Management system for eSIM profiles, test system for a mobile network with such a management system, method for downloading an eSIM profile using such a management system or such a test system, and method for testing a mobile network including the download procedure.

Abstract

An eSIM profile management system (7) comprises an eUICC unit (9) and a central processing unit (CU, 10) at a central location (8). The eUICC unit (9) is capable of accommodating a large number of eUICC cards (11). The eUICC unit (9) communicates with a selectable download assistant module (12). The central processing unit (10) communicates with the eUICC unit (9) to manage it. The download assistant module (12) is configured to connect to a network component (16) of a mobile network (2) at a local location. The local location (5) is connected to the central location (8) via an internet connection (18). This results in a management system with advanced capabilities for managing eSIM profiles.The management system can be part of a test system which further comprises at least one test probe (26) which is in signal communication with the central unit (10) of the management system (7).

Description

[0001] The invention relates to a management system for eSIM profiles. Furthermore, the invention relates to a test system for a mobile network with such a management system, a method for downloading an eSIM profile from a mobile network operator to an eUICC card using such a management system or such a test system, and a method for testing a mobile network, including the download method.

[0002] Test systems for mobile networks are known, for example, from WO 2021 / 058 305 A1, US 11,843,960 B2, DE 100 11 986 A1, US 10,097,981 B1, US 7,831,249 B2, and WO 2004 / 049746 A1. US 2019 / 0075448 A1 discloses monitoring of embedded subscriber identification modules (SIMs). WO 2016 / 013827 A1 discloses a method and a device for providing an embedded SIM. WO 2017 / 013127 A1 discloses a method for detecting remote access to a universal integrated circuit board. US 2020 / 0 366 736 A1 discloses a test system for the mobile IoT network and a test method using such a test system. DE 10 2021 203 569 A1 discloses a test system and a test procedure for testing a broadband mobile network. EP 1 554 903 B1 discloses a message transmission system and a method for using SIM cards via remote access for cost-effective connections between fixed and mobile networks.

[0003] The purpose of the invention is to improve the capabilities of such a system for managing eSIM profiles or for testing mobile networks with remote eSIM provisioning.

[0004] This task is solved by an administration system having the features of claim 1 and by a test system having the features of claim 5.

[0005] The SIM card has been an integral part of mobile communication systems from the very beginning and is found in every mobile device that accesses a cellular network. It is also a crucial component of active test and measurement systems for cellular networks. Such systems typically employ hardware and software that spatially isolate the SIM card from the terminal device to facilitate distributed testing and simplify SIM card management. This combination of hardware and software is sometimes referred to as SIM multiplexing, while the hardware is sometimes called a SIM multiplexer. One such SIM multiplexer is known, for example, from US 8,688,167 B2.

[0006] The hardware component (SIM multiplexer) is used to accommodate multiple SIM cards in classic form factors, e.g. 2FF, 3FF, 4FF, while the software component serves to connect the terminal device to the SIM via IP connectivity, so that it appears to the terminal device as if the SIM card were physically present in the device.

[0007] In recent years, eSIMs have been introduced by device manufacturers and mobile network operators. The eSIM separates the SIM hardware from the SIM subscriber profile. eSIM-enabled devices allow users to download or change plans without having to physically replace the SIM card in the device. This process is standardized by the GSMA under the term Remote SIM Provisioning (RSP) and encompasses several standards, namely SGP.02 M2M, SGP.22 Consumer, and SGP.32 IoT, each with its own specific features.

[0008] The advent of eSIM necessitates changes to the methods used by active test systems to manage such eSIMs and utilize them for distributed testing with eSIM multiplexing. Furthermore, methods for testing the RSP process with eSIM multiplexing are required.

[0009] In particular, the management system and the test system can provide the following: • Components for receiving eUICCs and their respective profiles in a central location, referred to as the eSIM multiplexer or eUICC unit; • a method for downloading and managing eSIM profiles via a central module (software running on the same device as the eUICC) and / or a local download assistant module, i.e., LPA / IPAd (running on different devices and / or geographical locations relative to the location of the eUICC and / or the probe) to a target eUICC in the eSIM multiplexer; • a method for downloading and managing eSIM profiles to a target eUICC in the eSIM multiplexer with the ability to make download requests from different geographical locations from which the download is performed; • a method for testing the RSP process for consumer eSIMs (SGP.22) and IoT (SGP.32); • a method for testing mobile services at geographically distributed locations using eSIMs deployed at a central location (eSIM multiplexer); • a method for testing the RSP process in eUICCs with embedded IPAe.

