Source: https://patents.google.com/patent/JP6513539B2/en
Timestamp: 2020-08-05 10:57:54
Document Index: 632197528

Matched Legal Cases: ['Application No. 13', 'Application No. 61', 'Application No. 61', 'Application No. 61', 'Application No. 61', 'Application No. 61']

JP6513539B2 - Method and apparatus for access control client assisted roaming - Google Patents
JP6513539B2
JP6513539B2 JP2015188550A JP2015188550A JP6513539B2 JP 6513539 B2 JP6513539 B2 JP 6513539B2 JP 2015188550 A JP2015188550 A JP 2015188550A JP 2015188550 A JP2015188550 A JP 2015188550A JP 6513539 B2 JP6513539 B2 JP 6513539B2
JP2015188550A
JP2016001926A (en
2015-09-25 Application filed by アップル インコーポレイテッドＡｐｐｌｅ Ｉｎｃ．, アップル インコーポレイテッドＡｐｐｌｅ Ｉｎｃ． filed Critical アップル インコーポレイテッドＡｐｐｌｅ Ｉｎｃ．
2016-01-07 Publication of JP2016001926A publication Critical patent/JP2016001926A/en
2019-05-15 Publication of JP6513539B2 publication Critical patent/JP6513539B2/en
The present invention relates generally to the field of wireless systems such as cellular networks, and more particularly to systems that allow devices to transition wireless services across multiple wireless networks.
Priority and Related Applications : This application claims priority to US Patent Application No. 13 / 109,851, entitled "METHOD AND APPARATS FOR ACCESS CONTROL CLIENT ASSISTED ROAMING," filed May 17, 2011. The patent application claims priority to US Provisional Patent Application No. 61 / 407,858, entitled "METHOD AND APPARATS FOR ACCESS CONTROL CLIENT ASSISTED ROAMING," filed October 28, 2010. Each patent application is incorporated herein by reference in its entirety.
Also, the present application is filed on January 13, 2009, co-pending US patent application Ser. No. 12 / 353,227, filed Nov. 22, 2010, entitled "POSTPONED CARRIER CONFIGURATION." No. 12/952, 082, entitled WIRELESS NETWORK AUTHENTICATION APPARATS AND METHOD, No. 12/952, 089, entitled "APPARATUS AND METHODS FOR PROVISIONING SUBSCRIBER IDENTITY DATA IN A WIRELESS NETWORK," filed November 22, 2010 No. 12 / 980,232 entitled “VIRTUAL SUBSCRIBER IDENTITY MODULE DISTRIBUTION SYSTEM” filed on Dec. 28, 2010; No. 13 entitled “ACCESS DATA PROVISIONING SERVICE” filed on April 1, 2011 No. 13 / 079,61 entitled "MANAGEMENT SYSTEMS FOR MULTIPLE ACCESS CONTROL ENTITIES" filed on Apr. 4, 2011 No. 13 / 080,521 entitled "METHOD AND APPARATS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS", filed on April 5, 2011, and "SIMULACRUM OF PHYSICAL SECUR, filed on April 5, 2011". No. 13/080, 533 entitled DEVICE AND METHODS, No. 13/080, 558 entitled "APPARATS AND METHOD FOR CONTROLLING DISTRIBUTION OF ELECTRONIC SUBSCRIBER IDENTITY MODULES" filed on April 5, 2011 May 13, 2011 entitled "APPARATUS AND METHOD FOR STORING SUBSCRIBER SUBSCRIBER SUBSCRIBER SUBSCRIBER MODULES" filed on May 25, "SYSTEM FOR DISTRIBUTION OF UNIQUE SUBSCRIBER IDENTITY MODULES" filed on April 27, 2011 No. 13 / 095,716 and "METHODS AND APPARATS FOR DELIVERING ELECTRONIC IDENTIFICATION COMPO, filed on October 28, 2010 US Provisional Patent Application No. 61 / 407,862 entitled “NENTS OVER A WIRELESS NETWORK”, No. 61/409, entitled “METHODS AND APPARATUS FOR ACCESS DATA RECOVERY FROM A MALFUNCTIONING DEVICE”, filed November 3, 2010, No. 891. No. 61/413, 317 entitled "APPARATUS AND METHOD FOR RECORDATION OF DEVICE HISTRY ACROSS MULTIPLE SOFTWARE EMULATION", filed on November 12, 2010, "ELECTRONIC ACCESS filed on April 26, 2011. No. 61 / 479,319 entitled "CLIENT DISTRIBUTION APPARATS AND METHODS", No. 61 / 481,114 entitled "COMPACT FORM FACTOR INTEGRATED CIRCUIT CARD" filed on April 29, 2011, May 6, 2011 In connection with the 61/483, 582 entitled “METHODS AND APPARATS FOR PROVIDING MANAGEMENT CAPABILITIES FOR ACCESS CONTROL CLIENTS” filed in , Each of which is incorporated as it is in here as a reference.
Many wireless systems or networks require user identification and authentication to access services. For example, within a typical Universal Mobile Telecommunications System (UMTS) environment, access control referred to as a Subscriber Identity Module (SIM) physically incorporated within a physical card form factor Universal Integrated Circuit Card (UICC) The client controls access control of the cellular phone. In operation, the SIM card authenticates the subscriber to the cellular network. After being successfully authenticated, the subscriber is allowed to access the cellular network.
