Apple Inc.

Other

Cisco Technology, Inc.

Eva Automation, Inc.

Curagen Corporation

Samsung Electronics Co., Ltd.

Nvidia Corporation

Tyco Electronics Logistics Ag

B&w Group Ltd.

Li Li

Arun Godfrey Mathias

Xiangying Yang

Raj S Chaugule

Jerrold Von Hauck

Najeeb M Abdulrahiman

Ben-Heng Juang

David T Haggerty

Rohan C Malthankar

Rafael L Rivera-Barreto

Vikram Bhaskara Yerrabommanahalli

Anish Kumar Goyal

Avinash Narasimhan

Jean-Marc Padova

Christopher Brooke Sharp

Yousuf H Vaid

Kevin P McLaughlin

Chandiramohan Vasudevan

Samy Touati

Sherman X Jin

Stephan Vincent Schell

Gaylord Yu

Shiwei Zhao

Leo Lay

Haisong Wang

Adrian Harold Chadd

Zexing Shi

Francisco J Gonzalez

Clark P Mueller

Rajeev Verma

Damien R Holzapfel

Dennis D Conway

Keizo Marui

Shu Guo

He Zheng

Abishek Kumar Vaidyanathan

Can Xiong

Dawei Zhang

Fangli Xu

Yuqin Chen

Haijing Hu

Huarui Liang

Lijia Zhang

Clive Edward Rodgers

Jie Xue

Ferenc L Boldog

Elliot S Briggs

Kimberly Spytek

Muralidhara Padigaru

Meera Patturajan

Stacie Casman

Bryan Zerhusen

Vladimir M Appel

Valerie Gerlach

Corine A M Vernet

Esha A Gangolli

Prashant H Vashi

Viswanath Nagarajan

Richard August Shimkets

Zhiping Yang

Luca Rastelli

Mehdi Ziat

David R Stone

Samuel J Miller

John R MacDougall

Mittu Pannala

Ronil Depak Patel

Eric Zelenka

Fred Warning

Jovica Savic

Ramesh Kekuda

Carol E A Pena

Shlomit Edinger

Stanley M Mayalil

Cole M Stewart

Joyce Peternel

Xiaojia Guo

Stephan Gostonyi

Patrick L Coffman

Yannick L Sierra

Prakash B Gothoskar

Mark E Jacobs

Charles H Miller

Gokul P Thirumalai

Samuel David Post

Vitalii Kramar

Jeffrey John Boylan

Subbarao Arumilli

Xunyuan Zhang

Lin Shen

Catherine Burgess

Xinli Gu

Jonathon Sodos

Ramiro Sarmiento

Jonathan M Parlan

Linda L Gorman

Denise M Lepley

William Grosse

Vikas Jain

John P Alsobrook, Ii

This Application sets forth techniques for binding and dynamic provisioning of international mobile equipment identifier (IMEI) values with cellular wireless service profiles, such as subscriber identity modules (SIMs) on physical SIM (pSIM) cards and electronic SIMs (eSIMs) on an embedded universal integrated circuit card (eUICC) of the mobile wireless device. When pSIMs and/or eSIMs change on the mobile wireless device, e.g., based on installation, activation, deactivation, de-installation, etc., IMEI binding logic accounts for the changes and maps IMEI values to pSIMs and/or eSIMs as required. IMEI values can be assigned based on a history of bindings between IMEI values and ICCID values of one or more eSIMS on an eUICC. A most recently used or a newly assigned IMEI value can be associated with an eSIM. Whether to assign an identical IMEI value to multiple eSIMs depends on requirements of associated cellular wireless service subscriptions.

IMEI binding and dynamic IMEI provisioning for wireless devices

Techniques for managing logical channel communication for multiple electronic subscriber identity module (eSIM) profiles installed on an embedded universal integrated circuit card (eUICC), including mapping of logical channel identifier values between different logical channel labeling schemes are described herein. In a first scheme, logical channels are identified using logical channel values alone. In a second scheme, logical channels are identified using a combination of eSIM port value and channel values. An interpreter in the eUICC and/or in processing circuitry external to the eUICC can map between the logical channel labeling schemes to allow internal state machines in the eUICC and/or the processing circuitry to use the first scheme for identifying logical channels.

