186 results about "Universal Integrated Circuit Card" patented technology

An apparatus includes a processing device, communications hardware configured to enable wireless communication by the apparatus, and a universal integrated circuit card (UICC). The UICC stores a decentralized electronic subscriber identity module (dSIM) that hosts a decentralized access application that is configured to exchange information with a decentralized mobile network core utilizing the communications hardware to perform an asymmetric authentication session.

An apparatus configured to receive, from a provisioning server, a request to create at least one sub-profile of at least one profile stored within an embedded universal integrated circuit card of the apparatus; wherein the request comprises encrypted subscription data comprising a symmetric key between a service provider and a user of the apparatus; store the symmetric key within the embedded universal integrated circuit card of the apparatus; and create the at least one sub-profile of the at least one profile stored within the embedded universal integrated circuit card of the apparatus; wherein the at least one sub-profile of the at least one profile stored within the embedded universal integrated circuit card of the apparatus is configured to be used to authenticate the user of the apparatus to the service provider with use of the symmetric key without involvement of a mobile network operator.

The present invention discloses methods and systems for establishing data communication at a network device. The method includes identifying a cellular network by the network device. After that, the network device sends a request to an MSA for an embedded subscriber identification module (eSIM) profile of the cellular network. The MSA may or may not have an eSIM profile of the cellular network available. When an eSIM profile of the cellular network is available, the network device receives the eSIM profile information from the MSA. The network device then sends a request for data communication access to the cellular network using the eSIM profile information to obtain data communication access through the cellular network. The network device may comprise at least one universal integrated circuit card (UICC) and / or embedded universal integrated circuit card (eUICC).

The present invention discloses methods and systems for establishing data communication at a network device. The method includes identifying a cellular network by the network device. After that, the network device sends a request to an MSA for an embedded subscriber identification module (eSIM) profile of the cellular network. The MSA may or may not have an eSIM profile of the cellular network available. When an eSIM profile of the cellular network is available, the network device receives the eSIM profile information from the MSA. The network device then sends a request for data communication access to the cellular network using the eSIM profile information to obtain data communication access through the cellular network. The network device may comprise at least one universal integrated circuit card (UICC) and / or embedded universal integrated circuit card (eUICC).

To enable a server providing a prescribed service to identify a present owner of an information processing device.SOLUTION: An information processing device includes: an embedded Universal Integrated Circuit Card (eUICC) holding first profile information to be used for connection to a first communication system; and a control unit for executing the connection to the first communication system by using the first profile information. The control unit executes processing of: acquiring, from a prescribed certificate authority, a first electronic certificate that certifies that first authentication information that is used for authentication by a first server is for a first owner; storing the first authentication information and the first electronic certificate in the eUICC; and receiving authentication by the first server by using the first authentication information and the first electronic certificate. A default profile is stored in the eUICC, and the information processing device connects the first communication system by using the default profile while the information processing device is being sold as a new product or used product.SELECTED DRAWING: Figure 1

A user equipment (UE), comprising at least one processor may be configured to transmit a first attach request to a first wireless network based on a first subscriber identity module. The UE may determine that the first attach request was unsuccessful and may automatically activate a switching application to switch the UE from the first subscriber identity module to a second subscriber identity module based on the determination. The first and second subscriber identity modules are stored on a common universal integrated circuit card (UICC) associated with the UE. The UE may then transmit a second attach request to the first wireless network based on the second subscriber identity module.

The invention provides systems, methods, and computer-readable media for multi-factor authentication (MFA) using device and carrier validation. A user device generates an attested blob containing cryptographic keys and a Universal Integrated Circuit Card (UICC)-originated International Mobile Subscriber Identity (IMSI), which is transmitted to a cloud-based MFA service. The service validates the attested blob, coordinates with an Original Equipment Manufacturer (OEM) service, and executes an Extensible Authentication Protocol-Authentication and Key Agreement (EAP-AKA) process with the carrier network to establish mutual trust. Authentication data, including a validated phone number independent of the device's stored number, is securely stored in a cloud wallet. The invention enhances security by mitigating risks such as spoofing, replay attacks, and SIM swapping, providing a novel authentication framework compatible with modern networks.

A universal integrated circuit card (UICC) is configured to provide a list to a communication device that indicates i) available profiles of a plurality of profiles that allow the communication device to access a respective wireless network, and ii) a currently enabled public network profile of the plurality of profiles, the available configuration file at least comprises a private network configuration file with a specified fallback attribute. The UICC receives a trigger from the communication device indicating a network event, such as a loss of connection. In response to the trigger, the UICC identifies the appropriate profile as a fallback / anchor profile; forbidding the currently enabled network configuration file; enabling the newly identified network configuration file; and sending the refresh command to the communication device.

