838722 - Payment: Allow support for multiple SIM card

Status: RESOLVED WONTFIX

(Marketplace Graveyard :: Payments/Refunds, enhancement, P3)

Description

[David Bialer [:dbialer]]

From David Lozano describing issue:
We're just discussing on how to optimize the authentication on the user for the payments flow. As you all know:

  *   when the user is in 3G, we can automatically authenticate him based on mobileId. Bango will receive an alias – the mobileid -, not the final user's phone number.
  *   When the user is in Wifi, Bango will send an SMS with a validation code to authenticate the user an get the clear-text phone number.

The question is that we're trying to optimize the above to streamline the process as much as possible, so we want to use cookies. Current approach is to use a cookie (set from Bango on the terminal) to remember previous authentications:

  *   if the cookie is set when accessing thru 3G, a mobile Id is remembered for later purchases
  *   If the cookie is set when accessing thru wifi, a mobile number is remembered for later purchases

The problem is that we have no way to detect when the user changes the SIM card. Do we want the user to put charges always to the phone number associated to the SIM being used in that specific moment? What if the SIM card happens to not belong to Telefónica, but other operator? Additionally, for cookies set when accessing by wifi, we can show the user "do you want to pay xxx with phone number 1234", so the user can opt to proceed or not, but we can't show the phone number for cookies set when accessing thru 3G. Therefor, the following looks reasonable:

  *   if we think that users changing the SIM "regularly" is going to be common case => we should not use cookies at all for 3G accesses and forget about optimizing that part. We could still use cookies for wifi.
  *   If we think that the above is going to be really strange, then we could use cookies also for 3G accesses. Our current view was on this second option (as we do similar things for other partners), with the compromise of having a cookie for 3G accesses that would expire after 24 hours and I also think if would be reasonable to have a different cookie that would have a longer expiration time for wifi.

Comment 1

[Andy McKay]

When a new SIM is inserted we log the user out of Bango, forcing them to log back in through persona, see bug 872751.

We pass through the persona id to Bango which they can use, see bug 880007.

A "choose which SIM to pay with" is going to need some UX help to figure out so assigning to Maureen to see if there's anything else we need to do here.

Comment 2

[Kumar McMillan [:kumar]]

(In reply to Andy McKay [:andym] from comment #1)
> 
> We pass through the persona id to Bango which they can use, see bug 880007.

This is not the correct bug link because it only applies to Seahorse. You meant bug 893050 which is a request to always link MOZ_USER_ID to billing identity. However, I don't think that applies to multiple SIM card support. All we really need is the logout functionality.

Comment 3

[Andy McKay]

Is there(In reply to Kumar McMillan [:kumar] from comment #2)
> However, I don't think that applies to multiple SIM card support.
> All we really need is the logout functionality.

So is there anything Maureen needs to do here? Looking for the next steps.

Comment 4

[Kumar McMillan [:kumar]]

(In reply to Andy McKay [:andym] from comment #3)
> So is there anything Maureen needs to do here? Looking for the next steps.

Personally, I don't think any UX change is needed for this. When a user swaps in a new SIM, they will be charged on that SIM. No need for a prompt. The user chose to put in the new SIM so why do we need to prompt them?

Swapping SIMs will work seamlessly today using mobile ID but on wifi they will have to re-auth after every SIM swap which could be annoying. If we want to fix the wifi case we'll need Bango to adjust their cookie logic to support multiple SIMs (which is possible using the unique ICC number).

Comment 5

[Maureen Hanratty]

Q: "Do we want the user to put charges always to the phone number associated to the SIM being used in that specific moment?"

A: Yes

I agree with Kumar, just charge to the SIM that is in the card without prompting.

Comment 6

[David Bialer [:dbialer]]

Added dependency on Bug 893050 for WiFi case - and this only applies to operator billing.

Adding a dependency on logout support (if not already there)

Comment 7

[David Bialer [:dbialer]]

(In reply to David Bialer [:dbialer] from comment #6)
> Added dependency on Bug 893050 for WiFi case - and this only applies to
> operator billing.
> 
> Adding a dependency on logout support (if not already there)

Referring to Comment 4 (we'll need Bango to adjust their cookie login to support multiple SIM) - what would need to happen.  Bug 917705 is now open for Firfox OS to support Multiple SIMs.

Comment 8

[Andy McKay]

Adding in the addition of the ICC info into the Bango cookie sounds valid from comment 4. Tom does that make sense to you?

Comment 9

[David Bialer [:dbialer]]

This sounds like it may need a privacy review?

Comment 10

[Jim]

Discussed with Bango Product Management and Development.

The proposed way forward on this would be:

* On SIM change, Mozilla OS to trap the change (even if change out and change back)
* Bango integration could be enhanced to support passing input of "SIM changed flag"
* On SIM changed flag = true, WiFi cookie will be invalidated
* On SIM changed flag = true, 3G authentication will be re-done
* Following payments (on wi fi or data) will always be on the "inserted SIM"

This behaviour best matches user expectation for payments on their phone bill.  With Silent SMS feature - repeated authentication due to SIM swap will be invisible in most cases.

In cases where SIM changed cannot be passed, the use of Persona ID will allow more control (i.e. mozilla preferences page on Bango ID to bill can be implemented).

Note: there is no Bango intent to implement "MultiSIM" billing support.

Comment 11

[Jim]

Pending feedback from Mozilla

Comment 12

[Ken Chang[:kenkai]]

It isn't a RIL feature.

Comment 13

[Steve Ruston]

There is no specific support for Multi sim on the Bango side.