[0010] The management system according to claim 1 enables the masking of a geolocation of the download assistant module at the central location. Consequently, the geolocation of the download assistant module 12, in particular the IPA / LPA and an optional VPN client module, as determined by the network component of the mobile network, in particular by an SM-DP+ module, appears as the location of the local site, e.g., the location of a local proxy server. Managing or testing local components of a mobile network located at the local site, in particular within a specific transmission area within the local site, is possible with core components located at the central location. In particular, the eUICC unit can be located at the central location.

[0011] The download module can be selected via a corresponding selection process in the management system. Such a selection process can be initiated by the eUICC unit. The management system, and in particular the central processing unit or the eUICC unit, can contain a selection module for carrying out such a selection process.

[0012] The download assistant module can work in conjunction with a VPN client module to establish a VPN connection between the management system and a local proxy server at the local site. In this case, the geographic location of the VPN client module at the central site can be masked by the local proxy server. Such a VPN connection can be established to tunnel traffic to network elements or components. These network elements or components may be operated by the mobile network operator.

[0013] All signal / data connections described here can be implemented as wireless connections. Such a signal / data connection can be an IP connection, which can be permanent or temporary. Such a signal / data connection can also be implemented as a VPN (Virtual Private Network) connection.

[0014] A user terminal according to claim 2 facilitates the operation of the management system. A user terminal does not necessarily have to be located in a central location.

[0015] Download assistant modules according to claims 3 or 4 have proven particularly advantageous. The respective download module can operate with or utilize a VPN client module as described above. Depending on the use case, the VPN client module can be implemented alongside the download assistant module, in particular an IoT profile assistant (IPA).

[0016] As previously mentioned, the management system can utilize a VPN connection. VPN connections with VPN clients and servers are used to change the visible geographic location of the IP traffic source. Routing traffic between a Local Profile Assistant (LPA) or an IoT Profile Assistant (IPAd / I-PAe) and the network elements involved in eSIM deployment via such a VPN can be used to change the visible location.

[0017] The advantages of a test system according to claim 5 correspond to those described above with reference to the management system. The at least one test probe of the test system can be located at the central site and / or at the local site. The test probe can, in particular, simulate / emulate a mobile device, including a smartphone or an IoT module. The test probe can simulate / emulate an M2M, consumer, or other mobile device.

[0018] A signal connection according to claim 6 facilitates test routines using the eSIM profile downloaded to specific eUICC cards received by the eUICC unit.

[0019] An embodiment according to claim 7 enables the establishment of a VPN connection directly between the test probe and at least one component located elsewhere, e.g., at the local site. This is particularly advantageous when the test probe is located at the central site.

[0020] Locations for test probes according to claims 8 and 9 have proven to be particularly advantageous in application-related matters.

[0021] The advantages of a method according to claim 10 correspond to those already discussed above, particularly with reference to the management system. By using such a download method, the geolocation of the download assistant module of the eUICC unit and / or the test probe and / or the eUICC card itself is masked by the local proxy server. A request for the eSIM profile can be made by providing information about the network component operated by the mobile network operator, e.g., an SM-DP+ address or an activation code, or via a QR code upload.

[0022] The established connection can be a VPN connection between a VPN client module of the management system and a local proxy server. The requested eSIM profile can be downloaded from an SM-DP+ module, an eSIM IoT Manager (eIM), or a Subscription Manager Discovery Service (SM-DS) of the mobile network.

[0023] A method according to claim 11 has proven particularly useful. Alternatively or additionally, a Local Profile Assistant (LPA) or an IoT Profile Assistant (IPA) can be used, optionally accompanied by a VPN client module. The counterpart, i.e., the network component operated by the mobile network operator, can be implemented at any mobile network operator's site in the form of a combination of one or more of the SM-DP+, SM-DS, and eIM modules.

[0024] The advantages of a test procedure according to claim 12 correspond to those discussed above, particularly with reference to the test system and the download procedure. The test procedure steps performed during such a test procedure include testing the download procedure and may furthermore include test steps regarding the quality of the data connection between the test probe and the mobile network. These test steps can be monitored during the test procedure. A result of such monitoring and optional analysis is recorded, in particular, as the at least one key parameter indicator.

[0025] Establishing a VPN connection according to claim 13 avoids the need to have the test probe at the local site, even in the case of locally specific mobile network requirements. The VPN connection can be established using a local proxy server. Such a local proxy server can be located at the mobile network site.

