Network Connectivity

Abstract

A method is provided that includes receiving location information, performing a selection operation to select an International Mobile Subscriber Identity (IMSI) to obtain temporary bootstrap connectivity, and attempting to register with a network using the selected IMSI. The selection operation is configured to select one of a first plurality of IMSIs for a first location and one of a second plurality of different IMSIs for a second location. Each of the first plurality of IMSIs includes a first predefined value for at least a first portion of each respective IMSI, and each of the second plurality of IMSIs includes a second predefined value for at least a first portion of each respective IMSI. The selection operation includes first and second predefined selection characteristics. A network access element, a host device, and a network node according to the method are also described.

Description

[Technical field]

[0001] The present invention relates to telecommunications, and more particularly to mobile network authentication for obtaining a temporary bootstrap connection. [Background technology]

[0002] Generally, Internet of Things (IoT), Machine to Machine (M2M), and consumer devices are configured to use Universal Integrated Circuit Cards (UICCs) or, in more recent implementations, Embedded Universal Integrated Circuit Cards (eUICCs), also called Embedded Subscriber Identity Modules (eSIMs), Integrated Universal Integrated Circuit Cards (iUICCs), or Software-based SIMs (Soft SIMs) for the purpose of authentication to a Mobile Network Operator (MNO) or Mobile Virtual Network Operator (MVNO) to access services offered by the network. A UICC is in the form of a small card that can be inserted into and removed from a device, and an eUICC is a small card that is inserted into a device in a non-removable manner. An iUICC consists of a system-on-chip solution where the UICC functions are performed on a chipset. A Soft SIM contains a collection of software applications and data that perform all the functions of a SIM card, but does not reside in any kind of secure data storage or use a secure processor, but instead is stored in the memory and processor of the communication device itself (i.e., there is no SIM hardware).

[0003] In this specification, a network access element is an entity that enables network authentication and access. This entity may be included in a UICC, eUICC, iUICC, or soft SIM that may be included in an IoT device, M2M device, or other device.

[0004] In the case of UICC, eUICC, iUICC and soft SIM, authentication and access to services offered by the mobile network may be performed by remote SIM provisioning (i.e., downloading, installing and enabling profiles over the air (OTA)).

[0005] With the increasing presence of network access elements, such as UICC, eUICC, iUICC, or soft SIM in IoT devices, M2M devices, and other devices, it may be possible to provide connectivity without configuration. To do this, the network access elements may use pre-configured provisioning profiles to access marketplaces and remote SIM provisioning (RSP) platforms without requiring a WIFI connection.

[0006] The marketplace and RSP platform enables users to continuously purchase connectivity plans from their provider of choice and download network access element configurations to enable cellular connectivity. This can be accomplished by the following steps: 1. The device boots up when unpacked, 2. The device establishes a limited connection using a pre-configured provisioning profile, 3. The user visits the marketplace and purchases a plan. 4. The device downloads the operation profile from the RSP platform. 5. The device establishes a full connection using the new operational profile.

[0007] A network access element identifies the subscription of either an IoT device, M2M device or mobile device by its International Mobile Subscriber Identity (IMSI), which is a globally routable identity assigned to an operator and is globally unique to enable inter-operator signaling routing.

[0008] The IMSI can have a maximum of 15 digits and is composed of several fields: The first part is composed of 6 digits for North American standards and 5 digits for European standards, according to the following formula: IMSI=MCC(3)+MNC(2 / 3)+MSIN(9).

[0009] The full IMSI coverage will allow for 10 billion IMSIs or active individual customer SIMs.

[0010] When using sponsored roaming agreements, it is common for operators to assign sub-ranges from the global range to partner operators so that signaling can be delivered to the partner operator. The sub-ranges are then identified by IMSI range prefixes, which can have various lengths. Within the IMSI range prefix, the digits are called prefix digits.

[0011] IMSI prefix = MCC(3)+MNC(2 / 3)+prefix digits (variable) Example: IMSI=234(3)+250(3)+PP(2)+xxxxxxx(7)

[0012] As explained above, one possible way to provide out-of-the-box connectivity requires that all IoT, M2M, and other consumer devices are configured with a working Network Access Element profile at the time of manufacture, which requires the allocation of a large number of IMSIs. This scenario could result in an increased demand for IMSIs and potentially exhaust the global IMSI numbering reserve.

[0013] However, depending on the device type and usage profile, some devices may never use the provisioning profile and associated IMSI because some devices never use the network access element functionality or use it through WIFI access.

[0014] It is therefore desirable to manage IMSI allocation more efficiently in order to optimize resource usage.

[0015] Prior art document WO / 2017 / 092968 discloses a mechanism for mobile network authentication with first and second temporary subscription identifiers and related data. The proposed method is not an optimal solution to the above identified problem of efficient management of IMSI restrictions and IMSI allocation, since it requires the use of fully functional IMSIs (more specifically, a set of first temporary subscription identifiers and a set of second temporary subscription identifiers that need to be pre-provisioned) that need to be pre-provisioned in the network access elements. As a result, IMSIs are allocated with the possibility that they will never be used, since the user prefers to use WIFI access.

