Method and system for mobile device credentialing

Abstract

Methods and systems taught herein allow communication device manufacturers to preconfigure communication devices to use preliminary access credentials to gain temporary network access for downloading subscription credentials, and particularly allow the network operator issuing the subscription credentials to verify that individual devices requesting credentials are trusted. In one or more embodiments, a credentialing server is owned or controlled by the network operator, and is used by the network operator to verify that subscription credentials are issued only to trusted communication devices, even though such devices may be referred to the credentialing server by an external registration server and may be provisioned by an external provisioning server. Particularly, the credentialing server interrogates requesting devices for their device certificates and submits these device certificates to an external authorization server, e.g., an independent OCSP server, for verification. A common Public Key Infrastructure (PKI) may be used for operator and device certificates.

Description

technical field [0001] The present invention relates generally to provisioning mobile devices, and more particularly to facilitating over-the-air activation of mobile devices using preliminary subscription identity information held in a centralized device directory accessible by one or more network operators. Background technique [0002] Efficient device manufacturing, distribution and activation are key enablers to effectively exploit the range of business opportunities offered by the continuing revolution in wireless communications. Existing methods of "provisioning" user equipment with the necessary subscription credentials represent an impediment to more efficient operation. For example, one conventional approach relies on selling or otherwise selling user equipment fitted with a Subscriber Identity Module, SIM. Each SIM includes a tamper-resistant circuit module, usually implemented in a small card-like form factor, where the circuit module stores credential informati...

AI Technical Summary

Problems solved by technology

[0004] However, as a general suggestion, it appears that the complexity of the overall problem framework has prevented past approaches from providing overall systems and methods that simplify the manufacture, sale and eventual registration of mobile devices relative to secure over-the-air provisioning

Also, past approaches provided insufficient security or required one or more actors to be responsible for operating many of the steps involved, requiring a significant level of trust between different actors that may be in competing relationships

Images