Maintaining service access via SIM cards

Abstract

The invention relates to maintaining service access via a SIM card. The present disclosure provides a method comprising: determining, by a first device, that a first subscriber identity module (SIM) previously used by the first device is not available for use by the first device; within a predetermined time period after determining that the first SIM cannot be used by the first device, determining, by the first device, that a second SIM can be used by the first device; and in response to the determination, storing, by the first device, data that allows the first device to access at least one service associated with a communication identifier of the first SIM when the first SIM is not available and the second SIM is available.

Description

[0001] This application is a divisional application of the Chinese invention patent application with the application date of May 13, 2021, the national application number 202180042439.9, and the invention name “Maintaining service access via SIM card”.

[0002] CROSS-REFERENCE TO RELATED APPLICATIONS

[0003] This application claims priority to U.S. Provisional Patent Application No. 63 / 039,922, filed on June 16, 2020, and entitled “MAINTAINING ACCESS TOSERVICES VIA SIM CARD,” the disclosure of which is hereby incorporated herein in its entirety. Technical Field

[0004] The present specification relates generally to wireless communications between electronic devices, and more particularly to enabling communication identifiers from previously used Subscriber Identity Module (SIM) cards to access services. Background Art

[0005] When traveling or visiting a foreign country, a user may obtain a Subscriber Identity Module (SIM) card of a foreign telecommunication network to obtain wireless communication services. By replacing the SIM card currently installed on the mobile device, the user may continue to use their own mobile device while accessing the foreign telecommunication network. However, since the previous SIM card is no longer installed on the mobile device, the user may not be able to access various services associated with the previous SIM card, such as messaging and video calling applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0006] Certain features of the subject technology are set forth in the appended claims. However, for purposes of explanation, several embodiments of the subject technology are set forth in the following figures.

[0007] Figure 1 An exemplary network environment is shown in which a system for providing temporary credentials to a device for accessing services associated with a primary number can be implemented in accordance with one or more implementations.

[0008] Figure 2 A block diagram of an exemplary electronic device is shown in accordance with one or more implementations.

[0009] Figure 3 Block diagrams of an exemplary electronic device, an exemplary SIM card, and an exemplary identity management service (IDMS) server are shown according to one or more implementations.

[0010] Figure 4An exemplary timing diagram for obtaining a temporary credential that proves continued ownership of a communication identifier by an electronic device associated with a user account is shown in accordance with one or more implementations.

[0011] Figure 5 An exemplary notification interface for successfully registering a primary number associated with a previously used SIM card and for confirming entry into a dual SIM operating mode is shown in accordance with one or more implementations.

[0012] Figure 6 An exemplary notification interface for deactivating a primary number associated with a previously used SIM card is shown in accordance with one or more implementations.

[0013] Figure 7 A flow chart illustrating an exemplary process for storing temporary credentials on a device for accessing services associated with a primary number in accordance with one or more implementations.

[0014] Figure 8 An electronic system is shown that can be used to implement one or more implementations of the subject technology. DETAILED DESCRIPTION

[0015] The specific embodiments shown below are intended to be descriptions of various configurations of the subject technology and are not intended to represent the only configuration that the subject technology can be practiced. The accompanying drawings are incorporated herein and constitute a part of the specific embodiments. The specific embodiments include specific details intended to provide a thorough understanding of the subject technology. However, the subject technology is not limited to the specific details set forth herein, but can be practiced using one or more other specific implementations. In one or more specific implementations, structures and components are shown in block diagram form to avoid blurring the concepts of the subject technology.

[0016] As described above, when a user removes a SIM card and installs a new SIM card into a mobile device, the user may not be able to access services, such as messaging and video calls, through the previous SIM card. This may be a problem when the new SIM card is only temporary, such as a SIM card rented / purchased when traveling, and the user does not want to permanently change their phone number. One method may be to provide multiple SIM card slots, such as dual SIM card slots, to a mobile device. However, due to manufacturing costs, device form factors, battery life and other considerations, this method may not be preferred. In addition, even in a dual SIM slot configuration, the mobile device can still access services only through the currently active SIM card. Another method may be to use an eSIM card. However, this requires both device-level support and interaction with a mobile network operator to set up. In addition, some device implementations may only support a single active eSIM at most at a time. Therefore, it is necessary to support access to services associated with the previously used SIM card.

[0017] The subject technology provides for storing temporary credentials on a mobile device for accessing services associated with a primary number. A communication identifier (e.g., an integrated circuit card ID (ICCID), an embedded universal integrated circuit card ID (eUICCID), an international mobile subscriber identity (IMSI) number, or a mobile station international subscriber directory number (MSISDN) number) associated with a previously used SIM card is identified as being closely associated with a user account of the mobile device. If, for example, the communication identifier meets the association criteria with the user account (e.g., by having been registered in association with the user account, having been used for a dual authentication operation for accessing the user account, and / or having been associated with the user account for a predetermined period of time), the communication identifier of the SIM card can be closely associated with the user account. For example, a user account can be registered at one or more servers for login and authentication of a specific user of a mobile device to perform local or cloud data synchronization, access music, video and application storefronts, purchase digital or physical goods and services, find and disable lost devices, submit support requests, and perform other tasks. Once it is identified that the communication ID is closely associated with a user account associated with the mobile device, a temporary certificate proving the association is stored on the mobile device. The temporary certificate can be generated remotely.

[0018] When a mobile device is requested to prove ownership of a primary number, a temporary certificate may be provided to prove continued ownership of the primary number after a previously used SIM card is unavailable for use with the mobile device. In the context of a physical SIM card, unavailability may correspond to the previously used SIM card being physically removed from a SIM card slot of the mobile device. In the context of an eSIM card, unavailability may correspond to the previously used eSIM card being rendered inactive due to, for example, another eSIM card being selected or preferred for current use. Thus, the subject technology advantageously allows a user to continue using a primary number to access various services, such as messaging and video calling, even if a different SIM card is inserted or a different eSIM card is activated by the mobile device. In some implementations, the mobile device may also enter a dual SIM operating mode in which services may be accessed using the communication identifiers of both the previously used SIM card and the currently available SIM card or active eSIM card simultaneously.