[0016] Prior art US Patent No. 9,940,141 discloses a method for selecting a bootstrap eSIM from among many "bootstrap eSIMs" stored in a network access element included in a mobile device in order to optimize the selection process according to the device's current location and to avoid incurring international fees in lieu of the cost of national fees charged at the current location. Although optimizing IMSI usage according to the device's location, this method does not solve the problem identified above, since it requires pre-provisioning of many IMSIs into the eSIM. Summary of the Invention

[0017] According to a first aspect of the present invention, there is provided a selection management method for obtaining a temporary bootstrap connection for a host device including a network access element, the method comprising: Receiving location information; and performing a selection operation to select an International Mobile Subscriber Identity (IMSI) for obtaining a temporary bootstrap connection, the selection operation configured to select one of a first plurality of IMSIs at a first location and one of a different second plurality of IMSIs at a second location, each of the first plurality of IMSIs including a first predefined value for at least a first portion of each IMSI, and each of the second plurality of IMSIs including a different second predefined value for at least a first portion of each IMSI; Attempting to register on a network using the selected IMSI; The selection operation is a first pre-configured selection characteristic that constrains selection to one of a first plurality of IMSIs based on the location information; and a second pre-configured selection characteristic providing a variable selection from the first plurality of IMSIs.

[0018] This allows for the use and reuse of the IMSI used to obtain temporary bootstrap connectivity without the IMSI having to be pre-provisioned on the network access element dedicated to that network access element, which may result in more efficient use of available IMSIs and less IMSI waste.

[0019] According to a second aspect of the present disclosure, there is provided a network access element for obtaining a temporary bootstrap connection of a host device, the network access element comprising: At least one processor; at least one computer readable storage; The at least one computer readable storage, when executed by the at least one processor, provides to the at least one processor: Receiving location information; and performing a selection operation to select an IMSI to obtain a temporary bootstrap connection, the selection operation configured to select one of a first plurality of IMSIs at a first location and one of a different second plurality of IMSIs at a second location; each of the first plurality of IMSIs includes a first predefined value for at least a first portion of each IMSI, and each of the second plurality of IMSIs includes a different second predefined value for at least a first portion of each IMSI; and attempting to register with the network using the selected IMSI; The selection operation is a first pre-configured selection characteristic that constrains selection to one of a first plurality of IMSIs based on the location information; and a second pre-configured selection characteristic providing a variable selection from the first plurality of IMSIs.

[0020] According to a third aspect of the present disclosure, there is provided a host device including a network access element according to the second aspect of the present disclosure.

[0021] According to a fourth aspect of the present disclosure, there is provided a network node for providing a temporary bootstrap connection, the network node comprising: receiving a registration request from a host device including a network access element, the registration request including an IMSI selected using the method according to the first aspect of the present disclosure; identifying the IMSI as a temporary IMSI; Establishing a temporary bootstrap connection with a host device; The present invention is configured to perform the following steps.

[0022] According to a fifth aspect of the present disclosure, there is provided a selection management method for obtaining a temporary bootstrap connection, the method comprising: a host device including a network access element using an International Mobile Subscriber Identity (IMSI) of a restricted connection stored in the network access element to request an attachment to a network; receiving a response from the network for location information associated with the network access element; selecting an IMSI prefix from an IMSI prefix database; generating a temporary IMSI using the selected IMSI prefix; determining a set of authentication keys; and attempting to register with the network using the temporary IMSI.

[0023] Further features and advantages of the present invention will become apparent from the following description of preferred embodiments of the invention, given by way of example only, made with reference to the accompanying drawings, in which: [Brief description of the drawings]

[0024] [Figure 1] 1 is a schematic diagram illustrating a host device including a network access element, according to an example. [Diagram 2] FIG. 1 is a flow diagram illustrating a method, according to an example. [Diagram 3] FIG. 1 is a schematic diagram including a registration attempt, according to an example. [Figure 4] FIG. 1 is a flow diagram illustrating an example of a method. [Diagram 5] FIG. 1 is a schematic diagram including a registration attempt, according to an example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] The particular example described herein provides a temporary IMSI that can be assigned for the purpose of authentication and access to the limited connectivity provided by the mobile network. This allows obtaining an operational profile with full network connectivity. Alternatively, a bootstrap profile can be provided to then access the RSP platform and purchase a connectivity plan from a given provider. The limited connectivity provided by the temporary IMSI can also be used to receive a new IMSI that is outside the range of the temporary IMSI. The solution of the present invention can overcome the current limitations since it is not necessary to pre-provision the network access element with a fully functional IMSI. In this specification, this implementation is considered as an embodiment performed by a network access element included in a host device.

