All of this technology is coming from outside the USA to influence adoption in the USA. Finally, Wearables for payment in subway transit system are growing globally, especially in Asia and Europe, major transportation networks seek to take advantage with Wearable Payment Smart Watches, NFC-enable Rings, Wristbands and even NFC & Bluetooth clothing. Tokens themselves are secure but without “Tamper Resistant” security, they can also be breached. However if a virtual “soft” SIM is used, then the TEE – Trusted Execution Environment a (firewall) a securely protected environment in the mobile applications processor chip can is used to store and secure sensitive user payment credentials, like credit card tokens. In Wearable Payment Smart Watches with Android OS, security for performing NFC point-of-sale mobile payments also needs security, either from the eSIM. Remote SIM Provisioning is managed by a two-phase provisioning process called SM-DP and SM-SR. eUICC form factor is MFF2, a hermetically sealed and soldered module into the PCB of the smart & connected device further secure by a hardware SE – Secure Element storage container in the Smart Card to store users sensitive credentials. Currently, devices without “ Tamper Resistant” hardware (secure domain) security will be breathed and threatened by Malware. The GSMA has created a three-step program for the scaling of IoT devices with eSIM for GSMA’s Remote SIM Provisioning Program, which allows for on-demand subscriptions, where the owner of the device sets up and controls 4G LTE WWAN connectivity to activate (In the Cloud) and connect services to any operator’s network.

The key to understanding eSIM is to understand Multi-IMSI – International Mobile Subscriber Identity and MNO operator profiles with Subscription Management of smart and connected devices. It also helps threat modelers identify classes of threats they should consider based on the structure of their software design. Karl will discuss security of IoT Consumer devices: The rise of eSIM (eUICC), for commercial applications in the IoT, M2M and Wearables marketplace. The Microsoft Threat Modeling Tool makes threat modeling easier for all developers through a standard notation for visualizing system components, data flows, and security boundaries.

Sdl threat modeling tool v3