[0026] The eSIM profile is a personalized data record with associated software, i.e., data assigned to a specific user of an embedded universal integrated circuit card (eUICC). This software includes at least one subscriber profile for a mobile service. The test procedure can be used to test an RSP process. Such an RSP process can be used for consumer devices, such as smartphones, smartwatches, wearables, and / or for M2M (machine-to-machine) devices. The test procedure specifically verifies the connectivity and services of the mobile network. The eSIM profile request to the RSP platform can be made manually or automatically. A mobile network operator (MNO) can be the sender of the request. The RSP process can be initiated prior to the request.During the testing procedure, a previous working profile or a bootstrap profile originally installed on the eUICC can be deactivated, and the downloaded eSIM profile can be activated. Testing can be performed by monitoring for the occurrence of at least one failure criterion. Such failure criteria can be based on a timeout while connecting to the RSP platform and / or a timeout while connecting to the network and / or an expected structure of a request, a trigger, and / or a download and / or a timeout while reconnecting a device with the downloaded, updated eSIM profile.

[0027] The test probe can support a wide frequency spectrum on licensed bands, including 2G, 3G, 4G, 5G, and higher-generation radio frequencies for terrestrial and non-terrestrial use. The test probe can support cellular data connectivity, supplemental services, and SMSoNAS (SMS over NAS (Non-Access Stratum)) for 4G and 5G technologies. The test probe can support SMSoIP (SMS over Internet Protocol) for IMS (IP Multimedia Subsystem) technology. The test probe can be configured for communication with industrial IoT applications. One example of such an application is LTE-M (Long-Term Evolution for Machines). Another example is NB-IoT (Narrowband Internet of Things). The test probe can be configured for communication with at least one LPWAN (Low Power Wide Area Network) radio standard.

[0028] The test probe can be configured to test user-transaction-related verification criteria, i.e., to test the RSP verification process at the user level. During such a user-level test, the test probe can initiate quality assurance steps by checking quality parameters that can be defined by key performance indicators (KPIs). Such KPIs might include an access error rate, access time, a voice quality score (MOS), download start time, download availability rate, and so on. These quality parameters can be checked in real time by the test probe. In this respect, the test probe can be configured to emulate real-world user behavior of the smartphone and / or IoT device user.

[0029] Examples of consumer IoT devices include a tablet, a smartwatch, a portable computer, e.g., smart glasses, a home voice control system, a doorbell camera, a smart lock, a smart light switch, an air quality monitor, etc.

[0030] Embodiments of the invention are described below with reference to the accompanying drawings. These show: Fig. 1. Schematic representation of the main components of a test system for a mobile network with a management system for eSIM profiles; Fig. 2 in one to Fig. 1. A similar schematic representation shows another embodiment of the test system; and Fig. 3 in one to Fig. Figure 1 shows a similar schematic representation of an embodiment of the management system for eSIM profiles.

[0031] Fig. Figure 1 shows a test system 1 for a mobile network 2. The mobile network 2 has a large number of transmission stations 3, one of which is located in Fig. 1 is shown. This transmission station 3 is located over a specific transmission area 4 within a local site 5. The local site 5 can be a specific country, e.g., Germany, the USA, a specific US state, South Africa, or another local site corresponding to a local contract area of ​​a specific mobile network operator 6, e.g., T-Mobile, AT&T, Vodafone, ...

[0032] The test system 1 includes a management system 7 for eSIM profiles, which are under the control of the respective mobile network operator 6.

[0033] The management system comprises specific units at a central location 8, i.e., a base location controlled by a company that provides testing services. The central location 8 can, in particular, be the location of a test data center.

[0034] At this central location 8, the management system 7 has an eUICC unit 9 and a central processing unit (CU) 10. The eUICC unit 9 is capable of accommodating a large number of eUICC cards 11.

[0035] The eUICC unit 9 contains or is connected to a selectable Download Assistant module 12. Such a selectable Download Assistant module 12 can be a Local Profile Assistant (LPA) or, alternatively, an IoT Profile Assistant (IPA). Such a Download Assistant module 12 can be configured to work with a VPN client module. Such a VPN client module can be part of the Download Assistant module. The eUICC unit 9 is configured to allow the selection of the respective selectable Download Assistant module. This selection depends on the system configuration. To perform such a selection, the management system, and in particular the central processing unit or the eUICC unit, can contain a selection module.

[0036] In the embodiment according to Fig. 1 Such an LPA / IPA with optional VPN client module 17 is part of the eUICC unit 9 itself. Alternatively or additionally, such an LPA / IPA with optional VPN client module 17 can be part of a test probe 13 of the test system 1, which in the embodiment according to Fig. 1 is also located at the central location 8. In another variant, the LPA / IPA with optional VPN client module 17 can alternatively or additionally be part of the respective eUICC unit 11, as also in Fig. 1 is shown.

[0037] The central unit 10 is in signal / data communication with the eUICC unit 9 via a signal line 14 in order to manage this eUICC unit 9.

[0038] At the local site 5, the management system 7 can have a local proxy server 15 to establish a VPN connection to the respective VPN client module 17.

