vector (17; N) lies outside the acceptance range (A) of the reference model (10; M).