System and methods for dynamic SIM provisioning on a dual-SIM wireless communication device

• US 9,451,098 B2
• Filed: 10/22/2014
• Issued: 09/20/2016
• Est. Priority Date: 04/16/2014
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Jiang, Junan, Zhu, Xipeng, Du, Zhimin
• Primary Examiner(s): Kasraian, Allahyar
• Assistant Examiner(s): HANNAN, B M M
• Application Number:
  US14/521,082
• Publication Number:
  US 20150304506A1
• Time in Patent Office: 699 Days
• Field of Search: 455/558, 455/406, 455/411, 455/415, 455/418, 455/419, 455/426.1, 455/432.1, 455/458, 370/331, 379/15.03
• US Class Current: 1/1
• CPC Class Codes: H04M 15/49 Connection to several service providers
• CPC Class Codes: H04M 15/8011 using class of subscriber
• CPC Class Codes: H04M 17/02 Coin-freed or check-freed systems , e.g. mobile- or card-operated phones, public telephones or booths
• CPC Class Codes: H04M 17/026 Constructional features
• CPC Class Codes: H04M 17/103 using SIMs (USIMs) or calling cards
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Methods and devices for dynamic VSIM provisioning on a multi-SIM wireless device having a first SIM as a Universal Integrated Circuit Card (UICC) and a virtual SIM (VSIM). A provisioning server may receive updated information from the wireless device, and based at least partially on the received information, determine whether the SIM profile on the VSIM of the wireless device should be changed. To change the SIM profile, the provisioning server may determine whether remote credential management procedures are enabled. If so, the provisioning server may select a new SIM profile from a plurality of SIM profiles, and provision the new SIM profile in the VSIM using remote credential management procedures. If remote credential management procedures are unavailable, the provisioning server may select a remote SIM from a plurality of remote SIMs associated with the provisioning server, and run the remote SIM to execute authentication processes for the wireless device.

Claims

1. A method for dynamically provisioning a wireless device having a first subscriber identity module (SIM) and a virtual SIM (VSIM), wherein the first SIM is stored on a universal integrated circuit card (UICC), the method comprising:

receiving, at a provisioning server, updated information from the wireless device;

determining, by the provisioning server, whether the VSIM should be changed based at least in part on the received updated information;

determining whether remote credential management procedures are enabled by the provisioning server in response to determining that the VSIM should be changed; and

in response to determining that remote credential management procedures are not enabled by the provisioning server;

selecting, by the provisioning server, a new SIM profile by selecting a remote SIM from a set of remote SIMs available to the provisioning server; and

provisioning the new SIM profile in the wireless device by remotely running the selected remote SIM, wherein security operations related to the new SIM profile are routed by the VSIM to the selected remote SIM.

2. The method of claim 1, wherein receiving the updated information from the wireless device comprises receiving at least one of:

information indicating whether the wireless device is currently roaming;

information indicating differences in at least one of quality, cost, and type of services offered by a plurality of network operators providing local service;

a user preference implemented as a setting on the wireless device; and

a data limit of a tariff plan currently associated with the VSIM.

3. The method of claim 1, further comprising, in response to determining that remote credential management procedures are enabled by the provisioning server:

selecting, by the provisioning server, the new SIM profile from a plurality of SIM profiles associated with the provisioning server; and

provisioning the new SIM profile in the VSIM using the remote credential management procedures.

4. The method of claim 3, further comprising:

determining, in the provisioning server, whether a returned SIM profile was received from the wireless device following provisioning of the new SIM profile; and

recycling the returned SIM profile into a subscription pool database in response to determining that a returned SIM profile was received from the wireless device.

5. The method of claim 1, wherein receiving the updated information from the wireless device comprises receiving the updated information through one of:

an Internet protocol (IP) bearer provided by a serving network associated with the first SIM of the wireless device; and

a Short Message Service (SMS) or Unstructured Supplementary Service Data (USSD) communication sent over the serving network associated with the first SIM of the wireless device.

6. The method of claim 1, wherein provisioning the new SIM profile in the wireless device is protected by keys shared between the wireless device and the provisioning server.

7. The method of claim 1, further comprising, in response to determining that remote credential management procedures are enabled by the provisioning server:

selecting, by the provisioning server, the new SIM profile from a plurality of SIM profiles associated with the provisioning server,

wherein selecting the new SIM profile comprises evaluating criteria across SIM profiles in a subscription pool database, wherein the criteria include one or more of a cost of international roaming service, a quality of service, a high-speed data throughput, and support for a particular type of communication.

