Method and apparatus for control of a subscriber identity module in a data communication system

• US 6,934,391 B1
• Filed: 11/24/1999
• Issued: 08/23/2005
• Est. Priority Date: 06/04/1997
• Status: Expired due to Fees

• Current Assignee: Teliasonera Finland Oyj (Telia Company AB)
• Original Assignee: Sonera Oyj
• Inventors: Linkola, Janne, Blomberg, Olavi
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US09/449,134
• Time in Patent Office: 2,099 Days
• Field of Search: 713/156, 713/159, 713/160, 713/170, 713/171, 713/179, 713/200, 713/201, 709/318, 709/104.1, 709/206, 709/208, 709/223, 380/228, 380/233, 380/247, 380/270, 380/277, 380/281, 380/285, 380/28, 380/29, 380/30, 380/227, 380/229, 705/75, 455/410, 455/411, 455/433, 455/558
• US Class Current: 380/247
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

A method and apparatus for the control of a subscriber identity module (SIM) in a data communication system, preferably a mobile communication system. The data communication system includes first and second subscriber registers (HLR1, HLR2) for maintaining subscriber records defining a subscriber identity module registry, a short message transmission system (SMSC) for transmission of messages in the communication system, and a mobile station (MS) connected to the subscriber identity module (SIM) for use by a subscriber in effecting mobile communications through the data communication system. The subscriber identity module (SIM) stores therein data comprising a first subscriber code (IMSI1) and an encrypted code key (K_i) corresponding to a first subscription for the mobile station subscriber and associated with the subscriber identity module A record of data corresponding to the first subscription is created in the first subscriber register (HLR1) when the first subscription is opened, the record comprising a first subscription specific call number (MSISDNx), the encryption code key (K_i) and a subscriber identity code (IMSI1) for the mobile station subscriber. A second subscription for the mobile station subscriber and associated with the subscriber identity module (SIM) is opened; a record corresponding to the opened second subscription and comprising a second subscription-specific call number (MSISDN), a second subscriber identity code (IMSI1) and the encryption key (K_i) is created in the second subscriber register (HLR2); a message (SMS) is sent through the communication system directed to the first subscription and instructing that the data stored in the subscriber identity module be changed from data corresponding to the first subscription to data corresponding to the second subscription.

Claims

1. A method, for use in a mobile data communication system that includes:

first and second subscriber registers (HLR1, HLR2) for maintaining subscriber records;

a message transmission system (SMSC) for transmitting messages in the communication system; and

a mobile station (MS) for use by a subscriber in effecting mobile communications through said mobile data communication system

said method being for controlling a subscriber identity module (SIM) attached to said mobile station (MS), in which subscriber identity module (SIM) is stored subscription data comprising a first subscriber identity code (IMSI1) and an encryption code key (K_i) corresponding to a first subscription for the mobile station subscriber such that when said first subscription is opened for said mobile station subscriber, a record of data corresponding to said first subscription, with said record comprising;

a first subscription-specific call number (MSISDNx),

said encryption code key (K_i), and

said first subscriber identity code (IMSI1) for said mobile station subscriber, is created in said first subscriber register (HLR1);

said method comprising the steps of;

a.) opening a second subscription for said mobile station subscriber;

b.) creating in said second subscriber register (HLF2) a record of data corresponding to said opened second subscription, and comprising;

a second subscription-specific call number (MSISDN),

said encryption code key (K_i), and

a second subscriber identity code (IMSI2) for said mobile station subscriber;

c.) transmitting through said mobile data communication system to the mobile station (MS) a message (SMS) addressed to said first subscription-specific call number (MSISDNx), said message instructing to change said first subscriber identity code (IMSI1) comprised in said subscription data stored in said subscriber identity module (SIM) into said second subscriber identity code (IMSI2); and

d.) changing, at said subscriber identity module (SIM) attached to said mobile station (MS) and in response to receipt of said message (SMS), said first subscriber identity code (IMSI1) into said second subscriber identity code (IMSI2).

2. The method in accordance with claim 1, further comprising the steps of:

e.) transmitting through said mobile data communication system a first acknowledgement of receipt of said message (SMS), and of success in changing the stored data in said subscriber identity module; and

f.) removing from said first subscriber register (HLR1), in response to receipt of said acknowledgement, the record of data corresponding to said first subscription.

3. The method in accordance with claim 1, further comprising the steps of:

e.) transmitting through said mobile data communication system a first acknowledgment of receipt of said message (SMS), and of success in changing the stored data in said subscriber identity module;

f.) transmitting through said mobile data communication system a second message (SMS2) directed to said second subscription;

g.) transmitting through said mobile data communication system a second acknowledgement of receipt of said second message (SMS2); and

h.) removing from said first subscriber register (HLR1), in response to receipt of either said first acknowledgment or second acknowledgement, the record of data corresponding to said first subscription.

4. The method in accordance with claim 1, further comprising the steps of:

e.) waiting, following said transmitting of said message (SMS) directed to said first subscription, for a predetermined period of time for receipt of said first acknowledgement; and

f.) transmitting through said mobile data communication system a second message (SMS2) directed to said second subscription, if said first acknowledgment is not received within said predetermined period of time.

5. The method in accordance with claim 4, further comprising the steps of:

g.) detecting when said second subscription is attached to said mobile data communication system; and

h.) removing from said first subscriber register (HLR1) the record of data corresponding to the first subscription upon detection that the second subscription is attached to the communication system.

6. The method in accordance with claim 1, wherein said changing step (d.) further comprises removing from said subscriber identity module a temporary subscriber identity code (TMSI) stored in said subscriber identity module with said first subscription data.

7. The method in accordance with claim 1, wherein said mobile data communication system comprises a Global System for Mobile communications (GSM) mobile communication system.

8. A mobile data communication system comprising:

a.) first and second subscriber registers (HLR1, HLR2) for maintaining subscriber records defining a subscriber identity module registry;

b.) a message transmission system (SMSC) for transmission of messages in said mobile data communication system;

c.) a mobile station for use by a subscriber in effecting mobile communications through said mobile data communication system;

d.) a subscriber identity module (SIM), connected to said mobile station, for storing in said subscriber identity module data comprising;

i) a first subscriber identity code (IMSI1), and

ii) an encryption code key (K_i) corresponding to a first subscription for said mobile station subscriber and associated with said subscriber identity module (SIM), in which, when said first subscription is opened for said mobile station subscriber, a record of data corresponding to said first subscription, and comprising;

a first subscription-specific call number (MSISDNx),

said encryption code key (K_i), and

said first subscriber identity code (IMSI1) for said mobile station subscriber;

is created in said first subscriber register (HLR1),

e.) a control device for controlling said subscriber identity module (SIM), and comprising;

i.) first means for opening in said second subscriber register (HLR2) a record of data corresponding to said opened second subscription with said record of data comprising;

a second subscription-specific call number (MSISDN),

said encryption key (K_i),

a second subscriber identity code (IMSI2) for said mobile station subscriber;

ii) second means for generating a message (SMS) to be directed through said mobile data communication system to said first subscription and instructing a change in the data stored in said subscriber identity module from data corresponding to said first subscription to data corresponding to said second subscription; and

iii) third means for changing the data stored in said subscriber identity module (SIM) from data corresponding to said first subscription to data corresponding to said second subscription.

9. The mobile data communication system of claim 8, wherein said control device is disposed in conjunction with a billing and customer control system of said mobile data communication system.

10. The mobile data communication system of claim 8, wherein said message transmission system comprises a short message system.