eSIM Profile Package Stages

GSMA SGP.22 — From Operator Profile to Installed eUICC Profile

SM-DP+ (Server Side) Profile Factory → Encrypt → Bind 1. UPP Unprotected Profile Package SIMalliance TLV seq. 2. PPP Protected Profile Package SCP03t encrypted 3. BPP Bound Profile Package PPP + Key Agreement + ISD-P creation + Metadata → BPP Structure (ASN.1 TLV) InitialiseSecureChannel Tag BF23 • ECDH Key Agree Clear (not encrypted) → ConfigureISDP Tag 87 • Create ISD-P SCP03t encrypted → StoreMetadata Tag 88 • ICCID, Name MAC only (not enc) → Profile Prot. Keys (opt) Tag 87 → Profile Elements Tags 86 (SCP03t payload) FS • NAAs • Applets • Keys On the IoT Device / Phone 4. SBPP Segmented Bound Profile Package → eUICC → Profile Package Interpreter STORE DATA APDU scripts → Decode → Install → Profile Installed ✓ Disabled state → Ready to Enable BPP is cryptographically bound to a specific eUICC via ECDH key agreement — cannot be installed on any other chip Profile can be pre-generated (dual-layer protection) or generated on-demand (single-layer, session-key protected)

Based on GSMA SGP.22 v2.2.2 — Section 2.5 Profile Protection and Delivery