Selecting a subscriber identity module profile host
In one example, an apparatus comprises a first profile host configured to allow storing at least one non-operational SIM profile. The apparatus further comprises a second profile host comprising a certified non-removable subscriber identity module and configured to allow storing at least one operational SIM profile. The apparatus further comprises a profile host selection unit configured to select only one of the first profile host and the second profile host to be active at any given time.
1. An system, comprising:
a remote server; and
an apparatus comprising:
a first profile host configured to allow storing at least one non-operational subscriber identity module (SIM) profile;
a second profile host comprising a certified non-removable SIM and configured to allow storing at least one operational SIM profile; and
a profile host selection unit configured to select only one of the first profile host and the second profile host to be active at any given time; and
wherein the profile host selection unit is further configured to enable communication between the non-removable SIM and the associated mobile apparatus based on a first configuration value that enables communication between the non-removable SIM and the associated mobile apparatus, and after the communication between the non-removable SIM and the associated mobile apparatus is enabled:
receiving, by the remote sever, a second configuration value entered by a user of the associated mobile apparatus; and
the apparatus:
requesting, from a remote server, a current configuration value;
based on the request, receiving, from the remote server, the second configuration value that disables communication between the non-removable SIM and the associated mobile apparatus;
based on the second configuration value, disabling the enabled communications between the non-removable SIM and the associated mobile apparatus such that no SIM communicates with the associated mobile apparatus.
2. The system as claimed in claim 1 , wherein the profile host selection unit is further configured to deactivate the non-selected profile host.
3. The system as claimed in claim 1 , wherein the non-removable subscriber identity module is associated with a mobile communication apparatus.
4. The system as claimed in claim 1 , wherein, in response to a startup of the mobile apparatus, the profile host selection unit is further configured to access the current configuration value.
5. The system as claimed in claim 4 , wherein the profile host selection unit is further configured to change the current configuration value.
6. The system as claimed in claim 5 , wherein the profile host selection unit is further configured to perform the changing of the current configuration value in response to one of a local request and a remote request.
7. The system as claimed in claim 4 , wherein the profile host selection unit is further configured to perform the accessing of the current configuration value in response to a successful end user authentication.
8. The system as claimed in claim 1 , wherein the at least one non-operational profile comprises at least one of a test profile and a provisioning profile.
9. The system as claimed in claim 1 , wherein the first profile host is arranged in one of a trusted execution environment and a hardware security module.
10. A method, comprising:
receiving an instruction to perform an active profile host selection;
selecting, from a mobile communications apparatus, a first profile host to be active, the first profile host storing an operational subscriber identity module (SIM) profile, the mobile communications apparatus further comprising a second profile host storing at least one non-operational SIM profile, the second profile host comprising a certified non-removable subscriber identity module, and wherein only one profile host is active at any given time; and
upon receiving a request to select the second profile host:
activating the second profile host and enable the communication between the non-removable SIM and the associated mobile apparatus based on a first configuration value that enables communication between the non-removable SIM and the associated mobile apparatus;
deactivating the first profile host; and
after enabling the communication between the non-removable SIM and the associated mobile apparatus:
receiving, by the remote server, a second configuration value entered by a user of the associated mobile apparatus;
request, from the remote server, a current configuration value;
based on the request, receive, from the remote server, the second configuration value that disables communication between the non-removable SIM and the associated mobile apparatus;
based on the second configuration value, disable the enabled communications between the non-removable SIM and the associated mobile apparatus such that no SIM communicates with the associated mobile apparatus.
11. The method as claimed in claim 10 , wherein a non-selected profile host is deactivated.
12. The method as claimed in claim 10 , further comprising accessing, in response to a startup of the mobile apparatus, the current configuration value.
13. The method as claimed in claim 12 , further comprising one of enabling and disabling the communication between the non-removable subscriber identity module and the associated mobile apparatus based on the current configuration value.
14. The method as claimed in claim 12 , further comprising changing the current configuration value.
15. The method as claimed in claim 14 , wherein the changing of the current configuration value is performed in response to one of a local request and a remote request.
16. The method as claimed in claim 12 , wherein the accessing of the current configuration value is performed in response to a successful end user authentication.
17. The method as claimed in claim 10 , wherein the at least one non-operational profile comprises at least one of a test profile and a provisioning profile.
18. One or more computer-readable storage devices comprising computer-executable instructions, that when executed by one or more processors, cause the one or more processors to perform the following:
receiving an instruction to perform an active profile host selection;
selecting, from a mobile communications apparatus, a first profile host to be active, the first profile host storing an operational subscriber identity module (SIM) profile, the mobile communications apparatus further comprising a second profile host storing at least one non-operational SIM profile, the second profile host comprising a certified non-removable subscriber identity module, and wherein only one profile host is active at any given time; and
upon receiving a request to select the second profile host:
activating the second profile host and enable the communication between the non-removable SIM and the associated mobile apparatus based on a first configuration value that enables communication between the non-removable SIM and the associated mobile apparatus;
deactivating the first profile host; and
after enabling the communication between the non-removable SIM and the associated mobile apparatus:
receiving, by the remote server, a second configuration value entered by a user of the associated mobile apparatus;
request, from the remote server, a current configuration value;
based on the request, receive, from the remote server, the second configuration value that disables communication between the non-removable SIM and the associated mobile apparatus;
based on the second configuration value, disable the enabled communications between the non-removable SIM and the associated mobile apparatus such that no SIM communicates with the associated mobile apparatus.
19. The one or more computer-readable storage devices of claim 18 , wherein a non-selected profile host is deactivated.
20. The one or more computer-readable storage devices of claim 18 , wherein the computer-executable instructions further cause the one or more processors to perform the following: accessing, in response to a startup of the mobile apparatus, the current configuration value.