Method and system for secured remote provisioning of a universal integrated circuit card of a user equipment

摘要

The present invention provides a method and system for secured remote provisioning of a universal integrated circuit card of a user equipment. A system includes a user equipment for initiating a request for remote provisioning of an universal integrated circuit card (UICC) in the user equipment, where the request for remote provisioning includes a machine identifier (MID) associated with the user equipment and a public land mobile network (PLMN) identifier (ID) associated with an network operator. The system also includes at least one shared key management server for dynamically generating security keys and an operator shared key using the security keys, the MID. Moreover, the system includes an operator network for generating a subscription key using the operator shared key and an international mobile subscriber identity (IMSI), and provisioning the IMSI in a secured manner to the UICC of the user equipment using the security keys.

主权项

1. A method of a user equipment for secured remote provisioning of a universal integrated circuit card (UICC) of the user equipment, the method comprising:
initiating a request for remote provisioning of the UICC of the user equipment remotely located from an operator network to a shared key management server via the operator network, wherein the request for remote provisioning includes a machine identifier (MID) associated with the user equipment and a public land mobile network (PLMN) identifier (ID) associated with an network operator; receiving authentication parameters from the operator network in response to the request for remote provisioning; sending an authentication response message to the operator network upon successful verification of authentication parameters; securely receiving security credentials from the operator network in response to the authentication response message; and generating a subscription key at the UICC based on the security credentials received from the operator network.