DE102020004232B3 - Subscriber identity module with profile and initial start-up - Google Patents

Abstract

The invention creates a subscriber identity module, comprising a profile that has not yet been activated for permanent use for authentications in a cellular network of a network operator, characterized by a registration applet (RA) implemented in the subscriber identity module, which is set up for initial operation of the subscriber identity module with the Recognize profile in a terminal for authentication in the mobile network and, in response to the detection of such a first-time operation, to cause a text message to be sent to the terminal or to the subscriber identity module via the mobile network via the subscriber identity module or the terminal and is received again by the terminal and is shown on a display of the terminal, with a network address (URL) of a registration page of the network operator being shown in the displayed text message, which registration page a user of the subscriber identity module invites you to transmit registration data, in particular the predetermined registration data, to a registration server of the network operator.

Description

Field of invention

The invention relates to a subscriber identity module comprising a profile implemented therein, or set up so that a profile can be implemented therein, the profile being set up to authenticate the subscriber identity module to a cellular network.

The world is networked on the move, and mobile networking is continuing. Mobile radio-capable end devices communicate via cellular networks. Smartphones and cell phones are among the classic mobile radio-compatible end devices. Mobile radio-compatible end devices also include control devices (control devices or measuring devices or combined control / measuring devices) for industrial facilities in the commercial or private environment. Industrial facilities are, for example, production plants that have one or more control devices (terminals) that can communicate with a background system and / or with one another via a cellular network. Other industrial facilities are smart home facilities such as heating or electricity consumers with end devices in the form of control devices.

To use a mobile radio-enabled terminal device, such as a smartphone or cell phone, in a mobile radio network of a network operator, the terminal device contains a subscriber identity module with a subscription profile or profile for short. The profile accomplishes the configuration of the end device and the connection of the end device in the cellular network. The profile is formed by a data record that enables the establishment, operation and disconnection of a connection of the terminal in the cellular network, and includes, for example, a cryptographic authentication key Ki and an International Mobile Subscriber Identity IMSI.

The terminal itself has one or more terminal chips for operating functions of the terminal. Current smartphones, for example, typically have at least three terminal chips, namely a transceiver IC that carries out the physical radio communication, a baseband processor (or modem) that carries out functions for data transmission via radio communication at the protocol level, and an application processor AP, on which the operating system and application software run. Transceiver ICs for other radio channels can be provided as additional terminal chips, in particular for short-range radio channels such as NFC (NFC: near field communication) or Bluetooth.

The subscriber identity module can be designed in different form factors, in particular plug-in, embedded, integrated and software. Subscriber identity modules from the plug-in and embedded form factor are arranged on a dedicated, dedicated chip or SoC (system-on-chip). Examples of plug-ins are SIM cards (SIM = Subscriber Identity Module) or USIM cards (Universal SIM) or UICC (Universal Integrated Circuit Card) and contact the end device via a card reader. Alternatively, the dedicated chip can be integrated into a housing that can be or firmly soldered into the terminal. A subscriber identity module that can be soldered in / soldered in is provided with the addition “embedded” and designated as eUICC, where e stands for embedded and the further designation is taken from the appropriately equipped plug-in. Other possible form factors of a subscriber identity module are integrated subscriber identity modules that are integrated on a terminal chip or SoC (system-on-chip) of the terminal, i.e. do not have their own chip. Integrated subscriber identity modules are provided with the addition "integrated" and, for example, as integrated UICC, iUICC. Further possible form factors of a subscriber identity module are pure software modules with the functionality of a subscriber identity module, which are integrated in a terminal chip.

For advertising purposes, it is common for network operators to issue preconfigured, but not yet activated, subscriber identity modules to customers, with which the customer can use the network operator's services in the cellular network on a trial basis. The preconfigured but not yet activated subscriber identity module already contains a (subscription) profile, but this has not yet been activated and therefore cannot yet be fully used.

So that the customer can start using the services, or in other words can use the subscriber identity module permanently for authentications in the cellular network of a cellular network operator, he must register with a registration server of the network operator by entering registration data. Only after registration does the network operator activate the services for the customer, and the customer can use the services and use the subscriber identity module permanently for authentications in the cellular network of a cellular network operator. For example, personal data such as name, date of birth, address and the like are requested as registration data.

If the customer uses the subscriber identity module, which has been preconfigured for the use of services but has not yet been activated, in a terminal for the first time and the terminal and thus the If the subscriber identity module starts, he / she has not yet registered with the network operator in many cases and cannot yet use the services.

