Multi-App Authentication for Roaming Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current 3GPP networks are limited in their ability to support multiple authentication applications, leading to restricted access to public land mobile networks (PLMNs) and increased roaming charges due to the use of single shared secrets and algorithms in USIMs, which do not accommodate diverse network technologies and roaming agreements.

Innovation Solution

Implementing systems and methods that enable user equipment (UE) to execute multiple authentication applications, allowing for the selection of specific authentication applications based on application identifiers, stored in memory or SIMs, to generate authentication responses using various algorithms and secrets, thereby accommodating different PLMNs and roaming scenarios.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a single shared secret and authentication algorithm are used in USIM, then the system maintains simplicity and compatibility with legacy networks, but the ability to access multiple PLMNs and reduce roaming charges is limited

Engineering Contradiction:

Improveaccess to multiple PLMNsVSAvoidauthentication application structure

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication functionality is segmented into separate authentication applications (e.g., USIM app, eSIM app, temporary auth app) that can be independently stored and executed. Each application contains its own authentication credentials and algorithms, allowing the device to select the appropriate application for each PLMN without requiring a single complex authentication module.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The authentication system is designed to support multiple authentication applications within the same device, enabling a single device to function across multiple PLMNs with different authentication requirements. The system can universally handle different authentication types (USIM-based, eSIM-based, temporary) through a unified authentication framework.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If multiple authentication applications are implemented in UE, then access to diverse PLMNs and roaming scenarios is improved, but the complexity of authentication management increases

Engineering Contradiction:

Improveroaming scenario accommodationVSAvoidauthentication selection

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system automatically selects and executes the appropriate authentication application based on the target PLMN and roaming scenario without requiring manual user intervention. The authentication management system autonomously determines which authentication credentials to use, reducing operational complexity for the user while maintaining versatility.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The authentication system dynamically selects which authentication application to execute based on real-time conditions such as the target PLMN identity, roaming agreements, and available credentials. This dynamic selection mechanism adapts to different scenarios automatically, maintaining ease of operation while supporting diverse roaming scenarios.

Inventive Principle:

Principle #15Dynamics

3Productivity

If temporary authentication applications are used for limited access, then roaming charges are reduced and network access control is improved, but the system complexity for managing temporary and permanent apps increases

Engineering Contradiction:

Improveroaming efficiencyVSAvoidauthentication application management

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

Temporary authentication applications can be discarded after use or when their validity period expires, and recovered or renewed when needed. This allows the system to manage temporary and permanent authentication applications separately, with temporary apps being disposed of after serving their purpose, thereby reducing long-term storage requirements and simplifying management.

Inventive Principle:

Principle #34Discarding and recovering

Solution Approach 2:

Temporary authentication applications are designed as disposable or short-lived credentials that can be quickly provisioned and discarded. These temporary apps serve specific roaming scenarios or time-limited access requirements without requiring permanent storage or long-term management, improving roaming efficiency while keeping management complexity manageable through automated lifecycle control.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentEP2675203B1Enabling multiple authentication applications

Publication Date: 2019.11.27 BLACKBERRY LTD

Figure 1
Figure 2
Figure 3

AI summary

In some implementations, a method includes receiving, by user equipment (UE), an authentication request from a public land mobile network (PLMN). The request identifies an authentication application. The authentication application is executed to determine an authentication response based on the request. The authentication response is transmitted to the PLMN.