Apple Inc.

Lukas M Bugla

Patrick L Coffman

Li Li

Raj S Chaugule

Rajeev Verma

Zexing Shi

Keizo Marui

Dennis D Conway

Aurelien P Raboisson

Ngabin S Ng

Mohanasundaram Kattavoor Sivakumar

Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Profile transfer with secure intent

Growing community of inventors

Fremont, CA, United States of America

Lukas M Bugla