Mobile Access Switching Between Public and Private Cellular Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions struggle to seamlessly transition between public and private cellular networks, particularly in ensuring consistent security enforcement, reliable network selection, and dynamic connectivity management, especially during roaming scenarios, due to limitations in traditional SIM and ESIM technologies.

Innovation Solution

A system that intelligently switches devices between network domains based on predefined policies and contextual factors, using physical SIM cards and ESIM profiles, with centralized traffic management and cloud-based security enforcement, ensuring unified security and seamless mobility across networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If traditional SIM and ESIM technologies are used, then device connectivity is provided, but network switching capability and security enforcement consistency are insufficient

Engineering Contradiction:
Improvenetwork switching capabilityVSAvoidsecurity enforcement consistency
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a cloud-based network as an intermediary layer between the device and the cellular network. The cloud-based network receives traffic from the device, applies security policies and network selection logic, and then routes traffic to the appropriate cellular network (public or private). This intermediary enables flexible network switching while maintaining consistent security enforcement through centralized control.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the network access function by separating device connectivity from network selection and security enforcement. The device only handles basic connectivity, while network selection, security policy application, and traffic routing are segmented out to the cloud-based network. This segmentation allows independent optimization of each function and resolves the contradiction between adaptability and reliability.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If devices switch between public and private networks, then network flexibility is improved, but security enforcement becomes inconsistent

Engineering Contradiction:
Improvenetwork flexibilityVSAvoidsecurity risks during roaming
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The cloud-based network performs preliminary security checks and policy applications before traffic reaches the cellular network. Security policies are pre-configured and applied in advance, ensuring that security enforcement is consistent regardless of whether the device is connecting to public or private networks. This preliminary action prevents security issues from arising during network switching.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If centralized traffic management is implemented, then security enforcement is unified, but system complexity increases

Engineering Contradiction:
Improveunified security frameworkVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex network management and security enforcement functions from the device and places them in the cloud-based network. The device only needs basic connectivity capabilities, while the complex logic for network selection, security policy application, and traffic routing is extracted to the cloud. This extraction simplifies the device architecture while maintaining unified security enforcement.

Inventive Principle:
Principle #2Taking out (Extraction)

4Productivity

If traditional network selection methods are used, then device autonomy is maintained, but network optimization based on policies and context is limited

Engineering Contradiction:
Improvebandwidth utilizationVSAvoidnetwork selection automation
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The cloud-based network continuously monitors traffic conditions, device location, and network performance, then uses this feedback to dynamically adjust network selection and routing decisions. The system receives feedback about network availability, signal strength, and traffic patterns, and automatically optimizes the network path without requiring manual intervention. This feedback mechanism enables both automated optimization and efficient bandwidth utilization.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20250358702A1Public to Private Mobile Access
Publication Date: 2025.11.20 ZSCALER INC
  • US20250358702A1 patent drawing
  • US20250358702A1 patent drawing
  • US20250358702A1 patent drawing

AI summary

This invention provides methods and systems for seamless mobile connectivity between public and private cellular networks. The system dynamically switches user devices between networks based on location, radio signal availability, or preconfigured policies that prioritize private networks when within range. For devices with physical SIM cards, an embedded applet enables switching between operator profiles, while ESIM profiles deploy applets for selecting among multiple identities within a profile. All cellular traffic, whether on public or private networks, is routed through a cloud-based system for centralized security and policy enforcement. Network selection may be influenced by defining the private network as the Home Public Land Mobile Network (HPLMN) or scanning available networks via applet capabilities. The system supports unified subscription, connectivity, and service management via a cloud-based portal, ensuring reliability and security across diverse network environments. This approach enhances mobility, security, and flexibility for enterprise and IoT applications.