公开(公告)号：US20160337780A1

公开(公告)日：2016-11-17

申请号：US15217796

申请日：2016-07-22

Applicant: Apple Inc.

Inventor： Li LI ,  Arun G. MATHIAS ,  Ben-Heng JUANG

IPC: H04W4/00 ,  H04W12/04 ,  H04W8/20

CPC classification number: H04W4/001 ,  H04W4/50 ,  H04W8/20 ,  H04W12/04

Abstract: Provisioning an embedded subscriber identity module (eSIM) in a user equipment (UE) device with personalized subscriber information. A request may be transmitted for personalized subscriber information. The personalized subscriber information may be received. The personalized subscriber information may be installed in an eSIM in the UE device.

Abstract translation: 在具有个性化订户信息的用户设备（UE）设备中提供嵌入式用户识别模块（eSIM）。 可以发送用于个性化订户信息的请求。 可以接收个性化订户信息。 个性化用户信息可以安装在UE设备中的eSIM中。

公开(公告)号：US20160330175A1

公开(公告)日：2016-11-10

申请号：US15146771

申请日：2016-05-04

Applicant: Apple Inc.

Inventor： Li LI ,  Arun G. MATHIAS

IPC: H04L29/06 ,  G06F9/445

CPC classification number: G06F8/65 ,  H04L63/0853 ,  H04L63/20

Abstract: Activities involving a secure element (SE) in a mobile device include a background operation. When the SE initiates the background operation, it informs the mobile device of an estimated duration. The mobile device thus recognizes that the SE is not in a stuck state, and maintains a clock signal and a power flow to the SE. Firmware updates to the SE include erasing a non-volatile (NV) memory in the SE in parallel with firmware or software updates to other processor systems in the mobile device. Needed data, for example calibration data or cryptographic key data, is preserved by storing data from some processor systems in one or more supplementary security domains (SSDs) in the SE. When a given processor system completes a firmware update, the needed data is restored to the processor system from the SSD.

Abstract translation: 在移动设备中涉及安全元件（SE）的活动包括背景操作。 当SE启动后台操作时，它通知移动设备估计的持续时间。 因此，移动设备识别出SE不处于停滞状态，并且维持时钟信号和功率流到SE。 SE的固件更新包括在移动设备中与固件或软件更新并行地擦除SE中的非易失性（NV）存储器到其他处理器系统。 通过将来自一些处理器系统的数据存储在SE中的一个或多个补充安全域（SSD）中来保存需要的数据，例如校准数据或加密密钥数据。 当给定的处理器系统完成固件更新时，所需的数据从SSD恢复到处理器系统。

公开(公告)号：US20150312698A1

公开(公告)日：2015-10-29

申请号：US14629386

申请日：2015-02-23

Applicant: Apple Inc.

Inventor： Stephan V. SCHELL ,  Arun G. MATHIAS ,  Jerrold Von HAUCK ,  David T. HAGGERTY ,  Kevin McLAUGHLIN ,  Ben-Heng JUANG ,  Li LI

IPC: H04W4/00 ,  H04W12/04 ,  H04W12/06 ,  H04L29/06

CPC classification number: H04W12/06 ,  G06F21/45 ,  G06F21/57 ,  H04L63/08 ,  H04L63/0853 ,  H04L63/123 ,  H04L63/20 ,  H04L67/34 ,  H04W4/50 ,  H04W4/60 ,  H04W8/205 ,  H04W12/04 ,  H04W12/08

Abstract: Methods and apparatus enabling programming of electronic identification information of a wireless apparatus. In one embodiment, a previously purchased or deployed wireless apparatus is activated by a cellular network. The wireless apparatus connects to the cellular network using an access module to download operating system components and/or access control client components. The described methods and apparatus enable updates, additions and replacement of various components including Electronic Subscriber Identity Module (eSIM) data, OS components. One exemplary implementation of the invention utilizes a trusted key exchange between the device and the cellular network to maintain security.

