Enhanced authentication for provision of mobile services

A session establishment device comprising:

• a network interface;
• a memory device;
• and
• a processor in communication with the memory device and the network interface, the processor being configured to:
• receive, via the network interface, a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with a subscriber and a received equipment identifier associated with the user device,
• obtain a subscriber record associated with the subscriber, wherein the subscriber record stores a stored subscriber identifier and a stored equipment identifier,
• compare the received equipment identifier to the stored equipment identifier to determine whether the user equipment is associated with the subscriber in the subscriber record, and
• conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

A method for performing authentication, the method comprising:

• receiving, at a session establishment device, a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with a subscriber and a received equipment identifier associated with the user device,
• obtaining a subscriber record associated with the subscriber, wherein the subscriber record stores a stored subscriber identifier and a stored equipment identifier;
• comparing the received equipment identifier to the stored equipment identifier to determine whether the user equipment is associated with the subscriber in the subscriber record;
• and
• conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.