This application describes managing configuration of a bootstrap electronic SIM (eSIM) for a wireless device. A bootstrap eSIM on an embedded universal integrated circuit card (eUICC) of the wireless device is configured as needed to provide cellular wireless access. The bootstrap eSIM is configured with an initial international mobile subscriber identity (i-IMSI) value used to establish a cellular connection to obtain a bootstrap IMSI (b-IMSI) value allocated for temporary, dedicated use by the wireless device. The b-IMSI value is selected by a bootstrap server based on a bootstrap selection rule obtained from a bootstrap rules service, where the bootstrap selection rule accounts for a use case type provided by the wireless device and indicating a purpose for use of the b-IMSI value. The b-IMSI value is returned to a pool for use by other wireless devices after expiration of a timer or responsive to a delete notification message.

A user equipment (UE) for handling slice information with single network slice selection assistance information (S-NSSAI) mapping for universal integrated circuit card (UICC) processor is provided. The UE operates by determining whether a baseband processor of the UE is in a busy state. Based on a determination that the baseband processor is not in the busy state, the baseband processor sends a fetch message to a UICC processor of the UE, where the fetch message is sent in response to receipt of a proactive-command-pending message from the UICC processor. The baseband processor receives a proactive-command message from the UICC processor, where the proactive-command message corresponds to a request for single network slice selection assistance information (S-NSSAI) information corresponding to one or more network slices. Finally, the baseband processor sends a response message with the S-NSSAI information to the UICC processor.

The embodiment of the invention provides an information interaction method and device, equipment, a storage medium and a product. Comprising the following steps: an embedded universal integrated circuit card (eUICC) completes a power-on operation and returns reset response (ATR) information, so that a baseband chip judges whether the eUICC supports a multi-activation configuration file (MEP) function or not according to the ATR information; if the MEP function is supported, a protocol parameter selection PPS sent by the baseband chip is received and a response is made so as to confirm that both communication parties support the MEP function; receiving a configuration state acquisition instruction sent by the baseband chip; according to the configuration state obtaining instruction, state instruction return information is sent to the baseband chip, so that the baseband chip sends an instruction to the LSI through an application protocol data unit APDU instruction according to the state instruction return information, and management of configuration file information is executed. The method is used for achieving the effect of improving the communication efficiency and reliability between the baseband chip and the eUICC card.

An electronic device is provided. The electronic device includes an embedded universal integrated circuit card (eUICC), memory storing one or more computer programs, and one or more processors communicatively coupled to the eUICC and the memory, wherein the one or more computer programs include computer-executable instructions that, when executed by the one or more processors individually or collectively, cause the electronic device to based on identifying at least one user input causing transfer of a first profile stored in the eUICC to an external electronic device, transmit a first message requesting the transfer of the first profile to the external electronic device, based on receiving a second message requesting deletion of the first profile corresponding to the first message, delete the first profile, transmit a third message indicating the deletion of the first profile to an subscription manager data preparation plus (SM-DP+) server, receive, from an entitlement server, a fourth message indicating that the first profile is completely ready in the SM-DP+ server receiving the third message, transmit a fifth message requesting profile download information to the entitlement server, based on the fourth message, receive a sixth message including the download information corresponding to the fifth message from the entitlement server, and provide the download information identified based on of the sixth message.

An electronic device includes at least one embedded universal integrated circuit card (eUICC) each storing at least one subscriber identification information, and at least one processor electrically connected with the eUICC. The at least one processor may be configured to control to transmit, to a first server, a first request message including information about an operation related to a subscription or a subscription transfer based on the eUICC and receive a first response message from the first server, in response to the transmission of the first request message. The first response message may include information indicating that a profile to be provided for the eUICC is not ready in response to the first request message.

An electronic device includes at least one embedded universal integrated circuit card (eUICC) each storing at least one subscriber identification information, and at least one processor electrically connected with the eUICC. The at least one processor may be configured to control to transmit, to a first server, a first request message including information about an operation related to a subscription or a subscription transfer based on the eUICC and receive a first response message from the first server, in response to the transmission of the first request message. The first response message may include information indicating that a profile to be provided for the eUICC is not ready in response to the first request message.

Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

A network service accessing method for a mobile terminal apparatus includes adding an access profile column of an application protocol data unit (APDU) of an embedded universal integrated circuit card (eUICC) of the mobile terminal apparatus; enabling a first profile and a second profile of the eUICC of the mobile terminal apparatus; sending a command of accessing a first issuer security domain profile (ISD-P) of the first profile or a command of accessing a second ISD-P of the second profile; and accessing data of the first ISD-P of the first profile or data of the second ISD-P of the second profile.