[0019] Figure 1 An exemplary network environment 100 is shown in which a system for providing a device with temporary credentials for accessing services associated with a primary number can be implemented according to one or more specific implementations. The temporary credentials may include, for example, a communication ID, a user account ID, and / or a validity period, and the temporary credentials may be signed by a remote server, such as Figure 3 and Figure 4 As described. However, not all of the depicted components may be used in all implementations, and one or more implementations may include additional or different components than those shown in the figures. Changes in the arrangement and type of these components may be made without departing from the spirit or scope of the claims listed herein. Additional components, different components, or fewer components may be provided.

[0020] The network environment 100 includes an electronic device 110, an electronic device 114, an identity service (IDS) server 120, an identity management service (IDMS) server 122, and an IP multimedia subsystem (IMS) server 124. For the purpose of explanation, the network environment 100 is shown in FIG. Figure 1 1 as including electronic devices 110, 114, IDS server 120, IDMS server 122, and IMS server 124; however, network environment 100 may include any number of electronic devices and any number of servers or data centers including multiple servers in a group of servers 130. In addition, as further shown, some servers in server group 130 may be communicatively coupled to another server within server group 130 to send messages to and / or receive messages from each server as further discussed herein.

[0021] For example, network 106 may communicatively (directly or indirectly) couple electronic device 110 with IDS server 120, IDMS server 122, and / or IMS server 124. In one or more implementations, network 106 may be an interconnected network that may include the Internet or devices communicatively coupled to the Internet.

[0022] The electronic device 110 may include a touch screen, and may be, for example, a smartphone including a touch screen, a portable computing device such as a laptop computer, a peripheral device (e.g., a digital camera and headphones), a tablet device, a wearable device such as a watch, a bracelet, etc., and any other suitable device including one or more wireless interfaces, such as a cellular radio device, a near field communication (NFC) radio device, a WLAN radio device, a Bluetooth radio device, a Zigbee radio device, and / or other radio devices. Figure 1 In the present invention, by way of example, the electronic device 110 is depicted as a mobile smart phone device. In one or more specific implementations, the electronic device 110 may be and / or may include the following Figure 8 All or part of the electronic equipment of the electronic system.

[0023] In one or more specific implementations, one or more of the electronic devices 110, 114, such as the electronic device 110, may not include cellular circuitry (or a cellular interface) for communicating with cellular network equipment, such as the IMS server 124. In this case, the electronic device 110 may register for services, such as IMS services, via the network 106 using Wi-Fi calling, so that the IMS server 124 can directly contact the electronic device 110 for call routing.

[0024] For purposes of explanation, the communication session is primarily described herein as a cellular communication session, such as a cellular phone call. However, the communication session may be, for example, a video call, a Wi-Fi call, a VoIP call, a walkie-talkie call, a push-to-talk (PTT) call, a D2D call, or generally any communication between two or more of the electronic devices 110 and 114.

[0025] The IDS server 120 and / or the IDMS server 122 may be all or part of a computer network or server group 130, such as in a cloud computing or data center implementation. For example, the IDS server 120 and / or the IDMS server 122 may provide identity services and may manage credentials associated with the electronic device 110. In addition, the IDS server 120 and / or the IDMS server 122 may provide various authentication and registration services in response to requests from the electronic device 110, such as signing a certificate for a communication ID of a primary number associated with a user account, as further described below.

[0026] In one example, the IDS server 120 and / or the IDMS server 122 that may form the server group 130 may be associated with a specific service provider or entity, for example, different from a cellular service provider. In addition, in at least one specific implementation, the IDS server 120 may be combined with the IDMS server 122, and / or one or more of the IDS server 120 and / or the IDMS server 122 may not be included in one or more specific implementations. In one or more specific implementations, one or more of the electronic devices 110, 114 may be associated with a user account of the service provider or register a user account with the service provider. For example, the electronic devices 110, 114 may each be associated with the same user account, or one or more of the electronic devices may be associated with different user accounts.

[0027] In one example, the IMS server 124 provides access to IMS services, which include functions associated with an IMS gateway that enables the electronic device 110 to send IP multimedia services to or receive IP multimedia services from a telecommunications network. In one example, the IMS server 124 may be external to the server group 130, wherein the IMS server 124 may be provided by a third party that is different from the service provider associated with the server group 130 and / or different from the cellular service provider. In one or more specific implementations, the IMS server 124 may facilitate one or more registration processes initiated by the electronic device 110 and performed by one or more servers in the server group 130, such as by querying and / or processing registration requests. The subject system allows the server group 130 and the electronic device 110 to perform some or all registration processes without the need for a push from the IMS server 124. Although a single IMS server is discussed, multiple IMS servers may be used.

[0028] Figure 2 A block diagram of an exemplary electronic device according to one or more specific implementations is shown. For the purpose of explanation, this document mainly refers to Figure 1 The electronic device 110 is described Figure 2 .However, Figure 2 Corresponds to Figure 1 Any electronic device in the electronic devices 110, 114 of the present invention. However, not all of the components depicted may be used in all specific implementations, and one or more specific implementations may include additional or different components than those shown in the figures. Changes in the arrangement and type of these components may be made without departing from the spirit or scope of the claims listed herein. Additional components, different components, or fewer components may be provided.

[0029] The electronic device 102 may include a storage device 202, a memory 204, a processor 212, and a communication interface 216. The storage device 202 may correspond to a first type of memory, such as non-volatile memory, including flash memory such as NAND flash memory and / or magnetic storage. The memory 204 may correspond to a second type of memory, such as volatile memory, including dynamic random access memory (DRAM). The memory 204 may include appropriate logic components, circuits, and / or code that enable storage of various types of information, such as received data, generated data, code, and / or configuration information.

[0030] The processor 212 may include suitable logic, circuitry, and / or code that can process data and / or control the operation of the electronic device 110. In this regard, the processor 212 may be enabled to provide control signals to various other components of the electronic device 110. The processor 212 may also control the transfer of data between various parts of the electronic device 110, including the storage device 202 and the memory 204. In addition, the processor 212 may be capable of implementing an operating system or otherwise executing code to manage the operation of the electronic device 110. The processor 212 may include a general-purpose processor, a graphics processing unit (GPU), and / or a dedicated processor.

[0031] In one or more specific implementations, the memory 204 can store one or more applications executed by the processor 212 to access one or more services. Figure 3 As described above, these applications may utilize temporary credentials stored in storage device 202 to access one or more services.

