International Business Machines Corporation

Thales Dis France Sas

Hewlett-Packard Development Company, L.p.

Thales Dis France Sa

Buzzinbees

Nortel Networks Corporation

Rockstar Bidco, LP

Rpx Clearinghouse LLC

Gemalto Sa

Buzzinbees Sas

Marc Lamberton

Pascal Thubert

Eric Michel Levy-Abegnoli

Michel Anslot

Pierre Secondo

David Mansutti

Philippe Bouckaert

Gilles Coppe

Eric Mouque

Jerome Forissier

Richard Gayraud

Michael Tate

Jean-Francois Le Pennec

Patrick Michel

Aline Gouget

Alain Rhelimi

Xavier Berard

Patrick Sicsic

Francois Kermarec

Didier Desiderio

Philippe Bazot

Olivier Bertin

Jean-Rene Bouvier

Jean-Philippe Caradec

Rene Chuniaud

Stephane Barbier

Didier Avargues

Jean-Jacques Legoll

Fran&ccedil;ois Kermarec

Eric Montagnon

Jean-Francois Bortolotti

Naomitus Ishii

Eric Bretagne

Michel Molinengo

François Kermarec

Sylvain Morandi

Arnaud Schwartz

Eric Ley-Abegnoli

Jean-René Bouvier

David Les Terrasses De Vallauris Mansutti

A method for transmitting a subscription profile that includes transmitting from a POS of the MNO the unique identifier of the secure element to a SM-DP; creating or reserving the subscription profile at the SM-DP; provisioning in a D-HSS server having the first MCC/MNC the unique identifier and a temporary IMSI including a second MCC, a second MNC; provisioning in the HSS of the MNO the temporary IMSI and an ephemeral Ki; at the first attempt of the secure element to connect to the D-HSS server with its temporary profile, exchanging data in signaling messages between the secure element and the D-HSS for provisioning the secure element with the temporary IMSI; at the next attempt of the secure element to connect to the MNO network with the temporary IMSI, open an APN and send from the SM-DP to the secure element the subscription profile.

Method for transmitting an existing subscription profile from a MNO to a secure element, corresponding servers and secure element

A central server for communicating with a user equipment and a cellular network is provided. The server is configured to exchange with the cellular network information relating to at least one preconfigured qualifier assigned to the user equipment and assigned to the central server. The server receives a payload item from the cellular network transmitted by the user equipment to said cellular network by means of an authentication failure message for authenticating a user equipment at a cellular network during an attach comprising the payload item, instead of receiving a SMS or establishing an IP connection with the user equipment. The payload item can result from a latest measurement data of user equipment regularly transmitting data to said central server and/or a sensor connectively coupled to the user equipment when operating as an Internet of Things (IoT) smart-metering device.

Method for operating a server with user equipment in a cellular network

A method for personalizing a UICC includes: i—sending from the UICC to a D-HSS an attach request message comprising an IMSI with a given MCC/MNC; ii—sending from the D-HSS to the UICC a command and first cryptographic data; iii—computing at the UICC a secret key by using the first cryptographic data; iv—sending from the UICC to the D-HSS a command and second cryptographic data; v—repeating steps ii to iv until the UICC holds the entire first cryptographic data and the D-HSS holds the entire second cryptographic data; vi—computing at the D-HSS the secret key by using the second entire cryptographic data; vii—allocating by the D-HSS a free IMSI belonging to an operator and transferring from the D-HSS to the UICC the free IMSI and other personalization data; viii—personalizing the UICC with the free IMSI, personalization data and the secret key.

Method for personalizing an improved UICC cooperating with a terminal

Provided is a method for establishing a bidirectional communication channel between a server and a secure element cooperating with a terminal in a cellular telecommunication network for exchanging data and commands. Provided also is an improved SM-DS+ comprising comprising a SM-OS server that provisions the HSS of a MNO with a temporary IMSI transmitted to said secure element, along with an ephemeral key contained also in said secure element. Other embodiments disclosed.

Method for establishing a bidirectional communication channel between a server and a secure element, corresponding servers and secure element

A method for transmitting a subscription profile from an MNO to a secure element pre-provisioned with a temporary profile comprising a unique identifier, MCC and MNC, includes: &#x2014;Transmitting from the MNO the unique identifier to a SM-DP; &#x2014;Creating the subscription profile at the SM-DP; &#x2014;Provisioning in a D-HSS server having the first MCC/MNC the unique identifier and a temporary IMSI comprising a second MCC, a second MNC; &#x2014;Provisioning in the MNO the temporary IMSI and an ephemeral key; &#x2014;At the first attempt of the secure element to connect to the D-HSS server, exchanging data in signaling messages for provisioning the secure element with the temporary IMSI; &#x2014;At the next attempt of the secure element to connect to the MNO network with the temporary IMSI, open an APN and send from the SM-DP to the secure element the subscription profile.

