Abstract:
A device may scan for a carrier that includes an embedded Universal Integrated Circuit Card (eUICC), wherein the carrier is associated with a Mobile Network Operator (MNO). The device may hop on the carrier, authenticate with a network of the MNO without using an MNO profile stored in the eUICC, and gain limited access to the network in response to the authentication. The device may also register with the network while attached to the network. The registering may include downloading an operational MNO profile to the eUICC in the device and storing the MNO profile on the eUICC.
Abstract:
A pre-provisioned mobile device and a system are provided that enables selection of proprietary feature services and proprietary applications specific to one cellular carrier from among two or more cellular carriers that have pre-provisioned the mobile device with carrier-specific proprietary feature services and proprietary applications. In response to insertion of a carrier-specific universal integrated circuit card, pre-provisioned proprietary feature services and proprietary applications specific to the carrier associated with the carrier-specific universal integrated circuit card are enabled for execution on the mobile device from a memory of the mobile device. Other examples allow for customized firmware and software builds.
Abstract:
A policy server that is associated with a secure element owner receives a request, from a service provider, to provision access, by an application, to the secure element. The policy server creates, in response to the request, a policy ticket, for the service provider, that defines privileges for the service provider to create a security domain or a new profile within the secure element. The policy server provides, to a service provider trusted service manager (TSM), the policy ticket and a signed certificate, the signed certificate corresponding to a root certificate that is inserted into a Controlling Authority Security Domain (CASD) portion of the secure element prior to receiving the request. When the CASD receives the policy ticket and signed certificate from the service provider TSM, the CASD validates based on the root certificate and provisions access to the secure element based on information in the policy ticket.