SIM Card of the Next-Generation Wireless Networks: Security, Potential Vulnerabilities and Solutions

The embedded Universal Integrated Circuit Card (eUICC) is used in Machine-to-Machine communications. However, with the upcoming of 5G and the extended exploitation of Internet of Things, the next-generation of wireless systems and future smartphones will be equipped with the eUICC. The objective is to avoid the SIM card change in case where the data, the application type or the operator is changed. This implies that remote switching from one operator to another without any change of hardware or physical contact is now possible by remotely reprogramming the eUICC with less cost, less time and more efficiency. Also, linking multiple machines with the same phone number, and then on the same billing, will be a reality. However, the major concern in the use of eUICC is the mutual security between the user and the operator. In this paper, we study the security mechanisms of eUICC, according to the specifications of the international standardization bodies, and arise the potential vulnerabilities. We propose solutions to avoid such potential vulnerabilities.