[0026] FIG. 1 illustrates a network access element 100 included in a host device 110. As illustrated, the network access element 100 includes at least one computer-readable storage 120. In some examples, this may be referred to as a computer-readable storage medium. However, it is understood that the at least one computer-readable storage 120 may be a physical storage medium or may be a virtualized storage. The at least one computer-readable storage 120 may include instructions that, when executed by the at least one processor 130, cause the at least one processor 130 to perform a selection management method for obtaining a temporary bootstrap connection of a host device including the network access element 100. The selection management method is described below in connection with FIG. 2.

[0027] The network access element 100 may include a UICC, an eUICC, an iUICC, or a soft SIM. In some examples, the methods described herein may be implemented by either a UICC or an eUICC. In some examples, the host device 110 may include a consumer device, or a machine or object in an IoT or M2M context. In some examples, the host device may be a mobile device, such as a smartphone or tablet computer. In other examples, the host device may be fixed, such as an appliance in a home or industrial environment.

[0028] The network access element 100 shown in FIG. 1 comprises at least one processor 130. The at least one processor 130 may be communicatively coupled to at least one computer-readable storage 120 and configured to execute instructions stored in the at least one computer-readable storage 120. The instructions stored in the at least one computer-readable storage 120, when executed by the processor 130, may cause the at least one processor 130 to perform a selection management method for selecting a particular temporary IMSI2 to be assigned to the network access element 100. In some examples, the temporary IMSI may be used for the purpose of obtaining a temporary bootstrap connection. The processor 130 may possess proactive capabilities in the sense that it is capable of interacting directly with an external element and causing the network access element 100 to send a proactive command to the network including data for the purpose of identification or authentication to the network, the processor 130 being configured to execute the selection management method as described with respect to FIG. 2.

[0029] FIG. 2 illustrates a flow diagram of a selection management method 200 for obtaining a temporary bootstrap connection of a host device 110 including a network access element 100. The method 200 may be triggered upon start-up of the host device 110 to register with a network to obtain a temporary bootstrap connection. At block 210, the method 200 includes receiving location information. The location information may be received by the host device 110 in any of a number of ways. In some examples, the location information is received using satellite communication using a global positioning system (GPS) or the like. The host device 110 may include any suitable communication device for receiving the location information. The communication device may receive the location information through WiFi, Bluetooth, infrared, or other suitable communication channel. In some cases, the location information may be obtained from the network using a restricted connection IMSI. For example, a synthetically valid IMSI may be used that is not intended to actually register the host device 110 with the network. The synthetically valid IMSI, which may be referred to as a restricted connection IMSI, may be used in the registration message. Rather than registering the host device 110 with the network, the network may identify the registration request based on the restricted connection IMSI and respond with location information. The location information is associated with the location of the network access element. If the host device does not receive a response to the location information from the network, the host device may retry registering with the network using the restricted connection IMSI.

[0030] At block 220, the method 200 includes performing a selection operation to select an International Mobile Subscriber Identifier (IMSI) for obtaining a temporary bootstrap connection. The selection operation may be configured to select one of a first plurality of IMSIs at a first location and select one of a different second plurality of IMSIs at a second location. Each of the first plurality of IMSIs includes a first predefined value for at least a first portion of each IMSI. Each of the second plurality of IMSIs includes a different second predefined value for at least a first portion of each IMSI. For example, the first portion of the IMSI may depend on the location of the network access element 100. The first portion of the IMSI may include a Mobile Country Code (MCC). The first portion of the IMSI may include a Mobile Network Code (MNC). A combination of the MCC and the MNC may be used to identify a network to be accessed based on the location of the network access element 100.

[0031] At block 230, the method 200 includes attempting to register with the network using the selected IMSI. In this manner, the host device 110 including the network access element 100 may select an IMSI that can be temporarily used to access a bootstrap connection to the network. This may prevent the network access element 110 from being pre-provisioned with either a bootstrap profile or a fully operational profile. If the network access element 100 is pre-provisioned with a functional bootstrap profile and thus an operational IMSI, the bootstrap profile may not be used. For example, some host devices 110 including the network access element 100 may be capable of connecting the host device to the network via Wi-Fi to download firmware upgrades or to purchase a data plan. If a pre-provisioned bootstrap profile is not used, the IMSI is depleted. The process of attempting to register with the network using the selected IMSI is described below with reference to FIG. 5.

[0032] Blocks 240 and 250 of the flow diagram shown in Figure 2 provide further details regarding the selection method 200. As shown in block 240, the selection operation includes a first pre-configured selection characteristic that constrains the selection to one of the first plurality of IMSIs based on location information. In this manner, an appropriate IMSI including an appropriate MCC and MNC may be selected based on at least the location of the network access element 100. In block 250, it is specified that the selection operation includes a second pre-configured selection characteristic that provides a variable selection from the first plurality of IMSIs.

