eUICC Firmware Update Recovery via Backup Loader

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Firmware updates for embedded Universal Integrated Circuit Cards (eUICCs) in mobile devices can be risky, as improper updates may render hardware components inoperable, and there is no easy replacement for corrupted eUICCs since they are embedded within the devices.

Innovation Solution

Implementing a firmware loader that manages both primary and backup firmware, allowing for secure updates and recovery by obtaining and installing updated firmware packages, including authentication information, and using a backup firmware to restore operability when primary firmware becomes corrupted.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If firmware updates are performed on eUICC, then new or enhanced services can be provided to users, but the risk of hardware components becoming permanently inoperable increases

Engineering Contradiction:
Improveservice capabilityVSAvoidoperability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary actions by validating firmware updates before installation through multiple checks: authentication of the update package, verification of digital signatures, checking of hash values, and validation of firmware integrity. These preliminary validations prevent corrupted or malicious firmware from being installed, thereby maintaining reliability while enabling service updates.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system prepares compensatory measures in advance by maintaining backup firmware versions and establishing rollback mechanisms. If a firmware update fails or causes operational issues, the system can revert to the previous working version, cushioning against the risk of permanent inoperability while still allowing for service enhancements.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Adaptability or versatility

If eUICC firmware is updated, then enhanced services are enabled, but the complexity of firmware management increases

Engineering Contradiction:
Improveservice capabilityVSAvoidfirmware management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The eUICC system performs self-service through automated firmware management including automatic download, validation, installation, and verification of firmware updates. The system autonomously handles authentication, integrity checking, and update application without requiring complex external management infrastructure, thereby reducing overall system complexity while enabling service enhancements.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements feedback mechanisms where the eUICC reports its firmware status, version information, and operational state to the network. This feedback enables remote management of firmware updates and allows the system to automatically respond to update availability, reducing the complexity of manual firmware management while maintaining service adaptability.

Inventive Principle:
Principle #23Feedback

3Ease of manufacture

If eUICC is embedded within mobile device, then design is simplified and space is freed up, but replacement becomes difficult if firmware corruption occurs

Engineering Contradiction:
Improvedevice designVSAvoidfirmware replacement
Core Design Contradiction:
Ease of manufactureVSEase of repair

Solution Approach 1:

The system creates and maintains copies of firmware in multiple storage locations including primary firmware, backup firmware, and rollback versions. These copies enable recovery and replacement operations without requiring physical replacement of the embedded eUICC, thereby maintaining ease of manufacture while improving ease of repair through software-based recovery mechanisms.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The system implements discarding and recovering by maintaining backup firmware versions that can be recovered and applied when primary firmware becomes corrupted. The rollback mechanism allows the system to discard the failed firmware version and recover using a previous working version, eliminating the need for physical replacement of the embedded eUICC while maintaining design simplicity.

Inventive Principle:
Principle #34Discarding and recovering

Data Source

PatentUS9524158B2Managing firmware updates for integrated components within mobile devices
Publication Date: 2016.12.20 APPLE INC
  • US9524158B2 patent drawing
  • US9524158B2 patent drawing
  • US9524158B2 patent drawing

AI summary

Disclosed herein is a technique for updating firmware of an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device. The technique includes the steps of (1) receiving, from a firmware provider, an indication that an updated firmware is available for the eUICC, (2) in response to the indication, providing, to the firmware provider, (i) a unique identifier (ID) associated with the eUICC, and (ii) a nonce value, (3) subsequent to providing, receiving, from the firmware provider, a firmware update package, wherein the firmware update package includes (i) authentication information, and (ii) the updated firmware, (4) subsequent to verifying the authentication information, persisting, to a memory included in the mobile device, a hash value that corresponds to the updated firmware, and (5) installing the updated firmware on the eUICC.