Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W8/00—Network data management
  • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
  • H04W8/20—Transfer of user or subscriber data
  • H04W8/205—Transfer to or from user equipment or user record carrier
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/30—Security of mobile devices; Security of mobile applications
  • H04W12/35—Protecting application or service provisioning, e.g. securing SIM application provisioning
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W8/00—Network data management
  • H04W8/26—Network addressing or numbering for mobility support
  • H04W8/265—Network addressing or numbering for mobility support for initial activation of new user
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/60—Context-dependent security
  • H04W12/69—Identity-dependent
  • H04W12/72—Subscriber identity

Definitions

• the present invention refers to a method for automatic provi ⁇ sioning of a SIM card by means of an OTA - application.
• provisioning in the present application and in the claims means the process of preparing and equipping a network to allow it to provide services to its users.
• SIM Subscriber Identity Module
• data files are conventionally sent from a SIM-Card vendor to a Mobile Network Operator (MNO) to populate an OTA (Over-The- Air) platform with OTA security information such as ICCID (Integrated Circuit Card ID), MSISDN (Mobile Station ISDN number), IMSI (International Mobile Subscriber Identity), and OTA keys.
• MNO Mobile Network Operator
• OTA security information such as ICCID (Integrated Circuit Card ID), MSISDN (Mobile Station ISDN number), IMSI (International Mobile Subscriber Identity), and OTA keys.
• the security information is in an encrypted file which is sent electronically to the Mobile Network operator in order to activate the SIM card such that the mobile tele ⁇ phone can be used.
• the ordering process defines a so called card profile that defines the layout of the file system on the card as well as other properties.
• the card profile is then implemented on the SIM cards.
• the SIM cards are programmed with card specific data.
• the combined knowledge of profile and card specific data is expressed in data transport files, often called CPS (Card Personalization System) files.
• CPS Card Personalization System
• these CPS files are transferred to the MNO.
• the MNO imports these files into the OTA system in order to make the SIM card oper ⁇ ational in the OTA platform and makes OTA communication with the SIM cards possible.
• SIM-OTA SIM Over-The-Air
• Said CPS files containing SIM-OTA (SIM Over-The-Air) security information are sometimes lost or never delivered to the OTA platform, resulting in that the OTA platform is not being capable of performing the requested operations. That means that when a SIM card is connected to the network, OTA opera ⁇ tions will fail since the OTA platform will reject requests from the SIM card due to missing card information. This includes OTA operation for updating the SIM card and service access initiated by the user resulting in a mobile originated message to the OTA platform.
• SIM-OTA SIM Over-The-Air
• the above described procedure also involves human and manual intervention which takes time and is costly.
• the present invention simplifies this organizational proce ⁇ dure and limits the involvement of an MNO in the provisional procedure .
• the present invention thus refers to a method of automatic provisioning of a SIM (Subscriber Identity Module) card when using the SIM card for the first time by means of an OTA (Over-The-Air) platform and a mobile telephone, and is cha ⁇ racterized in, that equipping the SIM card with an automated provisioning application that becomes resident on the SIM card, in that activation data comprising IMSI (International Mobile Subscriber Identity) and other data is being stored on the SIM card, in that the SIM card is caused to send a provi- sioning request, controlled by said application, when the SIM card is placed in a mobile telephone for the first time and the telephone is switched on, to the OTA platform, in that a database associated with the OTA platform is updated with data including ICCID (Integrated Circuit Card ID), IMSI and OTA keys, which data has been transferred from the SIM card to the OTA platform, in that the OTA platform retrieves
• SIM Subscriber Identity Module
• MSISDN Mobile Station ISDN number
• FIG. 1 shows a block diagram illustrating the present invention .
• FIG 1 the present method of automatic provisioning of a SIM card is illustrated.
• the automatic provisioning takes place when the SIM card 2 is used for the first time.
• the SIM card 2 is used for the first time it is inserted into a mobile telephone 8.
• the automatic provisioning is carried out by means of an OTA (Over-The-Air) platform 1 and the mobile telephone 8.
• OTA Over-The-Air
• the SIM card is equipped with an automated provisioning application 3 that becomes resident on the card 2.
• Activation data 4 comprising IMSI and other data is being stored on the SIM card on specific memory area 9.
• Other data may comprise ICCID, OTA Keys and Card profilelD.
• the automated provisioning application and the activation data can be transferred to the SIM card 2 when it is manufac ⁇ tured .
• the activation data is encrypted by the SIM vendor with a Public Key.
• the Public Key can be provided by the provider of the system for present method.
• the SIM card is caused to send a provisioning request to the OTA platform over the telephone network, such as a GSM network.
• a provisioning request to the OTA platform over the telephone network, such as a GSM network.
• the automated provisioning application sends activation data as a non encrypted Short Message (SM) over the telecommunication network.
• SM Short Message
• the SM is according to one embodiment sent to a transport server (TS) 5, which server is a part of the OTA platform.
• TS transport server
• the TS 5 routes the activation data to a Card Activation Server (CAS) 6 also being a part of the OTA platform 1.
• the CAS decrypts the activation data with a DP (Delivery Plat- form) Private Key.
• the DP Private Key is provided by the provider of said Public Key.
• a database 7 associated with the OTA platform 1 is thereafter caused to be updated with data including ICCID, IMSI and OTA keys.
• the OTA platform retrieves MSISDN from the data sent to the OTA platform, whereafter the MSISDN is attached to said IMSI.
• a first step the CAS updates the database 7 with ICCID, IMSI and OTA keys.
• the CAS retrieves the MSISDN, from the Short Message (SM) Originating address field and attaches the MSISDN to the IMSI.
• the CAS connects the IMSI to the Card Profile.
• an acknowledgement is sent to the SIM card, whereby the SIM card is ready for use.
• the present invention solves the problem mentioned in the opening part of the present application and gives that the SIM card is made ready for use when it is used for the first time.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Security & Cryptography (AREA)
• Databases & Information Systems (AREA)
• Telephonic Communication Services (AREA)
• Telephone Function (AREA)
• Mobile Radio Communication Systems (AREA)

Priority Applications (5)

Applications Claiming Priority (2)

Publications (1)

Family

ID=43431795

Family Applications (1)

Country Status (7)

Cited By (5)

Families Citing this family (31)

Citations (5)

Family Cites Families (8)

• 2009
  • 2009-12-09 SE SE0950947A patent/SE535404C2/sv unknown
• 2010
  • 2010-11-23 BR BR112012010349-0A patent/BR112012010349B1/pt active IP Right Grant
  • 2010-11-23 CN CN201080054827.0A patent/CN102714792B/zh active Active
  • 2010-11-23 EP EP10795794.6A patent/EP2510716B1/en active Active
  • 2010-11-23 ES ES10795794.6T patent/ES2634942T3/es active Active
  • 2010-11-23 WO PCT/SE2010/051290 patent/WO2011071438A1/en active Application Filing
  • 2010-11-23 US US13/502,779 patent/US8718710B2/en active Active

Patent Citations (5)

Also Published As

Similar Documents

Legal Events