64 results about "Universal Integrated Circuit Card" patented technology

A user equipment (UE), comprising at least one processor may be configured to transmit a first attach request to a first wireless network based on a first subscriber identity module. The UE may determine that the first attach request was unsuccessful and may automatically activate a switching application to switch the UE from the first subscriber identity module to a second subscriber identity module based on the determination. The first and second subscriber identity modules are stored on a common universal integrated circuit card (UICC) associated with the UE. The UE may then transmit a second attach request to the first wireless network based on the second subscriber identity module.

The invention provides systems, methods, and computer-readable media for multi-factor authentication (MFA) using device and carrier validation. A user device generates an attested blob containing cryptographic keys and a Universal Integrated Circuit Card (UICC)-originated International Mobile Subscriber Identity (IMSI), which is transmitted to a cloud-based MFA service. The service validates the attested blob, coordinates with an Original Equipment Manufacturer (OEM) service, and executes an Extensible Authentication Protocol-Authentication and Key Agreement (EAP-AKA) process with the carrier network to establish mutual trust. Authentication data, including a validated phone number independent of the device's stored number, is securely stored in a cloud wallet. The invention enhances security by mitigating risks such as spoofing, replay attacks, and SIM swapping, providing a novel authentication framework compatible with modern networks.

An electronic device includes at least one embedded universal integrated circuit card (eUICC) each storing at least one subscriber identification information, and at least one processor electrically connected with the eUICC. The at least one processor may be configured to control to transmit, to a first server, a first request message including information about an operation related to a subscription or a subscription transfer based on the eUICC and receive a first response message from the first server, in response to the transmission of the first request message. The first response message may include information indicating that a profile to be provided for the eUICC is not ready in response to the first request message.

The invention relates to the field of communication, and provides an embedded universal integrated circuit card data downloading method and device, equipment and a medium. The method comprises the following steps: acquiring equipment identity information of a user terminal from an eUICC card of the user terminal through a non-contact channel under the condition that a non-contact channel connection is established between an operator system and the user terminal; the equipment identity information comprises IMEI and / or EID; determining operator code number data corresponding to the eUICC card according to the equipment identity information and sending the operator code number data to the SM-DP + platform; the SM-DP + platform is indicated to generate an operator code number data configuration file Profile; under the condition that the Profile is generated in the SM-DP + platform, downloading the Profile from the SM-DP + platform through an operator system; and the Profile is written into the eUICC card through the non-contact channel. According to the technical scheme, the service resource consumption is relatively low.

The present disclosure relates to a system and a method for selecting multi-radio access technology (RAT) in a user equipment (UE) during an initialization of subscriber identity module (SIM). The method includes reading capability information associated with the UE from a universal integrated circuit card (UICC) at the time of initializing the SIM, determining whether the UE includes a capability to connect to a first network having a first RAT based on the capability information, and registering the UE with the first network having the first RAT based on the UE capable of being connected to the first network.

An embedded Universal Integrated Circuit Card (eUICC) for Internet of Things (IoT) devices is associated by a method with a set of external remote manager modules (external operational remote manager modules performing a set of operations comprising profile state management operations and remote manager modules management operations in said eUICC for IoT devices). The method includes: performing in said eUICC for IoT devices an association between the eUICC for IoT devices and the external handling remote manager module configured to perform in the set of operations only remote manager modules management operations in said eUICC for IoT devices; and in response to a request of associating an external operational remote manager module issued via said at least one external handling remote manager module, performing in the eUICC for IoT devices an association between the eUICC for IoT devices and at least one external operational remote manager module.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method performed by a terminal in a wireless communication system is provided. The method comprises transmitting to a subscription manager discovery service (SM-DS) information indicating a support of a push service, receiving from the SM-DS a list of push services supported by the SM-DS, selecting at least one push service based on the list of push services supported by the SM-DS, generating an embedded Universal Integrated Circuit Card (eUICC) signature based on an indicator indicating at least one selected push service and a push token, and transmitting to the SM-DS the indicator, the push token, and the eUICC signature.

A mobile device (100) is disclosed. The mobile device exchanges data in a wireless manner. The mobile device includes: an application processor (110); a baseband modem (120); a universal integrated circuit card (UICC) (130), operatively connected to the base-band modem (120) via a first interface (131); and a contactless interface (140), operatively connected to the UICC (130) via a second interface (139). The UICC (130) stores multiple profiles (151, 152, 153, 154), each of which can selectively be in an enabled state or a disabled state. The UICC (130) stores multiple interface modules (161, 162, 163), each of which allows access of one of the profiles (151, 152, 153, 154) stored in the UICC (130) to the contactless interface (140) via the second interface.