[0032] The communication interface 216 may include suitable logic, circuitry, and / or code that enables wired or wireless communication, such as between any of the electronic devices 110, 114 and one or more of the servers 120, 122, 124, via the network 106. The communication interface 216 may include, for example, one or more of a Bluetooth communication interface, a cellular interface, an NFC interface, a Zigbee communication interface, a WLAN communication interface, a USB communication interface, or generally any communication interface.

[0033] In one or more specific implementations, one or more of the processor 212, storage device 202, memory 204, communication interface 216, and / or one or more portions thereof may be implemented in software (e.g., subroutines and code), in hardware (e.g., an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a programmable logic device (PLD), a controller, a state machine, gating logic, discrete hardware components, or any other suitable device), and / or a combination of both.

[0034] Figure 3 A block diagram of an electronic device 110, exemplary SIM cards 330A and 330B, and an exemplary identity management service (IDMS) server 122 according to one or more implementations is shown. However, not all of the depicted components may be used in all implementations, and one or more implementations may include additional or different components than those shown in the figure. Changes in the arrangement and type of these components may be made without departing from the spirit or scope of the claims listed herein. Additional components, different components, or fewer components may be provided.

[0035] The electronic device 110 can load an application from the application 310 to access one or more communication services. For example, the messaging application 312 can be loaded to access the messaging service, and the video call application 314 can be loaded to access the video call service. The applications shown are exemplary and can support any number of communication services. A SIM card 330B associated with a communication identifier (ID) 332B is inserted into the electronic device 110 and can be used by the electronic device 110. For example, the communication ID 332B can be stored in a non-volatile memory of the SIM card 330B. The communication ID 332B can uniquely identify a phone number based on one or more hardware identifiers (e.g., an ICC-ID (Integrated Circuit Card ID) of the SIM card 330B). As described above, other identifiers such as eUICCID or IMSI can also be used for the hardware identifier. In order to identify a unique phone number associated with a hardware identifier, the electronic device 110 can query the IMS server 120 or another server to use the hardware identifier to find a user database. The query result may include a record identifying a mobile station international subscriber directory number (MSISDN) number or a complete phone number associated with the hardware identifier. Alternatively, the communication ID 332B may directly indicate the MSISDN number, in which case the user database lookup may be omitted. For example, the electronic device 110 may have previously stored an association between the hardware identifier and the MSISDN number after authentication with the user database.

[0036] Thus, when SIM card 330B is available for use by electronic device 110, application 310 can verify whether electronic device 110 is authorized to use communication ID 332B and the associated phone number to access communication services via application 310. However, as described above, the user may have previously used a communication identifier 332A corresponding to a primary number that was associated with a SIM card 330A that was previously used by electronic device 110 but is no longer inserted into electronic device 110. Although the physical SIM card is used to describe Figure 3, but SIM cards 330A and 330B may also be eSIM cards. In this case, SIM card 330A may still exist in electronic device 110, but is deactivated, for example, by designating SIM card 330B as the active eSIM card. When SIM card 330B is inserted or active, the user may still wish to continue to access communication services using communication ID 332A instead of communication ID 332B.

[0037] In order to access the communication service using the communication ID 332A, the electronic device 110 may store the certificate 322A as part of the credential 320 in the storage device 202. For example, the certificate may be a digitally signed flat file stored in a non-volatile storage device or storage device 202, and may include a public key of the electronic device 110, a digital signature of the IDS server 120, and various identification fields, such as a validity period 324A defining the validity period of the certificate, a communication ID 332A corresponding to the hardware identifier or MSISDN of the SIM card 330A, and a user account ID 350 corresponding to a user account used to log in to the electronic device 110 with various servers to synchronize content, access services, and perform other tasks, as described above. The elements shown in the certificate 322A are exemplary and may include additional elements that are not explicitly shown.

[0038] Before allowing access associated with a specific communication ID, the communication service provided by the IMS server 124 may request proof of ownership of the specific communication ID, which may be provided by submitting a certificate 322A in response to a proof request. For example, the certificate 322A may be sent to the IMS server 124 via the network 106, and the IMS server may then verify the certificate with the IDS server 120. Alternatively, the certificate 322A may be sent to the IDS server 120 via the network 106, and the IDS server may then send the verification result to the IMS server 124. The verification may include confirming that the validity period 324A is still valid, confirming the digital signature using the public key of the IDS server 120, and confirming that the user account ID 350 is logged into the electronic device 110 and requests to use the communication ID 332A to access services such as messaging or video calls. Although only a single certificate 322A is shown, the credential 320 may include multiple certificates. For example, as described below, multiple certificates may be stored to operate in a dual SIM operating mode.

[0039] The validity period 324A may define a predetermined period of time when the certificate 322A is valid, such as a period of 30 days after the certificate is generated, and thus also defines the expiration date of the certificate 322A. In some implementations, the validity period 324A may cover the maximum allowed validity period. In some implementations, before the validity period 324A expires, for example, 5 days before expiration, the electronic device 110 may provide a notification. The notification may look similar to Figure 6 , but instead notifies of future removal due to expiration of validity period 324A, rather than indicating past or current removal due to receipt of an invalidation message. Figure 6 As described above, the certificate 322A may expire before the period defined by the validity period 324A. Therefore, the certificate 322A is defined as a temporary certificate with an expiration date rather than a permanent certificate with no expiration date, or a semi-permanent certificate with a much longer validity period. The communication ID 332A corresponds to the same communication ID 332A in the previously used SIM card 330A. As described above, the user account ID 350 corresponds to a user account used to log in to the electronic device 110 with various servers.

