SUCI protection schemes in esim devices

Abstract

An apparatus configured to process one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device comprising a list of supported Subscription Concealed Identifier (SUCI) protection schemes, determine the device or the eUICC of the device supports SUCI protection schemes based on the device information or the eUICC information and generate an embedded subscriber identity module (eSIM) profile comprising SUCI information associated with one of the SUCI protection schemes included in the list.

Description

Attorney Docket No . 30164 / 103002Ref . No . P71223WO1SUCI Protection Schemes in eSIM Devices Inventors : Hyewon Lee, Deepak Dash, Nitin Kuppelur, Stanley M Mayalil and Vivek G GuptaPriority / Incorporation By Reference

[0001] This application claims priority to U. S . Provisional Application Serial No . 63 / 772, 005 filed March 14, 2025, and entitled "SUCI Protection Schemes in eSIM Devices," the entirety of which is incorporated by reference herein.Background

[0002] Embedded subscriber identity modules (eSIMs) may include eSIM profiles that may include various data. This data may relate to telecommunications capabilities (e . g. , phone number information, user credential information, etc . ) and may also relate to information related to support contactless functionality (e . g. , payment, transit, access, identification, lock / key security, etc. ) . A Subscription Permanent Identifier (SUPI) is a unique identification assigned to a subscriber .However, the SUPI is a plain text identification that is not encrypted. A Subscription Concealed Identifier (SUCI ) has been defined as an encrypted identifier that includes the SUPI .However, there is no manner of handling the SUPI / SUCI in present standards that allow the encrypted and protected identifiers being used for eSIM devices .Summary

[0003] Some example embodiments are related to an apparatus having memory coupled to processing circuitry, wherein the processing circuitry is configured to process one of device information related to a device or embedded Universal IntegratedAttorney Docket No . 30164 / 103002Ref . No . P71223WO1Circuit Card ( eUICC) information related to an eUICC of the device comprising a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes , determine the device or the eUICC of the device supports SUCI protection schemes based on the device information or the eUICC information and generate an embedded subscriber identity module ( eSIM) profile comprising SUCI information associated with one of the SUCI protection schemes included in the list .

[0004] Other example embodiments are related to an apparatus having memory coupled to processing circuitry, wherein the processing circuitry is configured to generate, for transmission to a subscription manager data preparation+ ( SM-DP+ ) , a request for an embedded subscriber identity module (eSIM) profile comprising one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC and process , based on signaling from the SM-DP+ , a bound profile package (BPP) comprising the eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .

[0005] Still further example embodiments are related to an apparatus having memory coupled to processing circuitry, wherein the processing circuitry is configured to determine one of device information related to a device or embedded Universal Integrated Circuit Card ( eUICC) information related to an eUICC of the device, wherein the device information or the eUICCAttorney Docket No . 30164 / 103002Ref . No . P71223WO1information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC generate an indication of the one of the device information or the eUICC information and process , based on signaling from a subscription manager data preparation+ ( SM-DP+ ) , a bound profile package (BPP) comprising an eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .

[0006] Additional example embodiments are related to an apparatus having memory coupled to processing circuitry, wherein the processing circuitry is configured to determine one of device information related to a device or embedded Universal Integrated Circuit Card ( eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC and generate, for transmission to a subscription manager data preparation ( SM-DP+ ) , a request for an embedded subscriber identity module ( eSIM) profile comprising the one of the device information or eUICC information .Brief Description of the Drawings

[0007] Fig . 1 shows an example network arrangement according to various example embodiments .

[0008] Fig . 2 shows an example user equipment (UE ) according to various example embodiments .

[0009] Fig . 3 shows an example subscription manager data preparation ( SM-DP+ ) according to various example embodiments .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0010] Fig. 4 shows an example of device information related to an eligibility check for an eSIM profile according to various example embodiments .

[0011] Fig. 5 shows an example of Embedded Universal Integrated Circuit Card (eUICC) information related to an eligibility check for an eSIM profile according to various example embodiments .

[0012] Fig. 6 shows a first example signaling diagram for an eSIM profile eligibility check using the device information or the eUICC information according to various example embodiments .

[0013] Fig. 7 shows a second example signaling diagram for an eSIM profile eligibility check using the device information or the eUICC information according to various example embodiments .

[0014] Fig. 8 shows an example method of operations performed by an SM-DP+ for an eligibility check of an eSIM profile according to various example embodiments .Detailed Description

[0015] The example embodiments may be further understood with reference to the following description and the related appended drawings, wherein like elements are provided with the same reference numerals . The example embodiments relate to implementing a Subscription Concealed Identifier (SUCI ) protection scheme for embedded subscriber identity module (eSIM) profiles that are to be installed on an embedded Universal Integrated Circuit Card (eUICC) of a device .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0016] The example embodiments are described with regard to a user equipment (UE) . However, reference to a UE is merely provided for illustrative purposes . The example embodiments may be utilized with any electronic component that may include an eSIM (e . g. , eUICC) and that may establish a connection to a network and is configured with the hardware, software, and / or firmware to exchange information and data with thenetwork. Therefore, the UE as described herein is used to represent any electronic component .

