EP-4742719-A1 - SIM BASED AUTHENTICATION

EP4742719A1EP 4742719 A1EP4742719 A1EP 4742719A1EP-4742719-A1

Abstract

There is provided a mobile device for accessing a service hosted by an application server, comprising: at least one processor of a mobile device executing a code for: operating primary circuitry installed in the mobile device connected to a first cellular service provider and providing cellular data services to the mobile device, receiving a request for authentication of the mobile device from an application server, accessing a unique digital identifier stored in a secondary circuitry of the mobile device having connectivity provided by a second cellular service provider, and providing the unique digital identifier to the application server for authenticating the mobile device for accessing the service.

Inventors

BEN-DAVID, RAN

Assignees

Unibeam Ltd.

Dates

Publication Date: 20260513
Application Date: 20241211

Claims (15)

A mobile device for accessing a service hosted by an application server, comprising: at least one processor of a mobile device executing a code for: operating primary circuitry installed in the mobile device connected to a first cellular service provider and providing cellular data services to the mobile device; receiving a request for authentication of the mobile device from an application server; accessing a unique digital identifier stored in a secondary circuitry of the mobile device having connectivity provided by a second cellular service provider; and providing the unique digital identifier to the application server for authenticating the mobile device for accessing the service.
The mobile device of claim 1, wherein the unique digital identifier stored in the secondary circuitry comprises a Mobile Station International Subscriber Directory Number (MSISDN).
The mobile device of claim 1, wherein the primary circuitry is activated and selected for providing cellular services by the first cellular service provider, and the secondary circuitry is activated and not be selected for use by the mobile device for cellular services, optionally, the cellular services that are activated on the primary circuitry and not selected on the secondary circuitry include at least one of: voice call services, upload data services, download data services, and short message service (SMS) services.
The mobile device of claim 1, wherein the primary circuitry is activated for providing cellular services by the first cellular service provider, and the secondary circuitry is activated for providing cellular services by the second cellular service provider.
The mobile device of claim 1, wherein the primary circuitry comprises a subscriber identifier module (SIM) card and the secondary circuitry is configured for hosting an embedded SIM (eSIM).
The mobile device of claim 1, wherein the primary circuitry comprises a first SIM card and the secondary circuitry comprises a second SIM card.
The mobile device of claim 1, wherein the primary circuitry and secondary circuitry are separate components, installed in different locations in the mobile device.
The mobile device of claim 1, further comprising downloading code instructions including the unique digital identifier from a server, wherein the server provides different unique digital identifiers to different mobile devices via respective code instructions configured for installation on the different mobile devices.
The mobile device of claim 1, wherein the primary circuitry is used for communicating with the application server and identified by the unique digital identifier assigned to the secondary circuitry.
The mobile device of claim 1, wherein the secondary circuitry further comprises a storage component installed in the mobile device storing an applet, wherein the applet obtains device and SIM unique digital identifiers from the secondary circuitry in response to the request, optionally, wherein the applet is downloaded in association with the unique digital identifier from a server providing different unique digital identifiers to different mobile devices.
The mobile device of claim 1, wherein the unique identifier indicates that the mobile device is authenticated from cellular communication by the second cellular service provider, and the application server uses the unique identifier to validate that the mobile device is authenticated for cellular communication by a service provider comprising the second cellular service provider.
The mobile device of claim 1, further comprising code for: obtaining unique identifiers of hardware of the mobile device; and providing in association with the unique digital identifiers, at least one unique identifier of hardware to the application server for authentication of the mobile device, optionally, wherein the unique identifiers of hardware include self-generated identifiers that represent the Integrated Circuity Card Identification (ICCID) or Embedded Identity Document (EID), which may denote a SIM ID and/or Embedded Mobile Equipment Identity (EMEI) which may denote a device ID.
The mobile device of claim 1, further comprising code for: executing an applet stored in a storage component of the secondary circuitry for accessing at least one unique identifier of hardware of the mobile device, wherein the applet obtains the unique identifier of hardware to provide to the application server.
The mobile device of claim 1, further comprising code for: receiving a request from the application server for registration of the mobile device; and providing the unique digital identifiers for registration of the mobile device, wherein the application server stores the unique digital identifiers in a user record, wherein the application server authenticates the mobile device by comparing the unique digital identifiers received in response to the request for authentication, to the unique digital identifiers stored in the user record.
The mobile device of claim 1, further comprising code for: receiving the request for authentication and sending the unique digital identifiers, via the secondary circuitry over a cellular network operated by the secondary cellular service provider.