[0039] The mobile network operator 5 can operate a Subscription Manager Data Preparation plus (SM-DP+) module 16 and optionally an eSIM IoT Manager (eIM) and optionally a Subscription Manager Discovery Service (SM-DS). The SM-DP+ module 16 communicates with the local proxy server 15 via an IP (Internet Protocol) connection. One or more of the eIM, SM-DS, and SM-DP+ modules 16 are accessible from the local site 5 via the Internet Protocol.

[0040] Local site 5 is connected to central site 8 via an internet connection 18. This internet connection 18 can be established via the mobile network 2 and / or via LAN / WLAN.

[0041] In the embodiment according to Fig. Internet connection 18 establishes a connection between the local proxy server 15 and the test probe 13. Furthermore, the test probe 13 is connected to the eUICC unit 9 and the central processing unit 10 via internet connection 19.

[0042] The management system 7 also has a user terminal 20, which is connected to the central unit 10 via an internet connection 21. As in Fig. As shown in Figure 1, user terminal 20 does not have to be located at the central location 8. Of course, such a location for user terminal 20 within the central location 8 is possible.

[0043] The management system 7 enables a procedure for downloading an eSIM profile from the local mobile network operator 6 to the respective eUICC card 11, which is received by the eUICC unit 9. During such a download procedure, an eSIM profile is requested from the SM-DP+ module 16. This can be done by using a corresponding activation code or by uploading a QR code provided by the respective mobile network operator 6.

[0044] During the download process, an optional VPN connection is established between the VPN client module 17 and the local proxy server 15. The requested eSIM profile is then downloaded via the established VPN connection from the SM-DP+ module 16 or eIM via the LPA or alternatively IPA to a selected eUICC card 11, which is received by the eUICC unit 9.

[0045] The established VPN connection masks the geolocation of the LPA / IPA of the eUICC unit 9 and / or the test probe 13 and / or the eUICC map 11 via the local proxy server 15. Therefore, the geolocation of the respective VPN client module 17 at the central location 8 is not detectable by the SM-DP+ module 16.

[0046] The selectable download assistant module 12 of the eUICC unit 9, the test probe 13, or the eUICC card 11 can use an IoT profile assistant (IPA). This can be implemented as an IPAd and / or as an IPAe according to the SGP.32 standard (https: / / www.gsma.com / solutions-andimpact / technologies / esim / wp-content / uploads / 2023 / 05 / SGP.32-1.0.1.pdf). If an IPA is used, an eSIM (eSIM IoT Remote Manager) is present at the network operator's location, i.e., at the local site 5 of the broadcast area 4, which establishes a signal / data connection with the SMDP+ module 16 and / or the local proxy server 15.

[0047] The download procedure described above can be part of a procedure for testing the respective mobile network 2 using the test system 1. During such a test procedure, a suitable test probe is selected via which a requested eSIM profile is to be downloaded, e.g., test probe 13 from Fig. 1. Following this selection, the download procedure described above is performed, resulting in the assignment of the requested eSIM to the selected eUICC card 11, which is housed in the eUICC unit 9. Furthermore, selected connectivity functions of the test probe 13, which can simulate / emulate a smartphone or IoT device, can be tested. During the steps of this test procedure, at least one key performance indicator (KPI) is recorded. These recorded KPIs can be analyzed later during the test procedure.

[0048] During the test procedure, the VPN connection between the VPN client module 17 of the test probe 13 and the local proxy server can be established.

[0049] Fig. Figure 2 shows another embodiment of a test system 25 that can be used instead of test system 1. Components and functions already associated with Fig. The points described in section 1 will not be explained again in detail.

[0050] The test system 25 further comprises at least one test probe 26 at the local site 5. This test probe 26 at the local site is capable of connecting to a corresponding transmitter station 3 of the mobile network 2 within the transmission area 4.

[0051] The test probe 26 at the local site is connected to the central unit 10 via an IP (Internet Protocol) connection 27. This can be done via an IP connectivity access network, e.g. GPRS, EDGE, WLAN, DSL.

[0052] The test probe 26 at the local site offers another local testing option for the test system 25.

[0053] The probe 26 includes a local profile assistant (LPA) or, additionally, an IoT profile assistant (IPA). This probe 26, which can be part of the local site 5, downloads the profile to the respective eUICC card 11 in the eUICC unit 9. The probe 26 is instructed to do this by the central unit 10.

[0054] Fig. Figure 3 shows another embodiment of an administration system 30 that can be used instead of administration system 7. Components and functions already included in the Fig. 1 and Fig. The points described in section 2 will not be explained again in detail.

[0055] In management system 30, a VPN connection is established from the VPN client module 17 of the eUICC unit 9 to the local proxy server 15 via the internet connection 18. No test probe is present in management system 30 as part of this VPN connection.

