SGP.22 RSP Architecture

GSMA Consumer eSIM — Players, Interfaces, and Trust Boundaries • SGP.22 v2.2.2

SM-DP+ Profile Factory + Delivery Operator (MNO) Orders + OTA Management LPA Local Profile Assistant LDS — Discovery Service LPD — Profile Download LUI — User Interface eUICC Embedded Secure Element ECASD — Root of Trust ISD-R — Profile Manager ISD-P × N — Profile Containers SM-DS Discovery Server GSMA CI Certificate Issuer IoT / Consumer Device ES2+ ES12 ES9+ ES8+ (end-to-end, via LPA) ES11 ES10a/b/c ES6 (OTA) ESci Legend SM-DP+ LPA / Device eUICC / Profiles SM-DS Security / CI Operator Solid lines = direct interface • Dashed = tunnelled/OTA • ES8+ is end-to-end encrypted, LPA is a pass-through

Based on GSMA SGP.22 v2.2.2 — Section 2.1 General Architecture