Wireless communication device, method of providing access to wireless communication, base station and method of providing crossover to wireless communication network

FIELD: radio engineering, communication.

SUBSTANCE: invention relates to mobile communication. The invention discloses methods and devices for enabling a wireless communication device to access wireless communication services when crossing over between multiple wireless communication networks. The technical result is achieved by storing multiple electronic subscriber identification modules (eSIM), that are distinct for networks of different operators, and switching between said modules. By loading the suitable eSIM, a user terminal performs authentication at the selected operator instead of switching to roaming. During roaming operations, the user terminal loads one or more previously stored eSIM. Selection of an eSIM can be performed manually by the user or automatically by the user terminal based on given conditions.

EFFECT: enabling wireless communication devices to communicate everywhere, including in networks using such technologies as GSM and CDMA.

22 cl, 6 dwg

The technical field to which the invention relates.

The present invention in General relates to the field of wireless communication systems, such as cellular networks; more specifically, the present invention relates to systems that enable the communication device to access the wireless service when moving between multiple wireless networks.

The level of technology

In many systems or networks for wireless access services requires identification and authentication of the user. For example, in the cellular system UMTS (Universal Mobile Telecommunications System Universal mobile telecommunications system), access cell phone to the network is regulated by the client by means of access control, so-called a subscriber identity module (Subscriber Identity Module SlM-card), physically made in the form factor of the universal microprocessor smart cards (Universal Integrated Circuit Card, UICC). SIM-card is used for autentifikacii subscriber in a cellular network. Upon successful authentication, the subscriber gains access to the network.

While manufacturing in the SIM card is recorded for each individual network operator authentication, limiting the ability to use this SIM card only a specific network operator. In addition, each SlM-card is linked to one in the maintain user account, data which is permanently stored on the SIM card. The user wishing to use the new account instead of using an existing or new operator instead of the current need a new SIM card. In other words, the account of the user and the network operator is tied to the SIM card and not to the mobile device. In this sense, mobile devices, to some extent, interchangeable.

Unfortunately, the subscriber is moving into a new service area, we often have to choose between high price to pay for roaming and buying a new SIM card. Roaming in this case is called the service of mobile devices on-site off-site network (home network), where it was registered your mobile device. Compared with services for registered subscribers when roaming may degrade the signal quality and/or be charged an additional fee. However, in more severe situations, the subscriber may not be able roaming, and, accordingly, he has either to purchase for your mobile device a new SIM card for registration in another network, either to abandon the use of mobile communications.

Thus, demand more sophisticated technical solutions that allow users to obtain (for example, bought the ü) the ability to use mobile devices when outside the home network, and to manage this opportunity. Such improved solutions to effectively support issuance of new user accounts or other accounts already used or bought the mobile device without the need for a new SIM card.

Disclosure of inventions

In the present invention aimed at solving the above problems, proposed, among other things, devices and methods for selection and use in the terminal of the user client access devices.

In the first aspect of the present invention proposes a wireless device. In one embodiment, the device includes one or more wireless interfaces configured to connect to one or more wireless networks;

protected node, configured to store multiple data items of user access, with each data element of the user's access is mapped to a network; a processor; and a storage device that communicates with the processor and containing executable computer commands. In one embodiment, the specified commands when executed by a processor provide a selection of available network; retrieving the first data element of the user associated with the selected network from samisen the th node; loading the extracted data item user access; and authentication in the selected network using the downloaded data item user access.

In the second aspect of the present invention proposes a method of providing access to a wireless connection when moving between multiple networks. In one embodiment, the method includes detecting roaming state and the analysis of one or more client access controls, each of which is mapped to one or more networks; selection of available client access controls; loading the selected client access controls; and performing the selected client access controls.

In one embodiment, the method being performed by a user terminal. In yet another embodiment, the method being performed by a network element. In other embodiments, operations of the method are performed by a user terminal and one or more network elements.

In the third aspect of the present invention features a network device. In one embodiment, the specified device is configured to initiate the detection conditions of a change of client access (for example, a virtual SIM card, eSIM), for example, the state is in roaming or reducing the quality and/or signal intensity, and with the ability to run after that switch or handover of the user terminal from one network (from one operator to another network to another operator).

In the fourth aspect of the present invention proposes a system. In one embodiment, the system includes a wireless communications network and the user terminal, which may choose in its sole discretion and activate different client tools to access on the basis of the conditions prevailing in the network (for example, when the user roaming, quality or intensity of the signal and others).

In the fifth aspect can be read by a computer device. In one embodiment, the device includes a storage medium placed thereon at least one computer program. This program when run gives the possibility to detect the status of roaming or otherwise initiating condition; to select at least one second network; launch access to the selected network; to complete the access network currently used.

