# US 2020/0288298 A1 · Methods and apparatus to manage inactive electronic subscriber identity modules > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0288298 A1 - Document ID: US20200288298A1 - Status: Published application - Kind: A1 - Application number: 16/808,012 - Filed: 2020-03-03 - Published: 2020-09-10 - Earliest claimed: 2019-03-08 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Li LI; Najeeb M. ABDULRAHIMAN; Arun G. MATHIAS - Web page: https://patentgrep.com/patent/US20200288298A1 ## CPC - H04W 8/183: {Processing at user equipment or user record carrier} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 4/60: Subscription-based services using application servers or record carriers, e.g. SIM application toolkits - H04W 8/26: Network addressing or numbering for mobility support - H04W 12/06: Authentication - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W 12/42: using virtual identity modules - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The described embodiments set forth techniques for managing inactive (disabled) electronic subscriber identity modules (eSIMs) on secure elements, e.g., Universal Integrated Circuit Cards (UICCs) and/or embedded UICCs (eUICCs), of a wireless device, including retrieving information from an inactive eSIM, obtaining authentication tokens from an inactive eSIM, authenticating the inactive eSIM with a network-based Mobile Network Operator (MNO) server, retrieving status information for a subscription account associated with the inactive eSIM, and/or performing an account management operation on the inactive eSIM. ## Claims ### Claim 1 A method for managing one or more inactive electronic subscriber identity modules (eSIMs) on a secure element of a wireless device, the method comprising: by processing circuitry of the wireless device external to the secure element: opening a secure communication channel to the secure element; sending a command to an inactive eSIM of the one or more inactive eSIMs on the secure element; obtaining from the inactive eSIM, responsive to the command, an authentication token; authenticating with a network-based server of a mobile network operator (MNO) associated with the inactive eSIM using the authentication token; and obtaining, from the network-based server of the MNO, account information for an account associated with the inactive eSIM. ### Claim 2 (depends on 1) The method of claim 1, wherein the processing circuitry of the wireless device external to the secure element obtains, from the network-based server of the MNO, the account information for the account associated with the inactive eSIM via a cellular wireless network associated with an active eSIM of the wireless device. ### Claim 3 (depends on 1) The method of claim 1, wherein the processing circuitry of the wireless device external to the secure element obtains, from the network-based server of the MNO, the account information for the account associated with the inactive eSIM via a non-cellular wireless network data connection to the network-based server of the MNO. ### Claim 4 (depends on 1) The method of claim 1, wherein the command sent to the inactive eSIM comprises a modified authenticate command. ### Claim 5 (depends on 1) The method of claim 1, wherein: the secure communication channel is also used for communicating with an active eSIM on the secure element; and the command includes a unique identifier associated with the inactive eSIM to indicate to which inactive eSIM of the one or more inactive eSIMs the command is addressed. ### Claim 6 (depends on 5) The method of claim 5, wherein the unique identifier associated with the inactive eSIM comprises an integrated circuit card identifier (ICCID) or an issuer security domain-profile (ISD-P) application identifier (AID). ### Claim 7 (depends on 1) The method of claim 1, wherein: the secure communication channel is dedicated for communication with the inactive eSIM and is not used for communication with an active eSIM on the secure element. ### Claim 8 (depends on 1) The method of claim 1, further comprising: by the processing circuitry of the wireless device external to the secure element: sending a second command to the inactive eSIM to obtain an MNO-assigned unique identity associated with the inactive eSIM. ### Claim 9 (depends on 8) The method of claim 8, wherein the MNO-assigned unique identity comprises a mobile station international subscriber directory number (MSISDN) or an international mobile subscriber identity (IMSI). ### Claim 10 (depends on 1) The method of claim 1, further comprising: by the processing circuitry of the wireless device external to the secure element: sending a third command to the inactive eSIM to access information contained in a file structure of the inactive eSIM; and retrieving the information from the inactive eSIM. ### Claim 11 (depends on 1) The method of claim 1, further comprising: by the processing circuitry of the wireless device external to the secure element: opening a second secure communication channel to the secure element; sending a second command to a second inactive eSIM of the one or more inactive eSIMs on the secure element; obtaining from the second inactive eSIM, responsive to the command, a second authentication token; authenticating with a second network-based server of a second mobile network operator (MNO) associated with the second inactive eSIM using the second authentication token; and obtaining, from the second network-based server of the second MNO, second account information for a second account associated with the second inactive eSIM, wherein the account information for the inactive eSIM and the second account information for the second inactive eSIM are obtained via parallel, concurrent data connections. ### Claim 12 (depends on 1) The method of claim 1, further comprising: by the processing circuitry of the wireless device external to the secure element: presenting, via a display of the wireless device, up-to-date account status information for the account associated with the inactive eSIM based at least in part on the account information obtained from the network-based server of the MNO. ### Claim 13 An apparatus configurable for operation in a wireless device, the apparatus comprising: processing circuitry of the wireless device external to a secure element of the wireless device, the processing circuitry comprising one or more processors communicatively coupled to memory storing instructions that, when executed by the one or more processors, cause the processing circuitry to perform actions including: opening a secure communication channel to the secure element; sending a command to an inactive electronic subscriber identity module (eSIM) of one or more inactive eSIMs on the secure element; obtaining from the inactive eSIM, responsive to the command, an authentication token; authenticating with a network-based server of a mobile network operator (MNO) associated with the inactive eSIM using the authentication token; and obtaining, from the network-based server of the MNO, account information for an account associated with the inactive eSIM. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the processing circuitry of the wireless device external to the secure element obtains, from the network-based server of the MNO, the account information for the account associated with the inactive eSIM via a cellular wireless network associated with an active eSIM of the wireless device. ### Claim 15 (depends on 13) The apparatus of claim 13, wherein the processing circuitry of the wireless device external to the secure element obtains, from the network-based server of the MNO, the account information for the account associated with the inactive eSIM via a non-cellular wireless network data connection to the network-based server of the MNO. ### Claim 16 (depends on 13) The apparatus of claim 13, wherein: the secure communication channel is also used for communicating with an active eSIM on the secure element; and the command includes a unique identifier associated with the inactive eSIM to indicate to which inactive eSIM of the one or more inactive eSIMs the command is addressed. ### Claim 17 (depends on 13) The apparatus of claim 13, wherein: the secure communication channel is dedicated for communication with the inactive eSIM and is not used for communication with an active eSIM on the secure element. ### Claim 18 (depends on 13) The apparatus of claim 13, wherein the actions performed by the processing circuitry of the wireless device external to the secure element further comprise: sending a second command to the inactive eSIM to obtain an MNO-assigned unique identity associated with the inactive eSIM. ### Claim 19 (depends on 13) The apparatus of claim 13, wherein the actions performed by the processing circuitry of the wireless device external to the secure element further comprise: opening a second secure communication channel to the secure element; sending a second command to a second inactive eSIM of the one or more inactive eSIMs on the secure element; obtaining from the second inactive eSIM, responsive to the command, a second authentication token; authenticating with a second network-based server of a second mobile network operator (MNO) associated with the second inactive eSIM using the second authentication token; and obtaining, from the second network-based server of the second MNO, second account information for a second account associated with the second inactive eSIM, wherein account information for the account associated with the inactive eSIM and second account information for the second account associated with the second inactive eSIM are obtained via parallel, concurrent data connections. ### Claim 20 A wireless device comprising: one or more antennas; a secure element; and processing circuitry, communicatively coupled to the one or more antennas and to the secure element, the processing circuitry comprising one or more processors communicatively coupled to memory storing instructions that, when executed by the one or more processors, cause the processing circuitry to perform actions including: opening a secure communication channel to the secure element; sending a command to an inactive electronic subscriber identity module (eSIM) on the secure element; obtaining from the inactive eSIM, responsive to the command, an authentication token; authenticating with a network-based server of a mobile network operator (MNO) associated with the inactive eSIM using the authentication token; and using the authentication token to perform one or more account management operations for the inactive eSIM in conjunction with the network-based server of the MNO.