EMBEDDED UNIVERSAL INTEGRATED CIRCUIT CARD (eUICC) PROFILE CONTENT MANAGEMENT
AssigneeApple Inc.
InventorXiangying YANG
Life of this patent
Estimating the term…
Abstract
A mobile network operator (MNO) uses a provisioning server to update or install profile content in a profile or electronic subscriber identity module (eSIM). In an exemplary embodiment, the profile is present on a secure element such as an embedded universal integrated circuit card (eUICC) in a wireless device. One or more MNOs use the provisioning server to perform profile content management on profiles in the eUICC. In some embodiments, an MNO has a trust relationship with the provisioning server. In some other embodiments, the MNO does not have a trust relationship with the provisioning server and protects payload targeted for an MNO-associated profile using an over the air (OTA) key.
Claims20
A method comprising:
- by an embedded universal integrated circuit card (eUICC) in a device:
- receiving, from a provisioning server via the device, a message including a profile content package, wherein:
- i) the message includes metadata, and ii) a source of the profile content package is a mobile network operator (MNO) server operated by an MNO;
- performing a verification of the message based on the metadata;
- when the verification is successful:
- installing first data in a profile present on the eUICC, wherein the profile content package includes the first data;
- and
- when the verification is not successful:
- discarding the profile content package.
A method comprising:
- by an embedded universal integrated circuit card (eUICC) in a device:
- sending a nonce to a mobile network operator (MNO) server via the device and a provisioning server, wherein the MNO server is operated by an MNO;
- receiving, from the provisioning server via the device, a message including a profile content package, wherein the message includes an encrypted version of the nonce;
- performing a verification of the message based on the encrypted version of the nonce;
- when the verification is successful, installing first data in a profile present on the eUICC, wherein the profile content package includes the first data;
- and
- when the verification is not successful, discarding the profile content package.
A method comprising:
- by an embedded universal integrated circuit card (eUICC) in a device:
- receiving a signal to initialize a state of a function generator;
- initializing the state of the function generator;
- receiving, from a provisioning server via the device, a message including a profile content package, wherein the message includes an encrypted version of an output of the function generator;
- performing a verification of the message based on the state of the function generator;
- when the verification is successful, installing first data in a profile present on the eUICC, wherein the profile content package includes the first data;
- and
- when the verification is not successful:
- discarding the profile content package.
Dependencies are inferred from the claim text.