KR101304779B1 - Virtual access module distribution apparatus and methods - Google Patents

Abstract

Disclosed are an apparatus and method for distributing an electronic access client module for use in an electronic device. In one embodiment, the access client module is a virtual subscriber identity module (VSIM) that can be downloaded from an online service for use in a cellular equipped device such as a smartphone. The online service may include a point of sale system for selling electronic devices to a user. The broker may be used to facilitate the selection of virtual subscriber identity modules (VSIMs). In addition, a provisioning service may be used to provision the selected VSIM.

Description

VIRTUAL ACCESS MODULE DISTRIBUTION APPARATUS AND METHODS}

Priority and Related Applications

This application claims the priority of US Provisional Patent Application No. 61 / 366,505, filed Jul. 21, 2010, entitled “Virtual SUBSCRIBER IDENTITY MODULE DISTRIBUTION SYSTEM”. Claims priority to co-owned co-pending US patent application Ser. No. 12 / 980,232, filed May 28 and entitled " VIRTUAL ACCESS MODULE DISTRIBUTION APPARATUS AND METHODS. &Quot; Each of the patent applications is incorporated herein by reference in its entirety.

This application is also filed on July 21, 2010, and claims 2011 priority US Patent Application Ser. No. 61 / 366,505, entitled "Virtual SUBSCRIBER IDENTITY MODULE DISTRIBUTION SYSTEM." Claims priority of co-pending US patent application Ser. No. 13 / 183,023, filed on July 14 and entitled VIRTUAL ACCESS MODULE DISTRIBUTION APPARATUS AND METHODS. Each of the applications is hereby incorporated by reference in its entirety.

The present application is also filed on June 14, 2010, and co-owned United States, entitled "METHODS FOR PROVISIONING SUBSCRIBER IDENTITY DATA IN A WIRELESS NETWORK," titled "Methods for Provisioning Subscriber Identity Data in a Wireless Network." Provisional Patent Application 61 / 354,653, filed July 21, 2010, co-owned co-owned US Provisional Patent Application No. 61, entitled "Virtual SUBSCRIBER IDENTITY MODULE DISTRIBUTION SYSTEM" / 366,505, filed Oct. 28, 2010, co-owned co-owned US entitled METHODS AND APPARATUS FOR ACCESS CONTROL CLIENT ASSISTED ROAMING, entitled "METHODS AND APPARATUS FOR ACCESS CONTROL CLIENT ASSISTED ROAMING" Provisional Patent Application 61 / 407,858, filed Oct. 28, 2010, entitled “Management S for Multiple Access Control Entities. YSTEMS FOR MULTIPLE ACCESS CONTROL ENTITIES, "co-owned US Provisional Patent Application 61 / 407,861, filed October 28, 2010, entitled" Method for Delivering Electronic Identification Components over a Wireless Network. " And co-owned US Provisional Patent Application No. 61 / 407,862, filed Oct. 28, 2010, entitled METHODS AND APPARATUS FOR DELIVERING ELECTRONIC IDENTIFICATION COMPONENTS OVER A WIRELESS NETWORK. METHODS AND APPARATUS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS, a jointly owned co-pending US Provisional Patent Application 61 / 407,866, filed October 29, 2010, Co-owned co-pending US Provisional Application No. 61 / 408,504, entitled “ACCESS DATA PROVISIONING SERVICE,” filed November 3, 2010 Co-pending US Provisional Patent Application No. 61 / 409,891, 2010 entitled “METHODS AND APPARATUS FOR ACCESS DATA RECOVERY FROM A MALFUNCTIONING DEVICE” Co-pending US Provisional Patent Application No. 61 / 410,298, filed Nov. 4 and entitled "SIMULACRUM OF PHYSICAL SECURITY DEVICE AND METHODS" Co-owned co-pending U.S. patent application entitled "APPARATUS AND METHODS FOR RECORDATION OF DEVICE HISTORY ACROSS MULTIPLE SOFTWARE EMULATION", filed on one application and entitled "Multiple Software Emulation" 61 / 413,317, filed November 22, 2010 and entitled "WIRELESS NETWORK AUTHENTICATION APPARATUS AND METHODS" Co-pending US Provisional Patent Application No. 12 / 952,082, filed November 22, 2010, entitled " APPARATUS AND METHODS FOR PROVISIONING ", for provisioning subscriber identity data in a wireless network. SUBSCRIBER IDENTITY DATA IN A WIRELESS NETWORK, a co-owned co-pending US provisional patent application No. 12 / 952,089, and filed Jan. 13, 2009, entitled “POSTPONED CARRIER CONFIGURATION” Claims the priority of co-owned US Provisional Patent Application No. 12 / 353,227, each of which is incorporated herein by reference in its entirety.

