IP Library Granted Patent US 9,942,762
Granted Patent B2
US 9,942,762 · App. 14/669,296 · Granted Apr 10, 2018

Provisioning credentials in wireless communications

Inventors: Miguel Griot (La Jolla, CA); Gavin Bernard Horn (La Jolla, CA); Stefano Faccin (Hayward, CA)
Assignee: QUALCOMM Incorporated
H04W12/08G06F21/44H04L63/0892H04W4/001H04W12/04H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,942,762
App. No.
14/669,296
Granted
Apr 10, 2018
Kind
B2
Abstract

Aspects described herein relate to obtaining provisioned credentials for wireless network services. It can be determined that credentials have not been configured for accessing a network. In this case, a provisioning server supported by the network for obtaining credentials is selected, and a request to establish a connection with the network is transmitted. The transmitted request can indicate the provisioning server.

Claims (64)

1. A method for obtaining provisioned credentials for wireless network services, comprising:

receiving, by a user equipment (UE) from a first network, information regarding at least one of a network service or a subscription provider associated with the first network, wherein the information identifies one or more provisioning servers supported by the first network for obtaining credentials;

determining, by the UE and based at least in part on the information received from the first network, that credentials for accessing at least one of the network service or the subscription provider have not been configured at the UE for accessing the first network, wherein the determining is based at least in part on the UE searching a data store for the credentials;

selecting, by the UE and based on the determining that credentials have not been configured at the UE for accessing the first network, a provisioning server included in the one or more provisioning servers supported by the first network for obtaining credentials; and

transmitting, by the UE, a request to offload a cellular network connection from a second network to the first network, wherein the second network is a cellular network and the request indicates the provisioning server, and wherein the first network is configured with a mobile network operator that at least one of provides access to the network service or is associated with the subscription provider.

2. The method of claim 1 , wherein transmitting the request is based at least in part on determining that the first network allows for online provisioning of credentials.

3. The method of claim 1 , wherein selecting the provisioning server is further based at least in part on determining an indication of the provisioning server stored in a configuration on the UE.

4. The method of claim 1 , wherein determining that credentials have not been configured is based at least in part on determining information regarding the one or more provisioning servers for the first network.

5. The method of claim 1 , further comprising:

establishing the connection with the provisioning server based at least in part on the request to establish the connection with the first network; and

receiving credentials from the provisioning server over one or more data bearers established over the connection with the first network.

6. The method of claim 5 , further comprising establishing an authenticated connection with the first network based at least in part on the credentials.

7. The method of claim 1 , wherein transmitting the request comprises transmitting a non-access stratum (NAS) message including at least one of an attach request or a NAS message indicating provisioning.

8. The method of claim 7 , wherein the NAS message indicates provisioning based at least in part on at least one of an access point name specified in the NAS message, an information element included in the NAS message, a provisioning server index or identifier specified in the NAS message, a provisioning server type specified in the NAS message, or a default provisioning server specified in the NAS message.

9. The method of claim 8 , wherein the access point name is based at least in part on a service provider name of one or more service providers associated with the first network.

10. The method of claim 7 , wherein the NAS message indicates provisioning based at least in part on specifying a user equipment identifier or identifier type in the NAS message.

11. The method of claim 1 , wherein the request to establish the connection includes an International Mobile Station Equipment Identity of a user equipment.

12. An apparatus for obtaining provisioned credentials for wireless network services, comprising:

a memory; and

at least one processor coupled to the memory, wherein the at least one processor is configured to:

receive, from a first network, information regarding at least one of a network service or a subscription provider associated with the first network, wherein the information identifies one or more provisioning servers supported by the first network for obtaining credentials; and

determine, based at least in part on the information received from the first network, that credentials for accessing at least one of the network service or the subscription provider have not been configured at the apparatus for accessing the first network, wherein the at least one processor is configured to determine that credentials have not been configured based at least in part on the apparatus searching a data store for the credentials;

select, based on the determining that credentials have not been configured at the apparatus for accessing the first network, a provisioning server included in the one or more provisioning servers supported by the first network for obtaining credentials, wherein the at least one processor is configured to select the provisioning server based at least in part on receiving, from the first network, an indication of the provisioning server to select; and

transmit a request to offload a cellular network connection from a second network to the first network, wherein the second network is a cellular network and the request indicates the provisioning server, and wherein the first network is configured with a mobile network operator that at least one of provides access to the network service or is associated with the subscription provider.

