# US 12,192,761 B1 · Systems and methods for bootstrapped onboarding of cellular devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,192,761 B1
- Document ID: US12192761B1
- Status: Granted
- Kind: B1
- Application number: 17/390,053
- Filed: 2021-07-30
- Granted: 2025-01-07
- Earliest claimed: 2021-07-30
- Assignees: T-Mobile USA, Inc.
- Applicants: T-Mobile USA, Inc.
- Inventors: Deepthi Jonnala; Phani Ramisetty; Kyeong Hun An
- Web page: https://patentgrep.com/patent/US12192761B1

## CPC

- H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications}
- H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04W 8/18: Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
- H04W 12/06: Authentication
- H04W 12/40: Security arrangements using identity modules
- H04W 60/00: Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
- G16Y 10/75: Information technology; Communication
- G16Y 30/10: Security thereof
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G16Y: INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]

## Abstract

Systems and methods for using a bootstrap Subscriber Identity Module (SIM) to bootstrap an Internet-of-Things (IoT) device on a cellular network. The IoT device uses bootstrap information stored on the bootstrap SIM to authenticate the IoT device with the cellular network. The cellular network receives the bootstrap information and uses a certificate repository to check the bootstrap information against. Upon successful authentication, the IoT device is provided with credentials to register the IoT device on the cellular network.

## Claims

### Claim 1

A method, comprising:
powering up an Internet of Things (IoT) device, wherein the IoT device is initially unauthenticated;
reading bootstrap information from a subscriber identification module (SIM) installed on the IoT device;
attaching the IoT device to a cellular network;
initiating a bootstrap request by transmitting the bootstrap information stored on the SIM to a bootstrap server of the cellular network;
transmitting an additional authentication request from the IoT device using a one-time password installed on the IoT device when the IoT device was manufactured; and
receiving a notification to halt additional authentication using the one-time password because the IoT device is already authenticated using the bootstrap SIM.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
receiving device management parameters and credentials from the bootstrap server;
transmitting a register client request to an IoT server of the cellular network using the device management parameters and credentials provided by the bootstrap server;
receiving a notification of a creation of a registration of the IoT device; and
transmitting an acknowledgement of the registration.

### Claim 3 (depends on 1)

The method of claim 1, further comprising receiving an over the air update from the bootstrap server during the bootstrap request with the bootstrap server.

### Claim 4 (depends on 1)

The method of claim 1, further comprising updating the one-time password.

### Claim 5 (depends on 1)

The method of claim 1, wherein the bootstrap information includes identifying information about the IoT device.

### Claim 6 (depends on 5)

The method of claim 5, wherein the identifying information comprises an international mobile equipment identity of the IoT device.

### Claim 7

An IoT device, comprising:
a memory storing computer-executable instructions;
a bootstrap Subscriber Identity Module (SIM) having bootstrap information comprising a mobile network operator profile and Public Key Infrastructure (PKI) certificate, the bootstrap information stored on the bootstrap SIM; and
a processor in communication with the memory, the computer-executable instructions causing the processor to perform acts comprising:
reading bootstrap information from a subscriber identification module (SIM) installed on the IoT device;
attaching the IoT device to a cellular network;
initiating a bootstrap request by transmitting the bootstrap information stored on the SIM to a bootstrap server of the cellular network;
transmitting an additional authentication request from the IoT device using a one-time password installed on the IoT device when the IoT device was manufactured; and
receiving a notification to halt additional authentication using the one-time password because the IoT device is already authenticated using the bootstrap SIM.

### Claim 8 (depends on 7)

The IoT device of claim 7, further computer-executable instructions for:
receiving device management parameters and credentials from the bootstrap server;
transmitting a register client request to an IoT server of the cellular network using the device management parameters and credentials provided by the bootstrap server;
receiving a notification of a creation of a registration of the IoT device; and
transmitting an acknowledgement of the registration.

### Claim 9 (depends on 7)

The IoT device of claim 7, further computer-executable instructions for receiving an over the air update from the bootstrap server during the bootstrap request with the bootstrap server.

### Claim 10 (depends on 7)

The IoT device of claim 7, further computer-executable instructions for updating the one-time password.

### Claim 11 (depends on 7)

The IoT device of claim 7, wherein the bootstrap information further includes identifying information about the IoT device.

### Claim 12 (depends on 11)

The IoT device of claim 11, wherein the identifying information comprises an international mobile equipment identity of the IoT device.

### Claim 13

A non-transitory computer-readable storage medium having computer-executable instructions stored thereupon that, when executed by a computer, cause the computer to perform acts comprising:
receiving, at a bootstrap server of a cellular network, a bootstrap request from an IoT device comprising bootstrap information, the bootstrap information comprising a mobile network operator profile and a Public Key Infrastructure (PKI) certificate stored on a bootstrap SIM installed on the IoT device;
requesting certificate information relating to the bootstrap SIM from a certificate repository;
authenticating the certificate information;
receiving an additional authentication request from the IoT device using a one-time password installed on the IoT device when the IoT device was manufactured;
determining that the IoT device is already authenticated using the SIM; and
sending a notification to the IoT device to halt additional authentication using the one-time password.

### Claim 14 (depends on 13)

The non-transitory computer-readable storage medium of claim 13, further comprising computer-executable instructions that, when executed by the computer, cause the computer to perform the act comprising receiving an over the air update from the bootstrap server during the bootstrap request with the bootstrap server.

### Claim 15 (depends on 13)

The non-transitory computer-readable storage medium of claim 13, further comprising computer-executable instructions that, when executed by the computer, cause the computer to perform the act comprising updating the one-time password.

### Claim 16 (depends on 13)

The non-transitory computer-readable storage medium of claim 13, wherein the bootstrap information further comprises an international mobile equipment identity of the IoT device.