BLINDED TOKEN DEVICE AUTHENTICATION

A mobile device performs authentication with blinded tokens and swaps its international mobile subscriber identity (IMSI) value. For authentication with blinded tokens, the mobile device generates a blinded token and provides it to a server to encrypt. To redeem the token, the mobile device unblinds the encrypted blinded token and provides it to the server along with a public key. To complete authentication, the mobile device receives, from the server, a nonce encrypted with the public key and decrypts the nonce with a private key. For swapping its IMSI value, the mobile device retrieves two eSIM profiles with corresponding IMSI values and configures the first of the two profiles as active. In response to a trigger, the mobile device changes the active profile from the first to the second, swaps the first IMSI value with a new IMSI value, and changes the active profile back to the first profile.