106 results about "Universal Integrated Circuit Card" patented technology

A user equipment (UE), comprising at least one processor may be configured to transmit a first attach request to a first wireless network based on a first subscriber identity module. The UE may determine that the first attach request was unsuccessful and may automatically activate a switching application to switch the UE from the first subscriber identity module to a second subscriber identity module based on the determination. The first and second subscriber identity modules are stored on a common universal integrated circuit card (UICC) associated with the UE. The UE may then transmit a second attach request to the first wireless network based on the second subscriber identity module.

The invention provides systems, methods, and computer-readable media for multi-factor authentication (MFA) using device and carrier validation. A user device generates an attested blob containing cryptographic keys and a Universal Integrated Circuit Card (UICC)-originated International Mobile Subscriber Identity (IMSI), which is transmitted to a cloud-based MFA service. The service validates the attested blob, coordinates with an Original Equipment Manufacturer (OEM) service, and executes an Extensible Authentication Protocol-Authentication and Key Agreement (EAP-AKA) process with the carrier network to establish mutual trust. Authentication data, including a validated phone number independent of the device's stored number, is securely stored in a cloud wallet. The invention enhances security by mitigating risks such as spoofing, replay attacks, and SIM swapping, providing a novel authentication framework compatible with modern networks.

This application describes managing configuration of a bootstrap electronic SIM (eSIM) for a wireless device. A bootstrap eSIM on an embedded universal integrated circuit card (eUICC) of the wireless device is configured as needed to provide cellular wireless access. The bootstrap eSIM is configured with an initial international mobile subscriber identity (i-IMSI) value used to establish a cellular connection to obtain a bootstrap IMSI (b-IMSI) value allocated for temporary, dedicated use by the wireless device. The b-IMSI value is selected by a bootstrap server based on a bootstrap selection rule obtained from a bootstrap rules service, where the bootstrap selection rule accounts for a use case type provided by the wireless device and indicating a purpose for use of the b-IMSI value. The b-IMSI value is returned to a pool for use by other wireless devices after expiration of a timer or responsive to a delete notification message.

An electronic device includes at least one embedded universal integrated circuit card (eUICC) each storing at least one subscriber identification information, and at least one processor electrically connected with the eUICC. The at least one processor may be configured to control to transmit, to a first server, a first request message including information about an operation related to a subscription or a subscription transfer based on the eUICC and receive a first response message from the first server, in response to the transmission of the first request message. The first response message may include information indicating that a profile to be provided for the eUICC is not ready in response to the first request message.

An electronic device includes at least one embedded universal integrated circuit card (eUICC) each storing at least one subscriber identification information, and at least one processor electrically connected with the eUICC. The at least one processor may be configured to control to transmit, to a first server, a first request message including information about an operation related to a subscription or a subscription transfer based on the eUICC and receive a first response message from the first server, in response to the transmission of the first request message. The first response message may include information indicating that a profile to be provided for the eUICC is not ready in response to the first request message.

The invention relates to the field of communication, and provides an embedded universal integrated circuit card data downloading method and device, equipment and a medium. The method comprises the following steps: acquiring equipment identity information of a user terminal from an eUICC card of the user terminal through a non-contact channel under the condition that a non-contact channel connection is established between an operator system and the user terminal; the equipment identity information comprises IMEI and / or EID; determining operator code number data corresponding to the eUICC card according to the equipment identity information and sending the operator code number data to the SM-DP + platform; the SM-DP + platform is indicated to generate an operator code number data configuration file Profile; under the condition that the Profile is generated in the SM-DP + platform, downloading the Profile from the SM-DP + platform through an operator system; and the Profile is written into the eUICC card through the non-contact channel. According to the technical scheme, the service resource consumption is relatively low.

A method for updating electronic subscriber identity modules, eSIMs (208), on an embedded universal integrated circuit card, eUICC (108) contained in a wireless device (102, 302), the method comprising: by a processing circuit of the wireless device (102, 302) outside the eUICC (108): Perform an eSIM update process, which includes: Sending, to the eUICC (108), a command to trigger an eSIM update applet (212) on the eUICC (108); Receiving, from the eUICC (108), a request to establish a secure data connection to a network provisioning server (116); Establishing the secure data connection between the eUICC (108) and the network provisioning server (116); and Receiving, from the eUICC (108), an eSIM update status; and characterized by: Repeat the eSIM update process until the eSIM update status indicates success or a maximum number of retries are made.

The present disclosure relates to a system and a method for selecting multi-radio access technology (RAT) in a user equipment (UE) during an initialization of subscriber identity module (SIM). The method includes reading capability information associated with the UE from a universal integrated circuit card (UICC) at the time of initializing the SIM, determining whether the UE includes a capability to connect to a first network having a first RAT based on the capability information, and registering the UE with the first network having the first RAT based on the UE capable of being connected to the first network.

