Abstract: Aspects of the subject disclosure may include, for example, detecting a first bootstrap profile on a first communication device, and detecting a second bootstrap profile on a second communication device. Further aspects can include determining the first bootstrap profile and the second bootstrap profile are a same bootstrap profile, and providing limited services to the second communication device according to the first communication device and the second communication device having the same bootstrap profile. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, a system that receives a notification, from an identity proxy function, indicating an identity mobile subscriber identity (IMSI) is being registered. That is, a communication device sends a registration request that includes the IMSI to a first registration function. Further, the identity proxy function intercepts the registration request and sends the first notification to the device. Also, the system, sends a first registration message to the first registration function. The first registration function includes a first registry. Further, the first registration message indicates to the first registration function to add the IMSI to the first registry. The system also sends a second registration message to a second registration function. The second registration function includes a second registry. Further, the second registration message indicates to the second registration function to remove the IMSI to the first registry.

Abstract: Aspects of the subject disclosure may include, for example, a system that provides a first message to a communication device that includes a temporary international mobile subscriber identity (IMSI) to be provisioned onto the device. A first registration message is sent to a registration function server, wherein the server includes a registry, wherein the first registration message indicates to the server to add the temporary IMSI to the registry. A second registration message is sent to the server in response to detecting expiration of a limited time period, wherein the second registration message indicates to the server to remove the temporary IMSI from the registry. A second message is provided to the wireless communication device that indicates to the wireless communication device the expiration of the limited time period, and that the temporary IMSI is removed from the registry of the registration function server. Other embodiments are disclosed.

Abstract: A method and apparatus for creating a custom service in a communication network are disclosed. For example, the method implemented via a processor determines that the custom service does not exist, receives one or more desired functions for the custom service, creates the custom service having the one or more desired functions and modifies one or more network elements within the communication network to perform the one or more desired functions to deploy the custom service.

Abstract: Concepts and technologies are disclosed herein for creating and using service control functions. The service control functions can detect a message via an adapter function. The message can relate to a service controlled by the service control functions. Service policies can be accessed. The service policies can include message handling policies and can be accessed to determine if a policy relating to the message exists. If a determination is made that the policy exists, the message and the policy can be analyzed to determine an action to take with respect to the message, and the action can be initiated.

Abstract: Concepts and technologies are disclosed herein for providing network address translation in a software defined networking environment. A control system can detect a request to create a network address translation function. The control system can analyze a recipe to identify a network address translation switch and a network address translation virtual function that are to provide functionality of the network address translation function, trigger instantiation of the network address translation switch via a network control function, and trigger instantiation of the network address translation virtual function via a service control function. The control system can validate the network address translation function and chain the network address translation function to a host. The network address translation function can provide address translation for the host using the network address translation switch.

Abstract: Aspects of the subject disclosure may include, for example, a system that manages utilization of mobile subscriber identity information including enabling use of such information by different communication devices. The use of a same generic mobile subscriber identity information by multiple devices can be based on intercepting registration requests and simulated registrations can be performed without providing a unique device identifier. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, a system that manages reuse of mobile subscriber identity information. Further aspects may include mobile subscriber identity information used in a device having multiple device profiles indexed, directly or indirectly, by multiple ki (e.g. shared secret keys). Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, detecting a first bootstrap profile on a first communication device, and detecting a second bootstrap profile on a second communication device. Further aspects can include determining the first bootstrap profile and the second bootstrap profile are a same bootstrap profile, and providing limited services to the second communication device according to the first communication device and the second communication device having the same bootstrap profile. Other embodiments are disclosed.

Abstract: A system is described that can perform a method for providing a first mobile network operator system with information relating to configuration data. The configuration data enables management of content and memory allocation for security domain containers of a universal integrated circuit card of a communication device. Security management of the universal integrated circuit card is delegated by providing the configuration data to a second mobile network operator system to enable management of the content and the memory allocation for the security domain containers. The memory allocation is adjusted by the second network mobile operator system according to a second group of services provided to the communication device.

