eUICC Profile Metadata for Flexible Remote State Changes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing specifications do not allow previously unknown servers to change the state of profiles in eUICCs, particularly in the IoT realm, limiting remote management flexibility.

Innovation Solution

Implementing a profile-state-management flag in the profile metadata that permits any management server, including previously unknown eSIM IoT remote managers, to change the profile state without prior identification or authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing specifications require prior identification or authentication of management servers, then security is improved, but remote management flexibility deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidremote management flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies preliminary action by pre-configuring the profile-state-management flag in the profile metadata during profile creation or download. This flag is set in advance to indicate whether the profile state can be changed by any management server or only by authenticated servers. When the flag is set to permit unrestricted changes, previously unknown servers can manage profile states without prior authentication, enabling flexible remote management in IoT scenarios while maintaining a security control mechanism through the flag configuration.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If profile state changes are restricted to authenticated servers only, then security is improved, but operational flexibility deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidoperational flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies dynamics by making the profile-state-management flag configurable and changeable. The flag can be set to different states (permitting or restricting profile state changes by unknown servers) depending on the operational requirements. This dynamic configuration allows the system to adapt between secure authenticated-only management and flexible unauthenticated management modes, resolving the contradiction between security and operational flexibility.

Inventive Principle:
Principle #15Dynamics

3Adaptability or versatility

If previously unknown servers are allowed to change profile states, then remote management flexibility is improved, but security deteriorates

Engineering Contradiction:
Improveremote management flexibilityVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies parameter changes by modifying the profile metadata to include the profile-state-management flag with specific parameter values. When the flag is set to indicate permission for unknown servers to change profile states, the system parameter governing server authentication requirements is changed. This parameter change enables previously unknown eSIM IoT remote managers to manage profile states without prior identification, achieving the desired remote management flexibility while maintaining controlled security through the flag mechanism.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12483876B2Profile and subscriber identity module having profile
Publication Date: 2025.11.25 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • US12483876B2 patent drawing

AI summary

A profile for implementation in a or implemented in a subscriber identity module (eUICC), wherein the profile can adopt at least a first and a second profile state. The profile including profile metadata. The profile metadata has a profile-state-management flag which can adopt a first and a second flag state of the profile-state-management flag. If the flag adopts the first flag state, any management servers are permitted to change the profile state of the profile.