Apple Inc.

Other

Cisco Technology, Inc.

Eva Automation, Inc.

Curagen Corporation

Samsung Electronics Co., Ltd.

Nvidia Corporation

Rockwell Automation Technologies Incorporated

Tyco Electronics Logistics Ag

B&w Group Ltd.

Li Li

Arun Godfrey Mathias

Xiangying Yang

Raj S Chaugule

Jerrold Von Hauck

Najeeb M Abdulrahiman

Rohan C Malthankar

Ben-Heng Juang

Rafael L Rivera-Barreto

David T Haggerty

Vikram Bhaskara Yerrabommanahalli

Anish Kumar Goyal

Avinash Narasimhan

Jean-Marc Padova

Christopher Brooke Sharp

Yousuf H Vaid

Kevin P McLaughlin

Chandiramohan Vasudevan

Sherman X Jin

Samy Touati

Stephan Vincent Schell

Gaylord Yu

Shiwei Zhao

Leo Lay

Haisong Wang

Adrian Harold Chadd

Zexing Shi

Francisco J Gonzalez

Clive Edward Rodgers

Rajeev Verma

Clark P Mueller

Damien R Holzapfel

Dennis D Conway

Keizo Marui

Shu Guo

He Zheng

Abishek Kumar Vaidyanathan

Can Xiong

Dawei Zhang

Fangli Xu

Yuqin Chen

Haijing Hu

Huarui Liang

Lijia Zhang

Viswanath Nagarajan

Jie Xue

Elliot S Briggs

Ferenc L Boldog

Kimberly Spytek

Muralidhara Padigaru

Meera Patturajan

Stacie Casman

Bryan Zerhusen

Vladimir M Appel

Valerie Gerlach

Corine A M Vernet

Esha A Gangolli

Ameya R Kasbekar

Prashant H Vashi

Richard August Shimkets

Zhiping Yang

Luca Rastelli

Mehdi Ziat

David R Stone

Samuel J Miller

John R MacDougall

Mittu Pannala

Ronil Depak Patel

Eric Zelenka

Fred Warning

Stanley M Mayalil

Jovica Savic

Ramesh Kekuda

Shlomit Edinger

Carol E A Pena

Cole M Stewart

Joyce Peternel

Patrick L Coffman

Yannick L Sierra

Prakash B Gothoskar

Mark E Jacobs

Charles H Miller

Gokul P Thirumalai

Samuel David Post

Vitalii Kramar

Subbarao Arumilli

Jeffrey John Boylan

Lin Shen

Xunyuan Zhang

Catherine Burgess

Xinli Gu

Rui Chen

Jonathon Sodos

Ramiro Sarmiento

Jonathan M Parlan

Linda L Gorman

Denise M Lepley

William Grosse

Vikas Jain

John P Alsobrook, Ii

This application describes managing configuration of a bootstrap electronic SIM (eSIM) for a wireless device. A bootstrap eSIM on an embedded universal integrated circuit card (eUICC) of the wireless device is configured as needed to provide cellular wireless access. The bootstrap eSIM is configured with an initial international mobile subscriber identity (i-IMSI) value used to establish a cellular connection to obtain a bootstrap IMSI (b-IMSI) value allocated for temporary, dedicated use by the wireless device. The b-IMSI value is selected by a bootstrap server based on a bootstrap selection rule obtained from a bootstrap rules service, where the bootstrap selection rule accounts for a use case type provided by the wireless device and indicating a purpose for use of the b-IMSI value. The b-IMSI value is returned to a pool for use by other wireless devices after expiration of a timer or responsive to a delete notification message.

