eUICc Profile Customization via Segmented SCP03t Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In telecommunication systems, especially for eUICCs, the initial IMSI used during manufacturing is not utilized until the profile is downloaded, leading to a significant number of unused IMSIs, resulting in costs for MNOs. Current solutions require re-computing all SCP03t blocks when updating IMSI, which is computationally intensive and costly.
Innovation Solution
A method is introduced where a dedicated applet (PE-Application-1) is added at the end of the pre-generated profile, responsible for updating MNO custom data, such as IMSI, without re-computing all SCP03t blocks. This applet handles the injection of diversified data and its dependencies, reducing the computational burden on HSMs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all SCP03t blocks are re-computed when updating IMSI, then profile security is maintained, but computational load and cost increase significantly
Solution Approach 1:
The profile is divided into multiple SCP03t blocks, where only the last block containing diversified data needs to be re-computed when IMSI is updated, rather than re-computing all blocks. This segmentation allows selective updating of only the necessary portion, reducing computational load while maintaining security integrity through the chaining MAC structure.
2Productivity
If pre-generated profiles are downloaded to end-users, then IMSI utilization increases, but the initial unused IMSIs still represent a cost
Solution Approach 1:
Profiles are pre-generated with placeholder diversified data during manufacturing, allowing them to be immediately downloaded and activated. The actual MNO-specific diversified data (IMSI, IMPI, IMPU) is then injected on-demand through selective block updating. This preliminary preparation enables rapid profile deployment while avoiding the cost of maintaining large pools of completely unused pre-personalized IMSIs.
3Productivity
If multiple HSMs are deployed to handle high download demand, then profile customization speed increases, but hardware cost and complexity increase
Solution Approach 1:
By segmenting the profile into blocks where only the last block requires re-computation during diversification, the computational workload per profile is dramatically reduced. This enables a smaller number of HSMs to handle higher volumes of profile downloads, reducing hardware requirements and system complexity while maintaining or improving customization speed.
Data Source
Figure 1
Figure 2
Figure 3~7
AI summary
The invention concerns a method for personalizing pre-generated protected profiles as defined by the GSMA SGP.02 and SGP.22 RSP Technical Specifications, the method consisting to add an application and diversified data at the end of the profiles in order to recompute only the SCP03t security only at the end of the profiles and to transmit the protected profiles to eUICCs cooperating with terminals.