Copyright

Portions of this patent document contain material which is subject to copyright protection. The copyright owner does not object to the duplication of a patent document or patent disclosure by everyone, as indicated in the Patent Office patent file or record, but holds all copyrights.

1. Field of the Invention

FIELD OF THE INVENTION The present invention generally relates to the field of communications systems, and more particularly, in one exemplary aspect, user devices authenticate to a wireless network (eg, cellular network, WLAN, WMAN, etc.) using access control clients. It relates to a wireless system that allows.

2. Description of Related Technology

The present invention relates generally to a wireless system, such as a system in which devices communicate using a cellular network.

Wireless systems are used to provide voice and data services to user devices such as cellular telephones and computers.

Wireless devices generally include a Subscriber Identity Module (SIM) card. When a SIM card is manufactured, the SIM card is not associated with any particular user's account. During the normal SIM card activation process, the user's account of the carrier is associated with the SIM card. A device comprising a SIM card that has been activated in this manner can be used to obtain network services from a carrier.

Requesting the use of a SIM card may not always be desirable. For example, a user may want to purchase a wireless service even if the user cannot easily obtain a SIM card.

In addition, expensive wireless (eg, cellular) devices are often subsidized for the customer, ie sold at a loss to the customer so that the carrier can recover the cost of the subsidy into the service contract. Carrier subsidies allow carriers to incorporate the true price of expensive devices into reasonable service fees paid during the term of the contract, thus enabling a wider consumption market. As used herein, the term "subsidy lock" refers to a mechanism that, in general and without limitation, locks the device to operate only with the appropriate carrier. In existing solutions, subsidiary locks are difficult to enforce because the SIM card is locked to the carrier and the device itself is not locked.

Accordingly, it would be desirable to be able to provide an improved method and apparatus that provides users with the ability to obtain and use wireless network services. It would also be desirable to improve the ability to enforce grant locking within a wireless network.

SUMMARY OF THE INVENTION

The present invention addresses, inter alia, the needs described above by providing an apparatus and method for providing users with the ability to obtain and use wireless network services. In a first aspect of the invention, a method of distributing access clients is disclosed. In one embodiment, the method further comprises: requesting an access client, wherein the request determines an allowed carrier, provisions an access client associated with the allowed carrier, and provides one or more identifiers associated with the provisioned access client; ; Receiving one or more identifiers provided; Requesting service activation with a selected one of the provided one or more identifiers; And in response to successful service activation, downloading the access client associated with the selected one identifier.

In one variant, the access client is a virtual subscriber identity module (VSIM) and the selected one identifier is an International Mobile Equipment Identity (IMEI).

In another embodiment, a method is for deploying a VSIM, the method comprising: receiving a request for a virtual subscriber identity module (VSIM) including an International Mobile Equipment Identity (IMEI) in an online service implemented using computing equipment; And in response to receiving the request, downloading the VSIM from the online service to the electronic device via the communication network.

