Abstract: Systems, methods, processors, and circuitries are provided for activation of broadband network services via cellular network user equipment (UE). In some aspects, a UE includes a memory and a processor. The processor is coupled to the memory and configured to, when executing instructions stored in the memory, cause the UE to determine, via a cellular network, an entitlement of the UE to a service of a broadband network; generate a token for the service; create a blind token based on the token; transmit, via the cellular network to a server, the blind token for signing; receive, via the cellular network from the server, a blind signature for the blind token; unblind the blind signature to yield an unblinded signature; and store the unblinded signature and the token for subsequent access to the service.

Abstract: The described embodiments set forth techniques for transferring an electronic subscriber identity module (eSIM) with the same integrated circuit card identifier (ICCID) value from a source mobile wireless device to a target mobile wireless device directly with a mobile network operator (MNO) provisioning server. The target mobile wireless device downloads the eSIM from the MNO provisioning server after deletion of the eSIM on the source mobile wireless device and reassignment of the eSIM with the same ICCID value to the target mobile wireless device.

Abstract: A baseband processor includes a memory and is configured to transmit, to a cellular carrier, a request to activate the UE with the cellular carrier. The baseband processor is also configured to, in response to receiving an authentication request for authenticating a user of the UE, transmit, to the cellular carrier, information identifying another UE and authentication information for authenticating the user; obtain verification information transmitted to the other UE; transmit the verification information to the cellular carrier; and after transmitting the verification information to the cellular carrier, receive an embedded subscriber identity module (eSIM) subscription transferred from the other UE.

Abstract: A method is performed by a set of one or more servers and includes receiving, from a first user equipment (UE) to be activated with a cellular carrier for a user, and at the set of one or more servers, information identifying a second UE of the user and authentication information for authenticating the user with the cellular carrier. The method further includes authenticating the user using the authentication information; transmitting a password to the second UE at least partly in response to authenticating the user; receiving, from the first UE and at the set of one or more servers, the password; validating the password received from the first UE; and initiating a transfer of an embedded subscriber identity module (eSIM) subscription, from the second UE to the first UE, at least partly in response to validating the password.

Abstract: Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Abstract: This Application describes mechanisms for enterprise remote management of cellular services provided via access credentials, e.g., subscriber identity modules (SIMs) and/or electronic SIMs (eSIMs), for wireless devices. To minimize requirements for user interaction, installation and management of business-supplied cellular service profiles on the wireless device can intercept alert notifications to reduce interruptions and allow for background management of the business-supplied cellular service profiles. Additionally, a business enterprise can use multiple, distinct services to initiate installation of an eSIM to a wireless device. When two different services attempt to install eSIMs on the wireless device in parallel, management software on the wireless device can control an order of installation and disallow duplicate installations of an identical eSIM to the wireless device.

Abstract: A mobile device may install and monitor geofences. The application or the operating system (OS) may store a set of geofences. The application or OS may determine the mobile device's current location and generate a first bounding area around the current location. The application or OS may determine the size or radius of the first bounding area such that no more than a specified number of geofences fall inside the first bounding area. The application or OS may monitor the mobile device's location in the first bounding area and determine whether the mobile device exits the first bounding area. In response to determining that the mobile device exits the first bounding area, the application or OS may determine the mobile device's location and generate a second bonding area such that no more than the specified number of the geofences fall inside the second bounding area.

Abstract: This Application sets forth techniques for provisioning and activating an electronic subscriber identity module (eSIM) as a primary SIM for a mobile wireless device that includes a limited functionality physical SIM (pSIM) associated with a particular mobile network operator (MNO) and installed in the mobile wireless device at a time of manufacture. An eSIM associated with the particular MNO is reserved during a sales order process and later activated during device activation after receipt by a user using a secure over-the-air (OTA) cellular connection enabled by the limited functionality pSIM, when a non-cellular connection or other Internet accessible connection is available. Dual SIM device configuration processes can be suppressed during activation of the eSIM. After successful attachment of the mobile wireless device to a cellular wireless network of the particular MNO using credentials of the eSIM, the limited functionality pSIM is disabled.

Abstract: Methods, devices, and systems for establishing a geofence for a Non-Public Network (NPN) using an Embedded Subscriber Identity Module (eSIM) associated with the NPN. The method includes receiving, by a receiver of a User Equipment (UE), an eSIM associated with an NPN, where the eSIM includes geofencing data. The UE performs wireless communication using the NPN when the UE is within an area defined by the geofencing data.

Abstract: Techniques are directed toward network identification collision detection. An example method includes selecting a first subscriber identity module (SIM) associated with a public land mobile network identifier (PLMN ID) and a network identifier (NID) of a private network. The method can further include generating a first non-access stratum (NAS) registration request to establish a connection with the private network using the first SIM. The method can further include processing a NAS registration request reject message received from the private network. The method can further include selecting a second SIM associated with the PLMN ID and the NID. The method can further include generating a second NAS registration request to establish a connection with the private network using the second SIM. The method can further include processing a NAS registration request success message received from the private network. The method can further include logging NID collision information.

