Abstract: A method, a device, and a non-transitory storage medium are described in which a security service of end device profiles is provided. The service may include obtaining a profile for a card of an end device from a third party device in which the profile includes first and second executables. For example, the first and second executables may each include a subscriber identification module. The first executable may initialize and subsequently perform a switching procedure that enables the second executable to replace the use of the first executable. The first executable may also generate a key that can be used to provision the second executable on the end device.

Abstract: A user device may receive information indicating that a universal integrated circuit card has been installed in the user device, where the universal integrated circuit card may store a default table that includes network slice selection assistance information used to route data from the user device to correct slices of a network. The user device may execute an application stored in the user device based on receiving a selection of the application, where execution of the application may cause data to be generated. The user device may identify a slice of the network to which to route the data based on the network slice selection assistance information included in the default table. The user device may cause the data to be routed to the slice of the network identified based on the network slice selection assistance information included in the default table.

Abstract: A service provider may receive a user device that includes an embedded subscriber identity module (eSIM) associated with an equipment identifier (eID) with a previously provisioned service. The previously provisioned service may be provided by an eSIM profile (identified by an Integrated Circuit Card Identifier or ICCID) and the eSIM may contain more than one ICCID. The service provider may re-provision one of the existing ICCIDs to provide service based on the eID and historical data. The device and the carrier provisioning system may determine whether one of the profiles (ICCIDs) installed in the eSIM matches an already known eSIM profile (ICCD) and re-provision the eSIM profile (ICCD) for new wireless service. The service provider may then activate the user device for communication via the new wireless service in response to re-provisioning of the applicable eSIM profile (ICCID).

Abstract: A service provider may receive a user device that includes an embedded subscriber identity module (eSIM) associated with an equipment identifier (eID) with a previously provisioned service. The previously provisioned service may be provided by an eSIM profile (identified by an Integrated Circuit Card Identifier or ICCID) and the eSIM may contain more than one ICCID. The service provider may re-provision one of the existing ICCIDs to provide service based on the eID and historical data. The device and the carrier provisioning system may determine whether one of the profiles (ICCIDs) installed in the eSIM matches an already known eSIM profile (ICCD) and re-provision the eSIM profile (ICCD) for new wireless service. The service provider may then activate the user device for communication via the new wireless service in response to re-provisioning of the applicable eSIM profile (ICCID).

Abstract: A user equipment (UE) may receive, from a certificate authority, a first onboarding identifier associated with a private key stored on the UE. The UE may transmit, to a wireless network, an attach request based on the first onboarding identifier. The UE may receive, from the wireless network, a signaling message that includes a second onboarding identifier, wherein the signaling message may be encrypted with a public key paired with the private key stored on the UE. The UE may decrypt the signaling message using the private key stored on the UE to obtain the second onboarding identifier. The UE may obtain a permanent identifier from a Remote SIM Provisioning platform based on the UE completing an authentication procedure using an authentication response obtained from the decrypted signaling message. The UE may then connect to the wireless network using the permanent identifier.

Abstract: A user device may receive information indicating that a universal integrated circuit card has been installed in the user device, where the universal integrated circuit card may store a default table that includes network slice selection assistance information used to route data from the user device to correct slices of a network. The user device may execute an application stored in the user device based on receiving a selection of the application, where execution of the application may cause data to be generated. The user device may identify a slice of the network to which to route the data based on the network slice selection assistance information included in the default table. The user device may cause the data to be routed to the slice of the network identified based on the network slice selection assistance information included in the default table.

Abstract: A user device may receive information indicating that a universal integrated circuit card has been installed in the user device, where the universal integrated circuit card may store a default table that includes network slice selection assistance information used to route data from the user device to correct slices of a network. The user device may execute an application stored in the user device based on receiving a selection of the application, where execution of the application may cause data to be generated. The user device may identify a slice of the network to which to route the data based on the network slice selection assistance information included in the default table. The user device may cause the data to be routed to the slice of the network identified based on the network slice selection assistance information included in the default table.

Abstract: A service provider may receive a user device that includes an embedded subscriber identity module (eSIM) associated with an equipment identifier (eID) with a previously provisioned service. The previously provisioned service may be provided by an eSIM profile (identified by an Integrated Circuit Card Identifier or ICCID) and the eSIM may contain more than one ICCID. The service provider may re-provision one of the existing ICCIDs to provide service based on the eID and historical data. The device and the carrier provisioning system may determine whether one of the profiles (ICCIDs) installed in the eSIM matches an already known eSIM profile (ICCD) and re-provision the eSIM profile (ICCD) for new wireless service. The service provider may then activate the user device for communication via the new wireless service in response to re-provisioning of the applicable eSIM profile (ICCID).

Abstract: A user device may receive information indicating that a universal integrated circuit card has been installed in the user device, where the universal integrated circuit card may store a default table that includes network slice selection assistance information used to route data from the user device to correct slices of a network. The user device may execute an application stored in the user device based on receiving a selection of the application, where execution of the application may cause data to be generated. The user device may identify a slice of the network to which to route the data based on the network slice selection assistance information included in the default table. The user device may cause the data to be routed to the slice of the network identified based on the network slice selection assistance information included in the default table.

