Account linkage in machine-to-machine scenarios

• US 9,396,466 B2
• Filed: 04/28/2011
• Issued: 07/19/2016
• Est. Priority Date: 04/28/2011
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Monjas Llorente, Miguel Angel, Canales Valenzuela, Carolina
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): Castilho, Eduardo
• Application Number:
  US14/113,556
• Publication Number:
  US 20140045454A1
• Time in Patent Office: 1,909 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/48 using secure binding, e.g. securely binding identity modules to devices, services or applications
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

Upon a user switching-on an appliance with an appliance SIM card of a home telecommunication network, the appliance attaches to the home telecommunication network. The user sets the appliance for association of the user with the appliance. The appliance requests a token to the home telecommunication network. The request includes an appliance identifier of the card. An Identity Linking Function server of the home telecommunication network generates the token, associates the token and the appliance identifier of the card, and provides the token. The user registers a user name and password. The appliance media site server creates a user account for the user with the user name and password. The user submits an identifier of the home telecommunication network, and the appliance media site server redirects the user towards the home telecommunication network with information for further return.

Claims

1. A method of associating an appliance with an appliance user at a respective appliance media site and home telecommunication network upon the user switching on the appliance with an appliance SIM card of the home telecommunication network, the method comprising:

attaching, by the appliance, to the home telecommunication network;

entering, by the appliance, a setting mode;

requesting, by the appliance, a token to the home telecommunication network, the request including an appliance identifier of the appliance SIM card;

generating, by an Identity Linking Function server of the home telecommunication network, the token;

associating, by the Identity Linking Function server, the token with the appliance identifier of the appliance SIM card;

providing, by the Identity Linking Function server, the token to the appliance;

receiving, by an appliance media site server, a user name and password from a terminal equipment;

creating, by the appliance media site server, a user account with the received user name and password;

receiving, by the appliance media site server from the terminal equipment, an identifier of the home telecommunication network;

redirecting, by the appliance media site server, based on the received identifier, the terminal equipment to the home telecommunication network, the redirection comprising information for further return;

receiving, by the Identity Linking Function server, the token from the terminal equipment;

retrieving, by the Identity Linking Function server, the appliance identifier of the appliance SIM card associated with the token;

redirecting, by the Identity Linking Function server, based on the information for further return, the terminal equipment to the appliance media site server with the retrieved appliance identifier of the appliance SIM card; and

associating, by the appliance media site server, the appliance identifier of the appliance SIM card with the user account.

2. The method of claim 1, wherein entering a setting mode comprises receiving, by the appliance, a corresponding user option in a user interface unit of the appliance.

3. The method of claim 1, wherein submitting the identifier of the home telecommunication network to the appliance media site server is responsive to the appliance media site server receiving an identifier of the home telecommunication network, upon detecting there is no appliance associated with the user account in the appliance media site server.

4. The method of claim 1, wherein a single message comprises receiving the identifier of the home telecommunication network and receiving the user name and password.

5. The method of claim 1, wherein associating of the token and the appliance identifier of the appliance SIM card includes storing the token and the appliance identifier of the appliance SIM card in a storage accessible to the Identity Linking Function server.

6. The method of claim 1, wherein generating the token by the Identity Linking Function server comprises generating a time-stamp, and associating the token and the appliance identifier of the appliance SIM card comprises associating the time-stamp with the token and the appliance identifier of the appliance SIM card.

7. The method of claim 6, wherein the associating of the token, the appliance identifier of the appliance SIM card and the time stamp comprises storing the token, the appliance identifier of the appliance SIM card and the time-stamp in a storage accessible to the Identity Linking Function server.

8. The method of claim 6, further comprising, upon expiry of the time-stamp, deleting the token and any association thereof from the Identity Linking Function server.

9. The method of claim 1, further comprising verifying at the Identity Linking Function server whether the appliance identifier of the appliance SIM card corresponds to a Machine-to-Machine (M2M) connection.

10. The method of claim 1, wherein redirecting the terminal equipment to the appliance media site server includes deleting the token and any association thereof from the Identity Linking Function server.

11. The method of claim 10, further comprising:

entering, by the appliance, a setting mode;

requesting, by the appliance, a token to the home telecommunication network for the association of the user with the appliance, the request including an appliance identifier of the appliance SIM card;

generating, by the Identity Linking Function server of the home telecommunication network, the token, associating the token and the appliance identifier of the appliance SIM card, and providing the token to the appliance;

submitting, by a terminal equipment with a user SIM card of the home telecommunication network, the token to the home telecommunications network, along with a request for association of the appliance with a user subscription corresponding to the user SIM card, the request including a user identifier of the user SIM card; and

retrieving, by the Identity Linking Function server, the appliance identifier of the appliance SIM card associated with the token, associating the user identifier of the user SIM card with the appliance identifier of the appliance SIM card, and sending, to the terminal equipment, a message confirming the association of the appliance with the user subscription.

12. The method of claim 1, further comprising:

submitting, by a terminal equipment with a user SIM card of the home telecommunication network, the token to the home telecommunications network, along with a request for association of the appliance with a user subscription corresponding to the user SIM card, the request including a user identifier of the user SIM card; and

retrieving, by the Identity Linking Function server, the appliance identifier of the appliance SIM card associated with the token, associating the user identifier of the user SIM card with the appliance identifier of the appliance SIM card, and sending, to the terminal equipment, a message confirming the association of the appliance with the user subscription.

