Secure virtual transfer of subscriber credentials
To virtually transfer subscriber identity module (“SIM”) credentials from an active device to an inactive device in order to share carrier network access, temporary identifiers and SIM credentials are transferred using secure connections and an optional public-private key pair with encryption at the transport layer. In an example, a carrier identification (“ID”) server receives a temporary identifier, such as a temporary international mobile subscriber identity (“TIMSI”), from an inactive device via a carrier network. The carrier ID server authenticates the inactive device using the TIMSI by issuing a network challenge. Next, the carrier ID server verifies with an active device associated with the inactive device that the active device distributed the TIMSI. After authenticating and verifying with both devices, the carrier ID server activates the inactive device by allowing the TIMSI to behave as virtual SIM credentials on the carrier network.
1. A carrier identification (“ID”) server device comprising:
a memory including instructions; and
a processor to execute the instructions to:
receive, from an active device, a request for a temporary identification;
generate a first temporary international mobile subscriber identity (“TIMSI”) based on receiving the request;
send the first TIMSI to the active device;
receive a second TIMSI from an inactive device via a carrier network;
authenticate the inactive device based on the second TIMSI matching the first TIMSI;
verify, based on the second TIMSI matching the first TIMSI, that the active device distributed the second TIMSI; and
activate, based on authenticating the inactive device and verifying that the active device distributed the second TIMSI, the inactive device by allowing the second TIMSI to behave as virtual subscriber identity module (“SIM”) credentials on the carrier network.
2. The carrier ID server device of claim 1 , wherein the first TIMSI is an identifier that is linked to an international mobile subscriber identity (“IMSI”) of the active device.
3. The carrier ID server device of claim 2 , wherein the processor is further to:
allocate, before receiving the second TIMSI from the inactive device, a set of TIMSIs associated with the IMSI of the active device on the carrier network,
the set of TIMSIs including the first TIMSI.
4. The carrier ID server device of claim 3 , wherein each of the set of TIMSIs comprise a fixed high set of digits corresponding to the IMSI of the active device.
5. The carrier ID server device of claim 3 , wherein each TIMSI of the set of TIMSIs have a low set of digits that are randomly generated during allocation of the set of TIMSIs.
6. The carrier ID server device of claim 1 ,
wherein the active device is paired with the inactive device over a short range network; and
wherein the first TIMSI is sent from the active device to the inactive device over the short range network based on the active device being paired with the inactive device.
7. The carrier ID server device of claim 6 , wherein the active device is paired with the inactive device based on the inactive device being detected to be in proximity of the active device.
8. The carrier ID server device of claim 2 ,
wherein the active device is paired with the inactive device; and
wherein the processor, when generating the first TIMSI, is to:
generate the first TIMSI based on the IMSI of the active device and based on the active device being paired with the inactive device.
9. The carrier ID server device of claim 1 , wherein the active device is paired with the inactive device via near field communication.
10. The carrier ID server device of claim 1 , wherein the active device is paired with the inactive device via a WiFi connection.
11. A method comprising:
receiving, by a carrier identification (“ID”) server device and from an active device, a request for a temporary identification;
generating, by the carrier ID server device, a first temporary international mobile subscriber identity (“TIMSI”) based on receiving the request;
sending, by the carrier ID server device, the first TIMSI to the active device;
receiving, by the carrier ID server device, a second TIMSI from an inactive device via a carrier network;
authenticating, by the carrier ID device, the inactive device based on the second TIMSI matching the first TIMSI;
verifying, by the carrier ID device and based on the second TIMSI matching the first TIMSI, that the active device distributed the second TIMSI; and
activating, by the carrier ID device, based on authenticating the inactive device, and based on verifying that the active device distributed the second TIMSI, the inactive device by allowing the second TIMSI to behave as virtual subscriber identity module (“SIM”) credentials on the carrier network.
12. The method of claim 11 , wherein the first TIMSI is an identifier that is linked to an international mobile subscriber identity (“IMSI”) of the active device.
13. The method of claim 12 , further comprising:
allocating, before receiving the second TIMSI via the carrier network, a set of TIMSIs associated with the IMSI of the active device on the carrier network,
the set of TIMSIs including the first TIMSI.
14. The method of claim 13 , wherein each TIMSI of the set of TIMSIs comprise a fixed high set of digits corresponding to the IMSI of the active device.
15. The method of claim 14 , wherein each TIMSI of the set of TIMSIs comprise a low set of digits that are randomly generated during allocation of the set of TIMSIs.
16. The method of claim 11 ,
wherein the active device is paired with the inactive device over a short range network; and
wherein the first TIMSI is sent from the active device to the inactive device over the short range network based on the active device being paired with the inactive device.
17. The method of claim 11 , wherein the active device is paired with the inactive device based on the inactive device being detected to be in proximity of the active device.
18. The method of claim 12 ,
wherein the active device is paired with the inactive device; and
wherein generating the first TIMSI comprises:
generating the first TIMSI based on the IMSI of the active device and based on the active device being paired with the inactive device.
19. The method of claim 11 , wherein the active device is paired with the inactive device via near field communication.
20. The method of claim 11 , wherein the active device is paired with the inactive device via a WiFi connection.