Part 1 of remote SIM provisioning of a subscriber entity

A method for remote provisioning of a SIM profile to a subscriber entity, the method being performed by a storage entity, the method comprising:

• obtaining, from a remote SIM provisioning server in a first message, a key-value pair of the SIM profile, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and of hashed binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by an integrated circuit card identifier (ICCID) of the SIM profile, and wherein the hashed binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) and profile/subscription unique data elements for the SIM profile comprising a subscriber identifier, a subscriber key, and an operator key;
• and
• providing, to the subscriber entity presenting the key of the key-value pair in a second message, the value of the key-value pair, wherein the storage entity is a server, wherein binding information that is not hashed included in the SIM profile received by the subscriber entity from the remote SIM provisioning server is used to verify the hashed binding information obtained by the storage entity, wherein the storage entity, the subscriber entity, and the remote SIM provisioning server are each separate entities from one another, and wherein the storage entity and the SIM provisioning server are each entities of a combined core network and service network,
• wherein the first message does not comprise the binding information that is not hashed and the second message does not comprise the binding information that is not hashed.

A method for remote provisioning of a subscriber identity module (SIM) profile to a subscriber entity, the method being performed by the subscriber entity, the method comprising:

• obtaining, from a remote SIM provisioning server in a first message, the SIM profile upon requesting download of the SIM profile;
• and
• comparing a locally computed value of a key-value pair of the SIM profile to a value of the key-value pair as downloaded from a storage entity in a second message, the key-value pair comprising a unique identifier comprising at least one profile specific element of the SIM profile as key and hashed binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by an integrated circuit card identifier (ICCID) of the SIM profile, and wherein the hashed binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) and profile/subscription unique data elements for the SIM profile comprising a subscriber identifier, a subscriber key, and an operator key;
• and
• accepting the SIM profile as valid only when the locally computed value matches the downloaded value, wherein the storage entity is a server, wherein binding information that is not hashed included in the SIM profile obtained by the subscriber entity from the remote SIM provisioning server is used to verify the hashed binding information downloaded from the storage entity, wherein the storage entity, the subscriber entity, the MNO entity, and the remote SIM provisioning server are each separate entities from one another, and wherein the storage entity, the MNO entity, and the SIM provisioning server are each entities of a combined core network and service network,
• wherein the first message does not comprise the hashed binding information and the second message does not comprise the binding information that is not hashed.

A method for remote provisioning of a subscriber identity module (SIM) profile to a subscriber entity, the method being performed by a mobile network operator (MNO) entity, the method comprising:

• providing a request to a remote SIM provisioning server for generation of the SIM profile;
• obtaining a value of a key-value pair of the SIM profile from a storage entity in a message upon presenting the key of the key-value pair to the storage entity, the key-value pair comprising at least one profile specific element of the SIM profile as key and hashed binding information of the at least one profile specific element as value, wherein the unique identifier comprising at least one profile specific element of the SIM profile is represented by an integrated circuit card identifier (ICCID) of the SIM profile, and wherein the hashed binding information of the at least one profile specific element is represented by an embedded universal integrated circuit card (eUICC) identity (EID) and profile/subscription unique data elements for the SIM profile comprising a subscriber identifier, a subscriber key, and an operator key;
• and
• comparing another obtained or locally computed value of the key-value pair to the obtained value of the key-value pair, wherein binding information that is not hashed included in a SIM profile from the remote SIM provisioning server is used to verify the hashed binding information downloaded from the storage entity;
• and when said another obtained or locally computed value is not identical to the obtained value:
• performing a predetermined action,
• wherein the storage entity, the subscriber entity, the MNO entity, and the remote SIM provisioning server are each separate entities from one another, and wherein the storage entity, the MNO entity, and the SIM provisioning server are each entities of a combined core network and service network, and
• wherein the message does not comprise the binding information that is not hashed.