Virtual SIM card cloud platform

• US 10,349,272 B2
• Filed: 12/30/2011
• Issued: 07/09/2019
• Est. Priority Date: 12/30/2011
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Zhao, Sky, Smeets, Bernard
• Primary Examiner(s): Hu, Jinsong
• Assistant Examiner(s): Louis-Fils, Nicole M
• Application Number:
  US14/369,972
• Publication Number:
  US 20150017950A1
• Time in Patent Office: 2,748 Days
• Field of Search: 455411, 4554121, 455410, 4554143, 455425, 726 2, 726 4, 726 9, 726 17, 726 20, 726 21
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

A method of obtaining a virtual SIM for a mobile device comprises sending, to a TTA for authentication, a request for a virtual SIM for a mobile device associated with the TTA. The authenticated request is sent from the mobile device to an NRS application (or to a combined NRS/PCSS application). The mobile device subsequently receives information identifying a PCSS application (or a combined NRS/PCSS application) in a computing environment that provides a virtual SIM for the mobile device.

Claims

1. A method in a mobile device for obtaining a virtual SIM (subscriber identity module) for the mobile device, the method comprising:

sending, from a CP (client package) application in the mobile device to a TTA (terminal trust anchor) embedded in the mobile device, a first request for a virtual SIM for the mobile device;

obtaining by the CP, from the TTA, an authentication response in response to the first request, the authentication response comprising TTA authentication information, wherein the TTA authentication information comprises a token provided by the TTA, the token comprising digitally signed data from the TTA;

sending by the CP a second request to an NRS (number registration service) application, wherein the second request comprises the TTA authentication information and wherein the NRS application generates for the mobile device a mobile number, an international mobile subscriber identity (IMSI) number, and network access credentials; and

receiving, by the CP of the mobile device, virtual SIM information, the virtual SIM information identifying a PCSS (private cloud storage service) application in a computing environment that provides the virtual SIM for the mobile device.

2. The method as claimed in claim 1, further comprising verifying, at the mobile device, the received virtual SIM information.

3. The method as claimed in claim 2, wherein verifying the received virtual SIM information comprises comparing a token received with the virtual SIM information with a token received from the NRS application.

4. The method as claimed in claim 1, further comprising caching access information for the virtual SIM at the mobile device.

22. A non-transitory computer-readable medium containing instructions that, when executed by a processor, cause the processor to carry out a method as defined in claim 1.

5. A method of generating a virtual SIM (subscriber identity module) for a mobile device, the method comprising:

receiving, at a PCSS (private cloud storage service) application in a computing environment that provides a virtual SIM for the mobile device, a request from a NRS (number registration service) application for the virtual SIM for the mobile device, the request including information identifying a TTA (terminal trust anchor) embedded in the mobile device, an international mobile subscriber identity (IMSI) number identifying the mobile device, network access credentials for the mobile device, and a mobile number for the mobile device;

generating, by the PCSS application, virtual SIM information for the mobile device;

allocating, by the PCSS application, storage space for the mobile device in the application in the computing environment;

storing, by the PCSS application, the mobile number in the allocated storage space; and

sending, by the PCSS application, the virtual SIM information, the mobile number, and the network access credentials to the mobile device, wherein sending the virtual SIM information to the mobile device includes sending a token to the mobile device, wherein the token comprises digitally signed data and is one of a token previously sent to the mobile device and a token derived from a token previously sent to the mobile device.

6. A mobile device configured to execute a client package (CP) application for obtaining a virtual SIM (subscriber identity module) for the mobile device, the mobile device comprising a processor, a TTA (terminal trust anchor), and memory storing programming instructions that, when executed by the processor, establish the CP application, which comprises:

a module for;

sending, to the TTA, a first request for a virtual SIM for the mobile device, the TTA being associated with the mobile device, and

obtaining, from the TTA, an authentication response in response to the first request, the authentication response comprising TTA authentication information, wherein the TTA authentication information comprises a token provided by the TTA, the token comprising digitally signed data from the TTA;

a first interface for sending a second request for a virtual SIM for the mobile device to an NRS (number registration service) application, wherein the second request comprises the TTA authentication information and wherein the NRS application generates for the mobile device a mobile number, an international mobile subscriber identity (IMSI) number, and network access credentials, and the request being authenticated by the TTA; and

a second interface for receiving, at the mobile device, virtual SIM information which identifies a PCSS (private cloud storage service) application in a computing environment that provides the virtual SIM for the mobile device.