In a second aspect of the invention, a network apparatus for reserving a virtual subscriber identity module (VSIM) for a consumer device is disclosed. In one embodiment, an apparatus includes communication circuitry configured to communicate with a communication network, the communication network comprising at least one broker entity and one or more consumer devices, a processor, and a storage device in data communication with the processor. . The storage device, when executed by the processor, is configured to request one or more VSIMs for an identifier associated with the device (assigning one or more VSIMs due to this request), and to request service activation for an identifier associated with the device. By including instructions, one or more VSIMs assigned to the device are downloaded.

In one variation, the requested one or more VSIMs are stored in a provisioning service.

In another variation, the requested one or more VSIMs are generated at the trusted service management entity.

In another variation, the one or more generated VSIMs are wrapped in a device-specific wrapper.

In a third aspect of the invention, a network apparatus for use with a point of sale entity and a virtual subscriber identity module (VSIM) provisioning service is disclosed. In one embodiment, an apparatus includes communication circuitry, the communication network comprising a POS entity and a provisioning service, a processor, and a storage device in data communication with the processor. When executed by the processor, the storage device, in response to the first POS entity requesting one or more VSIMs, determines one or more allowed carriers, obtains one or more VSIMs from the provisioning service, and at least one of the one or more acquired VSIMs. And select, and provide computer-executable instructions configured to provide an identifier associated with the at least one selected to the first POS entity.

In one variant, the instructions are further configured to, when executed, receive a request for a VSIM from the device, the request including the provided identifier, and send the VSIM associated with the identifier to the device.

In another variation, the allowed carriers are determined by the brokering entity, which includes a database that maps a given identifier to one or more authorized carriers.

In a fourth aspect of the invention, a method for brokering a virtual subscriber identity module (VSIM) is disclosed. In one embodiment, a method includes receiving a request for one or more VSIMs, obtaining one or more VSIMs from a provisioning service, selecting at least one of the one or more acquired VSIMs, and at least one selected VSIM; Associating an identifier.

In one variation, the method further includes receiving a request including an associated identifier, and providing a selected VSIM.

In another variation, the VSIM obtained is device specific.

In another variation, the method also includes releasing one or more unselected VSIMs of the acquired VSIMs.

In a fifth aspect of the invention, a computer readable device is disclosed. In one embodiment, the apparatus includes a storage medium that, when executed, includes at least one computer program that brokers the VSIM.

In a sixth aspect of the invention, a VSIM brokering system is disclosed. In one embodiment, the system includes at least one POS or distribution entity, and at least one provisioning entity, each communicating with a brokering entity over a network.

From the accompanying drawings and the following detailed description, further features, the nature and various advantages of the present invention will become more apparent.

The features, objects, and advantages of the invention will become more apparent when taken in conjunction with the drawings from the following detailed description.
1 is a diagram of an exemplary wireless system in accordance with an embodiment of the present invention.
2 is a flowchart of exemplary steps for providing a mobile device with a set of allowed VSIMs, in accordance with an embodiment of the invention.
All Figures ⓒ Copyright 2009-2010 Apple Inc. All rights reserved. All rights reserved.

Reference is now made to the drawings, wherein like numerals refer to like parts throughout.

An example wireless system 10 in which a user can obtain wireless network service is shown in FIG. 1. In system 10, a user may be associated with device 12. Device 12 may be a cellular telephone, a computer equipped with cellular telephone communications circuitry, or other wireless user equipment. Device 12 may obtain a wireless service from the wireless network. The wireless network from which device 12 obtains wireless service may be, for example, a cellular telephone network that is part of communication network 14. The network 14 may include cellular telephone network equipment, wired and wireless local area network equipment, the Internet and other wide area networks, other network equipment, and combinations of such equipment.

