Wireless Device MNO Attachment via Authorization Token

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing mechanisms for attaching wireless devices to mobile network operators (MNOs) require initial network connectivity and storage of provisioning profiles at manufacture time, limiting flexibility and efficiency, especially for machine-to-machine (M2M) devices.

Innovation Solution

A method and system where a wireless device provides an authorization token to an Access and Mobility Management Function (AMF) node of the MNO for authentication, allowing attachment upon successful validation, eliminating the need for individual subscriptions and storage of authorization profiles.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If remote SIM provisioning mechanisms are used for M2M devices, then service providers can select mobile network operators dynamically, but the device requires initial network connectivity and storage of provisioning profiles at manufacture time

Engineering Contradiction:

Improveability to select mobile network operatorVSAvoidrequirement for initial network connectivity and profile storage

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the authorization mechanism from traditional subscription-based authentication. Instead of requiring provisioning profiles and initial network connectivity, the device uses an authorization token that is validated by the AMF node without needing pre-configured subscription data. This separates the authentication capability from the subscription management infrastructure.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The authorization token mechanism serves multiple functions: it enables initial network attachment, provides authentication credentials, and allows dynamic MNO selection without requiring separate provisioning infrastructure. This universal approach replaces multiple specialized components (provisioning profiles, initial subscriptions, remote SIM provisioning infrastructure) with a single token-based system.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If cellular telecommunications network is used for profile provisioning, then the device needs a provisioning subscription with credentials stored at manufacture time, but this restricts flexibility for dynamic operator selection

Engineering Contradiction:

Improveauthentication and authorization capabilityVSAvoidflexibility to change mobile network operator

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces dynamic operator selection capability by validating authorization tokens from multiple MNOs without requiring pre-configured subscriptions. The device can dynamically attach to different networks by presenting valid tokens, making the system adaptable rather than statically bound to a single operator through manufacture-time provisioning.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The authorization token acts as an intermediary credential that enables the device to access multiple MNO networks without direct subscription relationships. Instead of requiring established business agreements between the device and each MNO, the token serves as a mediator that validates access rights temporarily, enabling flexible operator selection.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If traditional authentication protocols are used, then the device can authenticate with the network, but the device must store provisioning profiles and requires remote SIM provisioning infrastructure

Engineering Contradiction:

Improveauthentication processVSAvoidstorage of provisioning profiles and infrastructure requirements

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The authorization token functions as a disposable, short-lived credential that replaces persistent provisioning profiles. Instead of storing long-term subscription data and requiring complex remote SIM provisioning infrastructure, the device uses temporary tokens that are validated and discarded after use, significantly reducing storage requirements and infrastructure dependencies.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent replaces the mechanical system of profile storage and remote SIM provisioning infrastructure with a token-based validation mechanism. The complex infrastructure of SM-DP+, profile management, and persistent storage is substituted with a simpler token presentation and validation process that occurs during network attachment.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12075253B2Attachment of a wireless device to a mobile network operator

Publication Date: 2024.08.27 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

There is provided mechanisms for attachment of a wireless device to an MNO. A method is performed by the wireless device. The method comprises providing an authorization token to an AMF node of the MNO in conjunction with authenticating with the AMF node. The method comprises completing attachment to the MNO upon successful validation of the authorization token by the AMF node.