[0017] The example embodiments are also described with reference to a 5G New Radio (NR) network. However, it should be understood that the example embodiments may also be implemented in other types of networks, including but not limited to LTE networks, future evolutions of the cellular protocol (e . g. , 5G-Advanced, 6G, 7G, etc. ) , or any other type of network. In the examples, the example UE receives eSIM profiles and other information using the 5G network. However, the UE may receive the eSIM profiles and other information via any wired or wireless network.

[0018] The example eSIMs profiles are described as including telecom information and / or contactless information, it should be understood that this is only example . The example embodiments may be applied to any type of information that is stored in an eSIM profile .

[0019] The example embodiments are also described with reference to a subscription manager data preparation! (SM-DP+) service that is a network element (typically a server) thatAttorney Docket No . 30164 / 103002Ref . No . P71223WO1prepares , stores, and protects carrier profiles ( including operator credentials ) . However, the nomenclature SM-DP+ is only an example and other entities may refer to a device, component or function performing the functionality of the SM-DP+ as described herein using different terminology.

[0020] The example embodiments are also described using various names for information elements ( IEs ) that convey information among the various components described herein . As will be described in greater detail below, this information may include, for example, eSIM profile eligibility check information . The names used herein for the IEs conveying this information are only examples and IEs having different names may be used to convey the same information .

[0021] The example embodiments are also described with reference to SUCI protection schemes . Currently the Third Generation Partnership ( 3GPP) defines two standardized types of SUCI protection schemes , Profile-A and Profile-B . However, it is anticipated that other types of SUCI protection schemes will be implemented in the future . The example embodiments provide a manner of implementing any additional standardized SUCI protection schemes defined by 3GPP or any other standards group without a significant change to the information exchanged between devices . In addition, mobile network operators (MNOs ) may also implement operator specific SUCI protection schemes that are not standardized . The example embodiments also provide a manner of implementing MNO specific SUCI protection schemes .

[0022] The example embodiments provide operations for signaling a network as to the SUCI protection schemes that areAttorney Docket No . 30164 / 103002Ref . No . P71223WO1supported by a device or an eUICC o f the device . The s ignal ing includes an identi f ication o f whether the device and / or eUICC support SUCI and a l ist o f the supported SUCI protection schemes in a pre ference order . The example embodiments also provide various s ignal ing schemes for the device to s ignal the SUCI support to a network . The example embodiments wi ll be described in greater detail below .

[0023] Fig . 1 shows an example network arrangement 100 according to various example embodiments . The example network arrangement 100 includes a UE 110 . Those ski l led in the art wi l l understand that the UE 110 may be any type of electronic component that is conf igured to communicate via a network, e . g . , mobile phones , tablet computers , des ktop computers , smartphones , phablets , embedded devices , wearables , Internet of Things ( loT ) devices ( including connected vehicles ) , etc . I t should al so be understood that an actual network arrangement may include any number o f UEs being used by any number o f users . Thus , the example o f one UE 110 i s merely provided for i l lustrative purposes .

[0024] The UE 110 may be configured to communicate with one or more networks . In the example o f the network arrangement 100 , the network with which the UE 110 may wireles s ly communicate i s a 5G NR radio acces s network ( RAN) 120 . However , the UE 110 may al so communicate with other types o f networks ( e . g . , 5G cloud RAN, a next generation RAN (NG-RAN) , a legacy cellular network, etc . ) and the UE 110 may also communicate with networks over a wired connection . With regard to the example embodiments , the UE 110 may establ ish a connection with the 5G NR RAN 120 .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1Therefore , the UE 110 may have a 5G NR chipset to communicate with the NR RAN 120 .

[0025] The 5G NR RAN 120 may be portions o f a cel lular network that may be deployed by a network carrier ( e . g . , Veri zon, AT &T , T-Mobile , etc . ) . The RAN 120 may include cel ls or base stations that are configured to send and receive traf f ic from UEs that are equipped with the appropriate cel lular chip set . In thi s example , the 5G NR RAN 120 includes the gNB 120A. However , re ference to a gNB i s merely provided for i l lustrative purposes , any appropriate base station or cel l may be deployed ( e . g . , Node Bs , eNodeBs , HeNBs , eNBs , gNBs , gNodeBs , macrocell s , microcel l s , small cell s , femtocell s , etc . ) .

[0026] Those s ki l led in the art wi ll understand that any as sociation procedure may be performed for the UE 110 to connect to the 5G NR RAN 120 . For example , as di scussed above , the 5G NR RAN 120 may be as sociated with a particular network carrier where the UE 110 and / or the user thereof has a contract and credential information ( e . g . , stored on a S IM card) . Upon detecting the presence o f the 5G NR RAN 120 , the UE 110 may transmit the corresponding credential information to associate with the 5G NR RAN 120 . More speci f ical ly, the UE 110 may as sociate with a speci f ic cel l ( e . g . , gNB 120A) .

[0027] The network arrangement 100 al so includes a cel lular core network 130 , the Internet 140 , an I P Multimedia Subsystem ( IMS ) 150 , and a network services backbone 160 . The cellular core network 130 manages the traf f ic that f lows between the cel lular network and the Internet 140 . The IMS 150 may be general ly described as an architecture for del ivering multimediaAttorney Docket No . 30164 / 103002Ref . No . P71223WO1services to the UE 110 using the IP protocol . The IMS 150 may communicate with the cellular core network 130 and the Internet 140 to provide the multimedia services to the UE 110. The network services backbone 160 is in communication either directly or indirectly with the Internet 140 and the cellular core network 130. The network services backbone 160 may be generally described as a set of components (e . g. , servers, network storage arrangements, etc. ) that implement a suite of services that may be used to extend the functionalities of the UE 110 in communication with the various networks .