In the sixth aspect of the present invention proposes a base station. In one embodiment, the base station configured to support at least the first wireless communication network and the transition of the wireless communication device to another base station configured to support wireless communication network, different from the first wireless communication network. In one embodiment, the base station includes one or more wireless interface; a processor; and a storage device that communicates with the processor and containing executable computer commands that, when executed by the processor to receive operational information from the wireless device; determining whether to use the another wireless communication base station, based at least in part, operational information;

and transmission in a wireless communication command, initiating a connection device for wireless communication with another base station.

Data and other aspects of the present invention will become clear from the following description.

Brief description of drawings

Figure 1 graphically illustrates example operations authentication and key agreement (AKA) module USIM prior art.

Figure 2 is a block diagram of one example of a cellular communication system, which can be used in conjunction with different variants of implementation of the present invention.

Figure 3 graphically illustrates an example of the operation switch of the cellular device from the network of the first operator to the second operator network in accordance with one VA is Ianto implementation of the present invention.

Figure 4 is a logical block diagram illustrating one implementation of the generalized method of transition service cell device in accordance with the present invention.

Figure 5 is a functional diagram of an example of a user terminal, which can be used to implement the methods of the present invention.

6 is a functional diagram of an example network device that can be used to implement the methods of the present invention.

The copyright in all drawings © 2010 Apple Inc. All rights reserved.

The implementation of the invention

In the following the reference to the drawings the same numeric designations refer to the same elements.

Review

In one aspect the present invention provides methods and devices that provide the user terminal with access to the networks of different operators by supporting opportunities roaming coverage outside of the "home" region. Embodiments of the present invention provide the ability to switch between multiple client access capabilities (for example, electronic modules subscriber identity, eSIM), stored in the mobile device, despite the fact that each module eSIM contains the module SIM made with the possibility out is eficacia mobile device in the operator's network. Specifically, in one proposed in an example embodiment, the mobile device detects the state of the roaming, then (or previously) analyzes its available modules eSIM. If at least one module eSIM suitable for operation without roaming in the network used at the moment, this module eSIM is loaded and the mobile device is registered in the new home network.

In a broader sense, the present invention provides a wireless communication device, which instead use an existing roaming access, can change his client tool access, currently in use on the client accessor corresponding to the current network. For example, instead of continuing to work with the module eSIM mapped to a first network, and roaming access to the second network (and, accordingly, the accrual in some cases, additional roaming charges), the mobile device stops using eSIM mapped to a first network, and at the same time or proactively loads eSIM mapped second network. This switching in the proposed example is transparent to the user (hot switching), and user perception of the quality of mobile services is not affected.

Various aspects of the present invention C is acetelyne improve the quality and efficiency of services provided, and expand services. Users flexibility in choosing one or another client tool access, can from one device to use multiple service contracts concluded with various network operators. This ability gives the user additional comfort, as, for example, in the case of foreign trips he can move out of the home zone service, simply by purchasing the access data of the user from the operator services in the service area of the foreign network. In addition, since the data format of user access is not tied to a specific physical implementation of the card (UICC, R-UIM and the like), the user terminal is equipped with multiple radio interfaces (for example, GSM, CDMA etc), you can switch between networks with different radio access technology having a different intensity of the signal so that the area of communication services can be expanded.

Detailed description of the proposed as an example of embodiments of the invention

Further details are offered as example embodiments of the present invention. Although these options are mainly considered in the circumstances of the use of modules subscriber identity (SIM) cellular networks GSM, GPRS/EDGE, UMTS, specialists in this the area should be clear that the present invention is not limited to these networks. Various aspects of the present invention can be used in any wireless network (cellular or otherwise), where roaming using client access controls can take advantage of.

It is also clear that although this paper uses the term "subscriber identity module" (for example, eSIM), the use of this term in no way implies the availability of (i) the subscriber's network as such (i.e. the present invention can be used as the subscriber, or other person); (and) specific individuals (i.e. the present invention can be used on behalf of a group of individuals, such as family, either indefinite or imagined by a group of persons, for example, account); (iii) any physically implemented module or other hardware implemented device.

The operation of the subscriber identity module (SIM) of the prior art

In this example cellular networks UMTS prior art user terminal (UE, user device includes a mobile device and a universal subscriber identity module (Universal Subscriber Identity Module, USIM). The USIM is a logical program module, stored and executed on the physical is integrated microprocessor-based smart card (UICC). In the USIM stores a variety of information, such as information about the subscriber, and the keys and algorithms used for authentication at the network operator with the purpose of using the services of your wireless network.