When a SIM card is manufactured, the SIM card is programmed with carrier-specific authentication information that restricts the use of the SIM card to specific carriers. Furthermore, each SIM card is associated with a single user account, and user account data is permanently stored on the SIM card. If the user wants to switch the service from an existing account to a new account or from an existing carrier to a new carrier, the user needs a new SIM card. Briefly, the user account and carrier network are coupled to the SIM card and not to the mobile device itself. Mobile devices are goods that are somewhat alternative in this regard.
Unfortunately, when traveling to a new service area, subscribers often have to choose to pay a high "roaming" fee or purchase a new SIM card. Roaming service refers to the connection of a mobile device at a location different from the home location where the mobile device was registered. Roaming services may have lower signal quality and / or additional associated costs compared to registered subscriber services. However, in the extreme case, the subscriber may not have roaming capabilities, so the mobile device either purchases an entirely new SIM card to register with the visited network or completely gives up connection. There is only.
Therefore, there is a need for an improved solution for giving the user the ability to obtain (eg, purchase) and manage coverage while the device is not at home position. Such an improved solution is ideally suited to support the delivery of new or different user accounts to devices already deployed or purchased without the need for a new SIM card.
The present invention addresses the above needs by, among other things, disclosing an apparatus and method for selecting and utilizing an access client for use in a user device.
In a first aspect of the invention, a wireless device is disclosed. In one embodiment, the apparatus is adapted to store one or more wireless interfaces adapted to connect to one or more wireless networks, and a plurality of user access data elements each associated with a corresponding network. A secure element, a processor, and a storage device in data communication with the processor and containing computer executable instructions. The instruction, in one variation, when executed by the processor, selects an available network, retrieves a first user access data element associated with the selected network from the secure element, and The retrieved user access data is loaded and configured to authenticate to the selected network with the loaded user access data.
In a second aspect of the invention, a method is disclosed for migrating wireless access across multiple networks. In one embodiment, the method detects roaming conditions, evaluates one or more access control clients each associated with one or more networks, selects an available access control client, and selects the selected access Loading the controlling client and executing the selected access control client.
In one variation, the method is substantially performed by a user device. In another variation, the method is performed substantially by the network entity. In yet another variant, the various tasks of the method are shared by the user equipment and one or more network entities.
In a third aspect of the invention, a network device is disclosed. In one embodiment, the apparatus causes the access client (eg, eSIM) to request switching, eg, to detect roaming conditions or loss of signal quality / strength, and from one network or carrier to another network or carrier. It is configured to invoke a subsequent switch or handover to.
In a fourth aspect of the invention, a system is disclosed. In one embodiment, the system selectively selects different access clients to activate based on the wireless network and dominant conditions within the network (eg, user roaming from the network, signal quality or strength, etc.) A user device capable of
In a fifth aspect, a computer readable device is disclosed. In one embodiment, the device comprises a storage medium on which at least one computer program is arranged. At run time, at least one program detects a roaming or other trigger condition, selects at least one second network for access, invokes access to the selected network, and is currently in use Configured to terminate access to the network.
In a sixth aspect of the invention, a base station apparatus is disclosed. In one embodiment, the base station device is configured to support at least a first wireless network and to facilitate wireless device transfer to different base station devices supporting wireless networks other than the first network. Be done. In one variation, the base station device comprises one or more wireless interfaces, a processor, and a storage device in data communication with the processor, the storage device being a wireless device when executed by the processor. Receive operational information from, determine whether there is a different base station device for use by the wireless device based at least in part on the operational information and send a command to the wireless device to connect the wireless device to the different base station Computer-executable instructions configured to:
These and other aspects of the invention will become apparent when considered in light of the disclosure herein.
1 graphically illustrates one exemplary authentication and key agreement (AKA) procedure using a conventional USIM. FIG. 1 is a logic flow diagram illustrating one exemplary cellular system useful in connection with various embodiments of the present invention. FIG. 5 graphically illustrates an exemplary transaction for transitioning a cellular device from a network of a first carrier to a network of a second carrier according to an embodiment of the present invention. FIG. 5 is a logic flow diagram illustrating an embodiment of a generalized method for migrating cellular device services in accordance with the present invention. FIG. 1 is a block diagram of an exemplary user equipment useful for implementing the method of the present invention. FIG. 1 is a block diagram of an exemplary network device useful for implementing the method of the present invention. (All figures copyright 2010 Apple Inc. holds all rights)
DETAILED DESCRIPTION Reference is made to the accompanying drawings in which like parts are designated by like numerals throughout.
In general, in one aspect, the present invention is directed to a method and apparatus for allowing user equipment access to different carriers by providing support for roaming coverage outside of the "home" location. Embodiments of the present invention switch between multiple access clients (e.g. electronic subscriber identity modules or eSIMs) stored on the mobile device, each eSIM configured to authenticate the mobile device with the carrier network Included SIM. More specifically, in one exemplary embodiment, a mobile device detects roaming conditions and responds to it (or looks ahead) to evaluate its available eSIMs. If at least one eSIM is currently suitable for non-roaming operation with the network, the eSIM is loaded and the mobile device registers with its new home network.
More generally, the present invention relates to a wireless device that can switch its current access control client to match the current network, rather than using the existing roaming access. For example, rather than roaming the second network (and thus, in some cases, generating extra roaming charges), while actively holding the eSIM associated with the first network, the mobile device may Deactivate the associated eSIMs and load the eSIMs associated with the second network simultaneously or in anticipation. This "hand-off" is performed seamlessly in the exemplary embodiment so as not to affect the user's experience (ie, "on the fly").
