UE-based network subscription management

• US 10,334,432 B2
• Filed: 12/20/2017
• Issued: 06/25/2019
• Est. Priority Date: 07/16/2014
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Lee, Soo Bum, Horn, Gavin Bernard, Palanigounder, Anand
• Primary Examiner(s): Singh, Hirdepal
• Application Number:
  US15/849,084
• Publication Number:
  US 20180115893A1
• Time in Patent Office: 552 Days
• Field of Search: 455411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 12/76 Group identity
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Methods, systems, and devices for wireless communication are described. A user equipment (UE) may obtain identification information for a device and may assist in establishing credentials by which the device accesses a wireless network. The UE may establish a connection with the wireless network using its own credentials, and register the device to access the wireless network by associating the identification information for the device with the credentials of the UE. The UE may receive or establish credentials by which the device accesses the wireless network and may communicate these credentials to the device over a local connection. In some cases, the UE may authenticate the device'"'"'s identification information to determine whether the device is allowed to be registered with the wireless network.

Claims

1. A method of wireless communication performed by a user equipment (UE), comprising:

obtaining identification information for a device;

establishing a connection with a cellular network based on a network credential of the UE;

transmitting to the cellular network the identification information for the device; and

registering the device for access to the cellular network under a subscription associated with the UE with a network credential for the device that is different from the network credential of the UE, the registering comprising associating the identification information for the device with the network credential of the UE.

2. The method of claim 1, further comprising:

establishing a local communication link with the device, wherein the identification information for the device is obtained over the local communication link.

3. The method of claim 2, further comprising:

sending the network credential for the device over the local communication link.

4. The method of claim 3, wherein the network credential for the device comprises at least one of:

a subscription identity associated with the network credential of the UE or a network identifier, or any combination thereof.

5. The method of claim 4, wherein the subscription identity comprises at least one of:

a globally unique temporary identity (GUTI) or an international mobile subscriber identity (IMSI) of the UE, or any combination thereof, and

wherein the network identifier comprises at least one of;

a public key certificate of the cellular network, a public key of the cellular network, or a public land mobile network (PLMN) identity, or any combination thereof.

6. The method of claim 1, wherein the network credential for the device comprises at least one of:

a shared key provisioned by a device manufacturer or a private-public key pair provisioned by a device manufacturer, or any combination thereof.

7. The method of claim 1, further comprising:

authenticating the identification information for the device by the UE; and

determining whether the device is allowed to be registered with the cellular network.

8. The method of claim 7, further comprising:

sending an authentication request to a device authentication server.

9. The method of claim 8, further comprising:

receiving an authentication response from the device authentication server, wherein authenticating the identification information for the device is based on the authentication response.

10. The method of claim 1, further comprising:

sending the identification information to a home subscriber server (HSS) of the UE via the connection with the cellular network.

11. The method of claim 1, wherein the obtaining the identification information for the device comprises at least one of:

scanning a Quick Response (QR) code, utilizing a wireless personal area network (WPAN) connection, utilizing a universal serial bus (USB) link, utilizing a near field communication (NFC) link, utilizing a Wireless Local Area Network (WLAN) link, or accessing a uniform resource locator (URL), or any combination thereof.

12. The method of claim 1, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a URL, a shared key of the device, a public key of the device, or a public key certificate of the device, or any combination thereof.

13. The method of claim 1, further comprising:

providing the cellular network with access restrictions for the device.

14. The method of claim 13, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

15. The method of claim 1, wherein registering the device comprises:

sending a registration request for the device to the cellular network via the connection.

16. The method of claim 15, further comprising:

receiving a registration acknowledgment responsive to the registration request from the cellular network via the connection.

17. The method of claim 1, wherein the identification information for the device is of a different kind than the network credential of the UE.

18. The method of claim 1, wherein the network credential of the UE is maintained in a universal integrated circuit card (UICC) of the UE or based on information obtained from a subscriber identity module (SIM) of the UE.

19. The method of claim 1, wherein the network credential of the UE is provisioned by an operator of the cellular network and the identification information for the device is established by a manufacturer of the device.

20. A method of wireless communication performed by a device, comprising:

establishing a connection with a user equipment (UE) over a local communication link;

receiving credentials for accessing a cellular network from the UE over the local communication link, wherein the received credentials for accessing the cellular network are associated with a subscription of the UE, wherein the association with the subscription is based at least in part on an association between identification information of the device transmitted to the cellular network by the UE and a network credential of the UE, and wherein the received credentials are different from the network credential of the UE; and

accessing the cellular network utilizing the received credentials.

