# US 12,010,514 B2 · Methods and systems to authenticate a user account using an internet protocol (IP) address > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,010,514 B2 - Document ID: US12010514B2 - Status: Granted - Kind: B2 - Application number: 17/695,682 - Filed: 2022-03-15 - Published: 2023-09-21 - Granted: 2024-06-11 - Earliest claimed: 2022-03-15 - Assignees: T-Mobile Innovations LLC - Applicants: T-Mobile Innovations LLC - Inventors: Ahmad Al Accad; Pablo Medeiros Dominguez; James Latham; David W. Vaden - Web page: https://patentgrep.com/patent/US12010514B2 ## CPC - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 12/72: Subscriber identity - H04W 8/20: Transfer of user or subscriber data - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method comprises extracting, by an authentication application of an identity and access management system, an Internet Protocol address of a carrier hotspot device from a data packet received from an access device, wherein the access device is connected to the carrier network using the carrier hotspot device, wherein the Internet Protocol address is assigned to the carrier hotspot device when the carrier hotspot device attaches to the carrier network, transmitting, by the authentication application to an identification application in a core network of the carrier network, the Internet Protocol address of the carrier hotspot device, and receiving, by the authentication application from the identification application, an identifier of the carrier hotspot device associated with the Internet Protocol address. ## Claims ### Claim 1 A method for authorizing access to a user account by an access device communicatively coupled to a carrier hotspot device attached to a carrier network, wherein the method comprises: receiving, by an authentication application of an identity and access management system from the access device, credentials for creating or logging in to the user account associated with a user, wherein the access device is connected to the carrier network using the carrier hotspot device; extracting, by the authentication application, an Internet Protocol address of the carrier hotspot device from a data packet received from the access device, wherein the Internet Protocol address is assigned to the carrier hotspot device when the carrier hotspot device attaches to the carrier network; transmitting, by the authentication application to an identification application in a core network of the carrier network, the Internet Protocol address of the carrier hotspot device, requesting the identification application to provide an identifier of a device registered with the carrier network that has been allocated the Internet Protocol address; receiving, by the authentication application from the identification application, the identifier of the carrier hotspot device associated with the Internet Protocol address; and providing, by the authentication application to the access device, an indication that the access device is permitted to create the user account or granted access to the user account. ### Claim 2 (depends on 1) The method of claim 1, wherein the Internet Protocol address of the carrier hotspot device is extracted from a source address or source identifier field of the data packet received from the access device. ### Claim 3 (depends on 1) The method of claim 1, wherein the credentials are received in the data packet. ### Claim 4 (depends on 1) The method of claim 1, wherein the identifier of the carrier hotspot device is either a Mobile Subscriber Integrated Services Digital Network (MSISDN) number uniquely identifying a subscription of the device, or an International Mobile Subscriber Identity (IMSI). ### Claim 5 (depends on 1) The method of claim 1, wherein the carrier hotspot device comprises a Subscriber Identity Module (SIM) card or an electronic SIM (eSIM) profile. ### Claim 6 (depends on 1) The method of claim 1, wherein the carrier hotspot device is a dedicated hotspot device that is not capable of transmitting or receiving short messaging service (SMS) messages. ### Claim 7 A method for authorizing access to a user account by a carrier hotspot device attached to a carrier network, wherein the method comprises: receiving, by an authentication application of an identity and access management system, from a carrier hotspot device connected to the carrier network, a request to create or log in to the user account, wherein the request includes an Internet Protocol address of the carrier hotspot device, wherein the Internet Protocol address is assigned to the carrier hotspot device when the carrier hotspot device attaches to the carrier network; extracting, by the authentication application, the Internet Protocol address of the carrier hotspot device from the request; transmitting, by the authentication application to an identification application in a core network of the carrier network, the Internet Protocol address of the carrier hotspot device, requesting the identification application to provide an identifier of a device registered with the carrier network that has been allocated the Internet Protocol address; receiving, by the authentication application from the identification application, the identifier of the carrier hotspot device associated with the Internet Protocol address; and providing, by the authentication application to the carrier hotspot device, an indication that the carrier hotspot is permitted to create the user account or granted access to the user account. ### Claim 8 (depends on 7) The method of claim 7, wherein the identifier of the carrier hotspot device is either a Mobile Subscriber Integrated Services Digital Network (MSISDN) number uniquely identifying a subscription of the device, or an International Mobile Subscriber Identity (IMSI). ### Claim 9 (depends on 7) The method of claim 7, wherein the carrier hotspot device comprises a Subscriber Identity Module (SIM) card or an electronic SIM (eSIM) profile. ### Claim 10 (depends on 7) The method of claim 7, wherein the carrier hotspot device is not capable of transmitting or receiving short messaging service (SMS) messages. ### Claim 11 (depends on 7) The method of claim 7, wherein the identification application maintains address-to-identifier mappings storing associations between Internet Protocol addresses of devices registered with the carrier network and identifiers associated with the devices registered with the carrier network. ### Claim 12 (depends on 7) The method of claim 7, further comprising storing the credentials at the identity and access management system after the access device is permitted to create the user account. ### Claim 13 A system comprising: at least one processor; at least one non-transitory memory; an authentication application, stored in the at least one non-transitory memory, which when executed by the at least one processor, causes the at least one processor to be configured to: obtain an Internet Protocol address of a carrier hotspot device, wherein an access device is connected to a carrier network using the carrier hotspot device, wherein the Internet Protocol address is assigned to the carrier hotspot device when the carrier hotspot device attaches to the carrier network; an identification application in a core network of the carrier network, stored in the at least one non-transitory memory, which when executed by the at least one processor, causes the at least one processor to be configured to: receive, from the authentication application, the Internet Protocol address of the carrier hotspot device; determine an identifier of the carrier hotspot device associated with Internet Protocol address based on address-to-identifier mappings accessible to the identification application; and transmit the identifier to the authentication application, and wherein the authentication application further causes the at least one processor to be configured to provide, to the access device, an indication that the access device is permitted to create a user account or granted access to the user account. ### Claim 14 (depends on 13) The system of claim 13, wherein the authentication application further causes the at least one processor to be configured to receive, from the access device, credentials for creating or logging in to the user account associated with the user, prior to obtaining the IP address of the carrier hotspot device. ### Claim 15 (depends on 13) The system of claim 13, wherein to obtain the Internet Protocol address of the access device and the carrier hotspot device, the authentication application further causes the at least one processor to be configured to extract an Internet Protocol address of the carrier hotspot device from a data packet received from the access device. ### Claim 16 (depends on 13) The system of claim 13, wherein the identifier of the carrier hotspot device is either a Mobile Subscriber Integrated Services Digital Network (MSISDN) number uniquely identifying a subscription of the device, or an International Mobile Subscriber Identity (IMSI). ### Claim 17 (depends on 13) The system of claim 13, wherein the carrier hotspot device comprises a Subscriber Identity Module (SIM) card or an electronic SIM (eSIM) profile. ### Claim 18 (depends on 13) The system of claim 13, wherein the access device is not capable of transmitting or receiving short messaging service (SMS) messages, and wherein the access device is not capable of sensing or transmitting biometric data. ### Claim 19 (depends on 13) The system of claim 13, wherein the identification application further causes the at least one processor to be configured to maintain address-to-identifier mappings storing associations between Internet Protocol addresses of devices registered with the carrier network and identifiers associated with the devices registered with the carrier network. ### Claim 20 (depends on 13) The system of claim 13, wherein the authentication application further causes the at least one processor to be configured to store credentials related to the user account at the identity and access management system after the access device is permitted to create the user account.