It would be desirable for the customer to be guided through the process of registration with the registration server of the network operator in the simplest and most convenient way possible.

State of the art

In the following, three known solutions are presented for directing a customer of a preconfigured but not yet activated subscriber identity module to register with the registration server, together with the disadvantages and problems of the respective solution.

Launch browser command solution.

With the Launch Browser solution, the Sim Toolkit command Launch Browser is started by the subscriber identity module, and a web browser is started in response to this on the end device. The web browser can already be started with the network address (URL) of the registration server. Unfortunately, only some of the end devices support the Launch Browser command, or the command is blocked by the operating system.

Open channel command solution.

In the case of the open channel solution, the subscriber identity module starts the Sim Toolkit command Open Channel, and in response to this, a data channel (data communication channel) is set up to a server, optionally directly to the registration server. The data channel can run via the cellular radio interface or via a short-range radio connection such as WLAN (WiFi). This solution can only be used if the terminal already has some way of using the cellular network, for example with a second, already registered subscriber identity module. The open channel command is also not supported by all end devices.

Display text command solution.

With the Display Text solution, the Sim Toolkit command Display Text is started by the subscriber identity module, with the network address URL of the registration server as the text to be displayed, and in response to this, the network address of the registration server is displayed as simple text on the display of the end device. The customer can manually type this text into a browser and thus open the registration page of the registration server in order to register. Typing is tedious and error-prone. It is not possible to call up the network address directly using the displayed text, since text that is displayed using Display Text cannot contain any hyperlinks that can be selected.

In the three known solutions described, the profile present in the subscriber identity module allows the communication channels operated there to be opened and operated, but not fully used for authentication in a cellular network, and thus no normal use of the terminal for telephony, data retrieval, calling up pages on the Internet and the same.

The document EP2938108B1 from the prior art discloses a method for downloading a profile into a subscriber identity module UICC. A control unit installed in a mobile radio terminal generates a virtual SMS message. A subscriber identity module UICC contained in the mobile radio terminal receives a signal from the control unit to initiate a profile download which contains the virtual SMS message. The UICC accesses a profile management server and receives a profile from the profile management server via the mobile radio terminal.

The document US10334428B1 from the prior art discloses a method for the automated downloading of a profile from a SIM remote provisioning platform into a secure element as soon as the secure element is put into operation, provided that a profile folder for the secure element is on the SIM remote provisioning platform is present.

The document US2020 / 0178070A1 from the prior art discloses a method for downloading an eSIM into a mobile radio device that does not contain a bootstrap provisioning profile in order to obtain access to a cellular radio network. The mobile radio device uses a bootstrap connection mode of the cellular radio network to contact an MNO server and to obtain the URL address of a provisioning server from it. Finally, the mobile radio device sends one or more hardware identifiers, for example the device identifier IMEI, to the provisioning server and obtains an eSIM from the provisioning server.

Summary of the invention

The invention is based on the object of specifying a solution that can be used as universally as possible in order to enable a user who is putting a preconfigured but not yet activated subscriber identity module into operation in a terminal for the first time. guide through the process of registering with the network operator's registration server.

The object is achieved by a subscriber identity module according to claim 1. Advantageous embodiments of the invention are specified in the dependent claims.

The subscriber identity module according to the invention according to claim 1 comprises a profile which is set up to authenticate the subscriber identity module to a cellular network of a network operator. The subscriber identity module has not yet been activated for permanent use for authentications in a cellular network of a network operator, so it does not yet allow normal use of a terminal for telephony, data retrieval, calling up pages on the Internet and the like. To enable the subscriber identity module for permanent use, it is necessary for a user of the terminal to transmit predetermined registration data to a registration server of the network operator. The subscriber identity module is characterized by a registration applet implemented in the subscriber identity module, which is set up to recognize an initial commissioning of the subscriber identity module with the profile in a terminal for authentication in the mobile radio network and, in response to the recognition of such an initial commissioning, to cause by the subscriber identity module or by the terminal, via the cellular network, a text message is sent to the terminal or to the subscriber identity module and is received again by the terminal and shown on a display of the terminal, with a network address in the displayed text message Registration page of the network operator is displayed, which registration page invites a user of the subscriber identity module to transmit registration data to a registration server of the network operator.

The sending of text messages, for example SMS messages according to the GSM standard, is supported by almost all mobile devices. Thus, with a registration applet that causes a text message to be sent in response to the subscriber identity module being put into operation for the first time, a solution is created that can be implemented with almost all terminals. Text messages, on the other hand, enable the displayed text to be transferred directly to a web browser, so that the text does not have to be typed.

