WO2009053918A2

WO2009053918A2 - Method and system for on demand provisioning in a mobile communication network

Info

Publication number: WO2009053918A2
Application number: PCT/IB2008/054367
Authority: WO
Inventors: Boutros Chakwie Obeid; Leago Stella Takalani; Tiisetso Nathan Moshate Moja
Original assignee: Cell C (Proprietary) Limited
Priority date: 2007-10-25
Filing date: 2008-10-23
Publication date: 2009-04-30
Also published as: WO2009053918A3

Abstract

A method for on demand provisioning of a SIM (Subscriber Identity Module) card on network elements within a mobile communication network (10) and an on demand provisioning system (26) is provided. A subscriber detection message including a SIM identifier associated with the SIM card is received with the SIM identifier being extracted from the subscriber detection message. The SIM identifier can be an International Mobile Subscriber Identity (IMSI) of the SIM card. From the SIM identifier, it is determined whether the SIM card is to be provisioned on at least one network element within the network. If the SIM card is to be provisioned, a mobile telephone number is associated with or assigned to the SIM card on the at least one network element within the mobile communication network (10).

Description

ON DEMAND PROVISIONING IN A MOBILE COMMUNICATION

NETWORK

BACKGROUND OF THE INVENTION

THIS invention relates to a system and method for on demand provisioning in a mobile communication network, in particular on demand provisioning of Subscriber Identity Modules (SIMs) cards allocated to prepaid or postpaid services in a mobile communication network.

Mobile network operators currently pre-provision SIM cards to be sold to prepaid, and in some instances, postpaid, users on various network elements in a mobile communication network, e.g., on the Home Location Register (HLR) or on a user account management module. During the pre- provisioning process, each SIM card is allocated a MSISDN (Mobile Subscriber Integrated Services Digital Network) number on the various network elements, which number is typically the telephone number of a prospective prepaid or postpaid mobile subscriber. Each SIM card is also allocated authentication data during pre-provisioning in order for the Authentication Centre (AUC) to generate authentication vectors, which allows for all communications between a mobile device and the mobile communication network to be encrypted and decrypted. Account data is also stored during pre-provisioning on a database associated with the user account management module, which data may include a tariff rate and account balance on the user account management module.

In general, pre-provisioned SIM cards are distributed through sales channels of a mobile network operator for re-sale by retailers as part of prepaid or postpaid SIM packs. As it may take extended periods of time for the retailers to sell these pre-provisioned SIM-cards to new prepaid or postpaid mobile subscribers, batches of pre-provisioned SIM cards may at any time be available on the market without generating revenue, but utilizing the network operator's resources. A problem that has been identified with pre-provisioning is that the network operator does not utilize telephone number ranges efficiently, as the various pre-provisioned SIM cards to be sold to potential prepaid or postpaid subscribers already have allocated MSISDN numbers which are pre-provisioned on network elements, thereby resulting in a significant discrepancy between the size of a subscriber base and unutilized SIM cards available for sale. This problem is further exacerbated as it may not be possible to reclaim pre-provisioned SIM cards for recycling due to the prevalence of informal distribution channels not linked to a mobile network operator, especially in developing countries.

It accordingly follows that the network systems of a particular mobile network operator may be dimensioned to cater for a large number of subscribers that are not active on the network, resulting in inefficient use of network capacity, but further resulting in high cost implications for the network operators.

It is an object of the present invention to address this problem. SUMMARY OF THE INVENTION

According to one aspect of the invention, there is provided a method for provisioning a SIM (Subscriber Identity Module) card on network elements within a mobile communication network, the method comprising:

receiving a subscriber detection message including a SIM identifier associated with the SIM card;

extracting the SIM identifier from the subscriber detection message;

determining, from the SIM identifier, whether the SlM card is to be provisioned on at least one network element within the network; and

if the SIM card is to be provisioned, associating with or assigning to the SIM card a mobile telephone number on the at least one network element within the mobile communication network.

Typically, the SIM identifier is an International Mobile Subscriber Identity (IMSI) of the SIM card.

The mobile telephone number is preferably a Mobile Station Integrated Services Digital Network (MSISDN) number.

Preferably, determining whether a SIM card associated with the SIM identifier is to be provisioned includes comparing the SIM identifier with data entries in a database and generating a provisioning response if one of the data entries indicates that the SIM card associated with the SIM identifier is to be provisioned.

A provisioning request may be transmitted to the database and the provisioning response, which may include a predefined product profile, may be received in response to the transmittai of the provisioning request. The predefined product profile may include an identified subscriber account profile, account balance and tariff plan, or the like.

Provisioning the SIM card may further include transmitting a provisioning instruction, which may include the predefined product profile, to a network element in the mobile telephone network, e.g., a user account management module, in order to provision the SIM card on the network element, e.g., in accordance with the retrieved predefined product profile.

Preferably, a provisioning confirmation is received once the provisioning of the SIM card in accordance with the retrieved predefined product profile on the network element has been completed.

