SIM-Based Multiple Identity Segmentation System

Abstract

The invention relates to a network-based identity management system that enables mobile subscribers to securely and separately manage different usage scenarios over a single line, and is used in the fields of telecommunications, mobile communication systems, eSIM technologies, digital identity management, data security, enterprise mobility solutions, and user experience optimization.

Description

1 TARIFF SIM-Based Multiple Identity Segmentation System Technical Area The invention relates to telecommunications, mobile communication systems, eSIM technologies, and digital identity. management, data security, enterprise mobility solutions, and user experience optimization 5 mobile subscribers using different usage scenarios through a single line in these areas Network-based identity management that enables secure and decentralized management. It is related to the system. State of the Art In current mobile communication systems, mobile subscribers generally use a single SIM card. or receives services with a single identity via an eSIM profile. This applies to business, personal and This leads to different scenarios, such as secure usage, being grouped under the same mobile identity. is happening. In order to differentiate between different usage needs, users can have multiple The user may need to use more than one SIM card or a separate mobile line. This situation affects users 15. This creates operational complexity in terms of managing different lines. This can increase security risks. With the current technology, identity-based networking depends on the mobile subscriber's usage scenario. dynamic implementation of policies and different use cases on the same line Securely separating it is limited. Furthermore, current systems, user 20 Separating use cases based on behavior and terms of use According to the report, it does not support dynamic switching between mobile identities. Application number US20060116105A1 concerns a single mobile subscriber's different uses for business, personal, etc. using multiple identities for its purposes and determining the appropriate identity based on time, location, and request. 25 It is relevant. However, in the application, the behavior profiling engine and identity-specific behavior model are used. creation, behavior-based anomaly detection, and identity-based network / security policies Joint operation is not being implemented. 2 In conclusion, due to the negative aspects described above and the current solutions being the subject of discussion... Due to its shortcomings, an improvement is needed in the relevant technical field. It has been made. Purpose of the Invention The invention was created by drawing inspiration from existing situations and addressing the aforementioned drawbacks. 5 It aims to solve the problem. The main purpose of the invention is to create multiple independent digital identities on a single SIM / eSIM. the creation of these identities and their secure and distinct classification according to different use cases. The goal is to ensure that it is managed in a decoupled manner. The invention separates business and personal use scenarios, improving safety. 10 increasing the level and user experience according to the use case It is intended to be personalized. This invention enables multiple users to operate a single SIM / eSIM, allowing the use of more than one SIM card. reducing operational complexity arising from card or mobile line usage is intended. 15 The invention allows for pricing, security, and service based on different digital identities on the operator side. This allows policies to be managed in a more flexible way. The invention is based on a SIM-based multi-identity architecture. Each identity operates independently, and The system activates the correct identity through context awareness. The network adjusts its behavior according to the active identity. It adapts. The working principle of the invention is that multiple independent digital 20s are on a single SIM. the creation of identities and the dynamic use of these identities according to context It relies on this. Each identity operates with its own behavioral pattern and network policy. User or The system selects the identity that best suits the current situation, and the network behaves accordingly based on that identity. It adapts. Thus, the mobile line ceases to be a single identity carrier and becomes a multi-layered one. It transforms into a digital identity platform. The invention enables multiple identities at the SIM level. It is based on the principle of being defined and dynamically activated according to the context. The network changes its behavior according to the active identity. The structural and characteristic features and all the advantages of the invention are given in the figures below. This becomes clearer thanks to the detailed explanation written with references to these figures. 3 This will be understood, and therefore the evaluation should also take these forms and detailed explanations into consideration. It needs to be done by taking precautions. Figures that will help understand the invention. Figure 1 is a block diagram of the system described in the invention. Description of Part References 5 1. Multiple identity management layers 2. Identity behavior profiling engine 3. Network policy and security management unit 4. Dynamic identity selection mechanism 5. Service and tariff integration layer 10 Detailed Description of the Invention This detailed description explains the SIM-based multi-identity segmentation system that is the subject of the invention. preferred structures are solely for the purpose of better understanding the subject. It is explained. The invention enables multiple independent digital identities to be created via a single SIM or eSIM. the creation, management of these identities separately, and Dynamic selection of the appropriate identity based on the user's use case. This relates to a network-based identity management approach that provides... The system in question allows multiple independent digital identities on a single SIM or eSIM. Multiple identity management 20 enables the creation of this field and the management of these identities. layer (1) analyzes data relating to the use of each digital identity and provides identity-specific data. Identity behavior profiling engine (2), which creates a behavior model, for each digital identity Network and security policies to be implemented, identity-based quality of service, access Network policy that manages permissions, security levels, and data access policies by defining them. and the security management unit (3), by evaluating the user's current terms of use, 25 A dynamic identity selection mechanism that enables the determination of the digital identity to be used. (4), operator services and terms of use depending on the active digital identity It includes the service and tariff integration layer (5). 4 Multiple identity management layer (1), multiple independent on a single SIM or eSIM It enables the creation and management of digital identity spaces. Each digital identity can be operated in isolation from other digital identities. Each identity Different data usage, security, access, and service rules can be defined for each. This allows for a single system. Business, personal, or different security levels via physical SIM or eSIM infrastructure. The different use cases can be separated from each other. Lifecycle of digital identities created by the multi-identity management layer (1) It can also be managed. This includes the creation, activation, and deactivation of identities. This can be done by discontinuing it and updating the relevant terms of use. In this way, different Digital identities corresponding to use cases on a single SIM / eSIM infrastructure 10 It is managed through this channel. The identity behavior profiling engine (2) in the system analyzes the use of each digital identity. By analyzing the relevant data, it creates an identity-specific behavioral model. In this context, the relevant Identity usage habits, data consumption, access times, application preferences, and network. Their behaviors can be evaluated. Based on the data obtained, each digital identity can be assessed on 15 A profile is created that represents normal usage behavior. The behavior profile generated by the identity behavior profiling engine (2) is the relevant identity's behavior profile. in determining usage characteristics and appropriate actions for the usage scenario It can be used in its implementation. Furthermore, it can be used to create existing usage behavior. Abnormal behavior can be detected if it differs from the profile. 20 Thus, digital identities are determined not only by static rules, but also by the use of the relevant identity. This also allows for evaluation based on behavior. Network policy and security management unit (3) will implement the network and security policies for each digital identity. It manages security policies. This includes identity-based quality of service (QoS), access Authorizations, security levels, and data access policies can be defined and implemented. 25 It becomes possible to assign different network access and security rules to different digital identities. income. For example, specific data for a digital identity corresponding to a corporate use case. While access rules, security levels, and QoS parameters can be applied, personal Different rules apply to another digital identity corresponding to the use case 30 This is feasible. Thus, different use cases can coexist on the same SIM / eSIM. However, each use case has its own unique network and security policies. It can be managed within this scope. Dynamic identity selection mechanism (4), the user’s current terms of use By evaluating this, it enables the determination of the digital identity to be used. In this context, time, contextual information such as location, application used, and user behavior 5 It can be evaluated. Based on the evaluation results, a digital solution suitable for the current use case can be determined. The identity can be automatically activated by identifying the person in question. Dynamic identity selection mechanism (4), selected with active digital identity when necessary It enables the transition between the new digital identity and the digital identity itself. This transition is seamless. By implementing this, the user can switch between different usage scenarios in 10 There is no need to manually change the SIM card or use a separate physical SIM card. This allows for dynamic different use cases through a single SIM / eSIM. It is ensured that it is managed. The service and tariff integration layer (5) in the system is linked to the active digital identity. It enables the management of operator services and terms of use. Within this scope, 15 billing, data usage, connection speed, and the behavior of services offered are all part of active digital. This can be determined by identity. Different digital identities have different pricing and service rules. applicable. Thanks to the service and tariff integration layer (5), the same user and the same SIM / eSIM Separating the data usage of different digital identities belonging to the infrastructure and the related 20 It becomes possible to evaluate usage through the active identity. Thus, the operator identity-based billing, data usage, speed, and service management on the part of realizable. Within the scope of this invention, these elements work together to create a single SIM / eSIM. the creation of multiple independent digital identities, the use of these identities 25 analyzing their behavior, applying different network and security policies to each identity. implementation, dynamic selection of the appropriate identity according to the terms of use, and It ensures the application of service and tariff rules based on the active identity. This structure allows for use in business, personal, and various other settings with different security requirements. The scenarios can be separated from each other on the same SIM / eSIM. This allows multiple 30 scenarios to be controlled simultaneously. Reducing operational complexity and improving security associated with using physical SIM cards. 6 Increasing the level, adapting the user experience according to the use case, and more flexible management of tariff, service and network policies on the operator side It is provided.