Various aspects of the invention substantially improve both the quality and efficiency of service, as well as service coverage. By flexibly switching between multiple access control clients, a single device can maintain multiple service contracts for different network service providers. Such features add value to the user. The reason is that it is possible to roam from a domestic service area by purchasing user access data at a service provider of a foreign network service area (for example, in the case of foreign travel). Furthermore, the user access data format is not limited to a specific physical card (e.g. UICC, R-UIM card etc.), so it is enabled on multiple wireless interfaces (e.g. GSM (R), CDMA etc.) The user equipment can improve service coverage by allowing the user to switch between different RANs with varying signal strength.
DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS Exemplary embodiments of the invention are described in detail below. These embodiments are mainly described in terms of the Subscriber Identity Module (SIM) of GSM, GPRS / EDGE, UMTS cellular networks, but it will be clear to the person skilled in the art that the invention is not limited thereto. In fact, various aspects of the present invention are useful in wireless networks (whether or not cellular) that would benefit from access control client assisted roaming.
Also, although the "Subscriber Identity Module (SIM)" is referred to herein as eSIM, this is not necessarily limited to (i) use by the subscriber itself (ie, the present invention is implemented by a subscriber or non-subscriber ), (Ii) the identity of one individual (ie the invention is implemented for a group of individuals such as a family, or an intangible or fictitious entity such as a business), or (iii) optional It will be appreciated that it does not imply or require any tangible "module" device or hardware.
Conventional Subscriber Identity Module (SIM) Operation In the context of a typical conventional UMTS cellular network, a User Equipment (UE) comprises a mobile device and a Universal Subscriber Identity Module (USIM). This USIM is a logical software entity stored and executed from a physical universal integrated circuit card (UICC). Various information such as subscriber information, keys and algorithms used to authenticate with the network operator to obtain wireless network service are stored in this USIM.
Generally, the UICC is programmed with the USIM prior to distribution to subscribers, and reprogramming or "personalization" is specific to each network operator. For example, prior to deployment, the USIM is associated with an International Mobile Subscriber Identifier (IMSI), a unique Integrated Circuit Card Identifier (ICC-ID), and a specific authentication key (K). The network operator stores the association in a registry housed within the Network Authentication Center (AuC). After personalization, the UICC can be distributed to the subscribers.
One exemplary authentication and key agreement (AKA) procedure 100 using the conventional USIM described above is shown in detail in FIG. During a normal authentication procedure, UE 102 obtains an International Mobile Subscriber Identifier (IMSI) from USIM 104. The UE passes it to the serving operator (SN) 106 of the network operator or the visited core network. The SN forwards the authentication request to the AuC 108 of the home network (HN). The HN compares the received IMSI to the AuC's registry and obtains the appropriate K. HN generates a random number (RAND) and signs it with K using an algorithm to generate the expected response (XRES). HN also generates cryptographic keys (CK) and integrity keys (IK) for use in encryption and integrity protection, and authentication tokens (AUTN) using various algorithms. HN sends an authentication vector consisting of RAND, XRES, CK and AUTN to SN. The SN stores the authentication vector for use in only one authentication process. The SN passes RAND and AUTN to the UE.
When UE 102 receives RAND and AUTN, USIM 104 verifies whether the received AUTN is valid. If so, the UE uses its received RAND and calculates its own response (RES) using the same algorithm that generated the stored K and XRES. The UE returns the RES to the SN. The SN 106 compares the XRES to the received RES, and if they match, the SN authenticates the UE for operator wireless network service utilization.
Exemplary Operation In the context of an exemplary embodiment of the present invention, rather than using a physical UICC as in the prior art, the UICC may for example be a secure element of the UE (e.g. a secure microprocessor or storage) Software applications (hereinafter referred to as electronic universal integrated circuit cards (eUICC)), emulated as virtual or electronic entities. The eUICC can store and manage multiple USIM elements, hereinafter referred to as Electronic Subscriber Identity Module (eSIM). Each eSIM contains the same logical entity as a typical USIM. The eUICC selects the eSIM based on the ICC-ID of the eSIM. Once the eUICC selects the desired eSIM, the UE may initiate an authentication procedure to obtain wireless network service from the corresponding network operator of the eSIM.
Referring now to FIG. 2, one exemplary cellular system 200 useful for describing various embodiments of the present invention is shown. This exemplary system comprises three public land mobile networks (PLMNs) or "network carriers": UMTS Carrier A 202A, UMTS Carrier B 202B, and CDMA2000 Carrier C 202C. Although two UMTS and one CDMA carrier are shown, it is also recognized that other types and numbers of air interfaces (cellular, etc.) can be used consistent with the present invention. Furthermore, the present invention is intended to include, for example, disparate network types, such as transferring ongoing services or calls or sessions from WLAN to cellular or WiMAX networks, etc.
In FIG. 2, the cellular device 204 is connected to a UMTS Carrier A network, but within the coverage of the other two networks. In this example, the cellular device is permanently registered with the UMTS Carrier A network, and thus the UMTS Carrier A network is the "home network" of the cellular device. If the cellular device receives service from a UMTS Carrier B network, that second network is a "visited network" since the cellular device is not permanently registered with Carrier B. A CDMA 2000 carrier C network may or may not be supported for roaming access, ie roaming between different technologies (eg UMTS, CDMA 2000) is implementation specific, eg dual mode By use of the telephone.
