RSP Technical Specification Version 2.2 01 September 2017
Total Page:16
File Type:pdf, Size:1020Kb
GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification RSP Technical Specification Version 2.2 01 September 2017 This is a Non-binding Permanent Reference Document of the GSMA Security Classification: Non-confidential Access to and distribution of this document is restricted to the persons permitted by the security classification. This document is confidential to the Association and is subject to copyright protection. This document is to be used only for the purposes for which it has been supplied and information contained in it must not be disclosed or in any other way made available, in whole or in part, to persons other than those permitted under the security classification without the prior written approval of the Association. Copyright Notice Copyright © 2017 GSM Association Disclaimer The GSM Association (“Association”) makes no representation, warranty or undertaking (express or implied) with respect to and does not accept any responsibility for, and hereby disclaims liability for the accuracy or completeness or timeliness of the information contained in this document. The information contained in this document may be subject to change without prior notice. Antitrust Notice The information contain herein is in full compliance with the GSM Association’s antitrust compliance policy. V2.2 Page 1 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification Table of Contents 1 Introduction 7 1.1 Overview 7 1.2 Scope 7 1.3 Document Purpose 7 1.4 Intended Audience 7 1.5 Definition of Terms 7 1.6 Abbreviations 12 1.7 References 15 1.8 Conventions 18 2 General Architecture 18 2.1 General Architecture Diagram 18 2.2 Roles 20 2.3 Interfaces 20 2.4 eUICC Architecture 22 2.4.1 eUICC Overview 22 2.4.2 ECASD 22 2.4.3 ISD-R 23 2.4.4 ISD-P 24 2.4.5 Profile 24 2.4.6 Telecom Framework 26 2.4.7 Profile Package Interpreter 26 2.4.8 LPAe 26 2.4.9 LPA Services 26 2.4.10 Hardware Characteristics of the eUICC 26 2.4.11 Platform Characteristics of the eUICC 27 2.4.12 Profile Policy Enabler 29 2.5 Profile Protection and Delivery 29 2.5.1 Profile Package Types Overview 29 2.5.2 Unprotected Profile Package 30 2.5.3 Protected Profile Package 30 2.5.4 Bound Profile Package 31 2.5.5 Segmented Bound Profile Package 33 2.5.6 Profile Installation Result 34 2.6 Security Overview 37 2.6.1 Certification of the Entities 37 2.6.2 Remote Secure Communication 37 2.6.3 Public Key Infrastructure 38 2.6.4 Protocol for Profile Protection and eUICC Binding 38 2.6.5 Key Length and Hashing Functions 39 2.6.6 TLS Requirements 39 2.6.7 Elliptic Curves Algorithms 40 2.7 Certificate Revocation 40 2.8 ASN.1 41 V2.2 Page 2 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification 2.8.1 Common ASN.1 data types 42 2.8.2 ASN.1 data type UTF8String 42 2.9 Profile Policy Management 43 2.9.1 Profile Policy Rules 43 2.9.2 Rules Authorisation Table (RAT) 43 2.9.3 Profile Policy Enabler 47 3 Procedures 49 3.1 Remote Provisioning 49 3.1.1 Profile Download Initiation 49 3.1.2 Common Mutual Authentication Procedure 53 3.1.3 Profile Download and Installation 58 3.1.4 Limitation for Profile Installation 75 3.1.5 Error Handling Within the Profile Download Procedure 75 3.1.6 Profile Lifecycle at SM-DP+ 76 3.2 Local Profile Management 79 3.2.1 Enable Profile 79 3.2.2 Disable Profile 83 3.2.3 Delete Profile 87 3.2.4 List Profiles 89 3.2.5 Add Profile 90 3.2.6 Set/Edit Nickname 91 3.3 Local eUICC Management 93 3.3.1 Retrieve EID 93 3.3.2 eUICC Memory Reset 93 3.3.3 eUICC Test Memory Reset 95 3.3.4 Set/Edit Default SM-DP+ Address 96 3.4 Device and eUICC Initialisation 97 3.4.1 eUICC Initialisation 97 3.4.2 RSP Device Capabilities 98 3.4.3 eUICC File Structure 99 3.4.4 Device Setup and Power-on Profile Discovery 99 3.5 Notifications 100 3.6 SM-DS 104 3.6.1 Event Registration 104 3.6.2 Event Retrieval 106 3.6.3 Event Deletion 108 4 Data Elements 111 4.1 Activation Code 111 4.1.1 Matching ID 112 4.2 Device Information 112 4.3 eUICC Information 114 4.4 Profile Metadata 115 4.4.1 Profile Class 116 4.4.2 Profile Policy Rules 116 V2.2 Page 3 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification 4.5 Keys and Certificates 116 4.5.1 Cryptographic Keys 116 4.5.2 Certificates 117 4.6 Certificate Revocation List 135 4.6.1 CRL publication rules 138 4.6.2 Specific CRL Extensions 138 