[0040] The IDMS server 122 includes a two-factor authentication (2FA) setting 370 and a user account association history 380, which can be used to determine whether a specific communication identifier is closely bound to a specific user account (e.g., meets the association criteria with the specific user account). For example, the IDMS server 122 may have previously received a certificate 322A to confirm whether the communication ID 332A is closely bound to the user account ID 350 (e.g., meets the association criteria with the user account). Therefore, the IDMS server 122 can perform a lookup in the 2FA setting 370 and / or the user account association history 380, such as to determine whether the communication ID 332A is used for two-factor authentication of the user account ID 350, and to determine the length of time that the communication ID 332A is associated with the user account ID 350. If the communication ID 332A is being used and / or has been used for two-factor authentication of the user account ID 350, and / or if the communication ID 332A was or has been associated with the user account ID 350 for a predetermined amount of time, it can be determined that the communication ID 332A meets the association criteria with the user account. When, based on the lookup, the IDMS server 112 is able to confirm that the communication ID 332A is closely bound to the user account ID 350 (eg, meets the association criteria with the user account), the certificate 322A may be signed and stored in the credentials 320 of the storage device 202. Figure 4 and Figure 7An exemplary process for generating and storing credentials 322A is described in . Note that while 2FA settings 370 and user account association history 380 are shown as internal components of IDMS server 122, in some implementations, these components may be external components or a mixture of internal and external components.

[0041] The certificate 322A proves that the communication ID 332A is closely bound to the user account ID 350 (e.g., meets the association criteria with the user account ID) and is therefore owned by the user account. It can be assumed that the certificate 322A remains valid until the validity period 324A expires or an invalidation message is received, such as Figure 6 Thus, when the certificate 322A is valid, the certificate 322A may be provided by the application 310 of the electronic device 110 to prove current and / or continued ownership of the communication ID 332A, even when the SIM card 330A is not available for use by the electronic device 110. For example, as described above, the certificate 322A may be sent to the requesting server via the network 106. When the validity period 324A and the signature of the certificate 322A may be confirmed to be valid, a server providing access to communication services, such as the IMS server 124, may enable access associated with the communication ID 332A.

[0042] Figure 4 An exemplary timing diagram 400 for obtaining a temporary credential that proves current and / or ongoing ownership of a communication identifier by an electronic device associated with a user account is shown in accordance with one or more implementations. Figure 1 The components of the electronic device 110, the IDS server 120 and the IDMS server 122 are discussed Figure 4 As shown, the diagram illustrates the interaction between the electronic device 110, the IDS server 120, and the IDMS server 122. For the purpose of explanation, this document refers to the IDS server 120 and the IDMS server 122 to describe the temporary certificate signing; however, the temporary certificate signing can be used by a number of different services, such as communication services, etc. For example, an API can be provided to allow other services to utilize the temporary certificate signing system.

[0043] The electronic device 110 may initiate a request 410 for a signed certificate from the IDS server 120. The requested digital signature may be used as a means of establishing trust that the identified communication identifier is closely tied to the identified user account. For example, because the IDS server 120 may perform a user database lookup to identify a telephone number associated with the communication identifier, and because the IDS server 120 may also query 412 to confirm with the IDMS server 122 that the telephone number associated with the communication ID is closely tied to the user account (e.g., satisfies association criteria with the user account (e.g., by confirming use of a primary number for 2FA to authenticate the user account and / or a threshold login time for the user account on the electronic device 110), the signature of the IDS server 120 determines that these factors have been confirmed by the IDS server 120 because only the IDS server 120 knows the private key used to provide its digital signature. Thus, the request 410 may include a private key from Figure 3 In some implementations, the batch protocol is used to sign multiple certificates in a single request. In some examples, request 410 includes an authentication batch request.

[0044] The IDS server 120 may extract the data in the certificate 322A and submit a query 412 to the IDMS server 122 regarding whether the communication ID 332A meets the association criteria with the user account ID 350 (e.g., closely bound to the user account ID). For example, the IDMS server 122 may perform a lookup in the 2FA settings 370 to determine whether the communication ID 332A is registered for 2FA for the user account ID 350. If the communication ID 332A is registered for 2FA, this may provide evidence that the communication ID 332A meets the association criteria with the user account ID 350 (e.g., closely bound to the user account ID). Similarly, the IDMS server 122 may perform a lookup in the user account association history 380 to determine the length of time that the electronic device 110 made the SIM card 330A available for use when logged in or registered under the user account ID 350. If the length of time exceeds a threshold, such as at least 3 days, this may also provide evidence that the communication ID 332A meets the association criteria with the user account ID 350 (e.g., closely bound to the user account ID). The IDMS server 112 may use this evidence and / or other factors to confirm 414 that the communication ID 332A meets the association criteria with the user account ID 350 (eg, is closely tied to the user account ID).

[0045] After receiving the confirmation 414, the IDS server 120 can proceed to sign the certificate 322A and send 416 the signed certificate 322A back to the electronic device 110. For example, the IDS server 120 can use its private key to process the data field of the certificate 322A to generate encrypted data such as an encrypted summary message and append it to the certificate 322A, so that other devices such as the electronic device 110 or the IMS server 124 can use the associated public key to decrypt the encrypted summary message or digital signature and verify whether it is valid. Therefore, the previously unsigned certificate is now signed by appending the encrypted summary message. The signed certificate 322A can be stored in the credential 320 in the storage device 202. When the certificate 322A is invalid or the validity period 324A expires, the certificate 322A can be deleted from the credential 320. For example, the SIM card 330A can be inserted into a different device, such as the electronic device 114. In this case, the electronic device 114 has established an intermediate ownership of the communication ID 332A. The electronic device 110 may receive the invalidation message by periodically querying the IDS server 120 or the IMS server 124 , or by receiving a push message, and in response to the message, the electronic device 110 may invalidate the certificate 322A and delete it from the credentials 320 .

[0046] Figure 5 An exemplary notification interface for successfully registering a primary number associated with a previously used SIM card and for confirming entry into a dual SIM operating mode is shown in accordance with one or more implementations. Figure 5 The notification interface may appear after the timing diagram 400 occurs. Figure 5 As shown, when the conditions for generating certificate 322A are met, certificate 322A can be automatically generated by electronic device 110 on behalf of the user. One of the conditions may include: SIM card 330B is inserted, or SIM card 330B becomes available for use within a predetermined time after SIM card 330A is removed or unavailable to electronic device 110.

[0047] like Figure 5As shown, the user is informed that the primary number or communication ID 332A (associated with the phone number "xxx-xxx-xxxx") can continue to be used to access messages corresponding to the messaging application 312 and to access video calls corresponding to the video calling application 314. In addition, the user is prompted whether to use the new number or communication ID 332B (associated with the phone number "yyy-yyy-yyyy") to access the same service. As described above, the phone number associated with a specific communication ID can be determined by performing a user database lookup. Since the SIM card 330B may be only temporary, such as a rented card, the user may not want to use the communication ID 332B for messages and video calls, in which case the user can select the "No" option. In this case, the SIM card 330B can still be used for cellular voice calls and data connections, but the communication ID 332B can be ignored when using the application 310 to access services.