Abstract: Apparatus and methods to transfer user preferences for cellular wireless service associated credentials transferred from a source device to a target device. Transfer of credentials can include physically moving a physical subscriber identity module (SIM) card between devices, transfer of cellular wireless service from a first SIM card at the source device to a second SIM card at the target device, and/or transfer of cellular wireless services for one or more electronic SIMs (eSIMs) from the source device to the target device. Preferences associated with some or all of the transferred SIMs/eSIMs can be applied at the target device when certain matching criteria are satisfied. Exemplary matching criteria include matching identifiers, such as integrated circuit card identifier (ICCID) values, mobile station international subscriber directory number (MSISDN) values, and/or mappings thereof.

Abstract: A method is performed by a set of one or more servers and includes receiving, from a first user equipment (UE) to be activated with a cellular carrier for a user, and at the set of one or more servers, information identifying a second UE of the user and authentication information for authenticating the user with the cellular carrier.

Abstract: A user equipment (UE) is configured to transmit, to a cellular carrier, a request to activate the UE with the cellular carrier. The UE is also configured to, in response to receiving an authentication request for authenticating a user of the UE, transmit, to the cellular carrier, information identifying another UE and authentication information for authenticating the user ; prompt the user, via a display of the UE, to provide, to an input system of the UE, verification information transmitted to the other UE; transmit, to the cellular carrier, the verification information; and in response to validation of the verification information by the cellular carrier, receive an embedded subscriber identity module (eSIM) subscription transferred from the other UE.

Abstract: This Application sets forth techniques for cloud-based cellular service management for a set of associated mobile wireless devices, including maintenance of information for one or more subscriber identity modules (SIMs) and/or electronic SIMs (eSIMs) used by the set of mobile wireless devices.

Abstract: This Application describes mechanisms to transfer cellular service plans and associated credentials efficiently between wireless devices. Information regarding transferability of cellular services for SIMs/eSIMs to a wireless device are obtained from locally stored or remotely accessible cellular service information and/or associated mobile network operator (MNO) information. Access to network-based servers to determine transferability and/or to effect transfer can use non-cellular connections when available. Transferability information can be presented to a user to narrow selection of cellular service plans to transfer.

Abstract: This Application describes mechanisms for enterprise remote management of cellular services provided via access credentials, e.g., subscriber identity modules (SIMs) and/or electronic SIMS (eSIMs), for wireless devices. To minimize requirements for user interaction, installation and management of business-supplied cellular service profiles on the wireless device can intercept alert notifications to reduce interruptions and allow for background management of the business-supplied cellular service profiles. Additionally, a business enterprise can use multiple, distinct services to initiate installation of an eSIM to a wireless device. When two different services attempt to install eSIMs on the wireless device in parallel, management software on the wireless device can control an order of installation and disallow duplicate installations of an identical eSIM to the wireless device.

Abstract: Methods and devices for a user equipment (UE) device to utilize an electronic subscriber identity module (eSIM) to provide backup cellular connectivity for essential services and security enhancements. A UE device receives user input to alter an operational state of the UE. The user input may include removing a physical subscriber identity module (SIM) card installed in the UE or attempting to power off the UE. In response to receiving the user input, an authorization process is initiated. In response to determining that the authorization process has failed, a security enhancement is implemented for the UE.

Abstract: This Application sets forth techniques for provisioning and activating an electronic subscriber identity module (eSIM) as a primary SIM for a mobile wireless device that includes a limited functionality physical SIM (pSIM) associated with a particular mobile network operator (MNO) and installed in the mobile wireless device at a time of manufacture. An eSIM associated with the particular MNO is reserved during a sales order process and later activated during device activation after receipt by a user using a secure over-the-air (OTA) cellular connection enabled by the limited functionality pSIM, when a non-cellular connection or other Internet accessible connection is available. Dual SIM device configuration processes can be suppressed during activation of the eSIM. After successful attachment of the mobile wireless device to a cellular wireless network of the particular MNO using credentials of the eSIM, the limited functionality pSIM is disabled.

Abstract: This Application sets forth techniques for provisioning and activating electronic subscriber identity modules (eSIMs) for mobile wireless devices. An eSIM is reserved during a sales order process and later activated during device activation after receipt by a user. An option for eSIM installation in place of (or in addition to) physical SIM installation is provided when purchasing the mobile wireless device. The reserved eSIM can replace a previous SIM/eSIM or be a new eSIM. During device activation, installation and activation of the eSIM occurs. Activation of the eSIM can occur before or after deactivation of a transferred SIM/eSIM. The mobile wireless device accounts for propagation delay of eSIM activation through MNO servers by disabling and re-enabling the eSIM until initial attachment to an MNO cellular wireless network succeeds or a maximum number of retry attempts is reached.

Abstract: Apparatus and methods to transfer user preferences for cellular wireless service associated credentials transferred from a source device to a target device. Transfer of credentials can include physically moving a physical subscriber identity module (SIM) card between devices, transfer of cellular wireless service from a first SIM card at the source device to a second SIM card at the target device, and/or transfer of cellular wireless services for one or more electronic SIMs (eSIMs) from the source device to the target device. Preferences associated with some or all of the transferred SIMs/eSIMs can be applied at the target device when certain matching criteria are satisfied. Exemplary matching criteria include matching identifiers, such as integrated circuit card identifier (ICCID) values, mobile station international subscriber directory number (MSISDN) values, and/or mappings thereof.