eSIM Profile Package Stages

GSMA SGP.22 — From Operator Profile to Installed eUICC Profile

SM-DP+ (Server Side) Profile Factory → Encrypt → Bind 1. UPP Unprotected Profile Package SIMalliance TLV seq. 2. PPP Protected Profile Package SCP03t encrypted 3. BPP Bound Profile Package PPP + Key Agreement + ISD-P creation + Metadata BPP Structure (ASN.1 TLV) InitialiseSecureChannel Tag BF23 • ECDH Key Agree Clear (not encrypted) ConfigureISDP Tag 87 • Create ISD-P SCP03t encrypted StoreMetadata Tag 88 • ICCID, Name MAC only (not enc) Profile Prot. Keys (opt) Tag 87 Profile Elements Tags 86 (SCP03t payload) FS • NAAs • Applets • Keys On the IoT Device / Phone 4. SBPP Segmented Bound Profile Package eUICC → Profile Package Interpreter STORE DATA APDU scripts → Decode → Install Profile Installed ✓ Disabled state → Ready to Enable BPP is cryptographically bound to a specific eUICC via ECDH key agreement — cannot be installed on any other chip Profile can be pre-generated (dual-layer protection) or generated on-demand (single-layer, session-key protected)