Device Authentication via UICC Identifier and Session Token

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

User devices face inconvenience and security risks when accessing services due to the need for authentication information, which can be compromised, allowing unauthorized access.

Innovation Solution

Implementing a system where user devices access content delivery services using a universal integrated circuit card identifier (UICCID) and a private key, generating a session token through a bootstrapping process with a home subscriber server (HSS)/authentication, authorization, accounting (AAA) server, allowing access without login information while maintaining security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication information (login information, password) is required for service access, then security is improved, but user convenience deteriorates

Engineering Contradiction:

Improveservice securityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary authentication by linking the user device identifier (UICCID) to the service account in advance through a bootstrapping process. This pre-established association allows the device to automatically authenticate using its unique identifier without requiring the user to manually input login credentials during each access attempt, thus improving convenience while maintaining security through the pre-configured authentication mechanism

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If authentication information is stored and transmitted, then service access is enabled, but security risks increase due to potential theft of account numbers and login credentials

Engineering Contradiction:

Improveservice accessibilityVSAvoidsecurity risks from credential theft

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system extracts and eliminates the need for traditional authentication information (login credentials, passwords) from the authentication process. Instead of requiring users to store and transmit sensitive credential data, the system uses the device's inherent unique identifier (UICCID) which is already securely stored in the device's hardware, thereby enabling service access without exposing users to the security risks of credential theft

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system introduces an intermediary authentication mechanism that uses the device identifier as a proxy for traditional credentials. The device identifier serves as a secure intermediary that proves device ownership and authorization without requiring the transmission or storage of sensitive login information, thus enabling service access while mitigating security risks associated with credential theft

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS9537659B2Authenticating a user device to access services based on a device ID

Publication Date: 2017.01.03 VERIZON PATENT & LICENSING INC

AI summary

A first device may receive a first session token from a second device; determine that the first session token is expired or invalid; provide a security input to the second device to cause the second device to generate a first hash value of the security input using a key corresponding to a key identifier (ID); receive the key ID and the first hash value from the second device; generate a second hash value using the key corresponding to the key ID; determine that the first hash value matches the second hash value; and establish a session with the second device based on determining that the first hash value matches the second hash value.