Apparatus receives, from a subscriber identity module (SIM) manager, a mobile network operator (MNO) profile comprising first provisioning parameters, for provisioning apparatus to a MNO, and a module comprising second provisioning parameters, for provisioning apparatus to an apparatus manager. Instructions provision apparatus to the MNO using the first provisioning parameters, and provisions the apparatus to an apparatus manager using the second provisioning parameters. The module may be an applet. Apparatus may store MNO profile and module in a security domain of an embedded universal integration circuit card (eUICC). Provisioning apparatus to the apparatus manager comprises sending, from the module to an apparatus manager application on the apparatus, the second provisioning parameters and sending, from the apparatus manager application to the apparatus manager, a request to provision the apparatus to the apparatus manager. The second provisioning parameters may include an access key. Data may be sent, from the module to the apparatus manager application, using the access key. Apparatus may receive, by the module from the application manager via the SIM manager, configuration parameters and store, by the module, the configuration parameters.

The invention relates to the field of communication, and provides an embedded universal integrated circuit card data downloading method and device, equipment and a medium. The method comprises the following steps: acquiring equipment identity information of a user terminal from an eUICC card of the user terminal through a non-contact channel under the condition that a non-contact channel connection is established between an operator system and the user terminal; the equipment identity information comprises IMEI and / or EID; determining operator code number data corresponding to the eUICC card according to the equipment identity information and sending the operator code number data to the SM-DP + platform; the SM-DP + platform is indicated to generate an operator code number data configuration file Profile; under the condition that the Profile is generated in the SM-DP + platform, downloading the Profile from the SM-DP + platform through an operator system; and the Profile is written into the eUICC card through the non-contact channel. According to the technical scheme, the service resource consumption is relatively low.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method and an apparatus for providing a dual subscriber identity module (SIM) function even in a terminal with a single embedded universal integrated circuit card (eUICC) mounted are provided. A method and an apparatus for installing, activating, and managing a plurality of profiles are provided, so that even a terminal with a single eUICC mounted may provide a dual SIM function in a communication system. The method includes the following embodiments to achieve the foregoing aspect, a method in which an eUICC receives a command involving a profile state change from a local profile assistant (LPA), registers a proactive command, and notifies a modem of logical interface information for obtaining the proactive command, a method in which the eUICC determines whether to perform polling on a specific logical interface by combining predetermined information, such as the logical interface information received from the mode, the state of a logical interface collected and possessed by the modem, and the number of an interface on which a corresponding message is received, and a method in which the modem receives and processes the proactive command by performing polling on the logical interface.

The invention discloses a data processing method and terminal equipment. The terminal equipment comprises a microcontroller, a local code number assistant and an embedded universal integrated circuit card, the data processing method comprises the steps that a local code number assistant sends a file downloading request to a microcontroller; the microcontroller sends a file downloading request to an operator server; the operator server sends a file downloading response to the microcontroller; the microcontroller sends a file downloading response to the local code number assistant; and the local code number assistant installs the configuration file in the file downloading response to the embedded universal integrated circuit card. According to the embodiment of the invention, the microcontroller in the terminal equipment is used as a communication channel between the local code number assistant and the operator server, and the function of writing the number over the air can also be realized when the default number is not preset in the terminal equipment.

A method for updating electronic subscriber identity modules, eSIMs (208), on an embedded universal integrated circuit card, eUICC (108) contained in a wireless device (102, 302), the method comprising: by a processing circuit of the wireless device (102, 302) outside the eUICC (108): Perform an eSIM update process, which includes: Sending, to the eUICC (108), a command to trigger an eSIM update applet (212) on the eUICC (108); Receiving, from the eUICC (108), a request to establish a secure data connection to a network provisioning server (116); Establishing the secure data connection between the eUICC (108) and the network provisioning server (116); and Receiving, from the eUICC (108), an eSIM update status; and characterized by: Repeat the eSIM update process until the eSIM update status indicates success or a maximum number of retries are made.

The present disclosure relates to a system and a method for selecting multi-radio access technology (RAT) in a user equipment (UE) during an initialization of subscriber identity module (SIM). The method includes reading capability information associated with the UE from a universal integrated circuit card (UICC) at the time of initializing the SIM, determining whether the UE includes a capability to connect to a first network having a first RAT based on the capability information, and registering the UE with the first network having the first RAT based on the UE capable of being connected to the first network.