An embedded Universal Integrated Circuit Card (eUICC) for Internet of Things (IoT) devices is associated by a method with a set of external remote manager modules (external operational remote manager modules performing a set of operations comprising profile state management operations and remote manager modules management operations in said eUICC for IoT devices). The method includes: performing in said eUICC for IoT devices an association between the eUICC for IoT devices and the external handling remote manager module configured to perform in the set of operations only remote manager modules management operations in said eUICC for IoT devices; and in response to a request of associating an external operational remote manager module issued via said at least one external handling remote manager module, performing in the eUICC for IoT devices an association between the eUICC for IoT devices and at least one external operational remote manager module.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method performed by a terminal in a wireless communication system is provided. The method comprises transmitting to a subscription manager discovery service (SM-DS) information indicating a support of a push service, receiving from the SM-DS a list of push services supported by the SM-DS, selecting at least one push service based on the list of push services supported by the SM-DS, generating an embedded Universal Integrated Circuit Card (eUICC) signature based on an indicator indicating at least one selected push service and a push token, and transmitting to the SM-DS the indicator, the push token, and the eUICC signature.

A mobile device (100) is disclosed. The mobile device exchanges data in a wireless manner. The mobile device includes: an application processor (110); a baseband modem (120); a universal integrated circuit card (UICC) (130), operatively connected to the base-band modem (120) via a first interface (131); and a contactless interface (140), operatively connected to the UICC (130) via a second interface (139). The UICC (130) stores multiple profiles (151, 152, 153, 154), each of which can selectively be in an enabled state or a disabled state. The UICC (130) stores multiple interface modules (161, 162, 163), each of which allows access of one of the profiles (151, 152, 153, 154) stored in the UICC (130) to the contactless interface (140) via the second interface.

A user equipment (UE) that includes at least a processor and universal integrated circuit card (UICC) are described. The UE or a processor thereof can perform initializing a universal subscriber identity module (USIM) for communication with a cellular network, and registering with the cellular network using the USIM. The UE or processor provides, to the UICC, location information for a serving cell of the cellular network, where the location information including an identifier of a reduced capability serving cell or a private network cell. The UE or processor can then communicate with the serving cell according to a configuration that is based at least in part on the location information that is provided to the UICC.

The disclosure relates to a 5G or 6G communication system to support a higher data rate after a 4G communication system (e.g., LTE). The disclosure provides a method performed by a user equipment (UE) in a wireless communication system, the method including receiving, by a modem, a first message including at least one of information related to whether an embedded UICC (eUICC) function is supported and information related to whether a multiple enabled profile (MEP) is supported from an eUICC, and determining, by the modem, to operate with an MEP function based on the received at least one of the information related to whether the eUICC function is supported and the information related to whether the MEP is supported. Furthermore, various embodiments of the disclosure provide a method and apparatus for providing a dual SIM function even in a UE equipped with a single eUICC in a wireless communication system.

The described embodiments set forth techniques for recovering one or more electronic subscriber identity modules (eSIMs) previously deleted from an embedded universal integrated circuit card (eUICC) of a mobile wireless device. Prior to deletion of an eSIM, the mobile wireless device uploads first eSIM subscription information to a cloud network services server and stores second eSIM subscription information in a secure memory of the eUICC. The mobile wireless device can subsequently download the first eSIM subscription information to verify matching to the second eSIM subscription information stored in the eUICC before displaying an option for recovering the eSIM. The mobile wireless device sends to a mobile network operator (MNO) provisioning server an eSIM recovery request notification that includes at least a portion of the first eSIM subscription information, and the MNO provisioning server provides an eSIM recovery response message indicating approval and a network address to download the eSIM.

A method for managing provisioning of universal integrated circuit cards (UICC) in internet of things (IoT) devices, is disclosed. The method comprises (a) initiating a mobile network connection with one or more IoT platforms; (b) receiving one or more instructions from the one or more IoT platforms; (c) downloading one or more subscription profiles associated with one or more second UICCs from the one or more IoT platforms upon receiving the one or more instructions; (d) configuring the one or more subscription profiles in the one or more second UICCs; and (e) rebooting the mobile network connection to connect the one or more second UICCs of the one or more internet of things (IoT) devices with the one or more second UICCs IoT platforms through a second cellular network based on the one or more second UICCs subscription profiles configured in the one or more second UICCs.

