Profile-deletion control for an embedded universal integrated circuit card
An eUICC is configured with one or more master delete keys each allowing an associated level of profile-deletion access for deleting one or more profiles from the eUICC, and the eUICC is configured to control profile-deletion access in accordance with the one or more delete keys. For instance, one delete key could allow deletion of any or all profiles on the eUICC including any operational profiles (e.g., MNO profiles) and any non-operational profiles. Whereas, another delete key could allow deletion of any or all operational profiles but not any non-operational profiles. Further, a blockchain protocol could be used to securely convey such a delete key from one party to another, helping to establish chain of custody of the delete key.
1. A method of securely controlling a delete key useable to facilitate deleting profile data from an embedded universal integrated circuit card (eUICC), wherein the eUICC is configured to securely store communication profiles and to securely store a reference key defining an access right for deleting one or more of the profiles from the eUICC, and wherein the eUICC includes a processing unit configured (i) to receive the delete key with a profile-deletion request requesting deletion from the eUICC of at least one of the profiles, (ii) to responsively make a determination of whether the received delete key matches the stored reference key and (iii) responsive to the determination being affirmative, to allow deletion of the at least one profile per the deletion-request, the method comprising:
securely storing the delete key in a blockchain; and
securely conveying the delete key through the blockchain from a first party to a second party,
wherein after receipt of the delete key by the second party, the delete key is useable by the second party to gain access to delete one or more profiles from the eUICC.
2. The method of claim 1 , wherein the first party is a distributor of a host device containing the eUICC, and wherein the second party is a party who receives the host device from the distributor.
3. The method of claim 1 , wherein there is at least one recipient of the delete key in a chain of custody between the first party and the second party.
4. The method of claim 1 , wherein the blockchain is used to securely convey the delete key (i) from a manufacturer of the eUICC to a manufacturer of a host device containing the eUICC and (ii) from the manufacture of the host device to a next owner of the host device.