Embedded universal integrated circuit card (eUICC) profile content management
A mobile network operator (MNO) uses a provisioning server to update or install profile content in a profile or electronic subscriber identity module (eSIM). In an exemplary embodiment, the profile is present on a secure element such as an embedded universal integrated circuit card (eUICC) in a wireless device. One or more MNOs use the provisioning server to perform profile content management on profiles in the eUICC. In some embodiments, an MNO has a trust relationship with the provisioning server. In some other embodiments, the MNO does not have a trust relationship with the provisioning server and protects payload targeted for an MNO-associated profile using an over the air (OTA) key.
1. A method comprising:
by an embedded universal integrated circuit card (eUICC) in a device:
receiving, from a provisioning server via the device, a message generated by the provisioning server, the message including a profile content package comprising a partial electronic subscriber identity module (eSIM) for updating content of a profile present on the eUICC, wherein:
the message includes metadata including i) an integrated circuit card identifier (ICCID) value identifying the profile to be updated, ii) a mobile network operator (MNO) identifier (ID) value identifying the MNO that owns the profile, and iii) a signature of the provisioning server binding the message to the eUICC; and
a source of the profile content package is a MNO server operated by the MNO and separate from the provisioning server;
performing a verification of the message based on the metadata by:
determining a second MNO ID value of an owner of the profile identified by the ICCID value; and
determining whether the MNO ID value included in the metadata matches the second MNO ID value;
when the verification is successful:
installing first data to update content of the profile present on the eUICC, wherein the profile content package includes the first data; and
when the verification is not successful:
discarding the profile content package, wherein:
the MNO server generates the profile content package, and
the provisioning server has a trust relationship with the MNO and with at least one other MNO.
2. The method of claim 1 , wherein the profile content package includes an over-the-air (OTA) script.
3. The method of claim 1 , wherein the profile content package includes an electronic subscriber identity module (eSIM) component.
4. The method of claim 3 , wherein the eSIM component follows an eSIM format template.
5. The method of claim 1 , wherein the signature of the provisioning server is a DPpb signature output by a profile binding function of the provisioning server.
6. The method of claim 1 , wherein the installing comprises identifying the profile on the eUICC identified by the ICCID.
7. The method of claim 1 , wherein the performing the verification further comprises verifying the signature by performing a PKI decryption algorithm on the signature using a public key of the provisioning server.
8. The method of claim 1 , wherein the message includes a public key infrastructure (PKI) certificate of the MNO.
9. The method of claim 8 , wherein the performing the verification further comprises comparing the PKI certificate with the MNO ID included in the metadata.
10. An embedded universal integrated circuit card (eUICC) configured in a device, the eUICC including a processor and instructions that, when executed by the processor, cause the eUICC to perform steps that include:
receiving, from a provisioning server via the device, a message generated by the provisioning server, the message including a profile content package comprising a partial electronic subscriber identity module (eSIM) for updating content of a profile present on the eUICC, wherein:
the message includes metadata including i) an integrated circuit card identifier (ICCID) value identifying the profile to be updated, ii) a mobile network operator (MNO) identifier (ID) value identifying the MNO that owns the profile, and iii) a signature of the provisioning server binding the message to the eUICC; and
a source of the profile content package is a MNO server operated by the MNO and separate from the provisioning server;
performing a verification of the message based on the metadata by:
determining a second MNO ID value of an owner of the profile identified by the ICCID value; and
determining whether the MNO ID value included in the metadata matches the second MNO ID value;
when the verification is successful:
installing first data to update content of the profile present on the eUICC, wherein the profile content package includes the first data; and
when the verification is not successful:
discarding the profile content package, wherein:
the MNO server generates the profile content package, and
the provisioning server has a trust relationship with the MNO and with at least one other MNO.
11. The eUICC of claim 10 , wherein the profile content package includes an over-the-air (OTA) script.
12. The eUICC of claim 10 , wherein:
the profile content package includes an electronic subscriber identity module (eSIM) component; and
the eSIM component follows an eSIM format template.
13. The eUICC of claim 10 , wherein the signature is a DPpb signature output by a profile binding function of the provisioning server.
14. The eUICC of claim 10 , wherein the performing the verification further comprises verifying the signature by performing a PKI decryption algorithm on the signature using a public key of the provisioning server.
15. The eUICC of claim 10 , wherein:
the message includes a public key infrastructure (PKI) certificate of the MNO; and
the performing the verification further comprises comparing the PKI certificate with the MNO ID included in the metadata.
16. A device comprising:
wireless circuitry comprising one or more antennas; and
an embedded universal integrated circuit card (eUICC) communicatively coupled to the wireless circuitry, the eUICC including a processor and instructions that, when executed by the processor, cause the eUICC to perform steps that include:
receiving, from a provisioning server via the device, a message generated by the provisioning server, the message including a profile content package for updating content of a profile present on the eUICC, wherein:
the message includes metadata including i) an integrated circuit card identifier (ICCID) value identifying the profile to be updated, ii) a mobile network operator (MNO) identifier (ID) value identifying the MNO that owns the profile, and iii) a signature of the provisioning server binding the message to the eUICC; and
a source of the profile content package is a MNO server operated by the MNO and separate from the provisioning server;
performing a verification of the message based on the metadata by:
determining a second MNO ID value of an owner of the profile identified by the ICCID value; and
determining whether the MNO ID value included in the metadata matches the second MNO ID value;
when the verification is successful:
installing first data to update content of the profile present on the eUICC, wherein the profile content package includes the first data; and
when the verification is not successful:
discarding the profile content package, wherein:
the MNO server generates the profile content package, and
the provisioning server has a trust relationship with the MNO and with at least one other MNO.