Logical channel management for multiple eSIM profiles

This application describes provisioning a secondary electronic subscriber identity module (eSIM) to a wireless device to access a cellular wireless network of a mobile virtual network operator (MVNO) to supplement and offload from a cellular wireless network of a mobile network operator (MNO) that provides cellular wireless services to users of the MVNO. Provisioning of the secondary eSIM can be triggered after i) boot up of the wireless device or ii) insertion of a primary SIM/eSIM that provides MVNO cellular service access via the MNO cellular wireless network. Provisioning can be anchored by an MVNO entitlement server or by a manufacturer device services server. Provisioning can also be triggered by the MNO cellular wireless network after attachment of the wireless device. Authentication and authorization of the wireless device to obtain the secondary eSIM can be based on the primary SIM/eSIM or on secure communication with the manufacturer device services server.

Secondary eSIM provisioning for wireless devices

This application describes cellular service transfer mechanisms that can be used to convert cellular service credentials on a physical SIM (pSIM) card included in a wireless device to a newly downloaded electronic SIM (eSIM) on an embedded universal integrated circuit card (eUICC) of the wireless device. Transfer of the credentials for cellular service access can occur locally within the wireless device with authorization to transfer obtained from a mobile network operator (MNO) entitlement server associated with the pSIM. The new eSIM corresponding to the previously used pSIM can be downloaded to the eUICC from a provisioning server of the MNO.

On-device physical SIM to eSIM conversion

The described embodiments set forth techniques for management of electronic subscriber identity module (eSIM) profiles for a wireless device, including in-field replacement of provisioning (bootstrap) eSIM profiles. Public key infrastructure (PKI) information for an original equipment manufacturer (OEM) profile management server is installed in an embedded universal integrated circuit card (eUICC) of a wireless device at a time of manufacture and used subsequently by the wireless device to conduct an eSIM profile management session and verify authorization of the OEM profile management server to manage, e.g., update and/or replace, one or more eSIM profiles on the eUICC of the wireless device.

In-field remote profile management for wireless devices

This Application sets forth techniques for profile, e.g., subscriber identity module (SIM) and electronic SIM (eSIM), and cellular wireless service subscription management for a wireless device. The wireless device can support multiple profiles, such as dual SIMS or a single SIM and one or more eSIMs. A user of the wireless device can flexibly enable and disable various eSIMs or change the use of physical SIMs with different associated cellular wireless service subscriptions, and mapping of subscription modules to logical channels and physical hardware interfaces can occur automatically, with mechanisms to reset interfaces when required.

Profile and subscription management for wireless devices

The described embodiments set forth techniques for testing a wireless device configured to use an embedded Universal Integrated Circuit Card (eUICC) and excluding a removable UICC card. A test apparatus processes application protocol data units (APDUs) for conformance with a standardized test specification, where the APDUs are provided by an eSIM command handler client application that interfaces with a baseband processor in communication with the eUICC that includes test profiles with test applets.

Test certification system for eSIM-only wireless devices

The described embodiments set forth techniques for transferring an electronic subscriber identity module (eSIM) with the same integrated circuit card identifier (ICCID) value from a source mobile wireless device to a target mobile wireless device directly with a mobile network operator (MNO) provisioning server. The target mobile wireless device downloads the eSIM from the MNO provisioning server after deletion of the eSIM on the source mobile wireless device and reassignment of the eSIM with the same ICCID value to the target mobile wireless device.

Direct eSIM transfer between wireless devices

A method is performed by a set of one or more servers and includes receiving, from a first user equipment (UE) to be activated with a cellular carrier for a user, and at the set of one or more servers, information identifying a second UE of the user and authentication information for authenticating the user with the cellular carrier. The method further includes authenticating the user using the authentication information; transmitting a password to the second UE at least partly in response to authenticating the user; receiving, from the first UE and at the set of one or more servers, the password; validating the password received from the first UE; and initiating a transfer of an embedded subscriber identity module (eSIM) subscription, from the second UE to the first UE, at least partly in response to validating the password.

