In today’s telco/mobile world, mobile phones have already become true multi-purpose devices.

ANDiS Management Systems provide sophisticated tools allowing mobile operators to personalise and manage mobile phones as multi-application devices. ANDiS' mobile solutions, called ANDiS4Mobile, ensures contactless mobile payments as well as updates to applications on the SIM or the loading of additional applications onto a mobile phone will be handled in a reliable and secure way. 

The mobile / telco market is an early market for the CAMS vendor community with strong growing potential. Today there are only few live projects in the world of which Bell ID managed to win one of the first, a mobile ticketing solution for a football club in The Netherlands.

ANDiS4Mobile manages the life-cycle of mobile applications and keys. Mobile applications are small applets developed to operate inside the secure element (e.g. SIM card) of the phone. By loading the applications onto the chip instead of the phone, maximum security can be achieved. Secure element applets are related to services with their own unique life-cycle i.e. requested, authorised, installed, activated, updated, deleted or blocked.

Over the air activation

ANDiS4Mobile has the capacity to activate the secure element of the phone by replacing the manufacturer keys with the final keys generated by the ANDiS Key Management System. The controlling entity (in this case, ANDiS4mobile) will protect the secure element from any unauthorised entity that wants to perform content management.

ANDiS4Mobile has the capacity to activate the secure element of the phone by replacing the manufacturer keys with the final keys generated by the ANDiS Key Management System. The controlling entity (in this case, ANDiS4mobile) will protect the secure element from any unauthorised entity that wants to perform content management.

Over the air post-issuance personalisation (OTA PIP) and content management

OTA PIP is the mechanism that allows ANDiS4Mobile users to distribute their services in the most convenient and cost-effective way within a diversified mobile phone infrastructure. ANDiS4mobile generates secure card/SIM commands to load, install, personalise, update and delete applets via the OTA service network on the subscriber's mobile phone. Content management gives flexibility to loading applications and the updating of parameters. OTA PIP is the mechanism that allows ANDiS4Mobile users to distribute their services in the most convenient and cost-effective way within a diversified mobile phone infrastructure. ANDiS4mobile generates secure card/SIM commands to load, install, personalise, update and delete applets via the OTA service network on the subscriber's mobile phone. Content management gives flexibility to loading applications and the updating of parameters.

OTA PIP notification service e.g. for billing

ANDiS4mobile keeps track of all mobile application life-cycle state transitions. The successful download of each mobile applet is registered and stored, including the date and time. Depending on the business model of the service, such life-cycle state change information can be sent automatically to other systems e.g. a billing system that may use such information to charge the end customer/subscriber or the service.

ANDiS4Mobile manages all cryptographic key management, and the secure distribution of all keys within the system architecture. Each of these keys has its own life-cycle, which can be managed efficiently within ANDiS4Mobile. A Key Management Web Service (KWS) allows thirdparty systems to request keys securely in realtime from one central system.

PKI support allows the application provider to confidentially manage its applications i.e. install and personalise applications, before any content management is performed. ANDiS4mobile acts as a controlling authority that personalises and manages application providers certificates.

ANDiS4mobile supports the security requirements for Global Platform cards. This llows for management of Issuer and supplementary Security Domains, Delegated Management and DAP Verification, various Security Channel Protocols for download of applications, extradition of applications, OTA support etc. The support of this rich set of functionalities makes ANDiS4Mobile the product of choice for a Trusted Service Manager in the NFC Eco system; it allows for trusted management of multi Service Provider services in a multi Mobile Network Operator environment.

ANDiS4mobile supports a number of modules which allow other hosts to stay informed. The Card and Application Management (CAMS) Web Service allows a third-party system to inform, trigger and request data from ANDiS4mobile, while the Notification Service allows ANDiS4Mobile to automatically inform or trigger other hosts systems. This way ANDiS4Mobile provides fully automated communication processes and ensures Service Providers and/or MNO's can convey requests and be informed about certain actions on-line.

Roda JC mobile ticketing (The Netherlands)