Abstract: Systems, methods, processors, and circuitries are provided for activation of broadband network services via cellular network user equipment (UE). In some aspects, a UE includes a memory and a processor. The processor is coupled to the memory and configured to, when executing instructions stored in the memory, cause the UE to determine, via a cellular network, an entitlement of the UE to a service of a broadband network; generate a token for the service; create a blind token based on the token; transmit, via the cellular network to a server, the blind token for signing; receive, via the cellular network from the server, a blind signature for the blind token; unblind the blind signature to yield an unblinded signature; and store the unblinded signature and the token for subsequent access to the service.

Abstract: This application describes provisioning a secondary electronic subscriber identity module (eSIM) to a wireless device to access a cellular wireless network of a mobile virtual network operator (MVNO) to supplement and offload from a cellular wireless network of a mobile network operator (MNO) that provides cellular wireless services to users of the MVNO. Provisioning of the secondary eSIM can be triggered after i) boot up of the wireless device or ii) insertion of a primary SIM/eSIM that provides MVNO cellular service access via the MNO cellular wireless network. Provisioning can be anchored by an MVNO entitlement server or by a manufacturer device services server. Provisioning can also be triggered by the MNO cellular wireless network after attachment of the wireless device. Authentication and authorization of the wireless device to obtain the secondary eSIM can be based on the primary SIM/eSIM or on secure communication with the manufacturer device services server.