[0056] Further details regarding the system procedures described above can be found in the following additional description: eSIMMUX (eUICC unit) - Recording and managing eUICC maps in one central location

[0057] The eUICC unit, or eSIMMUX 9, is a hardware component containing a configurable number of eUICC cards 11. An eSIM profile may or may not be installed on the eUICC cards 11. The eSIMMUX 9 can have two network connections, typically implemented as LAN or WLAN. One network connection is used for operations and maintenance (O&M), and a second network connection can be used for internet access. Internet access can also be provided via a proxy if the eSIMMUX 9 cannot connect directly to the internet. The proxy can be any network device capable of forwarding IP packets between the eSIMMUX 9 and the internet. The O&M interface is connected to the central unit 10, which is responsible for managing the eSIMMUX 9 and the eUICC cards 11. The central unit also manages the status of the eUICC cards 11 in the eSIMMUX 9.

[0058] The eSIMMUX 9 can include the LPA / IPA with optional VPN client module 17, which can be a Local Profile Assistant and / or IoT Profile Assistant (LPA / IPAd), a software component used to download and manage eSIM profiles. The LPA / IPAd uses the eSIMMUX 9's network connection with internet access to connect to an SM-DP+ module or eIM 16 and perform eSIM profile management operations, such as downloading, deleting, activating, or deactivating profiles.

[0059] The LPA / IPAd is managed from the central unit via the O&M interface of the eSIMMUX 9, using dedicated software and a user interface 20 or API. The software allows users to select an eUICC card 11 from the eSIMMUX 9, for example, based on the eUICC ID (EID), and specify the profile management operation to be performed along with the relevant parameters. In addition to the above description, the following profile management operations are possible: - Downloading the eSIM profile - the user selects an eUICC card 11 from the eSIMMUX 9 and, if required, enters an activation code in the form of a string or a QR code. A QR code scanner can be integrated as part of the user interface 20. The configuration options, i.e., the activation code, are sent to the LPA / IPAd in the eSIMMUX 9 via the O&M interface. The LPA / IPAd connects to the SM-DP+ module 16, which provides the eSIM profile associated with the activation code, or to the Subscription Manager Discovery Server (SM-DS), or to the standard SM-DP+ module 16, or the eSIM IoT Remote Manager (eIM), and performs a profile download. Optionally, the profile can also be activated directly after the download. The central unit updates the status of the eUICC. - List eSIM profiles - the user selects an eUICC card 11 from the eSIMMUX 9, which is identified by its EID, and receives an output of the eSIM profiles available on the eUICC card 11 and their status. - Activate eSIM profile - the user selects an eUICC card 11 from the eSIMMUX 9, identified by its EID, and also selects a profile from the eUICC card 11 for activation, identified by the profile's ICCID. The central unit updates the eUICC status. - Deactivate eSIM profile - the user selects an eUICC card 11 from the eSIMMUX 9, identified by its EID, and also selects a profile of the eUICC card 11 to be deactivated, identified by the profile's ICCID. The central unit updates the eUICC status. - Delete eSIM profile - the user selects an eUICC card 11 from the eSIMMUX 9, identified by its EID, and also selects a profile to be deleted from the eUICC card 11, identified by the profile's ICCID. The central unit updates the eUICC status.

[0060] The eSIMMUX 9 can be part of a distributed active test system, particularly as described above with regard to test systems 1 and 25. When part of such a system, the eSIMMUX 9's O&M interface is used to establish an IP connection from a remote test probe, such as test probe 13 and / or test probe 26, which emulates a user device (UE) for testing purposes. This IP connection facilitates data transmission between an eUICC card 11 of the eSIMMUX 9 and test probe 13 or 26. This enables test probe 13 or 26 to authenticate and establish a connection to the mobile network 2, even if the eUICC card 11 is not physically present at the test probe's location. Any eUICC card 11 from the eSIMMUX 9 can be selected for this purpose. Downloading and managing eSIM profiles in eSIMMUX with proxy (geographic location simulation)

[0061] The eSIMMUX 9 uses a network connection, such as LAN or WLAN, with internet access to download eSIM profiles from the SM-DP+ module 16 (possibly via other components like an SM-DS or eIM) or alternatively via an internet-connected proxy. This means that the download originates from the same IP address (location), regardless of which eSIM profile or SM-DP+ module 16 is being accessed. However, in some cases, downloading eSIM profiles may be restricted to a specific region or country. In such cases, the eSIMMUX 9 may include software that simulates the geographic location from which the download is performed. This software may be in the form of a VPN client module 17, and the eSIMMUX 9 with a VPN client module 17 can be referred to as an eSIMMUX 9 with a proxy.

[0062] When using a proxy, the VPN client installed on the eSIMMUX 9 can be configured to establish an IP connection to a server hosted at a different location than the physical location of the eSIMMUX 9. This server, to which the IP connection is established, is the local proxy server 15. Therefore, for the eIM / SM-DP+ / SM-DS, the eSIM profile download, which occurs via the LPA / IPAd on the eSIMMUX 9, appears to be performed from the location to which the VPN connects. Once the VPN client is connected, the eSIMMUX 9 can perform the same profile management operations as described in the previous section. Downloading and managing eSIM profiles in eSIMMUX with distributed LPA / IPAd in an active test system

[0063] When the eSIMMUX 9 is used as part of an active test system, the LPA / IPAd component can be installed on the distributed test probe 13, 26. In this case, the test probe 13, 26 is the location from which the eSIM profile is downloaded. With the LPA / IPAd installed on the test probe 13, 26, the eSIMMUX 9's O&M connection is used to establish an IP connection between the eUICC card 11 in the eSIMMUX 9 and the LPA / IPAd in the test probe 13, 26.

[0064] The test probe 13, 26 can be equipped with various connectivity interfaces, e.g., 5G, LTE, LAN, WLAN. These interfaces provide internet access through which the LPA / IPAd accesses the eIM / SM-DP+ / SM-DS module 16 and performs eSIM profile operations. The same operations as described in Section 2 can be performed by the eSIMMUX 9. Method for testing remote SIM provisioning for consumer devices using the eSIMMUX or distributed test probes with LPA / IPAd

[0065] If the eSIMMUX 9 is part of an active test system, an RSP (Remote SIM Provisioning) process can be tested with the eSIMMUX 9 and the components of the active test system 1, 25.

[0066] In particular, a procedure for testing SGP.22 and SGP.32 RSP using the eSIMMUX 9 and one or more distributed test probes 13, 26 is provided. This procedure has the advantage of decoupling the eUICC / eSIM from the test probe 13, 26 and the LPA / IPAd from the location of the test probe 13, 26 and the eUICC card 11. The solution leads to greater flexibility in the testing process and allows users of such test systems to manage and use the eSIMs independently of the locations of the test probes 13, 26.

[0067] The RSP process for SGP.22 consumers can be tested using a test sequence that reproduces the steps a user subscribes to this service from a mobile network operator 6 would take. Before the test can be performed, an eSIM profile must be available on the RSP platform and the user of the test system 1, 25 must have a QR code or activation code for the profile.

[0068] The test can be performed in two ways: 1. Using eSIMMUX 9 with or without a proxy, as described in the section “Downloading and managing eSIM profiles...with proxy...”. 2. Use of the eSIMMUX 9 and a distributed probe 13, 26 containing the LPA / IPAd, as described in section Downloading and managing eSIM profiles...with distributed LPA / IPAd...".

[0069] In both cases, the following steps can be performed to test the RSP process: - Selecting an eUICC card 11 from the eSIMMUX 9 - Selecting a test interface through which the eSIM profile download will be performed. - Configuring the activation code for downloading the eSIM profile or uploading a QR code

[0070] After the test sequence has been configured, the following actions are performed: - The LPA / IPAd authenticates and connects to an SM-DP+ module 16 via the ES9+ interface or an eIM. The address of the SM-DP+ module 16 can be extracted from the activation or QR code provided by the user. The profile identified by the activation code is downloaded and measurements can be recorded. Any errors registered during the download can be recorded. - The test sequence ends with three possible states: successful if the eSIM profile was downloaded correctly, failed if an error occurred during the process, or inconclusive if the result of the test cannot be determined.

[0071] The downloaded eSIM profile is available in eSIMMUX 9 on the eUICC card 11 that was selected during the check configuration. Further profile management operations can be performed using this eUICC card 11 / this eSIM profile.

[0072] The test sequence can generate the following KPIs: • StartImsi: reading the old IMSI (may not be present if an empty chipSIM is used) • provisionedImsi: the new IMSI through the provisioning test case • smdpPlusAddress: Address of the SM-DP+ server used. • profileDownloadStartTime: Time at which the profile download begins via ES9+. • profileDownloadEndTime: Time at which the profile download via ES9+ is completed. • deliveredNotificationTime: Time at which the message was sent to SM-DP+ (if applicable). • es9PlusSuccess: Indicates successful communication with the SM-DP+. • end2endSuccess: Shows the overall success of the deployment and activation process (if applicable) and notification (if applicable). • provisioningDuration: End-to-end duration of the entire process, i.e., the time between the first HTTP message to the SM-DP+ and the end of the download profile. • provisionedIccid: Unique identification code for the provided profile. • provisionedProfileName: Name of the downloaded profile. • provisionedServiceProviderName: Name of the service provider for the downloaded profile. • provisioned_SimCards_Country: derived from the IMSI • provisioned_SimCards_PLMN: derived from the IMSI

[0073] Additionally, the following results can be provided: • eSIM profiles on the eUICC in JSON • PCAPs (Packet Captures, see WO 2021 / 058 305 A1) should be recorded from the (decrypted) https traffic between LPA / IPAd and SM-DP+. • PCAPs should be recorded from the traffic between LPA / IPAd and eSIM - Decoded (if available) logs should be routed via the provisioning dialog. • LPA / IPAd client interaction protocol Method for testing mobile services at geographically distributed locations using eSIMs housed in a central location (eSIM multiplexer)

[0074] When the eSIMMUX 9 is part of an active test system 1, 25, it can be used for actively testing mobile services at geographically distributed locations using dedicated test probes and test sequences. In such a system, the eSIMMUX 9 can manage the eUICC maps 11 and eSIM profiles in a central location, enabling the separation between the test probe 13, 26 and the tariff (eSIM profile) used for the test sequence. The test probe 13, 26 behaves like a UE / mobile phone vis-à-vis the mobile network 2. This separation is particularly important in roaming scenarios, where a mobile service can be tested in different countries using the same eSIM profile without having to download the profile anew at each location.

[0075] The eSIMMUX 9 can be used to test any mobile service provided on the eSIM selected for testing. In this respect, the eSIMMUX 9 and the procedure for using the eUICC card 11 / eSIMs from the eSIMMUX 9 are independent of the service being tested.

[0076] The test sequence can be configured via a user interface or API. At the start of the test sequence, a user selects an eUICC card 11 from the eSIMMUX 9 to be used for the service test, e.g., data test, voice test, notification test. The eUICC card 11 must contain an active eSIM profile (plan) downloaded using the mechanisms described in the previous sections. The eSIMMUX 9's O&M interface is then used to establish an IP connection with the test probe 13, 26. The test probe 13, 26 can be located anywhere within the coverage area of ​​the mobile network operator 6 for which the service is being tested. Through this connection, the test probe 13, 26, which corresponds to a UE / mobile device, communicates with the eUICC card 11 located in the eSIMMUX 9 to perform the standardized authentication and network access procedures.After the test probe 13, 26 has authenticated itself to the mobile network 2, the mobile service test is performed, and KPIs and result files for the tested service are generated. At the end of the test sequence, the eUICC card 11 and the associated eSIM profile are released and made available for further test sequences with any test probe 13, 26 connected to the active test system 1, 25. Procedure for testing SGP.32 with IPAd (IPA implemented in software on test probe, smartphone, eSIMMUX or other test device) 1a) Test profile activation of a profile download initiated by the IPA from SM-DP+ module 16 with or an activation code o information retrieved from SM-DS via eIM / IPA o Standard SM-DP+ module of the eUICC card - The IPA sends a request to download the profile to the SM-DP+ module 16, possibly in an indirect request via the eIM. - The IPA forwards messages between eIM, SM-DP+ module 16 and eUICC card 11. - The IPA sends a request to activate the new profile to the eUICC card 11 - The test system 1, 25 monitors the output of the IPA and other components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure and error or information messages. 2a) Testing the profile download initiated by the eIM and the profile status management - A test probe 13, 26 triggers, for example via a smartphone app or APIs, an operational sequence that causes the eIM to send a signed eIM / eUICC packet to the IPA. - The IPA receives a command to retrieve messages and then forwards messages between eIM, SM-DP+ module 16 and eUICC card 11. - The eUICC card 11 in eSIMMUX 9 is supposed to check and execute the eIM / eUICC packets. - The test system 1, 25 monitors the output of the IPA and other components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure and error or information messages. - The system can verify whether the operation was successful by checking the presence and status of the profile on the eUICC card 11. 3a) Testing of the eIM-initiated eIM management and the eIM linkage with the eUICC card 11 - A probe 13, 26 triggers an operational sequence that causes the eIM to send a signed eUICC packet to the IPA. - The IPA receives a command to retrieve messages and then forwards the messages between eIM, SM-DP+ module 16 and eUICC. - The eUICC card 11 in eSIMMUX 9 checks and executes the eUICC package. - The test system monitors the output of the IPA and other components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure, and error or information messages. - The test system 1, 25 can verify whether the process was successful by listing the associated eIM and verifying the release of the test profile using procedures such as those described in 1a) and 2a). Testing SGP.32 in the case of IPAe (IPA as part of the eUICC) 1b) Test profile release of a profile download initiated by the IPAe from SM-DP+ module 16 with or an activation code o information retrieved from SM-DS via eIM / IPA o Standard SM-DP+ module of the eUICC card - A probe 13, 26 or a device gives the command to download a profile to the IPAe - The IPAe sends a request to download the profile to the SM-DP+ module 16, possibly in an indirect request via the eIM. - The IPAe on the eUICC card 11 forwards messages between eIM, SM-DP+ module 16 and eUICC card 11. - The IPAe sends a request to the eUICC to activate the new profile. - The test system 1, 25 monitors the output of the test probes, the modem chipset or the device components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure and error or information messages. 2b) Testing the profile download initiated by the eIM and the profile status management - A test probe 13, 26 triggers, for example via a smartphone app or APIs, an operational process that causes the eIM to send a signed eIM / eUICC packet to the IPAe. - Another test probe 13, 26, or the same test probe 13, 26, must interact with the eUICC either directly or via a modem chipset and ensure IP connectivity. It issues a command to the IPAe to connect to the eIM. - The IPAe on the eUICC card 11 forwards messages between eIM, SM-DP+ module 16 and eUICC card 11. - The test system 1, 25 monitors the output of the test probes, the modem chipset or the device components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure and error or information messages. - The test system 1, 25 can optionally verify whether the operation was successful by checking the presence and status of the profile on the eUICC card 11. 3b) Testing the eIM-initiated eIM management and the eIM connection with the eUICC card 11 - A probe 13, 26 triggers an operating sequence that causes the eIM to send a signed eUICC packet to the IPAe. - The IPAe forwards messages between eIM, SM-DP+ module 16 and eUICC card 11. - The eUICC card 11 in eSIMMUX 9 checks and executes the eUICC package. - The test system 1, 25 monitors the output of the IPAe and other components and extracts KPIs such as the time between requests and responses, the total duration of the process, success / failure and error or information messages. - The test system 1, 25 can optionally verify whether the operation was successful by listing the associated eIM and activating the test profile by using procedures as described in 1b) and 2b).

Claims

[1] A management system (7) for eSIM profiles - with, located at a central location (8) -- an eUICC unit (9) capable of accommodating a variety of eUICC cards (11), wherein the eUICC unit (9) is in signal communication with a selectable download assistant module (12), -- a central unit (CU, 10) that is connected to the eUICC unit (9) to manage the eUICC unit (9), - wherein the download assistant module (12) is configured to establish a connection to a network component (16) of a mobile network (2) at a local location, - wherein the local site (5) is connected to the central site (8) via an internet connection (18). [2] An administration system according to claim 1, comprising a user terminal (20) which is in signal communication (21) with the central unit (CU, 10). [3] An administration system according to claim 1 or 2, wherein the download assistant module (12) is part of the eUICC unit (9). [4] An administration system according to one of claims 1 to 2, wherein the download assistant module (12) is part of the eUICC card (11). [5] A test system (1; 25) for a mobile network (2) comprising a management system (7) according to any one of claims 1 to 4, further comprising at least one test probe (13; 26) which is in signal communication with the central unit (10) of the management system (7) and with the mobile network (2). [6] A test system according to claim 5, wherein the test probe (13; 26) is in signal communication with the eUICC unit (9). [7] A test system according to claim 5 or 6, wherein a VPN client module (17) is part of the test probe (13). [8] A test system according to any one of claims 5 to 7, wherein the test probe (13) is arranged at the central location (8). [9] A test system according to any one of claims 5 to 7, wherein a further test probe (26) is located at the local site (5). [10] A download method for downloading an eSIM profile from a mobile network operator (6) to an eUICC card (11) using a management system (7) according to any one of claims 1 to 4 or using a test system (1; 25) according to any one of claims 5 to 9, comprising the following steps: - Requesting an eSIM profile from a mobile network operator, - Selecting a Download Assistant module (12) from a variety of available Download Assistant modules, - Establishing a connection between the management system (7) and a network component (16) operated by the mobile network operator, - Downloading the requested eSIM profile via the established connection through the selected download assistant module from the network component (16) operated by the mobile network operator to a specific eUICC card (11) included in the eUICC unit (9). [11] A download method according to claim 10 using an IPA (IoT Profile Assistant) as a download assistant module. [12] A method for testing a mobile network (2) using the download method according to claim 10 or 11 and using the test system (1; 25) according to any one of claims 5 to 9, comprising the following steps: - Select at least one test probe (13, 26) on which the eSIM profile is to be used, - Performing the download procedure, - Capture at least one key performance indicator (KPI) during the steps of the test procedure. [13] A test method according to claim 12 using a test system according to claim 7, wherein during the download method a VPN connection is established between the VPN client module (17) of the test probe (13) and the local proxy (15) to tunnel the data traffic to network elements operated by the mobile network operator.

Images