[0048] In the event that the user does wish to use two numbers and selects the "yes" option, the electronic device 110 can enter dual SIM mode for the application 310. The messaging application 312 and the video call application 314 can therefore use the communication ID 332A or 332B to access the messaging service and the video call service, respectively. In this case, a process similar to that shown in the timing diagram 400 can be used to store the additional certificate in the credential 320 of the communication ID 332B. However, since the SIM card 330B is inserted and available to the electronic device 110, the check whether the communication ID 332B is closely bound to the user account ID 350 can be bypassed. Therefore, in some specific implementations, the IDS server 120 can sign the additional certificate without sending a query 412 to the IDMS server 122.

[0049] Figure 6 An exemplary notification interface for invalidating a primary number associated with a previously used SIM card according to one or more specific implementations is shown. As described above, due to receiving the invalidation message, the certificate 322A may be invalidated before the validity period 324A. Figure 6In the example shown, the SIM card 330A has been inserted into another electronic device, which now has an intervening ownership and / or priority ownership claim for the associated communication ID 332A. Therefore, the certificate 322A can be deleted from the credential 320. Another failure event may include: the 2FA number registered for the user account ID 350 is replaced from the communication ID 332A to a different ID, which weakens the binding of the communication ID 332A to the user account ID 350. Another failure event may be a heartbeat interval confirmation failure, in which the electronic device 110 uses a heartbeat interval shorter than the validity period 324A to poll a server such as the IDS server 120 or the IMS server 124 to confirm the continued validity of the certificate 322A. In other specific implementations, a user interface can be provided for the user to explicitly delete the certificate 322A. In order to obtain a new certificate with an extended validity period after the certificate 322A expires, the SIM card 330A can be reinserted into the electronic device 110 to reestablish ownership.

[0050] Figure 7 A flow chart of an exemplary process 700 for storing temporary credentials on a device for accessing services associated with a primary number according to one or more implementations is shown. Figure 1-Figure 4 The process 700 is described with reference to the electronic device 110. However, the process 700 is not limited to Figure 1-Figure 4 The electronic device 110 of the present invention may be used, and one or more blocks (or operations) of process 700 may be performed by one or more other components of other suitable devices. Further for the purpose of explanation, the blocks of process 700 are described herein as occurring sequentially or linearly. However, multiple blocks of process 700 may occur in parallel. In addition, the blocks of process 700 do not have to be performed in the order shown, and / or one or more blocks of process 700 do not have to be performed and / or may be replaced by other operations.

[0051] In the exemplary process 700, at block 702, a first device (e.g., electronic device 110) determines that a first SIM card (e.g., SIM card 330A) previously used by the first device is not available for use by the first device. For example, electronic device 110 may store a history of previously used SIM cards (including SIM card 330A) in storage device 202, and confirm that a currently inserted (and / or available) SIM card does not correspond to SIM card 330A.

[0052] At block 704, the electronic device 110 determines that a second SIM card (e.g., SIM card 330B) is available for use by the electronic device 110 within a predetermined period of time after determining that the SIM card 330A is not available for use by the electronic device 110. For example, after detecting the insertion of the SIM card 330B, the electronic device 110 may confirm that the SIM card 330B is available for use (e.g., properly responding to electronic commands and / or providing access to a telecommunications network), and also confirm that the time between removal of the previous SIM card 330A and insertion of the SIM card 330B is within a predetermined period of time, such as within a week.

[0053] At block 706, the electronic device 110 confirms that the communication ID 332A of the SIM card 330A is closely bound to (e.g., satisfies the association criteria with the user account) associated with the electronic device 110 (e.g., the user account ID 350). For example, an unsigned certificate 322A including the communication ID 332A and the user account ID 350 may be generated, which may then be used as described above in Figure 4 After receiving the signed certificate 322A, the electronic device 110 may confirm that the communication ID 332A of the SIM card 330A is closely bound to the user account ID 350 (eg, satisfies the association criteria with the user account).

[0054] At block 708, the electronic device 110 stores the signed certificate 322A in the credentials 320 of the storage device 202. The signed certificate 322A proves the current ownership and / or continued ownership of the communication ID 332A to the electronic device 110. The signed certificate 322A may be provided by the application 310 in lieu of the SIM card 330A to access one or more services associated with the communication ID 332A.

[0055] Figure 8 An electronic system 800 is shown that can be used to implement one or more specific implementations of the subject technology. The electronic system 800 can be one or more of the following and / or can be a part of one or more of the following: electronic devices 110, 114, IDS server 120, IDMS server 122, and / or IMS server 124, such as Figure 1 As shown. The electronic system 800 may include various types of computer-readable media and interfaces for various other types of computer-readable media. The electronic system 800 includes a bus 808, one or more processing units 812, a system memory 804 (and / or a cache), a ROM 810, a permanent storage device 802, an input device interface 814, an output device interface 806, and one or more network interfaces 816, or a subset or variation thereof.

[0056] The bus 808 generally represents all system buses, peripheral busses, and chipset buses that communicatively connect the many internal devices of the electronic system 800. In one or more specific implementations, the bus 808 communicatively connects one or more processing units 812 with the ROM 810, the system memory 804, and the permanent storage device 802. The one or more processing units 812 retrieve instructions to be executed and data to be processed from these various memory units in order to perform the processes disclosed in the present subject matter. In different specific implementations, the one or more processing units 812 can be a single processor or a multi-core processor.

[0057] ROM 810 stores static data and instructions required by one or more processing units 812 and other modules of the electronic system 800. On the other hand, permanent storage device 802 can be a read-write memory device. Permanent storage device 802 can be a non-volatile memory unit that stores instructions and data even when the electronic system 800 is turned off. In one or more specific implementations, a mass storage device (such as a magnetic disk or optical disk and its corresponding disk drive) can be used as permanent storage device 802.

