Agencja Unii Europejskiej ds. Cyberbezpieczeństwa, Wbudowany ekosystem SIM, zagrożenia i środki bezpieczeństwa

MARCH 2023

EMBEDDED SIM ECOSYSTEM, SECURITY RISKS AND MEASURES

EXECUTIVE SUMMARY

eSIM is the generic term used for the embedded form of a SIM (subscriber identity module) card. Like a normal SIM card, the eSIM identifies a subscriber within a mobile network operator’s (MNO) network. Unlike a normal SIM, the eSIM is built into the device, hosted on tiny chips that provide storage for the mobile subscription details in digital format. Both the tiny chip and the software are embedded in the device, with eSIMs being rewriteable by all mobile network operators (MNOs). The credentials required to sign into the MNO’s network are downloaded directly.

eSIMs are found in a wide range of products, such as smartphones, wearable devices, tablets, computers, medical internet-of-things (IoT) devices, home automation and security systems, connected cards, and handheld point-of-sale devices. eSIM technical specifications are standardised by industry bodies and allow for power efficiency, remote SIM...