13. The method of claim 12, further comprising deleting, by the Identity Linking Function server, the token and any association thereof from the Identity Linking Function server.

14. The method of claim 12, further comprising:

submitting, by the appliance media site server, a charging event with the appliance identifier of the appliance SIM card to the home telecommunication network;

querying, by a billing function server of the home telecommunication network, the Identity Linking Function server about a user subscription associated with the appliance identifier of the appliance SIM card;

retrieving, by the Identity Linking Function server, the user identifier of the user SIM card associated with the appliance identifier of the appliance SIM card and providing the user identifier of the user SIM card to the billing function server; and

charging, by the billing function server, a user charging record for the user identified by the user identifier of the user SIM card with the charging event received from the appliance media site server.

15. A system for associating an appliance with an appliance user at respective appliance media site and home telecommunication network, the system comprising:

an appliance comprising;

an appliance SIM card of the home telecommunication network;

an appliance processor; and

an appliance memory storing executable instructions that when executed by the appliance processor causes the appliance processor to perform the steps of;

attaching to the home telecommunication network;

entering a setting mode for association with the appliance user;

requesting a token to the home telecommunication network for the association with the appliance user, the request comprising an appliance identifier of the appliance SIM card;

receiving the token from an Identity Linking Function server of the home telecommunication network; and

presenting the token to the appliance user;

the Identity Linking Function (ILF) server of the home telecommunication network comprising;

an ILF server processor; and

an ILF server memory storing executable instructions that, when executed by the ILF server processor causes the ILF server processor to perform the steps of;

receiving a request from the appliance, the request requesting a token for the association of the appliance user with the appliance, and comprising an appliance identifier of the appliance SIM card;

generating the token, associating the token with the appliance identifier and providing the token to the appliance;

receiving, through a terminal equipment in use by the appliance user, the token as user identification, along with information that indicates a return redirection to an appliance media site (AMS) server;

retrieving the appliance identifier associated with the token; and

redirecting, based on the return redirection information received, the appliance user with the received appliance identifier towards the appliance media site (AMS) server;

the appliance media site (AMS) server comprising;

an AMS server processor; and

an AMS server memory storing executable instructions that, when executed by the AMS server processor causes the AMS server processor to perform the steps of;

receiving a user name and password from the terminal equipment;

creating a user account with a user name and password received from the terminal equipment;

receiving from the terminal equipment an identifier of the home telecommunication network;

redirecting the terminal equipment towards the home telecommunication network with information for further return;

receiving, upon return from the home telecommunication network, the appliance identifier of the appliance SIM card from the terminal equipment; and

associating the appliance identifier with the user account.

16. The system of claim 15, wherein entering the setting mode comprises selecting a corresponding option by the appliance user in a user interface unit of the appliance.

17. The system of claim 15, wherein the AMS server memory further comprises instructions that, when executed by the AMS server processor causes the AMS server processor to perform the steps of:

detecting there is no appliance identifier associated with the user'"'"'s account; and

sending a request to the terminal equipment to identify the home telecommunication network.

18. The system of claim 15, wherein the AMS server memory further comprises instructions that, when executed by the AMS server processor causes the AMS server processor to perform the steps of:

receiving the identifier of the home telecommunication network; and

receiving the user name and password in a single message.

19. The system of claim 15, wherein the ILF server memory further comprises instructions that, when executed by the ILF server processor causes the ILF server processor to perform the step of storing the token and the appliance identifier in an accessible storage.

20. The system of claim 15, wherein the ILF server memory further comprises instructions that, when executed by the ILF server processor causes the ILF server processor to perform the steps of:

generating a time-stamp; and

associating the time-stamp with the token and the appliance identifier.

21. The system of claim 15, wherein the ILF server memory further comprises instructions that, when executed by the ILF server processor cause the ILF server processor to perform the steps of:

receiving the token from a terminal equipment with a user SIM card of the home telecommunication network along with a request for association of the appliance with a user subscription corresponding to the user SIM card, the request including a user identifier of the user SIM card;

retrieving the appliance identifier associated with the token;

associating the user identifier of the user SIM card with the appliance; and

sending, to the terminal equipment, a message confirming the association of the appliance with the user subscription.

22. The system of claim 21, wherein the ILF server memory further comprises instructions that, when executed by the ILF server processor cause the ILF server processor to perform the steps of:

receiving a query from a billing function server of the home telecommunication network about the user subscription associated with the appliance identifier;

retrieving the user identifier of the user SIM card associated with the appliance identifier; and

providing the user identifier of the user SIM card to the billing function server.

23. The system of claim 15, wherein the ILF server memory further comprises instructions that, when executed by the ILF server processor causes the ILF server processor to perform the step of verifying that the appliance identifier of the appliance'"'"'s SIM card corresponds to a Machine-to-Machine connection.

24. The system of claim 15, wherein the AMS server memory further comprises instructions that, when executed by the AMS server processor causes the AMS server processor to perform the steps of:

generating a charging event incurred by at least one of;

the appliance identifier and the user account; and

submitting the charging event with the appliance identifier towards the home telecommunication network.

25. The system of claim 15, wherein the AMS server memory further comprises instructions that, when executed by the AMS server processor causes the AMS server processor to perform the step of storing the appliance identifier associated with the user name and password.