In response to the provisioning confirmation, a message to welcome a subscriber may be transmitted to the mobile device carrying the provisioned SIM card.

Preferably, the method may include determining from the SIM identifier that the SiM card is to be provisioned on the HLR (Home Location Register) or an Authentication Centre (AUC) and generating authentication vectors which are transmitted to the mobile device in order for communications between the mobile communication device and the mobile communication network to be encrypted and decrypted.

The authentication proxy vectors may be generated from temporary authentication proxy data received as part of an authentication proxy message or as part of the provisioning response.

The method may also include, prior to associating with or assigning to the SIM card a mobile telephone number on the at least one network element within the mobile communication network:

determining an expiry date for a SIM card; if the SIM card has expired according to its expiry date, accessing a database comprising unallocated mobile telephone numbers, and associating with or assigning to the SIM card a mobile telephone number selected from this database.

The subscriber detection message may be generated in response to a mobile device carrying the SIM card being switched on. Alternatively, the subscriber detection message may be generated in response to the mobile device carrying the SIM card moving between cellular areas covered by different base stations in the mobile communication network. The subscriber detection message may also be generated when the mobile device carrying the SIM card connects to another mobile operator's network, e.g., during roaming.

According to another aspect of the invention, there is provided an on- demand provisioning system to provision a SIM (Subscriber Identity Module) card on network elements within a mobile communication network, the system comprising:

a communication module to receive a subscriber detection message including a SIM identifier associated with the SIM card;

an extraction module to extract the SIM identifier from the subscriber detection message;

a lookup module to determine, from the SIM identifier, whether the SIM card associated with the SIM identifier is to be provisioned on at least one network element within the network; and

a provisioning module configured to associate or assign a mobile telephone number to the SIM card on the at least one network element within the mobile communication network. The mobile telephone number is preferably a Mobile Station Integrated Services Digital Network (MSlSDN) number.

Preferably, the on-demand provisioning system has access to a database of data entries comprising SIM identifiers, the lookup module comparing the extracted SlM identifier with the data entries in order to determine whether a SIM card is to be provisioned on at least one network element within the mobile communication network.

The step of accessing the database may comprise the lookup module generating and sending a provisioning request to the database. In turn, the database may generate a positive provisioning response if one of the data entries indicates that the SIM identifier is to be provisioned on the at least one network element.

The positive provisioning response sent by the database may include data on a predefined product profile associated with the SIM identifier.

The on-demand provisioning system may .further comprise a provisioning module configured to generate and send a provisioning instruction to a network element, which instruction may include the data on the predefined product profile, in order to provision the SIM card on the network element in the mobile communication network.

Preferably, a provisioning confirmation is received from the network element by the provisioning module once the provisioning of the SIM card in accordance with the retrieved predefined product profile has been completed.

In response to the provisioning confirmation, a message to welcome the subscriber may be transmitted to the mobile device carrying the provisioned SIM card. Typically, the SIM identifier is an International Mobile Subscriber Identity (IMSI) of the SIM card.

The subscriber detection message may be generated in response to a mobile device carrying the SIM card being switched on. Alternatively, the subscriber detection message may be generated in response to the mobile device carrying the SIM card moving between cellular areas covered by different base stations. The subscriber detection message may also be generated when the mobile device carrying the SIM card connects to a mobile operator's network, e.g., during roaming.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a simplified diagrammatic illustration of a mobile communication network which employs an on-demand provisioning system in accordance with an example embodiment of the present invention;

Figure 2 shows a block diagram illustrating modules of an on-demand provisioning system, which on-demand provisioning system may form part of the network of Figure 1 , in accordance with an example embodiment;

Figures 3 is a block diagram illustrating the data architecture of information stored in a database in accordance with the example embodiment of Figure 1 ;

Figure 4 is a simplified flow diagram of an example of a method for provisioning a subscriber within a mobile communication network, in accordance with an example embodiment of the invention; Figures 5 and 6 are more detailed flow diagrams of steps of the method shown in Figure 4, in accordance with an example embodiment of the invention; and

Figure 7 shows a diagrammatic representation of machine in the example form of a computer system within which a set of instructions, for causing the machine to perform any one or more of the methodologies discussed herein, may be executed.

DESCRIPTION OF PREFERRED EMBODIMENTS

A mobile communication network employing an on-demand provisioning system for provisioning subscriber identity module (SIM) cards on network elements within the mobile communication network is described. The on- demand provisioning system may be used in a method for provisioning SIM cards on network elements within a mobile communication network, in particular SIM cards associated with prepaid or certain postpaid services, carried or received by a mobile device. Postpaid services to which this method and system may particularly apply are those services similar to prepaid services, where a SIM card is sold as part of a SIM pack, the SIM card being pre-provisioned, but a subscriber contract associated with the SIM card having a predetermined period.

