Remote operational management of E-SIM
Techniques are described herein for remotely managing profiles corresponding to various mobile network operators offering telecommunication services to target user equipment based on one or more policies. The techniques include loading at least one profile on an embedded UICC (eUICC) of a user equipment, the one of profiles including a prioritized profile. The techniques also include receiving a request that includes an embedded UICC identifier (EID) and an integrated circuit card identifier (ICCID) corresponding to the eUICC of the user equipment, wherein the request is for locking one or more functionalities of the user equipment. One or more policies are retrieved for locking the one or more functionalities from a policy database. Based at least on the one or more policies, locking instructions are sent to the user equipment. The instructions include instructions to enable the prioritized profile.
1. A computer-implemented method, comprising:
loading at least one profile on an embedded UICC (eUICC) of a unique user equipment, one of the at least one profile comprising a prioritized profile;
receiving a request comprising an embedded UICC identifier (EID) and an integrated circuit card identifier (ICCID) corresponding to the eUICC of the user equipment, the request for locking one or more functionalities of the user equipment;
retrieving from a policy database, the policy database storing one or more policies for locking the one or more functionalities of the user equipment;
determining, based at least on the one or more policies, whether to lock the one or more functionalities; and
transmitting locking instructions to the user equipment in response to deciding to lock the one or more functionalities, the instructions comprising enabling the prioritized profile.
2. The computer-implemented method of claim 1 , further comprising the steps of:
validating the EID and the ICCID against a register of device identifiers.
3. The computer-implemented method of claim 1 , wherein the prioritized profile is managed by a mobile network operator (MNO).
4. The computer-implemented method of claim 1 , further comprising the steps of:
receiving an additional request for deleting the prioritized profile in the eUICC;
determining, based at least on the one or more policies, whether to delete the prioritized profile; and
transmitting instructions to the user equipment to delete the prioritized profile in response to deciding to delete the prioritized profile.
5. The computer-implemented method of claim 4 , wherein the determining comprises reviewing eligibility criteria in the one or more policies, the eligibility criteria based on a rate plan and account status associated with a customer account corresponding to the user equipment.
6. The computer-implemented method of claim 4 , further comprising the steps of:
receiving a new request for adding a new profile in the eUICC;
determining whether the new profile has been loaded and available in a subscription manager in communication with the user equipment; and
transmitting an error message to the user equipment in response to determining that the requested profile has not been loaded and available in the subscription manager.
7. The computer-implemented method of claim 1 , wherein the determining comprises identifying delinquency in payment for a customer account corresponding to the user equipment.
8. A system, comprising:
one or more nontransitory storage mediums configured to provide stored code segments, the one or more nontransitory storage mediums coupled to one or more processors, each configured to execute the code segments and causing the one or more processors to:
load at least one profile on an embedded UICC (eUICC) of a unique user equipment, one of the at least one profile comprising a prioritized profile;
receive a request comprising an embedded UICC identifier (EID) and an integrated circuit card identifier (ICCID) corresponding to the eUICC of the user equipment, the request for locking one or more functionalities of the user equipment;
retrieve from a policy database, the policy database storing one or more policies for locking the one or more functionalities of the user equipment;
determine, based at least on the one or more policies, whether to lock the one or more functionalities; and
transmit locking instructions to the user equipment in response to deciding to lock the one or more functionalities, the instructions comprising enabling the prioritized profile.
9. The system of claim 8 , wherein the one or more processor is further configured to:
receive an additional request to replace the prioritized profile loaded on the eUICC with a new profile;
determine, based at least on the one or more policies, whether to unlock the one or more functionalities; and
in response to unlocking the one or more functionalities, serve the eUICC with a new profile.
10. The system of claim 9 , wherein the one or more processor is further configured to:
determine whether the new profile has been loaded and is available in a subscription manager in communication with the user equipment in response to deciding to unlock the one or more functionalities.
11. The system of claim 9 , wherein the one or more processor is further configured to:
transmitting instructions to the user equipment to replace the prioritized profile in response to deciding to unlock the one or more functionalities.
12. The system of claim 8 , wherein the eUICC is stored in a data store, the data store comprising a home subscriber server (HSS) of a telecommunications network or a home location register (HLR) of the telecommunications network.
13. The system of claim 8 , wherein the one or more processor is further configured to add, delete, and edit the one or more policies.
14. The system of claim 8 , wherein the one or more functionalities are associated with the prioritized profile.
15. One or more nontransitory computer-readable media storing computer-executable instructions that upon execution cause one or more processors to perform acts comprising:
loading at least one profile on an embedded UICC (eUICC) of a unique user equipment, one of the at least one profile comprising a prioritized profile;
receiving a request comprising an embedded UICC identifier (EID) and an integrated circuit card identifier (ICCID) corresponding to the eUICC of the user equipment, the request for locking one or more functionalities of the user equipment;
retrieving from a policy database, the policy database storing one or more policies for locking the one or more functionalities of the user equipment;
determining, based at least on the one or more policies, whether to lock the one or more functionalities; and
transmitting locking instructions to the user equipment in response to deciding to lock the one or more functionalities, the instructions comprising enabling the prioritized profile.
16. The one or more nontransitory computer-readable media of claim 15 , wherein the request includes credentials in accordance with a public key infrastructure (PKI)-based authentication protocol.
17. The one or more nontransitory computer-readable media of claim 15 , wherein the request utilizes an identifier correlating with an account that is associated with a plurality of user equipment and a plurality of users.
18. The one or more nontransitory computer-readable media of claim 17 , wherein the determining is based on a rate plan and account status associated with the account.
19. The one or more nontransitory computer-readable media of claim 15 , wherein the one or more nontransitory computer-readable media includes a firewall.
20. The one or more nontransitory computer-readable media of claim 15 , wherein the one or more nontransitory computer-readable media comprises an on-premise server.