SIM Cards & SIM Applications

Georgian FinichiuOrange ROMANIA – Multimedia Services

Agenda…

What is SIM card ?What is SIM Applet ? SIM ToolKit appsOrange SIM Cards Applets – Functionalities and Servers Architecture Personal Space Portal ConclusionQ & A

What is SIM Card ? SIM – Subscriber Identity Module

Makes it possible to securely store the IMSI (international Mobile Subscriber Identity) and authentification key (Ki) used to identify a subscriber.Operating System governing communication between SIM card and mobile terminal - Native and Java Card OS.

Native SIMs are based on proprietary, vendor specific software;Java Card SIMs are based on standards, particularly Java Card which is a subset of the Java programming language specifically embedded devices.

What is SIM Applet ?Applet - small Java-based applications - state machine which processes incoming command requests and responds by sending data to the interface device;Applets run securely on smart cards and similar small memory devices;Main features of this technology: portability and security.

Portability: allowing the same Java Card applet to run on different smart cards, from different suppliers, different OS’s.

Security:- Data encapsulation - Java Card applications are executed in an isolated environment, separate from operating system and hardware;- Applet Firewall - Different applets separated from each other by an applet firewall which restricts and checks access of data elements of one applet to another;- Cryptography – encryption algorithms (DES, 3DES).

SIM Application Toolkit STK - Standard of the GSM system which enables the SIM to initiate actions which can be used for various value added services;

Set of commands programmed into the SIM card which define how the SIM should interact directly with the outside world;

Initiates commands independently of the handset and of the network;

SIM also gives commands to the handset, such as display menu and ask for user input;

STK enables higher levels of security through identity verification and encryption;

Orange SIM Cards Applications

SIM Agenda Backup

Group Text Messages

SIM Wallet

Personal Space Portal

Orange SIM Cards ApplicationsSIM Agenda Backup

Simple and secure method of saving the phone numbers from your SIM card on the Orange server under confidentiality conditions.Can be used both on your mobile and on the webPossibility to recover the agenda(change sim card, sim card loose, etc).Service activation from the Orange mobile STK menu. Text message confirmation received–access to service . Each access - receive another password in a text message on your Orange phone. OTP mechanism – One time password - password valid for one session only.

SIM Agenda Backup Application Architecture

Application server which delivers the main functionality of the service;

Web interface which delivers an easy way to manage user - delete, edit, add new contacts; Restore function available;

STK application which allows mobile management (save and restore) of the contacts; Periodicity function available.

SIM Agenda Backup NW Architecture

Orange SIM Cards ApplicationsGroup Text Messages

Send same text message to all SIM contacts, in the same time;

Either from Orange STK menu or from web, without additional costs

Standard tariff for a text message sent to each of recipients;

User can create personal lists with all or only one part of the SIM contacts - up to 2000 SIM contacts/distribution list;

Security - the access to Group Text Message web service is restricted by a one time password (OTP mechanism);

GMS accessible on web, regardless of the type of SIM card;

User need an OTP every time when access the service;Receive the password in a text message on Orange phone. The password is valid for one session only;

After 30 minutes of inactivity and a new password will be required.

GMS application architectureApplication server which delivers the main functionality of the service;

Web interface which delivers an easy way to manage user contacts and distribution lists information;STK application which allows mobile management of distribution lists – up to 2000 SIM contacts/list;

STK commands available: add a contact with more than one number – available for 3G SIM cards;

Database model which integrates a common agenda of contacts with Sim Agenda Backup and also contains more info about user’s contacts – email, office number, mobile number.

Group Text Message architecture

Orange SIM Cards ApplicationsSIM Wallet

SimToolKit application to keep personal/private data;

Personal data: bank accounts, credit card info, passwords, agenda, personal notes, SIM passwords;

Data can be send to another SIM Wallet users directly from STK menu;

Application installed on 2G and 3G Postpay Orange profiles;

Server application used to backup and restore at request all the data stored on the SIM card.

SIM Wallet application

Application server which delivers the main functionality of the service;

Extra security, all data will be saved on the Orange server – also restore function;

Data can be modified, deleted or send forward to others SIM Wallet users using SMS;

Informations can be updated directly or by configuring a periodicity (daily, weekly, and monthly).

Personal Space Portal

Personal Space Chat CommunicationOnline communication with instant messaging;

Socialising or scheduling automatic messages for birthdays of people user know;

On Personal Space the user can set up a personal profile visible to other users;

User can choose the favourite handle and can contact or be contacted by other users, communicating with them online via instant messaging;

The Orange customer can also change status as seen by other Personal Space users;

Can choose to keep receiving instant messages via text even after log out.

Online instant messages are free.

Personal Space Chat Communication

ConclusionsOrange wants to provide an complete set of SIM Toolkit applications;Orange promote SIM Agenda instead phone agenda;3G SIM agenda – 1000 contacts (2 numbers + email);The central entity of all STK applications – SIM card agenda; Personal Space Portal – SIM services present in the same web unified interface; Personal Chat Communication between all SIM Agenda contacts – presence functions;SMS continuity function for Personal Chat;The same login mechanism for all services: One Time Password mechanism.

SIM cards

Q & A

SSO – Single Sign On IdentityOrange customers can access the online services using the Single Sign-On service (SSO).For the moment, existing services are using different login systems based on username, password or one time password mechanisms. SSO able to provide unique login interface for ORO services.Ensure complex authentication for targeted services.The main benefit for the customer: a single username and password for the online services.In the first phase two services are integrated in SSO: Personal Space and Mobile E-mail. During time, more online services will follow. Orange Romania proposal for the future regarding modules authentification is to increase the number of integrated online services into SSO platform.

Single Sign On - Home page

SSO – Single Sign On IdentityThe registration mechanism is considering username and password as protective data against fraud attempts. The username is defined by default for all customers as MSISDN. During registration process, every customer is allowed to choose a nickname that will be use in parallel as username.Data passing through between services and SSO database and back is secured/encripted.SSO solution not allow two login sessions in the same time. If login is already done, SSO will not ask again for password confirmation.The SSO consider both web and wap services, which require login/authentication or automatically recognize the customer profile by MSISDN, user agent, profile or other defined criteria.Gather specified data from services (web/wap) integrated with SSO and also from CRM systems and centralize it in the SSO database.Allow access to certain information from the SSO database in order to be used by another applications/services to customize web/wap interface or to use the data for specific processes.A new look, more user friendly for the SSO “my services” page.

SSO – My Services Page

SSO Service – Mobile Email page

Thank you