Provisioning may typically relate to the configuration of both hardware and software of network elements in a mobile communication network in order to activate telecommunication services for a specific customer or subscriber of a mobile communication network operator. For example, provisioning may include the creation of a subscriber on core network elements, e.g., associating or assigning a Mobile Station Integrated Services Digital Network (MSISDN) number to a subscriber or SIM card and setting up a user account on a user account management module. Additionally, provisioning may further include the setting up of services (e.g., GPRS, MMS and/or Instant Messaging) for a particular subscriber within the network, e.g., on a Home Location Register (HLR).

For prepaid and certain postpaid subscribers, these services may be defined through a product profile which is recorded in a database during a pre-allocation process. A SIM card, which is to be sold as part of a SIM pack, may, for example, be associated with a particular MSISDN number, a tariff plan, an initial account balance and with particular services during the pre-ailocation process and this information may typically be stored in the mentioned database. A new prepaid or postpaid subscriber will purchase a SIM pack in accordance with these pre-assigned number and services.

On activation of the SIM card within the mobile device, described in more detail in accordance with example embodiments below, on-demand provisioning, according to the pre-recorded and allocated data in the database, is performed on various network elements within the mobile communication network.

Although the present invention has been described with reference to specific example embodiments, it will be evident that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the invention. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.

Figure 1 shows, in a highly simplified schematic form, the architecture of part of a modem GSM mobile telephone network 10. The diagram does not purport to be comprehensive but merely illustrative.

In this GSM mobile telephone network 10, a mobile communication device 12 of a prepaid or postpaid subscriber 14 communicates with a base station 16 which in turn communicates with a mobile switching center (MSC) 18 having a visitor location register (VLR) 20 associated with it. In one example embodiment, the VLR 20 forms part of the MSC 18. The base station 16 comprises a base station controller (BSC) and a base transceiver station (BTS) with associated antenna (not shown).

The VLR 20 of the MSC 18, as well as other VLRs (not shown) associated with other MSCs, are connected to a home location register (HLR) 22. The HLR 22 is a central database containing data relating to subscribers who are authorized to use the network of the mobile network operator and the respective network settings of these subscribers, e.g., data on provisioned or pre-provisioned subscribers. In turn, the VLR 20 is a decentralised database which is updated with data from the HLR 22 relating to a particular subscriber when that subscriber's mobile device 12 connects to the relevant MSC 18.

An Authentication Centre (AUC) may, but need not, form part of the HLR. The AUC is configured to authenticate each provisioned or pre-provisioned SIM card that attempts to connect to the network, with the AUC generating authentication vectors including encryption keys that are to be transmitted to the mobile device 12 in order for communications between the mobile device 12 and the network to take place. The authentication vectors, also known as triplets, are generated based on at least one security key inherently associated with a SIM card.

The HLR 22 may further include an Equipment Identity Register (EIR) which keeps a list of mobile devices, according to the International Mobile Equipment Identity or IMEI of the mobile devices. It will be appreciated that the EIR need not form part of the HLR 22 and that it may accordingly be a separate device. This register may be used to determine whether a specific mobile device is a valid device or whether a device has been blacklisted due to theft.

The mobile communication device 12 is typically a mobile or cellular telephone, a smart phone or a Personal Digital Assistant (PDA). The mobile communication device 12 is adapted to receive a smart card, such as a subscriber identity module (SIM), also called a SIM card. Each SIM card has stored on its memory, during manufacture, an International Mobile Subscriber Identity (IMSI). This IMSI is the number that is typically sent from the mobile device 12 to the base station 16 and on to the MSC 18. The IMSI is further used to obtain additional information associated with the SIM card or the subscriber from the HLR 22 or from the locally copied information in the VLR 20, provided that the SIM card has already been provisioned or pre-provisioned on the HLR 22. It will accordingly be appreciated that the IMSI is the number used by network operators within mobile communication networks to identify a SIM card used in a mobile device 12 and a user of the device 14.

In contrast, the Mobile Station Integrated Services Digital Network (MSISDN) number (or telephone number) of the phone is the number, i.e. telephone number, used by mobile subscribers to identify, e.g., to call, a particular mobile device used by another mobile subscriber. This MSISDN number is assigned to a particular SlM card by a network operator during a provisioning process which includes the configuration of software and possibly hardware on network elements in a mobile communication network in order to activate telecommunication services provided by a mobile communication network operator.

Turning back to Figure 1, the MSC 18 is connected through a Signal Transfer Point (STP) 24 to the HLR 22 and to an on-demand provisioning system 26 (described in more detail according to Figure 2). The STP 24 performs a routing function by relaying messages between signaling end- points in a GSM network, e.g., the on-demand provisioning system 26, the HLR 22 and other network and telephony systems generally indicated by reference numeral 30. The other network and telephony systems may, for example, include network elements such as a user account management module which manages accounts associated with prepaid or postpaid users. The on-demand provisioning system 26 is configured to provision or effect the provisioning of SIM cards used by a new prepaid or postpaid subscriber 14 on network elements within the mobile communication network 10, on an on-demand basis. The on-demand provisioning system 26 has access to a database, shown as IMSI database 28, which may, in an example embodiment, comprise data entries which indicate the identification codes or numbers of SIM cards for which provisioning is to be performed on network elements. In one example embodiment, the IMSI database 28 forms part of the on-demand provisioning system 26. The IMSI database 28 is typically generated or populated during a pre-allocation process whereby each SIM identifier, i.e. the IMSI of each SIM card to be sold as a prepaid or postpaid SIM card, is associated with a particular MSISDN number. These IMSI and MSISDN numbers of SIM cards to be sold are typically stored in the IMSI database 28 without any configuration of hardware and/or software on network elements in the mobile communication network, i.e. without provisioning or pre-provisioning on network elements.