Typically, the modules USIM recorded in the UICC card before being delivered to the subscriber; such pre-programming (personalization) individually for each network operator. For example, before issuing the bind USIM to the international mobile subscriber identity (International Mobile Subscriber Identity, IMSI)to the unique identifier of microprocessor smart cards (Integrated Circuit Card Identifier, ICC-ID) and to a specific key (For authentication. The service provider stores this mapping in the registry, located in the center of a network authentication (Authentication Center (AuC). After personalization UICC card may be issued to the subscriber.

Next, with reference to figure 1 a detailed example of the operation 100 of the authentication and key agreement (Authentication and Key Agreement, AKA) using the above module USIM prior art. During normal operation, the authentication terminal 102 user receives from the USIM 104 international mobile subscriber identity (IMSI). The user terminal transmits the IMSI of the service network 106 (Serving Network SN) network operator or guest backbone. SN sends the authentication request to the AuC of the house is stone network (Home Network, HN). HN checks accepted IMSI registry AuC and finds a matching key K. HN generates a random number (RAND) and using the algorithm, signs this number is the key To the purpose of the formation of the expected response (expected response XRES). In addition, the home network HN, using various algorithms, generates the encryption key (Cipher Key CK) and key integrity (Integrity Key, IK)used for encryption and integrity protection, as well as the token the Authentication Token AUTN). HN passes in SN authentication vector consisting of the RAND, XRES, CK and AUTN. SN stores the vector confirm access rights for a single use only in the operation authorization. SN sends RAND and AUTN to the user terminal.

After taking RAND and AUTN terminal 102 of user USIM 104 verifies the authenticity of the received token AUTN. If the validity is confirmed, the user terminal using the accepted RAND, the stored key and the same algorithm that was used in the formation XRES, computes its response, RES). The user terminal transmits the RES back to SN. SN 106 compares XRES with the adopted RES and at their coincidence allows the terminal user to use network services the wireless operator.

The proposed option of functioning

In the proposed example embodiment of the present invention, instead of using, as prior art, physical card UICC, the UICC card emulates a virtual or electronic object (e.g., program), hereinafter called the universal electronic microprocessor-based smart card (eUICC), contained in a protected node (for example, in the secure microprocessor or storage device) to the user terminal. Map eUICC able to store multiple items USIM, hereinafter called the electronic modules subscriber identity (Electronic Subscriber Identity Modules, eSIM) and manage these elements. Each module eSIM contains the same logical object, as usual USIM. Map eUICC selects eSIM ID (ICC-ID of a specific module eSIM. After selecting the card eUICC the desired module (required modules) eSIM terminal of the user in order to access the wireless service network provided by the operator corresponding to the selected eSIM, initiates the operation of authentication.

Next, with reference to figure 2 describes one proposed in the example system 200 of cellular communication, which can be used to explain various embodiments of the present invention. The system 200 includes three terrestrial public mobile (PLMN, public land mobile network) (three operators): the UMTS network operator (denoted as A), the UMTS network operator (denoted as 202) and the CDMA2000 network operator (denoted by the to S). Despite the use in illustration of two UMTS networks and one CDMA network, it is clear that this invention allows the use of different number of networks (cellular or otherwise) with another radio. In addition, the invention encompasses the possibility of use in heterogeneous networks, for example, the ability to transfer the service or even an ongoing call or data session from the WLAN to the cellular network or a WiMAX network, etc.

As shown in figure 2, the mobile device 204 is connected to a UMTS network operator, but it also is in the zone of coverage of the other two networks. In this example, network device registered to the UMTS network operator And, thus, the UMTS network operator And is for a network device, the so-called home network. If the network device uses the services provided by the UMTS network operator, then the second network is the so-called guest network, because the network device in the network of the operator is not registered permanently. Network CDMA2000 operator can support or not support roaming access; possibility of roaming between networks of different technologies (for example, UMTS, CDMA2000) depends on the particular variant of implementation (for example, may require a phone that supports both technologies).

In one proposed in an example embodiment, domestic the present invention, the mobile device 204 instead of roaming changes the currently used module (eSIM. Specifically, the mobile device stores in a secure eUICC (or dynamically acquires several eSIM, and instead continue using eSIM associated with the first network A, and use the second network while roaming the specified mobile device stops using (deactivates) eSIM associated with the first network, and loads eSIM associated with the second network S (in this case the network operator). The mobile device then connects with the second network, which becomes for him a new home network. As noted above, this operation can be done in different sequences of steps, as proposed in the example embodiment, this operation is performed so that the transition was the least visible to the user. The present invention encompasses a variety of models of this operation, including using the principle of "establishing a new connection before breaking the current"in which service in the new home network begins (at least in some part) prior to your termination or until you remove previous eSIM home network. Other models use the principle of "break the existing connection before establishing new".

