Secure Profile Provisioning Architecture for Embedded UICC

Abstract

Embedded UICC (eUICC) is a new form of UICC, soldered into a device during manufacturing. On the contrary to the traditional UICC, the eUICC is not fully controlled by one specific MNO (Mobile Network Operator) since not removable physically from the device and not issued by the MNO. Thus, the profiles necessary for its operations should be provisioned remotely into the eUICC by new entity. For this remote provisioning, SM (Subscription Manager) is newly introduced by the standardization organization. However, this new ecosystem around eUICCs can cause tremendous security issues unless thorough consideration of security is accompanied during the standardization because the profiles usually include the security-sensitive information.In this paper, a novel secure profile provisioning architecture for eUICCs is proposed. Our architecture mainly defines the overall architecture of the secure profile provisioning for eUICCs.

ТЕХНОЛОГИЯ eSIM: ТЕКУЩЕЕ СОСТОЯНИЕ, АРХИТЕКТУРНЫЕ ПРИНЦИПЫ И ВОПРОСЫ БЕЗОПАСНОСТИ

“…Для установки безопасной связи с eUICC в SM-SR используется EIS (eUICC Information Set). EIS имеет ключевую информацию для доступа к eUICC (учетные данные управления платформой) и информацию о состоянии, к примеру, об активности каждого профиля [6,8,9]. Учетные данные управления платформой позволяют SM-SR получать безопасный доступ к eUICC и выполнять инструкции по переключению включенного профиля.…”