# US 11,310,659 B2 · Techniques for provisioning an enterprise electronic subscriber identity module (ESIM) profile for an enterprise user > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,659 B2 - Document ID: US11310659B2 - Status: Granted - Kind: B2 - Application number: 16/925,746 - Filed: 2020-07-10 - Published: 2022-01-13 - Granted: 2022-04-19 - Earliest claimed: 2020-07-10 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: Indermeet Singh Gandhi; Srinath Gundavelli; Timothy Peter Stammers; Pradeep Kumar Kathail - Web page: https://patentgrep.com/patent/US11310659B2 ## CPC - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04W 12/40: Security arrangements using identity modules - H04L 63/102: {Entity profiles} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 8/22: Processing or transfer of terminal data, e.g. status or physical capabilities - H04W 12/069: using certificates or pre-shared keys - H04W 88/06: adapted for operation in multiple networks {or having at least two operational modes}, e.g. multi-mode terminals - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Presented herein are techniques to facilitate electronic profile management by an enterprise entity in which the enterprise entity can utilize an enterprise infrastructure to provision one or more electronic profiles for one or more enterprise device(s). In one example, a method is provided that may include determining, by a management node of an enterprise network, whether a user equipment (UE) supports an electronic profile capability and a wireless wide area access network connectivity capability; and based on determining that the UE supports the electronic profile capability and the wireless wide area access network connectivity capability, providing, by the management node, at least one electronic profile to the UE via a wireless local area access network of the enterprise network, wherein the at least one electronic profile enables the UE to connect to at least one wireless wide area access network of the enterprise network. ## Claims ### Claim 1 A method comprising: generating, by a management node of an enterprise network, a plurality of electronic profiles for an enterprise user of the enterprise network, wherein the enterprise user is associated with a plurality of enterprise devices and each electronic profile of the plurality of electronic profiles comprises an employee identifier for the enterprise user and one or more enterprise policies for the enterprise user for each of an enterprise location of a plurality of enterprise locations; determining, by the management node of the enterprise network, that a particular enterprise device of the plurality of enterprise devices of the enterprise user supports an electronic profile capability and a wireless wide area access network connectivity capability; and based on determining that the particular enterprise device supports the electronic profile capability and the wireless wide area access network connectivity capability, assigning at least one electronic profile of the plurality of electronic profiles to the particular enterprise device and providing, by the management node, the at least one electronic profile to the particular enterprise device via a wireless local area access network of the enterprise network, wherein the at least one electronic profile enables the particular enterprise device to connect to at least one wireless wide area access network of the enterprise network. ### Claim 2 (depends on 1) The method of claim 1, wherein the at least one electronic profile is at least one electronic subscriber identity module (eSIM) profile that enables the particular enterprise device to connect to the at least one wireless wide area access network of the enterprise network. ### Claim 3 (depends on 1) The method of claim 1, wherein the at least one wireless wide area access network is at least one of: a private 3rd Generation Partnership Project (3GPP) Fourth Generation (4G) network; a private 3rd Generation Partnership Project (3GPP) Fifth Generation (5G) network; a private 3rd Generation Partnership Project (3GPP) next Generation (nG) network; and a private Citizens Broadband Radio Service (CBRS) network. ### Claim 4 (depends on 1) The method of claim 1, wherein providing the at least one electronic profile to the particular enterprise device includes sending a Mobile Device Management (MDM) protocol command to the particular enterprise device via the wireless local area access network of the enterprise network. ### Claim 5 (depends on 4) The method of claim 4, wherein the MDM protocol command indicates that the particular enterprise device is to install and activate the at least one electronic profile and the at least one electronic profile is included with the MDM protocol command. ### Claim 6 (depends on 4) The method of claim 4, wherein the MDM protocol command indicates that the particular enterprise device is to install and activate the at least one electronic profile upon obtaining the at least one electronic profile from a network location of the enterprise network, wherein the network location is included with the MDM protocol command. ### Claim 7 (depends on 1) The method of claim 1, wherein the management node of the enterprise network determines that the particular enterprise device supports the electronic profile capability and the wireless wide area access network connectivity capability based on a certificate obtained from the particular enterprise device. ### Claim 8 (depends on 1) The method of claim 1, further comprising: sending, by the management node, a message to the particular enterprise device, wherein the message indicates that the particular enterprise device is to delete or deactivate the at least one electronic profile. ### Claim 9 (depends on 1) The method of claim 1, wherein a first electronic profile of the plurality of electronic profiles comprises one or more first enterprise policies for the enterprise user for a first enterprise location of the plurality of enterprise locations and a second electronic profile of the plurality of electronic profiles comprises one or more second enterprise policies for the enterprise user for a second enterprise location of the plurality of enterprise locations and wherein at least one of the one or more