公开(公告)号：US20230319573A1

公开(公告)日：2023-10-05

申请号：US17656218

申请日：2022-03-23

Applicant: Apple Inc.

Inventor： Li LI ,  Mohanasundaram KATTAVOOR SIVAKUMAR ,  Dennis D. CONWAY ,  Zexing SHI ,  Aurelien P. RABOISSON ,  Ngabin S. NG ,  Rajeev VERMA ,  Raj CHAUGULE ,  Keizo MARUI ,  Lukas M. BUGLA ,  Patrick L. COFFMAN

IPC: H04W12/40 ,  H04W12/041 ,  H04W12/06

CPC classification number: H04W12/40 ,  H04W12/041 ,  H04W12/06

Abstract: Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

公开(公告)号：US20240406696A1

公开(公告)日：2024-12-05

申请号：US18807564

申请日：2024-08-16

Applicant: Apple Inc.

Inventor： Li LI ,  Rajeev VERMA ,  Dennis D. CONWAY

IPC: H04W4/60

Abstract: This Application sets forth techniques for managing subscriber identity module (SIM) toolkit (STK) scheduling for multiple enabled electronic subscriber identity module (eSIM) profiles on an embedded universal integrated circuit card (eUICC) of a wireless device, including managing multiple STK sessions at a baseband processor external to the eUICC of the wireless device. To forestall STK communication for different eSIMs from interfering with execution of processes associated with the eSIMs, a baseband processor can schedule STK sessions to avoid overlap and reduce opportunities for errors in handling eSIM processes. The baseband processor can prioritize whether to queue commands for a second STK session for a second eSIM until a first STK session for a first eSIM ends or to terminate the first STK session to handle the second STK session.

公开(公告)号：US20190007835A1

公开(公告)日：2019-01-03

申请号：US16024025

申请日：2018-06-29

Applicant: Apple Inc.

Inventor： Li LI ,  Dennis D. CONWAY

IPC: H04W12/06 ,  H04L9/14 ,  H04L9/32 ,  H04L9/08 ,  H04W12/04 ,  H04L29/06

Abstract: A secure element (SE) determines a profile type and a privilege level. The privilege level, in some embodiments, is associated with a key used successfully by the SE to verify a cryptographic signature. In some embodiments, the privilege level is indicated by a privilege value read from an extension field of a root certificate. The SE determines, in some instances, whether to accept or reject a profile installation after comparing the profile type with the determined privilege level. Thus, a test server is allowed to provision a test profile to an SE even if the test server does not have commercial certification required of an electronic subscriber identity module (eSIM) server that provisions operational profiles. Because the test profile does not include credentials useful for network access, the lower-security test server does not create a risk of improper access to the network of a mobile network operator (MNO).

公开(公告)号：US20220394443A1

公开(公告)日：2022-12-08

申请号：US17804291

申请日：2022-05-26

Applicant: Apple Inc.

Inventor： Li LI ,  Rajeev VERMA ,  Dennis D. CONWAY

IPC: H04W4/60

Abstract: This Application sets forth techniques for managing subscriber identity module (SIM) toolkit (STK) scheduling for multiple enabled electronic subscriber identity module (eSIM) profiles on an embedded universal integrated circuit card (eUICC) of a wireless device, including managing multiple STK sessions at a baseband processor external to the eUICC of the wireless device. To forestall STK communication for different eSIMs from interfering with execution of processes associated with the eSIMs, a baseband processor can schedule STK sessions to avoid overlap and reduce opportunities for errors in handling eSIM processes. The baseband processor can prioritize whether to queue commands for a second STK session for a second eSIM until a first STK session for a first eSIM ends or to terminate the first STK session to handle the second STK session.

公开(公告)号：US20220022028A1

公开(公告)日：2022-01-20

申请号：US17305858

申请日：2021-07-15

Applicant: Apple Inc.

Inventor： Li LI ,  Dennis D. CONWAY ,  Rajeev VERMA ,  Keizo MARUI

IPC: H04W8/18 ,  H04W4/60 ,  H04W4/50

Abstract: This Application sets forth techniques for profile, e.g., subscriber identity module (SIM) and electronic SIM (eSIM), and cellular wireless service subscription management for a wireless device. The wireless device can support multiple profiles, such as dual SIMS or a single SIM and one or more eSIMs. A user of the wireless device can flexibly enable and disable various eSIMs or change the use of physical SIMs with different associated cellular wireless service subscriptions, and mapping of subscription modules to logical channels and physical hardware interfaces can occur automatically, with mechanisms to reset interfaces when required.