[0028] In some example embodiments, the SM-DP+ may be included as part of the network services backbone 160. The SM-DP+ may be a network element (typically a server) that prepares, stores, and protects carrier profiles (including operator credentials) . The SM-DP+ being included in the network services backbone 160 is only an example and the SM-DP+ may be included as part of other network services or as a third party service that is connected to the network.

[0029] Fig. 2 shows an example UE 110 according to various example embodiments . The UE 110 will be described with regard to the network arrangement 100 of Fig. 1. The UE 110 may represent any electronic device and may include a processor 205, a memory arrangement 210, a display device 215, an input / output ( I / O) device 220, a transceiver 225, and other components 230. The other components 230 may include, for example, an audio input device, an audio output device, a battery that provides a limited power supply, a data acquisition device, ports to electrically connect the UE 110 to other electronic devices, sensors to detect conditions of the UE 110, etc . The UE 110 mayAttorney Docket No . 30164 / 103002Ref . No . P71223WO1include an Embedded Universal Integrated Circuit Card (eUICC) 240, which may be a hardware component embedded into the UE 110 and configured to store a number of carrier profiles, e . g. , eSIM profiles .

[0030] The processor 205 may be configured to execute a plurality of engines for the UE 110. For example, the engines may include an eSIM profile engine 235 for performing operations related to indicating support for SUCI protection schemes for eSIM profiles, including, but not limited to, generating device or eUICC information including a list of supported SUCI protection schemes, signaling of the device or eUICC information to an MNO or an SM-DP+ and installing an eSIM profile that uses a SUCI protection scheme . These and other operations will be described in greater detail below.

[0031] The above referenced engine being an application (e . g. , a program) executed by the processor 205 is only example . The functionality associated with the engines may also be represented as a separate incorporated component of the UE 110 or may be a modular component coupled to the UE 110, e . g. , an integrated circuit with or without firmware . For example, the integrated circuit may include input circuitry to receive signals and processing circuitry to process the signals and other information. The engines may also be embodied as one application or separate applications . In addition, in some UEs, the functionality described for the processor 205 is split among two or more processors such as a baseband processor and an applications processor. The example embodiments may be implemented in any of these or other configurations of a UE .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0032] The memory arrangement 210 may be a hardware component configured to store data related to operations performed by the UE 110. The display device 215 may be a hardware component configured to show data to a user while the I / O device 220 may be a hardware component that enables the user to enter inputs . The display device 215 and the I / O device 220 may be separate components or integrated together such as a touchscreen.

[0033] The transceiver 225 may be a hardware component configured to establish a connection with the 5G-NR RAN 120.Accordingly, the transceiver 225 may operate on a variety of different frequencies or channels (e . g. , set of consecutive frequencies) . The transceiver 225 includes circuitry configured to transmit and / or receive signals (e . g. , control signals, data signals) . Such signals may be encoded with information implementing any one of the methods described herein. The processor 205 may be operably coupled to the transceiver 225 and configured to receive from and / or transmit signals to the transceiver 225. The processor 205 may be configured to encode, decode and / or process signals (e . g. , signaling from a base station of a network) for implementing any one of the methods described herein.

[0034] In the example of Fig. 2, the processor 205 and the radio frequency (RF) circuitry (e . g. , transceiver 225) are illustrated as separate components . However, in some example embodiments, the RF circuitry and the processing circuitry may be integrated into the same chip, e . g. , a system on chip that includes a baseband processor and RF circuitry.Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0035] Fig . 3 shows an example SM-DP+ 300 according to various example embodiments . The SM-DP+ 300 may represent a network element that prepares , stores , and protects carrier profiles ( including operator credentials ) . In some examples , the SM-DP+ 300 may be implemented in a server device such as illustrated in the example of Fig . 3 . In other examples, the SM-DP+ 300 may be implemented in a distributed manner such as in a cloud computing implementation or as a network function .

[0036] The SM-DP+ 300 may include a processor 305, a memory arrangement 310, an input / output ( I / O) device 315, a transceiver 320 , and other components 325. The other components 325 may include, for example, an audio input device, an audio output device, a battery, a data acquisition device, ports to electrically connect the SM-DP+ 300 to other electronic devices and / or power sources , etc .

[0037] The processor 305 may be configured to execute a plurality of engines for the SM-DP+ 300. For example, the engines may include an eSIM profile engine 330 for performing operations related to generating eSIM profiles with SUCI information, including, but not limited to, receiving device or eUICC information of the device for which an eSIM profile is being generated that includes device and / or eUICC supported SUCI protection schemes and generating an eSIM profile comprising one of the supported SUCI protection schemes . These and other operations will be described in greater detail below .

[0038] The memory arrangement 310 may be a hardware component configured to store data related to operations performed by theAttorney Docket No . 30164 / 103002Ref . No . P71223WO1SM-DP+ 300 . The I / O device 315 may be a hardware component or ports that enable a user to interact with the SM-DP+ 300 .

