Part 2 of remote SIM provisioning of a subscriber entity

A method for remote provisioning of a subscriber identity module (SIM) profile to a subscriber entity, the method being performed by the subscriber entity, the method comprising:

• obtaining, from a remote SIM provisioning server, the SIM profile upon requesting download of the SIM profile;
• comparing a locally computed value of a key-value pair of the SIM profile to a value of the key-value pair as downloaded from a storage entity, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and a mobile network operator (MNO) identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server;
• and
• accepting the SIM profile as valid only when the locally computed value matches the downloaded value.

A remote SIM provisioning server for remote provisioning of a subscriber identity (SIM) profile to a subscriber entity, the remote SIM provisioning server comprising processing circuitry, the processing circuitry being configured to cause the remote SIM provisioning server to:

• obtain a request from a mobile network operator (MNO) entity for generation of the SIM profile;
• generate the SIM profile;
• provide, to a storage entity, a key-value pair of the SIM profile, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and an MNO identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server;
• and
• provide, to the subscriber entity requesting download of the SIM profile, the SIM profile.

A subscriber entity for remote provisioning of a subscriber identity module (SIM) profile to the subscriber entity, the subscriber entity comprising processing circuitry, the processing circuitry being configured to cause the subscriber entity to:

• obtain, from a remote SIM provisioning server, the SIM profile upon requesting download of the SIM profile;
• compare a locally computed value of a key-value pair of the SIM profile to a value of the key-value pair as downloaded from a storage entity, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and a mobile network operator (MNO) identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server;
• and
• accept the SIM profile as valid only when the locally computed value matches the downloaded value.