Secure mechanism for subsidy lock enforcement

A device comprising:

• a memory;
• an application processor (AP);
• and
• a baseband processor, wherein the memory includes instructions that when executed by the baseband processor, cause the device to perform operations comprising:
• generating a nonce,
• sending to a secure element (SE) housed in the device a first request comprising the nonce,
• receiving a response, wherein:
• i) the response comprises a payload, ii) the payload comprises information associated with subscriber identity module (SIM) functionality present on the SE, and iii) the response comprises a cryptographic signature,
• when the cryptographic signature is not correct:
• providing, via the AP, a first indication on a user interface, and
• when the cryptographic signature is correct:
• sending the information associated with the SIM functionality to the AP.

A secure element (SE) comprising:

• a memory;
• and
• one or more processors, wherein the memory includes instructions that, when executed by a processor of the one or more processors, cause the SE to perform operations comprising:
• sending, to a baseband processor in a device, a refresh command, wherein the refresh command comprises information associated with subscriber identity module (SIM) functionality present on the SE and wherein the SE is housed in the device,
• receiving, from the baseband processor, a request comprising a nonce,
• composing a payload, wherein the payload comprises the nonce,
• signing the payload with a private key to produce a cryptographic signature, and
• sending a response to the baseband processor, wherein the response comprises the payload and the cryptographic signature.