13. The apparatus of claim 12 , wherein the at least one processor is configured to transmit the request based at least in part on determining that the first network allows for online provisioning of credentials.

14. The apparatus of claim 12 , wherein the at least one processor is further configured to select the provisioning server based at least in part on determining an indication of the provisioning server stored in a configuration on the apparatus.

15. The apparatus of claim 12 , wherein the at least one processor is configured to determine that credentials have not been configured based at least in part on determining information regarding the one or more provisioning servers for the first network.

16. The apparatus of claim 12 , wherein the at least one processor is further configured to establish the connection with the provisioning server based at least in part on the request to establish the connection with the first network, and to receive credentials from the provisioning server over one or more data bearers established over the connection with the first network.

17. The apparatus of claim 16 , wherein the at least one processor is further configured to establish an authenticated connection with the first network based at least in part on the credentials.

18. The apparatus of claim 12 , wherein the at least one processor is configured to transmit the request as a non-access stratum (NAS) message including at least one of an attach request or a NAS message indicating provisioning.

19. The apparatus of claim 18 , wherein the NAS message indicates provisioning based at least in part on at least one of an access point name specified in the NAS message, an information element included in the NAS message, a provisioning server index or identifier specified in the NAS message, a provisioning server type specified in the NAS message, or a default provisioning server specified in the NAS message.

20. The apparatus of claim 19 , wherein the access point name is based at least in part on a service provider name of one or more service providers associated with the first network.

21. The apparatus of claim 18 , wherein the NAS message indicates provisioning based at least in part on specifying a user equipment identifier or identifier type in the NAS message.

22. The apparatus of claim 12 , wherein the request to establish the connection includes an International Mobile Station Equipment Identity of a user equipment.

23. An apparatus for obtaining provisioned credentials for wireless network services, comprising:

means for receiving, from a first network, information regarding at least one of a network service or a subscription provider associated with the first network, wherein the information identifies one or more provisioning servers supported by the first network for obtaining credentials;

means for determining, based at least in part on the information received from the first network, that credentials for accessing at least one of the network service or the subscription provider have not been configured at the apparatus for accessing the first network, wherein the means for determining determines that credentials have not been configured based at least in part on the apparatus searching a data store for the credentials;

means for selecting, based on the determining that credentials have not been configured at the apparatus for accessing the first network, a provisioning server included in the one or more provisioning servers supported by the first network for obtaining credentials, wherein the means for selecting selects the provisioning server based at least in part on receiving, from the first network, an indication of the provisioning server to select; and

means for transmitting a request to offload a cellular network connection from a second network to the first network, wherein the second network is a cellular network and the request indicates the provisioning server, and wherein the first network is configured with a mobile network operator that at least one of provides access to the network service or is associated with the subscription provider.

24. The apparatus of claim 23 , wherein the means for transmitting transmits the request based at least in part on determining that the first network allows for online provisioning of credentials.

25. The apparatus of claim 23 , wherein the means for selecting selects the provisioning server further based at least in part on determining an indication of the provisioning server stored in a configuration on the apparatus.

26. The apparatus of claim 23 , wherein the means for determining determines that credentials have not been configured based at least in part on determining information regarding the one or more provisioning servers for the first network.

27. The apparatus of claim 23 , wherein the means for transmitting further establishes the connection with the provisioning server based at least in part on the request to establish the connection with the first network, and wherein the means for selecting further receives credentials from the provisioning server over one or more data bearers established over the connection with the first network.

28. The apparatus of claim 27 , wherein the means for transmitting further establishes an authenticated connection with the first network based at least in part on the credentials.

29. The apparatus of claim 23 , wherein the means for transmitting transmits the request as a non-access stratum (NAS) message including at least one of an attach request or a NAS message indicating provisioning.