4.6.3 eUICC Considerations 139 4.7 Confirmation Code 139 5 Functions 140 5.1 Overview of Functions per Interface 140 5.2 Server to Server Function Commonalities 142 5.2.1 Common Data Types 142 5.2.2 Request-Response Function 143 5.2.3 Notification Handler Function 143 5.2.4 Functions Input Header 143 5.2.5 Functions Output Header 143 5.2.6 Status Code 143 5.3 ES2+ (Operator -- SM-DP+) 146 5.3.1 Function: DownloadOrder 146 5.3.2 Function: ConfirmOrder 148 5.3.3 Function: CancelOrder 150 5.3.4 Function: ReleaseProfile 152 5.3.5 Function: HandleDownloadProgressInfo 153 5.4 ES6 (Operator -- eUICC) 155 5.4.1 Function: UpdateMetadata 155 5.5 ES8+ (SM-DP+ -- eUICC) 158 5.5.1 Function: InitialiseSecureChannel 159 5.5.2 Function: ConfigureISDP 161 5.5.3 Function: StoreMetadata 161 5.5.4 Function: ReplaceSessionKeys 163 5.5.5 Function: LoadProfileElements 163 5.6 ES9+ (LPA -- SM-DP+) 164 5.6.1 Function: InitiateAuthentication 165 5.6.2 Function: GetBoundProfilePackage 167 5.6.3 Function: AuthenticateClient 169 5.6.4 Function: HandleNotification 172 5.6.5 Function: CancelSession 173 5.7 ES10x (LPA -- eUICC) 174 5.7.1 ISD-R Selection and LPAe Activation 175 5.7.2 Transport Command 176 5.7.3 Function (ES10a): GetEuiccConfiguredAddresses 178 5.7.4 Function (ES10a): SetDefaultDpAddress 178 5.7.5 Function (ES10b): PrepareDownload 179 5.7.6 Function (ES10b): LoadBoundProfilePackage 181 5.7.7 Function (ES10b): GetEUICCChallenge 181 V2.2 Page 4 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification 5.7.8 Function (ES10b): GetEUICCInfo 182 5.7.9 Function: (ES10b): ListNotification 184 5.7.10 Function (ES10b): RetrieveNotificationsList 185 5.7.11 Function (ES10b): RemoveNotificationFromList 186 5.7.12 Function (ES10b): LoadCRL 187 5.7.13 Function (ES10b): AuthenticateServer 189 5.7.14 Function (ES10b): CancelSession 191 5.7.15 Function (ES10c): GetProfilesInfo 192 5.7.16 Function (ES10c): EnableProfile 194 5.7.17 Function (ES10c): DisableProfile 197 5.7.18 Function (ES10c): DeleteProfile 199 5.7.19 Function (ES10c): eUICCMemoryReset 200 5.7.20 Function (ES10c): GetEID 201 5.7.21 Function (ES10c): SetNickname 202 5.7.22 Function (ES10b): GetRAT 203 5.8 ES11 (LPA -- SM-DS) 204 5.8.1 Function: InitiateAuthentication 204 5.8.2 Function: AuthenticateClient 205 5.9 ES12 (SM-DS -- SM-DP+) 207 5.9.1 Function: RegisterEvent 207 5.9.2 Function: DeleteEvent 209 5.10 ES15 (SM-DS -- SM-DS) 210 5.10.1 Function: RegisterEvent 211 5.10.2 Function: DeleteEvent 211 5.11 LUI in the eUICC (LUIe) 211 5.11.1 LUIe using CAT 211 5.11.2 LUIe using SCWS 211 6 Interface binding over HTTP 211 6.1 TLS Security 212 6.1.1 Identification/Authentication/Authorisation 212 6.1.2 Integrity 212 6.1.3 Confidentiality 212 6.2 HTTP request and response 212 6.3 HTTP response status codes 213 6.4 Secure Channel Set-Up on ES2+ 213 6.5 Function Binding in JSON 214 6.5.1 JSON message definition 214 6.5.2 List of functions 216 6.6 Function Binding in ASN.1 226 6.6.1 ASN.1 message definition 226 6.6.2 List of functions 227 Annex A Use of GlobalPlatform Privileges (Normative) 231 Annex B Data Definitions (Normative) 232 Annex C Device Requirements (Normative) 233 V2.2 Page 5 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification C.1 Functional Device Requirements 233 C.2 Requirements for Companion Device Scenarios 234 C.3 General LPA Requirements 235 C.4 Support for CAT Mechanisms 237 Annex D Coding of the AIDs for 'Remote SIM Provisioning' (Normative) 239 Annex E List of Identifiers (Informative) 240 Annex F Profile Eligibility Check (Informative) 242 Annex G Key Derivation Process (Normative) 243 Annex H ASN.1 Definitions (Normative) 244 Annex I JSON Request Response Examples (Informative) 257 Annex J Tag allocation (Normative) 260 Annex K OID allocation (Informative) 262 Annex L DLOA document (Normative) 263 Annex M Document Management (Informative) 264 M.1 Document History 264 V2.2 Page 6 of 264 GSM Association Non-confidential Official Document SGP.22 - RSP Technical Specification 1 Introduction 1.1 Overview This document provides a technical description of the GSMA’s 'Remote SIM Provisioning (RSP) Architecture for consumer Devices'. 1.2 Scope This specification provides a technical description of: The eUICC Architecture; The interfaces used within the Remote SIM Provisioning Architecture; and The security functions used within the Remote SIM Provisioning Architecture.