A method for managing provisioning of universal integrated circuit cards (UICC) in internet of things (IoT) devices, is disclosed. The method comprises (a) initiating a mobile network connection with one or more IoT platforms; (b) receiving one or more instructions from the one or more IoT platforms; (c) downloading one or more subscription profiles associated with one or more second UICCs from the one or more IoT platforms upon receiving the one or more instructions; (d) configuring the one or more subscription profiles in the one or more second UICCs; and (e) rebooting the mobile network connection to connect the one or more second UICCs of the one or more internet of things (IoT) devices with the one or more second UICCs IoT platforms through a second cellular network based on the one or more second UICCs subscription profiles configured in the one or more second UICCs.

Methods and devices are disclosed for a wireless transmit receive unit (WTRU) having a first universal integrated circuit card (UICC) and a second UICC, enabling a Multi-UE mode. In one method a WTRU retrieves subscription profile IDs from the first UICC and the second UICC and based on the retrieved subscription profile IDs, the WTRU determine it supports a multi-UE mode of operation using a first UE (UE1) and a second UE (UE2) to operate for mobility between inter-radio access technologies (RAT) networks. In an example, the WTRU establishes, by the UE1 with a first radio access network (RAN) node, a first user plane (UP) path and establishing a multi-UE packet data unit (PDU) session having multi-UE mode rules to switch traffic between UE1 and UE2 with the inter-RAT networks based on occurrence of a triggering event. Additional embodiment are disclosed.

According to the present disclosure, a method performed by a terminal in a wireless communication system may be provided. The method may comprise the steps of: receiving, from an embedded universal integrated circuit card (eUICC), eUICC information about whether the eUICC supports external storage (ES); transmitting the eUICC information to a profile server; receiving, from the profile server, profile information on the basis of the received eUICC information; and determining, on the basis of the profile information, whether to move a part or all of the profile out of the eUICC.

A method for extending one or more static resources in a multiple enabled profile capable embedded universal integrated circuit card (eUICC) includes receiving a request to allocate at least one first static resource at a first port of the eUICC, determining whether the at least one first static resource is available for allocation, determining whether the eUICC supports a port extension feature, and whether at least one second port of the plurality of ports is available for access, and performing at least one of merging one or more second static resources of the at least one second port with one or more first static resources of the first port, and initiating at least one action associated with the one or more first static resources.

The invention discloses a near field communication routing method and device, a storage medium and electronic equipment, and relates to the technical field of terminals, and the method can establish a secure communication link, and obtains a card application list through the secure communication link. And writing the routing data of the card application list into a routing table of the near field communication or a chip operating system of the embedded universal integrated circuit card so as to configure the routing of the near field communication. Wherein the secure communication link is established and generated based on the trusted service management platform and an embedded universal integrated circuit card of the terminal equipment. By applying the technical scheme of the invention, the routing data of the near field communication is written into the near field communication routing table or the chip operating system, accurate routing configuration can be realized, and routing conflicts in a multi-activation configuration file scene are solved, so that the accuracy and flexibility of the near field communication routing and the system security are improved, and the user experience is improved.

A module with an embedded universal integrated circuit card (eUICC) can include a profile for the eUICC. The profile can include a first and second shared secret key K for authenticating with a wireless network. The first shared secret key K can be encrypted with a first key, and the second shared secret key K can be encrypted with a second key. The module can (i) receive the first key, (ii) decrypt the first shared secret key K with the first key, and (iii) subsequently authenticate with the wireless network using the plaintext first shared secret key K. The wireless network can authenticate the user of the module using a second factor. The module can then (i) receive the second key, (ii) decrypt the second shared secret key K, and (iii) authenticate with the wireless network using the second shared secret key K. The module can comprise a mobile phone.

The invention relates to the technical field of embedded security, and discloses an installation system of an eSIM configuration file, which is applied to terminal equipment, and the installation system comprises a communication interface configured to receive an instruction data packet sent by an SM-DP + server, the instruction data packet comprises a security load and an execution bill, the security load is an eSIM configuration file encrypted based on a public key of an eSE asymmetric key pair; the fusion security domain comprises an eSE and an embedded universal integrated circuit card (eUICC), and the eSE is in secure communication with the eUICC; the routing logic unit is configured to route the instruction data packet to the eSE by hardware; wherein the eSE is configured to verify the execution bill, decrypt the security load based on a private key of the asymmetric key pair of the eSE after the verification is passed, so as to obtain an eSIM configuration file, and transmit the eSIM configuration file to the eUICC in a streaming manner; the eUICC is configured to perform an installation of the eSIM profile. According to the method, the security, reliability and anti-attack capability of eSIM configuration file installation can be improved. The invention further discloses an eSIM configuration file installation method and device and terminal equipment.