Next, with reference to figure 3 describes proposed as an example of the use of the services inseveral cellular networks. At step 302 the user terminal (UE) builds the list of available eSIM. In this context, the term "available eSIM may include, without limitation, client funds or access modules eSIM, currently available or conditionally available (for example, in the future, upon the occurrence of some event, for example when entering the coverage area of another base station and the like). In step 304, the user terminal searches for the network corresponding to the available eSIM. For example, in the proposed example system 200 mobile communication terminal 204 of the user finds three networks: (i) network A UMTS operator And the network 202 In UMTS operator and network IS CDMA2000 operator; however, in the user terminal has eSIM data-only networks, operator a and operator C.

In step 306, the user terminal selects one of the available networks. For example, the user terminal may provide a list of networks available to the user via a graphical user interface (GUI), a user can select the desired network. In this example, the user decides to switch from the operator, is currently in use (the operator), the operator C. alternatively, the user terminal (or even in the remote network element) can be implemented selection logic that selects a suitable operator on the basis of one or more rules, which may include, for example: (i) criteria value; (P) criteria associated with equipment and compatibility; and/or (iii) the user's preferences.

In step 308 the user terminal retrieves from the protected element and loads the module eSIM that corresponds to the selected operator. For example, the user terminal terminates the use of the module eSIM, which emulates a USIM for UMTS network operator, and at the same time or proactively loads eSIM, corresponding, for example, network CDMA2000 operator C.

In step 310 (which, as noted, can be carried out simultaneously or in advance), the user terminal performs authentication in the selected network. The user terminal initializes the modem CDMA2000 and is registered in the operator's network C.

The above example illustrates several characteristic advantages of the present invention. First, unlike physical SIM cards, the mobile device stores the eUICC several modules eSIM. Accordingly, various aspects of the present invention can greatly expand the territory in which it is possible to use device. Since all eSIM in the proposed example embodiment, connected to the networks of different operators, for subscriber's home are multiple networks. Each of its home network, the subscriber can use as ZAR the registered user (for example, without roaming charges and so on). Moreover, the above option may not support work in networks with different radio access technologies and their corresponding types eSIM.

Second, as proposed in the present invention, the mobile device does not contain a physical SIM card, your mobile device can support multiple access technologies without the additional costs associated with the use of cards of a particular form factor (for example, without having to use two, three or four separate slots for SIM cards). In the mobile device does not need to provide connectors for the card, and the user does not need to carry multiple cards, etc.

In addition, since the change of modules eSIM in the mobile device may be implemented using a graphical interface or automatically, various embodiments of the present invention help prevent user errors. For example, the user won't accidentally forget SIM card at home, to not insert the SIM card insert the SIM card correctly, etc.

The following are offered as examples of specific embodiments of the generalized methods and devices that implement one or more aspects of the present invention.

Ways

Further, the exile of left-wing the figure 4 describes one variant of implementation of the generalized method of providing the device access to the wireless services when switching between multiple wireless networks.

In the present context, the term "client access control" refers, generally, to the client software, implemented in either hardware or software able to allow access to the wireless network and the resources of the communication network. In one proposed in an example embodiment, the client agent confirm access rights is a module eSIM performed in the map eUICC. In one embodiment, the eSIM can be used with at least one device from the following list:

universal subscriber identity module (USIM), the identity module for the transmission of multimedia information using Internet protocols (ISIM), a subscriber identity module in CDMA networks (CSIM).

In step 402 analyzes the applicability of other client access controls. In one proposed in an example embodiment, the analysis of client access controls started automatically by the wireless device. For example, if the user terminal has multiple radio interfaces (for example GSM, CDMA) and the signal in the currently used radio interface is weak or absent, then the wireless communication device checks its available client access controls, hoping to avoid PE is ehoda in roaming.

In yet another embodiment, the update operation client access controls is started manually by the user. For example, the user in accordance with the service contracts concluded with different operators may have different tariff plans for voice and data communications. The user to take advantage of the most economical fare for necessary services (for example, voice or data), you may manually select the appropriate operator. Alternatively, the user in different personal circumstances, may choose different operators, for example one operator for a personal connection, and another for the service.

In yet another embodiment, the run pack client access controls can be carried out with regard to choose depending on the situation-specific characteristics (for example cost, signal strength) of available networks. For example, the user terminal can be eSIM data for multiple operators with different tariffs. One of the operators can offer more favorable rates in the evening and to remind the user terminal about the possibility to choose in the evening, more efficient network.