[0033] In some examples, the first pre-configured selection characteristic includes performing a selection operation to select at least a first part of the selected IMSI from a database. The first part of the IMSI may include an MCC, an MNC, and one or more further digits to identify a sub-range of the IMSI range. In this context, a sub-range defined by one or more further digits may define a partner, such as a carrier renting a portion of an IMSI range owned by another carrier network. The location information may include the MCC or may be used to determine the MCC. The MCC may be used to search the database to determine the MNC and / or subsequent digits. Selecting at least the first part of the selected IMSI from the database may include selecting a first entry defined in a first entry list that corresponds to the first plurality of IMSIs. The entry in the database may be referred to as an IMSI prefix. In other examples, the selection of at least the first part may be performed using a random rotation that includes the MCC, MNC, and a configured time range as variables.

[0034] The second pre-configured selection characteristic includes performing a selection operation to select at least a second portion of the selected IMSI from a range of allowed values. In some cases, there may be certain IMSIs that are reserved for specific uses, and therefore these may not be selected. Some IMSIs may be used to provide operational services to other network access elements, and therefore may not be used to provide temporary bootstrap connectivity to the host device 110 including the network access element 100. In some cases, a range of IMSIs may be reserved for different carriers, and therefore the range of allowed values ​​used in the second pre-configured selection characteristic may include IMSIs associated with the network in which the host device is registered.

[0035] In some implementations, the selection operation includes a third pre-configured selection characteristic that causes the selection operation to select at least a third portion of the selected IMSI to indicate a temporary IMSI. In this manner, one or more digits of the IMSI may be used to indicate that the selected IMSI is a temporary IMSI. This may be useful when communicating with the network. For example, the network may identify the IMSI as a temporary IMSI and use the IMSI as an indicator to provide the host device 110 with a bootstrap profile. In some examples, the one or more digits used to indicate a temporary IMSI may be used to identify a range of IMSIs to be used as temporary IMSIs for the purposes described herein. The location of the one or more digits indicating a temporary IMSI may be in any suitable location within the IMSI. Also, the location of the one or more digits of the IMSI may define the number of allowable IMSIs that may be used as temporary IMSIs.

[0036] The selection operation of selecting at least a second portion of the selected IMSI may include selecting at least a portion of an International Mobile Equipment Identity (IMEI) associated with the host device 110. The host device may be associated with a unique IMEI that identifies the device. In this case, using at least a portion of the IMEI as the selected IMSI may reduce a risk of two different host devices using the same IMSI to simultaneously attempt to connect to the network and obtain a temporary bootstrap connection. The network access element 100 included in the host device 110 may access and select at least a portion of the IMEI associated with the host device as at least a second portion of the selected IMSI.

[0037] In some examples, the selection operation that selects at least a second part of the selected IMSI may detect the possibility that another host device may select the same IMSI. The selection operation that selects at least a second part of the IMSI may select seven digits. A calculation may be performed to evaluate the possibility of a conflict in the use of the selected IMSI with a range of temporary IMSIs. The calculation may include using a number of host devices (i.e., a number of host devices that may be deployed, deployed in a particular location, or attempting to connect to a network), a number of available IMSIs, a time of use of the IMSI, a type of product (i.e., a type of host device, or a type of mobile connectivity package), a number of existing MCCs, a number of existing MNCs, and a country. The at least a second part of the IMSI may be the rightmost digits, e.g., the rightmost seven digits of the IMSI.

[0038] In the example method 200, a selected IMSI may be used to download a bootstrap profile, and another IMSI may be used to download for continued use. Once the other IMSI is provisioned, the selected IMSI may be released so that the selected IMSI may be used by another host device to perform similar functions. The bootstrap profile may be a profile that allows the host device 110 to connect to a network for the purposes of downloading software, firmware, updates, and receiving data plans (i.e., a host device 110 with the bootstrap profile may access a network, browse and purchase data plans, and provide operational services to the host device 110). Once a data plan or operational profile is selected (either by a user of the host device 110 or by some process in the network), another IMSI may be provisioned to the host device 110 to provide these operational services. This releases the selected IMSI, allowing another host device to select that IMSI and also obtain another IMSI. In this way, the pre-provisioning of the bootstrap profile (and associated IMSI) into the host device during manufacturing can ensure that the spare available IMSIs are not depleted, as these temporary IMSIs can be used and reused by multiple host devices 110.

[0039] In other examples, the method 200 may include downloading an active profile for continued use using the selected IMSI. In some examples, the profile used by the host device 110 may be predetermined. In this case, the selected IMSI may be used to download the active profile without first providing a bootstrap connection.

[0040] Attempt to register the host device 110 in the network. This may be the case, for example, when two different host devices connect to the network using the same selected IMSI. In this case, if the attempt to register in the network using the selected IMSI fails, the method 200 may include attempting to register in another network using the selected IMSI. Alternatively, if the attempt to register in the network using the selected IMSI fails, the method may include performing a selection operation to select another IMSI to obtain a temporary bootstrap connection.