Methods and devices are disclosed for a wireless transmit receive unit (WTRU) having a first universal integrated circuit card (UICC) and a second UICC, enabling a Multi-UE mode. In one method a WTRU retrieves subscription profile IDs from the first UICC and the second UICC and based on the retrieved subscription profile IDs, the WTRU determine it supports a multi-UE mode of operation using a first UE (UE1) and a second UE (UE2) to operate for mobility between inter-radio access technologies (RAT) networks. In an example, the WTRU establishes, by the UE1 with a first radio access network (RAN) node, a first user plane (UP) path and establishing a multi-UE packet data unit (PDU) session having multi-UE mode rules to switch traffic between UE1 and UE2 with the inter-RAT networks based on occurrence of a triggering event. Additional embodiment are disclosed.

Method for managing at least one remote manager module (112) in an embedded Universal Integrated Circuit Card, eUICC for Internet of Things, IoT devices, said eUICC for IoT devices having an upgradable firmware and comprising a memory, in particular a non-volatile memory, and configuration registers, said method comprising: - associating (110; 208) said eUICC for IoT devices with said at least one remote manager module (112) based on a configuration state, said configuration state being stored in said configuration registers; - storing (302; StoreEimData) said configuration state in said memory, obtaining a copy configuration state; - performing (210) a firmware upgrade, said firmware upgrade being configured to affect said configuration state stored in said configuration registers and to not affect said copy configuration state stored in said memory; and - restoring (304; RestoreEimData) said configuration state in said configuration registers by copying the copy configuration state stored in said memory in said configuration registers.

According to the present disclosure, a method performed by a terminal in a wireless communication system may be provided. The method may comprise the steps of: receiving, from an embedded universal integrated circuit card (eUICC), eUICC information about whether the eUICC supports external storage (ES); transmitting the eUICC information to a profile server; receiving, from the profile server, profile information on the basis of the received eUICC information; and determining, on the basis of the profile information, whether to move a part or all of the profile out of the eUICC.

A method for extending one or more static resources in a multiple enabled profile capable embedded universal integrated circuit card (eUICC) includes receiving a request to allocate at least one first static resource at a first port of the eUICC, determining whether the at least one first static resource is available for allocation, determining whether the eUICC supports a port extension feature, and whether at least one second port of the plurality of ports is available for access, and performing at least one of merging one or more second static resources of the at least one second port with one or more first static resources of the first port, and initiating at least one action associated with the one or more first static resources.

The present invention relates to a device and a method for operating a device with an embedded Universal Integrated Circuit Card (eUICC) storing multiple eSIM profiles. These profiles include a first eSIM for Mobile Network Operator (MNO) authentication and additional profiles that execute secure program code for tasks such as data signing, OTP generation, and blockchain transactions. The method enables communication between external programs and the eSIM profiles, supports hierarchical key derivation, and assigns keys or certificates to ensure secure interactions with program code or applets stored in a Supplementary Secure Domain (SSD). The profiles are sequentially addressed until the correct response is received.

The invention discloses a near field communication routing method and device, a storage medium and electronic equipment, and relates to the technical field of terminals, and the method can establish a secure communication link, and obtains a card application list through the secure communication link. And writing the routing data of the card application list into a routing table of the near field communication or a chip operating system of the embedded universal integrated circuit card so as to configure the routing of the near field communication. Wherein the secure communication link is established and generated based on the trusted service management platform and an embedded universal integrated circuit card of the terminal equipment. By applying the technical scheme of the invention, the routing data of the near field communication is written into the near field communication routing table or the chip operating system, accurate routing configuration can be realized, and routing conflicts in a multi-activation configuration file scene are solved, so that the accuracy and flexibility of the near field communication routing and the system security are improved, and the user experience is improved.

A method includes receiving, by an embedded universal integrated circuit card (eUICC), first information from a local profile assistant (LPA), where the first information includes a first certificate issuer (CI) public key identifier, and the first CI public key identifier is a CI public key identifier that the eUICC does not have. The method further includes sending, by the eUICC, second information to an OPS, where the second information includes the first CI public key identifier. The method further includes receiving, by the eUICC, a patch package from the OPS, where the patch package includes at least a first CI public key corresponding to the first CI public key identifier. The method further includes updating, by the eUICC, a CI public key of the eUICC by using the first CI public key.

A module with an embedded universal integrated circuit card (eUICC) can include a profile for the eUICC. The profile can include a first and second shared secret key K for authenticating with a wireless network. The first shared secret key K can be encrypted with a first key, and the second shared secret key K can be encrypted with a second key. The module can (i) receive the first key, (ii) decrypt the first shared secret key K with the first key, and (iii) subsequently authenticate with the wireless network using the plaintext first shared secret key K. The wireless network can authenticate the user of the module using a second factor. The module can then (i) receive the second key, (ii) decrypt the second shared secret key K, and (iii) authenticate with the wireless network using the second shared secret key K. The module can comprise a mobile phone.