Thus, in one exemplary embodiment of the present invention, mobile device 204 is not roaming, and currently changes eSIM personality. More specifically, the mobile device stores (or obtains on the fly) a plurality of eSIM personalities in a secure eUICC. Rather than actively holding the eSIM associated with the first network to roam the second network, the mobile device deactivates that eSIM associated with the first network 202A, and the second network 202C (in this case, Load eSIM associated with carrier C). The mobile device then connects to the second network as a new home network. As mentioned above, this is done in a number of different sequences in the exemplary embodiment to make the transition as seamless as possible to the user. Thus, the present invention is a "make before break" paradigm in which the service is at least partially initiated with the "new" home carrier before the eSIM to the previous home carrier is deactivated or destroyed. It is intended for various models, including Another model uses "break before make" logic.
FIG. 3 illustrates one exemplary method for receiving service across multiple cellular networks. At step 302, a user equipment (UE) identifies a list of available eSIMs. As used herein, the term "available" refers to the occurrence of an event that falls within the range of another base station, eg, at future times, as currently available or available. Sometimes, including but not limited to, access clients or eSIMs. In step 304, the UE scans for networks corresponding to available eSIMs. For example, in a typical cellular system 200, UE 204 identifies three network carriers: (i) UMTS carrier A 202A, UMTS carrier B 202B, and CDMA2000 carrier C 202C, but the UEs are carrier A and carrier C. Has only eSIM data for
At step 306, the UE selects one of the available networks. For example, the UE presents the user with a list of network options via a graphic user interface (GUI), and the user selects the desired network. In this example, the user selects the switch from that existing carrier (carrier A) to carrier C. Alternatively, the selection logic selects an appropriate carrier based on one or more selection rules including, for example, (i) cost matters, (ii) equipment / compatibility matters, and / or (iii) user preferences. It may be used in a user equipment (or remote entity in the network).
In step 308, the UE retrieves eSIM for the selected carrier from the secure element and loads it. For example, the UE deactivates an eSIM emulating a USIM to a UMTS carrier B and loads an eSIM corresponding to CDMA 2000 carrier C, eg simultaneously or in anticipation.
In step 310 (performed simultaneously or in anticipation as described above), the UE authenticates the selected network. The UE starts a CDMA2000 modem and registers with carrier C.
The examples described above illustrate some of the significant advantages of the present invention. First, unlike the physical SIM card, the mobile device of the present invention stores multiple eSIMs in the eUICC. Thus, various aspects of the present invention can significantly improve device connection coverage. As each eSIM is associated with a different network carrier in the exemplary embodiment, the subscriber has multiple home networks. A subscriber can operate as a registered user in any of its home networks (eg, without incurring roaming charges, etc.). Furthermore, the exemplary embodiments described above can support different radio access networks and their associated eSIM types.
Second, since the mobile device of the present invention does not have a physical SIM card, it requires overhead associated with the card form factor (e.g. 2 or 3 or 4 separate SIM card slots) Can support multiple wireless access technologies. The mobile device does not require a card socket, and the user does not have to carry multiple cards personally. Furthermore, since the exchange of eSIMs is assisted by a GUI or performed automatically inside the mobile device, various embodiments of the invention help to prevent user errors. For example, the user does not accidentally forget the SIM card at home, insert an incorrect SIM card, insert the SIM card incorrectly, and so on.
Exemplary embodiments of the generalized method and apparatus for embodying one or more aspects of the present invention are described below.
Method With reference to FIG. 4, one embodiment of a generalized method for migrating wireless services across multiple wireless networks is illustrated and described.
As used herein, the term "access control client" generally refers to a software client implemented in hardware or software to enable access to resources of wireless networks and communication networks. In one exemplary embodiment, the access control client is an eSIM implemented in eUICC. In one variation, the eSIM is configured to operate with at least one of a Universal Subscriber Identity Module (USIM), an IP Multimedia Services Identity Module (ISIM), a CDMA Subscriber Identity Module (CSIM) .
At step 402, other access control client options are evaluated. In one exemplary embodiment, the process of evaluating access control clients is triggered automatically by the wireless device. For example, if the UE implements multiple wireless radio technology interfaces (eg, GSM, CDMA), the user may experience a loss of signal strength (or no signal at all) in its currently active radio. In response, the wireless device checks its available access control clients to avoid roaming.
In another embodiment, the process of updating the access control client is manually triggered by the user. For example, a user may have varying voice and data planning rates between different network providers where the user maintains a service contract. The user may wish to manually select a connection to a different network provider in order to obtain the most cost-effective rate for the desired wireless network service (e.g. voice and data). Alternatively, the user may wish to use different service providers in different personal situations, for example, one for personal use and one for business use. .
In another embodiment, triggers for updating the access control client may be driven by context specific use of available networks (e.g. cost effective, signal strength). For example, a user may have eSIM data for multiple carriers at the UE, with each eSIM having its own usage rate. Some carriers may provide an evening rate that encourages the UE to select a cost effective correspondent network in the evening.
In one implementation, triggers that update access control clients are driven by time and / or geographic location constraints. For example, the user has eSIM data for personal accounts and work accounts. The wireless device determines that the device is to be placed at the user's office during normal work hours, thus selecting the network associated with the eSIM data for the work account. Alternatively, if it determines that the device is not at work time and / or not at work (eg, a primary residence), the device selects a network associated with the eSIM data for the personal account.
In addition, various inputs (eg, time and / or geographic context) can also be input ephemerally. For example, a user drive through an area that has historically very bad reception for the first carrier but not for the second carrier can automatically trigger updates to the access control client. In one embodiment, the biographical analysis may be based on the device's own history (eg, based on previous behavior) or may be "cloud-sourced", ie collected from a large number of other devices. It may be based on the history (whether it is of the same type / ability as the device in use, different or a heterogeneous mixture thereof). In some cases, this information may be downloaded to the device by the user (eg, via application software or updates) or provided to the device by the network (automatically or otherwise).