[0041] 3 illustrates generally an example of a process for attempting to register with a network when the registration attempt with the network fails. A host device 310 including a network access element 320 may make a registration attempt with the network 300 using a selected IMSI-1 (330). The attempt may proceed normally and the host device 310 may connect to the network using IMSI-1. If at the same time, or shortly thereafter, IMSI-1 is still being used and another host device 340 including a network access element 350 makes a registration attempt with the network 300 using the same IMSI-1 (360), the attempt may fail. Since each IMSI is unique to a registration between one host device and the network 300, two host devices cannot use the same IMSI-1 at the same time, but if the host device 310 stops using IMSI-1, the host device 340 may use IMSI-1. However, in this case, following the failed registration attempt, the host device 340 including the network access element 350 may perform a selection operation, select another IMSI, IMSI-2, and make a registration attempt with the network 300 using IMSI-2 (370).

[0042] The selection operation of selecting another IMSI may include selecting a different at least a first part of the IMSI. For example, if the at least a first part of the IMSI is selected from a database, selecting another IMSI may include selecting at least a first part of the other IMSI from a next sequential entry in the database. In other examples, the selection may be randomized. In some examples, at least a first part of the original IMSI, IMSI-1, may be entered into a list of portions of IMSIs that should not be used to prevent accidental reselection of the same IMSI.

[0043] Returning to FIG. 1, a network access element 100 may be provided to obtain a temporary bootstrap connection for a host device 110. The network access element 100 may include at least one processor 130 and at least one computer readable storage 120. The at least one computer readable storage 120 may include instructions for performing the selection management method described above in connection with FIG. 2. The at least one computer readable storage 120 may include instructions, when executed by the processor, that cause the processor to perform another selection operation, if a registration attempt to the network using the selected IMSI fails, to select another IMSI for obtaining a temporary bootstrap connection, and to attempt to register to the network using the selected other IMSI. Alternatively, after a registration attempt fails, the instructions may cause the at least one process to attempt to register to another network using the selected IMSI. When attempting to connect to the network, the host device may send a registration message with the IMSI to a visited public land mobile network (VPLMN), such that the message is routed to a home public land mobile network (HPLMN). Attempting to register on another network may include attempting to register on another VPLMN.

[0044] The network access element may include a storage that stores a database. The storage may be the same as the computer-readable storage that includes instructions for implementing the methods described herein, or alternatively, the storage may be a separate storage. The database may include a plurality of entries, each entry being suitable for selection as at least a first part of the selected IMSI. The database may be implemented as a linked list. The entries of the database may be grouped according to the MCC and / or MNC included in the portion of the IMSI. The first pre-configured selection characteristic may include performing a selection operation to select at least a first part of the selected IMSI from the database. For example, upon receiving the location information, a search may be performed in the database to identify an entry that includes the appropriate MCC and / or MNC. Then, at least a first part of the selected IMSI may be selected from the entries that include the appropriate MCC and / or MNC.

[0045] As explained above, the selection operation may include a third preset selection characteristic that causes the selection operation to select at least a third portion of the selected IMSI to indicate a temporary IMSI, for example, among entries in the database that include the appropriate MCC and / or MNC, one or more digits following these values ​​of the IMSI may be selected and used to identify any IMSI in this range that is used for the temporary IMSI to obtain a temporary bootstrap connection for the host device 110.

[0046] In some examples, the database may be pre-provisioned or pre-loaded onto the network access element 100 before the network access element 100 is distributed (i.e., sold to a consumer). The database may be updated and maintained while the host device is registered with the network, so that if connectivity is lost or the device is re-registered, the database may contain the latest IMSI data for selecting an IMSI. In other examples, the database may be updated via other suitable communication channels (e.g., Wi-Fi or Bluetooth).

[0047] The storage may also include a restricted connection IMSI for communicating with the network to obtain the location information described above. The restricted connection IMSI may be a specific IMSI pre-provisioned to the host device. Alternatively, there may be multiple restricted connection IMSIs used as restricted connection IMSIs for the host device to receive location information from the network when attempting to register with the network using the restricted connection IMSI. The multiple restricted connection IMSIs may be pre-provisioned to the network access element during manufacturing, sequentially or randomly.

[0048] In one example, a network node for providing a temporary bootstrap connection is provided. The network node may be configured to receive a registration request from a host device including a network access element, the registration request including an IMSI selected using the method described in the preceding paragraph. The network node may be configured to identify the IMSI as a temporary IMSI and establish a temporary bootstrap connection with the host device.

[0049] 4 illustrates a flow diagram of a more specific example of a selection management method 400, according to an example. At block 410a, the method includes requesting registration with a network using a restricted connection IMSI. As explained above, the registration attempt is configured to fraudulently generate a response from the network that includes location information. At block 410b, the method 400 includes receiving a response from the network to the location information associated with the network access element. If no response is received from the network, the host device may retry registration with the network using the restricted connection IMSI.

