METHODS AND APPARATUS FOR USER AUTHENTICATION AND HUMAN INTENT VERIFICATION IN MOBILE DEVICES

摘要

Methods and apparatus for user authentication and human intent verification of administrative operations for eSIMs of an eUICC included in a mobile device are disclosed. Certain administrative operations, such as import, modification, and/or export, of an eSIM and/or for an eUICCs firmware can require user authentication and/or human intent verification before execution of the administrative operations are performed or completed by the mobile device. A user of the mobile device provides information to link an external user account to an eSIM upon (or subsequent to) installation on the eUICC. User credentials, such as a user name and password, and/or information generated therefrom, can be used to authenticate the user with an external server. In response to successful user authentication, the administrative operations are performed. Human intent verification can also be performed in conjunction with user authentication to prevent malware from interfering with eSIM and/or eUICC functions of the mobile device.

主权项

1. A method for user authentication of administrative operations for an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device, the method comprising:
detecting initiation of an administrative operation for an electronic Subscriber Identity Module (eSIM) of the mobile device; obtaining user credentials; sending a message based on the user credentials to a server to verify user authorization to perform the administrative operation for the eSIM; and in response to receipt of an indication of user authorization from the server, performing the administrative operation for the eSIM.