Methods and apparatuses for supplying a subscription for communication over a mobile radio network

Patent metadata

Field	Value
Publication number	US-9820151-B2
Application number	US-201415104781-A
Country	US
Kind code	B2
Filing date	Dec 19, 2014
Priority date	Dec 20, 2013
Publication date	Nov 14, 2017
Grant date	Nov 14, 2017

Abstract

A method comprises the following steps: supplying the subscription on the security element of the user's mobile end device, with the subscription being held available on a background system by a service or product provider as one subscription of a plurality of subscriptions and enabling communication over a mobile radio network; and accessing the mobile radio network by the security element by means of the subscription supplied on the security element. While the security element accessing the mobile radio network the position of the mobile end device is determined at time intervals in order to check whether the position of the mobile end device falls within a predefined range of allowed positions and, if the established position of the mobile end device does not fall within the predefined range of allowed positions, the access of the security element to the mobile radio network is interrupted.

First claim

The invention claimed is:

1. A method for supplying a subscription on a security element which is part of a user's mobile end device, being insertable or permanently installed therein, with the method comprising the following steps:
supplying the subscription on the security element of the user's mobile end device, with the subscription being held available on a background system by a service or product provider as one subscription of a plurality of subscriptions and enabling communication over a mobile radio network; and
accessing the mobile radio network by the security element by means of the subscription supplied on the security element, wherein the subscription is downloaded to the security element over a further mobile radio network over which the security element communicates using a second, different subscription already present on the security element;
wherein while the security element accesses the mobile radio network the position of the mobile end device is determined at time intervals in order to check whether the position of the mobile end device falls within a predefined range of allowed positions; and
upon determining that the established position of the mobile end device does not fall within the predefined range of allowed positions, the access of the security element to the mobile radio network is interrupted.

2. The method according to claim 1 , wherein after a predefined time period the subscription supplied on the security element is deactivated.

3. The method according to claim 1 , wherein the service or product provider holding the plurality of subscriptions available predefines the range of allowed positions for the subscription.

4. The method according to claim 1 , wherein the range of allowed positions is predefined for the plurality of the subscriptions held available by the service or product provider.

5. The method according to claim 1 , wherein the range of allowed positions is predefined by data which are deposited on the background system.

6. The method according to claim 1 , wherein the step of checking whether the position of the mobile end device falls within the predefined range of allowed positions is carried out by the mobile radio network or the background system.

7. The method according to claim 1 , wherein the subscription is supplied to the security element of the mobile end device if the user of the mobile end device utilizes a service or product provision of the service or product provider.

8. The method according to claim 1 , wherein the subscription is supplied on the security element over a WiFi network of the service or product provider or over another communication channel.

9. The method according to claim 1 , wherein the position of the mobile end device is established by means of data from a global navigation satellite system.

10. The method according to claim 1 , wherein the position of the mobile end device is determined by establishing the mobile radio cell in which the mobile end device is located.

11. A security element which is part of a mobile end device, being insertable or permanently installed therein, the security element including a microprocessor and a memory configured to perform the following:
provide a subscription on the security element of the mobile end device, with the subscription being held available on a background system by a service or product provider as one subscription of a plurality of subscriptions and enabling communication over a mobile radio network,
access the mobile radio network by the security element by means of the subscription supplied on the security element, wherein the subscription is downloaded to the security element over a further mobile radio network over which the security element communicates using a second, different subscription already present on the security element,
while the security element accesses the mobile radio network, determine the position of the mobile end device at time intervals in order to check whether the position of the mobile end device falls within a predefined range of allowed positions; and
upon determining that the established position of the mobile end device does not fall within the predefined range of allowed positions, interrupt the access of the security element to the mobile radio network.

12. A communication system having a mobile radio network, a background system and a mobile end device,
wherein a subscription is provided on a security element of the mobile end device, with the subscription being held available on the background system by a service or product provider as one subscription of a plurality of subscriptions and enabling communication over the mobile radio network,
wherein the mobile radio network is accessed by the security element by means of the subscription supplied on the security element, wherein the subscription is downloaded to the security element over a further mobile radio network over which the security element communicates using a second, different subscription already present on the security element,
wherein while the security element accesses the mobile radio network the position of the mobile end device is determined at time intervals in order to check whether the position of the mobile end device falls within a predefined range of allowed positions; and
upon determining that the established position of the mobile end device does not fall within the predefined range of allowed positions, the access of the security element to the mobile radio network is interrupted.

Assignees

• Giesecke & Devrient Gmbh
• Giesecke & Devrient Mobile Security Gmbh

Inventors

• Gerstenberger Volker
• Morawietz Andreas
• Nitsch Nils
• Schneider Olaf
• Weber Tom

Classifications

• H04W8/183

  Processing at user equipment or user record carrier · CPC title

• H04W4/025

  using location based information parameters · CPC title

• H04W48/04

  based on user or terminal location or mobility data, e.g. moving direction, speed · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/08 Primary

  Access security · CPC title