Wireless network authentication apparatus and methods

• US 9,338,649 B2
• Filed: 03/03/2014
• Issued: 05/10/2016
• Est. Priority Date: 05/03/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V., Narang, Mohit, Caballero, Ruben
• Primary Examiner(s): CASCA, FRED A
• Application Number:
  US14/195,728
• Publication Number:
  US 20140248854A1
• Time in Patent Office: 799 Days
• Field of Search: 455/552.1, 455/436, 455/418, 455/450, 455/407, 455/410, 455/419, 455/435.2, 370/259, 370/338, 370/328
• US Class Current: 1/1
• CPC Class Codes: H04B 1/406 with more than one transmission mode, e.g. analog and digital modes
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Apparatus and methods for authenticating and granting a client device (e.g., cellular telephone) access to a network. In one embodiment, a network service provider such as a cellular telephone company may distribute user access (e.g., Universal Subscriber Identity Module or “USIM”) credentials to a service manager via a USIM vendor. The services manager may maintain a list of authorized users. A user at a client may authenticate to the services manager. Once authenticated, the services manager may provide the user with a set of USIM credentials. When the user desires to use wireless network services, the user equipment may establish a wireless link between the user equipment and the network service provider. During authentication operations, the user equipment may use the USIM credentials to authenticate to the network service provider. Following successful authentication, the network service provider may provide the user equipment with wireless services.

Claims

1. A method for accessing wireless services, the method comprising:

by a processor included in a mobile device;

presenting an option to select from;

accessing a first wireless service using an access control client stored in a secure element included in the mobile device, and

accessing a second wireless service using a physical SIM card inserted into a SIM card bay of an external accessory device that is in communication with the mobile device;

receiving a selection in response to presenting the option; and

accessing either the first wireless service or the second wireless service in accordance with the selection.

2. The method of claim 1, wherein the access control client is received from a trusted entity prior to receiving the selection, and the access control client comprises a virtualized Universal Subscriber Identity Module (USIM).

3. The method of claim 2, wherein the trusted entity is a USIM vendor associated with the first wireless service.

4. The method of claim 1, wherein the external accessory device is in wireless communication with the mobile device.

5. The method of claim 4, wherein the mobile device wirelessly communicates with the external accessory device using Near Field Communication (NFC) circuitry or Bluetooth circuitry.

6. The method of claim 1, wherein the access control client comprises account information that is specific to a user.

7. The method of claim 1, wherein the secure element comprises a tamper-proof integrated circuit that is permanently built into the mobile device.

8. The method of claim 1, wherein the mobile device includes long-range wireless communications circuitry.

9. A wireless apparatus, comprising:

one or more communication interfaces configured to communicate with wireless services;

a secure element configured to store at least one access control client;

a processor; and

a storage device in data communication with the processor, wherein the storage device stores computer-executable instructions that, when executed by the processor, cause the wireless apparatus to carry out steps that include;

presenting an option to select from;

accessing a first wireless service using the at least one access control client stored in the secure element, and

accessing a second wireless service using a physical subscriber identity module (SIM) card inserted into a SIM card bay of an external accessory device that is in communication with the wireless apparatus;

receiving a selection in response to presenting the option; and

accessing either the first wireless service or the second wireless service in accordance with the selection.

10. The wireless apparatus of claim 9, wherein the steps further include, prior to receiving the selection:

authenticating to a trusted services manager,

receiving, from the trusted services manager, the at least one access control client, and

storing the at least one access control client within the secure element.

11. The wireless apparatus of claim 9, wherein the external accessory device is in wireless communication with the wireless apparatus.

12. The wireless apparatus of claim 11, wherein the wireless apparatus communicates with the external accessory device using Near Field Communication (NFC) circuitry or Bluetooth circuitry.

13. The wireless apparatus of claim 9, wherein the secure element comprises a tamper-proof integrated circuit that is permanently built into the wireless apparatus.

14. The wireless apparatus of claim 9, wherein the at least one access control client comprises a virtualized Universal Subscriber Identity Module (USIM).

15. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a mobile device, cause the mobile device to carry out steps that include:

presenting an option to select from;

accessing a first wireless service using an access control client stored in a secure element of the mobile device, and

accessing a second wireless service using a physical SIM card inserted into a SIM card bay of an external accessory device that is in communication with the mobile device;

receiving a selection in response to presenting the option; and

accessing either the first wireless service or the second wireless service in accordance with the selection.

16. The non-transitory computer readable storage medium of claim 15, wherein the access control client is received from a trusted entity prior to receiving the selection, and the access control client comprises a virtualized Universal Subscriber Identity Module (USIM).

17. The non-transitory computer readable storage medium of claim 16, wherein the trusted entity is a USIM vendor associated with the first wireless service.

18. The non-transitory computer readable storage medium of claim 15, wherein the external accessory device is in wireless communication with the mobile device.

19. The non-transitory computer readable storage medium of claim 18, wherein the mobile device accesses the external accessory device using Near Field Communications (NFC) circuitry or Bluetooth circuitry.

20. The non-transitory computer readable storage medium claim 15, wherein the secure element comprises a tamper-proof integrated circuit that is permanently built into the mobile device.