Simulacrum Physical Security Device for Flexible eSIM Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing USIM solutions are inflexible, requiring a new UICC for changing operators and are not suitable for handling multiple profiles, leading to inefficiencies and security concerns, while maintaining physical security benefits.
Innovation Solution
Implementing a simulacrum-based approach where a physical card represents an electronic SIM (eSIM) with a unique identifier, allowing remote provisioning and activation, maintaining backward compatibility and physical security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a physical UICC card is used to store USIM software, then physical security benefits are maintained (difficulty to reproduce and clone), but flexibility is lost requiring a new UICC for changing operators and multiple profiles
Solution Approach 1:
The system separates the physical identification function (stored on the simulacrum card) from the logical subscriber profile function (stored remotely on the network). The simulacrum contains only an identifier that references the actual USIM data stored on the network, allowing the physical card to remain secure while the logical profiles remain flexible and changeable.
Solution Approach 2:
The system creates a simulacrum (copy or representation) of the physical UICC card that contains only an identifier rather than the actual USIM software. This simulacrum serves as a physical token for authentication while the real subscriber data exists remotely, enabling flexible profile management without compromising physical security.
2Ease of manufacture
If USIM software is hard-coded to the physical UICC card media, then distribution and sale control is simplified, but the ability to handle multiple USIM profiles within the same UICC is lost
Solution Approach 1:
The system divides the USIM functionality into two separate components: the simulacrum on the physical card which handles identification and authentication, and the actual USIM profiles stored remotely on the network which handle subscriber data and service management. This segmentation allows one card to support multiple profiles.
Solution Approach 2:
The simulacrum card is designed as a universal identifier that can reference multiple different USIM profiles stored on the network. A single physical card can thus serve multiple functions by switching between different remotely-stored profiles, enabling multi-profile capability without requiring multiple physical cards.
3Reliability
If authentication procedures are broken via malicious hacking, then security is compromised, but with physical UICC the subscriber must be issued a new card which is time consuming and expensive
Solution Approach 1:
By using a simulacrum that contains only an identifier rather than the full USIM software, the system creates a lightweight physical token that is less valuable to hackers. If compromised, only the identifier needs to be revoked and reissued, not the entire USIM software stack, significantly reducing replacement time and cost.
Solution Approach 2:
The system extracts the valuable USIM authentication data from the physical card and stores it remotely on the network. The physical card retains only an identifier, which is much less valuable to attackers. This extraction reduces the impact of security breaches and accelerates the card replacement process.
Data Source
AI summary
Described herein is a simulacrum security device and methods. In one embodiment, a simulacrum or likeness of a physical security device is provided for use in conjunction with a software emulation of the security device. In one implementation, a “faux SIM card” is provided that does not contain Subscriber Identification Module (SIM) information itself, but instead enables a user to download Electronic SIM (eSIM) information (e.g., from a network or eSIM server) which is loaded into a software emulation of a Universal Integrated Circuit Card (UICC) device. The faux card is printed with an activation code, scan pattern, or other activation or access information. The subscriber purchases the faux card, and enters the activation code into a device; the entered activation code enables the device to log onto a network, and download the appropriate eSIM data. Delivery of eSIM information as enabled by the faux card addresses deficiencies in existing SIM distribution schemes, provides users with an enhanced perception of security, and further addresses various legal requirements.