Device based credentials

Abstract

Methods and systems for providing a wireless communication service are disclosed. A device identifier for a wireless communication service can be used to generate a connection profile (e.g., communication profile, wide-area network profile, service profile, network profile, etc.) for the wireless communication service that requires credentials for authentication. The connection profile can be generated in response to a user accessing or signing up for the wireless communication service. The connection profile can comprise a username that includes and/or mirrors the device identifier and a password generated by inputting the device identifier into a predefined function. The connection profile also can comprise an authentication identifier. A service provider applies a specific type of authentication for devices that provide the authentication identifier as part of an authentication request message.

1 . A method comprising:
 receiving from a user device, a request for a connection profile;   sending, to the user device, the connection profile comprising a device-based identifier of the user device in a username field and a password, based on the device-based identifier, in a password field;   receiving a request to access a wireless communication service comprising the device-based identifier and the password;   authenticating the user device; and   sending, to the user device and based on authenticating the user device, a message indicating the user device is authorized to access the wireless communication service via the connection profile.   
     
     
         2 . The method of  claim 1 , wherein the request for the connection profile comprises the device-based identifier of the user device. 
     
     
         3 . The method of  claim 1 , wherein the request to access the wireless communication service further comprises an extensible authentication protocol tunneled transport layer security request having an inner identifier and an outer identifier, wherein the inner identifier comprises the device-based identifier and the outer identifier comprises an authentication identifier. 
     
     
         4 . The method of  claim 1 , further comprising generating, based on inputting the device-based identifier into a predefined function, the password. 
     
     
         5 . The method of  claim 1 , further comprising:
 inputting the device-based identifier into a predefined function; and   determining that a result of inputting the device-based identifier into the predefined function matches the password.   
     
     
         6 . The method of  claim 1 , wherein the device-based identifier comprises one or more of an international mobile equipment identifier (IMEI) or an international mobile subscriber identifier (IMSI), the method further comprising validating, based on the one or more of the IMEI or the IMSI, the request for the connection profile. 
     
     
         7 . The method of  claim 1 , further comprising:
 determining a type of authentication based on an authentication identifier; and   switching, based on the type of authentication, from a first authentication procedure to a second authentication procedure, wherein the first authentication procedure is based on user provided credentials and the second authentication procedure is based on generated credentials, wherein the generated credentials are based on the device-based identifier.   
     
     
         8 . A method comprising:
 receiving a device-based identifier associated with a user device;   generating, based on the device-based identifier, a connection profile;   sending, to the user device, the connection profile;   receiving, from the user device, an authentication request for accessing a wireless communication service, wherein the authentication request comprises the device-based identifier from a username field and a password based on the device-based identifier from a password field; and   sending, to the user device, an authorization to access the wireless communication service via the connection profile.   
     
     
         9 . The method of  claim 8 , further comprising storing the device-based identifier in a username field and the password based on the device-based identifier in the password field. 
     
     
         10 . The method of  claim 8 , further comprising determining, based on the device-based identifier, a service identifier for the wireless communication service, wherein the connection profile comprises an association of the service identifier with the username field and the password field. 
     
     
         11 . The method of  claim 8 , wherein the connection profile is sent to the user device based on a request from the user device. 
     
     
         12 . The method of  claim 8 , further comprising authenticating the user device based on a type of authentication indicated by a authentication identifier, wherein the type of authentication is associated with the wireless communication service. 
     
     
         13 . The method of  claim 8 , wherein sending the authorization to access the wireless communication service comprises sending, based on a result of inputting the device-based identifier into a predefined function matching the password and to the user device, the authorization to access the wireless communication service. 
     
     
         14 . The method of  claim 8 , wherein the password is based on a result of inputting the device-based identifier into a predefined function. 
     
     
         15 . A method comprising:
 receiving, by a user device, a connection profile comprising a device-based identifier of the user device in a username field and a password in a password field;   sending, based on the connection profile, an authentication request for accessing a wireless communication service;   receiving authorization to access the wireless communication service; and   accessing the wireless communication service.   
     
     
         16 . The method of  claim 15 , wherein the connection profile further comprises an authentication identifier and an encryption key. 
     
     
         17 . The method of  claim 15 , wherein the authentication request comprises an extensible authentication protocol tunneled transport layer security request having an inner identifier and an outer identifier, wherein the inner identifier comprises the device-based identifier and the outer identifier comprises an authentication identifier. 
     
     
         18 . The method of  claim 15 , further comprising sending a request for the connection profile, wherein the connection profile is received in response to validation of the request based on the device-based identifier. 
     
     
         19 . The method of  claim 15 , wherein the password comprises a result of inputting the device-based identifier into a predefined function. 
     
     
         20 . The method of  claim 15 , wherein the authentication request further comprises an authentication identifier indicating a type of authentication associated with the wireless communication service and one or more services that the user device is authorized to access via the wireless communication service.