8. The method of claim 1, wherein the VSIM is implemented as one of an embedded UICC (eUICC) and a software module configured to execute a VSIM application.

9. The method of claim 1, wherein

remotely running the selected remote SIM comprises:

providing basic provisioning information from the remote SIM to the VSIM via secure tunneling of an IP bearer established by the first SIM; and

performing authentication processes between the remote SIM and a serving network associated with the remote SIM via an IP bearer established by the first SIM.

10. The method of claim 1, wherein:

determining whether remote credential management procedures are enabled by the provisioning server is based on whether, in a current area, a virtual network operator associated with the provisioning server has been granted access to authentication keys needed to provision SIM profiles into the wireless device, and

in response to determining that remote credential management procedures are enabled;

selecting, by the provisioning server, the new SIM profile from a plurality of SIM profiles associated with the provisioning server; and

provisioning the new SIM profile in the VSIM using standard or proprietary remote credential management procedures, wherein the procedures are protected by keys that are shared between the wireless device and the provisioning server.

11. The method of claim 1, further comprising:

establishing, through a virtual network operator associated with the provisioning server, a VSIM account with the wireless device; and

receiving a payment to the virtual network operator from the established VSIM account upon selection of the new SIM profile,

wherein a plurality of SIM profiles associated with the provisioning server each correspond to one of a plurality of foreign network operators, and wherein the virtual network operator pays a local rate to each of the foreign network operators for the corresponding SIM profiles.

12. The method of claim 11, wherein the virtual network operator comprises a home network operator associated with the wireless device.

13. A provisioning server in a subscription management system, comprising:

a network interface configured to connect to a wireless communication network;

a memory; and

a processor coupled to the network interface and the memory, wherein the processor is configured to;

receive updated information from a wireless device having a first subscriber identity module (SIM) and a virtual SIM (VSIM), wherein the first SIM is stored on a universal integrated circuit card (UICC);

determine whether the VSIM should be changed based at least in part on the received updated information;

determine whether remote credential management procedures are enabled by the provisioning server in response to determining that the VSIM should be changed; and

in response to determining that remote credential management procedures are not enabled by the provisioning server;

select a new SIM profile by selecting a remote SIM from a set of remote SIMs available to the provisioning server; and

provision the new SIM profile in the wireless device by remotely running the selected remote SIM, wherein security operations related to the new SIM profile are routed by the VSIM to the selected remote SIM.

14. The provisioning server of claim 13, wherein the processor is further configured to receive the updated information from the wireless device by receiving at least one of:

information indicating whether the wireless device is currently roaming;

information indicating differences in at least one of quality, cost, and type of services offered by a plurality of network operators providing local service;

a user preference implemented as a setting on the wireless device; and

a data limit of a tariff plan currently associated with the VSIM.

15. The provisioning server of claim 13, wherein the processor is further configured, in response to determining that remote credential management procedures are enabled by the provisioning server, to:

select the new SIM profile from a plurality of SIM profiles associated with the provisioning server; and

provision the new SIM profile in the VSIM using the remote credential management procedures.

16. The provisioning server of claim 15, wherein the processor is further configured to:

determine whether a returned SIM profile was received from the wireless device following provisioning the new SIM profile; and

recycle the returned SIM profile into a subscription pool database in response to determining that a returned SIM profile was received from the wireless device.

17. The provisioning server of claim 13, wherein the processor is further configured to receive the updated information from the wireless device by receiving the updated information through one of:

an Internet protocol (IP) bearer provided by a serving network associated with the first SIM of the wireless device; and

a Short Message Service (SMS) or Unstructured Supplementary Service Data (USSD) communication sent over the serving network associated with the first SIM of the wireless device.

18. The provisioning server of claim 13, wherein the processor is further configured to share keys with the wireless device that protect provisioning the new SIM profile in the wireless device.

19. The provisioning server of claim 13, wherein the processor is further configured, in response to determining that remote credential management procedures are enabled by the provisioning server, to:

select the new SIM profile from a plurality of SIM profiles associated with the provisioning server by evaluating criteria across the plurality of SIM profiles,

wherein the criteria include one or more of a cost of international roaming service, a quality of service, a high-speed data throughput, and support for a particular type of communication.

20. The provisioning server of claim 13, wherein the processor is further configured to implement the VSIM as one of an embedded UICC (eUICC) and a software module configured to execute a VSIM application.

