Methods for certificate issuance in remote provisioning architectures for embedded UICCS

A method for enabling an owner of a mobile device to remotely provision a Subscriber Identity Module (SIM) of the mobile device, the method comprising:

• a) sending, with the SIM using a first set of security keys, a first message to a Mobile Network Operator (MNO) computer, the message containing an identification number for the SIM and an identification number for the mobile device;
• b) reporting, with the MNO computer, the identification number for the SIM and the identification number of the mobile device to a computer associated with an owner of the mobile device;
• c) in response to receiving the identification number for the SIM and the identification number of the mobile device to a computer associated with an owner of the mobile device, provisioning, with the computer associated with the owner of the mobile device, a second set of security keys specific for an application running on the mobile device;
• d) sending, with the computer associated with the owner of the mobile device, a second message to the MNO computer, the second message containing the second set of security keys specific for an application running on the mobile device;
• e) sending, with the MNO computer using the first set of security keys, the second message with the second set of security keys specific for the application running on the mobile device;
• and
• f) establishing, with the application running on the mobile device, a secure communication line with the computer associated with the owner of the mobile device using the second set of keys.