An embedded Universal Integrated Circuit Card (eUICC) for Internet of Things (IoT) devices is associated by a method with a set of external remote manager modules (external operational remote manager modules performing a set of operations comprising profile state management operations and remote manager modules management operations in said eUICC for IoT devices). The method includes: performing in said eUICC for IoT devices an association between the eUICC for IoT devices and the external handling remote manager module configured to perform in the set of operations only remote manager modules management operations in said eUICC for IoT devices; and in response to a request of associating an external operational remote manager module issued via said at least one external handling remote manager module, performing in the eUICC for IoT devices an association between the eUICC for IoT devices and at least one external operational remote manager module.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method performed by a terminal in a wireless communication system is provided. The method comprises transmitting to a subscription manager discovery service (SM-DS) information indicating a support of a push service, receiving from the SM-DS a list of push services supported by the SM-DS, selecting at least one push service based on the list of push services supported by the SM-DS, generating an embedded Universal Integrated Circuit Card (eUICC) signature based on an indicator indicating at least one selected push service and a push token, and transmitting to the SM-DS the indicator, the push token, and the eUICC signature.

A profile download method includes a primary device obtaining an embedded integrated circuit card identifier (EID) of a secondary device, where the EID is used by the primary device to obtain, from a mobile operator server, profile download information that matches the EID. The primary device receives the profile download information from the mobile operator server and sends the profile download information to the secondary device, where the profile download information is used by the secondary device to download a profile from a profile management server, and where the profile is installed in an embedded UICC (eUICC) of the secondary device after the download is complete.

A mobile device (100) is disclosed. The mobile device exchanges data in a wireless manner. The mobile device includes: an application processor (110); a baseband modem (120); a universal integrated circuit card (UICC) (130), operatively connected to the base-band modem (120) via a first interface (131); and a contactless interface (140), operatively connected to the UICC (130) via a second interface (139). The UICC (130) stores multiple profiles (151, 152, 153, 154), each of which can selectively be in an enabled state or a disabled state. The UICC (130) stores multiple interface modules (161, 162, 163), each of which allows access of one of the profiles (151, 152, 153, 154) stored in the UICC (130) to the contactless interface (140) via the second interface.

A user equipment (UE) that includes at least a processor and universal integrated circuit card (UICC) are described. The UE or a processor thereof can perform initializing a universal subscriber identity module (USIM) for communication with a cellular network, and registering with the cellular network using the USIM. The UE or processor provides, to the UICC, location information for a serving cell of the cellular network, where the location information including an identifier of a reduced capability serving cell or a private network cell. The UE or processor can then communicate with the serving cell according to a configuration that is based at least in part on the location information that is provided to the UICC.

The disclosure relates to a 5G or 6G communication system to support a higher data rate after a 4G communication system (e.g., LTE). The disclosure provides a method performed by a user equipment (UE) in a wireless communication system, the method including receiving, by a modem, a first message including at least one of information related to whether an embedded UICC (eUICC) function is supported and information related to whether a multiple enabled profile (MEP) is supported from an eUICC, and determining, by the modem, to operate with an MEP function based on the received at least one of the information related to whether the eUICC function is supported and the information related to whether the MEP is supported. Furthermore, various embodiments of the disclosure provide a method and apparatus for providing a dual SIM function even in a UE equipped with a single eUICC in a wireless communication system.

Herein provided is a solution to recover a subscription profile of a user that has lost or broken their mobile phone, smartphone, PDA, or other type of terminal. The solution reduces the risk of a subscription clone after having broken or lost their device. In one embodiment, a method herein provides for the recovering of a subscription profile loaded in a secure element that would not otherwise be retrievable from a telecommunication terminals, like eUICCs. The method includes the steps of retrieving the profile downloaded in the first secure element, and then installing it in a second secure element. Other embodiments are disclosed.

The described embodiments set forth techniques for recovering one or more electronic subscriber identity modules (eSIMs) previously deleted from an embedded universal integrated circuit card (eUICC) of a mobile wireless device. Prior to deletion of an eSIM, the mobile wireless device uploads first eSIM subscription information to a cloud network services server and stores second eSIM subscription information in a secure memory of the eUICC. The mobile wireless device can subsequently download the first eSIM subscription information to verify matching to the second eSIM subscription information stored in the eUICC before displaying an option for recovering the eSIM. The mobile wireless device sends to a mobile network operator (MNO) provisioning server an eSIM recovery request notification that includes at least a portion of the first eSIM subscription information, and the MNO provisioning server provides an eSIM recovery response message indicating approval and a network address to download the eSIM.