30. The apparatus of claim 29 , wherein the NAS message indicates provisioning based at least in part on at least one of an access point name specified in the NAS message, an information element included in the NAS message, a provisioning server index or identifier specified in the NAS message, a provisioning server type specified in the NAS message, or a default provisioning server specified in the NAS message.

31. The apparatus of claim 30 , wherein the access point name is based at least in part on a service provider name of one or more service providers associated with the first network.

32. The apparatus of claim 29 , wherein the NAS message indicates provisioning based at least in part on specifying a user equipment identifier or identifier type in the NAS message.

33. The apparatus of claim 23 , wherein the request to establish the connection includes an International Mobile Station Equipment Identity of a user equipment.

34. A non-transitory computer-readable medium for obtaining provisioned credentials for wireless network services, comprising:

code for receiving, by a user equipment (UE) from a first network, information regarding at least one of a network service or a subscription provider associated with the first network, wherein the information identifies one or more provisioning servers supported by the first network for obtaining credentials;

code for determining, by the UE and based at least in part on the information received from the first network, that credentials for accessing at least one of the network service or the subscription provider have not been configured at the UE for accessing the first network, wherein the code for determining determines that credentials have not been configured based at least in part on the UE searching a data store for the credentials;

code for selecting, by the UE and based on the determining that credentials have not been configured at the UE for accessing the first network, a provisioning server included in the one or more provisioning servers supported by the first network for obtaining credentials, wherein the code for selecting selects the provisioning server based at least in part on receiving, from the first network, an indication of the provisioning server to select; and

code for transmitting a request to offload a cellular network connection from a second network to the first network, wherein the second network is a cellular network and the request indicates the provisioning server, and wherein the first network is configured with a mobile network operator that at least one of provides access to the network service or is associated with the subscription provider.

35. The non-transitory computer-readable medium of claim 34 , wherein the code for transmitting transmits the request based at least in part on determining that the first network allows for online provisioning of credentials.

36. The non-transitory computer-readable medium of claim 34 , wherein the code for selecting selects the provisioning server further based at least in part on determining an indication of the provisioning server stored in a configuration on the UE.

37. The non-transitory computer-readable medium of claim 34 , wherein the code for determining determines that credentials have not been configured based at least in part on determining information regarding the one or more provisioning servers for the first network.

38. The non-transitory computer-readable medium of claim 34 , wherein the code for transmitting further establishes the connection with the provisioning server based at least in part on the request to establish the connection with the first network, and wherein the code for selecting further receives credentials from the provisioning server over one or more data bearers established over the connection with the first network.

39. The non-transitory computer-readable medium of claim 38 , wherein the code for transmitting further establishes an authenticated connection with the first network based at least in part of the credentials.

40. The non-transitory computer-readable medium of claim 34 , wherein the code for transmitting transmits the request as a non-access stratum (NAS) message including at least one of an attach request or a NAS message indicating provisioning.

41. The non-transitory computer-readable medium of claim 40 , wherein the NAS message indicates provisioning based at least in part on at least one of an access point name specified in the NAS message, an information element included in the NAS message, a provisioning server index or identifier specified in the NAS message, a provisioning server type specified in the NAS message, or a default provisioning server specified in the NAS message.

42. The non-transitory computer-readable medium of claim 41 , wherein the access point name is based at least in part on a service provider name of one or more service providers associated with the first network.

43. The non-transitory computer-readable medium of claim 40 , wherein the NAS message indicates provisioning based at least in part on specifying a user equipment identifier or identifier type in the NAS message.

44. The non-transitory computer-readable medium of claim 34 , wherein the request to establish the connection includes an International Mobile Station Equipment Identity of a user equipment.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 27, 2015
From: GRIOT, MIGUEL; HORN, GAVIN BERNARD; FACCIN, STEFANO
To: QUALCOMM INCORPORATED
Reel/Frame 035719/0908 →
Continuity (2)
Provisional Application 61972034 · Mar 28, 2014
Related Publication 20150281966A1 · Oct 1, 2015