As mentioned, the on-demand provisioning system 26 may further be connected to other network and telephony systems 30 via the STP 24. The other network and telephony systems 30 may be configured to provide functionality to the mobile communication network.

It will be appreciated that the on-demand provisioning system 26 and the other network and telephony systems 30 may be communicatively coupled (e.g., via these interfaces) to each other and to various data sources, (e.g., the IMSI database 28 and the HLR 22) so as to allow information to be passed between the systems or so as to allow the systems to share and access common data. In the example embodiment described in accordance with Figures 1 and 2, the on-demand provisioning system 26 and other network and telephony systems 30 are shown as separate systems, which may be located at different facilities. However, it will be appreciated that in other embodiments, the on-demand provisioning system 26 may form part of any one of the other network and telephony systems 30.

Turning now to Figure 2, an example of the on-demand provisioning system 26 which may be employed in the network 10 of Figure 1 is shown.

The on-demand provisioning system 26 comprises a communication module 40 to receive messages from other network components, such as the MSC 18 or the STP 24. In an example embodiment, the on-demand provisioning system 26 operates as a proxy to other network components, and intercepts all messages that are destined for the HLR 22 (including the AUC and/or EIR which may be incorporated in the HLR 22) and the other network and telephony systems 30.

For example, the communication module 40 of the on-demand provisioning system 26 may receive a subscriber detection message which is generated by an up-link network element, such as the MSC 18 or VLR 20, whenever a mobile device 12 attempts to connect to the network 10.

In example embodiments, the subscriber detection message may be a MAP_CHECKJMEI message originating from the MSC 18 that is destined for the EIR in order to determine whether a mobile device which is trying to connect to the network is a valid device. The subscriber detection message may be generated in response to a mobile device carrying a SIM card being switched on or alternatively, the message may be generated in response to the mobile device carrying the SIM card moving between cellular areas covered by different base stations, i.e., handover between locations during transit.

In another example embodiment, the subscriber detection message may be a MAP_SEND_AUTHENTICATIONJNFO message which is generated when the mobile device carrying the SIM card connects to a mobile operator's network, e.g., while roaming. These subscriber detection messages comprise at (east a subscriber identity module (SIM) identifier associated with the SIM card, e.g., the International Mobile Subscriber Identity (IMSI) of the SIM card. In an example embodiment, the message comprises triplet information which is the MSISDN, IMSI and IMEI numbers, if available, but where the MSC 18 does not support the triplet feature, at least the IMSI is the identification number that forms part of the message.

The on-demand provisioning system 26 may further comprise an extraction module 42 to extract or parse the IMSl number from the subscriber detection message. Once extracted, the IMSI number is used by a lookup module 44 of the on-demand provisioning system 26 to determine whether the SIM card associated with the IMSI is to be provisioned on network elements. If it is determined that the SIM card is to be provisioned on any of the network elements, a provisioning module 48 is configured to provision or affect the provisioning of the SIM card on the relevant network elements in the mobile communication network 10.

In an example embodiment, the lookup module 44 determines whether the SIM card associated with the IMSI is to be provisioned on network elements by accessing the IMSI database 28 and comparing the IMSI extracted from the message to data entries in the IMSI database 28. The lookup module 44 may access the IMSI database 28 by sending a provisioning request to the IMSI database 28.

Figure 3 shows a block diagram illustrating an example data architecture 60 of data and information that may be stored and maintained on the IMSI database 28. The database 28 is maintained by the on-demand provisioning system 26, although a user interface may in addition be used to record new data, e.g., predefined product profiles, onto the database 28.

IMSI data 62 comprising the various IMSI numbers of SIM cards that need to be provisioned may be stored and maintained on the IMSl database 28. These IMSI numbers may be linked and/or associated with a provisioning status 64 which is used by the on-demand provisioning system 26 to determine whether a particular SIM card needs to be provisioned. In one example embodiment, the provisioning status 64 may be specific to particular network elements. For example, the IMSI database 28 may indicate that pre-provisioning of a SIM card has been completed on the HLR, but not on a user account management module.