[0058] In one or more implementations, a removable storage device (such as a floppy disk, a flash drive, and its corresponding disk drive) may be used as the permanent storage device 802. Like the permanent storage device 802, the system memory 804 may be a read-write memory device. However, unlike the permanent storage device 802, the system memory 804 may be a volatile read-write memory, such as a random access memory. The system memory 804 may store any of the instructions and data that one or more processing units 812 may need at runtime. In one or more implementations, the processes disclosed in the subject matter are stored in the system memory 804, the permanent storage device 802, and / or the ROM 810. The one or more processing units 812 retrieve instructions to be executed and data to be processed from these various memory units in order to perform the processes of one or more implementations.

[0059] The bus 808 is also connected to an input device interface 814 and an output device interface 806. The input device interface 814 enables a user to transmit information and select commands to the electronic system 800. Input devices that can be used with the input device interface 814 may include, for example, an alphanumeric keyboard and a pointing device (also referred to as a "cursor control device"). The output device interface 806 may, for example, enable the display of images generated by the electronic system 800. Output devices that can be used with the output device interface 806 may include, for example, a printer and a display device, such as a liquid crystal display (LCD), a light emitting diode (LED) display, an organic light emitting diode (OLED) display, a flexible display, a flat panel display, a solid-state display, a projector, or any other device for outputting information. One or more specific implementations may include a device that acts as both an input device and an output device, such as a touch screen. In these specific implementations, the feedback provided to the user may be any form of sensory feedback, such as visual feedback, auditory feedback, or tactile feedback; and input from the user may be received in any form, including acoustic, voice, or tactile input.

[0060] Finally, if Figure 8 As shown, bus 808 also couples electronic system 800 to one or more networks and / or to one or more network nodes via one or more network interfaces 816, such as Figure 1 800. In this manner, electronic system 800 may be part of a computer network, such as a LAN, a wide area network ("WAN"), or an intranet, or may be part of a network of networks, such as the Internet. Any or all components of electronic system 800 may be used with the subject disclosure.

[0061] As described above, one aspect of the present technology is to collect and use data available from specific legitimate sources to improve multiple user identifiers for registration and services on associated devices. The present disclosure contemplates that, in some instances, the collected data may include personal information data that uniquely identifies or can be used to identify a specific person. Such personal information data may include demographic data, location-based data, online identifiers, phone numbers, email addresses, home addresses, data or records related to the user's health or fitness level (e.g., vital signs measurements, medication information, exercise information), date of birth, or any other personal information.

[0062] The present disclosure recognizes that the use of such personal information data in the present technology can be used to benefit users. For example, personal information data can be used to determine whether to register and / or associate a particular user identifier according to the user's preferences. Therefore, the use of such personal information data enables users to better control the devices that register user identifiers. In addition, the present disclosure also anticipates other uses of personal information data that benefit users. For example, health and fitness data can be used according to the user's preferences to provide insights into their overall health, or can be used as positive feedback to individuals who use technology to pursue health goals.

[0063] This disclosure envisions that entities responsible for collecting, analyzing, disclosing, transmitting, storing or otherwise using such personal information data will comply with established privacy policies and / or privacy practices. Specifically, such entities will be expected to implement and consistently apply privacy practices that are generally recognized as meeting or exceeding the requirements of the industry or government that maintain user privacy. Such information about the use of personal data should be prominently and easily accessible to users, and should be updated as the collection and / or use of data changes. The user's personal information should be collected only for legitimate use. In addition, such collection / sharing should only occur after receiving user consent or other legal basis specified in applicable law. In addition, such entities should consider taking any necessary steps to defend and safeguard access to such personal information data and ensure that others who have access to personal information data comply with their privacy policies and processes. In addition, such entities may subject themselves to third-party assessments to demonstrate their compliance with widely accepted privacy policies and practices. In addition, policies and practices should be adjusted for specific types of personal information data collected and / or accessed, and applied to applicable laws and standards, including specific considerations that are exclusive to jurisdictions that can be used to impose higher standards. For example, in the United States, collection or access to certain health data may be governed by federal and / or state laws, such as the Health Insurance Portability and Accountability Act (HIPAA); while health data in other countries may be subject to other regulations and policies and should be handled accordingly.

[0064] Regardless of the foregoing, the present disclosure also contemplates implementation schemes in which users selectively block the use or access of personal information data. That is, the present disclosure contemplates that hardware elements and / or software elements may be provided to prevent or block access to such personal information data. For example, in the case of registering and associating multiple user identifiers for a service on a device, the present technology may be configured to allow a user to choose to "opt in" or "opt out" to participate in the collection of personal information data at any time during or after registration for the service. In addition to providing "opt-in" and "opt-out" options, the present disclosure also contemplates providing notifications related to access or use of personal information. For example, a user may be notified that their personal information data will be accessed when downloading an application, and then be reminded again just before the personal information data is accessed by the application.

[0065] In addition, it is an object of the present disclosure that personal information data should be managed and processed to minimize the risk of unintentional or unauthorized access or use. Risks can be minimized by limiting data collection and deleting data once it is no longer needed. In addition, and when applicable, including in certain health-related applications, data de-identification can be used to protect the privacy of users. De-identification can be facilitated by removing identifiers, controlling the amount or specificity of stored data (e.g., collecting location data at a city level rather than at an address level), controlling how data is stored (e.g., aggregating data across users), and / or other methods such as differential privacy, where appropriate.

[0066] Thus, while the present disclosure broadly covers the use of personal information data to implement one or more of the various disclosed embodiments, the present disclosure also contemplates that various embodiments may also be implemented without access to such personal information data. That is, various embodiments of the present technology will not fail to function properly due to the absence of all or a portion of such personal information data. For example, a registered and / or associated user identifier may be provided based on aggregated non-personal information data or an absolute minimum amount of personal information, such as information processed only on the user's device or other non-personal information available.

[0067] Implementations within the scope of the present disclosure may be implemented in part or in whole using a tangible computer-readable storage medium (or multiple tangible computer-readable storage media of one or more types) programmed with one or more instructions. Tangible computer-readable storage media may also be non-transitory in nature.