System 10 may include a service from which a user can purchase a wireless product. As an example, a user may want to establish a relationship with a new wireless carrier. In order to allow a user to acquire a service from a wireless carrier, the user may want to acquire a subscriber identity module (SIM). Instead of acquiring a physical SIM card, the user may acquire an electronic version of the SIM card (sometimes referred to herein as a virtual SIM or VSIM). The VSIM can typically contain the same type of information stored on a physical SIM card. Unlike conventional SIM, VSIM, if desired, is a storage in device 12 that is not a SIM card (ie, a secure storage element such as non-volatile storage elements, solid state storage that is part of multi-use non-volatile memory, etc.). Can be stored in. With this type of approach, multiple VSIMs can be stored on a single device. The user can also easily obtain a new VSIM when a service by a new carrier is required (eg, when the user is traveling). Since the physical SIM card installation process can be avoided, the process of provisioning a new device can be simplified.

Other components and entities of device 12 and system 10 may each have associated computing equipment. This computing equipment can be implemented using one or more computers. For example, services may be provided that use servers implemented using one or more computers. Computers for a given server may be located in one location or may be geographically dispersed. The computing equipment of system 10 may interact via communication network 14 and communication paths 20, 22, 24, 25, 26, 28, and 30. Paths (links) 20, 22, 24, 25, 26, 28, and 30 can include wired and wireless links.

The user can use the service connected to the network 14 to obtain a VSIM. System 10 may include a service such as, for example, a virtual subscriber identity module (VSIM) broker 18. The broker 18 may be implemented using a standalone web site (eg), or may be implemented as part of another online service. The broker provides an intermediary service that allows merged interfaces, such as users, point-of-sale entities, to request and receive VSIM from numerous VSIM sources. In one embodiment of the present invention, the broker system intelligently restricts VSIM transactions based on various considerations, such as, for example, consumer price preferences, subsidy locks, and the like.

As mentioned above, wireless devices are generally subsidized to a customer through subsidiary locking. In existing solutions, subsidy locking is less ideal because the SIM card is locked to the carrier, not the device itself.

Thus, this deficiency is addressed in at least one aspect of the present invention through the use of a broker system that limits the VSIMs that a device can obtain and use. In one embodiment, this restriction is based on the distribution channel (eg, carrier network) that provided the device to the customer.

The user can use the device 12 or other equipment to interact with the broker 18 via the communication network 14. For example, a user may communicate with broker 18 using links 20 and 22 and a web browser or other client software.

The broker 18 may provide the user with an online list of virtual subscriber identity modules (VSIMs) available and available to the user on the device 12. For example, when a user contacts broker 18, broker 18 may provide the user with a list of available VSIMs. VSIMs are for example available carriers and / or carrier services (e.g., a first carrier for unlimited voice and data, a second carrier for voice only, a second carrier for limited voice and data, only data A third carrier, etc.). The user can interact with on-screen options that allow the user to select the desired VSIM and download it to device 12.

VSIMs listed by broker 18 may be purchased by the user. For example, a user may provide the broker 18 with credit card information or other account information that the broker 18 uses upon completion of a purchase transaction. The provided account information may be associated with the carrier, the manufacturer of the device 12 or other suitable entities. In some scenarios, a user may be entitled to obtain a VSIM for free. For example, when a user is purchasing a cellular phone from a carrier for the first time, the user may be entitled to obtain a corresponding VSIM for that cellular phone thanks to the purchase of the cellular phone.

Postponement system 32 may be used upon activation of device 12. The smoke system was filed on January 13, 2009, and is described in more detail in US Patent Application No. 12 / 353,227, entitled "POSTPONED CARRIER CONFIGURATION", which was previously filed. Completely incorporated by reference As described herein, the deferral system receives a request for activation of a mobile device, enables selection of a communication carrier from multiple communication carriers, and is selected to configure the mobile device. Provide information associated with the communication carrier.

Unfortunately, subsidy locking presents unique difficulties for deferred VSIM allocation operations. Unlike prior art solutions, postponement enables VSIM devices to be sold without a SIM assigned to the device (prior art solutions often physically packaged the device with an associated SIM card). If a device requests a VSIM after sale, the VSIMs should be limited to only the carrier or distribution channel associated with the purchased device.