In one embodiment, the run pack client access controls may be implemented is taken based on the current time and/or geographical location. For example, the user may be eSIM data to a personal account and service account. The wireless device may determine that it is in the workplace and working time, and therefore can choose the network that corresponds to eSIM data related to the service account. Alternatively, if the device has determined that now after hours and/or it is not in the workplace of the user (as, for example, in its primary home), the device may select the network associated with eSIM data relating to a personal account.

In addition, it is possible proactive use impacts of various kinds (for example, data on the time and/or geographical location). For example, a user traveling by car in the area, for which, according to the previously collected data, characterized by a very weak signal level of the first operator, but not the second operator can automatically run update client access controls. In some embodiments of the invention the analysis of previously collected data may be performed using information previously collected data device (for example, on the basis of data from previous use), or may be carried out with the use of information collected in the centre of the PTO other devices (of the same type and/or technical capabilities, the other type, or a heterogeneous group of devices). This information can be loaded into the device by the user (for example, by the application program or update), or may be communicated to the network device (automatically or otherwise).

In addition, network operators may prefer to instead continue providing services to mobile devices with continuously declining quality and a corresponding decline in the satisfaction of the user device proactively switched on operator with higher quality services. For example, the operator in the area with known low signal level may prefer to perform handover without breaking the connection to the network operator, because, despite the transfer of services to another operator, maintaining an appropriate quality of communication is more preferable than continuing unstable, interrupted communication, which may adversely affect the reputation of the operator A. In some cases, the user may not even know about any handover, and it will raise the reputation of the operator And despite the fact that the service was not provided to them.

At optional step 403, the wireless communication builds a list of available client access controls. In one embodiment, the list is based on stored in client media access control. In yet another embodiment, the list also includes client access controls are stored in another location. For example, in accordance with the prior patent application U.S. No. 61/407,861 "MANAGEMENT SYSTEMS FOR MULTIPLE ACCESS CONTROL ENTITIES", filed October 28, 2010, previously included in the present document, the client access controls can be stored in an external personal storage or network element.

In other embodiments of the invention, the list may include the client access controls, not yet assigned, but is available for assignment. For example, in one embodiment, the list may include the client access controls that are advertised for sale and download.

As shown, at step 404, the wireless device selects an available client access control. In one proposed in an example embodiment, the selection of available client access control is carried out manually by the user. For example, the wireless device may provide the user with a list of available client access controls via a graphical user interface.

In yet another embodiment, the select client access controls can be automatically mustache is a wireless communication device, which searches for available networks in the user location. In one embodiment, the select client access controls can be defined variable setting in the wireless communication (for example, specifies the network to be used by default). For example, if there are multiple available networks, the mobile device may select the network that provides the highest quality signal, the greater data transfer rate, lowest rate, etc. or (optimal) combination of several of the above parameters.

In yet another offer in an example embodiment, the wireless device may have multiple radio interfaces (for example, CDMA2000, GSM) and select a network for each available interface. In one embodiment, one wireless interface may select the network for voice services, and other wireless interface can select a network for data services. The basis for this network can also serve as indicators of the quality of communication, such as bandwidth, QoS or security of transmitted data (i.e. data protection can be selected one network, for transmission without protection - other network).

After you select the appropriate client access controls wireless communication retrieves data client tools control the population with access associated with the selected network. In one proposed in an example embodiment of the present invention the access data of the user (for example, the client access control, and other appropriate components, etc. can be retrieved from the secure element of the wireless communication devices (see, for example, simultaneously pending provisional patent application U.S. the same applicant No. 61/407,866 "METHODS AND APPARATUS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS"filed on October 28, 2010 G.I. previously incorporated herein by reference, which describes proposed as examples of devices and methods for the implementation of such a data retrieval user access protected element).

In another embodiment, the access data of the user corresponding to the selected network can be loaded into the wireless device (see, for example, simultaneously pending provisional patent application U.S. the same applicant No. 61/407,862 "METHODS AND APPARATUS FOR DELIVERING ELECTRONIC IDENTIFICATION COMPONENTS OVER A WIRELESS NETWORK", filed October 28, 2010, and previously incorporated herein by reference, which describes proposed as an example of how the implementation of such wireless data download user access).

Then, the client control means which access is loaded into the wireless device. In one proposed in an example embodiment, the data retrieved user access (for example, the client access control, and other appropriate components, and so on) are loaded into the software of the wireless communication devices. In one embodiment, the software of the wireless device determines whether the currently wireless interface required to connect to the network you want another session with the already confirmed access.