21. The provisioning server of claim 13, wherein the processor is further configured to

remotely run the selected remote SIM by:

providing basic provisioning information from the remote SIM to the VSIM via secure tunneling of an IP bearer established by the first SIM; and

performing authentication processes between the remote SIM and a serving network associated with the remote SIM via an IP bearer established by the first SIM.

22. The provisioning server of claim 13, wherein the processor is further configured to:

determine whether remote credential management procedures are enabled based on whether, in a current area, a virtual network operator associated with the provisioning server has been granted access to authentication keys needed to provision SIM profiles into the wireless device; and

in response to determining that remote credential management procedures are enabled;

select the new SIM profile from a plurality of SIM profiles associated with the provisioning server; and

provision the new SIM profile in the wireless device using standard or proprietary remote credential management procedures, wherein the procedures are protected by keys that are shared between the wireless device and the provisioning server.

23. The provisioning server of claim 13, wherein the processor is further configured to:

establish, through a non-transitory processor-readable medium associated with a virtual network operator, a VSIM account with the wireless device; and

receive a payment to the virtual network operator from the established VSIM account upon selection of the new SIM profile,

wherein a plurality of associated SIM profiles each correspond to one of a plurality of foreign network operators, and wherein the virtual network operator pays a local rate to each of the foreign network operators for the corresponding SIM profiles.

24. The provisioning server of claim 23, wherein the virtual network operator comprises a home network operator associated with the wireless device.

25. A subscription management system, comprising:

means for receiving updated information from a wireless device having a first subscriber identity module (SIM) and a virtual SIM (VSIM), wherein the first SIM is stored on a universal integrated circuit card (UICC);

means for determining whether the VSIM should be changed based at least in part on the received updated information;

means for determining whether remote credential management procedures are enabled by a provisioning server in response to determining that the VSIM should be changed; and

in response to determining that remote credential management procedures are not enabled by the provisioning server;

means for selecting a new SIM profile by selecting a remote SIM from a set of remote SIMs available to the provisioning server; and

means for provisioning the new SIM profile in the wireless device by remotely running the selected remote SIM, wherein security operations related to the new SIM profile are routed by the VSIM to the selected remote SIM.

26. A non-transitory processor-readable medium having stored thereon processor-executable instructions configured to cause a processor of a provisioning server to perform operations comprising:

receiving updated information from a wireless device having a first subscriber identity module (SIM) and a virtual SIM (VSIM), wherein the first SIM is stored on a universal integrated circuit card (UICC);

determining whether the VSIM should be changed based at least in part on the received updated information;

determining whether remote credential management procedures are enabled by the provisioning server in response to determining that the VSIM should be changed; and

in response to determining that remote credential management procedures are not enabled by the provisioning server;

selecting a new SIM profile by selecting a remote SIM from a set of remote SIMs available to the provisioning server; and

provisioning the new SIM profile in the wireless device by remotely running the selected remote SIM, wherein security operations related to the new SIM profile are routed by the VSIM to the selected remote SIM.

27. The non-transitory processor-readable medium of claim 26, wherein the stored processor-executable instructions are configured to cause the processor of the provisioning server to perform operations such that receiving the updated information from the wireless device comprises receiving at least one of:

information indicating whether the wireless device is currently roaming;

information indicating differences in at least one of quality, cost, and type of services offered by a plurality of network operators providing local service;

a user preference implemented as a setting on the wireless device; and

a data limit of a tariff plan currently associated with the VSIM.

28. The non-transitory processor-readable medium of claim 26, wherein the stored processor-executable instructions are configured to cause the processor of the provisioning server to perform operations further comprising:

in response to determining that remote credential management procedures are enabled by the provisioning server;

selecting the new SIM profile from a plurality of SIM profiles associated with the provisioning server; and

provisioning the new SIM profile in the VSIM using the remote credential management procedures.

29. The non-transitory processor-readable medium of claim 28, wherein the stored processor-executable instructions are configured to cause the processor of the provisioning server to perform operations further comprising:

determining in the provisioning server whether a returned SIM profile was received from the wireless device following provisioning of the new SIM profile; and

recycling the returned SIM profile into a subscription pool database in response to determining that a returned SIM profile was received from the wireless device.

30. The non-transitory processor-readable medium of claim 26, wherein the stored processor-executable instructions are configured to cause the processor of the provisioning server to perform operations such that

remotely running the selected remote SIM is performed by:

providing basic provisioning information from the remote SIM to the VSIM via secure tunneling of a bearer established by the first SIM; and

performing authentication processes between the remote SIM and a serving network associated with the remote SIM via a bearer established by the first SIM.