Therefore, according to claim 1, a subscriber identity module is created that offers a universally applicable solution to guide the user, who puts a preconfigured but not yet activated subscriber identity module into operation in a terminal for the first time, through the process of registration with the network operator's registration server.

According to a preferred embodiment of the invention, the network address shown on the display of the terminal is equipped with a hyperlink which is set up to accept an input from the user and to call up the registration page in response to the acceptance of the input. In the event that the end device is a smartphone and the display is a touch display, the user only has to tap the network address of the registration page stored with the hyperlink in order to open the registration page in the smartphone's web browser without further interaction.

The registration data optionally include personal data of the user, the personal data including one or more of the following elements: a name of the user, a date of birth of the user, an address of the user, payment details for payments by the user for the use of the subscriber identity module for authentications in the cellular network .

The registration applet is optionally set up to initiate the sending of the text message using one or more SIM toolkit commands, STKs, the received text message being displayed on the display of the terminal.

The text message can optionally be designed as an SMS message.

The transmission of the text message to the terminal takes place optionally by storing the text message in the elementary file EF-SMS of the subscriber identity module according to GSM or UMTS or LTE or a successor standard.

• - ein Aktivierungszustand des Profils ist nicht-aktiviert;
• - noch kein Endgeräte Identifikationsnummer (IMEI) wurde aus dem Endgerät ausgelesen und in das Teilnehmeridentitätsmodul gespeichert;
• - noch keine erstmalige Textnachricht wurde übermittelt;
• - die Registrierungs-Applikation wurde nicht durch den Registrierungs-Server deaktiviert.

Optionally, the registration applet is set up to recognize the initial start-up of the subscriber identity module with the profile on the basis of at least one of the following criteria:

• - an activation state of the profile is not activated;
• - no terminal identification number (IMEI) has yet been read from the terminal and stored in the subscriber identity module;
• - no first text message has yet been transmitted;
• - the registration application was not deactivated by the registration server.

• - Erkennen, im Teilnehmeridentitätsmodul oder im Endgerät, einer erstmaligen Inbetriebnahme des Teilnehmeridentitätsmoduls mit dem Profil in einem Endgerät zur Authentisierung im Mobilfunknetz, und
• - in Reaktion auf das Erkennen einer solchen erstmaligen Inbetriebnahme, Veranlassen, dass, durch das Teilnehmeridentitätsmodul oder durch das Endgerät, über das Mobilfunknetz eine Text-Nachricht an das Endgerät oder an das Teilnehmeridentitätsmodul gesendet wird und durch das Endgerät wieder empfangen wird und auf einem Display des Endgeräts angezeigt wird, wobei in der angezeigten Text-Nachricht eine Netzwerkadresse (URL) einer Registrierungsseite des Netzbetreibers angezeigt wird, welche Registrierungsseite einen Nutzer des Teilnehmeridentitätsmoduls einlädt, Registrierungsdaten, insbesondere die vorbestimmten Registrierungsdaten, an einen Registrierungsserver des Netzbetreibers zu übermitteln.

A method for activating a subscriber identity module comprises: by means of a registration applet implemented in the subscriber identity module,

• - Recognize, in the subscriber identity module or in the terminal, an initial commissioning of the subscriber identity module with the profile in a terminal for authentication in the mobile network, and
• - In response to the detection of such a first-time operation, causing a text message to be sent to the terminal or to the subscriber identity module by the subscriber identity module or by the terminal via the cellular network and received again by the terminal and on a display of the terminal is displayed, with a network address (URL) of a registration page of the network operator being displayed in the displayed text message, which registration page invites a user of the subscriber identity module to transmit registration data, in particular the predetermined registration data, to a registration server of the network operator.

The method optionally further comprises the further steps: recognizing, in the case of the registration server, that the user has provided the registration server with the predetermined registration data sufficient to activate the subscriber identity module; - In response to the recognition of the provision of sufficient registration data, enabling the subscriber identity module for permanent use for authentications in a cellular network of a network operator.

Optionally, the method further comprises the step: after the text message has been sent, deactivating the registration applet.

Figure list

• 1 ein mobiles Endgerät und ein Teilnehmeridentitätsmodul mit einem Registrierungs-Applet.

In the following, the invention is explained in more detail on the basis of exemplary embodiments and with reference to the drawing, in which:

• 1 a mobile terminal and a subscriber identity module with a registration applet.

