Security Module Provisioning via Proof of Loading Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The production of security modules, such as SIMs, eSIMs, and iSIMs, faces challenges in preventing duplicate production and managing rework processes, especially in distributed manufacturing environments where personalization operations are performed at different times and locations, leading to delays and inefficiencies.
Innovation Solution
A method for managing security module provisioning using a group key shared among chips, where data files are encrypted and loaded onto selected chips, generating a proof of loading (PoL) file, and employing token generation software in a secure execution environment to ensure only one token is generated per data file, preventing duplicate access and allowing chips to be loaded by unaccredited entities while maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If data files are encrypted with a group key and can be loaded by unaccredited entities, then ease of manufacture is improved, but security against duplicate production may be compromised
Solution Approach 1:
A proof of loading (PoL) file serves as an intermediary credential that verifies the loading process was performed correctly. The PoL file contains cryptographic proof that the encrypted data file was successfully decrypted and loaded onto a specific chip using the group key, without exposing the group key itself to unaccredited entities. This mediator mechanism enables unaccredited entities to load data files while maintaining security through verifiable proof of proper loading.
2Adaptability or versatility
If personalization operations are performed at different times and locations in distributed manufacturing, then adaptability is improved, but manufacturing time and coordination complexity increase
Solution Approach 1:
Chips are pre-configured with the group key during manufacturing, enabling them to autonomously decrypt and load encrypted data files at any subsequent location without requiring centralized coordination. The data files are encrypted with the group key in advance, allowing any chip possessing the group key to perform the loading operation independently. This preliminary configuration enables distributed manufacturing operations to proceed autonomously at different times and locations without creating bottlenecks or delays.
3Productivity
If multiple chips can be loaded with the same data file, then productivity is improved, but duplicate production security is compromised
Solution Approach 1:
The system implements feedback through the PoL file generation and verification process. Each time a data file is loaded onto a chip, a unique PoL file is generated that cryptographically binds the data file identifier to the specific chip identifier. This feedback mechanism allows the system to track and verify which chips have been loaded with which data files, enabling batch loading for productivity while maintaining duplicate prevention through cryptographic verification of the loading process.
Data Source
Figure 1
Figure 2~3
Figure 4A
AI summary
A method of managing the provisioning of security modules is described. On successful loading onto a selected chip of a data file providing a service credential for an associated subscription profile, a proof of loading (PoL) file is generated that is cryptographically authenticated using a PoL signing key, the PoL file identifying a unique data file identifier for the loaded data file and a unique chip identifier of the chip onto which the loaded data file has been loaded. The PoL file is processed using token generation software executed in a secure execution environment. The token generation software restricts generation of a token to ensure that, for a given data file, if two or more chips are successfully loaded with that given data file, the token is generated for only one of the two or more chips. In response to successful generation of the token for the selected chip, the selected chip is activated for service access.