If the wireless interface is not locked by another session already confirmed access, the wireless device initiates the access control in accordance with step 406. If the wireless interface is busy, in one embodiment, to allow the connection to the network, the software of the wireless device performs a reset of the wireless interface to provide connectivity to the network. After a reset of the wireless interface of the wireless communication device initiates the access control in accordance with step 406. In other embodiments of the invention parallel to the current wireless connection is initialized to the second wireless interface, which ensures the maintenance of simultaneous connections and new to asna network and with a network of previous stay.

In some embodiments, implementation of the present invention, the wireless device may include one or more wireless interfaces. In one embodiment, the simultaneously active can be more than one wireless interface that provides the ability to simultaneously download different data access user. For example, after a restart of the user terminal can simultaneously load data user access to the wireless interface CDMA2000 for wireless interface GSM. In yet another embodiment, the user terminal may switch from one wireless interface to another wireless interface.

In step 406, the wireless device initiates the operation of access control. Upon successful confirmation, the wireless device may use the services of the selected wireless communication network. In some embodiments, implementation of the operation of the access control for mutual authentication in wireless communication network and the wireless communication Protocol is used like "challenge-response" (challenge-and-response). In one of these options, the operation of the access control includes the operation of authentication and key agreement (Authentication and Key Agreement, AKA, see figure 1 and corresponding description). In other what their options, the operation of the access control enables one-way authentication; for example, authentication is performed only for a cellular device or a cellular network. Such embodiments of the invention include, for example, using algorithms based on the confirmation of rights of access and voice encryption in cellular networks (Cellular Authentication and Voice Encryption, CAVE), although with equal success can be used by other algorithms.

Various aspects of the present invention significantly improves the quality and efficiency of services, and expand services. Thanks to the possibility of storing multiple data sets user access, users with one terminal can use the service contracts in the networks of several different operators. This possibility increases the value of mobile services to the user because, for example, in the case of foreign trips he can continue to use the link, just bought the access data of the user from the operator of the foreign network. In addition, since the data format of user access is not tied to a specific physical implementation of the card (UICC, R-UIM and the like), a user terminal with multiple radio interfaces (for example, GSM, CDMA etc), you can switch between networks with different radio access technology having a different intensity of the signal, with che who we may expand the area of communication services.

In one embodiment, the present invention provides for the profit or income from the Foundation for the ability for users to buy and get to your terminal user client controls access to the wireless network through the software store (for example, the online store or through an intermediary. For example, users have a wide access to wireless services without the need to purchase new physical card that contains the necessary data user access. Data providers access the user through the software store may charge a fee for the provision of temporary data access user (for example, in case of short-term overseas trips), which, however, would still be less than the amount that the user would pay for roaming or international call your local operator.

Offered as an example of a mobile device

Next, with reference to figure 5 describes proposed as an example of a user (client) mobile device 500 that can be used to implement the methods of the present invention.

Offered as an example of a mobile device shown in figure 5, represents the t of a wireless communication subsystem 502 processing, for example, a digital signal processor, microprocessor, programmable matrix of logic elements or several processor elements mounted on one or more boards. The processing subsystem may also include an internal cache memory. The processing subsystem connected to the subsystem 504 memory containing memory, which may include, for example, SRAM, flash memory and SDRAM. In the memory subsystem can be used one or more hardware direct memory access, are used to simplify data access, which is well known in the art. The memory subsystem stores executable computer commands that can be executed by the processing engine.

In one proposed in an example embodiment, the mobile device may include one or more wireless interfaces 506, configured to connect to one or more wireless networks. These wireless interfaces, using the appropriate antenna subsystem and modem subsystem can support different radio technologies such as GSM, CDMA, UMTS, LTE/LTE-A, WiMAX, WLAN, Bluetooth, etc.

Subsystem 508 UI contains any number of well-known input devices and output, including n the example, keyboard, touch screen (for example, responding to multiple simultaneous touches), the liquid crystal display tool, display backlight, loudspeaker, microphone, but not limited to the listed devices. It is clear, however, that in some designs, one or more of the aforementioned components can be excluded. For example, in embodiments of the invention, where the client device is made in the form of a PCMCIA card, a user interface may be absent (as in this case, the user interface provided by the device with which the card is connected physically and/or electrically).

In the illustrated embodiment, the mobile device includes a secure element 510, which contains and executes the program electronic universal microprocessor-based smart card eDICC. Map eUICC is arranged to store and provide access to multiple client access controls that are used to authenticate with the network operator. The memory subsystem has access to a secure element on request subsystem processing. In one proposed in an example embodiment, the secure element includes at least shared memory, configured to store one or bore the channels at the client access controls and corresponding add-ons.

The secure element may also include so-called secure microprocessor (SM) one of the types well known in the art of information security. In addition, in one embodiment, the secure element maintains a list of the stored client access controls. The list may include information about the current state of the stored client access controls. This information may include availability, completeness, suitability for use, failure information, previous, etc. the List, if necessary, can also be associated with the user interface than the user is given the choice of available client access controls.

