Hardware Identifier-Based Cellular Subscription Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The conventional IMSI-based subscription management in cellular networks faces scalability and security concerns, particularly with the rise of IoT devices, leading to potential bottlenecks and limitations in authentication and load balancing across networks.
Innovation Solution
Using unique hardware identifiers assigned to devices during manufacturing, which are associated with IMSIs by subscription management and authentication nodes, allowing for a distributed and scalable authentication process, and optionally utilizing a private blockchain for trust and billing management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IMSI-based subscription management is used, then authentication can be performed, but scalability and security concerns arise with large numbers of connected devices
Solution Approach 1:
The patent segments the centralized subscription management function into distributed network devices that can independently authenticate devices. Each network device maintains local subscriber records and can perform authentication without centralizing all authentication traffic through a single HSS/HLR node, thereby improving scalability while maintaining security.
Solution Approach 2:
The patent introduces a new dimension to authentication by using hardware identifiers (such as device serial numbers or MAC addresses) in addition to or instead of traditional IMSI-based authentication. This alternative authentication dimension allows devices to be identified and authenticated without relying solely on the conventional IMSI system, enabling better scalability.
2Ease of operation
If centralized HSS/HLR architecture is used, then subscription management can be performed, but control plane traffic increases with more connected devices
Solution Approach 1:
The patent distributes the subscription management functionality across multiple network devices rather than concentrating it in a centralized HSS/HLR. This segmentation reduces control plane traffic by allowing local authentication decisions to be made at distributed network devices, eliminating the need for all authentication requests to traverse the centralized subscription management node.
Solution Approach 2:
The patent introduces network devices as intermediaries between the UE and the centralized HSS/HLR. These intermediary network devices can cache subscriber records and perform local authentication, reducing the frequency and volume of control plane messages that need to reach the centralized subscription management infrastructure.
3Reliability
If IMSI is stored on SIM/UICC, then device authentication is possible, but devices are limited to specific network operators
Solution Approach 1:
The patent makes the hardware identifier a universal identification mechanism that can be used across multiple network operators and technologies. Instead of being bound to a specific operator's IMSI, the hardware identifier can be recognized and used for authentication by any network operator that implements the patent's approach, enabling devices to connect to different networks without being restricted to their home operator.
Solution Approach 2:
The patent inverts the traditional authentication model by using device-specific hardware identifiers (which are inherently universal) as the primary authentication mechanism, rather than using operator-assigned IMSIs (which are inherently restricted). This inversion allows devices to initiate authentication with any operator that recognizes the hardware identifier, reversing the conventional limitation where operators control device access.
4Adaptability or versatility
If hardware identifiers are used instead of IMSI, then device connection flexibility improves, but new authentication mechanisms must be implemented
Solution Approach 1:
The patent adapts existing authentication mechanisms by creating a parallel system that mirrors the conventional IMSI-based approach but uses hardware identifiers instead. The network devices maintain subscriber records in a format similar to traditional HSS/HLR databases, and the authentication flow follows familiar patterns, reducing the perceived complexity despite the new identification mechanism.
Data Source
AI summary
Methods and devices enable connecting devices to cellular networks using the devices' hardware identifiers. Subscriber records include a hardware identifier assigned when the devices are manufactured. A target hardware identifier included in an attachment request is associated with an International Mobile Subscriber Identity, IMSI, available to the cellular network if, according to subscriber records, the device is registered.


