Methods and apparatus for user authentication and human intent verification in mobile devices

An apparatus configurable for operation in a mobile device, the apparatus comprising:

• a processor;
• and
• a memory storing instructions that when executed by the processor cause the mobile device to perform steps that include:
• detecting initiation of an administrative operation for an embedded Universal Integrated Circuit Card (eUICC) of the mobile device;
• determining whether the administrative operation for the eUICC requires user authentication;
• when the administrative operation for the eUICC requires user authentication:
• obtaining user credentials via a secure input that is securely connected via end-to-end (E2E) security with a secure processing environment executing on embedded hardware of the mobile device;
• sending a secure token to a server to verify user authorization to perform the administrative operation for the eUICC, wherein the secure token is based on the user credentials;
• and
• in response to receipt from the server of an indication of successful user authentication, performing the administrative operation for the eUICC;
• and
• when the administrative operation for the eUICC does not require user authentication, performing the administrative operation for the eUICC.

A mobile device comprising:

• one or more antennas;
• and
• processing circuitry communicatively coupled to the one or more antennas and comprising a processor and a memory storing instructions that, when executed by the processor, cause the mobile device to perform steps that include:
• detecting initiation of an administrative operation for an embedded Universal Integrated Circuit Card (eUICC) of the mobile device;
• determining whether the administrative operation for the eUICC requires user authentication;
• when the administrative operation for the eUICC requires user authentication:
• obtaining user credentials via a secure input that is securely connected via end-to-end (E2E) security with a secure processing environment executing on embedded hardware of the mobile device;
• sending a secure token to a server to verify user authorization to perform the administrative operation for the eUICC, wherein the secure token is based on the user credentials;
• and
• in response to receipt from the server of an indication of successful user authentication, performing the administrative operation for the eUICC;
• and
• when the administrative operation for the eUICC does not require user authentication, performing the administrative operation for the eUICC.