eUICC Profile Management via Remote Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional removable UICC cards hinder the miniaturization of M2M terminals and restrict users from switching mobile network operators, as the IMSI in embedded UICC terminals is fixed during manufacturing, leading to inventory management issues and increased terminal costs.
Innovation Solution
A method for managing eUICC key information and profile access credentials, involving a divided role of the Subscription Manager into SM-SR and SM-DP, where the eUICC generates and manages encryption keys for secure routing and data preparation, enabling remote updates and operator changes without physical card replacement.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Volume of moving object
If a removable UICC card is used in terminals, then users can freely switch between terminals and mobile network operators, but the terminal size cannot be miniaturized due to the physical card structure
Solution Approach 1:
The patent replaces the mechanical removable UICC card system with an embedded eUICC system that uses electronic key management and remote provisioning. The physical card is eliminated and replaced by an embedded secure element containing eUICC, with operator profiles delivered electronically through secure key exchange mechanisms between the terminal, eUICC, and operator systems.
2Ease of manufacture
If the IMSI in eUICC is fixed during manufacturing for a specific mobile network operator, then terminal production can be simplified, but users cannot change mobile network operators and terminal inventory management becomes complex
Solution Approach 1:
The patent implements dynamic operator profile assignment where the eUICC can be remotely provisioned with different operator profiles after manufacturing. The system uses dynamic key management and secure authentication mechanisms that allow the terminal to connect to different operator networks by downloading appropriate profiles electronically, eliminating the need for pre-configured fixed IMSI assignments during manufacturing.
3Adaptability or versatility
If remote update of subscriber information in eUICC is implemented, then operator switching becomes possible, but complex key management and security protocols are required
Solution Approach 1:
The patent introduces intermediary components including a Profile Manager and secure authentication protocols that mediate between the eUICC, terminal, and operator systems. These intermediaries handle the complex key management and security protocols by providing standardized interfaces and automated authentication mechanisms, reducing the burden on individual components while enabling secure remote profile updates and operator switching.
Data Source
AI summary
The present invention relates to profile access credentials used for encoding profiles in a system comprising an mobile network operator (MNO), a subscription manager (SM), an embedded UICC (eUICC) and the like, that is, a method for storing/managing an eUICC publication key and a corresponding secret or the like inside the eUICC. In addition, the invention also provides a method for transmitting information on profile access credentials inside the eUICC to external entities for encoding and the like.