[0050] At block 410c, the method 400 includes selecting an IMSI prefix. The IMSI prefix may correspond to at least a first portion of the selected IMSI, as described above with respect to FIG. 2. Selecting the IMSI prefix may include searching a database stored in the network access element. Selecting the IMSI prefix may include selecting a first IMSI prefix in a first IMSI prefix list that includes IMSI prefixes appropriate for the host device based at least on a location of the host device.

[0051] At block 410d, the method 400 includes determining and generating a temporary IMSI, which may include selecting at least a second portion of the selected IMSI, as described above, and generating the temporary IMSI based on the IMSI prefix and the second portion of the IMSI, which may be variable. At block 410e, the method 400 includes activating the temporary IMSI. At block 410f, the method 400 may include determining a first set of authentication keys, which may include using the temporary IMSI and the MCC corresponding to the network to determine the authentication keys.

[0052] At block 410g, the method 400 includes attempting registration using the temporary IMSI. The VPLMN may receive the registration request and route the request to the HPLMN. At block 410h, a network node of the HPLMN may determine a second set of authentication keys. The registration attempt may then be routed to an authentication and subscription management node (ASM node). The ASM node may be a home subscriber server (HSS), a home location register (HLR), an authentication center (AuC), or other suitable network element.

[0053] At block 410i, the method 400 includes an authentication challenge to the network access element. A timer may be started to determine if the registration attempt is successful, as seen at block 410j of the method 400. At block 410k, the method 400 includes, if the host device successfully attaches to the network, moving to block 410l, where a profile (either a bootstrap profile or an operational profile) is provisioned or a new IMSI that is outside the range of the temporary IMSI is downloaded.

[0054] If the host device is unable to attach to the network either, the MCC and / or MNC of the network may add it to a prohibited public land mobile network list, as shown in block 410n, a new registration may be made with a different network, or a different IMSI prefix may be selected to activate a different temporary IMSI, as shown in block 410m.

[0055] According to another embodiment (not shown), the network access element included in the host device includes a pre-provisioned IMSI and various authentication keys, which are intended to actually register with the network in order to obtain a temporary connection for downloading a new IMSI that is outside the scope of a profile (either a bootstrap profile or an operational profile) or a temporary IMSI. The same pre-provisioned IMSI and authentication keys are preloaded simultaneously into multiple network access elements. The authentication key for performing a registration attempt with the network is selected based on the MCC, MNC, and the pre-provisioned IMSI. If the registration attempt does not receive an accepted response from the network, a retry of registration with the network may be performed with different authentication keys until an accepted response is received. The network access element implementing the method may be a UICC, an eUICC, an iUICC, or a soft SIM.

[0056] According to another embodiment (not shown), the network access element included in the host device may include multiple IMSIs with a single authentication key, which are intended to actually register with the network to obtain a temporary connection to download a new IMSI that is outside the range of a profile (either a bootstrap profile or an operational profile) or a temporary IMSI. The same pre-provisioned IMSI and the single authentication key are preloaded simultaneously into multiple network access elements. The IMSI to use to perform the registration attempt with the network may be selected based on the MCC, MNC, and a set time range. The IMSI may be selected according to a rotation pool that is continuous or according to a randomized rotation that includes the MCC, MNC, and a set time range as variables. If the registration attempt does not receive an accepted response from the network, the network access element may trigger a retry to register with that network with a different IMSI until it receives an accepted response. The network access element implementing the method may be a UICC, eUICC, iUICC, or soft SIM.

[0057] FIG. 5 illustrates, in accordance with an example, a simplified scheme of a registration attempt with an MVNO to obtain a temporary bootstrap connection. This may be for the purpose of downloading a profile (either a bootstrap profile or an operational profile) and may include downloading an IMSI that is not in the first plurality of IMSIs or the second plurality of IMSIs for the consumer device. A host device 510 is provided that includes a network access element 520. The network access element 520 comprises at least a computer readable storage 524 and at least one processor 528. Upon boot-up of the host device 510, a selection management method according to the example illustrated in FIG. 2 may be performed. Attempting to register the host device 510 with the network may include sending a registration message 530 to the VPLMN that includes the selected IMSI (e.g., a service area identifier (SAI) may be created on the VPLMN). The SAI may include a calling global title: VPLMN GT and may be routed by a signaling connection control part carrier 550 to a signaling transfer point (STP) 560 and subsequently to an ASM node 570.

[0058] Once the SAI 530 arrives at the HPLMN 545, a set of authentication keys may be calculated to match the set of authentication keys generated by the network access element 520 to authenticate the registration. The HPLMN 545 includes a network node 580 that may be configured to recognize a particular IMSI range that corresponds to a temporary IMSI that can be used to obtain a temporary bootstrap connection. The network node may recognize the selected IMSI as one such IMSI and may determine the set of authentication keys to be calculated at the HPLMN. The authentication may be determined from the IMSI and the MCC, as determined from the calling global title.

