# US 12,120,523 B2 · Part 2 of remote SIM provisioning of a subscriber entity > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,523 B2 - Document ID: US12120523B2 - Status: Granted - Kind: B2 - Application number: 17/621,786 - Filed: 2019-07-03 - Published: 2022-11-10 - Granted: 2024-10-15 - Earliest claimed: 2019-07-03 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Telefonaktiebolaget LM Ericsson (publ) - Inventors: Abu Shohel Ahmed; Patrik Salmela; Kazi Wali Ullah - Web page: https://patentgrep.com/patent/US12120523B2 ## CPC - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W 8/20: Transfer of user or subscriber data - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/40: Security arrangements using identity modules - H04W 12/50: Secure pairing of devices - H04W 8/18: Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract There is provided mechanisms for remote provisioning of a SIM profile to a subscriber entity. A method is performed by a remote SIM provisioning server. The method comprises obtaining a request from an MNO entity for generation of the SIM profile. The method comprises generating the SIM profile. The method comprises providing, to a storage entity, a key-value pair of the SIM profile. The key-value pair comprises a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value. The unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile. The binding information of the at least one profile specific element is represented by an BID of the subscriber entity, ICCID of the SIM profile, IMSI, and an MNO identifier. The method comprises providing, to the subscriber entity requesting download of the SIM profile, the SIM profile. ## Claims ### Claim 1 A method for remote provisioning of a subscriber identity module (SIM) profile to a subscriber entity, the method being performed by a remote SIM provisioning server, the method comprising: obtaining a request from a mobile network operator (MNO) entity for generation of the SIM profile; generating the SIM profile; providing, to a storage entity, a key-value pair of the SIM profile, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and an MNO identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server; and providing, to the subscriber entity requesting download of the SIM profile, the SIM profile. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: obtaining, from the subscriber entity, a request for download of the SIM profile. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: providing, to the subscriber entity, the ICCID of the SIM profile when providing the SIM profile. ### Claim 4 (depends on 1) The method according to claim 1, wherein the remote SIM provisioning server is an enhanced Subscription Manager Data Preparation (SM-DP+entity). ### Claim 5 A method for remote provisioning of a subscriber identity module (SIM) profile to a subscriber entity, the method being performed by the subscriber entity, the method comprising: obtaining, from a remote SIM provisioning server, the SIM profile upon requesting download of the SIM profile; comparing a locally computed value of a key-value pair of the SIM profile to a value of the key-value pair as downloaded from a storage entity, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and a mobile network operator (MNO) identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server; and accepting the SIM profile as valid only when the locally computed value matches the downloaded value. ### Claim 6 (depends on 5) The method according to claim 5, further comprising: requesting download of the SIM profile from the remote SIM provisioning server. ### Claim 7 (depends on 5) The method according to claim 5, further comprising: obtaining the ICCID of the SIM profile from the remote SIM provisioning server when downloading the SIM profile. ### Claim 8 (depends on 5) The method according to claim 5, further comprising: requesting download of the value from the storage entity by presenting the key of the key-value pair to the storage entity. ### Claim 9 (depends on 5) The method according to claim 5, further comprising: providing a locally computed value of the key to the storage entity in order to download the value of the key-value pair from the storage entity. ### Claim 10 (depends on 5) The method according to claim 5, wherein the subscriber entity is an iUICC or an eUICC. ### Claim 11 A remote SIM provisioning server for remote provisioning of a subscriber identity (SIM) profile to a subscriber entity, the remote SIM provisioning server comprising processing circuitry, the processing circuitry being configured to cause the remote SIM provisioning server to: obtain a request from a mobile network operator (MNO) entity for generation of the SIM profile; generate the SIM profile; provide, to a storage entity, a key-value pair of the SIM profile, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and an MNO identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server; and provide, to the subscriber entity requesting download of the SIM profile, the SIM profile. ### Claim 12 A subscriber entity for remote provisioning of a subscriber identity module (SIM) profile to the subscriber entity, the subscriber entity comprising processing circuitry, the processing circuitry being configured to cause the subscriber entity to: obtain, from a remote SIM provisioning server, the SIM profile upon requesting download of the SIM profile; compare a locally computed value of a key-value pair of the SIM profile to a value of the key-value pair as downloaded from a storage entity, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile, and wherein the binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) of the subscriber entity, Integrated Circuit Card Identifier (ICCID) of the SIM profile, International Mobile Subscriber Identity (IMSI), and a mobile network operator (MNO) identifier, wherein the storage entity is separate from the remote SIM provisioning server, and wherein the storage entity is configured to reject accepting more than one key-value pair having a same key from the remote SIM provisioning server; and accept the SIM profile as valid only when the locally computed value matches the downloaded value.