Specifically, in one embodiment, device 12 may initially operate in an unactivated state. In the unactivated state, device 12 may exhibit reduced functionality. For example, device 12 may be capable of presenting instructions to a user instructing the user to plug device 12 into a host computer primarily or exclusively to access network 14, and device 12 may be cellular. It may also provide only functions other than services. If the user wants to activate the device 12, the device 12 may communicate with the deferral system 32 via paths 20 and 30.

Device 12 may be identified by a serial number or other unique identifier. For example, device 12 may be provided with an International Mobile Equipment Identity (IMEI) or other identifier during manufacture.

In one exemplary embodiment, the device may only be authorized to operate with a particular carrier or carriers. This allows the carrier to subsidize the price of the device by ensuring that only the appropriate VSIM will be provisioned for the device. The deferral system 32 may maintain a list that maps device identifiers (ie, IMEIs) to allowed carriers. For example, the deferral system 32 may maintain a database that maps a given IMEI to a given authorized carrier. The listing of device identifiers for allowed carriers is derived from (or limited to) distribution channels of devices (eg, from manufacturer to carrier, then to user) in one variation. In one such variant, the device manufacturer manufactures devices suitable for resale by multiple carriers, enabling carriers to subsidize devices for that network while still enabling postponement capabilities. (E.g., a VSIM is not assigned to a device until the consumer is ready to complete a payment).

During activation, device 12 may provide its IMEI to deferral system 32. The deferral system 32 may respond by downloading a list of allowed carrier (s) to the device 12. This list of allowed carriers (sometimes referred to as an activation ticket) specifies which wireless carriers the user of device 12 is authorized to use. Allowed carriers in the activation ticket may be identified using Mobile Country Code (MCC) and Mobile Network Code (MNC) information. Each VSIM may include International Mobile Subscriber Identity (IMSI) information that includes MCC and MNC values that specify carrier (s) associated with the VSIM.

Whether device 12 is powered or otherwise, device 12 may compare the MCC and MNC information from its VSIM IMSI with the authorized MCC and MNC information in the activation ticket. If these values do not match, device 12 may be left inactive.

The deferral system 32 may provide the broker 18 with information that VSIMs may be provided to a given device. VSIM will generally not be available to carriers that are not listed in an activation ticket, for example for a given device 12.

The broker 18 can interact with the deferral system 32 to determine which VSIMS will be available by the device. If a particular device is only available in conjunction with a limited set of carriers, for example, broker 18 may avoid presenting options to users of device 12 to purchase VSIMs associated with different carriers. If desired, the deferral system 32 or broker 18 may implement rules based on the current geographic location of the device 12. Device 12 may include satellite navigation system circuitry, such as Global Positioning System (GPS) circuitry, or may obtain information about the current geographical location. Other examples of location determination include receiving information from, for example, Wi-Fi broadcasts, cell tower broadcasts associated with a given wireless access point (eg, Wi-Fi AP), thereby determining the location of the device, such as at least the AP, user input, and the like. Can be localized in scope.

The deferral system 32 may filter out services that are not available based on the geographic location of the device 12. For example, the smoke system 32 may remove the carrier (or the region in which the carrier operates) if the carrier (or region) is not supported by the device 12 based on the current location. The location information may be used to sort the order of acceptable carriers (e.g., to generally provide a preference for a carrier / SIM relative to the geographic area in which device 12 is located).

Other types of filtering may also be used to simplify user selection. Some examples of filtering available may include user and / or network preferences, sponsoring (eg, providing a premium for the carrier to be listed higher), pricing, plan type, prepaid / postpaid, etc. It is not limited to this. For example, a user requesting a VSIM may be allowed to select a VSIM from a set of carriers (eg, determined by subsidiary locking of the user device) and a set of carriers further categorized with the highest to lowest prices. .

The broker 18 can then collect payments from the user. For example, broker 18 may collect payments when selling a prepaid VSIM to a user. The broker 18's ability to collect payments from the user may facilitate the system 10's ability to deliver VSIMs to the user.