A network service access method for a mobile terminal device includes adding an access data field to an application protocol data unit of a universal integrated circuit card of the mobile terminal device; enabling first operator data and second operator data of the universal integrated circuit card of the mobile terminal device; issuing an instruction to access first issuer security domain data of the first operator data or an instruction to access second issuer security domain data of the second operator data; and accessing data corresponding to the first issuer security domain data of the first operator data or accessing data corresponding to the second issuer security domain data of the second operator data.

A security management service for Internet-of-things devices can obtain, from an Internet-of-things device and via a cellular network, a request by the Internet-of-things device to register with the cellular network, the Internet-of-things device including a universal integrated circuit card that stores a unique identifier for the Internet-of-things device and a cellular transceiver. The security management service can obtain behavioral data describing activity associated with the Internet-of-things device and can determine, based on the identity data and the behavioral data, if the Internet-of-things device is operating normally and as expected and if the Internet-of-things device is under the control of any unauthorized entity before allowing the Internet-of-things device to register with the cellular network.

The disclosure provides a method for installing a bound profile package on an embedded Universal Integrated Circuit Card, eUICC, during manufacturing of a device embedding the eUICC, the method being carried out by a binding module and comprising the following steps: - ordering (202) at least one protected profile package from a profile management server; - obtaining (209; 213) at least one identifier of the eUICC; - binding (210; 214) at least one of the ordered at least one protected profile package with the identifier of the eUICC, to obtain a bound profile package; - installing (211: 215) the obtained bound profile package on the eUICC.

Embodiments described herein relate to wireless communications, including methods and apparatus for configuring synthetic electronic subscriber identity module (eSIM) profiles for wireless devices based on user credentials. A synthetic eSIM profile is generated at a wireless device based on transformation of user credentials that include a user identity and user cryptographic information. The user identity can include an identifier for a user account, and the user cryptographic information can include a password for the user account. The wireless devices can use the synthetic eSIM profile to obtain and load one or more fully functional eSIM profiles to an embedded universal integrated circuit card (eUICC) to without requiring a bootstrap eSIM profile or non-cellular wireless access.

A user equipment (UE), baseband processor, embedded universal integrated circuit card (eUICC), and network device (e.g., a shared profile vendor server) are described. A UE that includes an eUICC can perform transmitting, for receipt by a shared profile vendor server, a first message of a shared profile operational international mobile subscriber identity (IMSI) provisioning procedure. The first message may include a randomized IMSI. In response to the first message, the UE may receive a second message that includes an indication of a time counter value. In response to the second message, the UE may transmit, in response to determining that the time counter value is valid, a third (e.g., penultimate) message to the bootstrap vendor server. The UE may then receive in response a fourth message (e.g., final) of the shared profile operational IMSI provisioning procedure, the fourth message including a shared profile operational IMSI for the eUICC.

Embodiments described herein relate to managing access to an embedded universal integrated circuit card (eUICC) to obtain subscriber identity module (SIM) information without requiring cellular baseband wireless processing support. A baseband component of a wireless device that connects to the eUICC via a first interface can be in a reduced power state, and under certain conditions a processor external to the eUICC can access the eUICC via a second interface without booting up the baseband component to a normal (full) power state. When access to the eUICC via the first interface through the baseband component is required, the baseband component can be booted to a normal (full) power state to communicate with the eUICC. Additionally, a wireless device in which the baseband component is in a reduced power state or is absent can access one or more services of a mobile network operator (MNO) via a non-cellular wireless interface.

An apparatus configured to authenticate an embedded universal integrated circuit card (eUICC) of a UE to a network server for a remote subscriber identity module provisioning (RSP) session, generate a message for sending to the network server, the message including one or more context parameters related to an embedded subscriber identity module (eSIM) operation of the RSP session, process a retry delay message based on a signal received from the network server indicating that the network server is not ready to complete the eSIM operation, wherein the retry delay message includes an expected time delay or a timestamp, terminate the RSP session, start a timer with a duration based on the retry delay message, and generate a poll message for sending to the network server when the timer expires.

A user equipment (UE) is provided for processing slice information having a Single Network Slice Selection Assist Information (S-NSSAI) mapping for a Universal Integrated Circuit Card (UICC) processor. The UE operates by determining whether its baseband processor is busy. Based on the determination that the baseband processor is not busy, the baseband processor transmits a retrieval message to the UE's UICC processor, wherein the retrieval message is transmitted in response to receiving an active command pending message from the UICC processor. The baseband processor receives an active command message from the UICC processor, wherein the active command message corresponds to a request for Single Network Slice Selection Assist Information (S-NSSAI) information corresponding to one or more network slices. Finally, the baseband processor transmits a response message with the S-NSSAI information to the UICC processor.