In addition, the various proposed as a variant example of implementation include commands that, when executed detect roaming and in response analyze the possibility of choosing another client access controls. In at least one embodiment, the detection roaming is performed automatically. The specified detection may occur based on time and/or location (for example, using a GPS receiver, on the basis of correlation with the known location or device (for example, a base station and or WLAN access point), based on the receipt of a message from another network (for example, advertising messages, for example messages MOB_ADV WIMAX), etc).

In yet another embodiment, the detection roaming is triggered manually by the user. In addition, in other embodiments of the invention the analysis of the possibility of choice of the client access controls can be run without detection roaming; for example, a check can be triggered by user interaction, certain conditions of operation to perform (for example, call the number that is assigned by the user to the category of "service", "personal" or "foreign"), etc.

In other embodiments, provides commands to select and download the client access controls. For example, when the detection state of the roaming user terminal receives the access data of the user (for example, the client access control and other appropriate components to load into the software of the device.

In one embodiment, the wireless device terminates the current connection and establishes a new connection with a new home network. In other embodiments, implementation of the wireless device stores the current connection (which can be and roaming) and establishes a new connection is out. For example, in some embodiments, implementation of the present invention, the wireless device may include one or more wireless interfaces. In one of these options simultaneously active can be more than one wireless interface that provides the ability to simultaneously download different data access user. For example, after a restart of the user terminal can simultaneously load data user access to the wireless interface CDMA2000 for wireless interface GSM.

It is clear that despite the description of the terminal 500 of the user in the above embodiment, as, in essence, a mobile phone (such as a smartphone), the present invention is in no way limited to devices for telephony. For example, the above methods can be used directly in data transmission networks, for example, devices operating in 4G WiMAX or WLAN, for example, in handheld or portable computers.

Offered as an example of a network device

Next, with reference to Fig.6 describes the offer as an example, network device 600 that can be used to implement the methods of the present invention.

Offered as an example of a network device, while the data of figure 6, is the server 600, generally includes a network interface 602 to communicate with the communications network, a processor 604, the device 606 storage and server interface 608. Server interface 608 may include an interface for direct communication with the terminal 500 of the user, or may include an interface to access the Internet, through which can be simplified communication terminal 500 of the user. Advanced server interface 608 may include an interface for communication with cellular systems. In addition, may include other interfaces, and the above is just an example.

It is clear that despite the fact that the functions in the methods and devices of the above embodiments of the present invention for the most part designed to perform the subscriber device (for example, a user terminal), some or all of these functions can be passed to the network infrastructure. For example, in the above embodiment, with automatic start checking the possibility of choosing a different client access controls based on the detection roaming state, the specified detection may be performed by a network element (or the fact of detection can be reported in the specified element), for example, a server that has information about a user account, x is the new device, currently in use and the current/available client tools access. The network element may also communicate with a trusted provider (or reseller provider) client access devices (for example, eSIM), and when it detects a roaming state, or in other situations to initiate the download of the new eSIM (or activate already existing in the user terminal). For example, detecting the user terminal is transmitted to the honeycomb on the border of the coverage area of the network or already associated with such a hundredth, a network device may initiate the download and/or activate the new eSIM for another network coverage area which extends beyond the coverage area of the first network. In this approach, the user terminal can be made more simple, does not require inclusion of any logic or means of making decisions about changing eSIM.

The network element may be associated with the operator (for example, to be a part of the former home network or new home network), or be subordinate or independent service provider (for example, working in Internet service distribution and management eSIM, independent of any particular operator). The network element may also be controlled by the manufacturer of the terminal user (e.g., smartphone), which provides services to customers. To this end, the users so is E. can download to their device software applications, to simplify communication with network elements and rational choice modules eSIM when roaming.

The present invention also covers the different ways business relationship arising between operators when initiating change eSIM. For example, the operator X, having decided to switch one of the users, for which this operator is currently home on eSIM associated with the operator Y can inform the operator Y, and, having with him previously established agreement, to receive from him for the decision (which otherwise could be a switch on the operator Z) a fee or other compensation. In one such model, the operators X and Y provide each other intangible credits for the number of switches in their network, made by another operator for a certain period (for example, a month), then depending on whether the operator has initiated more switches, made the appropriate payment. Based on this description, specialists in this field will be obvious and other models of business relationships.