Method for transmitting an existing subscription profile from a mobile network operator to a secure element, corresponding servers and secure element

A user equipment for wireless communication, configured to operate in a cellular network, includes a credential container. The user equipment sends a set of payload items to a central server communicatively coupled to the cellular network, wherein the user equipment is configured to send an attach request message to the cellular network comprising a preconfigured qualifier for at least one of the user equipment and the credential container. The user equipment is further configured&#x2014;to retrieve an authentication request message from the cellular network comprising a random value and an authentication code, &#x2014;to determine a response token comprising a preconfigured identifier stored in at least one of the user equipment and the credential container and at least one out of the set of payload items, and&#x2014;to submit said response token with an authentication failure message to the cellular network for forwarding to the central server.

Method for operating a user equipment in a cellular network

The invention concerns a method for establishing a bidirectional communication channel between a server and a secure element cooperating with a terminal in a cellular telecommunication network for exchanging data and commands, the method comprising:

A method for transmitting a subscription profile from an MNO to a secure element pre-provisioned with a temporary profile comprising a unique identifier, MCC and MNC, includes:&#x2014;Transmitting from the MNO the unique identifier to a SM-DP;&#x2014;Creating the subscription profile at the SM-DP;&#x2014;Provisioning in a D-HSS server having the first MCC/MNC the unique identifier and a temporary IMSI comprising a second MCC, a second MNC;&#x2014;Provisioning in the MNO the temporary IMSI and an ephemeral key;&#x2014;At the first attempt of the secure element to connect to the D-HSS server, exchanging data in signaling messages for provisioning the secure element with the temporary IMSI;&#x2014;At the next attempt of the secure element to connect to the MNO network with the temporary IMSI, open an APN and send from the SM-DP to the secure element the subscription profile.

A method for an eUICC embedded into a machine type communication device to trigger the download of a subscription profile from a first network operator, the eUICC being provisioned with an eUICC identifier and a pre-loaded data set memorizing a range of International Mobile Subscription Identifiers associated to a second network operator by selecting randomly by the eUICC an IMSI number in the range memorized in the pre-loaded data set, sending an attachment request comprising the randomly selected IMSI, receiving in an authentication request message the request for getting the eUICC identifier, as a response, sending to the discovery server a authentication failure message, receiving in an authentication request message a temporary IMSI from the discovery server so that the machine type communication device is able to attach to the first network operator and download the pending subscription profile.

Method for an eUICC embedded into a machine type communication device to trigger the download of a subscription profile

A method for a credential container embedded into a wireless communication device to obtain a temporary wireless connectivity through a first wireless network, the credential container being provisioned with an identifier ID identifying the wireless communication device or the credential container and a pre-loaded subscription profile comprising a range of International Mobile Subscription Identifiers associated to a second network operator.

Method for allocating temporarily a subscription to a credential container

A method of controlling access to a cellular communication network, for a terminal (MT) identified by a terminal identifier (IMEI) with a subscription identified by a subscription identifier (IMSI), characterized in that it comprises the following steps: The invention also comprises a system and a computer program product to implement the method.

Method of controlling access to a cellular network

The invention proposes in particular a method of managing the connectivity of a terminal connectable to a cellular communication network characterized in that it comprises the following steps carried out in the terminal: Furthermore, the invention also pertains to a computer program product able to execute the method of managing connectivity.

Method of managing the connectivity of a terminal

The invention prevents robots from browsing a Web site beyond a welcome page. When an initial request from an undefined originator is received, the Web site responds to it with a welcome page including a challenge. Then, on receiving a further request from the undefined originator, the Web site can check whether the challenge is fulfilled or not. If fulfilled, the undefined originator is assumed to be a human being and authorized to go on. If the challenge is not fulfilled, the undefined originator is assumed to be a robot, in which case site access is further denied. The invention prevents Web site contents from being investigated by robots while not requiring users to have to log on.

System and method for implementing a robot proof web site

A Module connected through a communication network to at least a measuring mobile terminal, at least a mobile switch center and at least a machine to machine application, the module includes: a home location register configured to provide on demand, for a given measuring mobile terminal, an address of the mobile switch center through which the measuring mobile terminal is connected to the cellular communication network, an authentication center authenticating a given measuring mobile terminal, at least one short message service center configured to transmit the message towards a measuring mobile terminal, a short message service center interfaced between the cellular communication network and the machine to machine application, the home location register, the authentication center, the short message service center and the short message service center being embedded in a single physical structure forming at least in part the module.

Module MLR for managing machine-to-machine type (M2M) mobile devices

Growing community of inventors

Antibes, France

Marc Lamberton