Access data provisioning apparatus and methods

• US 9,723,481 B2
• Filed: 04/01/2011
• Issued: 08/01/2017
• Est. Priority Date: 10/29/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Haggerty, David, Schell, Stephan V.
• Primary Examiner(s): Patel, Ajit
• Assistant Examiner(s): PEREZ, JULIO R
• Application Number:
  US13/078,811
• Publication Number:
  US 20120108295A1
• Time in Patent Office: 2,314 Days
• Field of Search: 455411, 455436, 455538, 455558, 455551
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Methods and apparatus for activating a purchased or previously deployed device by a subscriber. In one embodiment, activation includes authenticating the device to a service provider or carrier, and providing the device with data necessary for enabling the service to the device. In one variant, a user device is activated at a retail store, with the assistance of a carrier representative. In another variant, user equipment is activated via a communications network without the assistance of a representative. In yet another variant, the user equipment is activated via the Internet without the assistance of a representative. The provision of access data includes pre-assigning eSIM from a population of unassigned eSIMs to certain devices for various carrier networks. Alternatively, the eSIM may be assigned on an as-needed basis. Unassigned and/or unused eSIMs can be released (or sold back to the vendor) and/or reused. Solutions for eSIM backup and restoration are also described.

Claims

1. A wireless device, comprising:

at least one wireless interface configured to communicate with at least one wireless network;

a secure element that manages at least a first electronic Subscriber Identity Module (eSIM) that represents a virtualization of a physical SIM card;

a processor configured to cause the wireless device to;

issue, to an eSIM provisioning server, a request to retrieve a second eSIM that is different from the first eSIM managed by the secure element, wherein the request includes an identifier associated with the second eSIM;

receive the second eSIM from the eSIM provisioning server;

store the second eSIM in the secure element;

use the second eSIM, in conjunction with the at least one wireless interface, to access services provided by a Mobile Network Operator (MNO) that is associated with the at least one wireless network; and

when a retention criteria associated with the first eSIM is satisfied;

removing the first eSIM from the secure element, and

providing the first eSIM to the eSIM provisioning server.

2. The wireless device of claim 1, wherein the identifier is a serial number specific to the wireless device.

3. The wireless device of claim 2, wherein the identifier is printed on the wireless device.

4. The wireless device of claim 2, wherein the identifier is stored in a memory included in the wireless device.

5. The wireless device of claim 2, wherein the identifier corresponds to an Integrated Circuit Card Identifier (ICC-ID) that is associated with the eSIM.

6. The wireless device of claim 1, wherein the eSIM provisioning server obtains the second eSIM from an eSIM vendor.

7. The wireless device of claim 6, wherein the eSIM provisioning server utilizes a Trusted Services Manager (TSM) to verify the second eSIM prior to providing the second eSIM to the wireless device.

8. A method for managing electronic Subscriber Identity Modules (eSIMs), the method comprising:

at a wireless device;

issuing, to an eSIM provisioning server, a request to retrieve a second eSIM that is different from a first eSIM managed by a secure element included in the wireless device, wherein the request includes an identifier associated with the second eSIM;

receiving the second eSIM from the eSIM provisioning server;

storing the second eSIM in the secure element;

using the second eSIM, in conjunction with at least one wireless interface included in the wireless device, to access services provided by a Mobile Network Operator (MNO) that is associated with at least one wireless network; and

when a retention criteria associated with the first eSIM is satisfied;

removing the first eSIM from the secure element, and

providing the first eSIM to the eSIM provisioning server.

9. The method of claim 8, wherein the identifier is a serial number specific to the wireless device.

10. The method of claim 9, wherein the identifier is printed on the wireless device.

11. The method of claim 9, wherein the identifier is stored in a memory included in the wireless device.

12. The method of claim 9, wherein the identifier corresponds to an Integrated Circuit Card Identifier (ICC-ID) that is associated with the eSIM.

13. The method of claim 8, wherein the eSIM provisioning server obtains the second eSIM from an eSIM vendor.

14. The method of claim 13, wherein the eSIM provisioning server utilizes a Trusted Services Manager (TSM) to verify the second eSIM prior to providing the second eSIM to the wireless device.

15. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a wireless device, cause the wireless device to manage electronic Subscriber Identity Modules (eSIMs), by carrying out steps that include:

issuing, to an eSIM provisioning server, a request to retrieve a second eSIM that is different from a first eSIM managed by a secure element included in the wireless device, wherein the request includes an identifier associated with the second eSIM;

receiving the second eSIM from the eSIM provisioning server;

storing the second eSIM in the secure element;

using the second eSIM, in conjunction with at least one wireless interface included in the wireless device, to access services provided by a Mobile Network Operator (MNO) that is associated with at least one wireless network; and

when a retention criteria associated with the first eSIM is satisfied;

removing the first eSIM from the secure element, and

providing the first eSIM to the eSIM provisioning server.

16. The non-transitory computer readable storage medium of claim 15, wherein the identifier is a serial number specific to the wireless device.

17. The non-transitory computer readable storage medium of claim 16, wherein the identifier is printed on the wireless device.

18. The non-transitory computer readable storage medium of claim 16, wherein the identifier is stored in a memory included in the wireless device.

19. The non-transitory computer readable storage medium of claim 16, wherein the identifier corresponds to an Integrated Circuit Card Identifier (ICC-ID) that is associated with the eSIM.

20. The non-transitory computer readable storage medium of claim 15, wherein the eSIM provisioning server obtains the second eSIM from an eSIM vendor.