Simulacrum of physical security device and methods

• US 10,149,144 B2
• Filed: 07/30/2015
• Issued: 12/04/2018
• Est. Priority Date: 11/04/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V., Hauck, Jerrold Von
• Primary Examiner(s): Kim, Tae K
• Application Number:
  US14/814,484
• Publication Number:
  US 20160044493A1
• Time in Patent Office: 1,223 Days
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Described herein is a simulacrum security device and methods. In one embodiment, a simulacrum or likeness of a physical security device is provided for use in conjunction with a software emulation of the security device. In one implementation, a “faux SIM card” is provided that does not contain Subscriber Identification Module (SIM) information itself, but instead enables a user to download Electronic SIM (eSIM) information (e.g., from a network or eSIM server) which is loaded into a software emulation of a Universal Integrated Circuit Card (UICC) device. The faux card is printed with an activation code, scan pattern, or other activation or access information. The subscriber purchases the faux card, and enters the activation code into a device; the entered activation code enables the device to log onto a network, and download the appropriate eSIM data. Delivery of eSIM information as enabled by the faux card addresses deficiencies in existing SIM distribution schemes, provides users with an enhanced perception of security, and further addresses various legal requirements.

Claims

1. A method for provisioning electronic Subscriber Identity Modules (eSIMs) to mobile devices, the method comprising, at an eSIM provisioning server:

receiving, from a mobile device, a request to perform an initial provisioning process, wherein;

(i) the request includes a unique identifier that is locally accessed by the mobile device from an apparatus that is physically separate and distinct from the mobile device, and

(ii) the unique identifier is pre-associated with one or more eSIMs in a collection of eSIMs managed by the eSIM provisioning server, wherein the unique identifier is assigned to the apparatus in association with an establishment of the one or more eSIMs;

obtaining a particular eSIM from the one or more eSIMs, wherein the particular eSIM is associated with a Mobile Network Operator (MNO); and

providing the particular eSIM to the mobile device, wherein the mobile device stores the particular eSIM into a secure element.

2. The method of claim 1, wherein the apparatus is a simulacrum of an identity module with which the mobile device is configured to interface.

3. The method of claim 2, wherein the simulacrum is a faux subscriber identity module (SIM) card.

4. The method of claim 3, wherein:

the faux SIM card stores the unique identifier in a non-volatile memory that is included in the faux SIM card, and

the non-volatile memory is locally accessible by the mobile device.

5. The method of claim 1, wherein the apparatus is a smart card that includes a Radio Frequency Identification (RFID) component that enables the mobile device to locally access the unique identifier.

6. The method of claim 5, wherein a value of the unique identifier is based on a current time.

7. The method of claim 1, wherein:

the apparatus is a card onto which the unique identifier is imprinted, and

the unique identifier is imprinted in a manner that enables the mobile device to locally access the unique identifier.

8. A mobile device, comprising:

a component for locally accessing a unique identifier associated with an apparatus that is physically separate and distinct form the mobile device, wherein the unique identifier is pre-associated with one or more electronic Subscriber Identity Modules (eSIMs) managed by an eSIM provisioning server, and the unique identifier is assigned to the apparatus in association with an establishment of the one or more eSIMs;

a secure element for storing eSIMs; and

a processor configured to cause the mobile device to;

locally access the unique identifier associated with the apparatus;

issue a request to the eSIM provisioning server to perform an initial provisioning process, wherein the request includes the unique identifier and enables the eSIM provisioning server to select an eSIM from the one or more eSIMs;

receive the eSIM from the eSIM provisioning server; and

store the eSIM into the secure element.

9. The mobile device of claim 8, wherein the apparatus is a faux subscriber identity module (SIM) card.

10. The mobile device of claim 8, wherein a value of the unique identifier is based on a current time.

11. The mobile device of claim 8, wherein a value of the unique identifier changes in correlation to a number of times that the unique identifier has been locally accessed by the mobile device.

12. The mobile device of claim 8, wherein the processor is further configured to cause the mobile device to:

use the eSIM to access services provided by a Mobile Network Operator (MNO) associated with the eSIM.

13. The mobile device of claim 8, wherein the apparatus is a smart card that stores the unique identifier.

14. The mobile device of claim 13, wherein the smart card includes a Radio Frequency Identification (RFID) component that enables the mobile device to locally access the unique identifier.

15. The mobile device of claim 8, wherein:

the apparatus is a card onto which the unique identifier is imprinted, and

the unique identifier is imprinted in a manner that enables the mobile device to locally access the unique identifier.

16. An electronic Subscriber Identity Module (eSIM) provisioning server, comprising:

a storage device configured to manage a plurality of eSIMs; and

a processor configured to cause the eSIM provisioning server to;

receive, from a mobile device, a request to perform an initial provisioning process, wherein;

(i) the request includes a unique identifier that is locally accessed by the mobile device from an apparatus that is physically separate and distinct from the mobile device, and

(ii) the unique identifier is pre-associated with one or more eSIMs in a collection of eSIMs managed by the eSIM provisioning server, wherein the unique identifier is assigned to the apparatus in association with an establishment of the one or more eSIMs;

establish a secure session with the mobile device; and

provide, to the mobile device, an eSIM selected from the one or more eSIMs, wherein the mobile device stores the eSIM into a secure element.

17. The eSIM provisioning server of claim 16, wherein the eSIM enables the mobile device to access services provided by a Mobile Network Operator (MNO) associated with the eSIM.

18. The eSIM provisioning server of claim 16, wherein:

the apparatus is a simulacrum of a Subscriber Identity Module (SIM) card that includes a non-volatile memory, and

the unique identifier is stored within the non-volatile memory.

19. The eSIM provisioning server of claim 18, wherein a value of the unique identifier is based on a current time.

20. The eSIM provisioning server of claim 18, wherein a value of the unique identifier changes in correlation to a number of times that the unique identifier has been accessed.