It is not necessary for broker 18 to restrict the user to purchase one VSIM. For example, broker 18 may request and store a plurality of VSIMs for a given device. The broker 18 can then track which of these VSIMs will be delivered to the device.

If desired, broker 18 may facilitate release of undelivered VSIM. For example, device 12 may be sold to retailer A in region A. FIG. In such an environment, device 12 may be authorized for use with carriers X, Y, and Z. A separate VSIM for each of these carriers will be preloaded into device 12 or will be requested and downloaded by the device (eg, before or after device 12 is shipped to retailer A). Can be stored in the broker 18 as expected. The pre-loadable VSIM available to the device may allow broker 18 to avoid real-time interaction with a trusted service manager 38 (handling the creation of the VSIM). If device 12 was purchased at retailer A, one of three VSIMs could be activated and the other two (unused) VSIMs could be released. Release of unused VSIM can help reduce the costs associated with maintaining VSIM in system 10. VSIM may be associated with identifiers such as Integrated Circuit Card Identifiers (ICCIDs), and costs may be minimized by ensuring that uncommitted ICCIDs can be freely reused within system 10.

In addition, trusted service manager 38 may coordinate operations related to the creation and maintenance of VSIM. Each VSIM created may include some or all of the values contained in an existing physical SIM card. The contents of each VSIM can be encrypted for access by a trusted device. Examples of information that may be included in the VSIM include ICCID information, IMSI information, and other SIM data. The trusted service manager 38 may interact with the carrier to establish the scope of the VSIM. For example, a trusted service manager (i.e., a carrier of one of the carrier systems 36) has specified ICCID and IMSI ranges for a number of VSIMs to be purchased by the carrier using links such as links 25 and 26. 38). The carrier can set aside the space of the Home Location Register (HLR) in the system 36 for these VSIMs. The HLR can link the user account information with the device and phone number and can be used to authenticate the device requesting network access.

Subscriber identity module provisioning system (SPS) 34 may wrap the VSIM in a device-specific wrapper prior to delivery to device 12. In this way, the SPS 34 can ensure that a given VSIM can be provided to only one device at a time. The SPS 34 may maintain information about the current association between each device and each corresponding VSIM. General examples of device specific wrappers include, among others, encryption, encoding, formatting, and the like. For example, in one embodiment, the VSIM may be encrypted (ie, wrapped) using a symmetric or asymmetric encryption key specific to the receiving device.

The SPS 34 may interface with the broker 18 using links such as links 28 and 22. During VSIM provisioning, broker 18 may request a new VSIM for a given device and SPS 34 may deliver the corresponding VSIM that was encrypted for that particular device. If desired to release an unused VSIM, broker 18 may convey information to SPS 34 informing SPS 34 that a particular VSIM is no longer associated with a given device. If a VSIM has been downloaded to device A, for example, device A may instruct broker 18 to release VSIM back to SPS 34. As part of this process, device A can promise that it will no longer use that released VSIM (unless device A downloads VSIM from broker 18 again). The VSIM may be released to a particular target device or may be released to a general online storage location (eg, a storage location maintained by broker 18 or other suitable entity) for later use.

The point-of-sale system 16 may include computing equipment in physical storage and online storage computing equipment. The user can purchase the device 12 at the POS 16.

After purchasing device 12, a user may wish to download VSIM to device 12 using broker 18.

In one example scenario, a customer purchases device 12 before requesting a VSIM. In this type of scenario, POS 16 knows the identity of device 12 and assigns VSIM to the device by providing device-specific information such as IMEI for the device or serial number for the device to broker 18. You can request The VSIM may then be reserved by the broker 18 until the device 12 is powered on and requests to download the VSIM. As part of this VSIM allocation process, broker 18 may provide POS 16 with an ICCID associated with the VSIM via paths 22 and 24. The POS 16 may activate the service for the device 12 using the ICCID (ie, by linking the user account to the VSIM by interacting with the carrier system 36).

