- Resources
- Blog
eSIM technology enhanced with IoT SAFE and SGP.32
Charlie Harrisson With IoT SAFE, enterprises can select a network operator of choice for connectivity and leverage IoT SAFE in the device’s eSIM to securely connect devices to the cloud. OEMs wanting secure and simplified cellular connectivity can adopt SGP.32, aka eSIM IoT, an interface for IoT devices, making it possible to manage eSIM profile downloads easily and remotely.
An eSIM security strategy for connected IoT solutions
Data breaches are constant risks that can compromise sensitive information. Therefore, securing data from its inception is essential; utilizing advanced encryption, access controls, and data provenance mechanisms, including IoT SAFE, is recommended.
The integrity and authenticity of data sent from the IoT device to the cloud is vital. This is becoming increasingly important as more companies use artificial intelligence to gain insights for decision-making and automate processes to maintain a competitive edge. For this reason, enterprises must think strategically about the most relevant framework to address security while monitoring the specific tools and specifications that best meet their operational needs. You can explore more on secure connected IoT solutions in our on-demand webinar with Semtech and Transformation Insights.
Intelligent device security with IoT SAFE
OEMs are on a digital transformation journey to combine connectivity with end-to-end credentials to achieve one unified provisioning flow. To accomplish this, we need IoT SAFE to secure the credentials for establishing end-to-end connections and authenticating device transactions.
Problems solved by IoT SAFE
Data authenticity from device to cloud
Enterprises use IoT sensors to gather data and view it as an extension of their network. IoT devices gather data, which they consider their property, to analyze and derive insights for automating tasks. Most organizations haven’t had ready access to a secure place on devices to store their credentials to protect their data from the device to the cloud. This is no longer the case because of Kigen’s IoT SAFE solution. To learn more, see our on-demand video for more info
Privacy protection for end-to-end exchanges
The eSIM in cellular IoT devices can be utilized as the root of trust needed for secure bootstrapping and secure firmware updates. Ideally, the chosen solution should provide secure storage of credentials and keys with tamper-resistant properties.
Strong authentication and authorization on the application side for the application cloud are crucial, as is ensuring confidentiality. Privacy protection for end-to-end exchanges is vital, but the awareness and education of those involved in deploying networks, creating devices, or developing applications is even more critical. These are paramount to securing the enterprise or end-user IoT systems. Businesses should adopt robust technology and standards-based methods to manage this complex environment.
SGP.32: Improved IoT device interoperability and scalability
The GSMA’s SGP standards explain eSIM technology, focusing on security, remote provisioning, and operational efficiency. These standards have evolved from machine-to-machine (M2M) to address the changing IoT landscape. SGP.31 and SGP.32 aim to simplify remote SIM provisioning for various IoT applications and improve interoperability and scalability for IoT deployments.
eSIM IoT connectivity redefined
eSIM IoT SGP.32 is designed to increase flexibility for large-scale IoT deployments, making transitioning connectivity between network providers easier.
In practice, however, navigating this change is intricate and will take time to be fully adopted by the IoT ecosystem. It supports SIM provisioning without SMS and suits low-power devices, including NB-IoT/LTE-M devices that operate in power-saving modes for long periods, opening up new opportunities across multiple sectors.
Best of M2M IoT and consumer IoT
Original business cases and requirements that initially scoped the M2M and consumer RSP architectures failed to meet the current expectations for IoT as new ideas for connected devices emerge. To this end, the GSMA has tried to combine the best of both worlds by introducing eSIM IoT SGP.32. It’s worth noting that the eSIM IoT SGP.32 addresses two issues from the previous specification.
Two main issues resolved by eSIM IoT / SGP.32
- The IoT specification does not include a Subscription Manager Secure Routing (SM-SR) for profile switching. Instead, it emulates the consumer specification, where the profile provisioning process is carried out on the device. The SIM vendor or device manufacturer now handles profile provisioning, not the MNO. As a result, this change allows enterprises more flexibility in selecting their initial connectivity provider and switching to a new provider without constraints.
- The GSMA M2M specification is incompatible with NB-IoT/LTE-M applications. The M2M specification relies on SMS protocols for the profile-switching process. Still, NB-IoT does not support SMS, making it complicated to implement eSIM and NB-IoT under the M2M specification. Additionally, issues have been reported with using eSIM in LPWA devices, as the profile provisioning process under the M2M specification can drain the device’s battery life.
The new specification supports SIM provisioning without SMS, making it accessible to many more devices than previously. eSIM IoT has been simplified to suit low-power devices, including NB-IoT/LTE-M devices that can operate in power-saving or ‘sleep modes’ for long periods, opening up new opportunities across multiple sectors. We discuss how to optimize your IoT deployment with eSIM IoT / SGP.32 in our on-demand webinar with KORE Wireless, Cradlepoint and Westbase i.o.
A simplified remote SIM provisioning solution for IoT devices
OEMs and ODMs can now benefit from a simplified subscription management solution for improved connectivity across international borders.
A key feature is the eIM, the eSIM provisioning tool for managing profiles and remotely provisioning fleets of IoT devices. The eIM simplifies deployments and works via the IoT profile assistant (IPA), which runs either on the IoT device (IPAd) or on the eSIM/eUICC (IPAe), reducing development time.
- The diagram below represents a download of mobile network operator profiles for constrained IoT devices that use low-power protocols.
- In this scenario, the profile download is routed through the eIM, Indirect Download. This setup allows for optimizations on both the eIM and device sides. The eIM validates the request and then triggers a profile download request to the SM-DP+.
What are the efficiency and scalability benefits of eSIM IoT?
Simplified RSP standard suited for constrained devices
• New IoT profile specification a fraction of the size of a typical MNO profile
• CoAP/DTLS and low-power protocols supported
Removes complex integrations and costs
• No need for complex and costly SM-SR swaps, RSP to RSP integrations
• Existing SM-DP+ can be used for profile access
Future-proof IoT deployments
• Maximum flexibility (direct/indirect downloads) for different device types
• Device communication protocol agnostic
Enterprises with current or planned IoT deployments need to plan and integrate SGP.32 to take advantage of its benefits. Kigen’s advanced eSIM OS and partnerships with MNO enable you to download profiles from different networks to your devices and switch carriers when necessary.
Our IoT SAFE and eSIM IoT management solutions enable seamless, secure eSIM provisioning, efficient Remote SIM Management, and access to leading mobile network operators.
