IP Library Granted Patent US 11,985,507
Granted Patent B2
US 11,985,507 · App. 18/324,837 · Granted May 14, 2024

Subscriber identification module (SIM) authentication protections

Inventors: Raymond Reeves (Oviedo, FL); Simon Youngs (Overland Park, KS)
Assignee: T-Mobile Innovations LLC
H04W12/67H04L9/3231H04W12/03H04W12/06H04W12/128H04W12/72H04L2209/80
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,985,507
App. No.
18/324,837
Granted
May 14, 2024
Kind
B2
Abstract

A method of computer authentication of a user request for a Subscriber Identity Module (SIM) card transfer by a biometric signature from a user equipment (UE) comprising assigning a risk score, by a mobile service provider, to a user account based on user activity in the user account, wherein the user activity includes a SIM card transfer authorization. The mobile service provider then sends a message requesting a biometric signature from an authentication application executing in memory on the UE. The authentication application on the UE then proceeds capturing a biometric signature, encrypting the biometric signature, and sending an encrypted biometric signature to the mobile service provider using a wireless communication protocol. The mobile service provider then compares the biometric signature to an authorized signature and modifies the risk score based on the comparison.

Claims (33)

1. A method of assigning a time weighted risk score for user authentication by a user equipment (UE), comprising:

assign a risk score to a user account based on risk behaviors ratings in the user account, wherein the risk behavior ratings are determined by a user activity log, a device history, a purchase history, and a location history of the UE, wherein the user activity includes a Subscriber Identity Module (SIM) card authorization;

modifying the risk score, by the mobile service provider, by a time weighted risk factor, wherein the time weighted risk factor has a risk factor that decreases over a time period by a rate of decrease, wherein the time period is measured in any combination of seconds, minutes, hours, and days, and wherein the rate of decrease is any combination of a linear rate, a log rhythmic rate, or an exponential rate;

writing the risk score to the user account by the mobile service provider;

receiving a request from a third party, by the mobile service provider, for the risk score on the user account;

providing the risk score, by the mobile service provider, to the third party;

comparing the risk score, by the third party, to a risk threshold; and

one of 1) cancelling user authorization to a user account of the third party, by the third party, in response to the risk score exceeding the risk threshold, or 2) authorizing, by the third party, access to the user account of the third party in response to the risk being equal to or less than the risk threshold.

2. The method of claim 1 , wherein the user authorization relates to authorizing a financial transaction.

3. The method of claim 1 , further comprises:

establishing a communication session by a third party application executing on a remote server to the mobile service provider, wherein the remote server processes financial transactions; and

receiving the risk score, by the third party application, from the user account by the mobile service provider.

4. The method of claim 1 , wherein the third party is one of a financial institution, an insurance company, or an investment company.

5. The method of claim 1 , wherein the request from the third party is by a third party application executing on the UE.

6. The method of claim 1 , wherein the request from the third party is by a third party application executing on a remote server associated with the third party, and wherein the remote server processes financial transactions.

7. The method of claim 1 , wherein the risk score is modified by the time weighted risk factor when a SIM swap is requested.

8. The method of claim 1 , wherein the time weighted risk factor causes the risk score to decrease over the time period based the risk behaviors ratings.

9. The method of claim 1 , further comprising taking action by the mobile service provider in response to the modified risk factor being above a threshold, wherein the action comprises at least one of denying a SIM swap on the second UE, reversing the SIM swap on the second UE, or locking the account of the user.

10. A system of assigning a time weighted risk score for user authentication by a user equipment (UE), comprising:

a user account server configured to:

assign a risk score to a user account based on risk behaviors ratings in the user account, wherein the risk behavior ratings are determined by a user activity log, a device history, a purchase history, and a location history of the UE, wherein the user activity includes a Subscriber Identity Module (SIM) card authorization;

modify the risk score by a time weighted risk factor, wherein the time weighted risk factor has a risk factor that decreases over a time period by a rate of decrease, wherein the time period is measured in any combination of seconds, minutes, hours, and days, and wherein the rate of decrease is any combination of a linear rate, a log rhythmic rate, or an exponential rate;

write the risk score to the user account;

receive a request from a third party for the risk score on the user account; and

provide the risk score to the third party, wherein the third-party compares the risk score to a risk threshold and one of 1) cancels user authorization to a user account of the third party in response to the risk score exceeding the risk threshold, or 2) authorizes access to the user account of the third party in response to the risk being equal to or less than the risk threshold.

11. The system of claim 10 , wherein the user authorization relates to authorizing a financial transaction.

12. The system of claim 10 , wherein a communication session is established between a third party application executing on a remote server and the user account server, wherein the remote server processes financial transactions, and wherein the risk score is received by the third party application from the user account server.

13. The system of claim 10 , wherein the third party is one of a financial institution, an insurance company, or an investment company.

14. The system of claim 10 , wherein the request from the third party is by a third party application executing on the UE.

15. The system of claim 10 , wherein the request from the third party is by a third party application executing on a remote server associated with the third party, and wherein the remote server processes financial transactions.

16. The system of claim 10 , wherein the risk score is modified by the time weighted risk factor when a SIM swap is requested.

17. The system of claim 10 , wherein the time weighted risk factor causes the risk score to decrease over the time period based the risk behaviors ratings.

18. The system of claim 10 , further comprising a database that stores the risk score.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 18, 2023
From: SPRINT COMMUNICATIONS COMPANY L.P.
To: T-MOBILE INNOVATIONS LLC
Reel/Frame 064637/0804 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 30, 2023
From: REEVES, RAYMOND; YOUNGS, SIMON
To: SPRINT COMMUNICATIONS COMPANY, L.P.
Reel/Frame 063799/0007 →
Continuity (3)
Division 17725487 · Apr 20, 2022
Division 17081813 · Oct 27, 2020
Related Publication 20230300621A1 · Sep 21, 2023
Cited By (2)
US 12,213,211 US 12,598,470