In another example scenario, the POS 16 may request the device 12 upon request for a VSIM (eg, when the customer is interested in obtaining a phone number associated with the VSIM from the broker 18 before purchasing the device 12). I don't know the identity of In such a situation, POS 16 may request VSIM without first specifying the device to which it will be assigned. The requested VSIM may not be assigned to a particular device and the VSIM may be kept in broker 18.

This type of scenario can occur during a fulfillment situation where a user buys the device 12 online. The VSIM may be a prepaid VSIM with an associated device phone number. The user may wish to select from a plurality of available telephone numbers. Once the user has selected a phone number, POS 16 may assign a corresponding VSIM to the user and inform the user of his new phone number. As part of this process, broker 18 may provide POS 16 with an ICCID that has not yet been assigned to a device. Thereafter, if the POS 16 knew the device identity (eg, the IMEI of the device 12), the POS 16 provides the broker 18 with the ICCID of the VSIM and the IMEI of the device. ) May link the VSIM to the device 12 (eg, by contacting the carrier system 36).

Once provisioned, device 12 may obtain VSIM from broker 18 via path 20. Device 12 may provide broker 18 with a VSIM download request that includes an IMEI, serial number, or other device-specific identification information. In response, broker 18 may check whether the VSIM that is waiting for download by device 12 exists in broker 18. If a VSIM is available, the VSIM can be downloaded and stored in the device 12. Device 12 may then be used in system 10 (eg, to obtain wireless network service from a carrier related to VSIM).

Example steps associated with the operating system 10 of FIG. 1 are shown in FIG. 2.

In the example of FIG. 2, a user purchases a device at POS 16 so that POS 16 knows the identity of the purchased device before the VSIM is requested.

In step 40, the POS 16 requests a VSIM from the broker 18. POS 16 may formulate a VSIM request for broker 18, including, for example, an IMEI, serial number, or other identifier associated with device 12.

In step 42, broker 18 may contact postponement system 32 to determine authorized carriers associated with the device. System 32 may maintain a mapping of allowed carriers for each IMEI (or other device identifier).

In step 44, broker 18 may request that SPS 34 assign a VSIM to the device associated with the appropriate authorized carrier.

In step 45, the SPS 34 retrieves the VSIM from the inventory, requests a new VSIM from the trusted service manager 38, and wraps the VSIM with a device-specific wrapper.

In step 46, in response to a request from broker 18, SPS 34 may provide a corresponding VSIM to broker 18.

In step 48, broker 18 may provide POS 16 with another identifier associated with an ICCID or VSIM.

In step 50, the POS 16 may activate the service for the user using the ICCID. For example, POS 16 may activate VSIM by providing the carrier's telephone number or other account information and ICCID to the carrier by requesting the carrier to link the user to VSIM.

In step 52, the carrier may receive a service activation request from the POS 16 and activate the VSIM.

The broker 18 may have a VSIM to download by the device 12. In step 54, the user can power on device 12 and connect device 12 to communication network 14. For example, a user may attach device 12 to a computer having internet access using a cable or the user may wirelessly access broker 18 using device 12. The device 12 may request that the VSIM for the device be downloaded from the broker 18 via the path 20 to the device. This request may include device identification information such as serial number, IMEI, or other device identifier. In response to receiving the request, broker 18 may download the corresponding VSIM to device 12.

If desired, the operations of steps 44 and 46 may be performed prior to the operations of step 40. If the device can support multiple carriers, the provisioning process can be performed in a batch. Multiple VSIMs may be pre-assigned to the device. When the POS 16 requests a VSIM and the device downloads this requested VSIM, another unused VSIM may be returned to the SPS 34 as not being used at all.

Although the foregoing procedures for limiting the VSIM available to a user have been described primarily in terms of subsidy lock scenarios, the methods and apparatus presented herein can be used in a wide variety of other applications. For example, a user may be limited to a set of available VSIMs in a limited list; This limited list use may find particular utility in enterprise operations when purchasing multiple "seats".

