Apple Inc.

Mohanasundaram Kattavoor Sivakumar

Li Li

Patrick L Coffman

Raj S Chaugule

Rajeev Verma

Zexing Shi

Keizo Marui

Dennis D Conway

Abishek Kumar Vaidyanathan

George Lin

Aurelien P Raboisson

Arjun Parthasarathy

Lukas M Bugla

Ngabin S Ng

This application describes techniques for dynamically updating a subscriber identity module (SIM) activation policy for enabling use of an electronic SIM (eSIM) and/or a physical SIM (pSIM) in a wireless device. The wireless device is initially configured with a less restrictive SIM activation policy and during setup is reconfigured to a more restrictive SIM activation policy that locks the wireless device to a particular mobile network operator (MNO) based on an eSIM or a pSIM installed in the wireless device.

Dynamic SIM activation policy updating for wireless devices

Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Profile transfer with secure intent

Growing community of inventors

Mountain View, CA, United States of America

Mohanasundaram Kattavoor Sivakumar