[0059] The network 545 may respond with the SAI and the network access element 520 may challenge to complete the authentication. The ASM node 570 may be populated at the location of the network access element 520.

[0060] Once the network access element 520 is registered with the network and has a temporary bootstrap profile, a profile (either the bootstrap profile or the operational profile) may be delivered to the network access element 520 included in the host device 510, for example, by OTA or other suitable means. This may include downloading IMSIs that are not in the first plurality of IMSIs or the second plurality of IMSIs.

[0061] The network access element 520 may be connected to a remote SIM provisioning platform by the above method to download a bootstrap profile or an operational profile, for example by downloading an IMSI that is not in the first plurality of IMSIs or the second plurality of IMSIs. Alternatively, the network access element 520 may be included in a host device 510 that communicates using M2M communication. In that case, the network access element 520 and the host device 510 may provision a bootstrap or operational profile by connecting to other devices. Similarly, the above method may be implemented in an IoT environment.

[0062] Example methods and apparatus described herein allow for obtaining a temporary bootstrap connection via network registration using a temporary IMSI selected at device power-up, thereby eliminating the need to pre-provision an IMSI with either a bootstrap profile or an active operational profile associated therewith, thus preventing a finite number of IMSIs from being wasted if a device user uses an alternative means to download an operational profile, e.g., over Wi-Fi.

[0063] The above described method may be applicable to a network access element, where a database is pre-provisioned in the network access element, which comprises a finite number of IMSIs that may be grouped according to MCC, MNC, which further identifies the IMSI digits, and / or a combination of these factors. The above example may also be applicable to a situation where the network access element is pre-provisioned (i.e. provided before distribution to a consumer) with a database that includes entries related to a first part of a selected IMSI, where a second part of the selected IMSI may be generated, for example, by selecting a part of the IMEI or by some selection and / or generation rules.

[0064] In some examples, a selection management method for obtaining a temporary bootstrap connection is provided that may include a host device including a network access element using an IMSI of a limited connection stored in the network access element to request attachment to a network, receiving a response from the network to location information associated with the network access element, selecting an IMSI prefix from an IMSI prefix database, generating a temporary IMSI using the selected IMSI prefix, determining a set of authentication keys, and attempting to register with the network using the temporary IMSI.

[0065] It should be appreciated that the selection management methods described herein may be implemented in a variety of operating environments, including scenarios in which the host device is roaming and environments in which the host device is connected to either an MNO or an MVNO.

[0066] The above-described embodiments should be understood as illustrative examples of the present invention. Other embodiments of the present invention are envisioned. It should be understood that any feature described in connection with any one embodiment may be used alone or in combination with other features described, and may also be used in combination with one or more features of any other embodiment or in any combination of any other embodiment. Moreover, equivalents and modifications not described above may be used without departing from the scope of the present invention as defined in the appended claims.

Claims

1. 1. A method for obtaining a temporary bootstrap connection for a host device including a network access element, the method comprising: by the host device receiving data indicative of a geographic location of the host device; performing a selection operation for selecting a temporary International Mobile Subscriber Identity (IMSI) for obtaining a temporary bootstrap connection; the selecting operation is configured to select a temporary IMSI from a first plurality of IMSIs if the received data indicates a first geographic location, and to select a temporary IMSI from a second plurality of IMSIs different from the first plurality of IMSIs if the received data indicates a different second geographic location; performing a selection operation, wherein each IMSI in the first plurality of IMSIs includes a first predefined value for at least a first portion of each respective IMSI and each IMSI in the second plurality of IMSIs includes a different second predefined value for at least the first portion of each respective IMSI; attempting to register on a network using the selected temporary IMSI; and and upon successful registration with the network, downloading another IMSI for operational services and releasing the temporary IMSI; The selection operation is selecting a corresponding plurality of IMSIs using data indicative of a geographic location of the host device, and selecting a first portion of the temporary IMSI as a default value for each of the selected plurality of IMSIs; selecting a second portion of the temporary IMSI according to a preset selection characteristic providing a parameter selection corresponding to the selected plurality of IMSIs; and selecting a third portion of the temporary IMSI corresponding to the selected plurality of IMSIs, the third portion indicating that the selected IMSI is to be used as a temporary IMSI.

2. The method of claim 1, wherein the first part, the second part and the third part of the selected temporary IMSI are selected according to an entry in a database previously provided to the host device, the entry being selected from among a plurality of database entries corresponding to the received data indicating the geographic location.

3. The method of claim 1 or 2, wherein the first portion of the selected temporary IMSI includes a Mobile Network Code (MNC).

4. The method of claim 3, wherein the second portion of the selected temporary IMSI is selected from a range of allowable values ​​corresponding to the MNC of the selected first portion.