Likewise, in other scenarios, a user may be limited to a VSIM appropriate for a preferred set of partners.

In another use case, the carrier may reduce or even eliminate the need for a "brick and mortar" storefront for selling wireless devices (and storage lists); Instead, the device can be sold directly from an online retailer with a device operating configuration that is performed entirely in software / remotely.

The foregoing is merely illustrative of the principles of the invention and various modifications may be made by those skilled in the art without departing from the scope and spirit of the invention. The foregoing embodiments may be implemented individually or in any combination.

Claims (20)

A network device that stores virtual subscriber identity modules (VSIMs) for consumer devices,
Communication circuitry configured to communicate with a communication network, the communication network including at least one broker entity and one or more consumer devices;
A processor; And
A storage device in data communication with the processor
Lt; / RTI >
The storage device, when executed by the processor,
Requesting at least one VSIM for an identifier associated with the device, and allocating the at least one VSIM due to the request;
Computer executable instructions configured to request service activation for an identifier associated with the device to download the assigned one or more VSIMs to the device. The network device of claim 1, wherein the requested one or more VSIMs are stored within a provisioning service. The network device of claim 1, wherein the one or more requested VSIMs are generated at a trusted service management entity. 4. The network device of claim 3, wherein the one or more generated VSIMs are wrapped in a device-specific wrapper. The network device of claim 1, wherein the identifier comprises an integrated circuit card identifier (ICCID). The network device of claim 1, wherein the one or more VSIMs are stored in one or more VSIM sources external to the network device. A network device for use in a point of sale (POS) entity and a virtual subscriber identity module (VSIM) provisioning service,
Communication circuitry configured to communicate with a communication network, the communication network including the POS entity and the provisioning service;
A processor; And
A storage device in data communication with the processor
Lt; / RTI >
The storage device, if executed by the processor,
In response to the first POS entity requesting one or more VSIMs,
Determine one or more allowed carriers,
Obtain one or more VSIMs from the provisioning service,
Select at least one VSIM from the one or more acquired VSIMs,
Computer executable instructions configured to provide an identifier associated with the selected at least one VSIM to the first POS entity. The method of claim 7, wherein the instructions, when executed,
Receive a request for a VSIM from a device, the request including the provided identifier;
And further send the VSIM associated with the identifier to the device. 8. The network device of claim 7, wherein the allowed carriers are determined by a brokering entity. 10. The network device of claim 9, wherein the brokering entity comprises a database that maps a given identifier to one or more authorized carriers. 8. The network device of claim 7, wherein the VSIMs are wrapped to ensure that the VSIM can be provided only to a particular device. 8. The network device of claim 7, wherein the identifier comprises an integrated circuit card identifier (ICCID). A method for brokering virtual subscriber identity modules (VSIMs),
Receiving a request for one or more VSIMs;
Obtaining one or more VSIMs from a provisioning service;
Selecting at least one VSIM from the one or more acquired VSIMs; And
Associating an identifier with the selected at least one VSIM
≪ / RTI > The method of claim 13,
Receiving a request comprising the associated identifier; And
Providing the selected VSIM
≪ / RTI > The method of claim 13, wherein the obtained VSIMs are specific to a device. The method of claim 13, further comprising releasing one or more unselected VSIMs of the acquired VSIMs. A method of distributing access clients,
Requesting an access client, wherein the request determines an allowed carrier, provisions an access client associated with the allowed carrier, and provides one or more identifiers associated with the provisioned access client;
Receiving the one or more identifiers provided;
Requesting service activation with a selected one of the one or more identifiers provided; And
In response to a successful service activation, downloading an access client associated with the selected one identifier.
≪ / RTI > 18. The method of claim 17, wherein the access client comprises a virtual subscriber identity module (VSIM). 19. The method of claim 18, wherein the selected one identifier comprises an International Mobile Equipment Identity (IMEI). 18. The method of claim 17, further comprising releasing at least some of the received one or more identifiers.

Images