Abstract: A method for managing a dual subscriber identity module (SIM) device is performed by an entitlement server. The method comprises receiving and storing a status of a SIM indicating that the SIM is off from a mobile communication device comprising at least two SIMs. The method also comprises receiving a transfer SIM request from a transfer mobile communication device to transfer the SIM from the mobile communication device to the transfer mobile communication device. The method further comprises, in response to receiving the transfer SIM request, notifying, by the entitlement server based on the stored status of the SIM, at least one of the mobile communication device or the transfer mobile communication device that the SIM is off on the mobile communication device to enable the SIM to be turned on for initiation of the transfer of the SIM from the mobile communication device to the transfer mobile communication device.

Abstract: Embodiments of the present disclosure are directed to systems and methods for managing embedded subscriber identity module (eSIM) profiles on user equipment (UE) within a mobile communication network. The disclosed mechanisms facilitate the automatic identification and management of inactive eSIM profiles based on subscription status, billing activity, or service usage.

Abstract: The present technology relates to detecting and responding to anomalous entitlement change requests in a telecommunication network. The method involves receiving, at an entitlement server of a telecommunication network provided by a mobile network operator (MNO), a request for a change to an entitlement of a subscriber on a wireless device. Network activity data related to the subscriber or the wireless device and collected by the MNO is received and used to analyze the legitimacy of the entitlement change request using a machine learning model trained on historical network activity data. If the request is deemed anomalous by the machine learning model, a security operation is performed to protect the subscriber.

Abstract: Systems and methods are provided for authenticating applications in a wireless network. Methods include determining that an application uses IP authentication. The methods further include querying a policy server for information on an IP address of a client running the application, wherein the information includes a device type indicator for the IP address. The methods further include determining that the device type indicator indicates the IP address is assigned to a cellular home internet gateway. The methods further include transmitting a notification to the client running the application upon determining that the IP address is assigned to the cellular home internet gateway.

Abstract: Embedded subscriber identity modules (eSIMs) may be shared among multiple user equipment (UE). Each UE has a SIM chip that has a unique embedded identity document (EID), and each eSIM has a unique integrated circuit card identifier (ICCID) and an associated mobile station international subscriber directory number (MSISDN, e.g., phone number). When the eSIMs are moved among UEs, the ICCID remains consistent for the eSIM, and the MSISDN may also remain consistently associated with a particular eSIM. Each eSIM has an associated profile that identifies authorized UEs that have permission to employ that eSIM, and may further identify usage restrictions (e.g., data usage, authorized networks and/or geographical limits) and a state, such as “in use” (when in a UE) and “not in use” when in storage. Organizations may maintain a pool of eSIMs, with the eSIMs moved among employees based on travel assignments and/or need for a company-provided phone.

Abstract: Systems, methods and non-transitory computer-readable mediums are provided for an entitlement system and method having an E911 address check bypass function. Methods provided herein include receiving a request from a mobile device for enabling voice over WiFi (VoWiFi) service and checking E911 address status. Methods further include applying a filter to the request to determine that the E911 address check can be bypassed and transmitting a response to the mobile device indicating that E911 address status is not required and that VoWiFi connection is permitted, thereby bypassing the E911 address check.

Abstract: Embedded subscriber identity modules (eSIMs) may be shared among multiple user equipment (UE). Each UE has a SIM chip that has a unique embedded identity document (EID), and each eSIM has a unique integrated circuit card identifier (ICCID) and an associated mobile station international subscriber directory number (MSISDN, e.g., phone number). When the eSIMs are moved among UEs, the ICCID remains consistent for the eSIM, and the MSISDN may also remain consistently associated with a particular eSIM. Each eSIM has an associated profile that identifies authorized UEs that have permission to employ that eSIM, and may further identify usage restrictions (e.g., data usage, authorized networks and/or geographical limits) and a state, such as “in use” (when in a UE) and “not in use” when in storage. Organizations may maintain a pool of eSIMs, with the eSIMs moved among employees based on travel assignments and/or need for a company-provided phone.

Abstract: Systems and methods are provided for authenticating applications in a wireless network. Methods include determining that an application uses IP authentication. The methods further include querying a policy server for information on an IP address of a client running the application, wherein the information includes a device type indicator for the IP address. The methods further include determining that the device type indicator indicates the IP address is assigned to a cellular home internet gateway. The methods further include transmitting a notification to the client running the application upon determining that the IP address is assigned to the cellular home internet gateway.

Abstract: Embodiments of the present disclosure are directed to systems and methods for enhanced provision of push notifications in a wireless telecommunication network. In response to a push notification server providing a push notification to an external push notification service, the push notification server is provided with an indication whether the notification was delivered to a target UE or not. Using the feedback, the push notification server may carry out one or more mitigating procedures, such as instructing the target UE to refresh its push token or re-attempt delivery, if the notification was not delivered to the UE.

Abstract: Systems, methods and non-transitory computer-readable mediums are provided for an entitlement system and method having an E911 address check bypass function. Methods provided herein include receiving a request from a mobile device for enabling voice over WiFi (VoWiFi) service and checking E911 address status. Methods further include applying a filter to the request to determine that the E911 address check can be bypassed and transmitting a response to the mobile device indicating that E911 address status is not required and that VoWiFi connection is permitted, thereby bypassing the E911 address check.

Abstract: A method for managing a dual subscriber identity module (SIM) device is performed by an entitlement server. The method comprises receiving and storing a status of a SIM indicating that the SIM is off from a mobile communication device comprising at least two SIMs. The method also comprises receiving a transfer SIM request from a transfer mobile communication device to transfer the SIM from the mobile communication device to the transfer mobile communication device. The method further comprises, in response to receiving the transfer SIM request, notifying, by the entitlement server based on the stored status of the SIM, at least one of the mobile communication device or the transfer mobile communication device that the SIM is off on the mobile communication device to enable the SIM to be turned on for initiation of the transfer of the SIM from the mobile communication device to the transfer mobile communication device.

Abstract: An access management account that includes an access identifier may be used to control access to telecommunications services or applications. An access identifier is designated for obtaining access to multiple telecommunications services or applications, in which the multiple telecommunications services or applications are accessible to a user through multiple user accounts that are protected by account credentials. Once the access credential is designated, the access credential may be used to determine whether access to the one or more telecommunications services or applications is to be granted instead of using the account credentials of the multiple user accounts.

Abstract: An access management account that includes an access identifier may be used to control access to telecommunications services or applications. An access identifier is designated for obtaining access to multiple telecommunications services or applications, in which the multiple telecommunications services or applications are accessible to a user through multiple user accounts that are protected by account credentials. Once the access credential is designated, the access credential may be used to determine whether access to the one or more telecommunications services or applications is to be granted instead of using the account credentials of the multiple user accounts.