Bootstrap eSIM Provisioning via Secure Server Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The decreasing size of electronic Subscriber Identity Modules (eSIMs) due to chip scale packaging technologies poses a challenge for SIM vendors, as they need to share sensitive information with chip manufacturers for loading bootstrap eSIMs, introducing security issues and operational limitations.

Innovation Solution

A method for provisioning bootstrap eSIMs to mobile devices, where metadata from both the device and the eUICC is used to generate a request, which is then processed by a bootstrap eSIM selection server to obtain and install the eSIM without requiring sensitive information to be shared between vendors and manufacturers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Volume of moving object

If wafer-level chip scale packaging (WLCSP) is used to decrease eUICC size, then chip size is reduced, but sensitive information must be shared with chip manufacturers

Engineering Contradiction:

ImproveeUICC sizeVSAvoidsecurity risk from information sharing

Core Design Contradiction:

Volume of moving objectVSObject-affected harmful factors

Solution Approach 1:

The system separates the eUICC provisioning process into distinct phases: a secure element phase where the eUICC is manufactured without sensitive data, and a later provisioning phase where bootstrap eSIM data is securely downloaded. This segmentation allows small eUICC size while eliminating the need to share sensitive information with manufacturers.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The eUICC is prepared in advance with only basic identification information during manufacturing, without loading sensitive bootstrap eSIM data. The sensitive information is reserved and only downloaded later through secure channels after the device is activated, thus maintaining security while enabling small form factor.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If bootstrap eSIM data is loaded onto eUICCs prior to distribution, then devices can connect to MNOs, but SIM vendors must share sensitive information with chip manufacturers

Engineering Contradiction:

Improvedevice connectivityVSAvoidsensitive information sharing

Core Design Contradiction:

Ease of operationVSLoss of information

Solution Approach 1:

The system introduces a secure provisioning server as an intermediary between the SIM vendor and the eUICC. This server securely stores bootstrap eSIM data and delivers it to devices through authenticated connections, eliminating the need for direct information sharing with chip manufacturers while ensuring device connectivity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The eUICC is designed to autonomously download and install bootstrap eSIM data from secure provisioning servers after device activation. This self-service capability eliminates the need for pre-loading sensitive information during manufacturing, maintaining both connectivity and security.

Inventive Principle:

Principle #25Self-service

3Device complexity

If eUICCs are embedded directly into system boards, then UICC-receiving bays are eliminated, but bootstrap eSIM provisioning becomes more complex

Engineering Contradiction:

Improvedevice structureVSAvoidprovisioning process

Core Design Contradiction:

Device complexityVSEase of manufacture

Solution Approach 1:

The system implements a universal secure provisioning architecture that works across all embedded eUICC devices regardless of manufacturer or device type. The standardized protocol and server infrastructure simplify the provisioning process despite the eUICC being embedded, making it easier to manufacture and deploy at scale.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10397771B2Techniques for provisioning bootstrap electronic subscriber identity modules (eSIMS) to mobile devices

Publication Date: 2019.08.27 APPLE INC

AI summary

Representative embodiments described herein set forth techniques for provisioning bootstrap electronic Subscriber Identity Modules (eSIMs) to mobile devices. According to some embodiments, a mobile device can be configured to issue, to an eSIM selection server, a bootstrap eSIM request that includes (i) metadata associated with the mobile device, and (ii) metadata associated with an electronic Universal Integrated Circuit Card (eUICC) included in the mobile device. In turn, the eSIM selection server selects and binds a particular bootstrap eSIM to the mobile device, and provides information to the mobile device that enables the mobile device to obtain the particular bootstrap eSIM from one or more eSIM servers. When the mobile device obtains the particular bootstrap eSIM, the mobile device can interface with a mobile network operator (MNO) and obtain a complete eSIM that enables the mobile device to access services provided by the MNO.