[0039] The transceiver 320 may be a hardware component configured to exchange data with the UE 110 and any other UE in the network arrangement 100 either directly or indirectly .Because the SM-DP+ 300 i s typically res ident within the network, the transceiver 320 includes a wired network interface such as an Ethernet or other wired type network interface . In some examples , the transceiver 320 may include a wireles s interface and operate on a variety o f di f ferent frequencies or channels ( e . g . , set o f consecutive frequencies ) . There fore , the transceiver 320 may include one or more components ( e . g . , radios ) to enable the data exchange with the various networks and UEs . The transceiver 320 includes circuitry conf igured to transmit and / or receive s ignal s ( e . g . , control s ignal s , data s ignal s ) . Such signals may be encoded with information implementing any one of the methods described herein . The proces sor 305 may be operably coupled to the transceiver 320 and configured to receive from and / or transmit signals to the transceiver 320 . The processor 305 may be conf igured to encode , decode and / or proces s s ignal s ( e . g . , signaling from a UE ) for implementing any one of the methods described herein .

[0040] As stated above , the example embodiments provide operations for implementing SUCI protection schemes . These operations include updating el igibi l ity check information for the SUCI protection schemes in standards such as Global System for Mobi le Communications As sociation ( GSMA) SGP . 22 , Trusted Connectivity Alliance ( TCA) Interoperable Pro f i le Package Format , etc . , to include additional eUICC and / or deviceAttorney Docket No . 30164 / 103002Ref . No . P71223WO1capability information. This additional eligibility check information is described in greater detail below. In addition, the example embodiments also include operations to share the eligibility check information from a UE to a mobile network operator (MNO) or SM-DP+ . These sharing operations are also described in greater detail below.

[0041] Fig. 4 shows an example of device information 400 related to an eligibility check for an eSIM profile according to various example embodiments . In the example of Fig. 4, the device information 400 is shown in the context of the GSMA SGP .22 standard. However, the device information is not limited to being provided in this manner. There may be other manners of a device providing the device information for the eSIM profile eligibility check. The purpose of Fig. 4 is to illustrate some examples of the types of information that may be used for the eSIM profile eligibility check.

[0042] The device information 400 may be the information for a device, e . g. , UE 110 or any other device that may store and use an eSIM profile . The device information 400 may be different from the eUICC information. For example, the SUCI eligibility check may be performed for a device or for an eUICC of the device . In these example embodiments, the eligibility check information that is described may be related to the device or the eUICC of the device .

[0043] In a first example, the device information 400 may include a suciProtectionSchemeSupport IE 410 that indicates whether the device supports a SUCI protection scheme .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0044] In addition to the indication that the device supports the SUCI protection scheme, the device information 400 may also include a list of all SUCI protection schemes 420 supported by the device and / or the eUICC of the device . The supported SUCI protection schemes 420 may include any standardized SUCI protection schemes 430 and / or MNO specific SUCI protection schemes 440. For example, the standardized SUCI protection schemes 430 may be indicated in a byte stream ( 0x00 to OxOC) as defined in 3GPP Technical Specification ( TS ) and the MNO specific SUCI protection schemes 440 may be indicated in a byte stream ( OxOD to OxOF) as defined in 3GPP TS 24 . 501 . The specific octets described herein are only an example and other octets of a byte stream may be used to indicate the supported SUCI protection schemes 420. In addition, the SUCI protection schemes 420 may be listed in an order of preference ( e . g . , in the byte stream) to be applied by the device or the eUICC of the device .

[0045] Fig . 5 shows an example of eUICC information 500 related to an eligibility check for an eSIM profile according to various example embodiments . In the example of Fig . 5, the eUICC information 500 is shown in the context of the GSMA SGP .22 standard . However, the eUICC information is not limited to being provided in this manner . There may be other manners of a device providing the eUICC information for the eSIM profile eligibility check . The purpose of Fig . 5 is to illustrate some examples of the types of information that may be used for the eSIM profile eligibility check . The eUICC information 500 may be the information for an eUICC of a device, e . g . , eUICC 240 of the UE 110 .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0046] In a first example, the eUICC information 500 may include a suciProtectionSchemeSupport IE 510 that indicates whether the eUICC supports a SUCI protection scheme for the eSIM profiles . In addition to the indication that the eUICC supports the SUCI protection scheme, the eUICC information 500 may also include a list of all SUCI protection schemes supported by the eUICC, similar to the list of supported protection schemes 420. The supported SUCI protection schemes may include any standardized SUCI protection schemes and / or MNO specific SUCI protection schemes , e . g . , similar to the standardized SUCI protection schemes 430 and / or MNO specific SUCI protection schemes 440 , respectively, as described with reference to Fig . 4 . In addition, the supported SUCI protection schemes may be listed in an order of preference to be applied by the eUICC .

[0047] Fig . 6 shows a first example signaling diagram 600 for an eSIM profile eligibility check using the device information or the eUICC information according to various example embodiments . The signaling diagram 600 is performed between an end user 610 ( e . g . , a person or entity that has a subscription supporting eSIM profiles ) , a device 620 onto which the eSIM profile is to be loaded, an SM-DP+ 630 and an MNO 640 .