The data entries in the database 28 may also include a pre-allocated mobile telephone number or MSISDN number (shown by reference numeral 66) which is to be associated or assigned to the SIM card on a particular network element during the on-demand provisioning of the SIM card. Typically, this MSISDN number may, but need not, be printed on the packaging, e.g., SIM pack, in which the SIM card is sold. This MSISDN number would allow a user to receive text messages or telephone calls should the associated SIM card only be pre-provisioned on the HLR.

An expiry date may additionally be associated with every MSISDN number in the IMSI database 28, this expiry date information also forming part of the data entries.

The data entries on the database 28 may further include specified or predefined product profiles 68 related to a particular SIM card. These product profiles may typically be selected by a production manager, with the SIM card being sold as part of a SIM pack which is associated with particular services. For example, the services may include MMS and GPRS functionality that is to be available on the subscriber's mobile device. Also, the product profiles may further include account information, such as a particular tariff plan, prepaid or postpaid account details and an initial account balance.

The IMSI database 28 may also include a list of unallocated mobile telephone numbers or MSISDN numbers 70 which may be accessed in order to associate with or assign a selected unallocated MSISDN number to a SIM card when the pre-allocated MSISDN number associated with the IMSl of a SlM card that has already expired.

Turning back to Figure 2, in the event that one of the data entries in the database 28 corresponds to the IMSI number and further indicates an unprovisioned status, a positive provisioning response is generated by the IMSI database 28 and sent back to the lookup module 44 of the on-demand provisioning system 26. In one example embodiment, a positive provisioning response would only be generated if the IMSI database 28 determines that the pre-allocated MSISDN number associated with the SlM card has not expired (according to the expiry date in the database 28). Alternatively, if the MSISDN number associated with the SIM card has expired, the IMSI database 28 may select a new MSISDN number from the list of unallocated MSISDN numbers in the database, for provisioning on the network elements.

It will be appreciated that the provisioning response may typically include a MSISDN number to be associated with the IMSI on various network elements (whether pre-allocated or selected), as well as data on the predefined product profile data which is to be used during the provisioning of the SIM card on network elements. For example, service information of the profile data may be used during the provisioning of the HLR, while account information may be used during the provisioning of a user account management module.

In addition, if the data entries in the database 28 indicate that the SIM card has not been provisioned on the HLR (and/or AUC), an additional message (e.g., an authentication proxy message containing authentication proxy data), or additional data forming part of the provisioning response (e.g., authentication proxy data), may be sent to the on-demand provisioning system 26. An authentication proxy module 46 uses the authentication proxy data to generate authentication vectors, which are transmitted to the mobile device 12, by the communication module 40, in order for communications between the mobile communication device 12 and the mobile communication network to be encrypted and decrypted. The authentication proxy module 46 accordingly acts as a proxy for the AUC of the mobile communication network prior to the SiM card being provisioned on the HLR and AUC.

In response to receiving a positive provisioning response, the provisioning module 48 provisions a subscriber on a network element by associating or assigning the mobile telephone number or MSISDN number forming part of the provisioning response to the SIM card of the subscriber on a particular network element. In addition, provisioning, as described in more detail below, may also be performed on the HLR or the user account management module.

In one example embodiment of the invention, the provisioning module 48 sends messages to other network elements of the mobile communication network 10, e.g., the HLR or the user account management module, in order to provision these network elements on the network, with relation to the SIM card and data associated with it on the IMSI database 28. For example, the provisioning module 48 .may be configured to generate a provisioning instruction which includes data on the predefined product profile obtained from the IMSI database 28. This data may be transmitted to the relevant other network and telephone systems 30 as well as the HLR 22 in order to provision the associated SIM card on the network elements, in accordance with the retrieved predefined profile.

Once the provisioning has been successfully completed on the various network elements, the particular network element on which provisioning has been completed may send a provisioning confirmation to the provisioning module 48 through the communication module 40. In response to receiving all of the provisioning confirmation(s), the provisioning module 48 updates the IMSI database 28, e.g., by changing a status associated with the relevant IMSI number, and/or the relevant network element, in the database 28. A message to welcome the new subscriber to the network may further be generated by the communication module 40 and may be transmitted to the mobile device 12 carrying the provisioned SIM card.

The on-demand provisioning system 26 may further be configured to maintain reliability during abnormal operations of network elements, e.g., should the on-demand provisioning system 26 be unable to communicate with the IMSI database 28. In this scenario, the on-demand provisioning system 26 would not receive a provisioning response from the IMSI database 28 and would accordingly be unable to retrieve a MSISDN number and predefined product profile from the IMSI database 28 thereby to perform provisioning for the particular subscriber.

In the event that no provisioning response is received, the communication module 40 of the on-demand provisioning system 26 generates a critical alarm message, which alarm message includes the IMSI number extracted from the original message. This critical alarm message may be transmitted to a monitoring component of the mobile network where the message is recorded in a designated log file. This message is used, once the IMSI database 28 has recovered, to complete the provisioning of the relevant subscribers.

In circumstances where there has been a failure of one of the external interfaces or devices/components necessary to provision a subscriber (e.g., other network and telephone systems 30, the HLR 22 etc), the on-demand provisioning system 26 will in turn not receive a provisioning confirmation, or will not receive a provisioning confirmation within an allowable time period.

