Verified Digital Identity Onboarding for Mobile Subscription Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile network operators face challenges in efficiently managing on-demand user identification and subscription provisioning due to costly and time-consuming legacy Know-Your-Customer (KYC) processes, particularly for IoT devices without USIMs, and there is a lack of digital ID-based subscription onboarding methods in existing 3GPP networks.
Innovation Solution
Implement digital-ID-based subscription onboarding procedures involving the acquisition of a verifiably secure digital identifier (DIG-ID), generation of a digital signature, and timestamp, followed by network authentication and provisioning of subscription credentials using trust service providers and blockchain technologies to enable secure and efficient user authentication and subscription management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If legacy KYC processes are used for user identification and subscription provisioning, then identity verification is performed, but the process is costly and time-consuming
Solution Approach 1:
The patent applies preliminary action by performing KYC verification and issuing digital IDs before the actual network onboarding process. Users complete identity verification in advance through a KYC system, receiving a digital ID that can be presented later during network access, thereby eliminating the need for repetitive verification and reducing onboarding time.
Solution Approach 2:
The patent uses copying by creating a digital copy of the user's identity verification results in the form of a digital ID. This digital copy contains verified identity information and can be transmitted and validated without requiring physical document verification during network onboarding, significantly reducing processing time and costs.
2Reliability
If traditional KYC processes are used for subscription provisioning, then customer identity is verified, but operational costs increase
Solution Approach 1:
The patent replaces expensive physical document verification with digital copying of identity information. Once a user's identity is verified and a digital ID is issued, the system uses this digital copy for all subsequent verification purposes, eliminating the need for repeated physical verification processes and reducing operational costs.
Solution Approach 2:
The patent substitutes manual mechanical verification processes with automated digital verification systems. The KYC system automatically verifies identities and issues digital IDs, which are then automatically validated by the network, replacing manual document checking and reducing operational expenses through automation.
3Productivity
If digital-ID-based onboarding is implemented, then on-demand network access is enabled efficiently, but system complexity increases
Solution Approach 1:
The patent introduces a digital ID as an intermediary element between the user and the network onboarding system. This digital ID acts as a mediator that contains verified identity information and enables fast on-demand network access without requiring complex real-time verification processes, thereby improving productivity while managing system complexity.
Solution Approach 2:
The patent performs all complex verification and identity establishment actions in advance during the KYC process, before the user needs network access. By completing these actions preliminarily and issuing a pre-verified digital ID, the system enables fast on-demand access without repeating complex verification procedures, thus improving productivity.
4Reliability
If legacy SIM registration obligations are used, then government-issued identity documents are verified, but the process does not support digital-ID-based onboarding
Solution Approach 1:
The patent applies parameter changes by transitioning from verifying physical identity document parameters to verifying digital ID parameters. The system accepts digital IDs that contain verified identity information in a different format (digital credentials instead of physical documents), enabling adaptability to new verification methods while maintaining reliability.
Solution Approach 2:
The patent achieves universality by creating a digital ID system that can serve multiple functions: identity verification, subscription provisioning, and network onboarding. This single digital ID replaces the need for multiple separate verification processes and supports various onboarding scenarios, including IoT devices and temporary subscriptions, thereby enhancing adaptability.
Data Source
AI summary
Apparatuses, methods, and systems are disclosed for Digital Identifier-based subscription onboarding. One apparatus includes a memory coupled to a processor, the memory storing instructions executable by the processor to control the apparatus to acquire a Digital Identifier (“DIG-ID”) comprising a verifiably secure identity, and to generate a digital signature of the DIG-ID and a timestamp using a private key. The instructions are executable by the processor to control the apparatus to send a first request to a mobile communication network and to receive a response containing an onboarding authentication success indication and a verified DIG-ID, the first request including the DIG-ID, the timestamp and the digital signature. The instructions are executable by the processor to establish a provisioning connection to the mobile communication network and to receive a subscription credential and/or a user subscription profile via the provisioning connection.