Dynamic bootstrap eSIM management for a wireless device

The described embodiments set forth techniques for recovering one or more electronic subscriber identity modules (eSIMs) previously deleted from an embedded universal integrated circuit card (eUICC) of a mobile wireless device. Prior to deletion of an eSIM, the mobile wireless device uploads first eSIM subscription information to a cloud network services server and stores second eSIM subscription information in a secure memory of the eUICC. The mobile wireless device can subsequently download the first eSIM subscription information to verify matching to the second eSIM subscription information stored in the eUICC before displaying an option for recovering the eSIM. The mobile wireless device sends to a mobile network operator (MNO) provisioning server an eSIM recovery request notification that includes at least a portion of the first eSIM subscription information, and the MNO provisioning server provides an eSIM recovery response message indicating approval and a network address to download the eSIM.

Deleted eSIM recovery

The described embodiments set forth techniques for transferring an electronic subscriber identity module (eSIM) with the same integrated circuit card identifier (ICCID) value from a source mobile wireless device to a target mobile wireless device directly with a mobile network operator (MNO) provisioning server. The target mobile wireless device downloads the eSIM from the MNO provisioning server after deletion of the eSIM on the source mobile wireless device and reassignment of the eSIM with the same ICCID value to the target mobile wireless device.

Direct eSIM transfer between wireless devices

This Application sets forth techniques for binding and dynamic provisioning of international mobile equipment identifier (IMEI) values with cellular wireless service profiles, such as subscriber identity modules (SIMs) on physical SIM (pSIM) cards and electronic SIMs (eSIMs) on an embedded universal integrated circuit card (eUICC) of the mobile wireless device. When pSIMs and/or eSIMs change on the mobile wireless device, e.g., based on installation, activation, deactivation, de-installation, etc., IMEI binding logic accounts for the changes and maps IMEI values to pSIMs and/or eSIMs as required. IMEI values can be assigned based on a history of bindings between IMEI values and ICCID values of one or more eSIMS on an eUICC. A most recently used or a newly assigned IMEI value can be associated with an eSIM. Whether to assign an identical IMEI value to multiple eSIMs depends on requirements of associated cellular wireless service subscriptions.

IMEI binding and dynamic IMEI provisioning for wireless devices

Techniques for managing logical channel communication for multiple electronic subscriber identity module (eSIM) profiles installed on an embedded universal integrated circuit card (eUICC), including mapping of logical channel identifier values between different logical channel labeling schemes are described herein. In a first scheme, logical channels are identified using logical channel values alone. In a second scheme, logical channels are identified using a combination of eSIM port value and channel values. An interpreter in the eUICC and/or in processing circuitry external to the eUICC can map between the logical channel labeling schemes to allow internal state machines in the eUICC and/or the processing circuitry to use the first scheme for identifying logical channels.

Logical channel management for multiple eSIM profiles

This application describes provisioning a secondary electronic subscriber identity module (eSIM) to a wireless device to access a cellular wireless network of a mobile virtual network operator (MVNO) to supplement and offload from a cellular wireless network of a mobile network operator (MNO) that provides cellular wireless services to users of the MVNO. Provisioning of the secondary eSIM can be triggered after i) boot up of the wireless device or ii) insertion of a primary SIM/eSIM that provides MVNO cellular service access via the MNO cellular wireless network. Provisioning can be anchored by an MVNO entitlement server or by a manufacturer device services server. Provisioning can also be triggered by the MNO cellular wireless network after attachment of the wireless device. Authentication and authorization of the wireless device to obtain the secondary eSIM can be based on the primary SIM/eSIM or on secure communication with the manufacturer device services server.

Secondary eSIM provisioning for wireless devices

This application describes cellular service transfer mechanisms that can be used to convert cellular service credentials on a physical SIM (pSIM) card included in a wireless device to a newly downloaded electronic SIM (eSIM) on an embedded universal integrated circuit card (eUICC) of the wireless device. Transfer of the credentials for cellular service access can occur locally within the wireless device with authorization to transfer obtained from a mobile network operator (MNO) entitlement server associated with the pSIM. The new eSIM corresponding to the previously used pSIM can be downloaded to the eUICC from a provisioning server of the MNO.

