US 11,082,855 B2 · Secure onboarding of a device having an embedded universal integrated circuit card without a preloaded provisioning profile

Abstract

A user equipment (UE) may receive, from a certificate authority, a first onboarding identifier associated with a private key stored on the UE. The UE may transmit, to a wireless network, an attach request based on the first onboarding identifier. The UE may receive, from the wireless network, a signaling message that includes a second onboarding identifier, wherein the signaling message may be encrypted with a public key paired with the private key stored on the UE. The UE may decrypt the signaling message using the private key stored on the UE to obtain the second onboarding identifier. The UE may obtain a permanent identifier from a Remote SIM Provisioning platform based on the UE completing an authentication procedure using an authentication response obtained from the decrypted signaling message. The UE may then connect to the wireless network using the permanent identifier.

Claims20

Dependent claims

A method, comprising:

transmitting, by a user equipment, an attach request to a device,
wherein the user equipment uses a first onboarding identifier to transmit the attach request, and
wherein the attach request includes a request for a second onboarding identifier;
receiving, by the user equipment, a signaling message that includes the second onboarding identifier from the device;
obtaining, by the user equipment and based on using an authentication response obtained from decrypting the signaling message to obtain the second onboarding identifier, a permanent identifier from a Remote SIM Provisioning (RSP) platform;
and
connecting, by the user equipment, to a wireless network using the permanent identifier obtained from the RSP platform.

4 more elements

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

one or more instructions that, when executed by one or more processors of a user equipment, cause the user equipment to:
transmit an attach request to a device,
wherein the user equipment uses a first onboarding identifier to transmit the attach request, and
wherein the attach request includes a request for a second onboarding identifier;
receive a signaling message that includes the second onboarding identifier from the device;
obtain, based on using an authentication response obtained from decrypting the signaling message to obtain the second onboarding identifier, an operational profile that includes a permanent identifier from a Remote SIM Provisioning (RSP) platform;
enable the operational profile using an embedded universal integrated circuit card of the user equipment;
and
connect to a wireless network using the permanent identifier.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application

16/947,123Filed 20 Jul 2020 · continuation

Priority

5 Apr 2019

Published

US 2020/0351653 A15 Nov 2020

Granted

3 Aug 2021

Term ends

Not estimatedThe source records don’t support an estimate.

Classification15 codes

H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04W 12/35
Security of mobile devices; Security of mobile applications: protecting application or service provisioning, e.g. securing SIM application…
H04L 9/0861
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: generation of secret information…
H04L 9/0894
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: escrow, recovery or storing of secret…

Secure onboarding of a device having an embedded universal integrated circuit card without a preloaded provisioning profile

Life of this patent

Secure onboarding of a device having an embedded universal integrated circuit card without a preloaded provisioning profile

Life of this patent

Abstract

Claims20