Abstract: Aspects of the subject disclosure may include, for example, establishing a wireless data link via a wireless local area network, and obtaining, via the wireless data link, an interim profile supporting communication with a mobile network. Various embodiments can include enabling the interim profile to establish limited connectivity facilitating communication with a subscription manager node of the mobile network. Some embodiments can include communicating with the subscription manager node to establish an active subscription for services of the mobile network. Various embodiments can include enabling an operational profile comprising subscription information associated with the active subscription. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, determining a first subscription for a communication device has expired. Further embodiments include receiving a first registration request from the communication device, detecting a bootstrap profile on the communication device, and providing according to the bootstrap profile, limited services to the communication device to subscribe to a second subscription for a second group of services. Additional embodiments include obtaining subscription information for the second subscription for the second group of services, adjusting an operational profile on the communication device according to the subscription information resulting in an adjusted operational profile, and receiving a second registration request for the communication device according to the adjusted operation profile.

Abstract: A system that incorporates the subject disclosure may include, for example, instructions which when executed cause a device processor to perform operations comprising sending a service request to a remote management server; receiving from the management server an authentication management function and an encryption key generator for execution by a secure element and an encryption engine for execution by a secure device processor, sending a request to establish a communication session with a remote device; and communicating with the remote device via a channel established using an application server. The secure element and the secure device processor authenticate each other using a mutual authentication keyset. The secure element, the secure device processor and the device processor each have a security level associated therewith; the security level associated with the secure device processor is intermediate between that of the secure element and that of the device processor. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, a system that manages utilization of mobile subscriber identity information including enabling use of such information by different communication devices. The use of a same generic mobile subscriber identity information by multiple devices can be based on intercepting registration requests and simulated registrations can be performed without providing a unique device identifier. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, a system that manages reuse of mobile subscriber identity information. Further aspects may include mobile subscriber identity information used in a device having multiple device profiles indexed, directly or indirectly, by multiple ki (e.g. shared secret keys). Other embodiments are disclosed.

Abstract: A system that incorporates the subject disclosure may perform, for example, receiving a baseline credential and an external credential, mapping the external credential to the baseline credential in a secure element memory, receiving a request for an authentication from a secure device processor of the communication device where the request for the authentication includes a user credential inputted into the communication device, comparing the user credential with the baseline credential to verify the authentication, and providing the authentication and the external credential to the secure device processor without providing the baseline credential to enable the secure device processor to provide the external credential to an external entity device that is remote from the communication device. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, determining a first subscription for a communication device has expired. Further embodiments include receiving a first registration request from the communication device, detecting a bootstrap profile on the communication device, and providing according to the bootstrap profile, limited services to the communication device to subscribe to a second subscription for a second group of services. Additional embodiments include obtaining subscription information for the second subscription for the second group of services, adjusting an operational profile on the communication device according to the subscription information resulting in an adjusted operational profile, and receiving a second registration request for the communication device according to the adjusted operation profile.

Abstract: Concepts and technologies are disclosed herein for providing network address translation in a software defined networking environment. A control system can detect a request to create a network address translation function. The control system can analyze a recipe to identify a network address translation switch and a network address translation virtual function that are to provide functionality of the network address translation function, trigger instantiation of the network address translation switch via a network control function, and trigger instantiation of the network address translation virtual function via a service control function. The control system can validate the network address translation function and chain the network address translation function to a host. The network address translation function can provide address translation for the host using the network address translation switch.

Abstract: Aspects of the subject disclosure may include, for example, a system that registers a communication device with a temporary IMSI shared among multiple communication devices with a virtual registration function. Further, the system provisions an active IMSI using a virtual Over-the-Air (OTA) function onto the communication device and indicates to the communication device to register with a registration function using the active IMSI. Other embodiments are disclosed.

Abstract: A system is described that can perform a method for providing a first mobile network operator system with information relating to configuration data. The configuration data enables management of content and memory allocation for security domain containers of a universal integrated circuit card of a communication device. Security management of the universal integrated circuit card is delegated by providing the configuration data to a second mobile network operator system to enable management of the content and the memory allocation for the security domain containers. The memory allocation is adjusted by the second network mobile operator system according to a second group of services provided to the communication device.