21. An apparatus for wireless communication, comprising:

means for obtaining identification information for a device;

means for establishing a connection with a cellular network based on a network credential of the apparatus;

means for transmitting to the cellular network the identification information for the device; and

means for registering the device for access to the cellular network under a subscription associated with the apparatus with a network credential for the device that is different from the network credential of the apparatus, the registering comprising associating the identification information for the device with the network credential of the apparatus.

22. The apparatus of claim 21, further comprising:

means for establishing a local communication link with the device, wherein the means for obtaining are operative to obtain the identification information over the local communication link.

23. The apparatus of claim 22, further comprising:

means for sending credentials for accessing the cellular network to the device over the local communication link.

24. The apparatus of claim 23, wherein the credentials for accessing the cellular network comprise at least one of:

a subscription identity associated with the network credential of the apparatus or a network identifier, or any combination thereof.

25. The apparatus of claim 24, wherein the subscription identity comprises at least one of:

a globally unique temporary identity (GUTI) or an international mobile subscriber identity (IMSI) of the apparatus, or any combination thereof, and

wherein the network identifier comprises at least one of;

a public key certificate of the cellular network, a public key of the cellular network, or a public land mobile network (PLMN) identity, or any combination thereof.

26. The apparatus of claim 21, wherein the network credential for the device comprises at least one of:

a shared key provisioned by a device manufacturer or a private-public key pair provisioned by a device manufacturer, or any combination thereof.

27. The apparatus of claim 21, further comprising:

means for authenticating the identification information for the device; and

means for determining whether the device is allowed to be registered with the cellular network.

28. The apparatus of claim 27, further comprising:

means for sending an authentication request to a device authentication server.

29. The apparatus of claim 28, further comprising:

means for receiving an authentication response from the device authentication server, wherein the means for authenticating are operative to authenticate based on the authentication response.

30. The apparatus of claim 21, further comprising:

means for sending the identification information to a home subscriber server (HSS) of the apparatus via the connection with the cellular network.

31. The apparatus of claim 21, wherein the means for obtaining the identification information comprise at least one of:

means for scanning a Quick Response (QR) code, means for utilizing a wireless personal area network (WPAN) connection, means for utilizing a universal serial bus (USB) link, means for utilizing a near field communication (NFC) link, means for utilizing a Wireless Local Area Network (WLAN) link, or means for accessing a uniform resource locator (URL), or any combination thereof.

32. The apparatus of claim 21, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a URL, a shared key of the device, a public key of the device, or a public key certificate of the device, or any combination thereof.

33. The apparatus of claim 21, further comprising:

means for providing the cellular network with access restrictions for the device.

34. The apparatus of claim 33, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

35. The apparatus of claim 21, wherein the means for registering the device comprise:

means for sending a registration request for the device to the cellular network via the connection.

36. The apparatus of claim 35, further comprising:

means for receiving a registration acknowledgment responsive to the registration request from the cellular network via the connection.

37. The apparatus of claim 21, wherein the identification information for the device is of a different kind than the network credential of the apparatus.

38. The apparatus of claim 21, wherein the network credential of the apparatus is maintained in a universal integrated circuit card (UICC) or based on information obtained from a subscriber identity module (SIM).

39. The apparatus of claim 21, wherein the network credential of the apparatus is provisioned by an operator of the cellular network and the identification information for the device is established by a manufacturer of the device.

40. An apparatus for wireless communication, comprising:

means for establishing a connection with a user equipment (UE) over a local communication link;

means for receiving credentials for accessing a cellular network from the UE over the local communication link, wherein the received credentials for accessing the cellular network are associated with a subscription of the apparatus, wherein the association with the subscription is based at least in part on an association between identification information of the apparatus transmitted to the cellular network by the UE and a network credential of the UE, and wherein the received credentials are different from the network credential of the UE; and

means for accessing the cellular network utilizing the received credentials.

41. An apparatus for wireless communication, comprising:

at least one processor;

memory in electronic communication with the at least one processor; and

instructions stored in the memory and operable, when executed by the at least one processor, to cause the apparatus to;

obtain identification information for a device;

establish a connection with a cellular network based on a network credential of the apparatus;

transmit to the cellular network the identification information for the device; and

register the device for access to the cellular network under a subscription associated with the apparatus with a network credential for the device that is different from the network credential of the apparatus by associating the identification information for the device with the network credential of the apparatus.

42. The apparatus of claim 41, the instructions being operable to cause the apparatus to:

establish a local communication link with the device; and

obtain the identification information for the device over the local communication link.

43. The apparatus of claim 42, the instructions being operable to cause the apparatus to:

send the network credential for the device over the local communication link.