Furthermore, the network carrier prefers the device to switch prospectively to a "good" carrier rather than supporting the device with progressively less efficient network resources and / or adversely affecting the user's experience. For example, carrier A wants to hand over seamlessly to carrier B in a nominally weak coverage area. This is because this seamless handover (even another carrier) and service persistence are preferred over spot service interruptions that reflect poorly on carrier A. In some cases, the user may not be aware of the handover, so it will actively reflect on carrier A without having to provide a service at that time.
In optional step 403, the wireless device compiles a list of available access control clients. In one embodiment, this list is based on the currently stored access control client. In one variation, the list further includes an externally stored access control client. For example, as described in the US Provisional Patent Application No. 61 / 407,861, entitled "MANAGEMENT SYSTEMS FOR MULTIPLE ACCESS CONTROL ENTITIES," filed October 28, 2010, the access control client may It is stored in an external "wallet" or "parked" in a network entity.
In another embodiment, the list includes access control clients that have not yet been designated and are open for designation. For example, in one variation, the list includes access control clients that are advertised for sale and download.
As shown, for step 404, the wireless device selects an available access control client. In one exemplary embodiment, the selection of available access control clients is made manually by the user. For example, the wireless device presents the user with a list of available access control clients through the GUI.
In another embodiment, selection of access control clients can be made automatically by a wireless device scanning an available network of user areas. In one variation, the selection of access control clients is determined by configurable settings of the wireless device (eg, default network). For example, a mobile device with multiple available network options may choose the network that provides the best signal quality, the highest bandwidth, the lowest cost billing rate, etc, or a combination / optimization of multiple of them. Can.
In another exemplary embodiment, the wireless device embodies multiple radio access technology interfaces (eg, CDMA2000, GSM) to allow the device to select a network for each available interface. In one implementation, one wireless interface selects a network for voice service, while another wireless interface selects a network for data service. Also, performance (eg, bandwidth) or QoS or security may be used as a basis for selection (ie, one network for secure traffic, another network for non-secure traffic).
Once the appropriate access control client is selected, the wireless device retrieves access control client data associated with the selected network. In one exemplary embodiment of the invention, user access data (e.g., an access control client, other components associated therewith, etc.) are retrieved from the secure element of the wireless device. For example, as noted above, filed October 28, 2010, describing the typical apparatus and method for implementing such retrieval of user access data from a secure element, "METHODS AND APPARATUS FOR STORAGE See commonly owned and co-pending U.S. Provisional Patent Application No. 61 / 407,866 entitled "AND EXECUTION OF ACCESS CONTROL CLIENTS".
In another embodiment, user access data associated with the selected network is downloaded to the wireless device. For example, the above-mentioned "METHODS AND APPARATS US FOR DELIVERING ELECTRONIC IDENTIFICATION COMPONENTS OVER, filed Oct. 28, 2010, described an exemplary method for embodying such wireless download of user access data. See commonly owned co-pending US Provisional Patent Application No. 61 / 407,862 entitled "A WIRELESS NETWORK".
The access control client is then loaded into the wireless device. In one exemplary embodiment, retrieved user access data (ie, an access control client and other components associated therewith, etc.) are loaded into wireless device software. In one implementation, the wireless device software determines whether the wireless interface required to connect to the desired network is currently being used for another authenticated session.
If the wireless interface is not in use for another authenticated network session, the wireless device initiates access control as described in step 406. If the wireless interface is in use, in one embodiment, the wireless interface is reset by the wireless device software to allow connection to the desired network. After resetting of the wireless interface, the wireless device initiates access control as described in step 406. In another embodiment, a second wireless interface is launched in parallel with the existing wireless connection to support simultaneous connection to the new home network and the previous visited network.
In certain implementations of the invention, the wireless device houses one or more wireless interfaces. In one variation, two or more wireless interfaces may be active simultaneously to allow user access data to be loaded simultaneously. For example, when the UE restarts, user access data of the CDMA 2000 wireless interface and the GSM wireless interface are simultaneously loaded. In another variation, the UE switches from one wireless interface to another.
At step 406, the wireless device initiates an access control procedure. If successful, the wireless device can obtain wireless network service from the selected network. In one embodiment, the access control procedure is a challenge-response protocol for mutually authenticating the wireless device to the network and the network to the wireless device. In one such embodiment, the access control procedure comprises an authentication and key agreement (AKA) procedure (see FIG. 1 and the associated description). In other embodiments, the access control procedure includes one-way authentication, eg, only cellular devices or networks are authenticated. Such embodiments include, for example, cellular authentication and voice encryption (CAVE) based algorithms, but other algorithms can be used with the same degree of success.
Various aspects of the invention substantially improve both the quality and efficiency of service, as well as service coverage. By being able to store multiple user access data, the user can maintain multiple service contracts for different network service providers at a single UE. Such features add value to the user. This is because, in particular, it is possible to roam from a domestic service area by purchasing user access data at the service provider of the foreign network service area (e.g. in the case of foreign travel). Furthermore, UEs enabled with multiple wireless interfaces (eg, GSM, CDMA, etc.) may be used since the user access data format is not limited to a particular physical card (eg, UICC, R-UIM card, etc.) Service coverage can be improved by allowing the user to switch between different RANs with varying signal strength.
