Personalized iUICC OS Provisioning With Chip-Specific Blob Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing process for establishing a personalized operating system in a mobile device chip is logistically complex and prone to errors, requiring multiple entities to manage chip IDs and public keys, leading to inefficiencies and increased risks of production faults.

Innovation Solution

A method involving the generation and download of a chip-individual or unique operating system blob, which includes a chip-specific operating system component, is used to establish a personalized integrated UICC (iUICC) by programming it directly into the chip, reducing the need for complex logistics and minimizing errors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple entities manage chip IDs and public keys in the existing process, then the operating system can be provisioned to the chip, but the logistical complexity and risk of production faults increase

Engineering Contradiction:
Improveproduction fault riskVSAvoidlogistical complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines the chip ID and public key into a single integrated structure within the operating system blob. This merging eliminates the need for separate management of these identifiers by multiple entities, thereby reducing logistical complexity while maintaining provisioning functionality and reducing production fault risk.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The operating system blob is designed to serve multiple functions simultaneously: it contains the operating system code, the chip-specific identifier, and the public key for secure communication. This multi-functional design simplifies the provisioning process by eliminating the need for separate entities to manage these components individually.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Manufacturing precision

If a chip-individual operating system blob is downloaded and programmed directly into the chip, then the correct operating system is provided to the correct chip, but the production process requires new provisioning steps

Engineering Contradiction:
Improvechip-OS matching accuracyVSAvoidproduction process simplicity
Core Design Contradiction:
Manufacturing precisionVSEase of manufacture

Solution Approach 1:

The chip-specific identifier and public key are embedded into the operating system blob during its generation phase, before the blob is downloaded to the chip. This preliminary integration ensures that the correct operating system is automatically matched to the correct chip during provisioning, achieving high manufacturing precision without adding complex steps to the production process.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If the existing multi-entity process is used, then operating system provisioning can be performed, but errors and production faults increase

Engineering Contradiction:
Improveprovisioning capabilityVSAvoidproduction fault risk
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The operating system blob is generated with inherent chip-specific identification information embedded within it. This self-identifying capability allows the blob to automatically match with the correct chip without requiring external entities to manually manage or verify chip IDs and public keys, thereby maintaining provisioning capability while significantly reducing production fault risk.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP4694239A1Establishing a personalized iuicc operating system in a chip of a mobile device
Publication Date: 2026.02.11 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • EP4694239A1 patent drawingFigure 1
  • EP4694239A1 patent drawingFigure 2
  • EP4694239A1 patent drawingFigure 3

AI summary

A method for establishing, in a chip of a mobile device, a personalized integrated UICC operating system, iUICC operating system, which when established in said chip of said mobile device, creates in said chip an integrated UICC, iUICC, designed for hosting one or several subscriber profiles, wherein, in the chip, a chip individual or/and unique chip identifier, chip ID, is present stored in a chip ID storage area of the chip, the method characterized by the steps: d) (7,8,9,10,11,12) at a second chip provisioning facility (OSP), or a different entity outside the chip: based on the chip ID, generate a chip individual or/and unique operating system blob, containing a chip-individual or/and unique operating system component, which contains chip individual or/and unique personalization data (GSP); download the chip individual or/and unique operating system blob to the chip and program the operating system component to or execute it in the chip, and by the programming or executing effect establishment of a chip individual or/and unique personalized operating system in the chip.