Description

BACKGROUND The present invention, in some embodiments thereof, relates to cybersecurity and authentication and, more specifically, but not exclusively, to systems and methods for authentication of a mobile device. Access to network-based services requires verification of a unique identifier in order to be performed securely. For example, logging into a bank web site may be done by the user entering a password. An online purchase may be further secured by sending a one-time password (OTP) such as a PIN number to a smartphone of the user. The user enters the OTP number as a verification. In another example, a user logs into a game server to play a game using user credentials that identify the user. SUMMARY According to a first aspect, a mobile device for accessing a service hosted by an application server, comprises: at least one processor of a mobile device executing a code for: operating primary circuitry installed in the mobile device connected to a first cellular service provider and providing cellular data services to the mobile device, receiving a request for authentication of the mobile device from an application server, accessing a unique digital identifier stored in a secondary circuitry of the mobile device having connectivity provided by a second cellular service provider, and providing the unique digital identifier to the application server for authenticating the mobile device for accessing the service. According to a second aspect, a method for using a mobile device for accessing a service hosted by an application server, comprises: at least one processor of a mobile device executing a code for: operating primary circuitry installed in the mobile device connected to a first cellular service provider and providing cellular data services to the mobile device, receiving a request for authentication of the mobile device from an application server, accessing unique digital identifiers stored in a secondary circuitry of the mobile device having connectivity provided by a second cellular service provider, and providing the unique digital identifiers to the application server for authenticating the mobile device for accessing the service. According to a third aspect, a non-transitory medium storing program instructions for using a mobile device for accessing a service hosted by an application server, comprising program instructions which when executed by at least one processor, cause the at least one processor to: operate primary circuitry installed in the mobile device connected to a first cellular service provider and providing cellular data services to the mobile device, receive a request for authentication of the mobile device from an application server, access unique digital identifiers stored in a secondary circuitry of the mobile device having connectivity provided by a second cellular service provider, and provide the unique digital identifiers to the application server for authenticating the mobile device for accessing the service. In a further implementation form of the first, second, and third aspects, the unique digital identifier stored in the secondary circuitry comprises a Mobile Station International Subscriber Directory Number (MSISDN). In a further implementation form of the first, second, and third aspects, the primary circuitry is activated and selected for providing cellular services by the first cellular service provider, and the secondary circuitry is activated and not be selected for use by the mobile device for cellular services. In a further implementation form of the first, second, and third aspects, the cellular services that are activated on the primary circuitry and not selected on the secondary circuitry include at least one of: voice call services, upload data services, download data services, and short message service (SMS) services. In a further implementation form of the first, second, and third aspects, the primary circuitry is activated for providing cellular services by the first cellular service provider, and the secondary circuitry is activated for providing cellular services by the second cellular service provider. In a further implementation form of the first, second, and third aspects, the primary circuitry comprises a subscriber identifier module (SIM) card and the secondary circuitry is configured for hosting an embedded SIM (eSIM). In a further implementation form of the first, second, and third aspects, the primary circuitry comprises a first SIM card and the secondary circuitry comprises a second SIM card. In a further implementation form of the first, second, and third aspects, the primary circuitry and secondary circuitry are separate components, installed in different locations in the mobile device. In a further implementation form of the first, second, and third aspects, further comprising downloading code instructions including the unique digital identifier from a server, wherein the server provides different unique digital identifiers to different mob