ALBIN FRIDH Printed by Tryckeriet i E-huset, Lund 2020 Printed by Tryckeriet eSIM Re-Selling on Mobile App ALBIN FRIDH MASTER´S THESIS DEPARTMENT OF ELECTRICAL AND INFORMATION TECHNOLOGY FACULTY OF ENGINEERING | LTH | LUND UNIVERSITY eSIM Re-Selling on Mobile App on Mobile eSIM Re-Selling Series of Master’s theses Department of Electrical and Information Technology LUND 2020 LU/LTH-EIT 2020-760 http://www.eit.lth.se eSIM Re-Selling on Mobile App Albin Fridh
[email protected] Department of Electrical and Information Technology Lund University Supervisors: Stefan Höst (EIT) and Tibor Rathonyi (CellRebel) Examiner: Maria Kihl May 29, 2020 c 2020 Printed in Sweden Tryckeriet i E-huset, Lund Abstract In recent years many devices such as smartphones, smart watches and laptops have started being equipped with embedded SIM cards called eSIM, which have the possibility to be reprogrammed with new subscription data through a process called remote SIM provisioning. To enable the eSIM in these devices, the mobile operators have had to implement new systems for the remote SIM provisioning process, and most of the research around this process has focused on security, leaving other areas unexplored. Therefore, in this master’s thesis the possibility for a 3rd party to be able to use eSIM and to take the role as re-seller of eSIM subscriptions for consumer devices on a mobile app has been explored by studying the existing eSIM and remote SIM provisioning specifications along with the specifications of the most commonly used mobile operating systems, Android and iOS. The findings were that there is nothing in the eSIM standard that prevents 3rd parties from re-selling eSIM subscriptions for the mobile operators, but that there are some obstacles in both the Android and iOS operating systems as they need carrier privileges or eSIM access entitlements respectively to be able to access the APIs that handles the eSIM in the device.