Abstract: Embodiments are described herein for transferring a subscriber identity module (SIM) or electronic SIM (eSIM) profile securely from a source device to a target device with verifiable signatures generated by secure hardware elements of the source device contingent on receipt of a secure intent gesture. Trustworthiness of the profile transfer is based on a mobile network operator (MNO) entitlement server releasing a transfer token after verification of a message signed by an embedded universal integrated circuit card (eUICC) of the source device. The eUICC signs the message only after verifying a message from a secure enclave processor (SEP) of the source device that signs the message based on receipt of the secure intent gesture via a secure interface. To validate communication between the SEP and the eUICC, an asymmetric cryptographic key pair generated by the SEP is bound to a unique eUICC identifier (EID) value of the eUICC.

Abstract: A device, system, and method synchronizes network states for a user equipment (UE) during a handover from a first network to a second network while the UE was in a radio resource control (RRC) idle state. The method includes determining whether a first context associated with a first non-default bearer over the first network is stored on the UE. The method includes when the first context is determined, determining a second context associated with a second non-default bearer over the second network is stored on the UE. The method includes transmitting a request to the first network over a default bearer for network state information relative to the first network. The method includes receiving the network state information from the first network, the network state information indicating that the UE does not have the first non-default bearer over the first network established. The method includes deleting the first context.