Integrated standalone flow for cellular subscription transfer

Techniques for flexible electronic subscriber identity module (eSIM) deployment to a wireless device by a network server, including generation of multiple eSIMs using an identical eSIM identifier value, such as an identical integrated circuit card identifier (ICCID) value, and subsequent selection of an eSIM based on capabilities of the wireless device. Multiple eSIMs that correspond to different sets of wireless device capabilities are generated without knowledge of the wireless communication standards that a wireless device supports. The multiple eSIMs include a first eSIM that includes fifth generation (5G) wireless communication protocol information and a second eSIM that excludes 5G wireless communication protocol information. The network server selects an eSIM from the multiple eSIMs based on whether the wireless device is 5G capable. After selection and binding of a profile package that includes the eSIM, the remaining eSIMs that use the identical ICCID value are deleted, for security enforcement against cloning.

Flexible electronic subscriber identity module deployment

Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Profile transfer with secure intent

This Application describes mechanisms for enterprise remote management of cellular services provided via access credentials, e.g., subscriber identity modules (SIMs) and/or electronic SIMs (eSIMs), for wireless devices. To minimize requirements for user interaction, installation and management of business-supplied cellular service profiles on the wireless device can intercept alert notifications to reduce interruptions and allow for background management of the business-supplied cellular service profiles. Additionally, a business enterprise can use multiple, distinct services to initiate installation of an eSIM to a wireless device. When two different services attempt to install eSIMs on the wireless device in parallel, management software on the wireless device can control an order of installation and disallow duplicate installations of an identical eSIM to the wireless device. The management software can also monitor eSIM installations and manage alert notifications that occur during the eSIM installation process.

Enterprise remote management for cellular services

This Application sets forth techniques for provisioning and activating an electronic subscriber identity module (eSIM) as a primary SIM for a mobile wireless device that includes a limited functionality physical SIM (pSIM) associated with a particular mobile network operator (MNO) and installed in the mobile wireless device at a time of manufacture. An eSIM associated with the particular MNO is reserved during a sales order process and later activated during device activation after receipt by a user using a secure over-the-air (OTA) cellular connection enabled by the limited functionality pSIM, when a non-cellular connection or other Internet accessible connection is available. Dual SIM device configuration processes can be suppressed during activation of the eSIM. After successful attachment of the mobile wireless device to a cellular wireless network of the particular MNO using credentials of the eSIM, the limited functionality pSIM is disabled.

Primary eSIM activation for wireless device with physical SIM

Disclosed are methods, systems, apparatus, and computer programs for self-learning geofences is disclosed. In one aspect, a method involves gathering a plurality of data points associated with one or more Citizens Broadband Radio Service (CBRS) deployers; determining respective identifiers of the one or more CBRS deployers associated with the plurality of data points; clustering, based on the respective identifiers of the one or more CBRS deployers, the plurality of data points into one or more clusters, where each cluster is associated with one of the one or more CBRS deployers, and where each cluster is associated with a geofence of a network of the one or more CBRS deployers; identifying an opportunity for uploading the one or more clusters to a central server; and uploading the one or more clusters to the central server during the identified opportunity.

Self-learning network geofences

This application describes a phased approach to provision eSIM profiles to a wireless device. Credentials are preloaded to an eUICC during manufacture of the eUICC and used subsequently to load eSIM profiles to the eUICC without requiring an active, real-time connection to an MNO provisioning server. Multiple bound profile packages (BPPs) can be pre-generated and encrypted by MNO provisioning servers for an eUICC and transferred to a BPP aggregator server before assembly of the eUICC in a respective wireless device. A local provisioning server in a manufacturing facility mutually authenticates and connects to the BPP aggregator server to download and store one or more of the encrypted BPPs for later installation on the eUICC. The local provisioning server subsequently mutually authenticates and connects to the eUICC to load at least one of the one or more pre-generated, encrypted BPPs to the eUICC during assembly and/or testing of the wireless device.

Off-line profile provisioning for wireless devices

Growing community of inventors

Los Altos, CA, United States of America

Li Li