Simulacrum of physical security device and methods

• US 9,100,393 B2
• Filed: 04/05/2011
• Issued: 08/04/2015
• Est. Priority Date: 11/04/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V., Hauck, Jerrold Von
• Primary Examiner(s): KIM, TAE K
• Application Number:
  US13/080,533
• Publication Number:
  US 20120117635A1
• Time in Patent Office: 1,582 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

A simulacrum security device and methods. In one embodiment, a simulacrum or likeness of a physical security device is provided for use in conjunction with a software emulation of the security device. In one implementation, a “faux SIM card” is provided that does not contain Subscriber Identification Module (SIM) information itself, but instead enables a user to download Electronic SIM (eSIM) information (e.g., from a network or eSIM server) which is loaded into a software emulation of a Universal Integrated Circuit Card (UICC) device. The faux card is printed with an activation code, scan pattern, or other activation or access information. The subscriber purchases the faux card, and enters the activation code into a device; the entered activation code enables the device to log onto a network, and download the appropriate eSIM data. Delivery of eSIM information as enabled by the faux card addresses deficiencies in existing SIM distribution schemes, provides users with an enhanced perception of security, and further addresses various legal requirements.

Claims

1. A method for provisioning electronic Subscriber Identity Modules (eSIMs) to user devices, the method comprising:

at an eSIM provisioning server;

receiving, from a user device, a unique identifier, wherein;

the user device is configured to access a removable apparatus that is configured to be inserted into a receiving bay included in the user device,

the removable apparatus includes a computer-readable memory that stores the unique identifier but not an eSIM, and

the unique identifier corresponds to;

(i) a particular eSIM stored within a database that is accessible to the provisioning server, and

(ii) the removable apparatus;

identifying, based on the unique identifier, the particular eSIM within the database, wherein the particular eSIM is associated with a particular service provider; and

providing, to the user device, the particular eSIM, wherein the user device stores the particular eSIM into a secure element that is distinct from the removable apparatus and included in the user device, and the particular eSIM enables the user device to operate with the particular service provider.

2. The method of claim 1, wherein the removable apparatus is a simulacrum of an identity module that is configured to interface with a mobile device.

3. The method of claim 2, wherein the simulacrum is a faux subscriber identity module (SIM) card for a Universal Mobile Telecommunications System (UMTS)-compliant mobile telephony device.

4. The method of claim 1, wherein the computer-readable memory is embedded within the removable apparatus.

5. The method of claim 4, wherein the computer-readable memory is substantially tamper-proof within the removable apparatus by way of a physical seal.

6. The method of claim 1, wherein the unique identifier is readable via a short range wireless protocol.

7. The method of claim 1, wherein a value of the unique identifier is based on a current time.

8. An apparatus, comprising:

a network interface;

a processor;

a bay configured to receive a simulacrum of an identity module for the apparatus, wherein;

the simulacrum includes a non-volatile memory that stores a unique identifier that corresponds to (i) an electronic Subscriber Identity Module (eSIM), and (ii) the simulacrum of the identity module for the apparatus, and

the eSIM is not stored in the non-volatile memory;

a secure element, wherein the secure element includes a memory that is distinct from the non-volatile memory of the simulacrum; and

a storage device in data communication with the processor, wherein the storage device stores computer-executable instructions that, when executed by the processor, cause the apparatus to;

read the unique identifier from the non-volatile memory;

request, from a server, the eSIM associated with the unique identifier;

receive, from the server, the eSIM;

store the eSIM into the secure element; and

using the eSIM, configure the network interface for operation.

9. The apparatus of claim 8, wherein the simulacrum is a faux subscriber identity module (SIM) card for a Universal Mobile Telecommunications System (UMTS)-compliant mobile telephony device.

10. The apparatus of claim 8, wherein a value of the identifier is based on a current time.

11. The apparatus of claim 8, wherein a value of the unique identifier changes in correlation to a number times the unique identifier has been accessed.

12. A method for provisioning electronic Subscriber Identity Modules (eSIMs) to mobile devices, the method comprising:

at an eSIM provisioning server;

receiving, from a mobile device, a request for an eSIM that corresponds to a unique identifier, wherein;

the unique identifier is embedded within an identity module that is configured to be inserted into a receiving bay that is included in the mobile device,

the eSIM is not embedded within the identity module, and

the unique identifier further corresponds to the identity module;

establishing a secure session with the mobile device; and

providing, to the mobile device, the eSIM, wherein the mobile device stores the eSIM into a secure element that is distinct from the identity module and included in the mobile device, and the eSIM enables the mobile device to operate with a particular service provider.

13. The method of claim 12, wherein the identity module is a simulacrum of a Subscriber Identity Module (SIM) card that includes a non-volatile memory, and the unique identifier is stored within the non-volatile memory.

14. The method of claim 13, wherein a value of the unique identifier is based on a current time.

15. The method of claim 13, wherein a value of the unique identifier changes in correlation to a number times the unique identifier has been accessed.