Methods and apparatus for user authentication and human intent verification in mobile devices
Methods and apparatus for user authentication and human intent verification of administrative operations for eSIMs of an eUICC included in a mobile device are disclosed. Certain administrative operations, such as import, modification, and/or export, of an eSIM and/or for an eUICCs firmware can require user authentication and/or human intent verification before execution of the administrative operations are performed or completed by the mobile device. A user of the mobile device provides information to link an external user account to an eSIM upon (or subsequent to) installation on the eUICC. User credentials, such as a user name and password, and/or information generated therefrom, can be used to authenticate the user with an external server. In response to successful user authentication, the administrative operations are performed. Human intent verification can also be performed in conjunction with user authentication to prevent malware from interfering with eSIM and/or eUICC functions of the mobile device.
1. A method for human intent verification of administrative operations for an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device, the method comprising:
detecting by a processor of the mobile device initiation of an administrative operation for an electronic Subscriber Identity Module (eSIM) of the mobile device;
determining by the processor of the mobile device whether the administrative operation for the eSIM requires human intent verification or user authentication;
when the administrative operation for the eSIM requires human intent verification or user authentication:
obtaining user credentials via a secure input/output (I/O) that is securely connected via end-to-end (E2E) security with secure hardware and/or a trusted execution environment (TEE) of the mobile device;
verifying, via the secure hardware and/or the TEE of the mobile device, human intent to perform the administrative operation for the eSIM based on the user credentials; and
in response to successful determination of human intent to perform the administrative operation, performing by the eUICC the administrative operation for the eSIM; and
when the administrative operation for the eSIM does not require human intent verification or user authentication, performing by the eUICC the administrative operation for the eSIM.
2. The method of 1 , wherein:
the eSIM comprises a provisioning eSIM or an emergency services eSIM; and
the administrative operation comprises switching to the provisioning eSIM or the emergency services eSIM and does not require human intent verification or user authentication to be performed.
3. The method of 1 , further comprising:
obtaining via the secure I/O additional user credentials to authenticate a user of the mobile device;
sending by the eUICC a message based on the additional user credentials to a server to verify user authorization to perform the administrative operation for the eSIM; and
in response to receipt of an indication of user authorization from the server and successful determination of human intent to perform the administrative operation, performing by the eUICC the administrative operation for the eSIM.
4. The method of claim 3 , wherein:
the additional user credentials are associated with a user account for a user of the mobile device, and
the additional user credentials are verified by a third party server for the user account.
5. The method of claim 4 , wherein the additional user credentials comprise a user login identity and a password for the user account.
6. The method of claim 3 , further comprising:
by the eUICC:
obtaining an authentication token based on the additional user credentials; and
generating the message including a signed payload that includes the authentication token.
7. The method of claim 3 , wherein the server comprises a level 3 (L3) server configured to manage eSIMs for one or more mobile network operators (MNOs), and the message is signed by the eUICC.
8. The method of claim 1 , wherein the secure I/O comprises a biometric sensor of the mobile device.
9. The method of claim 8 , wherein the biometric sensor connects to the secure hardware and/or the TEE using symmetric key encryption.
10. The method of claim 1 , wherein the administrative operation comprises installation, importing, modification, deletion, or exporting of the eSIM.
11. An apparatus configurable for operation in a mobile device, the apparatus comprising:
a processor; and
a memory storing instructions that when executed by the processor cause the mobile device to perform steps that include:
detecting by a processor of the mobile device initiation of an administrative operation for an electronic Subscriber Identity Module (eSIM) of the mobile device;
determining by the processor of the mobile device whether the administrative operation for the eSIM requires human intent verification or user authentication;
when the administrative operation for the eSIM requires human intent verification or user authentication:
obtaining user credentials via a secure input/output (I/O) that is securely connected via end-to-end (E2E) security with secure hardware and/or a trusted execution environment (TEE) of the mobile device;
verifying, via the secure hardware and/or the TEE of the mobile device, human intent to perform the administrative operation for the eSIM based on the user credentials; and
in response to successful determination of human intent to perform the administrative operation, performing by an embedded Universal Integrated Circuit Card (eUICC) the administrative operation for the eSIM; and
when the administrative operation for the eSIM does not require human intent verification or user authentication, performing by the eUICC the administrative operation for the eSIM.
12. The apparatus of claim 11 , wherein:
the eSIM comprises a provisioning eSIM or an emergency services eSIM; and
the administrative operation comprises switching to the provisioning eSIM or the emergency services eSIM and does not require human intent verification or user authentication to be performed.
13. The apparatus of claim 11 , wherein execution of the instructions further causes the mobile device to perform steps that include:
obtaining via the secure I/O additional user credentials to authenticate a user of the mobile device;
sending by the eUICC a message based on the additional user credentials to a server to verify user authorization to perform the administrative operation for the eSIM; and
in response to receipt of an indication of user authorization from the server and successful determination of human intent to perform the administrative operation, performing by the eUICC the administrative operation for the eSIM.
14. The apparatus of claim 13 , wherein:
the additional user credentials are associated with a user account for a user of the mobile device, and
the additional user credentials are verified by a third party server for the user account.
15. The apparatus of claim 14 , wherein the additional user credentials comprise a user login identity and a password for the user account.
16. The apparatus of claim 13 , wherein execution of the instructions further causes the mobile device to perform steps that include:
by the eUICC:
obtaining an authentication token based on the additional user credentials; and
generating the message including a signed payload that includes the authentication token.
17. The apparatus of claim 13 , wherein the server comprises a level 3 (L3) server configured to manage eSIMs for one or more mobile network operators (MNOs), and the message is signed by the eUICC.
18. The apparatus of claim 11 , wherein the secure I/O comprises a biometric sensor of the mobile device.
19. The apparatus of claim 11 , wherein the administrative operation comprises installation, importing, modification, deletion, or exporting of the eSIM.
20. A mobile device comprising:
an embedded Universal Integrated Circuit Card (eUICC);
a secure hardware element communicatively coupled to the eUICC:
a secure input/output (I/O) securely coupled to the secure hardware element;
a processor; and
a memory communicatively coupled to the processor storing instructions that when executed by the processor cause the mobile device to perform steps that include:
detecting by the processor of the mobile device initiation of an administrative operation for an electronic Subscriber Identity Module (eSIM) of the mobile device;
determining by the processor of the mobile device whether the administrative operation for the eSIM requires human intent verification or user authentication;
when the administrative operation for the eSIM requires human intent verification or user authentication:
obtaining user credentials via the secure I/O that is securely connected via end-to-end (E2E) security with the secure hardware element of the mobile device;
verifying, via the secure hardware element of the mobile device, human intent to perform the administrative operation for the eSIM based on the user credentials; and
in response to successful determination of human intent to perform the administrative operation, performing by the eUICC the administrative operation for the eSIM; and
when the administrative operation for the eSIM does not require human intent verification or user authentication, performing by the eUICC the administrative operation for the eSIM.