7. The mobile device as claimed in claim 6, and further comprising a module for verifying the received virtual SIM information.

8. The mobile device as claimed in claim 7, wherein the module is adapted to compare a token received with the virtual SIM information with a token received from the NRS application.

9. The mobile device as claimed in claim 6, wherein the first interface is the second interface.

10. The mobile device as claimed in claim 6, wherein the application further comprises a cache module.

11. A telecommunications network entity configured to execute a PCSS (private cloud storage service) application for generating a virtual SIM (subscriber identity module) for a mobile device in a computing environment, the network entity comprising a processor and memory storing programming instructions that, when executed by the processor, establish the PCSS application, which comprises:

a virtual SIM card generation module for generating virtual SIM information for the mobile device in response to receiving a request from a NRS (number registration service) application for a virtual SIM for the mobile device, the request including information identifying a TTA (terminal trust anchor) embedded in the mobile device, an international mobile subscriber identity (IMSI) number identifying the mobile device, network access credentials for the mobile device, and a mobile number for the mobile device;

a virtual SIM module for allocating storage space for the mobile device, wherein the mobile number is stored in the allocated storage space; and

an interface for sending the virtual SIM information, the mobile number, and the network access credentials to the mobile device, wherein sending the virtual SIM information to the mobile device includes sending a token to the mobile device, wherein the token comprises digitally signed data and is one of a token previously sent to the mobile device and a token derived from a token previously sent to the mobile device.

12. The telecommunications network entity as claimed in claim 11, wherein the virtual SIM card generation module is adapted to verify security information included in the request for a virtual SIM for the mobile device before generating the virtual SIM information for the mobile device.

13. A method of processing a request for a virtual SIM for a mobile device, the method comprising:

receiving, at a NRS (number registration service) application in a computing environment, a request for a virtual SIM for a mobile device, the request including information verified by a TTA (terminal trust anchor) embedded in the mobile device, wherein the information verified by the TTA comprises a token provided by the TTA, the token comprising digitally signed data by the TTA, wherein the virtual SIM is used to enable a user of the mobile device to make and receive calls;

verifying, at the NRS application, the request;

generating, by the NRS application, a mobile number for the device, an international mobile subscriber identity (IMSI) number for the device, and network access credentials for the device; and

forwarding to a PCSS (private cloud storage service) application the request and information identifying the TTA embedded in the mobile device, wherein the PCSS application provides the virtual SIM for the mobile device.

14. The method as claimed in claim 13, wherein the information identifying the TTA of the mobile device comprises one of the information verified by a TTA received in the request for the virtual SIM and information derived from the information verified by a TTA received in the request for the virtual SIM.

15. The method as claimed in claim 13, further comprising selecting a network operator application based on information in the request identifying a preferred network operator, and forwarding the request to the selected network operator application.

16. The method as claimed in claim 13, further comprising, before receiving the request for a virtual SIM for the mobile device, provisioning a client application for the mobile device in response to a request from the mobile device.

17. A telecommunications network entity configured to execute a NRS (number registration service) application for processing a request for a virtual SIM (subscriber identity module) for a mobile device in a computing environment, the network entity comprising a processor and memory storing programming instructions that, when executed by the processor, establish the NRS application, which comprises:

a first interface for receiving a request for a virtual SIM for a mobile device, the request including information verified by a TTA (terminal trust anchor) embedded in the mobile device, wherein the information verified by the TTA comprises a token provided by the TTA, the token comprising digitally signed data by the TTA, wherein the virtual SIM is used to enable a user of the mobile device to make and receive calls;

a TTA authentication module for verifying the request;

a module for generating a mobile number for the mobile device, an international mobile subscriber identity (IMSI) number for the device, and network access credentials for the device; and

a second interface for forwarding to a PCSS (private cloud storage service) application the request and information identifying the TTA embedded in the mobile device, wherein the PCSS application provides the virtual SIM for the mobile device.

18. The telecommunications network entity as claimed in claim 17, wherein the first interface is different from the second interface.

19. The telecommunications network entity as claimed in claim 17, wherein the application further comprises a client package (CP) provisioning module for provisioning a client application for the mobile device in response to a request from the mobile device.

20. The telecommunications network entity as claimed in claim 17, wherein the application further comprises one or more network operator modules for generating network access data in response to the request for a virtual SIM for the mobile device.

21. The telecommunications network entity as claimed in claim 20, wherein the first interface is adapted to forward the request for a virtual SIM for the mobile device to a selected one of the network operator modules based on information in the request identifying a preferred network operator.