[0048] Some of the operations described in the signaling diagram 600 are standard operations for an eSIM eligibility check ( e . g . , as defined in GSMA SGP .22 ) and these operations may be performed in the standard manner . Other operations as will be described in greater detail below may include components exchanging and / or using the eSIM profile eligibility check information, e . g . , the device information 400 and / or the eUICC information 500 described above .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0049] In 650, the end user 610 obtains or purchases a service subscription from the MNO 640 . Once the end user has a service subscription, in 655, the MNO 640 may exchange information with the SM-DP+ 630 so the SM-DP+ 630 is ready to create an eSIM profile for the device 620 of the end user 610. This exchange of information 655 may include an ES2+ download order and an ES2+ order confirmation . As part of the download order, the MNO 640 may indicate plan information to the SM-DP+ 630 . For example, not all types of service subscriptions may support SUCI protection schemes for eSIM profiles . Thus, by including the plan information, the SM-DP+ 630 may understand whether the eSIM profile being created for the end user 610 may use a SUCI protection scheme .

[0050] In 660, the end user 610 may indicate a profile download request to the device 620. This indication may be performed in any standard manner . In 665, the device 620 initiates an authentication request (e . g . , ES9+Ini tiateAuthentication) with the SM-DP+ 630 for the purposes of downloading an eSIM profile from the SM-DP+ 630 .

[0051] In 670, the device 620 sends a client request ( e . g . , ES9+ AuthenticateClient ) to the SM-DP+ 630 . This client request may include an identification of the eSIM profile that the device 620 desires to download and one or both of the device information or eUICC information, e . g . , device information 400 and / or the eUICC information 500 that includes the supported SUCI protection scheme information for the device 620 or the eUICC of the device 620 . In 675, the SM-DP+ 630 will provide theAttorney Docket No . 30164 / 103002Ref . No . P71223WO1MNO 640 with progress information ( e . g . , ES2+ HandleDownloadProgressInf o ) related to the download.

[0052] In 680, the SM-DP+ 630 will perform the eligibility check to determine whether the device 620 is eligible to download the requested eSIM profile . The SM-DP+ 630 may also create the requested profile with the SUCI information . As described above, the SM-DP+ 630 will receive the supported SUCI protection scheme information for the device 620 and / or the eUICC of the device 620 in 670 . As also described above, the supported SUCI protection scheme information may also be provided in a preferred order for the device 620 and / or the eUICC of the device 620 . Thus , the SM-DP+ 630 may create the requested eSIM profile with the SUCI protection according to the information provided by the device 620.

[0053] In 685, the device 620 may download the eSIM profile from the SM-DP+ 630 in a bound profile package (BPP) that may contain the SUCI information . The device 620 may then install the eSIM profile .

[0054] Fig . 7 shows a second example signaling diagram 700 for an eSIM profile eligibility check using the device information or the eUICC information according to various example embodiments . The signaling diagram 700 is performed between an end user 710 ( e . g . , a person or entity that has a subscription supporting eSIM profiles ) , a device 720 onto which the eSIM profile is to be loaded, an SM-DP+ 730 and an MNO 740.

[0055] The signaling diagram 700 shows two options for providing the device information or eUICC information to the SM-Attorney Docket No . 30164 / 103002Ref . No . P71223WO1DP+ 730 for the purposes o f the eS IM pro f i le el igibi l ity check . The f irst option i s an o f f line subscription option 750 and the second option is an onl ine subscription option 7 60 . Each o f these options are described in greater detail below .

[0056] Initial ly, describing the o f f l ine subscription option 750 , in 752 , the end user 710 may purchase a service subscription from the MNO 740 . Thi s may be , for example , an in-person purchase at a brick and mortar location o f the MNO 740 . However , other types of purchases may al so be performed, e . g . , via telephone .

[0057] In 754 , the end user may retrieve the device information 400 and / or eUICC information 500 for the device 720 , e . g . , by selecting thi s information from a drop down menu or other selection manner . In 756 , the device 720 may then prepare the device information 400 and / or eUICC information 500 to be presented to the MNO 740 . Thi s may include the device 720 presenting the device information 400 and / or eUICC information 500 in a binary representation, including but not l imited to , a QR code , a representation to be presented by near f ield communication (NFC ) , a representation to be presented by short range communication ( e . g . , Bluetooth, Z igbee , etc . ) , etc .

[0058] In 758 , the MNO 740 may read the representation o f the device information 400 and / or eUICC information 500 from the device 720 , e . g . , scanning QR code shown on device 720 , NFC reader , etc . Thus , at the completion of the o f f l ine subscription option 750 , the MNO 740 has the subscription information for the end user 710 and the device information 400 and / or eUICC information 500 o f the device 720 . This information may be usedAttorney Docket No . 30164 / 103002Ref . No . P71223WO1later in the signaling diagram 700 as will be described in more detail below.

[0059] However, prior to describing how the MNO 740 uses this information, the MNO 740 may also obtain this same information using the online subscription option 760 as shown in Fig. 7. In 762, the end user 710 indicate to the device 720 that the end user 710 would like to select a service subscription.

[0060] In response to the end user 710 request, the device 720 may request information from the MNO 740 such that, in 764, the device 720 may be configured with a list of plans and terms and conditions of these plans . The device 720 may present this list of on-device service subscriptions to the end user 710, e . g. , in a menu, etc . In 766, the end user 710 may select one of the service subscriptions and in 768, the device 720 may send the selected service subscription and the device information 400 and / or eUICC information 500 of the device 720 to the MNO 740.