[0068] Computer-readable storage media can be any storage media that can be read, written, or otherwise accessed by a general or special computing device, including any processing electronics and / or processing circuitry capable of executing instructions. For example, without limitation, computer-readable media can include any volatile semiconductor memory, such as RAM, DRAM, SRAM, T-RAM, Z-RAM, and TTRAM. Computer-readable media can also include any non-volatile semiconductor memory, such as ROM, PROM, EPROM, EEPROM, NVRAM, flash memory, nvSRAM, FeRAM, FeTRAM, MRAM, PRAM, CBRAM, SONOS, RRAM, NRAM, racetrack memory, FJG, and Millipede memory.

[0069] In addition, the computer-readable storage medium may include any non-semiconductor memory, such as optical disk storage, magnetic disk storage, magnetic tape, other magnetic storage devices, or any other medium capable of storing one or more instructions. In one or more specific implementations, the tangible computer-readable storage medium may be directly coupled to the computing device, while in other specific implementations, the tangible computer-readable storage medium may be indirectly coupled to the computing device, for example, via one or more wired connections, one or more wireless connections, or any combination thereof.

[0070] Instructions can be directly executable, or can be used to develop executable instructions. For example, instructions can be implemented as executable or non-executable machine code, or can be implemented as high-level language instructions that can be compiled to produce executable or non-executable machine code. In addition, instructions can also be implemented as data, or can include data. Computer executable instructions can also be organized in any format, including routines, subroutines, programs, data structures, objects, modules, applications, applets, functions, etc. As recognized by those skilled in the art, the details including but not limited to the number, structure, sequence and organization of instructions can be significantly different without changing the underlying logic, function, processing and output.

[0071] Although the above discussion mainly involves microprocessors or multi-core processors that execute software, one or more implementations are performed by one or more integrated circuits such as ASICs or FPGAs. In one or more implementations, such integrated circuits execute instructions stored on the circuits themselves.

[0072] Those skilled in the art will recognize that the various illustrative frames, modules, elements, parts, methods and algorithms described herein can be implemented as electronic hardware, computer software or a combination of the two. In order to illustrate this interchangeability of hardware and software, various illustrative frames, modules, elements, parts, methods and algorithms have been generally described above according to functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the entire system. The technician can implement the described functionality in different ways for each specific application. Various parts and frames can be arranged differently (e.g., arranged in different orders, or divided in different ways) without departing from the scope of the subject technology.

[0073] The subject technology provides for storing temporary credentials on a mobile device for accessing services associated with a primary number. A communication identifier associated with a previously used SIM card is identified as being closely associated with a user account of the mobile device. For example, a user account may be registered at one or more servers for login and authentication of a specific user of a mobile device. Once it is identified that a communication ID is closely associated with a user account associated with a mobile device, a temporary certificate proving the association is stored on the mobile device. When a mobile device is requested to prove ownership of a primary number in order to access a service, a temporary certificate may be provided to prove continued ownership of the primary number after a previously used SIM card is unavailable for the mobile device. Therefore, even if a different SIM card is inserted or a different eSIM card is activated by the mobile device, the subject technology advantageously allows the user to continue using the primary number to access various services, such as messaging and video calls.

[0074] According to various specific implementations, a method for enabling a communication identifier from a previously used subscriber identity module (SIM) card to access a service is provided. The method may include: determining, by a first device, that a first subscriber identity module (SIM) card previously used by the first device is not available for use by the first device. The method may include: determining, by the first device, that a second SIM card is available for use by the first device within a predetermined time period after determining that the first SIM card is not available for use by the first device. The method may include: confirming, by the first device, that the communication identifier of the first SIM card is closely bound to a user account associated with the first device. The method may include: storing, by the first device, a temporary certificate that proves the first device's continued ownership of the communication identifier and allows the first device to access at least one service associated with the communication identifier.

[0075] Other aspects include corresponding systems, apparatus, and computer program products for implementing the computer-implemented methods.

[0076] It should be understood that the specific order or the hierarchical structure of the frame in the process disclosed by the present invention are the illustration of exemplary methods. Based on the design preferred requirements, it should be understood that the specific order or the hierarchical structure of the frame in the process can be rearranged or all the frames shown are executed. Any frame in these frames can be executed simultaneously. In one or more specific implementations, multitasking and parallel processing may be advantageous. In addition, the division of each system component in the above-mentioned specific implementation should not be understood as requiring such division in all specific implementations, and it should be understood that program components and systems can be generally integrated together in a single software product or encapsulated in multiple software products.

[0077] As used in this specification and any claims of this patent application, the terms "base station", "receiver", "computer", "server", "processor" and "memory" all refer to electronic devices or other technical devices. These terms exclude people or groups of people. For the purpose of this specification, the term "display" or "displaying" means displaying on an electronic device.

[0078] As used herein, the phrase "at least one of" following a list of items, any of which is separated by the terms "and" or "or", modifies the list as a whole, rather than each member (i.e., each item) of the list. The phrase "at least one of" does not require selection of at least one of each item listed; rather, the phrase allows for a meaning that includes at least one of any one item and / or at least one of any combination of items and / or at least one of each item. For example, the phrases "at least one of A, B, and C" or "at least one of A, B, or C" each refer to only A, only B, or only C; any combination of A, B, and C; and / or at least one of each of A, B, and C.

[0079] The predicate words "configured to," "operable to," and "programmed to" do not imply any particular tangible or intangible modification of a subject matter but are intended to be used interchangeably. In one or more specific implementations, a processor configured to monitor and control an operation or component may also mean that the processor is programmed to monitor and control the operation or that the processor is operable to monitor and control the operation. Likewise, a processor configured to execute code may be interpreted as a processor programmed to execute code or operable to execute code.

[0080] Phrases such as aspect, this aspect, on the other hand, some aspects, one or more aspects, a specific implementation, this specific implementation, another specific implementation, some specific implementations, one or more specific implementations, an embodiment, this embodiment, another embodiment, some embodiments, one or more embodiments, configuration, this configuration, other configurations, some configurations, one or more configurations, subject technology, disclosure, the present disclosure, other variations thereof, etc. are for convenience and do not mean that the disclosure involving such one or more phrases is essential to the subject technology, nor does it mean that such disclosure applies to all configurations of the subject technology. Disclosures involving such one or more phrases may apply to all configurations or one or more configurations. Disclosures involving such one or more phrases may provide one or more examples. Phrases such as aspect or some aspects may refer to one or more aspects and vice versa, and this applies similarly to the other aforementioned phrases.

