Privacy-enhanced method for linking an eSIM profile

A computing device comprising:

• a memory storing thereon instructions that when executed by a processor of the computing device, cause the computing device to perform operations comprising:
• receiving an EID associated with a mobile device and an activation code associated with an eSIM profile for the mobile device that is associated with a temporary EID (TEID), wherein the eSIM profile is associated with a data plan for the mobile device for accessing a mobile network operated by a mobile network operator;
• accessing, from a data store, the TEID, wherein the TEID is generated based on an indicator of a hash algorithm, a nonce, and a hash generated using the hash algorithm, and wherein the hash is generated based on the indicator, nonce, and an EID of the mobile device;
• generating a hash using the indicator and nonce contained in the stored TEID and the received EID of the mobile device;
• verifying that the generated hash matches the hash contained in the TEID accessed from the data store;
• and
• based on the verifying, sending, to the mobile device, subscription credentials for accessing the mobile network in accordance with the data plan.

A method of provisioning a mobile device configured to communicate on a mobile communications network operated by a mobile network operator, the method comprising:

• determining, by the mobile device in communication with the mobile network operator, a data plan for accessing the mobile communications network operated by the mobile network operator;
• generating, by the mobile device, a temporary EID (TEID) based on an indicator of a hash algorithm, a nonce, and a hash generated using the hash algorithm, wherein the hash is generated based on the indicator, nonce, and EID of the mobile device;
• sending, by the mobile device to the mobile network operator, the TEID to identify the mobile device in lieu of using the device's EID, wherein the TEID is stored in a data store and an eSIM profile for the mobile device is associated the TEID;
• sending, by the mobile device to an eSIM server, the device's EID over a secure communications channel;
• and
• receiving, by the mobile device via the secure communications channel, subscription credentials for accessing the mobile communications network operated by the mobile network operator in accordance with the data plan, the subscription credentials provided based in part on:
• a verification of the hash contained in the TEID stored in the data store to a hash generated using the indicator and nonce contained in the stored TEID and the device's EID received over the secure communications channel.