Encrypted flow of SIM data between regions and edge networks
A plurality of computing devices are provisioned configured to communicate on a mobile communications network operated, in part, by an edge computing network. The edge computing network is associated with a customer of a computing service provider. The edge computing network comprises computing and storage devices configured to extend computing resources of the computing service provider to the customer of the computing service provider. A selection is received of a SIM provider and a quantity of SIM profiles for enabling the plurality of computing devices to access the mobile communications network. SIM data corresponding to the quantity of SIM profiles is received. The SIM data is encrypted and received over an encrypted channel.
1. A method of provisioning a plurality of computing devices configured to communicate on a mobile communications network operated, in part, by an edge computing network associated with a customer of a computing service provider, the edge computing network comprising computing and storage devices configured to extend computing resources of the computing service provider to the customer of the computing service provider, the method comprising:
receiving, by the computing service provider, encrypted SIM data corresponding to a plurality of SIM profiles for enabling the plurality of computing devices to access the mobile communications network;
decrypting, by the computing service provider, the SIM data using a first set of decryption credentials;
re-encrypting, by the computing service provider, the SIM data using a second set of encryption credentials, wherein decryption credentials for the re-encrypted SIM data are stored at the edge computing network;
storing the re-encrypted SIM data in a data store communicatively coupled to the computing service provider to maintain a secure copy of the re-encrypted SIM data at the computing service provider; and
sending, by the computing service provider to the edge computing network, the re-encrypted SIM data, wherein the re-encrypted SIM data is operable to be decrypted by the edge computing network using the decryption credentials managed by the computing service provider, and wherein the decrypted SIM data is usable as subscription credentials for accessing the mobile communications network by the plurality of computing devices using the plurality of SIM profiles.
2. The method of claim 1 , wherein the SIM data comprises Ki and OPc keys.
3. The method of claim 1 , further comprising sending, by the computing service provider to the customer of the computing service provider, a service key in response to receiving an order for the plurality of SIM profiles.
4. The method of claim 3 , wherein the service key is usable to complete a purchase of the plurality of SIM profiles by the customer of the computing service provider.
5. The method of claim 1 , wherein the SIM data corresponding to the plurality of SIM profiles is received by the computing service provider from a SIM provider in response to validation of a transaction for a purchase of the plurality of SIM profiles by the customer of the computing service provider.
6. The method of claim 1 , wherein customer-managed keys and service-managed keys are used to re-encrypt the SIM data.
7. The method of claim 1 , further comprising implementing, by the computing service provider, an API operable to receive a selection of a SIM provider and the plurality of SIM profiles.
8. A system comprising:
a memory storing thereon instructions that when executed by a processor of the system, cause the system to perform operations comprising:
receiving encrypted SIM data corresponding to a plurality of SIM profiles for enabling a plurality of computing devices to access a mobile communications network;
decrypting the SIM data using a first set of decryption credentials;
re-encrypting the SIM data using a second set of encryption credentials, wherein decryption credentials for the re-encrypted SIM data are stored at an edge computing network associated with a customer of a computing service provider;
storing the re-encrypted SIM data in a data store communicatively coupled to the system to maintain a secure copy of the re-encrypted SIM data; and
sending, to an edge computing network associated with the customer of the computing service provider, the re-encrypted SIM data, wherein the re-encrypted SIM data are operable to be decrypted by the edge computing network using the decryption credentials, and wherein the decrypted SIM data are usable as subscription credentials for accessing the mobile communications network by the plurality of computing devices using the plurality of SIM profiles.
9. The system of claim 8 , wherein the SIM data comprises Ki and OPc keys.
10. The system of claim 8 , further comprising sending, by the computing service provider to the customer of the computing service provider, a service key in response to receiving an order for the plurality of SIM profiles.
11. The system of claim 10 , wherein the service key is usable to complete a purchase of the plurality of SIM profiles by the customer of the computing service provider.
12. The system of claim 8 , wherein the SIM data corresponding to the plurality of SIM profiles is received by the computing service provider from a SIM provider in response to validation of a transaction for a purchase of the plurality of SIM profiles by the customer of the computing service provider.
13. The system of claim 8 , wherein customer-managed keys and service-managed keys are used to re-encrypt the SIM data.
14. The system of claim 8 , further comprising implementing, by the computing service provider, an API operable to receive a selection of a SIM provider and the plurality of SIM profiles.
15. A computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by one or more processors of a computing device, cause the to perform operations comprising:
receiving encrypted SIM data corresponding to a plurality of SIM profiles for enabling a plurality of computing devices to access a mobile communications network;
decrypting the SIM data;
re-encrypting the SIM data;
storing the re-encrypted SIM data in a data store communicatively coupled to the computing device; and
sending, to an edge computing network associated with a customer of a computing service provider, the re-encrypted SIM data;
wherein the re-encrypted SIM data are usable as subscription credentials for accessing the mobile communications network by the plurality of computing devices.
16. The computer-readable storage medium of claim 15 , wherein the SIM data comprises Ki and OPc keys.
17. The computer-readable storage medium of claim 15 , further comprising sending, to the customer of a computing service provider, a service key in response to receiving an order for the plurality of SIM profiles.
18. The computer-readable storage medium of claim 17 , wherein the service key is usable to complete a purchase of the plurality of SIM profiles by the customer of the computing service provider.
19. The computer-readable storage medium of claim 15 , wherein the SIM data corresponding to the plurality of SIM profiles is received from a SIM provider in response to validation of a transaction for a purchase of the plurality of SIM profiles.
20. The computer-readable storage medium of claim 15 , further comprising implementing, by a computing service provider, an API operable to receive a selection of a SIM provider and the plurality of SIM profiles.