The present disclosure relates to method and apparatus for dynamically selecting a port of an Embedded Universal Integrated Circuit Card (eUICC) supporting Multiple Enabled Profiles (MEP) mode in a device. The method includes: receiving a request to activate a profile from a plurality of profiles stored in the eUICC; monitoring ongoing communication on one or more active ports of the eUICC; and selecting a port from the one or more active ports of the eUICC based on the ongoing communication to activate the profile. The method provides effective and efficient profiles management within the eUICCs by introducing dynamic port selection and robust error handling mechanisms. This ensures greater flexibility and reliability in profile activation and deactivation processes, even in the event of malfunctions or communication failures.

Techniques are described herein for running multiple logical secure elements (LSEs) on the same physical secure element (SE) hardware. For example, embodiments may include running multiple logical Subscriber Identification Modules (SIM) cards on the same physical SIM card or universal integrated circuit card (UICC). Additionally or alternatively, embodiments may include running other secure element applications and services on the same SE hardware. The techniques allow for mobile devices users to access multiple security services, which may originate from different security service providers (SSPs), in a secure manner using the same SE hardware without requiring the integration of multiple physical slots on a mobile device or the physical exchange of different cards within the same slot.

An electronic device and method thereof are provided, including a connector. The electronic device includes a connector for mounting at least one of a Universal Flash Memory (UFS) card, a Secure Digital (SD) card, or a Universal Integrated Circuit (UICC) card. The connector includes a first power terminal for connecting an SD card or a UFS card, a second power terminal for connecting a UFS card or a UICC, and one or more signal terminals for connecting at least one of the UFS card, SD card, and UICC. The electronic device also includes a processor configured to detect a card mounted in the connector, output a first specified voltage and a second specified voltage to the UFS card, and reset the UFS card via one or more signal terminals, or output the first specified voltage and a third specified voltage and reset the corresponding SD card or UICC.

An information processing apparatus (10) communicable with a communication apparatus, the information processing apparatus comprises: a Universal Integrated Circuit Card (UICC) (105) storing authentication data that is used for authentication of the information processing apparatus (10); at least one of a wireless communication unit (103) used for wireless connection to a non-cellular network, a connector to which a wireless device used for wireless connection to the non-cellular network is detachably attachable, and a communication unit used for wired connection to the non-cellular network; and a processor configured to transmit the authentication data to the communication apparatus via the non-cellular network after the information processing apparatus (10) is connected to the communication apparatus via the non-cellular network by use of the wireless communication unit (103), the wireless device, or the communication unit.

A data structure for managing inventory information of a user device from an inventory of user devices is provided. In one example, the data structure includes: a device document containing a general product profile of a device from an inventory and a first device identity profile of the device; an embedded universal integrated circuit card (eUICC) document containing multiple data fields describing an eUICC embedded in the device, wherein the eUICC contains at least one embedded subscriber identification module (eSIM); and an eSIM profile document comprising at least one eSIM profile corresponding to the at least one eSIM contained in the eUICC, wherein the at least one eSIM profile contains multiple attributes describing the eSIM.

The described embodiments set forth techniques for recovering one or more electronic subscriber identity modules (eSIMs) previously deleted from an embedded universal integrated circuit card (eUICC) of a mobile wireless device. Prior to deletion of an eSIM, the mobile wireless device uploads first eSIM subscription information to a cloud network services server and stores second eSIM subscription information in a secure memory of the eUICC. The mobile wireless device can subsequently download the first eSIM subscription information to verify matching to the second eSIM subscription information stored in the eUICC before displaying an option for recovering the eSIM. The mobile wireless device sends to a mobile network operator (MNO) provisioning server an eSIM recovery request notification that includes at least a portion of the first eSIM subscription information, and the MNO provisioning server provides an eSIM recovery response message indicating approval and a network address to download the eSIM.

A method for processing, based on signaling received from a source device, a request to perform a quick share initial setup procedure with the source device, processing, based on signaling received from the source device, an indication that a first embedded subscriber identity module (eSIM) is available for download, wherein the first eSIM is associated with a same phone number as a second eSIM installed on the source device, downloading the first eSIM and generating instructions to install the first eSIM on an embedded universal integrated circuit card (eUICC) of a target device in a locked state, wherein the target device does not have access to voice services or cellular data services using first eSIM when the first eSIM is in the locked state.