[0061] Thus, at the completion of the online subscription option 760, the MNO 740 has the subscription information for the end user 710 and the device information 400 and / or eUICC information 500 of the device 720, e . g. , similar information to as was obtained by the MNO 740 using the offline subscription option 750. Therefore, at the completion of either the offline subscription option 750 or the online subscription option 760, the MNO 740 has the subscription information for the end user 710 and the device information 400 and / or eUICC information 500 of the device 720.Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0062] In 770, the MNO 640 may exchange information with the SM-DP+ 730 so the SM-DP+ 630 is ready to create an eSIM profile for the device 720 of the end user 710. This exchange of information 770 may include an ES2+ download order and an ES2+ order confirmation . As part of the download order, the MNO 740 may indicate plan information ( e . g . , the subscription information selected by the end user 710 ) and the device information 400 and / or eUICC information 500 of the device 720 to the SM-DP+ 730.

[0063] In 780, the end user 710 may indicate a profile download request to the device 720. This indication may be performed in any standard manner . In 790 , the device 720, SM-DP+ 730 and MNO 740 may perform the eSIM profile download in a standard manner, e . g . , as defined in GSMA SGP .22 . However, since the SM-DP+ 730 already has the device information 400 and / or eUICC information 500, the SM-DP+ 630 may create the requested profile with the SUCI information and provide this requested eSIM profile with the SUCI protection according to the device 720 .

[0064] Fig . 8 shows an example method 800 of operations performed by an SM-DP+ for an eligibility check of an eSIM profile according to various example embodiments . Prior to the start of the method 800 , it may be considered that the SM-DP+ has received a request to create and download an eSIM profile to a device of an end user that has an eligible subscription .

[0065] In 810, the SM-DP+ checks the plan information ( e . g . , the subscription information selected by the end user) and the device information 400 and / or eUICC information 500. VariousAttorney Docket No . 30164 / 103002Ref . No . P71223WO1examples of how the SM-DP+ has received this plan information, device information and / or eUICC information were described above with reference to the signaling diagrams of Figs . 6 and 7 .

[0066] In 820, the SM-DP+ determines whether the selected subscription plan supports a SUCI protection scheme for eSIM profiles . As described above, some types of subscriptions do not support SUCI protection schemes for eSIM profiles . An example of a plan that supports SUCI protection schemes for eSIM profiles may be a 5G plan . It is also anticipated that 6G plans will support SUCI protection schemes for eSIM profiles .

[0067] I f the end user selected subscription plan does not support the SUCI protection schemes for eSIM profiles , in 830, the SM-DP+ may create an eSIM profile that does not include a SUCI protection scheme and then download that profile to the device in 870 .

[0068] However, if the end user selected subscription plan supports the SUCI protection schemes for eSIM profiles , in 840 , the SM-DP+ determines whether the device information and / or eUICC information for the device indicates support of SUCI protection schemes for eSIM profiles . Manners of indicating support of SUCI protection schemes for eSIM profiles in the device information and / or eUICC information were described above in detail with reference to Figs . 4 and 5, respectively. Again, if the device and the eUICC do not support the SUCI protection schemes for eSIM profiles , in 830, the SM-DP+ may create an eSIM profile that does not include a SUCI protection scheme and then download that profile to the device in 870 .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0069] However, if the device and / or eUICC supports the SUCI protection schemes for eSIM profiles , in 850, the SM-DP+ may configure the Elementary File Universal Subscriber Identity Module (USIM) Service Table (EE UST ) service bits 124 and 125 that indicate whether SUCI is used and the entity ( e . g . , device or eUICC) that is to calculate the SUCI . In 860 , the SM-DP+ may configure the SUCI information into a dedicated file (DE) ( e . g . , a DF 5GS when the subscription is a 5G subscription) .

[0070] In 870, the SM-DP+ may then download the eSIM profile with the SUCI protection scheme to the device . The device may then install the eSIM profile in the eUICC and calculate the SUCI as configured in the USIM .Examples

[0071] In a first example, a method, comprising processing one of device information related to a device or embedded Universal Integrated Circuit Card ( eUICC) information related to an eUICC of the device comprising a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes , determining the device or the eUICC of the device supports SUCI protection schemes based on the device information or the eUICC information and generating an embedded subscriber identity module ( eSIM) profile comprising SUCI information associated with one of the SUCI protection schemes included in the list .

[0072] In a second example, the method of the first example, wherein the list of supported SUCI protection schemes comprise one or more of standardized SUCI protection schemes .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0073] In a third example, the method of the first example, wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MNO) specific SUCI protection schemes .

[0074] In a fourth example, the method of the first example, wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC .

[0075] In a fifth example, the method of the first example, wherein the one of the device information or eUICC information is received from the device as part of a request for the eSIM profile .

[0076] In a sixth example, the method of the first example, wherein the one of the device information or eUICC information is received from a mobile network operator (MNO) associated with the eSIM profile .

[0077] In a seventh example, the method of the first example, further comprising processing, based on signaling from a mobile network operator (MNO) , subscription plan information of a subscription plan of an end user of the device, wherein the subscription plan information is related to the eSIM profile and determining the subscription plan supports SUCI protection schemes .

