ENFORCING SERVICE POLICIES IN EMBEDDED UICCs

A non-transitory computer readable storage medium configured to store instructions that, when executed by an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device, cause the eUICC to conditionally require human-based authentication when performing electronic Subscriber Identity Module (eSIM) management operations, by carrying out steps that include:

• receiving a request to perform an eSIM management operation;
• determining that at least one condition of a policy being enforced by the eUICC indicates that a human-based authentication is required prior to performing the eSIM management operation;
• causing the mobile device to provide a prompt in accordance with the human-based authentication;
• receiving a response to the prompt for the human-based authentication;
• and
• in accordance with the response:
• performing the eSIM management operation or ignoring the request.

An embedded Universal Integrated Circuit Card (eUICC) included a mobile device, the eUICC configured to conditionally require human-based authentication when performing electronic Subscriber Identity Module (eSIM) management operations, the eUICC comprising:

• at least one processor;
• and
• at least one memory storing instructions that, when executed by the at least one processor, cause the eUICC to:
• receiving a request to perform an eSIM management operation;
• determine that at least one condition of a policy being enforced by the eUICC indicates that a human-based authentication is required prior to performing the eSIM management operation;
• cause the mobile device to provide a prompt in accordance with the human-based authentication;
• receive a response to the prompt for the human-based authentication;
• and
• in accordance with the response:
• perform the eSIM management operation or ignoring the request.