Claims

7 REQUESTS 1. Enabling mobile subscribers to securely use different usage scenarios through a single line. SIM-based multi-identity segmentation that enables decoupled management. It is a system, and its feature is;  Multiple independent digital identity domains on a single SIM or eSIM 5 Multiple identity management enables the creation and management of these identities. layer (1),  By analyzing data related to the use of each digital identity, a unique identity is created. Identity behavior profiling engine that creates a behavior model (2),  Network and security policies to be applied to each digital identity, identity 10 service quality, access permissions, security levels and data access based on Network policy and security management unit (3), which defines and manages policies.  by evaluating the user's current terms of use, the digital platform to be used Dynamic identity selection mechanism that enables identity determination (4),  Operator services and usage depending on the active digital identity 15 It includes a service and tariff integration layer (5) which determines the conditions.

2. According to Claim 1, it is a SIM-based multi-identity segmentation system, characterized by: each digital identity created operates in isolation from other digital identities. It includes multiple identity management layers (1). 20 3. According to Claim 1, it is a SIM-based multi-identity partitioning system, and its characteristic is; relevant identity usage habits, data consumption, access times, application by evaluating their preferences and network behaviors, and based on the data obtained, each an identity that creates a profile representing the normal usage behavior of a digital identity 25 It includes a behavior profiling engine (2).

4. According to Claim 1, it is a SIM-based multi-identity partitioning system, and its characteristic is; existing if usage behavior differs according to the created profile Identity behavior profiling engine that detects abnormal behavior (2) 30 It includes.

5. According to Claim 1, it is a SIM-based multi-identity partitioning system, the feature of which is; time, contextual information regarding location, the application used, and user behavior. It includes a dynamic identity selection mechanism (4) that evaluates. 35 8 6. According to claim 1, it is a SIM-based multi-identity partitioning system, and its feature is; active A dynamic system that enables switching between the digital identity and the newly selected digital identity. It includes an identity selection mechanism (4).

7. According to Claim 1, it is a SIM-based multi-identity segmentation system, characterized by: Billing, data usage, connection speed, and the behavior of services offered are actively monitored. It includes a service and tariff integration layer (5) that identifies according to digital identity.

Images