Anti-replay protection techniques for dynamically shareable profiles on embedded universal integrated circuit cards

An embedded universal integrated circuit card (eUICC) comprising a memory and configured to:

• receive a request for a randomized international mobile subscriber identity (IMSI);
• transmit a randomized IMSI responsive to the request;
• receive, at least in part in response to the request for the randomized IMSI, an indication of a time counter value associated with a shared profile operational IMSI provisioning procedure;
• determine whether the time counter value and the first nonce value are valid;
• determine, based at least in part on the time counter value and the first nonce value, whether a message comprising the indication of the time counter value and the first nonce value is accepted for processing;
• determine, based at least in part on the acceptance of the message for processing, whether the subsequent messages should be generated or accepted for processing;
• and
• receive, based at least in part on a determination that the time counter value and the first nonce value are valid, a shared profile operational IMSI for the eUICC.

A non-transitory computer-readable media storing instructions to cause an embedded universal integrated circuit card (eUICC) to:

• receive a request for a randomized international mobile subscriber identity (IMSI);
• transmit a randomized IMSI responsive to the request;
• receive, at least in part in response to the request for the randomized IMSI, an indication of a time counter value and a first nonce value associated with a shared profile operational IMSI provisioning procedure;
• determine whether the time counter value and the first nonce value are valid;
• determine, based at least in part on the time counter value and the first nonce value, whether a message comprising the indication of the time counter value and the first nonce value is accepted for processing
• determine, based at least in part on the acceptance of the smessage for processing, whether the subsequent messages should be generated or accepted for processing;
• and
• receive, based at least in part on a determination that the time counter value and the first nonce value are valid, a shared profile operational IMSI for the eUICC.