Ensuring compliance with the specification

The GSMA has published an Embedded SIM Test Specification for remote provisioning solution providers that will give assurance that different GSMA Embedded SIM remote provisioning systems functionally comply with the GSMA Technical Specifications. The GSMA has also extended its successful Security Accreditation Scheme (SAS) to cover remote provisioning subscription management service providers to ensure the robust security and product integrity requirements are maintained.

Security Accreditation Scheme for GSMA Embedded SIM

For almost 15 years, the GSMA’s Security Accreditation Scheme has been providing mobile network operators with valuable peace of mind that their SAS-certified UICC suppliers implement high levels of production security. With the advent of GSMA Embedded SIM Specification it is essential that remote provisioning subscription management service providers continue to safeguard the integrity of the Embedded UICC and its data. To facilitate industry confidence in the security of remote provisioning, the successful SAS model in use for UICC production is being extended to cover security auditing and accreditation of the Embedded UICC supplier and the providers of subscription management (DP and SR) services.

Accreditation process:

  • The SAS security standards developed and approved by mobile network operators and SIM manufacturers within GSMA are used by suppliers of Embedded UICCs or subscription management services to design the security of the environment and processes that are used to manufacture and manage Embedded UICCs.
  • The supplier requests an audit of its environment and processes at a specific site from the GSMA.
  • A professional security auditing team engaged by GSMA visits the supplier site, conducts a comprehensive audit against the SAS standard, and produces an audit report for review by a SAS Certification Body, an expert group made up of GSMA operator members.
  • Based on the audit report and its recommendations, the SAS Certification Body decides whether or not the supplier site is awarded SAS certification.
  • GSMA publicises certified supplier sites, highlighting to its members the benefits of acquiring products and services from such sites.

GSMA Embedded SIM Test Specification

The purpose of the Test Specification for GSMA Embedded SIM is to ensure products made by vendors, including eUICC, SM-DP and SM-SR entities are functionally compliant to the GSMA Embedded SIM Technical Specification.

Test tool manufacturers will use the GSMA Embedded SIM Test Specification to develop dedicated test tools for the market. Vendors will then develop their products and commission test houses to test their products, or buy in appropriate test tools and perform the testing themselves. The vendors may self-certify their products if all the test cases are passed, and the appropriate criteria are met that permits self-certification. (ISO/IEC 17050).

GSMA Embedded SIM – Certificate Issuance

The Certificate Issuer (CI) process within the GSMA Embedded SIM architecture ensures the various system entities (SM-DP, SM-SR, EUM, eUICC) can all be trusted by each other.

Initially the GSMA will be the Sole Certificate Issuer however, as the market establishes, other Certificate Issuers can be added in a hierarchy. For example, issuers per region, or country, or even market sector.

Vendors of certified and SAS accredited GSMA Embedded SIM product/entities can apply for certificates for each of their system entities. Once the EUM has a valid root CI from the Certificate Issuer it is able to self-certify eUICC products. When these entities communicate with each other they use the certificates to mutually authenticate themselves. In that way they can trust each other.

More information on the Security Accreditation Scheme can be found here.

Key Documents

The importance of Embedded SIM certification to scale the Internet of Things As a provider of connected devices why should you care about test and certification of Embedded SIM? Because it enables your devices to reach market faster since they do not need...

Read more | See all Resources

Webinar Highlights: Changing of the SIM Card – Are You Ready for Remote SI Remote SIM Provisioning is one of the most exciting technologies in the M2M market and has the potential to accelerate the delivery of millions of connected devices across the g...

Read more | See all Resources

Remote Provisioning Architecture for Embedded UICC Technical Specification v3.1 This document provides a technical description of the GSMA’s ‘Remote Provisioning Architecture for Embedded UICC’. Download...

Read more | See all Resources

Architecture for Embedded UICC Test Specification v3.1 These test specifications are to be used by test labs to develop test for the principal components and interfaces of the GSMA’s Remote Provisioning Architecture for Embedded UI...

Read more | See all Resources

The GSMA IoT Webinar Series 2016-17 This webinar series explores key initiatives to accelerate the delivery of new connected services and devices in the Internet of Things (IoT). Topics will be explored and discuss...

Read more | See all Resources

Simplifying the adoption of compliant M2M solutions The recent backing of the GSMA Embedded SIM Specification from a large number of global auto manufacturers suggests that it is on the way to becoming the de-facto standard mechan...

Read more | See all Resources

Connected Street Lighting: the next Milestone for Smart Cities Neill Young, Vertical Innovation Lead, GSMA Smart cities are now rapidly coming to life. As urban planners look to the possibilities of the IoT to improve city infrastructure, th...

Read more | See all Industry News

Interview: Now for Something Completely Different The Vodafone Group R&D Director explains why the Mobile Internet of Things is about to expand dramatically   Luke Ibbetson, Vodafone Group R&D Director, Chair of GS...

Read more | See all Industry News

LPWA: Streamlining Waste Collection (Use Case) Veolia harnesses the Mobile IoT to cut the number of truck journeys made to empty bins   As cities expand and the urban population grows, municipalities need to collect more...

Read more | See all Industry News

LPWA: Simplifying the Smart Home (Use Case) Hisense is exploring how the Mobile IoT can give consumers remote control over their appliances   At Mobile World Congress 2017 in Barcelona, multinational white goods and e...

Read more | See all Industry News

Verizon Launches Industry’s first LTE-M Nationwide IoT Network Last week, Mobile IoT (licensed low power wide area networks) made a significant breakthrough in North America after mobile network operator Verizon confirmed the launch of the f...

Read more | See all Industry News

The Mobile IoT Innovators Showcase at Mobile World Congress 2017 The Mobile IoT Innovators Showcase was a competition initiated by the GSMA Internet of Things Programme to enable innovative companies to make their contribution to a connected f...

Read more | See all Industry News

Webinar: Deploying Mobile IoT (LPWA) – Ask the Experts April 25, 2017 Register now Mobile IoT (licensed spectrum low power wide area) networks are a high-growth area of the IoT and will play an important role in connecting up billions of new device...

Read more | See all Connected Living Events

Digital Societies Policy Forum and GSMA Capacity Building Course May 08, 2017 With support from the Australian Government and other partners, the International Telecommunication Union (ITU) and the GSMA are pleased to host the 3rd Asia-Pacific Digital Soc...

Read more | See all Connected Living Events

GSMA Mobile 360 Series – Privacy & Security May 23, 2017   IoT Security Masterclass: Establishing a Flexible Framework to Address Market Diversity Wednesday, 24 May, 11:15 – 12:00 Red Room, Hilton Hotel From connected cars ...

Read more | See all Connected Living Events

Mobile World Congress Shanghai June 28, 2017 The Internet of Things will be central to Mobile World Congress Shanghai  – Asia’s biggest mobile event. Bringing together the global mobile industry’s  C-level ...

Read more | See all Connected Living Events

Contact GSMA Legal Email Preference Centre Copyright © 2017 GSMA. GSM and the GSM Logo are registered and owned by the GSMA.