Abstract: A user equipment (UE) may receive, from a certificate authority, a first onboarding identifier associated with a private key stored on the UE. The UE may transmit, to a wireless network, an attach request based on the first onboarding identifier. The UE may receive, from the wireless network, a signaling message that includes a second onboarding identifier, wherein the signaling message may be encrypted with a public key paired with the private key stored on the UE. The UE may decrypt the signaling message using the private key stored on the UE to obtain the second onboarding identifier. The UE may obtain a permanent identifier from a Remote SIM Provisioning platform based on the UE completing an authentication procedure using an authentication response obtained from the decrypted signaling message. The UE may then connect to the wireless network using the permanent identifier.

Abstract: A user equipment (UE) may receive, from a certificate authority, a first onboarding identifier associated with a private key stored on the UE. The UE may transmit, to a wireless network, an attach request based on the first onboarding identifier. The UE may receive, from the wireless network, a signaling message that includes a second onboarding identifier, wherein the signaling message may be encrypted with a public key paired with the private key stored on the UE. The UE may decrypt the signaling message using the private key stored on the UE to obtain the second onboarding identifier. The UE may obtain a permanent identifier from a Remote SIM Provisioning platform based on the UE completing an authentication procedure using an authentication response obtained from the decrypted signaling message. The UE may then connect to the wireless network using the permanent identifier.

Abstract: A mobile device may include a smart card interface to connect to a smart card storing a Mobile Network Operator (MNO) profile including a network access credential; a communication interface to connect to a wireless mobile network; and a processing unit to receive user input to delete the MNO profile from the smart card, send, to a network node, a request for deletion of the MNO profile, receive, responsive to the request, a deletion code including a deletion code signature, a smart card identifier (ID) that identifies the smart card, and a profile ID that identifies the MNO profile, extract, from the deletion code, the deletion code signature, the smart card ID, or the profile ID, validate the deletion code signature, the smart card ID, or the profile ID, and delete the MNO profile upon validation of the deletion code signature, the smart card ID, or the profile ID.

Abstract: A mobile device may include a smart card interface to connect to a smart card storing a Mobile Network Operator (MNO) profile including a network access credential; a communication interface to connect to a wireless mobile network; and a processing unit to receive user input to delete the MNO profile from the smart card, send, to a network node, a request for deletion of the MNO profile, receive, responsive to the request, a deletion code including a deletion code signature, a smart card identifier (ID) that identifies the smart card, and a profile ID that identifies the MNO profile, extract, from the deletion code, the deletion code signature, the smart card ID, or the profile ID, validate the deletion code signature, the smart card ID, or the profile ID, and delete the MNO profile upon validation of the deletion code signature, the smart card ID, or the profile ID.

Abstract: A mobile device, having a smart card within the mobile device, stores a Mobile Network Operator (MNO) profile for the mobile device in the smart card, where the MNO profile includes one or more network access credentials for accessing a wireless mobile network. The mobile device receives a customer request to delete the MNO profile, and sends, from the mobile device to a network node in the wireless mobile network, a request for profile deletion. The mobile device receives, responsive to the request from the network node, a deletion code; extracts, from the received deletion code, a deletion code signature and a public key of the network node. The mobile device validates the deletion code signature and the public key, and deletes, upon successful validation of the deletion code signature and the public key, the MNO profile from the smart card.

Abstract: A device receives a request from a user to manage a Mobile Network Operator (MNO) profile stored in a smart card within the device, wherein the MNO profile includes one or more network access credentials for accessing a wireless network. The device performs a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA), wherein the CAPTCHA includes receiving input from the user, and authenticates the user as a human, and not a bot or other automated activity, based on the CAPTCHA and the input from the user. The device receives, from a network node external to the device responsive to the authenticating, a MNO profile management code, and manages the MNO profile based on the received MNO profile management code.

Abstract: A mobile device, having a smart card within the mobile device, stores a Mobile Network Operator (MNO) profile for the mobile device in the smart card, where the MNO profile includes one or more network access credentials for accessing a wireless mobile network. The mobile device receives a customer request to delete the MNO profile, and sends, from the mobile device to a network node in the wireless mobile network, a request for profile deletion. The mobile device receives, responsive to the request from the network node, a deletion code; extracts, from the received deletion code, a deletion code signature and a public key of the network node. The mobile device validates the deletion code signature and the public key, and deletes, upon successful validation of the deletion code signature and the public key, the MNO profile from the smart card.

Abstract: A device receives a request from a user to manage a Mobile Network Operator (MNO) profile stored in a smart card within the device, wherein the MNO profile includes one or more network access credentials for accessing a wireless network. The device performs a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA), wherein the CAPTCHA includes receiving input from the user, and authenticates the user as a human, and not a bot or other automated activity, based on the CAPTCHA and the input from the user. The device receives, from a network node external to the device responsive to the authenticating, a MNO profile management code, and manages the MNO profile based on the received MNO profile management code.