Identification Unit Remote Provisioning via Tunnel

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless communication devices with limited access to remote provisioning servers, such as those operating outside their home network or within virtual private networks, face challenges in accessing remote provisioning services due to access limitations, particularly when they lack packet-switched connections or TCP/IP capabilities.

Innovation Solution

A method that enables wireless communication devices to download subscription information by using basic packet-based communication protocols to establish a connection tunnel through a cellular network, allowing the identification unit to submit requests to a remote provisioning server, even with limited access, by employing advanced packet-based communication protocols and cryptographic coding.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If wireless communication devices use basic packet-based communication protocol means, then device complexity and cost are reduced, but the ability to access remote provisioning servers is limited

Engineering Contradiction:
Improvedevice complexityVSAvoidaccess capability to remote provisioning server
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The identification unit acts as an intermediary between the wireless communication device and the remote provisioning server. It contains advanced packet-based communication protocol means that enable the device to access the server despite the device's limited capabilities. The identification unit translates and forwards requests using appropriate protocols, bridging the gap between simple devices and complex server requirements.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If wireless communication devices operate with limited access modes, then security and network control are improved, but remote provisioning capability is reduced

Engineering Contradiction:
Improvenetwork securityVSAvoidremote provisioning capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system separates communication capabilities into two segments: the wireless communication device uses basic protocols for normal operation under security constraints, while the identification unit contains advanced protocol means for remote provisioning. This segmentation allows the device to operate securely with limited access while still enabling provisioning through the more capable identification unit.

Inventive Principle:
Principle #1Segmentation

3Device complexity

If wireless communication devices lack TCP/IP capabilities, then device cost and complexity are reduced, but ability to perform remote provisioning is lost

Engineering Contradiction:
Improvedevice complexityVSAvoidremote provisioning capability
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The identification unit serves multiple functions: it acts as an authentication credential holder, a communication protocol adapter, and a remote provisioning client. By embedding advanced packet-based communication protocol means in the identification unit, the system enables TCP/IP-based remote provisioning without requiring the wireless communication device itself to have these capabilities, making the identification unit a multi-functional component that bridges capability gaps.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3448067B1Method for downloading a subscription to an identification unit
Publication Date: 2022.06.01 THALES DIS AIS DEUT GMBH
  • EP3448067B1 patent drawingFigure 1
  • EP3448067B1 patent drawingFigure 2
  • EP3448067B1 patent drawingFigure 3

AI summary

Present invention relates to a method for downloading subscription information to an identification unit (1) connected to a wireless communication device (2) operating within a cellular network (3), said cellular network (3) comprising at least one packet gateway node (4), at least one remote provisioning server (5) being connected to the packet gateway node (4), the remote provisioning server (5) comprising a provisioning database (10), wherein the wireless communication device (2) further comprises basic packet based communication protocol means, the wireless communication device (2) operating in a mode with limited access to the remote provisioning server (5) within the cellular network (3), and said identification unit (1) comprises a controller comprising advanced packet based communication protocol means by using said basic packet based communication protocol means provided by the wireless communication device (2),the method comprising the steps: - submitting a request from the identification unit (1) to the cellular network (3), submitting said request by means of said advanced packet based communication protocol means, - upon reception of a response message from the cellular network creating based on received data relative to subscription information an identity record and storing said created identity record in memory means (6) of the identification unit (1).