The provisioning module 48 may be setup to retry the provisioning of network elements for a predetermined number of attempts. Once the provisioning module 48 has sent the provisioning instructions to the network elements to be provisioned for the predetermined number of attempts, without receiving the provisioning confirmation, the communication module 40 of the on-demand provisioning system 26 may generate another critical alarm message which may include the total count of failed provisioning attempts on the system. The provisioning module 48 may further create a file in an acceptable file format, the file comprising at least the profile of the subscriber which has been obtained from the IMSI database 28. This file is to be transmitted (e.g., FTP) as a scheduled job and may be used by an administrator to manually provision the subscribers.

If the off-line provisioning attempt is also not successful, the provisioning will be in a permanent failure status until the administrator manually provisions the number on the network for alarm management.

Turning to Figure 4, a simplified flow diagram 80 of an example of a method for provisioning a SIM card on network elements within a mobile communication network is shown. In an example embodiment, the on- demand provisioning system of Figures 1 and 2 may perform this method.

Block 82 shows that a database, e.g., IMSI database 28, is maintained in a mobile communication network. As mentioned, this database 28 may be created by a production manager manually importing or capturing data relating to SIM cards to be sold as part of a SIM pack, the SIM cards to be provisioned on an on-demand basis on network elements in the mobile communication network. The data contained in the IMSI database 28, may, in one example embodiment, have the architecture shown in Figure 3. The IMSI database 28 may further be maintained by the provisioning module 48 of the on-demand provisioning system 26. For example, whenever the provisioning module 48 receives a provisioning confirmation from a network element or node confirming that provisioning associated with a particular subscriber has been completed, the provisioning module 48 may adjust the data entries of the IMSI database 28, e.g., by changing the provisioning status.

As shown by block 84, the communication module 40 of the on-demand provisioning system 26 may receive a subscriber detection message, e.g., from the MSC 18 or the associated VLR 20, with the subscriber detection message including a subscriber identity module (SIM) identifier, such as the International Mobile Subscriber Identity (IMSI) of the SIM card, associated with a SIM card of the subscriber. The different types of subscriber detection messages that may be received by the communication module 40 have been described in detail above.

The extraction module 42 of the on-demand provisioning system 26 may, as shown by block 86, extract or parse the IMSI number from the message thereby to use this number in determining whether the particular SIM card is to be provisioned (shown by block 88).

If the lookup module 44 of the on-demand provisioning system 26 determines that a SIM card associated with the SIM identifier is not to be provisioned, the on-demand provisioning system 26 will allow the other network nodes to perform their normal functions, e.g., connecting calls, transmitting data or text messages, etc. This is shown by block 90.

However, if the lookup module 44 determines that the SIM card associated with the SIM identifier is to be provisioned, the on-demand provisioning system 26 is configured to effect this provisioning (as shown by block 92), e.g., an MSISDN number is associated with or assigned to the SIM identifier on the relevant network elements, and, in addition, services or account details associated with the SIM card in the IMSI database 28 is provisioned on the relevant network elements.

Figures 5 and 6 show more detailed flow diagrams of the step to determine whether provisioning is to be performed as well as the provisioning step of the method shown in Figure 4, in accordance with an example embodiment of the invention. Figure 5 shows the operational steps of the on-demand provisioning system 26 and the IMSI database 28, while Figure 6 shows the operational steps of the on-demand provisioning system 26 and other network elements or components (e.g., the HLR and user account management module). As shown by block 94, in one example embodiment of the invention, the lookup module 44 generates a provisioning request comprising the SIM identifier or IMSI extracted from the original message. This provisioning request is sent to the IMSI database 28 in order to determine whether provisioning of the associated SIM card is to be done on any network elements (shown by block 96).

At the IMSI database, the SIM identifier or IMSI is compared with data entries in the database 28 (block 98). As shown by block 100, if a data entry comprises the extracted SIM identifier or IMSI of the original message, it is further determined what the provisioning status of the SIM card is, and, if appropriate, whether an MSISDN associated with the SIM card has expired according to a SIM expiry date (not shown). It will be appreciated that MSISDN number need not have an expiry date, and that this is an optional feature.

As mentioned above, in the event that use is made of an expiry date for the MSISDN number the IMSI database 28 may select an unallocated MSISDN number from a list of available MSISDN numbers in order to provide network elements with an MSISDN number for provisioning on the network elements.

For example, in the event that the data entries in the IMSI database indicate a status that no provisioning is needed for the particular SIM card, the IMSI database 28 generates a negative provisioning response which is sent to the on-demand provisioning system 26 (block 102). The on- demand provisioning system 26 will then allow the other network elements to perform their normal functions, e.g., connecting calls, transmitting data or text messages, etc, as shown by block 90 in Figure 4. Similarly, in the event that the data entry indicates a status that provisioning is needed for the particular SIM card, the database 28 generates a positive provisioning response which is sent to the on-demand provisioning system 26 (block 104). If the IMSI database 28 cannot be accessed by the on-demand provisioning system 26, due to some failure, no provisioning response will be generated by the IMSI database. In response to no message, the on-demand provisioning system 26 may generate an alarm message which may be written to a designated log with the original subscriber IMSI information forming part of the log (shown by block 106).