[0078] In an eighth example, the method of the first example, wherein generating the eSIM profile with SUCI information is based on setting an Elementary File Universal SubscriberAttorney Docket No . 30164 / 103002Ref . No . P71223WO1Identity Module (USIM) Service Table (EF UST) service bits to indicate the one of the SUCI protection schemes used and an identity of the device or the eUICC that is to calculate a SUCI based on the one of the SUCI protection schemes .

[0079] In a ninth example, the method of the first example, wherein the SUCI information is included in a dedicated file .

[0080] In a tenth example, one or more processors configured to perform any of the methods of the first through ninth examples .

[0081] In an eleventh tenth example, a network device configured to perform any of the methods of the first through ninth examples .

[0082] In a twelfth example, a method comprising generating, for transmission to a subscription manager data preparation+ ( SM-DP+ ) , a request for an embedded subscriber identity module ( eSIM) profile comprising one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC and processing, based on signaling from the SM-DP+ , a bound profile package (BPP) comprising the eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0083] In a thirteenth example, the method of the twelfth example, wherein the list of supported SUCI protection schemes comprise one or more of standardized SUCI protection schemes .

[0084] In a fourteenth example, the method of the twelfth example, wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MN) specific SUCI protection schemes .

[0085] In a fifteenth example, the method of the twelfth example, wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC .

[0086] In a sixteenth example, one or more processors configured to perform any of the methods of the twelfth through fifteenth examples .

[0087] In a seventeenth tenth example, a user equipment configured to perform any of the methods of the twelfth through fifteenth examples .

[0088] In an eighteenth example, a method, comprising determining one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC, generating an indication of the one of the device information or the eUICC information and processing, based on signaling from aAttorney Docket No . 30164 / 103002Ref . No . P71223WO1subscription manager data preparation+ ( SM-DP+ ) , a bound profile package (BPP) comprising an eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .

[0089] In a nineteenth example, the method of the eighteenth example, wherein the indication comprises a binary representation of the one of the device information or the eUICC information .

[0090] In a twentieth example, the method of the nineteenth example, wherein the binary representation comprises a QR code, a near field communication (NFC) representation or a short range communication representation .

[0091] In a twenty first example, the method of the eighteenth example, further comprising processing, based on signaling from a mobile network operator (MNO) , a list of subscription plans and generating, for transmission to the MNO, a selection of one of the subscription plans, wherein the indication of the one of the device information or the eUICC information is included in the selection of the one of the subscription plans .

[0092] In a twenty second example, the method of the eighteenth example, wherein the list of supported SUCI protection schemes comprises one or more of standardized SUCI protection schemes .

[0093] In a twenty third example, the method of the eighteenth example, wherein the list of supported SUCIAttorney Docket No . 30164 / 103002Ref . No . P71223WO1protection schemes comprise one or more of mobile network operator (MNO) specific SUCI protection schemes .

[0094] In a twenty fourth example, the method of the eighteenth example, wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC .

[0095] In a twenty fifth example, one or more processors configured to perform any of the methods of the eighteenth through twenty fourth examples .

[0096] In a twenty sixth tenth example, a user equipment configured to perform any of the methods of the eighteenth through twenty fourth examples .

[0097] In a twenty seventh example, a method, comprising determining one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC and generating, for transmission to a subscription manager data preparation! ( SM-DP+ ) , a request for an embedded subscriber identity module ( eSIM) profile comprising the one of the device information or eUICC information .

[0098] In a twenty eighth example, the method of the twenty seventh example, wherein determining the one of the device information or eUICC information is based on a binaryAttorney Docket No . 30164 / 103002Ref . No . P71223WO1representation of the one of the device information or the eUICC information .

[0099] In a twenty ninth example, the method of the twenty eighth example, wherein the binary representation comprises a QR code, a near field communication (NFC) representation or a short range communication representation .

[0100] In a thirtieth example, the method of the twenty seventh example, wherein determining the one of the device information or eUICC information is based on signaling received from the device indicating a selection of a subscription plan, wherein the device information or the eUICC information is included in the selection of the subscription plan .

[0101] In a thirty first example, the method of the twenty seventh example, wherein the request further comprises subscription plan information of a subscription plan of an end user of the device, wherein the subscription plan information is related to the eSIM profile .

[0102] In a thirty second example, the method of the twenty seventh example, wherein the list of supported SUCI protection schemes comprise one or more of standardized SUCI protection schemes .

[0103] In a thirty third example, the method of the twenty seventh example, wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MN) specific SUCI protection schemes .Attorney Docket No . 30164 / 103002Ref . No . P71223WO1

[0104] In a thirty fourth example, the method of the twenty seventh example, wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC.

[0105] In a thirty fifth example, one or more processors configured to perform any of the methods of the twenty seventh through thirty fourth examples .

[0106] In a thirty sixth example, a network device configured to perform any of the methods of the twenty seventh through thirty fourth examples .

[0107] Tho se skilled in the art will understand that the above-described example embodiments may be implemented in any suitable software or hardware configuration or combination thereof . An example hardware platform for implementing the example embodiments may include, for example, an Intel x86 based platform with compatible operating system, a Windows OS, a Mac platform and MAC OS, a mobile device having an operating system such as iOS, Android, etc . The example embodiments of the above described method may be embodied as a program containing lines of code stored on a non-transitory computer readable storage medium that, when compiled, may be executed on a processor or microprocessor .