5. A method according to any one of claims 1 to 4, wherein selecting the second portion of the selected temporary IMSI includes selecting at least a portion of an International Mobile Equipment Identity (IMEI) associated with the host device.

6. A method according to any one of claims 1 to 5, wherein selecting the second portion of the selected temporary IMSI includes detecting the possibility that another host device will select the same IMSI.

7. 7. The method of claim 1, further comprising: downloading a bootstrap profile using the selected temporary IMSI; and downloading the other IMSI using the bootstrap profile for an operational service, the other IMSI being not included in either the first plurality of IMSIs or the second plurality of IMSIs.

8. A method according to any preceding claim, comprising obtaining data indicative of the geographic location of the host device from the network using a restricted connection IMSI.

9. 9. The method of claim 1, wherein if the attempt to register on the network using the selected temporary IMSI fails, the method comprises attempting to register on another network using the selected temporary IMSI.

10. If the attempt to register on the network using the selected IMSI is unsuccessful, the method further comprises: performing a selection operation to select another IMSI for obtaining the temporary bootstrap connection; attempting to register with the network using the selected alternative IMSI; and The method according to any one of claims 1 to 8, comprising:

11. A network access element for obtaining a connection for a host device, the host device including the network access element, the network access element comprising: At least one processor; at least one computer readable storage; The at least one computer readable storage, when executed by the at least one processor, provides to the at least one processor: receiving data indicative of a geographic location of the host device; performing a selection operation for selecting a temporary International Mobile Subscriber Identity (IMSI) for obtaining a temporary bootstrap connection; the selecting operation is configured to select a temporary IMSI from a first plurality of IMSIs if the received data indicates a first geographic location, and to select a temporary IMSI from a second plurality of IMSIs different from the first plurality of IMSIs if the received data indicates a different second geographic location; performing a selection operation, wherein each of the first plurality of IMSIs includes a first predefined value for at least a first portion of each respective IMSI and each of the second plurality of IMSIs includes a different second predefined value for at least the first portion of each respective IMSI; attempting to register on a network using the selected temporary IMSI; and downloading another IMSI for operational services and releasing the temporary IMSI upon successful registration with the network; including an instruction to The selection operation is selecting a corresponding plurality of IMSIs using data indicative of a geographic location of the host device, and selecting a first portion of the temporary IMSI as a default value for each of the selected plurality of IMSIs; selecting the second portion of the temporary IMSI from among the second portions corresponding to the selected plurality of IMSIs according to preset selection characteristics providing variable selection; and selecting a third portion of the temporary IMSI corresponding to the selected plurality of IMSIs, the third portion indicating that the selected IMSI is to be used as a temporary IMSI.

12. The at least one computer readable storage, when executed by the at least one processor, causes the processor to, if the attempt to register on the network using the selected temporary IMSI is unsuccessful, performing another selection operation to select another temporary IMSI for obtaining a temporary bootstrap connection; attempting to register with the network using the selected alternate temporary IMSI; and The network access element of claim 11 , further comprising instructions to:

13. 12. The network access element of claim 11, wherein the at least one computer readable storage comprises instructions that, when executed by the at least one processor, cause the at least one processor to attempt to register on another network using the selected temporary IMSI if the attempt to register on the network using the selected temporary IMSI is unsuccessful.

14. 13. A network access element according to claim 11 or 12, comprising a storage for storing a database, the database including a plurality of entries, each entry being suitable for selection as at least a first part of the selected temporary IMSI, and the first part, the second part and the third part of the temporary IMSI being selected according to a selected entry.

15. A network access element as described in any one of claims 11 to 14, wherein the first part of the selected temporary IMSI includes a Mobile Network Code (MNC), and the second part of the selected temporary IMSI is selected from a range of allowed values ​​corresponding to the MNC of the selected first part.

16. 16. The network access element of claim 11, wherein the at least one computer readable storage comprises instructions that, when executed by the at least one processor, cause the at least one processor to download a bootstrap profile using the selected temporary IMSI and to download another IMSI for continued use using the bootstrap profile, the other IMSI not included in the first plurality of IMSIs or the second plurality of IMSIs.

17. The network access element of any one of claims 11 to 16, wherein the at least one computer readable storage includes a restricted connection IMSI for communicating with the network to obtain the data indicative of a geographic location.

18. A host device comprising a network access element according to any one of claims 11 to 17.

19. The host device of claim 18, wherein selecting the second portion of the selected temporary IMSI includes selecting at least a portion of an International Mobile Equipment Identity (IMEI) associated with the host device.

20. A network node for providing network connectivity, the network node comprising: receiving a registration request from a host device including a network access element, said registration request including a temporary IMSI selected using the method of any one of claims 1 to 10; using a third portion of the IMSI to identify the IMSI as a temporary IMSI and establish a temporary bootstrap connection to provide a bootstrap profile to the host device; and upon successful registration with the network, providing the host device with another IMSI for operational services and releasing the temporary IMSI.

Images