Turning now to block 108 of Figure 6, the lookup module 44 of the on- demand provisioning system 26 receives the positive provisioning response, typically including provisioning information such as an MSlSDN number to be associated with the SIM card on network elements and predefined product profile information. The provisioning module 48 generates and sends a provisioning instruction, which typically includes the SIM identifier or IMSI, as well as MSISDN number and the predefined product profile data obtained from the IMSI database 28, to network elements in order to effect the provisioning the SIM card on the various network elements of the mobile telephone network (shown by block 110). For example, provisioning may be performed on the HLR, AUC and on a user account management module in the mobile communication network.

Although not indicated by the flow diagrams, in addition, if the data entries in the database 28 indicate that the SIM card has not been provisioned on the AUC and/or HLR, an additional message (e.g., an authentication proxy message containing authentication proxy data) may be generated by the on-demand provisioning system 26, using the information retrieved from the IMSI database 28 (should the IMSI database not form part of the on- demand provisioning system 26). The authentication proxy module 46 of the on-demand provisioning system 26 may use the authentication proxy data to generate authentication vectors, which vectors are transmitted to the mobile device 12 in order for communications between the mobile communication device 12 and the mobile communication network to be encrypted and decrypted. This step may be necessary when the SIM card is not provisioned on the HLR and/or AUC, with the authentication proxy module 46 accordingly acting as a proxy for the AUC of the mobile communication network.

In the event that provisioning is completed by the relevant network elements or nodes of the mobile communication network (shown by block 112), a provisioning confirmation may be generated by one of these components, which provisioning confirmation is received by the provisioning module 48 (shown by block 114). Once the provisioning confirmation is received by the provisioning module 48, a message to welcome the subscriber associated with the SIM card is generated by the communication module 40 and transmitted to the mobile device 12 carrying the provisioned SIM card (shown by block 116). Also, the provisioning module 48 is to update the records of the IMSI database (shown by block 118), once the provisioning confirmation is received.

No provisioning confirmation will be received in the event of a failure of external network devices or interfaces. In these circumstances, the provisioning module 48, as shown by block 120, determines how many attempts- have been made to provision the particular SIM card. Provided that the number of attempts is below a predetermined or predefined amount of attempts, the provisioning module 48 continues to generate and transmit provisioning requests to other network devices and nodes. However, once the number of attempts is equal or above the predefined amount, the provisioning module generates an alarm message and creates a file, as described above (block 122). This error file may be used by an administrator during the manual provisioning of a SlM card.

Figure 7 shows a diagrammatic representation of machine in the example form of a computer system 200 within which a set of instructions, for causing the machine to perform any one or more of the methodologies discussed herein, may be executed. In alternative embodiments, the machine operates as a standalone device or may be connected (e.g., networked) to other machines. In a networked deployment, the machine may operate in the capacity of a server or a client machine in server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment. The machine may be a personal computer (PC), a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine. Further, while only a single machine is illustrated, the term "machine" shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein.

The example computer system 200 includes a processor 202 (e.g., a central processing unit (CPU), a graphics processing unit (GPU) or both), a main memory 204 and a static memory 206, which communicate with each other via a bus 208. The computer system 200 may further include a video display unit 210 (e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT)). The computer system 200 also includes an alphanumeric input device 212 (e.g., a keyboard), a user interface (Ul) navigation device 214 (e.g., a mouse), a disk drive unit 216, a signal generation device 228 (e.g., a speaker) and a network interface device 220.

The disk drive unit 216 includes a machine-readable medium 222 on which is stored one or more sets of instructions and data structures (e.g., software 224) embodying or utilized by any one or more of the methodologies or functions described herein. The software 224 may also reside, completely or at least partially, within the main memory 204 and/or within the processor

202 during execution thereof by the computer system 200, the main memory 204 and the processor 202 also constituting machine-readable media.

The software 224 may further be transmitted or received over a network 226 via the network interface device 220 utilizing any one of a number of well-known transfer protocols (e.g., HTTP). While the machine-readable medium 222 is shown in an example embodiment to be a single medium, the term "machine-readable medium" should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term "machine-readable medium" shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the present disclosure, or that is capable of storing, encoding or carrying data structures utilized by or associated with such a set of instructions. The term "machine-readable medium" shall accordingly be taken to include, but not be limited to, solid-state memories, optical and magnetic media, and carrier wave signals.