[0081] The word "exemplary" is used herein to mean "serving as an example, instance, or illustration." Any implementation described herein as "exemplary" or as an "example" is not necessarily to be construed as preferred or advantageous over other implementations. Furthermore, to the extent that the terms "including," "having," and the like are used in the specification or claims, such terms are intended to be inclusive, in a manner similar to the way the term "comprising" is interpreted when used as a transitional word in a claim.

[0082] All structural and functional equivalents to the elements of the various aspects described throughout this disclosure that are known or later become known to those of ordinary skill in the art are expressly incorporated herein by reference and are intended to be covered by the claims. In addition, nothing disclosed herein is intended to be made available to the public regardless of whether the disclosure is explicitly stated in the claims. No claim element shall be interpreted under the provisions of 35 U.S.C. §112(f) unless the element is explicitly stated using the phrase “means for…” or, in the case of a method claim, the element is stated using the phrase “step for…”

[0083] The previous description is provided to enable those skilled in the art to practice the various aspects described herein. Various modifications of these aspects are apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects. Therefore, the claims are not intended to be limited to the aspects shown herein, but are intended to make the full scope consistent with the language claims, wherein reference to elements in singular values ​​is not intended to mean "only one", but refers to "one or more", unless specifically noted. Unless otherwise specifically stated, the term "some" refers to one or more. Male pronouns (e.g., his) include female and neutral (e.g., her and its), and vice versa. Titles and subtitles (if any) are used only for convenience and do not limit the subject disclosure.

Claims

1. A method comprising: Determining, by a first device, that a first subscriber identity module (SIM) previously used by the first device is unusable by the first device; within a predetermined time period after determining that the first SIM cannot be used by the first device, determining, by the first device, that a second SIM can be used by the first device; as well as In response to the determination, data is stored by the first device that allows the first device to access at least one service associated with the communication identifier of the first SIM when the first SIM is unavailable for use and the second SIM is available for use.

2. The method according to claim 1, further comprising: receiving, by the first device, a request for proof of ownership of the communication identifier of the first SIM; in response to receiving the request, sending, by the first device, a temporary credential, wherein the temporary credential is stored and proves current ownership of the communication identifier of the first SIM by the first device; as well as After sending the temporary credentials, the second SIM is used by the first device to access the at least one service associated with the communication identifier of the first SIM.

3. The method according to claim 2, further comprising: After sending the temporary credentials, a message is received by the first device via the at least one service for the communication identifier of the first SIM. 4 . The method of claim 1 , wherein the at least one service comprises a messaging service, wherein the messaging service is configured to allow the first device and a second device different from the first device to communicate by sending and receiving messages.

5. The method according to claim 1, further comprising: Confirming that the communication identifier of the first SIM is registered for two-factor authentication for a user account or that the communication identifier of the first SIM has been associated with the user account for a threshold period of time.

6. The method according to claim 2, further comprising: A further temporary credential is stored by the first device, the further temporary credential proving the current ownership of the further communication identifier of the second SIM by the first device and allowing the first device to access the at least one service associated with both the communication identifier of the first SIM and the further communication identifier of the second SIM.

7. The method of claim 2, wherein the temporary credential is associated with a predetermined expiration period, after which the temporary credential expires and is invalid.

8. The method according to claim 7, further comprising: Prior to the predetermined expiration date, an expiration notification is displayed by the first device.

9. The method according to claim 7, further comprising: The continued validity of the temporary credentials is confirmed by the first device by polling a server using a heartbeat interval that is shorter than the predetermined expiration period.

10. The method according to claim 7, further comprising: After determining that the first SIM is unusable with the first device, the stored temporary credential is updated by the first device with another temporary credential having an extended predetermined expiration period based on determining that the first SIM is again usable with the first device.

11. The method according to claim 2, further comprising: receiving, by the first device, a deactivation message corresponding to the communication identifier of the first SIM; as well as In response to receiving the revocation message, the stored temporary credentials are revoked by the first device.

12. A first device, comprising: Memory; and One or more processors configured to: determining that a first subscriber identity module (SIM) previously used by the first device is unusable by the first device; within a predetermined time period after determining that the first SIM cannot be used by the first device, determining that a second SIM can be used by the first device; as well as Data is stored that allows the first device to access at least one service associated with a communication identifier of the first SIM when the first SIM is unavailable for use and the second SIM is available for use.

13. The first device of claim 12, wherein the one or more processors are further configured to: receiving a request for proof of ownership of the communication identifier of the first SIM; in response to receiving the request, sending a temporary credential, wherein the temporary credential is stored and proves current ownership of the communication identifier of the first SIM by the first device; and After sending the temporary credentials, the at least one service associated with the communication identifier of the first SIM is accessed using the second SIM.

14. The first device of claim 13, wherein the one or more processors are further configured to: After sending the temporary credentials, a message is received via the at least one service for the communication identifier of the first SIM.

15. The first device of claim 12, wherein the at least one service comprises a messaging service, wherein the messaging service is configured to allow the first device and a second device different from the first device to communicate by sending and receiving messages.

16. The first device of claim 12, wherein the one or more processors are further configured to confirm the following: the communication identifier of the first SIM is registered for two-factor authentication for a user account, or The communication identifier of the first SIM is associated with the user account for a threshold period of time.

17. The first device of claim 13, wherein the one or more processors are further configured to: A further temporary credential is stored, the further temporary credential proving the current ownership of the further communication identifier of the second SIM by the first device and allowing the first device to access the at least one service associated with both the communication identifier of the first SIM and the further communication identifier of the second SIM.

18. The first device of claim 13, wherein the temporary credential is associated with a predetermined expiration period after which the temporary credential expires and is invalid.

19. The first device of claim 13, wherein the one or more processors are further configured to: receiving a deactivation message corresponding to the communication identifier of the first SIM; and In response to receiving the revocation message, the stored temporary credential is revoked.

20. A non-transitory machine-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to: determining that a first subscriber identity module (SIM) previously used by a first device is unusable by the first device; within a predetermined time period after determining that the first SIM is unusable with the first device, determining that a second SIM is usable with the first device; and Data is stored that allows the first device to access at least one service associated with the communication identifier of the first SIM when the second SIM is available for use.

Images