In one embodiment, the present invention relates to the revenue associated with enabling a user to purchase and receive an access control client for a service provider of a wireless network through an application based store (eg, an online store) or broker. Consider the implications of profits. For example, the user has high flexibility to obtain wireless service without having to obtain a new physical card with mandatory user access data. Furthermore, providers of user access data through application-based stores can charge a premium for temporary user access data (e.g., for short-term foreign trips), which means that the user can not Still cheaper than what you have to pay for roaming charges or international service rates at
The exemplary UE device of FIG. 5 is a wireless device with a processor subsystem 502 such as a digital signal processor, microprocessor, field programmable gate array, or multiple processing components mounted on one or more substrates. The processing subsystem also includes an internal cache memory. Also, the processing subsystem is connected to a memory subsystem 504 with memory including, for example, SRAM, Flash and SDRAM components. The memory subsystem may embody one or more DMA type hardware to facilitate data access, as is well known in the art. The memory subsystem also includes computer-executable instructions that can be executed by the processor subsystem.
In one exemplary embodiment, an apparatus is configured with one or more wireless interfaces (506) adapted to connect to one or more wireless networks. These multiple wireless interfaces can support different radio technologies such as GSM, CDMA, UMTS, LTE / LTE-A, WiMAX, WLAN, Bluetooth etc by implementing appropriate antenna and modem sub-systems .
User interface subsystem 508 includes a number of well-known I / Os including, but not limited to, keypads, touch screens (eg, multi-touch interfaces), LCD displays, backlights, speakers and / or microphones . However, it is clear that in some applications one or more of these components may be removed. For example, in a PCMCIA card type client embodiment, the user interface may be missing (since they can be piggybacked on the user interface of the host device to which they are physically and / or electrically coupled).
In the illustrated embodiment, the device comprises a secure element 510 that contains and operates the eUICC application. The eUICC can store and access multiple access control clients used to authenticate with the network operator. Secure elements can be accessed by the memory subsystem upon request of the processor subsystem. In one exemplary embodiment, the secure element comprises at least a partitionable memory, wherein the partitionable memory is adapted to include one or more access control clients and associated patches.
The secure element may also include so-called "secure processors" or SMs of the type well known in security technology. Furthermore, in one embodiment, the secure element maintains a list or inventory of stored access control clients. This inventory may include information regarding the stored access control client's current state. Such information includes availability, completeness, validity, previously experienced errors, etc. This inventory may be further linked or coupled to the user interface, as needed, to allow the user to select available access control clients.
Furthermore, various implementations of the exemplary embodiments include instructions that, at runtime, detect roaming conditions and, in response, evaluate other access control client options. In at least one variant, said roaming detection is automatic. Such detection may be via geography / time (eg GPS receiver, association with a known location or device (eg base station or WLAN AP), “foreign” network communication (eg WIMAX MOB_ADV messages, etc.) Advertising message), etc.).
In another variation, roaming condition detection is manually triggered by the user. In yet another embodiment, the device can trigger to evaluate the access control client without roaming detection, eg, user input, context specific actions (eg, “job” or “personally by the user” Or call a number classified as "international"), etc.
Yet another embodiment of the exemplary embodiment includes instructions for selecting and loading an access control client. For example, when a roaming condition is detected, the user device retrieves user access data (eg, access control client, other components associated therewith, etc.) for loading into device software.
In one implementation, the wireless device deactivates the current connection and re-establishes a new connection to a new home network. In another implementation, the wireless device persists the current connection (which may be roaming) and establishes a new connection. For example, in some implementations of the invention, a wireless device can include one or more wireless interfaces. In one such variation, two or more wireless interfaces may be activated simultaneously to allow user access data to be loaded simultaneously. For example, user access data for the CDMA 2000 wireless interface and the GSM wireless interface can be loaded simultaneously when the UE restarts.
Although the above embodiments of user device 500 have been described primarily for mobile telephones (eg, smart phones), it will be appreciated that the present invention is not limited to telephone devices. For example, the above techniques can be applied directly to a data network such as, for example, "4G" WiMAX, or a WLAN enabled device such as a handheld or laptop computer.
Exemplary Network Device FIG. 6 shows an exemplary network device 600 useful for implementing the method of the present invention.
The exemplary network device of FIG. 6 is a server 600, which generally comprises a network interface 602 for interfacing with a communication network, a processor 604, a storage device 606, and a back end interface 608. ing. The back end interface 608 is an interface for direct communication with the UE 500 or an interface to the Internet to facilitate communication with the UE 500. Further, back end interface 608 is an interface for communicating with the cellular network system. Other interfaces may be used, and the foregoing is merely exemplary.
Although the above embodiments of the method and apparatus of the present invention are substantially centered on the user equipment (e.g. UE), it is clear that some or all of these functions can be offloaded to the network infrastructure I will. For example, in the above-described embodiment, which automatically triggers based on the detection of "roaming", the detection is performed by a network entity such as a server that knows the user's account, device profile, and current / available access clients. (Or detection can be signaled to that network entity). Also, the network entity communicates with a trusted access client (eg, eSIM) provider or broker to download a new eSIM (or activate one already present at the user device) based on roaming detection or other criteria. Can occur. For example, upon detecting that a user is handed off or associated with a cell at the edge of the service provider's network, the entity may download and / or enter another eSIM of another network that extends beyond the coverage of the first network. Or activation can occur. In this manner, the user equipment can be "thinner" and does not require any inherent logic or facilities to make an eSIM switching decision.
A network entity may be associated with a service provider (eg, as part of an “old home” or “new home” network), or an affiliated or non-affiliated third party service (eg, affiliated with a particular service provider) It may be associated with an internet service (e.g., an eSIM provisioning / management service for clients) as a service. The network entity may also be operated by a user equipment (e.g. smart phone) manufacturer to provide services to the purchaser. Thus, the user can also download an "app" (application) for use on his device which facilitates communication with such network entities and efficient selection of eSIMs when roaming.
