OTA Subscription Data Provisioning via WLAN Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods fail to provide mobile stations with cellular network subscription data over-the-air before they can successfully attach to a cellular communications network, particularly in M2M applications where secure elements are embedded in devices without pre-provisioned subscription data.
Innovation Solution
Equipping mobile stations with a WLAN module to establish a communication link with an administration unit via a wireless local area network, allowing for the download of cellular network subscription data, including IMSI numbers and authentication keys, ensuring secure storage within the secure element without passing through insecure components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If secure elements are embedded in M2M devices during manufacturing without pre-provisioned subscription data, then device adaptability and ease of deployment are improved, but the ability to attach to cellular networks is lost until subscription data is provided
Solution Approach 1:
The patent applies preliminary action by pre-configuring the secure element with a unique identifier (such as a serial number or embedded SIM identifier) during manufacturing, even though the full subscription data (IMSI, authentication keys) is not yet available. This preliminary configuration enables the device to later retrieve and activate appropriate subscription data over-the-air, resolving the contradiction between adaptability and network attachment capability.
2Ease of operation
If subscription data is provided over-the-air before network attachment, then ease of operation and deployment are improved, but security risks increase due to potential exposure of sensitive data during transmission
Solution Approach 1:
The patent employs an intermediary approach by introducing a secure data provisioning server that acts as a trusted mediator between the network operator and the M2M device. This server securely stores subscription data and provides it over-the-air only after verifying the device's identity through its pre-configured unique identifier. The use of this secure intermediary eliminates the need for physical SIM card insertion while maintaining high security standards, thus resolving the contradiction between ease of deployment and security risks.
3Reliability
If physical SIM cards are used with pre-provisioned subscription data, then network attachment reliability is improved, but device complexity and manufacturing cost increase
Solution Approach 1:
The patent extracts the SIM card functionality from the physical domain and implements it in the digital domain. Instead of requiring a physical SIM card to be inserted into the device, the system extracts the essential function of subscription data storage and retrieval, implementing it through a secure element in the device that communicates with a remote provisioning server. This extraction eliminates the physical SIM card component while maintaining network attachment reliability, thus resolving the contradiction between reliability and device complexity.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to methods and devices in a mobile communications system (10) for over the air management of mobile stations. For instance, a method for providing cellular network subscription data from an administration server (42) to a mobile station (12) that includes a secure element (20), such as a SIM or a UICC, and is configured to communicate via a cellular communications network (40). The method comprises the following steps in the mobile station (12): attaching to a WLAN (30) by means of a WLAN module (26) implemented in the mobile station (12); establishing a communication link between the mobile station (12) and the administration server (42) via the WLAN (30) the mobile station (12) has attached to; and downloading cellular network subscription data from the administration server (42) via the WLAN (30) to the mobile station (12) and storing the same within the secure element (20) of the mobile station (12) such that by means of the cellular network subscription data the mobile station (12) can attach to a corresponding cellular communications network (40).