It is clear that despite the description of some aspects of the present invention as a particular sequence of steps in a certain way, these specific descriptions are only illustrative of the General methods of the present invention, and these days is the sequences of steps may be changed in accordance with a specific task. Under certain circumstances, some steps may be unnecessary or optional. At the same time, in the described embodiments of the invention may be added, some steps or functions, and the order of the steps may be changed. All such variations are considered within the scope of the present invention.

Although in the above detailed description, the novelty of the present invention is shown, described and recorded in the application of different versions of the invention, it is clear that the experts in the art without going beyond the scope of the present invention may be made of various exceptions, substitutions and changes in the form and details of the described devices or methods. The above description represents the best mode contemplated at the present embodiments of the invention. This description, being intended only to illustrate the General principles of the present invention, does not imply any limitation of the present invention. Scope of the present invention should be determined, taking into account the claims.

1. Wireless communication containing
one or more wireless interfaces, each of which is made with the possibility of connection with the wireless network;
protected node, performed with an option of storing multiple electronic modules subscriber identity (eSIM), each module eSIM mapped to at least one of the number of wireless networks;
processor; and
a storage device that communicates with the processor and containing executable computer commands that, when executed by the processor provide
automatically select an available network from the wireless network in response to specific conditions condition;
receiving from a trusted provider first module eSIM associated with the selected network, the first module eSIM is not stored in a protected site;
saving the first module eSIM in the protected site;
loading the first module eSIM; and
authentication in the selected network using the first module eSIM.

2. The device according to claim 1, wherein the protected node includes electronic universal microprocessor-based smart card (eUICC), each of the modules eSIM logically represents a physical universal subscriber identity module (USIM), and each of the number of one or more modules eSIM associated international mobile subscriber identity (IMSI); each of the number of wireless network includes a cellular network; and executable computer commands when executed by a processor enable the authentication request to a cellular network; and performing the authentication operation and according to the voting keys (AKA) in a cellular network on the base, at least part of the removed module (eSIM.

3. The device according to claim 2, characterized in that the cellular network is a GSM network (Global standard for mobile communications).

4. The device according to claim 2, characterized in that the cellular network is a UMTS network (Universal mobile telecommunications system).

5. The device according to claim 2, characterized in that the cellular network is a CDMA network 2000 (Multiple access with split code 2000).

6. The device according to claim 1, wherein the executable computer commands when executed by a processor enable a detection of available wireless network using at least one from among one or more wireless interfaces.

7. The device according to claim 1, characterized in that depending on the environment condition includes one or more dependent on environment conditions.

8. The device according to claim 7, characterized in that at least one among one or more dependent on environment conditions includes a condition related to a geographic location.

9. The device according to claim 7, characterized in that at least one among one or more dependent on environment conditions includes a condition associated with time.

10. The device according to claim 7, characterized in that at least one among one or more dependent on environment conditions includes a condition associated with the reception quality of the signal.

11. Method of providing access to a wireless connection when moving between different wireless networks, including:
selecting an available wireless network based on the specific environment conditions;
analysis of electronic modules subscriber identity (eSIM), stored in a secure site for finding module eSIM, providing access to the selected network;
the definition of what this module eSIM is not stored in a protected site;
and in response to this definition:
the reception module eSIM from a trusted provider;
the save module eSIM in the protected site; and
the module eSIM for authentication in the wireless network you selected.

12. The method according to claim 11, characterized in that it further includes detection of available wireless networks.

13. The method according to claim 11, characterized in that depending on the environment condition includes the cost of the operation.

14. The method according to claim 11, characterized in that depending on the situation, the condition includes the reception quality of the signal.

15. The method according to claim 11, characterized in that depending on the environment condition includes conditions associated with the geographic location.

16. The method according to claim 11, characterized in that depending on the environment condition includes conditions related to time.

17. The method according to claim 11, characterized in that the simultaneity is temporal perform module eSIM and another module eSIM.

18. The method according to 17, characterized in that the simultaneous execution of the module eSIM and another module eSIM occurs only during the operation of the analysis.

19. Permanent machine-readable storage medium that stores instructions, which when executed, their processor contained in the wireless device, ensure the implementation of wireless device:
select the available wireless network based on the specific environment conditions;
analysis of electronic modules subscriber identity (eSIM), stored in a secure site for finding module eSIM, providing access to the selected network;
determine what this module eSIM is not stored in a protected site;
receiving module eSIM from a trusted provider;
save the module eSIM in the protected site; and
module execution eSIM for authentication in the wireless network you selected.

20. The storage medium according to claim 19, characterized in that it further stores instructions that enable the detection wireless device available wireless networks.

21. The storage medium according to claim 19, characterized in that the module (eSIM and another module eSIM are performed simultaneously.

22. The information carrier according to item 21, wherein the executing module eSIM and another module eSIM occurs only during the operation of the analysis.