A method of interpreting an authorization token is described herein. The service can receive an authorization token from a client device, and validate a signature of the authorization token. The service can identify an allowed function value associated at least part of an entitlement representation contained in a body of the authorization token. The service can convert the allowed function value to an allowed function bitmask that includes bits at a plurality of bit positions that are set to values indicating whether the subscriber element has attributes associated with each of the plurality of bit positions on a predefined attribute list. The service can determine whether the allowed function bitmask indicates that the subscriber element has one or more qualifying attributes that entitle a user of the client device to access the service.

A method and system of restoring a functionality of a mobile user device. A lock screen is displayed on the display of the user device. An international mobile subscriber identity (IMSI) of a subscriber identity module (SIM) card presently installed in the user device is determined. The IMSI is sent to a Remote Recovery Server (RRS). A message is received from the RRS indicating whether the IMSI is authorized for the user device and whether an account of the user device is replenished at least in part. Upon determining that the IMSI is authorized for the user device and the account of the user device is replenished at least in part, at least one function that was previously restricted is restored.

A method and system for least cost routing for mobile telephone calls between the United States and Mexico in such a way so that the call is separated into several call legs and the international portion or call leg is routed via a low-cost or no-cost route independently of the local call legs, essentially achieving an international call with local call rates. This uses a SIM card that automatically identifies any incoming or outgoing call and provides the ability to convert the call from an expensive international and/or roaming call to a local (free) call. Several slight variations are disclosed, and all embodiments have an integrated money transfer service that can be used with a very simple low-cost basic mobile phone using IVR, SMS and voice recognition, or can be accessed via the web or via a smartphone app.

A process for authorizing wireless service includes providing a generally rectangular flat form factor card having a first surface and opposing second surface. The process further includes providing a machine-readable activation code arranged on the first surface, wherein the machine-readable activation code is configured to authorize the wireless service when provided to a system associated with a wireless service provider, receiving the machine-readable activation code in a server, the machine-readable activation code being captured by a wireless device, and provisioning the wireless service to the wireless device from a wireless network when the machine-readable activation code is provided to the system associated with the wireless network.

Apparatuses, methods, and systems are provided for virtualizing a reprogrammable universal integrated circuit chip (UICC) in a connected device's operating system. In one embodiment, an integrated cellular modem in the connected device is configured to use a simple protocol to communicate with the reprogrammable UICC. The protocol may be implemented in a way that allows cellular modem vendors to easily support such functionality and allow original equipment manufacturers to upgrade connected devices already deployed in the field.

Apparatuses, methods, and systems are provided for configuring a SIM-less System-on-Chip (S2oC) with integrated reprogrammable cellular network connectivity. Digitally issued Subscriber Identity Module (SIM) cards may be digitally issued by a remote server and downloaded and managed by the S2oC. A virtual SIM card container may be packaged in the S2oC and hosts an identity manager used by a plurality of applications residing in the multi-core processor of the S2oC. A virtual modem with a custom communication protocol allows the multi-core processor applications to exchange data with the virtual SIM card container.

A transaction processing platform capable of facilitating the distribution to consumers of various types of prepaid products is disclosed. The transaction processing platform is configured to interface with one or more providers of such prepaid products in order to facilitate the procurement or activation of the products. The platform includes a conduit interface through which service request messages are received and respectively utilized to generate transaction requests for corresponding types of prepaid services. A supply interface arrangement, operatively coupled to the conduit interface, is configured to route a first of the transaction requests through a first supply interface associated with a first type of prepaid service. The supply interface arrangement also routes a second transaction request through a second supply interface associated with a second type of prepaid service. The platform is also configured to provide supplier response information received through the supply interfaces to the conduit interface.

Asynchronous and/or synchronous zero charge telephony protocol systems and methods may include an asynchronous signaling switch and/or a call duration time quota from a synchronous charging onset to place and complete a call. A first device call request is received with a second device mobile address. The asynchronous systems include instructions to automatically modify the mobile address with a routing prefix when the first device has insufficient balance or independent of balance, route to the asynchronous signaling switch based on an associated modified address trunk path, revert the modified call signal at the asynchronous signaling switch to the call signal, and deliver and automatically disconnect the call immediately when the call is completed. The synchronous systems include instructions to automatically set the call duration time quota upon insufficient balance, and deliver and automatically disconnect the call from the second user mobile device when the call is completed and the call duration time quota is exceeded.

Arrangements are provided for identifying a second fraudulent subscription replacing a first fraudulent subscription. A method is performed by a fraudulent subscription detection system. The method includes obtaining notification of the first fraudulent subscription having been identified in a SIM box. The method comprises obtaining historical network data of the first fraudulent subscription. The method com includes prises generating a model based on the historical network data. The method includes identifying the second fraudulent subscription replacing the first fraudulent subscription in the SIM box upon providing live network data as input to the model. The method includes providing an identification of the second fraudulent subscription to at least one of a subscription manager entity and a user interface of a Manual Analysis component.

A method of interpreting an authorization token is described herein. The service can receive an authorization token from a client device, and validate a signature of the authorization token. The service can identify an allowed function value associated at least part of an entitlement representation contained in a body of the authorization token. The service can convert the allowed function value to an allowed function bitmask that includes bits at a plurality of bit positions that are set to values indicating whether the subscriber element has attributes associated with each of the plurality of bit positions on a predefined attribute list. The service can determine whether the allowed function bitmask indicates that the subscriber element has one or more qualifying attributes that entitle a user of the client device to access the service.