IP Library › Granted Patent US 11,337,075

Granted Patent B2

US 11,337,075 · App. 16/455,390 · Granted May 17, 2022

Providing multiple server security certificates on SIMs of electronic devices

Inventors: Phani Ramisetty (Sammamish, WA); Mathew George (Kirkland, WA); Kyeong Hun An (Sammamish, WA)

Assignee: T-Mobile USA, Inc.

H04W12/35 H04L9/006 H04L63/0823 H04L63/0853 H04W12/069

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,337,075
App. No.: 16/455,390
Granted: May 17, 2022
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Systems and methods discussed herein are directed to handling the identity and authentication of server security certificates on SIMs, and establishing secure channels with cloud servers via a wireless communication network using the security certificates and Public Key Infrastructure (PKI) libraries on SIMs. A mechanism to manage the security certificates on SIMs using an Over-the-Air (OTA) platform of the wireless communication network and certificate authority network elements is provided. Multiple cloud systems and their cloud servers are supported by storing multiple cloud certificates on SIMs and enabling features of a dynamic selection of the appropriate server certificate by the OTA platform for secure communication. Accordingly, electronic devices may be used within the wireless communication network for exchanging data with multiple cloud servers without changing codes/software devices, SIMs, etc.

Claims (80)

1. A method performed by one or more servers, the method comprising:

registering an electronic device for operation within a wireless communication network via a Subscriber Identity Module (SIM) based authentication;

accessing a SIM for the electronic device, the SIM comprising a plurality of server security certificates;

determining a first server security certificate of the plurality of server security certificates is out of date;

causing the SIM to update with a new server security certificate associated with a corresponding server;

initiating a storage of the new server security certificate on the SIM;

receiving a reply from the SIM that the attempt to store the new server security certificate on the SIM has failed;

causing, in response to receiving the reply, the SIM to remove the first server security certificate;

causing the SIM to store the new server security certificate;

configuring the SIM to use the new server security certificate of the plurality of server security certificates to communicate with the corresponding server; and

based at least in part on the one of the plurality of server security certificates, coupling the electronic device with the corresponding server via the wireless communication network.

2. The method of claim 1 , wherein causing the SIM to update the new server security certificate comprises:

receiving the new server security certificate from a network;

sending, via the wireless communication network, the new server security certificate to the electronic device; and

receiving a first indication regarding the updating of the SIM with the new server security certificate.

3. The method of claim 2 , wherein the first indication indicates failure with respect to updating the SIM with the new server security certificate, and the method further comprises:

re-sending, via the wireless communication network, the new server security certificate to the electronic device; and

receiving a second indication regarding success of updating the SIM with the new server security certificate.

4. The method of claim 1 , further comprising:

selecting another one of the plurality of server security certificates, the other one of the plurality of server security certificates allowing for secure communication with another corresponding server; and

based at least in part on the another one of the plurality of server security certificates, coupling the electronic device with the another corresponding server.

5. The method of claim 4 , wherein selecting another one of the plurality of server security certificates comprises:

sending, via the wireless communication network, an identification of the another one of the plurality of server security certificates to the electronic device; and

receiving a first indication regarding changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates.

6. The method of claim 5 , wherein the first indication indicates failure with respect to changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates, and the method further comprises:

re-sending, via the wireless communication network, the identification of the another one of the plurality of server security certificates to the electronic device; and

receiving a second indication regarding success of changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates.

7. An apparatus configured for operation within a wireless communication network, the apparatus comprising:

one or more processors; and

a non-transitory storage medium comprising instructions stored thereon, the instructions being executable by the one or more processors to:

access a Subscriber Identity Module (SIM) for the electronic device, the SIM comprising a plurality of server security certificates;

determine a first server security certificate of the plurality of server security certificates is out of date;

update the SIM to add a new server security certificate associated with a corresponding server;

initiating a storage of the new server security certificate on the SIM;

receive a reply that the attempt to store the new server security certificate on the SIM has failed;

cause, in response to receiving the reply, the SIM to remove the first server security certificate;

cause the SIM to store the new server security certificate;

configure the SIM to use the new server security certificate of the plurality of server security certificates to communicate with the corresponding server; and

based at least in part on the one of the plurality of server security certificates, couple the electronic device with the corresponding server via the wireless communication network.

8. The apparatus of claim 7 , wherein the instructions are further executable by the one or more processors to:

update the SIM with a new server security certificate.

9. The apparatus of claim 8 , wherein the instructions are further executable by the one or more processors to update the SIM with the new server security certificate by:

receiving the new server security certificate from a network;

sending, via the wireless communication network, the new server security certificate to the electronic device; and

receiving a first indication regarding the updating of the SIM with the new server security certificate.

10. The apparatus of claim 9 , wherein the first indication indicates failure with respect to updating the SIM with the new server security certificate, and wherein the instructions are further executable by the one or more processors to:

re-send, via the wireless communication network, the new server security certificate to the electronic device; and

receive a second indication regarding success of updating the SIM with the new server security certificate.

11. The apparatus of claim 7 , wherein the instructions are further executable by the one or more processors to:

update one or more of the plurality of server security certificates.

12. The apparatus of claim 7 , wherein the instructions are further executable by the one or more processors to:

select another one of the plurality of server security certificates, the another one of the plurality of server security certificates allowing for secure communication with another corresponding server; and

based at least in part on the another one of the plurality of server security certificates, couple the electronic device with the another corresponding server.

13. The apparatus of claim 12 , wherein the instructions are further executable by the one or more processors to select another one of the plurality of server security certificates by:

sending, via the wireless communication network, an identification of the another one of the plurality of server security certificates to the electronic device; and

receiving a first indication regarding changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates.

14. The apparatus of claim 13 , wherein the first indication indicates failure with respect to changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates, and wherein the instructions are further executable by the one or more processors to:

re-send, via the wireless communication network, the identification of the another one of the plurality of server security certificates to the electronic device; and

receive a second indication regarding success of changing from the one of the plurality of server security certificates to the another one of the plurality of server security certificates.

15. A non-transitory storage medium comprising instructions stored thereon, the instructions being executable by one or more processors to: