Flexible Remote SIM Provisioning

Abstract

A method for generating, in a data generating server, a profile image for downloading the profile image from the profile server to an eUICC hosted on a device for the purpose of installing a profile corresponding to the profile image in the eUICC, the method comprising the steps of: Ga) providing, in the data generating server, at least one global identifier (GI) and at least a first functional identifier (FI1) and a second functional identifier (FI2) different from the first functional identifier (FI1); Gb) providing, in the data generating server, at least the global identifier (GI) and the first functional identifier (FI1); ), and a second profile image (P2) based on a global identifier (GI) and a second feature identifier (FI2); Gc) assigning at least the first and second profile images (P1, P2) to the same global identifier (GI); and Gd) storing at least the first and second profile images (P1, P2) as profile images assigned to the same global identifier (GI) for providing the at least first and second profile images (P1, P2) to a profile server for downloading to an eUICC.

Description

[Technical field]

[0001] The present invention relates to remote SIM provisioning, i.e. provisioning a Subscriber Identity Module, abbreviated SIM, profile to an eUICC from a remote server, for example according to GSMA specifications SGP.22 or SGP.02. [Background technology]

[0002] The GSMA specification [1] SGP.22 RSP Technical Specification version 2.2.2 (abbreviated SGP.22), 5 June 2020, in particular chapter 3.1 called "Remote Provisioning", describes remote SIM provisioning by downloading a profile to an embedded Universal Integrated Circuit Card (eUICC) hosted on a device. A device is understood to be a mobile device or a mobile terminal, i.e. a device or terminal that has the ability to communicate within a mobile network, i.e. a radio network. According to chapter 3.1.1 "Profile Download Initiation", upon an order from an end user at a mobile network operator (operator, MNO), a ready-made profile that is already stored in the profile provisioning server SM-DP+ is reserved. Then, according to chapter 3.1.2 "Common Mutual Authentication Procedure", a mutual authentication procedure takes place between the profile provisioning server SM-DP+ and the eUICC. Then, according to chapter 3.1.3 "Profile Download and Installation", the reserved profile is downloaded to the eUICC via the device and installed on the eUICC. In the SGP.22 scheme, the profile provisioning server is called SM-DP+.

[0003] Devices conforming to SGP.22 are in particular so-called consumer devices, such as, for example, smartphones, smart watches and tablet PCs with mobile network connectivity, and other computers with mobile network connectivity.

[0004] In document [1], SGP.22 chapter 2.4 "eUICC Architecture", especially in figure 3, the architecture of the eUICC is described. Each profile is contained in an individual ISD-P, the Issuer Security Domain Profile. Each ISD-P contains one profile. A profile has the main technical service task of authenticating the eUICC or / and its device or / and its end user to the mobile network with which the profile is associated. An ISD-P or a profile can contain additional elements such as applets and applications. The applets and applications can have service purposes other than authentication to the mobile network, for example payment services or ticketing services. In particular, Near Field Communication, NFC payment services, can be implemented by an NFC payment applet or application within a profile or ISD-P. Also, currently the applets and applications offered for downloading to the ISD-P are static and off-the-shelf. The profiles (or content in general) downloaded to the eUICC during a remote SIM provisioning session as described in [1] SGP.22 Chapter 3.1.3 “Profile Download and Installation” are downloaded to the eUICC in the form of a Bounded Profile Package, BPP, which is detailed in [1] SGP.22 Chapter 2.5.4 and in the GSMA specification [3] SGP.21, RSP Architecture, Version 2.2, 1 September 2017. The Bounded Profile Package contains a set of Tag Length Value, TLV commands for installation on the eUICC, in that order: (1) ISD-P and ISD-P configuration, (2) metadata, (3) profile protection keys, and (4) the actual profile payload in the form of a Protection Profile Package.

[0005] The GSMA specification [2] SGP.02, Remote Provisioning Architecture for Embedded UICC Technical Specification Version 4.1, 5 June 2020, has the objective to define a technical solution for remote provisioning and management of an embedded UICC (eUICC) in a machine-to-machine device, also referred to as an M2M device. According to [2] SGP.02, the download and installation of a profile from a profile server comprises the steps of creating an ISD-P, establishing a key, and downloading and installing the profile.

[0006] The profile data of a profile comprises some individual data that is unique for each profile, for example the International Mobile Subscriber Identity number IMSI, the authentication key Ki and the profile number International Circuit Card IDentifier ICCID.

[0007] Other data is specific to the type of eUICC or device, such as for example the eUICC-ID or chip hardware number Equipment Identifier, EID (hardware identifier as identified in [2] SGP.02), or a part of the EID, such as for example a country indicator, or the International Mobile Equipment Identity number IMEI (mobile equipment = device = mobile terminal), or a part of the IMEI, such as for example a Type Allocation Code TAC indicating the type of device.

[0008] Currently, eUICCs and devices are partly standardized and generic, partly proprietary and unique. In particular, different eUICCs and different devices have different capabilities. For this reason, ready-made profiles, applets and applications are generally not fully compatible from the start with the target eUICC or / and device, i.e. the eUICC or / and device for which the profile, applet, application is intended. Instead, an adaptation to ready-made profiles, applets and applications is required once the eUICC type and device type or / and the respective target eUICC and the respective target device are known. Currently, such adaptation is often done after the download, by commands sent to the eUICC after the download and installation of the profile or applet or application. This adaptation may therefore incur additional traffic on the mobile network, additional provisioning time and possibly additional monetary costs.

[0009] Prior art documents [4] EP2910039B1 and [5] EP2802162A1 disclose solutions which seek to reduce download traffic from a profile server to the eUICC by providing the device or the eUICC, respectively, with profile templates, so that when a new profile is desired, only a partial profile is downloaded from the profile server.

[0010] Prior art document [6] DE102015001815A1 proposes to create a local copy of a profile in the eUICC and further to use the copy as a template for a new profile, thus reducing the download traffic from a profile server, which is also required for a new profile.

[0011] The above prior art references require that a profile or template is already present on the eUICC to enable download and implementation of a new profile with reduced mobile network traffic between the profile server and the set of devices and eUICCs.

[0012] Prior art document [7] US2020 / 0374686A1 discloses an embedded universal integrated circuit card (eUICC) profile management method for processing two profiles, comprising: acquiring first metadata of a first profile on the eUICC; sending a profile acquisition request to a profile server, the profile acquisition request comprising an eUICC identifier, a profile identifier, and an operating system update flag; receiving a second profile from the profile server; installing the second profile on the eUICC; and configuring second metadata of the second profile based on the first metadata.

[0013] Prior art document [8] EP3716656A1 discloses a profile generation and acquisition method. When a first subscriber identity module card in a terminal device is registered with a first service provider, when a user needs to subscribe to a second service provider, a second service provider server acquires from the first service provider server service registration information used by the first subscriber identity module card to access the first service provider network. The second service provider server generates a second profile for accessing the second service provider network based on the service registration information. The second profile may be generated based on the existing service registration information.

[0014] Prior art document [9] DE102019001840B3 discloses a method for providing a subscription profile to a subscriber identity module eUICC by means of a subscription server. The subscription server has knowledge of a first subscription profile installed in the subscriber identity module. The first subscription profile has a first profile file structure and has first profile data stored in the first profile file structure. At least a part of the second profile file structure of a second subscription profile is marked in the subscription server. The second subscription profile is transmitted to the subscriber identity module, and the marked part of the second subscription profile is transmitted without the second profile data. The missing profile data can be taken over from the first subscription profile already present in the eUICC.

[0015] Prior art document

[10] DE102015001815A1 discloses a subscriber identity module eUICC configured for generating a second profile using a file structure of a first profile already installed in the subscriber identity module as a template. A cloning function of the eUICC creates a copy of the profile file structure of the first subscription profile and stores it as the second profile file structure in the subscriber identity module such that a second profile file structure configured to receive the second profile data is generated.

[0016] Prior art document

[11] US2019 / 0208405A1 discloses an electronic device including an eUICC with a first profile installed, which requests a second profile to be installed on the eUICC from a first server based on the first profile, receives the second profile from a second server associated with the first server, and installs the received second profile on the eUICC. The second profile and the first profile include the same subscriber identity, e.g. the same telephone number MSISDN.

[0017] Prior art document

[12] US2021 / 0105609A1 discloses a method for enabling further use of a profile contained in a non-removable eUICC hosted on a terminal when replacing said terminal with a different terminal, where the profile is detached from the terminal, stored in an intermediate storage, e.g. a cloud server, and then transferred to the different terminal. Upon detaching the profile an activation code is generated which can be used to download the profile.

[0018] Prior art document

[13] US2019 / 0174299A1 discloses a method for enabling migration of a subscription from a source device to a destination device. The method comprises receiving a confirmation from the source device that a first profile associated with the subscription has been deleted at the source device and protecting a second profile associated with the subscription provisioned to an eUICC of the destination device. At least one of the subscription information is the same for the first and second profiles. An activation code for use in migration of the subscription to the destination device is used.

[0019] Prior art document

[14] US10187784B1 discloses a system and method for transferring a SIM profile between eUICC devices. Summary of the Invention [Problem to be solved by the invention]

[0020] The object of the present invention is to provide a flexible, adaptable and reliable profile generation and download method for generating and downloading profiles to an eUICC hosted on a device. Advantageously, the presented solution shall reduce the overall amount and / or volume of communication required between a profile server and an eUICC when downloading and installing a profile, reducing the time and / or costs and / or risk of failure due to communication interruptions.

[0021] It would also be desirable to be able to determine during the provisioning phase exactly what the device and / or eUICC needs depending on the device / eUICC capabilities and adapt the profiles to build a package that is perfectly suited to the device. [Means for solving the problem]

[0022] In particular, the object of the invention is achieved by an embedded system as set forth in any one of the independent claims, having the following characteristics: Embodiments of the invention are presented in the dependent claims.

[0023] The present invention provides a method in a data generating server for generating a profile image for downloading the profile image from a profile server to an eUICC hosted on a device for the purpose of installing a profile corresponding to the profile image in the eUICC.

[0024] This method is Ga) providing at least one global identifier and at least a first functional identifier and a second functional identifier different from the first functional identifier in a data generating server; Gb) generating, in the data generating server, at least a first profile image based on the global identifier and the first functional identifier, and a second profile image based on the global identifier and the second functional identifier; Gc) assigning at least a first and a second profile image to the same global identifier; Gd) storing at least the first and second profile images as profile images assigned to the same global identifier, in order to provide the at least first and second profile images to a profile server for downloading to the eUICC; Equipped with.

[0025] According to some embodiments of the invention, step Gb) comprises: Gb1) separately generating each of at least a first and a second profile image; or Gb2) (Gb2-1) generating a generic profile image based on at least two, i.e. at least a first and a second, feature identifiers, and (Gb2-2) subsequently extracting from the generic profile image at least a first feature identifier for generating the first profile image and a second feature identifier for generating the second profile image; or Gb3) (Gb3-1) generating an unspecified profile image not based on a functional identifier; (Gb3-2) then, in a data generating server, providing at least two functional identifiers, i.e. at least a first and a second functional identifier, separately from the unspecified profile; (Gb3-3) then generating at least a first profile image from the unspecified profile image and the separately provided first functional identifier, and generating a second profile image from the unspecified profile image and the separately provided second functional identifier. This will be carried out as one of the following:

[0026] According to some embodiments of the present invention, the at least one functional identifier comprises: G1) in combination with a profile generation order provided to the data generation server by the mobile network operator MNO server, or G2) Independent of the profile generation order The data is provided to the data generating server in one of the following ways.

[0027] The data generating server according to the present invention implements means for carrying out the above-mentioned method.

[0028] The data generating server may, in particular: Ga) means implemented in the data generating server for providing at least one global identifier and at least a first functional identifier and a second functional identifier different from the first functional identifier; Gb) in the data generating server, means implemented for generating at least a first profile image based on the global identifier and the first functional identifier, and a second profile image based on the global identifier and the second functional identifier; Gc) means implemented for assigning at least a first and a second profile image to the same global identifier; Gd) means implemented for storing at least the first and second profile images as profile images assigned to the same global identifier, for providing the at least first and second profile images to a profile server for downloading to the eUICC; Equipped with.

[0029] 1. A method for providing a profile image for downloading from a profile server to an eUICC hosted on a device for the purpose of installing a profile corresponding to the profile image in the eUICC, comprising: a) receiving, in a profile server, from a data generating server, at least two different profile images of the same profile, each having at least one same global identifier and at least one different functional identifier; b) receiving, at a profile server, a request from a device or an eUICC or a different server or a different device or a different eUICC to download a profile to an eUICC, the request including at least one functional requirement indicator and at least one global identifier; c) selecting, in the profile server, a profile image having a feature identifier that matches the received feature requirement indicator and providing it to the eUICC for download; A method for providing the above.

[0030] According to some embodiments of the invention, the method comprises in step c) detecting, at the profile server, either that the request is absent a capability identifier or that the request includes a capability identifier for which no profile image is provided, and accordingly selecting and providing a predefined default profile image to the eUICC for download.

[0031] According to some embodiments of the invention, the method comprises the further step of f) downloading the selected image to the eUICC and installing the profile on the eUICC from the downloaded profile image.

[0032] According to some embodiments of the invention, the method further comprises the step of preparing a profile package from the profile image and providing and / or downloading the profile image in the form of the profile package to the eUICC for downloading.

[0033] According to some embodiments of the present invention, the profile package described above comprises metadata, and the capability indicator is or is also included in the metadata.

[0034] A profile server according to the present invention implements means for carrying out the above-mentioned method.

[0035] The profile server may, in particular: a) means implemented to receive from a data generating server at least two different profile images of the same profile, each having at least one same global identifier and at least one different functional identifier; b) means implemented for receiving a request for downloading a profile to an eUICC from a device or an eUICC or a different server or a different device or a different eUICC, the request including at least one functional requirement indicator and at least one global identifier; c) means implemented to select a profile image having a functional identifier that matches the received functional requirement indicator and to provide the selected profile image to the eUICC for download; Equipped with.

[0036] The system includes a data generating server and a profile server.

[0037] At least one of the same global identifiers, e.g. International Mobile Subscriber Identity (IMSI), Authentication key Ki, Profile Number ICCID It may be any one or more of, or a part thereof.

[0038] At least one different functional identifier may be, for example eUICC chip hardware identifier EID, The device's International Mobile Equipment Identity (IMEI), Device Type Allocation Code TAC, An identifier for the network technology, which is one of the following group of network technologies: 2G technology, 3G technology, 4G technology, 5G technology, GSM, UMTS, CMDA, LTE; Device Capability Indicators according to GSMA SGP.22, UICC Capability Indicators according to GSMA SGP.22 It may be any one or more of, or a part thereof.

[0039] The following list is the device capabilities defined by the GSMA in SGP.22: The capability identifier may be or comprise any one or several of the device capability identifiers listed below. DeviceCapabilities ::= SEQUENCE: gsmSupportedRelease VersionType OPTIONAL, utranSupportedRelease VersionType OPTIONAL, cdma2000onexSupportedRelease VersionType OPTIONAL, cdma2000hrpdSupportedRelease VersionType OPTIONAL, cdma2000ehrpdSupportedRelease VersionType OPTIONAL, eutranEpcSupportedRelease VersionType OPTIONAL, contactlessSupportedRelease VersionType OPTIONAL, rspCrlSupportedVersion VersionType OPTIONAL, nrEpcSupportedRelease VersionType OPTIONAL, nr5gcSupportedRelease VersionType OPTIONAL, eutran5gcSupportedRelease VersionType OPTIONAL.

[0040] The capability identifier may be or may comprise any one or more of the UICC capabilities defined in the SGP.22 specification under section Annex H ASN.1 Definitions, UICCCapability Definitions.

[0041] Each profile image of the same profile represents a different variant of the same profile, where the different variants differ from each other by at least one feature that corresponds to at least one different feature identifier.

[0042] For example, two profile images having different EIDs, each of which includes a country identifier for a different country, correspond to corresponding different country profile variants.

[0043] According to some embodiments of the present invention, each profile image of the same profile, including at least the first profile image and the second profile image, is assigned the same profile number ICCID.

[0044] The data generation server and the profile server, according to some embodiments, Either an SGP.02SM-DP server and an SGP.02SM-SR server or a similar server infrastructure, or SGP.22SM-DP+ or similar server infrastructure It is.

[0045] In the present invention described above, the functional requirements indicator and the global identifier are used to determine which profile image to generate and / or download. In addition, the profile server configuration of the profile server where the profile images are downloaded to the eUICC also influences the selection of the profile image for profile generation and / or download. The profile server configuration can exercise control in the selection of which profile image is downloaded. What is downloaded can be different depending on how the profile server indicator is configured. The configuration that controls the profile server configuration indicators can be controlled at the profile type level. It is also possible to change the configuration of the indicators via API / UI. Thus, after changing such indicators, generation and download of profile image versions is possible that was not possible before the change.

[0046] Embodiments of the present invention will now be described with reference to the accompanying drawings, in which like parts are referred to by like reference numerals throughout and in which: [Brief description of the drawings]

[0047] [Figure 1]The schedule depicts up to two different profile images for each of the three users. [Diagram 2] Various form factors or eUICC. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0048] Fig. 1 shows a schedule representing up to two different profile image identifiers in the data generating server for each of three users. The schedule shows three identifiers U1, U2, U3 of three users of mobile devices registered in the data generating server. Each of the three users U1, U2, U3 is assigned a set of global identifiers GI that is unique for the respective user. In the example of Fig. 1, the set of unique global identifiers GI comprises a profile number ICCID and an authentication key Ki. A first user with an identifier U1 is assigned a global identifier set GI with a value GI1 and with a profile number ICCID with a value 123456 and an authentication key Ki with a value abcde. A second user with an identifier U2 is assigned a global identifier set GI with a value GI2 and with a profile number ICCID with a value 789012 and an authentication key Ki with a value fghij. A third user with identifier U3 is assigned a global identifier set GI with value GI3 and with profile number ICCID with value 345678 and authentication key Ki with value klmno. The indicated identifier values ​​are purely symbolic, real products will have a format in accordance with applicable standards, e.g. by GSMA and / or ETSI.

[0049] For a first user with identifier U1, a first profile image P1 (U1) and a second profile image P2 (U1) are generated in the data generating server, both of which are assigned the same profile number ICCID with value 123456 and the same authentication key Ki with value abcde. Alternatively, the two profiles are assigned only the same profile number ICCID with value 123456, but with different authentication keys Ki. The first profile image P1 (U1) and the second profile image P2 (U1) differ by different functional identifiers FI, which for the first profile image P1 (U1) have a value FI=FI1 and for the second profile image P2 (U1) have a value FI=FI2. The different functional identifiers FI may represent, for example, different mobile devices with different features or different operating systems, etc., or different eUICCs with different features, or a combination of such differences. Also, there may be more functional identifiers than the two functional identifiers FI1 and FI2 shown, namely FI3, FI4, etc.

[0050] Similarly, for a second user assigned a user identifier U2, two profiles PI(U2) and P2(U2) are generated in the data generating server and assigned the same profile number ICCID with value 789012 and the same authentication key Ki with value fghij (or the two profiles are assigned only the same profile number ICCID=789012 and have different authentication keys Ki). The first profile image PI(U2) and the second profile image P2(U2) differ by different functional identifiers FI, which for the first profile image PI(U2) have the value FI=FI1 and for the second profile image P2(U2) have the value FI=FI2.

[0051] For the third user, at this point only one profile image with global identifier set GI=GI3 having profile number ICCID=345678 and authentication key Ki=klmno exists on the data generating server, and later additional profile images with the same global identifier set GI=GI3 may be generated.

[0052] The set of global identifiers in Figure 1 must comprise at least one global identifier GI, but may comprise two, three, four or even more global identifiers. As an alternative to the example of Figure 1, for example only the profile number ICCID may be provided as a global identifier GI.

[0053] FIG. 2 shows eUICCs in different form factors: from left to right: a plug-in SIM card, an embedded UICC or eUICC in the proper sense, and an integrated UICC or iUICC that is integrated into the chipset of a mobile device.

[0054] The present invention is generally eUICC form factor independent and is applicable to eUICCs having any of the eUICC form factors shown in FIG. 2, and further to eUICCs having different form factors.

[0055] Mobile devices hosting the eUICC may similarly have a variety of form factors, for example, smartphones, smart watches, tablet PCs, in-vehicle M2M devices, etc. References [1] GSMA SGP.22 RSP Technical Specification Version 2.2.2, 5 June 2020 [2] SGP.02, Remote Provisioning Architecture for Embedded UICC Technical Specification Version 4.1, June 5, 2020 [3] GSMA SGP.21, RSP Architecture, Version 2.2, 1 September 2017 [4] EP2910039B1 [5] EP2802162A1 [6]DE102015001815A1 [7]US2020 / 0374686A1 [8]EP3716656A1 [9]DE102019001840B3

[10] DE102015001815A1

[11] US2019 / 0208405A1

[12] US2021 / 0105609A1

[13] US2019 / 0174299A1

[14] US10187784B1

Claims

1. 1. A method for generating a profile image in a data generating server for downloading the profile image from a profile server to an eUICC hosted on a device for the purpose of installing a profile corresponding to the profile image in the eUICC, comprising: Ga) providing, in said data generating server, at least one global identifier (GI) and at least a first functional identifier (FI1) and a second functional identifier (FI2) different from said first functional identifier (FI1); Gb) generating, in the data generating server, at least a first profile image (P1) based on the global identifier (GI) and the first functional identifier (FI1), and a second profile image (P2) based on the global identifier (GI) and the second functional identifier (FI2); Gc) assigning said at least first and second profile images (P1, P2) to the same global identifier (GI); Gd) storing said at least first and second profile images (P1, P2) as profile images assigned to said same global identifier (GI) in order to provide said at least first and second profile images (P1, P2) to said profile server for downloading to an eUICC; A method for providing the above.

2. Step Gb) is Gb1) generating each of said at least first and second profile images separately; or Gb2) (Gb2-1) generating a generic profile image based on at least two, i.e. at least the first and the second, functional identifiers, and (Gb2-2) subsequently extracting from the generic profile image at least the first functional identifier for generating the first profile image and the second functional identifier for generating the second profile image; or Gb3) (Gb3-1) generating a non-specific profile image based on no functional identifier; (Gb3-2) then, in the data generating server, providing at least two functional identifiers, i.e., at least the first and second functional identifiers, separately from the non-specific profile; (Gb3-3) then generating at least the first profile image from the non-specific profile image and the separately provided first functional identifier, and generating the second profile image from the non-specific profile image and the separately provided second functional identifier. The method of claim 1, wherein the method is carried out as any one of the following:

3. The at least one functional identifier comprises: G1) in combination with a profile generation order provided to said data generation server by a mobile network operator MNO server, or G2) Independent of the profile generation order The method according to claim 1 or 2, wherein the data generating server is provided with the information by one of the methods described above.

4. A data generating server implementing means for carrying out the method according to any one of claims 1 to 3, in particular Ga) means implemented in said data generating server for providing at least one global identifier and at least a first functional identifier and a second functional identifier different from said first functional identifier; Gb) means implemented in the data generating server for generating at least a first profile image based on the global identifier and the first functional identifier, and a second profile image based on the global identifier and the second functional identifier; Gc) means implemented for assigning said at least first and second profile images to the same global identifier; Gd) means implemented for storing the at least first and second profile images as profile images assigned to the same global identifier, for providing the at least first and second profile images to the profile server for downloading to an eUICC; A data generating server comprising:

5. 1. A method for providing a profile image for downloading from a profile server to an eUICC hosted on a device for the purpose of installing a profile corresponding to the profile image in the eUICC, comprising: a) receiving, in said profile server, from a data generating server, at least two different profile images of the same profile, each having at least one same global identifier and at least one different functional identifier; b) receiving, at the profile server, from the device or the eUICC or a different server or a different device or a different eUICC, a request to download a profile to the eUICC, the request including at least one functional requirement indicator and at least one global identifier; c) selecting, at the profile server, a profile image having a feature identifier matching the received feature requirement indicator and providing it to the eUICC for download; A method for providing the above.

6. 6. The method of claim 5, comprising, in step c), detecting, at the profile server, either an absence of a capability identifier in the request or the request including a capability identifier for which no profile image is provided, and accordingly selecting and providing a predefined default profile image to the eUICC for download.

7. The method of claim 5 or claim 6, further comprising the step of preparing a profile package from the profile image and providing and / or downloading the profile image in the form of the profile package to the eUICC for downloading.

8. The method of claim 7 , wherein the profile package comprises metadata, and the capability indicator is included in or on the metadata.

9. A profile server implementing means for carrying out the method according to any one of claims 5 to 8, a) means implemented to receive from said data generating server at least two different profile images of said same profile, each having at least one same global identifier and at least one different functional identifier; b) means implemented for receiving a request from said device or said eUICC or a different server or a different device or a different eUICC to download a profile to said eUICC, said request including at least one functional requirement indicator and at least one global identifier; c) means implemented to select a profile image having a capability identifier matching the received capability requirement indicators and provide the selected profile image to the eUICC for download; A profile server comprising:

10. A system comprising a data generating server according to claim 4 and a profile server according to claim 9.

11. The at least one identical global identifier may include: International Mobile Subscriber Identity (IMSI), Authentication key Ki, Profile Number ICCID The method or data generating server or profile server according to any one of claims 1 to 10, comprising any one or more of the following or part thereof:

12. The at least one distinct functional identifier comprises: A chip hardware identifier EID of the eUICC; the International Mobile Equipment Identity (IMEI) of said device, A type allocation code TAC of said device, an identifier for a network technology, which is one of the following group of network technologies: 2G technology, 3G technology, 4G technology, 5G technology, GSM, UMTS, CMDA, LTE; Device capability indicators according to GSMA SGP.22; UICC Capability Indicator according to GSMA SGP.22 The method or data generating server or profile server according to any one of claims 1 to 11, comprising any one or more of the following or part thereof:

13. A method or data generating server or profile server according to any of claims 1 to 12, wherein each profile image of the same profile represents a different variant of the same profile, the different variants differing from each other by the at least one feature corresponding to the at least one different feature identifier.

14. The method or data generating server or profile server according to any of claims 1 to 13, wherein each profile image of the same profile, including at least the first profile image and the second profile image, is assigned to the same profile number ICCID.

15. The data generating server and the profile server include: Either an SGP.02SM-DP server and an SGP.02SM-SR server or a similar server infrastructure, or SGP.22SM-DP+ or similar server infrastructure The method, data generating server or profile server according to any one of claims 1 to 14,

Images