[0108] Although this application described various embodiments each having different features in various combinations, those skilled in the art will understand that any of the features of one embodiment may be combined with the features of the other embodiments in any manner not specificallyAttorney Docket No . 30164 / 103002Ref . No . P71223WO1disclaimed or which is not functionally or logically inconsistent with the operation of the device or the stated functions of the disclosed embodiments .

[0109] It is well understood that the use of personally identifiable information should follow privacy policies and practices that are generally recognized as meeting or exceeding industry or governmental requirements for maintaining the privacy of users . In particular, personally identifiable information data should be managed and handled so as to minimize risks of unintentional or unauthorized access or use, and the nature of authorized use should be clearly indicated to users .

[0110] It will be apparent to those skilled in the art that various modifications may be made in the present disclosure, without departing from the spirit or the scope of the disclosure . Thus, it is intended that the present disclosure cover modifications and variations of this disclosure provided they come within the scope of the appended claims and their equivalent .

Claims

Attorney Docket No . 30164 / 103002Ref . No . P71223WO1What is claimed:1 . An apparatus comprising memory coupled to processing circuitry, wherein the processing circuitry is configured to : process one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device comprising a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes ;determine the device or the eUICC of the device supports SUCI protection schemes based on the device information or the eUICC information; andgenerate an embedded subscriber identity module (eSIM) profile comprising SUCI information associated with one of the SUCI protection schemes included in the list .2 . The apparatus of claim 1 , wherein the list of supported SUCI protection schemes comprise one or more of standardized SUCI protection schemes .3 . The apparatus of claim 1 , wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MNO) specific SUCI protection schemes .4 . The apparatus of claim 1 , wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC .

5. The apparatus of claim 1 , wherein the one of the device information or eUICC information is received from the device as part of a reguest for the eSIM profile .Attorney Docket No . 30164 / 103002Ref . No . P71223WO16. The apparatus of claim 1 , wherein the one of the device information or eUICC information is received from a mobile network operator (MNO) associated with the eSIM profile .7 . The apparatus of claim 1 , wherein the processing circuitry is further configured to :process , based on signaling from a mobile network operator (MNO) , subscription plan information of a subscription plan of an end user of the device, wherein the subscription plan information is related to the eSIM profile ; anddetermine the subscription plan supports SUCI protection schemes .8 . The apparatus of claim 1 , wherein the processing circuitry generates the eSIM profile with SUCI information by setting an Elementary File Universal Subscriber Identity Module (USIM) Service Table (EF UST) service bits to indicate the one of the SUCI protection schemes used and an identity of the device or the eUICC that is to calculate a SUCI based on the one of the SUCI protection schemes .

9. The apparatus of claim 1 , wherein the SUCI information is included in a dedicated file .10 . An apparatus comprising memory coupled to processing circuitry, wherein the processing circuitry is configured to : generate, for transmission to a subscription manager data preparation ( SM-DP+ ) , a request for an embedded subscriber identity module ( eSIM) profile comprising one of device information related to a device or embedded Universal Integrated Circuit Card ( eUICC) information related to an eUICC of theAttorney Docket No . 30164 / 103002Ref . No . P71223WO1device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC; and process , based on signaling from the SM-DP+ , a bound profile package (BPP) comprising the eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .11 . The apparatus of claim 10 , wherein the list of supported SUCI protection schemes comprise one or more of standardized SUCI protection schemes .12 . The apparatus of claim 10 , wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MN) specific SUCI protection schemes .13 . The apparatus of claim 10 , wherein the list of supported SUCI protection schemes comprises a preferred ordered of SUCI protections schemes of the device or the eUICC .14 . An apparatus comprising memory coupled to processing circuitry, wherein the processing circuitry is configured to : determine one of device information related to a device or embedded Universal Integrated Circuit Card (eUICC) information related to an eUICC of the device, wherein the device information or the eUICC information comprises a list of supported Subscription Concealed Identifier ( SUCI ) protection schemes supported by the device or eUICC;generate an indication of the one of the device information or the eUICC information; andAttorney Docket No . 30164 / 103002Ref . No . P71223WO1process , based on signaling from a subscription manager data preparation+ ( SM-DP+ ) , a bound profile package (BPP) comprising an eSIM profile including SUCI information associated with one of the SUCI protection schemes included in the list .

15. The apparatus of claim 14 , wherein the indication comprises a binary representation of the one of the device information or the eUICC information .

16. The apparatus of claim 15, wherein the binary representation comprises a QR code, a near field communication (NFC) representation or a short range communication representation .17 . The apparatus of claim 14 , wherein the processing circuitry is further configured to :process , based on signaling from a mobile network operator (MNO) , a list of subscription plans ; andgenerate, for transmission to the MNO, a selection of one of the subscription plans , wherein the indication of the one of the device information or the eUICC information is included in the selection of the one of the subscription plans .18 . The apparatus of claim 14 , wherein the list of supported SUCI protection schemes comprises one or more of standardized SUCI protection schemes .

19. The apparatus of claim 14 , wherein the list of supported SUCI protection schemes comprise one or more of mobile network operator (MNO) specific SUCI protection schemes .Attorney Docket No . 30164 / 103002Ref . No . P71223WO120 . The apparatus o f claim 14 , wherein the l i st of supported SUCI protection schemes compri ses a preferred ordered of SUCI protections schemes of the device or the eUICC .

Images