Granted Patent B2

US 12,477,321 · App. 17/986,218 · Granted Nov 18, 2025

Inventors: Stephen P. Williams (Evergreen, CO); Stacey Lynne Osborn (Arvada, CO)

Assignee: DISH Wireless L.L.C.

H04W8/20

Abstract

Claims (55)

1 . A method comprising:

obtaining, from at least one server at one or more processing devices of a mobile device configured to support a first subscriber identity module (SIM) and a second SIM, a first profile corresponding to policies associated with usage of the mobile device to access enterprise resources, wherein the second SIM is configured in accordance with a second profile that is different from the first profile;

configuring, by the one or more processing devices, the first SIM in accordance with the first profile such that data through the second first SIM is configured to be routed in accordance with the policies when the mobile device is used to access the enterprise resources, wherein configuring the first SIM in accordance with the first profile comprises:

applying a routing policy that specifies (i) a trusted list of networks usable for accessing the enterprise resources through the first SIM, the trusted list of networks being associated with the first profile and (ii) at least one other network unusable for accessing the enterprise resources through the first SIM;

routing data through the first SIM in accordance with the policies to access at least a portion of the enterprise resources; and

routing data through the second SIM independent of the policies.

2 . The method of claim 1 , wherein:

the first profile comprises a SIM profile, and

configuring the first SIM in accordance with the first profile comprises:

connecting at least one enterprise application to the SIM profile.

3 . The method of claim 1 , wherein:

the first profile comprises at least one enterprise application;

configuring the first SIM in accordance with the first profile comprises:

launching the enterprise application on the mobile device;

receiving user credentials associated with the enterprise resources; and

configuring the first SIM using the user credentials.

4 . The method of claim 3 , wherein configuring the first SIM in accordance with the first profile comprises:

initiating a communication between the at least one enterprise application and an application programming interface (API) associated with an embedded Universal Integrated Circuit Card (EUICC); and

storing a SIM profile on the EUICC via the API.

5 . The method of claim 1 , wherein the policies associated with usage of the mobile device comprise an enterprise security policy.

6 . The method of claim 1 , wherein the routing policy pertains to routing enterprise data through a cellular network in the trusted list of networks associated with the first profile, wherein the enterprise data is routed using the first SIM.

7 . The method of claim 5 , wherein the routing policy pertains to preventing routing enterprise data through at least one WiFi network.

8 . The method of claim 5 , wherein the enterprise security policy comprises a data storage policy.

9 . The method of claim 1 , wherein the second profile is customizable by a user of the mobile device, and the first profile is not customizable by a user of the mobile device.

10 . A mobile device comprising:

memory; and

one or more processing devices communicably coupled to the memory, the one or more processing devices configured to execute machine-readable instructions for performing operations comprising:

obtaining, from at least one server at the mobile device configured to support a first subscriber identity module (SIM) and a second SIM, a first profile corresponding to policies associated with usage of the mobile device to access enterprise resources, wherein the second SIM is configured in accordance with a second profile that is different from the first profile;

configuring the first SIM in accordance with the first profile such that data through the second first SIM is configured to be routed in accordance with the policies when the mobile device is used to access the enterprise resources, wherein configuring the first SIM in accordance with the first profile comprises:

applying a routing policy that specifies (i) a trusted list of networks usable for accessing the enterprise resources through the first SIM, the trusted list of networks being associated with the first profile and (ii) at least one other network unusable for accessing the enterprise resources through the first SIM;

routing data through the first SIM in accordance with the policies to access at least a portion of the enterprise resources; and

routing data through the second SIM independent of the policies.

11 . The mobile system of claim 10 , wherein:

the first profile comprises a SIM profile, and

configuring the first SIM in accordance with the first profile comprises:

connecting at least one enterprise application to the SIM profile.

12 . The mobile device of claim 10 , wherein:

the first profile comprises at least one enterprise application;

configuring the first SIM in accordance with the first profile comprises:

launching the enterprise application on the mobile device;

receiving user credentials associated with the enterprise resources; and

configuring the first SIM using the user credentials.

13 . The mobile device of claim 10 , configuring the first SIM in accordance with the first profile comprises:

initiating a communication between the at least one enterprise application and an application programming interface (API) associated with an embedded Universal Integrated Circuit Card (EUICC); and

storing a SIM profile on the EUICC via the API.

14 . The mobile device of claim 10 , wherein the policies associated with usage of the mobile device comprise an enterprise security policy.

15 . The mobile device of claim 14 , wherein the routing policy pertains to routing enterprise data through a cellular network in the trusted list of networks associated with the first profile, wherein the enterprise data is routed using the first SIM.

16 . The mobile device of claim 14 , wherein the routing policy pertains to preventing routing enterprise data through at least one WiFi network.

17 . The mobile device of claim 14 , wherein the enterprise security policy comprises a data storage policy.

18 . A non-transitory computer storage medium of a mobile device encoded with instructions that, when executed by one or more processors of the mobile device, cause the one or more processors of the mobile device to perform operations comprising:

obtaining, from at least one server at one or more processing devices of a mobile device configured to support a first subscriber identity module (SIM) and a second SIM, a first profile corresponding to policies associated with usage of the mobile device to access enterprise resources, wherein the second SIM is configured in accordance with a second profile that is different from the first profile;

configuring the first SIM in accordance with the first profile such that data through the second first SIM is configured to be routed in accordance with the policies when the mobile device is used to access the enterprise resources, wherein configuring the first SIM in accordance with the first profile comprises:

applying a routing policy that specifies (i) a trusted list of networks usable for accessing the enterprise resources through the first SIM, the trusted list of networks being associated with the first profile and (ii) at least one other network unusable for accessing the enterprise resources through the first SIM;

routing data through the first SIM in accordance with the policies to access at least a portion of the enterprise resources; and

routing data through the second SIM independent of the policies.

Assignments (2)

Continuity (1)

References Cited (18)