1. A method for providing end-to-end security for transport of a profile to a target device over at least one communications network that includes a plurality of nodes, the method comprising:
encrypting the profile between the target device and an initial node of the network through which the profile is transported, the encryption being an end-to-end inner layer encryption performed prior to hop-to-hop encryption, the encrypting using a public key of a public, private key pair, the private key being derivable from a seed securely provisioned in the target device using a public key algorithm; and
causing the encrypted profile to be transmitted over the at least one communications network to the target device.
2. The method of claim 1 wherein the seed is unique to a secure element located in the target device.
3. The method of claim 1 wherein the public key algorithm is based on Elliptic Curve Cryptography (ECC), the public key being derivable from the private key and an ECC curve.
4. The method of claim 2 wherein the private key is derivable from the seed and an identifier associated with a manufacturer or vendor of the secure element.
5. The method of claim 1 wherein the seed is common to particular population of secure elements.
6. The method of claim 3 wherein the public key algorithm is implemented using hardware.
7. The method of claim 4 further comprising maintaining in secret a list of public keys that includes the public key of the public, private key pair, the list of public keys being received by a service provider delivering at least one service to a plurality of target devices in which a plurality of secure elements are respectively located, the list of public keys being received from the manufacturer or vendor of the plurality of secure elements.
8. The method of claim 7 wherein the list of public keys is digitally signed by the manufacturer or vendor.
9. The method of claim 1 further comprising:
generating an ECC key pair associated with a service provider delivering at least one service to the target device;
using an ECC private key in the ECC key pair and the public key of the public, private key pair to perform a local Diffie-Hellman (DH) exchange to create a profile encryption key that is used to encrypt the profile.
10. The method of claim 9 wherein the ECC key pair is unique to a particular population of secure elements respectively located in a population of target devices.
11. The method of claim 9 wherein the ECC public key in the ECC key pair is pre-provisioned in the target device.
12. The method of claim 9 wherein the ECC public key in the ECC key pair is transmitted to the target device along with the encrypted profile.
13. The method of claim 1 wherein the public key algorithm is based on a DH algorithm.
14. The method of claim 1 further comprising:
receiving a request for the profile from the target device, the request including a nonce;
encrypting the nonce with the profile; and
causing the encrypted profile and the encrypted nonce to be transmitted over the at least one communications network to the target device.
15. The method of claim 1 wherein the encrypted profile includes a timestamp or a sequence number.
16. The method of claim 1 wherein the profile is encrypted by a mobile network provider and the seed is located in a secure element in the target device.
17. The method of claim 16 wherein the secure element is a Universal Integrated Circuit Card (UICC).
18. A computer readable storage medium encoded with computer executable instructions which, when executed by a processor, performs a method for decrypting a profile transmitted to a target device in a secure manner by a service provider over a communications network, comprising:
receiving an encrypted rendition of the profile over the communications network;
accessing a seed securely provisioned in the target device;
deriving a first private key of a first public, private key pair from the seed;
obtaining a second public key in a second public, private key pair associated with the service provider;
using the second public key and the first private key derived from the seed to perform a local DH exchange to create a symmetric key; and
decrypting the encrypted rendition of the profile using the symmetric key.
19. The computer readable storage medium of claim 18 wherein the second public, private key pair is generated using an ECC algorithm.
20. The computer readable storage medium of claim 18 further comprising obtaining the second public key from the service provider over the communications network.
21. The computer readable storage medium of claim 18 wherein the seed is unique to a secure element located in the target device.
22. The computer readable storage medium of claim 18 wherein the seed is common to a particular population of secure elements respectively located in a population of target devices.
23. The computer readable storage medium of claim 22 further comprising deriving the first private key of the first public, private key pair using the seed and an identifier associated with a manufacturer or vendor of the secure elements.
24. The computer readable storage medium of claim 22 further comprising deriving the first private key of the first public private key pair using the seed, a first identifier associated with a manufacturer or vendor of the secure elements and a second identifier associated with the secure element in the target device.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1-7. (canceled)
8. A pneumatic tire comprising an inner liner disposed inwardly in the tire relative to a carcass ply bridged between a pair of bead portions,
said inner liner being formed of a first layer disposed inwardly in the tire, and a second layer disposed in contact with a rubber layer of said carcass ply,
said first layer being a thermoplastic elastomer composition mainly containing a styrene-isobutylene-styrene block copolymer,
said second layer being a thermoplastic elastomer composition containing at least one of a styrene-isoprene-styrene block copolymer and a styrene-isobutylene diblock copolymer, said styrene-isobutylene block copolymer being linear, said styrene-isobutylene block copolymer containing a styrene component at a content of 10 mass % to 35 mass %, said styrene-isobutylene block copolymer having a weight average molecular weight of 40,000 to 120,000,
(a) at least one of the thermoplastic elastomer compositions of said first and second layers containing a tackifier by 0.1 part by mass to 100 parts by mass relative to 100 parts by mass of a thermoplastic elastomer component, or
(b) said second layer containing the styrene-isobutylene-styrene block copolymer by 10 mass % to 80 mass % relative to a thermoplastic elastomer component thereof.
9. The pneumatic tire according to claim 8, wherein the tackifier has a weight average molecular weight Mw of 1\xd7102 to 1\xd7106 and has a softening point falling within a range of 50\xb0 C. to 150\xb0 C.
10. The pneumatic tire according to claim 8, wherein the first layer has a thickness of 0.05 mm to 0.6 mm and the second layer has a thickness of 0.01 mm to 0.3 mm.
11. The pneumatic tire according to claim 8, wherein said styrene-isobutylene-styrene block copolymer contains a styrene component at a content of 10 mass % to 30 mass %, and has a weight average molecular weight of 50,000 to 400,000.
12. The pneumatic tire according to claim 8, wherein said styrene-isoprene-styrene block copolymer contains a styrene component at a content of 10 mass % to 30 mass %, and has a weight average molecular weight of 100,000 to 290,000.