On-device physical SIM to eSIM conversion

The described embodiments set forth techniques for management of electronic subscriber identity module (eSIM) profiles for a wireless device, including in-field replacement of provisioning (bootstrap) eSIM profiles. Public key infrastructure (PKI) information for an original equipment manufacturer (OEM) profile management server is installed in an embedded universal integrated circuit card (eUICC) of a wireless device at a time of manufacture and used subsequently by the wireless device to conduct an eSIM profile management session and verify authorization of the OEM profile management server to manage, e.g., update and/or replace, one or more eSIM profiles on the eUICC of the wireless device.

In-field remote profile management for wireless devices

This Application sets forth techniques for profile, e.g., subscriber identity module (SIM) and electronic SIM (eSIM), and cellular wireless service subscription management for a wireless device. The wireless device can support multiple profiles, such as dual SIMS or a single SIM and one or more eSIMs. A user of the wireless device can flexibly enable and disable various eSIMs or change the use of physical SIMs with different associated cellular wireless service subscriptions, and mapping of subscription modules to logical channels and physical hardware interfaces can occur automatically, with mechanisms to reset interfaces when required.

Profile and subscription management for wireless devices

The described embodiments set forth techniques for testing a wireless device configured to use an embedded Universal Integrated Circuit Card (eUICC) and excluding a removable UICC card. A test apparatus processes application protocol data units (APDUs) for conformance with a standardized test specification, where the APDUs are provided by an eSIM command handler client application that interfaces with a baseband processor in communication with the eUICC that includes test profiles with test applets.

Test certification system for eSIM-only wireless devices

A method is performed by a set of one or more servers and includes receiving, from a first user equipment (UE) to be activated with a cellular carrier for a user, and at the set of one or more servers, information identifying a second UE of the user and authentication information for authenticating the user with the cellular carrier. The method further includes authenticating the user using the authentication information; transmitting a password to the second UE at least partly in response to authenticating the user; receiving, from the first UE and at the set of one or more servers, the password; validating the password received from the first UE; and initiating a transfer of an embedded subscriber identity module (eSIM) subscription, from the second UE to the first UE, at least partly in response to validating the password.

Integrated standalone flow for cellular subscription transfer

Techniques for flexible electronic subscriber identity module (eSIM) deployment to a wireless device by a network server, including generation of multiple eSIMs using an identical eSIM identifier value, such as an identical integrated circuit card identifier (ICCID) value, and subsequent selection of an eSIM based on capabilities of the wireless device. Multiple eSIMs that correspond to different sets of wireless device capabilities are generated without knowledge of the wireless communication standards that a wireless device supports. The multiple eSIMs include a first eSIM that includes fifth generation (5G) wireless communication protocol information and a second eSIM that excludes 5G wireless communication protocol information. The network server selects an eSIM from the multiple eSIMs based on whether the wireless device is 5G capable. After selection and binding of a profile package that includes the eSIM, the remaining eSIMs that use the identical ICCID value are deleted, for security enforcement against cloning.

Flexible electronic subscriber identity module deployment

Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Profile transfer with secure intent

This Application describes mechanisms for enterprise remote management of cellular services provided via access credentials, e.g., subscriber identity modules (SIMs) and/or electronic SIMs (eSIMs), for wireless devices. To minimize requirements for user interaction, installation and management of business-supplied cellular service profiles on the wireless device can intercept alert notifications to reduce interruptions and allow for background management of the business-supplied cellular service profiles. Additionally, a business enterprise can use multiple, distinct services to initiate installation of an eSIM to a wireless device. When two different services attempt to install eSIMs on the wireless device in parallel, management software on the wireless device can control an order of installation and disallow duplicate installations of an identical eSIM to the wireless device. The management software can also monitor eSIM installations and manage alert notifications that occur during the eSIM installation process.

Enterprise remote management for cellular services

Growing community of inventors

Los Altos, CA, United States of America

Li Li