Mobile identification method based on SIM card and device-related parameters

• US 10,390,226 B1
• Filed: 03/22/2018
• Issued: 08/20/2019
• Est. Priority Date: 03/08/2018
• Status: Active Grant

• Current Assignee: Benefit Vantage Limited
• Original Assignee: Benefit Vantage Limited
• Inventors: Cheung, Harry Lup Sun
• Primary Examiner(s): Zewdu, Meless N
• Application Number:
  US15/928,348
• Publication Number:
  US 20190281454A1
• Time in Patent Office: 516 Days
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/4588 containing mobile subscriber information, e.g. home subscriber server [HSS]
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data

Abstract

A new method of mobile user identification by third parties based on the SIM card and device-related parameters available in telecommunication network. Applicable to a wide scope of different industry segments: Fintech companies, digital merchants, e-government solutions and enterprises, provides enhanced platform security features and improved end users experience and transaction processing in interactions with those platforms.

Claims

1. A method of a mobile user identification and authentication based on Subscriber Identity Module (SIM) card or device-related parameters available in a telecommunication network, comprising the following steps:

transmitting a Mobile ID request to an external IPification server from an application or web development platform once the mobile user attempts to interact with the application or access a website;

communicating from the IPification server up to six Mobile ID queries as Application Programing Interface (API) calls to a Mobile Operator server, wherein each of the up to six Mobile ID queries is based on one of the following SIM card or device-related input parameters, comprising;

International Mobile Subscriber Identity (IMSI), Integrated Circuit Card Identifier (ICCID), International Mobile Equipment Identity (IMEI), Mobile Station International Subscriber Directory Number (MSISDN), Private IP address and Public IP address and Port;

communicating a Mobile ID for each of the up to six Mobile ID queries back to the IPification server from the Mobile Operator server, wherein each of the up to six Mobile IDs is generated in response to one of the up to six Mobile ID queries sent to the Mobile Operator server as the SIM card or device-related input parameters, and whereby each of the up to six Mobile IDs is a unique alphanumeric identifier of the mobile user being a subscriber of the mobile communication services provided by the Mobile Operator;

verifying via the IPification server whether all the up to six Mobile IDs obtained from the Mobile Operator server are identical, and depending on the verification result, reacting in two alternative ways;

if the verification result is positive, the IPification server provides the user'"'"'s single matched Mobile ID to the application or website developer thereby authenticating the mobile user and thus allowing the mobile user to interact with the application or access the website;

if the verification result is negative, the IPification server provides the application/website development platform with information about an unsuccessful authentication of the user, preventing the mobile user from interacting with the application or accessing the website.

2. The method according to claim 1, wherein the communication between the IPification server and the Mobile Operator server uses at least one of the following security mechanisms:

Secure Sockets Layer/Hyper Text Transfer Protocol Secure (SSL/HTTPS), Web Services Security-Simple Object Access Protocol (WSS-SOAP), Virtual Private Network (VPN) and Public Key Infrastructure (PKI).

3. The method according to claim 1, further comprising masking the MSISDN and using the masked MSISDN as the SIM card/device related input parameter, wherein the MSISDN is masked using a hashing algorithm, which generates a unique alphanumeric reference of the specific mobile user to be the masked MSISDN.

4. The method according to claim 1, wherein the Mobile Operator network uses at least one of a Home Location Register (HLR), Gateway GPRS Support Node (GGSN)/Packet Data Network Gateway (P-GW) and Carrier-Grade NAT (Network Address Translation) (CGN).

5. The method according to claim 1, wherein the GGSN and the CGN resolve the Private IP address and combination of the Public IP address and Port into at least one of the up to six Mobile IDs, while the HLR is used to resolve IMSI, ICCID, IMEI and MSISDN into at least one of the up to six Mobile IDs.

6. The method according to claim 4, further comprising obtaining at least one of the up to six Mobile IDs in response to at least one of the up to six Mobile ID queries based on the Public IP the and Port by matching the Public IP and Port parameter with a corresponding Private IP parameter in a lookup table within the CGN component, and subsequently matching the resulting Private IP with a corresponding MSISDN parameter in a lookup table within the GGSN/P-GW, and finally transmitting such obtained MSISDN parameter as at least one of the up to six Mobile IDs back to the IPification server.

7. The method according to claim 4, wherein at least one of the up to six Mobile IDs is obtained in response to at least one of the up to six Mobile ID queries, based on Private IP by matching the Private IP parameter with a corresponding MSISDN parameter in a lookup table within the GGSN/P-GW component, and transmitting the obtained MSISDN parameter as at least one of the up to six Mobile IDs back to the IPification server.

8. The method according to claim 4, wherein the at least one of the up to six Mobile IDs is obtained in response to at least one of the up to six Mobile ID queries based on IMSI, ICCID and/or IMEI parameter by matching each of these parameters with a corresponding MSISDN parameter in a lookup table within the HLR component and transmitting the obtained MSISDN parameters as at least one of the up to six Mobile IDs back to the IPification server.