Abstract translation: 能够对无线装置的电子识别信息进行编程的方法和装置。 在一个实施例中，先前购买或部署的无线设备由蜂窝网络激活。 无线设备使用访问模块连接到蜂窝网络，以下载操作系统组件和/或访问控制客户端组件。 所描述的方法和装置能够更新，添加和替换各种组件，包括电子订户身份模块（eSIM）数据，OS组件。 本发明的一个示例性实施方式利用设备和蜂窝网络之间的可信密钥交换来维护安全性。

公开(公告)号：US20250080971A1

公开(公告)日：2025-03-06

申请号：US18824563

申请日：2024-09-04

Applicant: Apple Inc.

Inventor： Raj S CHAUGULE ,  Hyewon LEE ,  Jean-Marc PADOVA ,  Li LI ,  Rohan C MALTHANKAR ,  Sherman X JIN ,  Suraj GUPTA ,  Xiangying YANG ,  Zexing SHI

IPC: H04W8/20 ,  H04L9/32

Abstract: An apparatus configured to engage in an embedded subscriber identity module (eSIM) profile transfer process to transfer an eSIM profile from a source device executing a first operating system (OS) that implements a first protocol stack related to eSIM profile transfers to a target device executing a second OS that implements a second protocol stack related to eSIM profile transfers, wherein the first protocol stack and the second protocol stack are different, process, based on signaling received from an entitlement server, a token for transferring the eSIM profile, generate, for transmission to the target device, a message comprising the token and establish a secure tunnel via a wireless communication connection with the target device.

公开(公告)号：US20250048086A1

公开(公告)日：2025-02-06

申请号：US18924311

申请日：2024-10-23

Applicant: Apple Inc.

Inventor： Li LI ,  Jean-Marc PADOVA ,  Najeeb M. ABDULRAHIMAN

IPC: H04W8/26 ,  H04W8/18 ,  H04W12/03 ,  H04W12/0431 ,  H04W12/06

Abstract: This application describes a phased approach to provision eSIM profiles to a wireless device. Credentials are preloaded to an eUICC during manufacture of the eUICC and used subsequently to load eSIM profiles to the eUICC without requiring an active, real-time connection to an MNO provisioning server. Multiple bound profile packages (BPPs) can be pre-generated and encrypted by MNO provisioning servers for an eUICC and transferred to a BPP aggregator server before assembly of the eUICC in a respective wireless device. A local provisioning server in a manufacturing facility mutually authenticates and connects to the BPP aggregator server to download and store one or more of the encrypted BPPs for later installation on the eUICC. The local provisioning server subsequently mutually authenticates and connects to the eUICC to load at least one of the one or more pre-generated, encrypted BPPs to the eUICC during assembly and/or testing of the wireless device.

公开(公告)号：US20240406709A1

公开(公告)日：2024-12-05

申请号：US18680017

申请日：2024-05-31

Applicant: Apple Inc.

Inventor： Raj S. CHAUGULE ,  Li LI ,  Rohan C. MALTHANKAR ,  Sherman X. JIN ,  Suraj GUPTA

IPC: H04W8/18 ,  H04W8/20 ,  H04W12/06

Abstract: An apparatus or method for storing records for a plurality of embedded subscriber identity module (eSIM) profiles, wherein a record for each eSIM profile comprises a state of the eSIM profile, receiving, from a first user equipment (UE), a message indicating a first eSIM profile has been deleted from the first UE, changing the state of the first eSIM profile from installed to available, receiving a message requesting the first eSIM profile be allocated to a second UE, changing the state of the first eSIM profile to a state allowing the eSIM profile to be downloaded to the second UE and downloading the first eSIM profile to the second UE.

公开(公告)号：US20240276203A1

公开(公告)日：2024-08-15

申请号：US18166977

申请日：2023-02-09

Applicant: Apple Inc.

