Service provider activation with subscriber identity module policy

• US 8,032,181 B2
• Filed: 01/14/2008
• Issued: 10/04/2011
• Est. Priority Date: 09/01/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Low, Daryl Mun-Kid, Bush, Jeffrey, Brouwer, Michael Lambertus Hubertus, Hauck, Jerry
• Primary Examiner(s): Karikari; Kwasi
• Application Number:
  US12/014,089
• Publication Number:
  US 20090061934A1
• Time in Patent Office: 1,359 Days
• Field of Search: 455/410, 455/411, 455/435.1, 380/249, 380/259, 713/183, 713/171, 713/168, 713/155, 713/160, 713/185
• US Class Current: 455/558
• CPC Class Codes: H04L 2101/654 International mobile subscriber identity [IMSI] numbers
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 8/245 from a network towards a terminal
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Systems and methods for activating a mobile device for use with a service provider are described. In one exemplary method, a mobile device having a currently inserted SIM card may be prepared for activation using a signing process in which an activation server generates a signed activation ticket encoded with SIM policy data that corresponds to the combination of the device and one of a number of SIM cards belonging to a set of SIM cards defined by the SIM policy data. The activation ticket is securely stored on the mobile device. In another exemplary method the mobile device may be activated in an activation process in which the device verifies an activation ticket against information specific to the device and SIM card in accordance with the SIM policy in the activation ticket, and initiates activation when the verification of the activation ticket is successful.

Claims

1. A machine implemented method of activating a mobile device, the method comprising:

issuing from a mobile device having a SIM card an activation request, the activation request comprising data that uniquely identifies the device and the SIM card;

storing in the mobile device a signed activation record comprising the device data and a SIM policy data containing an array of rules that identifies a set of SIM cards that may be used with the mobile device, a rule in the array indicating whether to use a wildcard to expand an identified set, the activation record having been generated and signed by an activation server responding to the activation request;

verifying the activation record against a second SIM card in accordance with the SIM policy data, including evaluating whether the second SIM card belongs to the identified set of SIM cards that may be used with the mobile device; and

registering the device with a communications network using the second SIM card.

2. The method of claim 1, wherein the data that uniquely identifies the device includes a serial number of the device.

3. The method of claim 2, wherein the serial number of the device is the International Mobile Equipment Identifier (IMEI) encoded in the device.

4. The method of claim 1, wherein the data that uniquely identifies the device includes a hardware thumbprint of the device.

5. The method of claim 4, wherein the hardware thumbprint of the device is derived from at least one of a serial number of a baseband component in the device, a serial number of a memory component of the device, a serial number of the device, in combination with a random number.

6. The method of claim 1, wherein the data that identifies the SIM card includes a serial number of the SIM card.

7. The method of claim 6, wherein the serial number of the SIM card is the Integrated Circuit Card ID (ICCID) encoded on the SIM card.

8. The method of claim 1, wherein the data that identifies the SIM card includes a subscriber identifier associated with SIM card.

9. The method of claim 8, wherein the subscriber identifier associated with the SIM card is the International Mobile Subscriber Identifier (IMSI) that designates the subscriber authorized to use the SIM card.

10. The method of claim 1, wherein the data that identifies the SIM card includes a group identifier associated with the SIM card.

11. The method of claim 10, wherein the group identifier associated with the SIM card is a Group Identifier (GID) that identifies the SIM card as belonging to a group of SIM cards.

12. The method of claim 1, wherein a rule in the array of rules describes a primitive set of identifiers that may be included or excluded from the identifier set.

13. The method of claim 1, wherein a rule in the array of rules indicates whether to use the group identifier (GID) of the SIM card in identifying which SIM cards may be used with the mobile device.

14. The method of claim 1, wherein a rule in the array indicates whether to limit the identifier set that identifies which SIM cards may be used with the mobile device to an IMSI having a certain prefix value.

15. The method of claim 14, wherein the prefix value is at least one of a mobile country code and a mobile network code.

16. A non-transitory machine-readable storage medium storing program instructions that, when executed, cause a data processing system to perform a method of activating a mobile device, the method comprising:

issuing from a mobile device having a SIM card an activation request, the activation request comprising data that uniquely identifies the device and the SIM card;

storing in the mobile device a signed activation record comprising the device data and a SIM policy data containing an array of rules that identifies a set of SIM cards that may be used with the mobile device, a rule in the array indicating whether to use a wildcard to expand an identified set, the activation record having been generated and signed by an activation server responding to the activation request;

verifying the activation record against a second SIM card in accordance with the SIM policy data, including evaluating whether the second SIM card belongs to the identified set of SIM cards that may be used with the mobile device; and

registering the device with a communications network using the second SIM card.

17. The machine-readable storage medium of claim 16, wherein the data that uniquely identifies the device includes a hardware thumbprint of the device.

18. The machine-readable storage medium of claim 17, wherein the hardware thumbprint of the device is derived from at least one of a serial number of a baseband component in the device, a serial number of a memory component of the device, a serial number of the device, in combination with a random number.

19. The machine-readable storage medium of claim 16, wherein the data that identifies the SIM card includes a group identifier associated with the SIM card.

20. The machine-readable storage medium of claim 19, wherein the group identifier associated with the SIM card is a Group Identifier (GID) that identifies the SIM card as belonging to a group of SIM cards.

21. The machine-readable storage medium of claim 20, wherein a rule in the array of rules is one of a rule which:

describes a primitive set of identifiers that may be included or excluded from the identifier set;

indicates whether to use the group identifier (GID) of the SIM card in identifying which SIM cards may be used with the mobile device;

indicates whether to use a wildcard to expand the identifier set that identifies which SIM cards may be used with the mobile device; and

indicates whether to limit the identifier set that identifies which SIM cards may be used with the mobile device to an IMSI having a prefix value.

22. The machine-readable storage medium of claim 21, wherein the prefix value is at least one of a mobile country code and a mobile network code.

23. A data processing system comprising:

means for issuing an activation request from a mobile device having a SIM card, the activation request comprising data that uniquely identifies the device and the SIM card;

means for storing in the mobile device a signed activation record comprising the device data and a SIM policy data containing an array of rules that identifies a set of SIM cards that may be used with the mobile device, a rule in the array indicating whether to use a wildcard to expand an identified set, the activation record having been generated and signed by an activation server responding to the activation request;

means for verifying the activation record against a second SIM card in accordance with the SIM policy data, including evaluating whether the second SIM card belongs to the identified set of SIM cards that may be used with the mobile device; and

means for registering the device with a communications network using the second SIM card.