first enterprise policies for the enterprise user for the first enterprise location is different from at least one of the one or more second enterprise policies for the enterprise user for the second enterprise location. ### Claim 10 (depends on 1) The method of claim 1, wherein the determining is based on capability information obtained by the management node from the particular enterprise device through authentication or association of the particular enterprise device to a wireless local area access network of the enterprise network in which the capability information indicates that the particular enterprise device supports the electronic profile capability and the wireless wide area access network connectivity capability. ### Claim 11 One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to perform operations, comprising: generating, by a management node of an enterprise network, a plurality of electronic profiles for an enterprise user of the enterprise network, wherein the enterprise user is associated with a plurality of enterprise devices and each electronic profile of the plurality of electronic profiles comprises an employee identifier for the enterprise user and one or more enterprise policies for the enterprise user for each of an enterprise location of a plurality of enterprise locations; determining, by the management node of the enterprise network, that a a particular enterprise device of the plurality of enterprise devices of the enterprise user supports an electronic profile capability and a wireless wide area access network connectivity capability; and based on determining that the particular enterprise device supports the electronic profile capability and the wireless wide area access network connectivity capability, assigning at least one electronic profile of the plurality of electronic profiles to the particular enterprise device and providing, by the management node, the at least one electronic profile to the particular enterprise device via a wireless local area access network of the enterprise network, wherein the at least one electronic profile enables the particular enterprise device to connect to at least one wireless wide area access network of the enterprise network. ### Claim 12 (depends on 11) The media of claim 11, wherein the at least one electronic profile is at least one electronic subscriber identity module (eSIM) profile that enables the particular enterprise device to connect to the at least one wireless wide area access network of the enterprise network. ### Claim 13 (depends on 11) The media of claim 11, wherein providing the at least one electronic profile to the particular enterprise device includes sending a Mobile Device Management (MDM) protocol command to the particular enterprise device via the wireless local area access network of the enterprise network. ### Claim 14 (depends on 13) The media of claim 13, wherein the MDM protocol command indicates that the particular enterprise device is to install and activate the at least one electronic profile and the at least one electronic profile is included with the MDM protocol command. ### Claim 15 (depends on 13) The media of claim 13, wherein the MDM protocol command indicates that the particular enterprise device is to install and activate the at least one electronic profile upon obtaining the at least one electronic profile from a network location, wherein the network location is included with the MDM protocol command. ### Claim 16 (depends on 11) The media of claim 11, the operations further comprising: sending, by the management node, a message to the particular enterprise device, wherein the message indicates that the particular enterprise device is to delete or deactivate the at least one electronic profile. ### Claim 17 A management node of an enterprise network, comprising: at least one memory element for storing data; and at least one processor for executing instructions associated with the data, wherein executing the instructions causes the management node to perform operations, comprising: generating, a plurality of electronic profiles for an enterprise user of the enterprise network, wherein the enterprise user is associated with a plurality of enterprise devices and each electronic profile of the plurality of electronic profiles comprises an employee identifier for the enterprise user and one or more enterprise policies for the enterprise user for each of an enterprise location of a plurality of enterprise locations; determining, by the management node of the enterprise network, that a particular enterprise device of the plurality of enterprise devices of the enterprise user supports an electronic profile capability and a wireless wide area access network connectivity capability; and based on determining that the particular enterprise device supports the electronic profile capability and the wireless wide area access network connectivity capability, assigning at least one electronic profile of the plurality of electronic profiles to the particular enterprise device and providing, by the management node, the at least one electronic profile to the particular enterprise device via a wireless local area access network of the enterprise network, wherein the at least one electronic profile enables the particular enterprise device to connect to at least one wireless wide area access network of the enterprise network. ### Claim 18 (depends on 17) The management node of claim 17, wherein the at least one electronic profile is at least one electronic subscriber identity module (eSIM) profile that enables the particular enterprise device to connect to the at least one wireless wide area access network of the enterprise network. ### Claim 19 (depends on 17) The management node of claim 17, wherein providing the at least one electronic profile to the particular enterprise device includes sending a Mobile Device Management (MDM) protocol command to the particular enterprise device via the wireless local area access network of the enterprise network. ### Claim 20 (depends on 19) The management node of claim 19, wherein the MDM protocol command indicates that the particular enterprise device is to install and activate the at least one electronic profile and the at least one electronic profile is included with the MDM protocol command.