Integrating The SIM

Date: 13 June 2018@qualcommLocation: Sophia AntipolisIntegrating the SIMDr. Adrian EscottQualcomm Technologies, Inc.

Agenda1 2 3 4 5 6Path toiSIMiSIMSize benefitHardwareArchitectureCertification andStandardizationBeyond theiSIM use caseQ&A2

Path to an integrated SIMTraditional SIMDiscrete eUICCIntegrated UICCQualcomm Technologies, Inc. (QTI) mobile processor not to scaleQualcomm Snapdragon is a product of Qualcomm Technologies, Inc.3

Size benefit of integrating the SIM card85.6mmQualcomm SPU25mmSnapdragonProcessor15mm12.3mm6mmFull SizeMiniMicroNanoEmbeddedQualcomm SOC not to scale4

Size benefit of integrating the SIM cardQualcomm SPUTraditional SIM cards oreSIMs include NVM,constraining the technologynode it can useSoC use the latesttechnology nodes,currently at 10nmand reducingTypically 30nmExternal NVM is leveragedcSnapdragonProcessorQualcomm SOC not to scale5

SnapdragonProcessor6

Hardware ArchitectureSecureProcessorSecure ProcessorCPUApplicationProcessorCoresSensors &Counter MeasureI/O SYSTEM BUSMemoryControllerBasebandCoreQualcomm SOC not to scale7

Hardware ArchitectureSecure ProcessorCPUApplicationProcessorCoresSensors &Counter MeasureI/O UnitMemMgrCryptoBlockRNGKeyMgmtUnitSPRAMOTPAreaThe Secure Processor is anisolated core with secure trustboundaries with all other coresROMIt is not a softSIM ora TEE-based SIMThe Secure Processor isdesigned to meet the samesecurity criteria as a SIM card:Common Criteria EAL4 SYSTEM BUSMemoryControllerBasebandCoreQualcomm SOC not to scale8

SecuritySecure ProcessorCPUApplicationSensorsProcessor& CounterCoresMeasureI/O UnitMemMgrMemoryControllerSensors &Counter MeasureCryptoI/O UnitBlockSecure Processing UnitSecure ProcessorMemRNGMgrOTPSP-RAMAreaSYSTEM BUSActive and passive security againstSCA, FA and invasive attacksCPURNGKeyMgmtUnitHW accelerated and secure cryptooperations (AES, RSA, ECC)SP-Key MgmtOTPRAM UnitAreaROMHW Random Number GeneratorCryptoBlockROMBasebandCoreRandom Access Memory (contains theexecutable code and data)One Time Programmable(store configuration and per device keys)Read Only Memory(store the SPU firmware – root of trust)9

SecurityThe Secure Processing Unit isequivalent to a discrete smartcardSecure IC except that it does nothost Flash memoryCode and Data at rest are storedin the device Flash with a highlevel of security enforced by SPU: ConfidentialityQualcomm SPU designis targeting EAL4 certificationaccording to PP084(Secure IC Platform)(AES-256 encryption) Authenticity(CMAC-AES-256) Anti-Rollback(version counter handleand stored in SPU)10

Certification – example of eSIMThe principles of composite certification can apply as in the case of eSIMProfile1Profile2Embedded UICC PPBSI-CC-PP-0089JavaCard PPOpen ConfigurationSecure IC Platform PPBSI-CC-PP-0084A Remote SIM ProvisioningPP leverages a JavaCard PPThe JavaCard PP leveragesa secure IC PPThe Target of Evaluation isthe Secure Processor onlyQualcomm has initiated a certification effort for theSecure Processor with the BSI, targeting EAL4 1111

Standardization efforts & Industry activitiesPublication ofiUICC POC Group PrimaryPlatform RequirementsEndorsed new ways to storeoperator credentials compatiblewith integrated SIMOn-going standardizationwithin ETSI SCP12

Beyond the SIM usecase – realizing thefull potential of asecure processorPaymentTransitSecure IdentityEach use case today has his own dedicatedsolution, with its own ecosystem, standardizationand security certification processes.13

Enabling multiple use casesVPP Interfaces Standardized in GlobalPlatformTamper Resistant ElementVPP APPLICATIONApplicationServicesApplicationHigh Level OSLow Level OSHardwareVIRTUAL PRIMARY PLATFORMUSE CASE DEPENDENTUSE CASE INDEPENDENTAPIUse CaseDependentTechnology&Use CaseIndependentTechnologyDependent14

Thank youFollow us on:For more information, visit us at:www.qualcomm.com & www.qualcomm.com/blogNothing in these materials is an offer to sell anyReferences in this presentation to “Qualcomm” may meanof the components or devices referenced herein.Qualcomm Incorporated, Qualcomm Technologies, Inc., and/or other 2018 Qualcomm Technologies, Inc. and/or itsaffiliated companies. All Rights Reserved.Qualcomm is a trademark of QualcommIncorporated, registered in the United Statesand other countries. Other products and brandnames may be trademarks or registeredtrademarks of their respective owners.subsidiaries or business units within the Qualcomm corporatestructure, as applicable. Qualcomm Incorporated includesQualcomm’s licensing business, QTL, and the vast majority of itspatent portfolio. Qualcomm Technologies, Inc., a wholly-ownedsubsidiary of Qualcomm Incorporated, operates, along with itssubsidiaries, substantially all of Qualcomm’s engineering, researchand development functions, and substantially all of its product andservices businesses, including its semiconductor business, QCT.

Micro. Nano. Embedded. Qualcomm SPU. Snapdragon Processor. Qualcomm SOC not to scale. 5. c. Size benefit of integrating the SIM card. Qualcomm SPU. Snapdragon Processor. Qualcomm SOC not to scale. Tradi