Detailed description of exemplary embodiments

1 shows a mobile terminal and a subscriber identity module SIM with a registration applet RA . The subscriber identity module includes a profile in order to be able to authenticate the subscriber identity module later to a cellular network of a network operator, which, however, has not yet been activated for permanent use for authentications in a cellular network. To enable the subscriber identity module for permanent use, it is also necessary for a user of the terminal to transmit predetermined registration data to a registration server of the network operator. For this purpose, there is a registration applet in the subscriber identity module RA implemented, which makes it easier for the user of the terminal to register that is still required to activate the subscriber identity module. The registration applet RA recognizes an initial commissioning of the subscriber identity module with the profile in a terminal. The registration applet initiates the response to the detection of initial commissioning RA that, by the subscriber identity module or by the terminal, a text message is sent to yourself via the cellular network and is shown on a display of the terminal. In the displayed text message, a network address URL of a registration page of the network operator is displayed, which invites a user of the subscriber identity module to transmit registration data, in particular the predetermined registration data, to a registration server of the network operator. The user only has to click on the URL, a registration page is displayed and can immediately enter the required registration data without an extensive search.

Claims (10)

Subscriber identity module, comprising a profile which is set up to authenticate the subscriber identity module to a cellular network of a network operator, and which has not yet been activated for permanent use for authentications in a cellular network of a network operator, it being necessary to activate the subscriber identity module for permanent use that a user of a terminal transmits predetermined registration data to a registration server of the network operator, characterized by a registration applet (RA) implemented in the subscriber identity module, which is set up to recognize and react to initial operation of the subscriber identity module with the profile in the terminal for authentication in the mobile network on the detection of such a first-time operation to cause that, through the subscriber identity module or through the terminal, a text message a n is sent to the terminal or to the subscriber identity module and is received again by the terminal and is shown on a display of the terminal, with a network address (URL) of a registration page of the network operator being displayed in the displayed text message, which registration page invites a user of the subscriber identity module to transmit registration data to a registration server of the network operator. Subscriber identity module according to Claim 1 , wherein the network address shown on the display of the terminal is equipped with a hyperlink which is set up to receive an input from the user and to call up the registration page in response to the acceptance of the input. Subscriber identity module according to Claim 1 or 2 , wherein the registration data comprise personal data of the user, wherein the personal data comprise one or more of the following elements: a name of the user, a date of birth of the user, an address of the user, payment details for payments by the user for the use of the subscriber identity module for authentications in Cellular network. Subscriber identity module according to one of the Claims 1 until 3 , the registration applet (RA) being set up to initiate the sending of the text message by means of one or more SIM toolkit commands, STKs, the received text message being displayed on the display of the terminal. Subscriber identity module according to one of the Claims 1 until 4th , wherein the text message is designed as an SMS message. Subscriber identity module according to one of the Claims 1 until 4th The transmission of the text message to the terminal takes place by storing the text message in the elementary file EF-SMS of the subscriber identity module in accordance with GSM or UMTS or LTE or a successor standard. Subscriber identity module according to one of the Claims 1 until 6th wherein the registration applet (RA) is set up to recognize the initial start-up of the subscriber identity module with the profile on the basis of at least one of the following criteria: an activation state of the profile is not activated; - no terminal identification number (IMEI) has yet been read from the terminal and stored in the subscriber identity module; - no first text message has yet been transmitted; - the registration application was not deactivated by the registration server. A method for activating a subscriber identity module comprising a profile which is set up to authenticate the subscriber identity module to a cellular network of a network operator and which has not yet been activated for permanent use for authentications in a cellular network of a network operator, which is required to activate the subscriber identity module for permanent use is that a user of a terminal transmits predetermined registration data to a registration server of the network operator, characterized by , by means of a registration applet (RA) implemented in the subscriber identity module, - recognition, in the subscriber identity module or in the terminal, an initial start-up of the subscriber identity module with the profile in ei -the terminal for authentication in the mobile network, and - in response to the detection of such a first-time operation, causing that, through the subscriber identity module or by the terminal, a text message is sent to the terminal or to the subscriber identity module via the cellular network and is received again by the terminal and shown on a display of the terminal, with a network address (URL) in the displayed text message a registration page of the network operator is displayed, which registration page invites a user of the subscriber identity module to transmit registration data to a registration server of the network operator. Procedure according to Claim 8 , comprising the further steps: recognizing, at the registration server, that the user has provided to the registration server the predetermined registration data which are sufficient to activate the subscriber identity module; - In response to the recognition of the provision of sufficient registration data, enabling the subscriber identity module for permanent use for authentications in a cellular network of a network operator. Procedure according to Claim 8 or 9 , further comprising the step: after sending the text message, deactivating the registration applet.

Images