An Overview of GSMA's M2M Remote Provisioning Specification

TL;DR

This paper provides a comprehensive overview of GSMA's eUICC specification, detailing its architecture, remote provisioning protocols, and potential to transform mobile device SIM management and telecommunications markets.

Contribution

It offers the first detailed analysis of the GSMA eUICC remote provisioning specification and its implications for mobile network operations.

Findings

eUICC enables remote SIM provisioning, reducing manufacturing costs.

The specification introduces new protocols for secure remote subscription management.

Potential to significantly disrupt traditional SIM provisioning processes.

Abstract

M2M devices are ubiquitous, and there is a growing tendency to connect such devices to mobile networks. Network operators are investigating new solutions to lower their costs and to address usability issues. Embedded SIM cards with remote provisioning capability are one of the most promising solutions. GSMA, the leading consortium on mobile network standards, has proposed a specification for such an embedded SIM card, called eUICC. The specification describes eUICC architecture and a remote provisioning mechanism. Embodiments of this specification have the potential to disrupt the telecommunications market: eUICCs will be shipped to device manufacturers and then remotely provisioned with a subscription, whereas (currently) SIMs must be provisioned prior to shipping. In this article, we present a comprehensive overview of GSMA's specification and its motivation. In particular, we describe the technology and the protocols involved in remote provisioning.