Service Provider Activation

• US 20110195751A1
• Filed: 04/15/2011
• Published: 08/11/2011
• Est. Priority Date: 09/01/2007
• Status: Active Grant

• Current Assignee: Brainerd Sathianathan, Dallas D.E. Atley, Jeffrey Bush, Jerry Hauck, Ronald Keryuan Huang
• Original Assignee: Brainerd Sathianathan, Dallas D.E. Atley, Jeffrey Bush, Jerry Hauck, Ronald Keryuan Huang
• Inventors: Huang, Ronald Keryuan, Atley, Dallas De, Bush, Jeffrey, Sathianathan, Brainerd, Hauck, Jerry
• Granted Patent: US 8,428,570 B2
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: H04B 1/3816 Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Systems and methods for activating a mobile device for use with a service provider are described. In one exemplary method, a mobile device having a currently inserted SIM card may be prepared for activation using a signing process in which an activation server generates a signed activation ticket that uniquely corresponds to the combination of the device and SIM card, and that is securely stored on the mobile device. In another exemplary method the mobile device may be activated in an activation process in which the device verifies an activation ticket against information specific to the device and SIM card, and initiates activation when the verification of the activation ticket is successful.

Claims

1. A machine implemented method of activating a mobile device, the method comprising:

issuing from a mobile device having a currently inserted SIM card an activation request, the activation request comprising data that uniquely identifies the device and data that uniquely identifies the currently inserted SIM card;

storing in the mobile device a signed activation record comprising the device data and the SIM card data, the activation record having been generated and signed by an activation server responding to the activation request;

verifying the activation record against the currently inserted SIM card; and

registering the device with a communications network after successfully verifying the activation record.

2. The method of claim 1, wherein the data that uniquely identifies the device includes a serial number of the device.

3. The method of claim 2, wherein the serial number of the device is the International Mobile Equipment Identifier (IMEI) encoded in the device.

4. The method of claim 1, wherein the data that uniquely identifies the device includes a hardware thumbprint of the device.

5. The method of claim 4, wherein the hardware thumbprint of the device is derived from at least one of a serial number of a baseband component in the device, a serial number of a memory component of the device, a serial number of the device, in combination with a random number.

6. The method of claim 1, wherein the data that uniquely identifies the SIM card includes a serial number of the SIM card.

7. The method of claim 6, wherein the serial number of the SIM card is the Integrated Circuit Card ID (ICCID) encoded on the SIM card.

8. The method of claim 1, wherein the data that uniquely identifies the SIM card includes a subscriber identifier associated with SIM card.

9. The method of claim 8, wherein the subscriber identifier associated with the SIM card is the International Mobile Subscriber Identifier (IMSI) that designates the subscriber authorized to use the SIM card.

10. The method of claim 1, wherein the activation record stored in the device further comprises an activation public key, the activation record having been signed by the activation server using an activation private key corresponding to the activation public key.

11. The method of claim 1, wherein verifying the activation record stored in the device further comprises decrypting a content of the activation record using a device obfuscation key that is derived from a hardware thumbprint of the device and a shared obfuscation key.

12. The method of claim 1, wherein verifying the activation record stored in the device further comprises validating an activation public key contained in the activation record.

13. The method of claim 12, wherein verifying the activation record stored in the device further comprises validating a signature of the activation record stored in the device using the validated activation public key.

14. The method of claim 1, wherein verifying the activation record stored in the device further comprises verifying that a maximum retry counter has not reached a maximum count.

15. The method of claim 1, further comprising incrementing a maximum retry counter when the activation record is not successfully verified.