Meaning
Technical specifications defined by the mobile industry association govern the architecture and functions of remote SIM provisioning for consumer devices. The GSMA SGP.22 standard establishes the procedures for downloading and managing operator profiles on an embedded universal integrated circuit card. It defines the interaction between the device, the discovery service, the root certificate authority and the subscription manager data preparation server.
This protocol enables the switching of mobile networks via a software interface without physical card replacement. The scope ends at the consumer device level, as different rules apply to industrial or machine-to-machine deployments.
Security Architecture
Public key infrastructure ensures that only authorized profiles reach the secure element. Under GSMA SGP.22, the device must validate the digital signature of the server before accepting a profile download. Encryption protects the credentials during the transfer over unsecured networks.
The secure element handles the decryption within its hardware boundary.
Profile Management
Local profile assistant software resides on the device to coordinate request and server responses. The GSMA SGP.22 framework enables this software to trigger profile enablement or deletion. The software interface provides the means to select a preferred carrier.
The assistant communicates with the eUICC through a set of standardized commands.
Provisioning Flow
Activation begins when a system scans a QR code or receives an activation string. The GSMA SGP.22 process then contacts the discovery server to find the correct profile location. A secure session opens between the device and the carrier server.
Once the profile installs, the modem resets to register on the new network.