Claims

CLAlIVlS

1. A method for provisioning a SiM (Subscriber Identity Module) card on network elements within a mobile communication network, the method comprising

extracting the SIM identifier from the subscriber detection message;

determining, from the SIM identifier, whether the SIM card is to be provisioned on at least one network element within the network; and

2. A method as claimed in claim 1, wherein the subscriber detection message is generated in response to a mobile device carrying the SIM card being switched on, in response to the mobile device carrying the SIM card moving between cellular areas covered by different base stations in the mobile communication network or when the mobile device carrying the SIM card connects to another mobile operator's network.

3. A method as claimed in any one of the preceding claims, wherein the SIM identifier is an International Mobile Subscriber Identity (IMSI) of the SIM card.

4. A method as claimed in any one of the preceding claims, wherein the mobile telephone number is a Mobile Station Integrated Services Digital Network (MSISDN) number.

5. A method as claimed in any one of the preceding claims, wherein determining whether a SIM card associated with the SIM identifier is to be provisioned includes comparing the SIM identifier with data entries in a database and generating a provisioning response if one of the data entries indicates that the SIM card associated with the SIM identifier is to be provisioned.

6. A method as claimed in claim 5, wherein determining whether a SIM card associated with the SIM identifier is to be provisioned includes transmitting a provisioning request to the database and receiving, in response to the transmittal of the provisioning request, the provisioning response which includes a predefined product profile.

7. A method as claimed in claim 6, further comprising, generating a critical alarm message which includes the SIM identifier extracted from the subscriber detection message if no provisioning response is received in response to the transmittal of the provisioning request.

8. A method as claimed in claim 7, wherein the critical alarm message is to be recorded in a log file and used once the database has been recovered.

9. A method as claimed in claim 6, wherein the predefined product profile includes an identified subscriber account profile, account balance and tariff plan, or the like.

10. A method as claimed in claim 6 or 9, wherein provisioning the SIM card includes transmitting a provisioning instruction, which includes the predefined product profile, to a network element in the mobile telephone network, in order to provision the SIM card on the network element, in accordance with the retrieved predefined product profile.

11. A method as claimed in claim 10, wherein the network element is a user account management module.

12. A method as claimed in claim 6 or any one of claims 9 to 11, wherein a provisioning confirmation is received once the provisioning of the SIM card in accordance with the retrieved predefined product profile on the network element has been completed.

13. A method as claimed in claim 5, comprising determining from the SIM identifier that the SIM card is to be provisioned on an HLR (Home Location Register) or an AUC (Authentication Centre) and generating authentication vectors which are transmitted to the mobile device in order for communications between the mobile communication device and the mobile communication network to be encrypted and decrypted.

14. A method as claimed in claim 13, wherein the authentication proxy vectors are generated from temporary authentication proxy data received as part of an authentication proxy message or as part of the provisioning response.

15. A method as claimed in claim 1 , comprising, prior to associating with or assigning to the SIM card a mobile telephone number on the at least one network element within the mobile communication network;

determining an expiry date for a SIM card; and

if the SIM card has expired according to its expiry date, accessing a database comprising unallocated mobile telephone numbers, and associating with or assigning to the SIM card a mobile telephone number selected from this database.

16. An on-demand provisioning system to provision a SIM (Subscriber Identity Module) card on network elements within a mobile communication network, the system comprising:

a communication module to receive a subscriber detection message including a SlM identifier associated with the SIM card;

a provisioning module configured to associate or assign a mobile telephone number to the SIM card on the at least one network element within the mobile communication network.

17. The system as claimed in claim 16, wherein the subscriber detection message is generated in response to a mobile device carrying the SIM card being switched on, in response to the mobile device carrying the SIM card moving between cellular areas covered by different base stations or when the mobile device carrying the SIM card connects to a mobile operator's network.

18. The system as claimed in claims 16 or 17, wherein the mobile telephone number is a Mobile Station Integrated Services Digital Network (MSISDN) number.

19. The system as claimed in any one of claims 16 to 18, wherein the SlM identifier is an International Mobile Subscriber Identity (IMSI) of the SIM card.

20. The system as claimed in any one of claims 16 to 19, wherein the system has access to a database of data entries comprising SIM identifiers, the lookup module comparing the extracted SIM identifier with the data entries in order to determine whether a SIM card is to be provisioned on at least one network element within the mobile communication network.

21. The system as claimed in claim 16 or 20, wherein the lookup module generates and sends a provisioning request to the database.

22. The system as claimed in claim 20 or 21 , wherein the database generates a positive provisioning response if one of the data entries indicates that the SIM identifier is to be provisioned on the at least one network element.

23. The system as claimed in claim 22, wherein the positive provisioning response sent by the database includes data on a predefined product profile associated with the SIM identifier.

24. The system as claimed in claims 23, comprising a provisioning module configured to generate and send a provisioning instruction to a network element, which instruction includes the data on the predefined product profile, in order to provision the SIM card on the network element in the mobile communication network.

25. The system as claimed in claim 24, wherein a provisioning confirmation is received from the network element by the provisioning module once the provisioning of the SIM card in accordance with the retrieved predefined product profile has been completed.