RSP Technical Specification Version 1.2 27 February 2017

1 GSM Association Non-confidential Official Document - RSP Technical Specification Page 1 of 128 RSP Technical Specification Version 27 February 2017 This is a Non-binding Permanent Reference Document of the GSMA Security Classification: Non-confidential Access to and distribution of this document is restricted to the persons permitted by the security classification. This document is confidential to the Association and is subject to copyright protection. This document is to be used only for the purposes for which it has been supplied and information contained in it must not be disclosed or in any other way made available, in whole or in part, to persons other than those permitted under the security classification without the prior written approval of the Association.

2 Copyright Notice (Test) Copyright 2017 GSM Association Disclaimer The GSM Association ( Association ) makes no representation, warranty or undertaking (express or implied) with respect to and does not accept any responsibility for, and hereby disclaims liability for the accuracy or completeness or timeliness of the information contained in this document. The information contained in this document may be subject to change without prior notice. Antitrust Notice The information contain herein is in full compliance with the GSM Association s antitrust compliance policy. GSM Association Non-confidential Official Document - RSP Technical Specification Page 2 of 128 Table of Contents 1 Introduction 4 Overview 4 Scope 4 Document Purpose 4 Intended Audience 4 Definition of Terms 4 Abbreviations 6 References 9 2 General Architecture 10 General Architecture 10 Roles 11 Interfaces 11 eUICC Architecture 12 eUICC Overview 12 ECASD 13 ISD-R 14 ISD-P 14 MNO SD 14 Telecom Framework 14 Profile Package Interpreter 14 LPA Services 14 Profile Protection and Delivery 14 Profile Package Types Overview 15 Unprotected Profile Package 15 Protected Profile Package 15 Bound Profile Package 16 Segmented

3 Bound Profile Package 18 Profile Installation Result 18 Protocol for Profile Protection and eUICC binding 23 3 Procedures 24 Remote Provisioning 24 Profile Download Initiation (Informative) 24 Download and Installation 27 Limitation for Profile Installation 35 Error Handling Within the Profile Download Procedure 35 Local Profile Management 36 Enable Profile 36 Disable Profile 37 Delete Profile 38 List Profiles 39 Add Profile 40 Add/Update Profile Nickname 41 Local eUICC Management 42 GSM Association Non-confidential Official Document - RSP Technical Specification Page 3 of 128 Retrieve EID 42 eUICC Memory Reset 43 Device and eUICC initialisation 44 eUICC initialisation 44 RSP Terminal Services 44 eUICC file structure 44 4 Data Elements 45 Activation Code 45 Matching ID 46 Device Information 46 eUICC Information

4 47 Profile Metadata 47 Keys and Certificates 48 Cryptographic Keys 48 Certificates 49 5 Functions 61 Overview of Functions per Interface 62 eUICC Interfaces 63 ES6 (Operator -- eUICC) 63 ES8+ (SM-DP+ -- eUICC) 63 ES10b (LPD -- eUICC) 70 ES10c (LUI -- eUICC) 80 Off-Card Interfaces 90 Function commonalities 90 ES2+ (Operator -- SM-DP+) 92 ES9+ (LPA -- SM-DP+) 96 Function Binding in JSON 101 Annex A Use of GlobalPlatform Privileges (Normative) 110 Annex B Data Definitions (Normative) 111 Annex C Device Requirements (Normative) 112 Annex D Coding of the AIDs for 'Remote SIM Provisioning' (Normative) 115 Annex E List of Identifiers (Informative) 116 Annex F Profile Eligibility Check (Informative) 118 Annex G Key Derivation Process (Normative) 119 Annex H Definitions (Normative) 120 Annex I JSON Request Response Examples (Informative) 124 Annex J Tag allocation (Normative) 127 Annex K Document Management (Informative) 128 GSM Association Non-confidential Official Document - RSP Technical Specification Page 4 of 128 1 Introduction Overview This document provides a Technical description of the GSMA s Remote Sim Provisioning (RSP) Architecture for consumer Devices.

5 Scope This Specification provides a Technical description of: The eUICC Architecture; The interfaces used within the Remote SIM Provisioning Architecture; and The security functions used within the Remote SIM Provisioning Architecture. Document Purpose This document defines a Technical solution for the remote provisioning and management of the Embedded UICC (eUICC) in consumer Devices as defined in RSP Architecture [4]. The adoption of this Technical solution will provide the basis for global interoperability between different Operator deployment scenarios, for example network equipment ( Subscription Manager Data Preparation (SM-DP+)) and various eUICC platforms.

6 Intended Audience Technical experts working for Operators, SIM solution providers, consumer Device vendors, standards organisations, network infrastructure vendors, Service Providers and other industry bodies, etc. Definition of Terms Term Description Certificate Authority A Certificate Authority is an entity that issues digital certificates. Certificate Issuer An Entity that is Authorised to Issue digital certificates. Companion Device A Device that relies on the capabilities of a Primary Device for the purpose of Remote SIM Provisioning. Device User equipment used in conjunction with an eUICC to connect to a mobile network. a tablet, wearable, smartphone or handset.

7 Disabled (Profile) The state of a Profile where all files and applications ( NAA) present in the Profile are not selectable over the eUICC-Terminal interface. Embedded UICC A UICC which is not easily accessible or replaceable, is not intended to be removed or replaced in the Device, and enables the secure changing of Profiles. Enabled (Profile) The state of a Profile when its files and/or applications ( , NAA) are selectable over the UICC-Terminal interface. GSM Association Non-confidential Official Document - RSP Technical Specification Page 5 of 128 eUICC Certificate A certificate issued by the EUM for a specific eUICC. This Certificate can be verified using the EUM Certificate.

8 EUICC Manufacturer Supplier of the eUICCs and resident software ( firmware and operating system). EUM Certificate A certificate issued to a GSMA accredited EUM which can be used to verify eUICC Certificates. This Certificate can be verified using the Root Certificate. Integrated Circuit Card ID Unique number to identify a Profile in an eUICC. NOTE: the ICCID throughout this Specification is used to identify the Profile. International Mobile Subscriber Identity Unique identifier owned and issued by Mobile operators to (U)SIM applications to enable Devices to attach to a network and use services as defined in ETSI TS 123 003 [35] section Issuer Security Domain A security domain on the UICC as defined by GlobalPlatform Card Specification [8].

9 Local Profile Management Local Profile Management are operations that are locally initiated on the End User (ESeu) interface. Local Profile Management Operation Local Profile Management Operations include enable Profile, disable Profile, delete Profile, query Profile Metadata, eUICC Memory Reset and Add/Update Profile Nickname. MatchingID Equivalent to Activation Code Token as defined is [4] Mobile Network Operator An entity providing access capability and communication services to its End User through a mobile network infrastructure. Mobile Network Operator Security Domain (MNO-SD) Part of the Profile, owned by the Operator, providing the Secured Channel to the Operator s Over The Air (OTA) Platform.

10 It is used to manage the content of a Profile once the Profile is enabled. OTA Keys The credentials included in the Profile, used in conjunction with OTA Platforms. OTA Platform An Operator platform for remote management of UICCs and the content of Enabled Operator Profiles on eUICCs. PIX Proprietary application Identifier extension, the value of which is part of the Application Identifier (AID). Platform Management Credentials Data required within an eUICC so that a secured communication can be set up between an external entity and the eUICC in order to enable, disable and delete Profiles on the eUICC and to transport Profile Management functions. Primary Device A Device that can be used to provide some capabilities to a Companion Device for the purpose of Remote SIM Provisioning.