The present invention also contemplates various business relationships between service providers and eSIM switch calls. For example, when Carrier X decides to switch one of its current "home" users to eSIM associated with Carrier Y, Carrier X reports this event to Carrier Y and, according to the existing relationship, Obtain payment or other type of thing to cause the switch (as opposed to possibly causing the switch to carrier Z). In one such model, carriers X and Y switch between intangible "credits" for the number of switches to their network caused by other carriers per unit time (e.g., monthly) and which carrier is more frequent And give each other payments made accordingly. Those skilled in the art will recognize various other models given the present disclosure.
Although several aspects of the present invention have been described with respect to a particular sequence of method steps, these descriptions are merely exemplary of the broad method of the present invention and can be modified as required by the particular application. It will be recognized. Certain steps may be unnecessary or optional under certain circumstances. Furthermore, steps or functions in the embodiments disclosed herein may be added, or the execution order of two or more steps may be switched. All such modifications are considered to be encompassed by the invention disclosed herein.
While the novel features of the invention as illustrated and described and illustrated and described above as applied to the various embodiments, those skilled in the art will recognize that forms and details of the apparatus or process may be made without departing from the invention. It will be understood that various omissions, substitutions and changes may be made. The above description is the best mode presently contemplated to practice the present invention. This description is not intended to be limiting in any way, and should be considered as illustrative of the general principles of the present invention. The scope of the present invention is limited by the claims.
100: Authentication and Key Agreement (AKA) procedure 102: UE
104: USIM
106: Serving Network (SN)
200: Cellular system 202A: UMTS carrier A
202B: UMTS carrier B
202C: CDMA2000 carrier C
500: mobile device 502: processor 504: storage device 506: modem 508: keypad / user interface 510: secure element 600: server 602: network interface 604: processor 606: storage device 608: back end interface
A network device for enabling a mobile terminal to move between a first wireless network and a second wireless network,
Identifying that the mobile terminal is at the edge of the first wireless network and within the coverage of the second wireless network;
The mobile terminal is moved to a specific electronic subscriber identity module (eSIM) that allows it to be authenticated in the second wireless network and consume services provided via the second wireless network. Determine that the terminal does not possess,
A network apparatus comprising a processor, responsive to the determination, providing the particular eSIM to the mobile terminal, such that the particular mobile terminal is authenticated in the second wireless network using the particular eSIM. .
The network device according to claim 1, wherein the processor disconnects the mobile terminal from the first wireless network after providing the specific eSIM.
The first wireless network is based on a first wireless technology,
The network device according to claim 1, wherein the second wireless network is based on a second wireless technology different from the first wireless technology.
The network device according to claim 1, wherein before providing the specific eSIM to the mobile terminal, the processor obtains the specific eSIM from an eSIM intermediary with which the network device communicates.
It may be determined that the mobile terminal does not possess the particular eSIM:
Analyzing profile information associated with the mobile terminal to identify one or more eSIMs stored locally by the mobile terminal;
The network device according to claim 1, comprising: determining that the particular eSIM is not included in the one or more eSIMs.
The network device according to claim 1, wherein the processor notifies a provider (second provider) of the second wireless network that the particular eSIM is to be provided to the mobile terminal.
While notifying the second provider, the processor updates a credit record to reflect that the particular eSIM has been provided to the mobile terminal, the credit record being associated with the first wireless network The network device according to claim 6, enabling the following providers (first provider) and the second provider to track the movement of the mobile terminal between the first wireless network and the second wireless network.
A method for enabling a mobile terminal to move between a first wireless network and a second wireless network, comprising:
Receiving from the mobile terminal a notification that the mobile terminal is present at the end of the first wireless network;
A process of identifying that the mobile terminal is within the coverage of the second wireless network;
The mobile terminal is moved to a specific electronic subscriber identity module (eSIM) that allows it to be authenticated in the second wireless network and consume services provided via the second wireless network. A process of determining whether the terminal is owned or not;
When the mobile terminal does not possess the specific eSIM,
Providing the particular eSIM to the mobile terminal;
Processing the mobile terminal to be authenticated in the second wireless network using the particular eSIM;
The method according to claim 8, further comprising: disconnecting the mobile terminal from the first wireless network.
The method according to claim 8, wherein the second wireless network is based on a second wireless technology different from the first wireless technology.
The method according to claim 8, wherein when the mobile terminal does not possess the particular eSIM, the particular eSIM is acquired from an eSIM intermediary managing the particular eSIM.
The process of determining whether the mobile terminal holds the specific eSIM is
9. The method of claim 8, comprising determining whether the particular eSIM is included in the one or more eSIMs.
A process of notifying a provider (second provider) of the second wireless network that the specific eSIM is to be provided to the mobile terminal when the mobile terminal does not possess the specific eSIM The method of claim 8, further comprising:
The system further includes a process of notifying the second provider and updating a credit record to reflect that the specific eSIM has been provided to the mobile terminal, the credit record being a provider of the first wireless network The method according to claim 13, enabling the first provider and the second provider to track the movement of the mobile terminal between the first wireless network and the second wireless network.
A network device for enabling a mobile terminal to move between a plurality of wireless networks, comprising:
Receiving from the mobile terminal a notification present at an end of a primary wireless network to which the mobile terminal is connected;
Accessing a list of available wireless networks in which the location of the mobile terminal is coverage;
From the available wireless networks, select the roaming wireless network of the mobile terminal,
Determine whether the mobile terminal possesses a particular electronic subscriber identity module (eSIM) to be authenticated in the roaming wireless network, when the mobile terminal does not possess the particular eSIM;
Enabling the mobile terminal to be authenticated in the roaming wireless network using the particular eSIM,
Network device with a processor.