The invention relates to the technical field of embedded security, and discloses an installation system of an eSIM configuration file, which is applied to terminal equipment, and the installation system comprises a communication interface configured to receive an instruction data packet sent by an SM-DP + server, the instruction data packet comprises a security load and an execution bill, the security load is an eSIM configuration file encrypted based on a public key of an eSE asymmetric key pair; the fusion security domain comprises an eSE and an embedded universal integrated circuit card (eUICC), and the eSE is in secure communication with the eUICC; the routing logic unit is configured to route the instruction data packet to the eSE by hardware; wherein the eSE is configured to verify the execution bill, decrypt the security load based on a private key of the asymmetric key pair of the eSE after the verification is passed, so as to obtain an eSIM configuration file, and transmit the eSIM configuration file to the eUICC in a streaming manner; the eUICC is configured to perform an installation of the eSIM profile. According to the method, the security, reliability and anti-attack capability of eSIM configuration file installation can be improved. The invention further discloses an eSIM configuration file installation method and device and terminal equipment.

A network service access method for a mobile terminal device includes adding an access data field to an application protocol data unit of a universal integrated circuit card of the mobile terminal device; enabling first operator data and second operator data of the universal integrated circuit card of the mobile terminal device; issuing an instruction to access first issuer security domain data of the first operator data or an instruction to access second issuer security domain data of the second operator data; and accessing data corresponding to the first issuer security domain data of the first operator data or accessing data corresponding to the second issuer security domain data of the second operator data.

There is provided a universal integrated circuit card (UICC) for controlling radio communications via a radio communications network to and from a host device in which the UICC is installed in use, the UICC comprising: a microprocessor for controlling the operation of the UICC; a data store for storing data relating to the operation of the UICC, the data store comprising: a plurality of mobile operator network profiles including: an operational profile comprising radio communications network settings for connecting the host device to a first radio communications network; and a bootstrap profile comprising radio communications network settings for connecting the host device to a second radio communications network; and a program comprising a plurality of instructions for configuring operation of the UICC; wherein, in use, the microprocessor is configured by the program to: use the operational profile to connect the host device to the first radio communications network; detect a loss of operational connectivity with the first radio communications network; and use the bootstrap profile to connect the host device to the second radio communications network to re-establish radio communications to and from the host device. There is further provided a host device comprising a processor having a memory, a radio module for connecting the host device to a radio communications network, and the universal integrated circuit device. There is further provided a method of operating a UICC, and a computer-implemented method of re-establishing a radio communications network connection between a host device and a network platform providing the radio communications network connection, wherein the host device includes a UICC.

A security management service for Internet-of-things devices can obtain, from an Internet-of-things device and via a cellular network, a request by the Internet-of-things device to register with the cellular network, the Internet-of-things device including a universal integrated circuit card that stores a unique identifier for the Internet-of-things device and a cellular transceiver. The security management service can obtain behavioral data describing activity associated with the Internet-of-things device and can determine, based on the identity data and the behavioral data, if the Internet-of-things device is operating normally and as expected and if the Internet-of-things device is under the control of any unauthorized entity before allowing the Internet-of-things device to register with the cellular network.

The disclosure provides a method for installing a bound profile package on an embedded Universal Integrated Circuit Card, eUICC, during manufacturing of a device embedding the eUICC, the method being carried out by a binding module and comprising the following steps: - ordering (202) at least one protected profile package from a profile management server; - obtaining (209; 213) at least one identifier of the eUICC; - binding (210; 214) at least one of the ordered at least one protected profile package with the identifier of the eUICC, to obtain a bound profile package; - installing (211: 215) the obtained bound profile package on the eUICC.

Embodiments described herein relate to wireless communications, including methods and apparatus for configuring synthetic electronic subscriber identity module (eSIM) profiles for wireless devices based on user credentials. A synthetic eSIM profile is generated at a wireless device based on transformation of user credentials that include a user identity and user cryptographic information. The user identity can include an identifier for a user account, and the user cryptographic information can include a password for the user account. The wireless devices can use the synthetic eSIM profile to obtain and load one or more fully functional eSIM profiles to an embedded universal integrated circuit card (eUICC) to without requiring a bootstrap eSIM profile or non-cellular wireless access.

A user equipment (UE), baseband processor, embedded universal integrated circuit card (eUICC), and network device (e.g., a shared profile vendor server) are described. A UE that includes an eUICC can perform transmitting, for receipt by a shared profile vendor server, a first message of a shared profile operational international mobile subscriber identity (IMSI) provisioning procedure. The first message may include a randomized IMSI. In response to the first message, the UE may receive a second message that includes an indication of a time counter value. In response to the second message, the UE may transmit, in response to determining that the time counter value is valid, a third (e.g., penultimate) message to the bootstrap vendor server. The UE may then receive in response a fourth message (e.g., final) of the shared profile operational IMSI provisioning procedure, the fourth message including a shared profile operational IMSI for the eUICC.