44. The apparatus of claim 43, wherein the network credential for the device comprises at least one of:

a subscription identity associated with the network credential of the apparatus or a network identifier, or any combination thereof.

45. The apparatus of claim 44, wherein the subscription identity comprises at least one of:

a globally unique temporary identity (GUTI) or an international mobile subscriber identity (IMSI) of the apparatus, or any combination thereof, and

wherein the network identifier comprises at least one of;

a public key certificate of the cellular network, a public key of the cellular network, or a public land mobile network (PLMN) identity, or any combination thereof.

46. The apparatus of claim 41, wherein the network credential for the device comprises at least one of:

a shared key provisioned by a device manufacturer or a private-public key pair provisioned by a device manufacturer, or any combination thereof.

47. The apparatus of claim 41, the instructions being operable to cause the apparatus to:

authenticate the identification information for the device by the apparatus; and

determine whether the device is allowed to be registered with the cellular network.

48. The apparatus of claim 47, the instructions being operable to cause the apparatus to:

send an authentication request to a device authentication server.

49. The apparatus of claim 48, the instructions being operable to cause the apparatus to:

receive an authentication response from the device authentication server; and

authenticate the identification information for the device based on the authentication response.

50. The apparatus of claim 41, the instructions being operable to cause the apparatus to:

send the identification information to a home subscriber server (HSS) of the apparatus via the connection with the cellular network.

51. The apparatus of claim 41, wherein the instructions to obtain the identification information comprise instructions operable to cause the apparatus to:

scan a Quick Response (QR) code, utilize a wireless personal area network (WPAN) connection, utilize a universal serial bus (USB) link, utilize a near field communication (NFC) link, utilize a Wireless Local Area Network (WLAN) link, or access a uniform resource locator (URL), or any combination thereof.

52. The apparatus of claim 41, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a URL, a shared key of the device, a public key of the device, or a public key certificate of the device, or any combination thereof.

53. The apparatus of claim 41, the instructions being operable to cause the apparatus to:

provide the cellular network with access restrictions for the device.

54. The apparatus of claim 53, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

55. The apparatus of claim 41, the instructions being operable to cause the apparatus to:

send a registration request for the device to the cellular network via the connection.

56. The apparatus of claim 55, the instructions being operable to cause the apparatus to:

receive a registration acknowledgment responsive to the registration request from the cellular network via the connection.

57. The apparatus of claim 41, wherein the identification information for the device is of a different kind than the network credential of the apparatus.

58. The apparatus of claim 41, wherein the network credential of the apparatus is maintained in a universal integrated circuit card (UICC) of the apparatus or based on information obtained from a subscriber identity module (SIM) of the apparatus.

59. The apparatus of claim 41, wherein the network credential of the apparatus is provisioned by an operator of the cellular network and the identification information for the device is established by a manufacturer of the device.

60. An apparatus for wireless communication, comprising:

at least one processor;

memory in electronic communication with the at least one processor; and

instructions stored in the memory and operable, when executed by the at least one processor, to cause the apparatus to;

establish a connection with a user equipment (UE) over a local communication link;

receive credentials for accessing a cellular network from the UE over the local communication link, wherein the received credentials for accessing the cellular network are associated with a subscription of the UE, wherein the association with the subscription is based at least in part on an association between identification information of the apparatus transmitted to the cellular network by the UE and a network credential of the UE, and wherein the received credentials are different from the network credential of the UE; and

access the cellular network utilizing the received credentials.

61. A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable to:

obtain identification information for a device;

establish a connection with a cellular network based on a network credential of a user equipment (UE);

transmit to the cellular network the identification information for the device; and

register the device for access to the cellular network under a subscription associated with the UE with a network credential for the device that is different from the network credential of the UE by associating the identification information for the device with the network credential of the UE.

62. The non-transitory computer-readable medium of claim 61, the instructions being further executable to:

establish a local communication link with the device, and

obtain the identification information for the device over the local communication link.

63. The non-transitory computer-readable medium of claim 62, the instructions being further executable to:

send credentials for accessing the cellular network to the device over the local communication link.

64. The non-transitory computer-readable medium of claim 61, the instructions being further executable to:

authenticate the identification information for the device by the UE; and

determine whether the device is allowed to be registered with the cellular network.

65. A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable to:

establish a connection with a user equipment (UE) over a local communication link;

receive credentials for accessing a cellular network from the UE over the local communication link, wherein the received credentials for accessing the cellular network are associated with a subscription of the UE, wherein the association with the subscription is based at least in part on an association between identification information of a device transmitted to the cellular network by the UE and a network credential of the UE, and wherein the received credentials are different from the network credential of the UE; and

access the cellular network utilizing the received credentials.