The network device according to claim 15, wherein the processor disconnects the mobile terminal from the primary radio network after providing the specific eSIM.
The network device according to claim 15, wherein when the mobile terminal does not possess the specific eSIM, the processor acquires the specific eSIM from an eSIM intermediary managing the specific eSIM.
It may be determined whether the mobile terminal possesses the specific eSIM:
The network device according to claim 15, comprising determining whether the particular eSIM is included in the one or more eSIMs.
When the mobile terminal does not possess the particular eSIM, the processor notifies a provider (second provider) of the roaming wireless network that the particular eSIM is to be provided to the mobile terminal. The network device according to claim 15.
While notifying the second provider, the processor updates a credit record to reflect that the particular eSIM has been provided to the mobile terminal, the credit record being a provider of the primary wireless network 20. The network apparatus according to claim 19, enabling (the first provider) and the second provider to track the movement of the mobile terminal between the primary wireless network and the roaming wireless network.
JP2015188550A 2010-10-28 2015-09-25 Method and apparatus for access control client assisted roaming Active JP6513539B2 (en)
JP2013214763 Division 2011-10-28
JP2016001926A JP2016001926A (en) 2016-01-07
JP6513539B2 true JP6513539B2 (en) 2019-05-15
JP2015188550A Active JP6513539B2 (en) 2010-10-28 2015-09-25 Method and apparatus for access control client assisted roaming
US (3) US20120108206A1 (en)
CN (2) CN105577698B (en)
US9549366B2 (en) * 2011-07-01 2017-01-17 Nokie Technologies Oy Method and apparatus for providing network access to a connecting apparatus
EP2813100A2 (en) 2012-02-07 2014-12-17 Apple Inc. Network assisted fraud detection apparatus and methods
CN103493541B (en) * 2012-08-24 2017-04-26 华为终端有限公司 Method and terminal for switching operator network
KR102072592B1 (en) * 2012-09-24 2020-02-03 삼성전자 주식회사 METHOD FOR MANAGING IDENTIFIER OF eUICC AND APPARATUS FOR PERFORMING OF THE SAME
CN103518401B (en) 2012-10-31 2017-06-27 华为终端有限公司 Method for switching network and equipment
EP2954659A1 (en) * 2013-02-05 2015-12-16 Knowroaming Ltd Method and device for authenticating a mobile station on an alternative communications network
WO2015029269A1 (en) * 2013-11-19 2015-03-05 株式会社小松製作所 Communication management system and communication management method
US9894601B2 (en) * 2015-08-18 2018-02-13 Ford Global Technologies, Llc System and method for dynamic wireless carrier swap system
FR3044856B1 (en) * 2015-12-03 2018-05-25 Euro-Information - Europeenne De Traitement De L'information Method of processing the selection of a mobile cellular radio communication network and the localization thereof by a mobile terminal
CN105873013B (en) * 2016-03-25 2019-10-11 宇龙计算机通信科技(深圳)有限公司 A kind of operator's selection method, device and mobile terminal based on e-SIM card
CN105873143A (en) * 2016-05-26 2016-08-17 努比亚技术有限公司 Network switching device and method
CN106102111A (en) * 2016-05-31 2016-11-09 宇龙计算机通信科技(深圳)有限公司 A kind of information interacting method, mobile terminal and car-mounted terminal
EP3276992B1 (en) 2016-07-29 2018-12-12 Deutsche Telekom AG Control server in a communication network
US10548037B2 (en) 2016-08-26 2020-01-28 Allen-Vanguard Corporation System and method for cellular network identification
EP3313111B1 (en) * 2016-10-21 2019-11-20 Swisscom AG Communication network initiated operator domain subscription switching
US10645665B2 (en) 2017-08-08 2020-05-05 T-Mobile Usa, Inc. Profile management for provisioning access to an alternative service provider
CN107959951A (en) * 2017-12-15 2018-04-24 恒宝股份有限公司 ESIM cards, automatic switchover eSIM cards configuration file method and system
WO2019139510A1 (en) * 2018-01-12 2019-07-18 Telefonaktiebolaget Lm Ericsson (Publ) Methods and apparatus for roaming between wireless communications networks
WO2019179925A1 (en) * 2018-03-22 2019-09-26 British Telecommunications Public Limited Company Wireless communication network authentication
JP3161599B2 (en) * 1998-07-10 2001-04-25 日本電気株式会社 Mobile phone system
CN100574496C (en) * 2003-06-27 2009-12-23 甲骨文国际公司 Roaming between different access mechanism and network technology
AT399444T (en) * 2004-08-06 2008-07-15 Research In Motion Ltd Method and system for radio service provision by means of a sim.
2011-10-28 CN CN201610111645.1A patent/CN105577698B/en active IP Right Grant
2015-09-25 JP JP2015188550A patent/JP6513539B2/en active Active
2017-04-20 US US15/492,980 patent/US20170223535A1/en not_active Abandoned
2019-10-07 US US16/595,338 patent/US20200037161A1/en active Pending
US20200037161A1 (en) 2020-01-30
CN105577698B (en) 2019-08-13
US20190274036A1 (en) 2019-09-05 Automated Credential Porting for Mobile Devices
US20150004955A1 (en) 2015-01-01 Methods and apparatus for automated communications forwarding
Ref document number: 6513539