Anti-replay protection techniques for dynamically shareable profiles on embedded universal integrated circuit cards

Abstract

A user equipment (UE), baseband processor, embedded universal integrated circuit card (eUICC), and network device (e.g., a shared profile vendor server) are described. A UE that includes an eUICC can perform transmitting, for receipt by a shared profile vendor server, a first message of a shared profile operational international mobile subscriber identity (IMSI) provisioning procedure. The first message may include a randomized IMSI. In response to the first message, the UE may receive a second message that includes an indication of a time counter value. In response to the second message, the UE may transmit, in response to determining that the time counter value is valid, a third (e.g., penultimate) message to the bootstrap vendor server. The UE may then receive in response a fourth message (e.g., final) of the shared profile operational IMSI provisioning procedure, the fourth message including a shared profile operational IMSI for the eUICC.