Method for setting up a subscription profile, method for providing a subscription profile, subscriber identity module

A method for providing subscription profiles for a subscriber identity module by means of a subscription server, wherein in the subscription server the following method steps take place:

• creating a subscription profile for a subscriber identity module;
• encrypting the created subscription profile with a cryptographic key unknown to the subscriber identity module;
• providing the encrypted subscription profile for inserting the encrypted subscription profile into the subscriber identity module;
• sending a cryptographic key or a first key part suitable for decrypting the subscription profile at a time after providing the encrypted subscription profile;
• and
• receiving a confirmation from the subscriber identity module that the subscription profile has been decrypted and installed;
• wherein the subscription profile is decrypted and installed at a time decoupled in time from sending the cryptographic key or the first key part;
• wherein decrypting the encrypted subscription profile and installing the decrypted subscription profile is coordinated to occur in context of a contract conclusion.

A subscriber identity module comprising an encrypted subscription profile stored in the subscriber identity module with:

• a decryption function adapted to decrypt an encrypted subscription profile after receiving a cryptographic key;
• and
• an installation function arranged to install the decrypted subscription profile in the subscriber identity module, thereby setting up the subscription profile in the subscriber identity module;
• wherein the decryption function and the installation function are configured to be decoupled in time from receiving the cryptographic key;
• wherein decrypting the encrypted subscription profile and installing the decrypted subscription profile is coordinated to occur in context of a contract conclusion.