Search papers, labs, and topics across Lattice.
Current GSMA Remote SIM Provisioning (RSP) protocols expose persistent hardware identifiers like EIDs, enabling telecommunications infrastructure to link provisioning sessions directly to user identities. To eliminate this cross-session tracking, ZK-eSIM replaces static hardware disclosures with zero-knowledge proofs of eligibility, ephemeral pseudonymous credentials, and a multi-party escrow mechanism for conditional deanonymization. Evaluated on a commodity Java Card eUICC alongside modified LPA and SM-DP+ infrastructure, the system formally proves subscriber anonymity under standard assumptions while maintaining practical latency and compatibility with existing cellular roles.
Telecom operators can now provision eSIM profiles without ever observing persistent device identifiers or tracking subscriber identities across carrier downloads.
GSMA Remote SIM Provisioning (RSP) enables over-the-air delivery of eSIM profiles, but it exposes long-lived identifiers during profile ordering and download. In particular, stable device identifiers (e.g., EID), profile identifiers, and long-lived certificate material enable mobile operators and profile-delivery infrastructure to link provisioning events to the same eUICC and, when combined with account records, to the same subscriber. This undermines subscriber anonymity and enables cross-session tracking. We present ZK-eSIM, a privacy-preserving redesign that achieves subscriber anonymity and provisioning-session unlinkability while retaining accountable traceability by exception. ZK-eSIM (i) replaces direct disclosure of device identifiers with a zero-knowledge proof of device validity and eligibility; (ii) enforces session unlinkability through short-lived, one-time pseudonymous credentials and per-session identifiers to prevent cross-session tracking; and (iii) provides privacy-preserving accountable traceability through a jointly authorised escrow mechanism, so that no single entity can unilaterally deanonymise a user. We formalise a multi-entity, honest-but-curious threat model and prove subscriber anonymity and the unlinkability of provisioning sessions under standard cryptographic assumptions. We implement a Java Card applet on a test eUICC to evaluate performance on commodity hardware with a modified LPA and SM-DP+ server. Our experiments quantify end-to-end cryptographic overhead relative to conventional RSP, confirming that ZK-eSIM adds only practical overhead, closing a critical privacy gap while preserving deployability within existing GSMA roles and interfaces.
