Technique for authenticating operators of wireless terminal devices

A method of authenticating an operator of a wireless terminal device, the terminal device comprising a subscriber identity module (SIM) wherein a subscription identifier is stored in the SIM, the method being performed by the terminal device and comprising

• wirelessly receiving an authentication request;
• requesting, in response to the authentication request, a set of biometric data of the operator of the first terminal device;
• receiving the set of biometric data from the operator at the terminal device;
• and
• wirelessly sending the subscription identifier, or a temporary identifier associated with the subscription identifier, and the set of biometric data of the operator for authentication of the operator, wherein
• the terminal device is communicating or starting to communicate with a communication endpoint that is located opposite to the terminal device, and wherein the authentication request has been triggered by the communication endpoint, and
• the communication endpoint is one of a second terminal device and a web server.

A network node or network node system for authenticating an operator of a wireless first terminal device, the first terminal device comprising a subscriber identity module, SIM, wherein a subscription identifier is stored in the SIM, the network node or network node system being configured to

• receive the subscription identifier or a temporary identifier associated with the subscription identifier;
• trigger an authentication request prompting the operator to enter the first set of biometric data, wherein the first set of biometric data is received responsive to the authentication request, the first terminal device is communicating or starting to communicate with a communication endpoint that is located opposite to the first terminal device, the authentication request is triggered by the communication endpoint, and the communication endpoint is one of a second terminal device and a web server;
• receive a first set of biometric data of the operator, wherein the first set of biometric data has been entered by the operator at the first terminal device;
• send a first database request towards a subscriber database in a core network domain of a wireless communication system, the first database request including the subscription identifier or the temporary identifier;
• receive, in response to the first database request, a second set of biometric data associated in the subscriber database with the subscription identifier or the temporary identifier;
• and
• authenticate the first set of biometric data on the basis of the second set of biometric data so as to obtain a first authentication result.

A wireless terminal device configured to assist in authenticating an operator thereof, the terminal device comprising a subscriber identity module, SIM, wherein a subscription identifier is stored in the SIM, the terminal device being configured to

• wirelessly receive an authentication request;
• request, in response to the authentication request, a set of biometric data of the operator of the terminal device;
• receive the set of biometric data from the operator at the terminal device;
• and
• wirelessly send the subscription identifier, or a temporary identifier associated with the subscription identifier, and the set of biometric data of the operator for authentication of the operator, wherein
• the terminal device is communicating or starting to communicate with a communication endpoint that is located opposite to the terminal device, and wherein the authentication request has been triggered by the communication endpoint, and
• the communication endpoint is one of a second terminal device and a web server.