Hardware Identifier-Based Cellular Subscription Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The conventional IMSI-based subscription management in cellular networks faces scalability and security concerns, particularly with the rise of IoT devices, leading to potential bottlenecks and limitations in authentication and load balancing across networks.

Innovation Solution

Using unique hardware identifiers assigned to devices during manufacturing, which are associated with IMSIs by subscription management and authentication nodes, allowing for a distributed and scalable authentication process, and optionally utilizing a private blockchain for trust and billing management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If IMSI-based subscription management is used, then authentication can be performed, but scalability and security concerns arise with large numbers of connected devices

Engineering Contradiction:
Improveauthentication securityVSAvoidscalability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the centralized subscription management function into distributed network devices that can independently authenticate devices. Each network device maintains local subscriber records and can perform authentication without centralizing all authentication traffic through a single HSS/HLR node, thereby improving scalability while maintaining security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a new dimension to authentication by using hardware identifiers (such as device serial numbers or MAC addresses) in addition to or instead of traditional IMSI-based authentication. This alternative authentication dimension allows devices to be identified and authenticated without relying solely on the conventional IMSI system, enabling better scalability.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Ease of operation

If centralized HSS/HLR architecture is used, then subscription management can be performed, but control plane traffic increases with more connected devices

Engineering Contradiction:
Improvesubscription managementVSAvoidcontrol plane traffic
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The patent distributes the subscription management functionality across multiple network devices rather than concentrating it in a centralized HSS/HLR. This segmentation reduces control plane traffic by allowing local authentication decisions to be made at distributed network devices, eliminating the need for all authentication requests to traverse the centralized subscription management node.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces network devices as intermediaries between the UE and the centralized HSS/HLR. These intermediary network devices can cache subscriber records and perform local authentication, reducing the frequency and volume of control plane messages that need to reach the centralized subscription management infrastructure.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If IMSI is stored on SIM/UICC, then device authentication is possible, but devices are limited to specific network operators

Engineering Contradiction:
Improvedevice authenticationVSAvoidnetwork compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent makes the hardware identifier a universal identification mechanism that can be used across multiple network operators and technologies. Instead of being bound to a specific operator's IMSI, the hardware identifier can be recognized and used for authentication by any network operator that implements the patent's approach, enabling devices to connect to different networks without being restricted to their home operator.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent inverts the traditional authentication model by using device-specific hardware identifiers (which are inherently universal) as the primary authentication mechanism, rather than using operator-assigned IMSIs (which are inherently restricted). This inversion allows devices to initiate authentication with any operator that recognizes the hardware identifier, reversing the conventional limitation where operators control device access.

Inventive Principle:
Principle #13The other way round (Inversion)

4Adaptability or versatility

If hardware identifiers are used instead of IMSI, then device connection flexibility improves, but new authentication mechanisms must be implemented

Engineering Contradiction:
Improvedevice connection flexibilityVSAvoidauthentication mechanism
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent adapts existing authentication mechanisms by creating a parallel system that mirrors the conventional IMSI-based approach but uses hardware identifiers instead. The network devices maintain subscriber records in a format similar to traditional HSS/HLR databases, and the authentication flow follows familiar patterns, reducing the perceived complexity despite the new identification mechanism.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11743733B2Method and devices for hardware identifier-based subscription management
Publication Date: 2023.08.29 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
  • US11743733B2 patent drawing
  • US11743733B2 patent drawing
  • US11743733B2 patent drawing

AI summary

Methods and devices enable connecting devices to cellular networks using the devices' hardware identifiers. Subscriber records include a hardware identifier assigned when the devices are manufactured. A target hardware identifier included in an attachment request is associated with an International Mobile Subscriber Identity, IMSI, available to the cellular network if, according to subscriber records, the device is registered.