Inventor： Viswanath NAGARAJAN ,  Jean-Marc PADOVA ,  Li LI

IPC: H04W8/20 ,  H04W48/16 ,  H04W60/00

CPC classification number: H04W8/20 ,  H04W48/16 ,  H04W60/00 ,  H04W84/042

Abstract: This application sets forth techniques for dynamically managing a shared provisioning electronic subscriber identity module (eSIM) for a wireless device. A shared (non-unique) provisioning eSIM is installed in the wireless device to provide limited functionality connectivity to services, such as for device activation and user eSIM provisioning. The shared provisioning eSIM includes records of IMSI values organized into groups of IMSI pools and priorities for selecting IMSI values for configuring the shared provisioning eSIM. An on-device shared provisioning SIM/eSIM controller resident on a cellular baseband processor of the wireless device selects and configures the shared provisioning eSIM with IMSI values based on the priorities and on results from scanning for available public land mobile networks (PLMNs). The shared provisioning eSIM can be re-configured with different IMSI values selected from different IMSI pools until successful registration using the configured provisioning eSIM occurs or a maximum number or retries occurs.

公开(公告)号：US20230413169A1

公开(公告)日：2023-12-21

申请号：US18337591

申请日：2023-06-20

Applicant: Apple Inc.

Inventor： Raj S CHAUGULE ,  Ajoy K. SINGH ,  Henri S. BERGER ,  Li LI ,  Nai Tao CUI

IPC: H04W48/18 ,  H04W8/20

CPC classification number: H04W48/18 ,  H04W8/20

Abstract: A user equipment (UE) is configured to determine that a private enterprise deployed cellular network is available, determine that a Wi-Fi network is available at a same time as the private enterprise deployed cellular network and prioritize connection to the private enterprise deployed cellular network over the Wi-Fi network based on one or more conditions.

公开(公告)号：US20230081421A1

公开(公告)日：2023-03-16

申请号：US17932668

申请日：2022-09-15

Applicant: Apple Inc.

Inventor： Sherman X. JIN ,  Rafael L. RIVERA-BARRETO ,  Rohan C. MALTHANKAR ,  Clive E. RODGERS ,  Raj S. CHAUGULE ,  Li LI

IPC: H04W8/20

Abstract: The described embodiments set forth techniques for transferring an electronic subscriber identity module (eSIM) with the same integrated circuit card identifier (ICCID) value from a source mobile wireless device to a target mobile wireless device directly with a mobile network operator (MNO) provisioning server. The target mobile wireless device downloads the eSIM from the MNO provisioning server after deletion of the eSIM on the source mobile wireless device and reassignment of the eSIM with the same ICCID value to the target mobile wireless device.

公开(公告)号：US20230075591A1

公开(公告)日：2023-03-09

申请号：US18049271

申请日：2022-10-24

Applicant: Apple Inc.

Inventor： Sherman X. JIN ,  Raj S. CHAUGULE ,  Anish Kumar GOYAL ,  Li LI ,  Rafael L. RIVERA-BARRETO ,  Samy TOUATI ,  Rohan C. MALTHANKAR

IPC: H04W12/43 ,  H04W76/14 ,  H04L9/40 ,  H04W8/20 ,  H04W12/42 ,  H04W12/50 ,  H04W12/069

Abstract: Embodiments described herein relate to transfer of credentials between two mobile wireless devices that are within proximity of each other, via a secure local connection, or via a network-based cloud service, where the two mobile wireless devices are not in proximity to each other. Transfer of credentials can include communication between a source device, a target device, and/or one more network-based servers, which can include mobile network operator (MNO) managed servers, such as an entitlement server, a web-sheet server, an authentication server, a provisioning server, a subscription management data preparation (SM-DP+ ) server, a home subscriber server (HSS), and/or an authentication server, as well as third-party managed servers, such as a cloud service server and/or an identification services server. Authentication can be based at least in part on one or more tokens and/or a trust flag obtained by the source device and provided to the target device.