Fact-checked by Grok 2 weeks ago

SIM card

The Subscriber Identity Module (SIM) is a smart secure element, typically implemented as a removable integrated circuit card, that stores a mobile subscriber's unique identity—such as the International Mobile Subscriber Identity (IMSI)—along with authentication keys and personal data, enabling secure authentication and authorization to access cellular networks.^[1] Developed initially for Global System for Mobile Communications (GSM) networks, the SIM performs critical functions including network authentication via challenge-response mechanisms using a secret key (Ki), encryption key generation for air interface protection, and storage of subscriber-specific files like phonebook entries and short messages.^[2] First commercially manufactured in 1991 by Giesecke+Devrient for the Finnish operator Radiolinja, the SIM revolutionized mobile telephony by separating user identity from the handset, allowing portability of service across devices.^[3] Subsequent evolutions extended SIM functionality to Universal SIM (USIM) for 3G and beyond, incorporating support for IP multimedia services and higher security protocols, while form factors progressed from full-size (credit-card dimensions) to mini-, micro-, and nano-SIM to accommodate shrinking device designs.^[4] Embedded SIM (eSIM) variants, integrated directly into devices without physical removal, further advanced deployment flexibility, particularly for IoT applications, by enabling remote provisioning of profiles.^[5] Despite its robustness, the SIM has faced challenges including vulnerabilities to cloning and over-the-air attacks in early implementations, prompting ongoing enhancements in cryptographic standards and hardware security modules.^[1]

History

Invention and Early Development

The Subscriber Identity Module (SIM), a smart card for storing mobile subscriber data and enabling secure network authentication, was developed in the late 1980s as an integral part of the Global System for Mobile Communications (GSM) standard. The GSM initiative began in 1982 when the Conference of European Posts and Telecommunications (CEPT) established the Groupe Spécial Mobile to create a unified pan-European digital cellular system, aiming to replace fragmented analog networks with a secure, interoperable digital alternative. By 1987, the project transitioned to the European Telecommunications Standards Institute (ETSI), which specified the SIM's role in phase 1 standards finalized in 1990, emphasizing its function in subscriber identification via the International Mobile Subscriber Identity (IMSI) and cryptographic authentication to prevent unauthorized access.^[6]^[7] German smart card manufacturer Giesecke+Devrient (G+D) led the practical development of the SIM under the direction of Dr. Klaus Vedder, leveraging existing smart card technology originally pioneered for payment systems in the 1970s. In 1989, G+D produced the first plug-in SIM prototype, a removable module designed to interface with early GSM handsets, marking a shift from fixed subscriber units in prior analog systems to portable, user-swappable authentication. This innovation addressed causal security needs in mobile networks, where separating user identity from the handset enabled roaming and reduced fraud risks inherent in non-removable identifiers.^[8]^[3] Commercial production commenced in 1991, with G+D delivering the initial batch of approximately 300 credit-card-sized SIMs (full-size form factor, measuring 85.6 mm × 53.98 mm) to Finland's Radiolinja operator, which launched the world's first GSM network on July 1, 1991. These inaugural SIMs featured limited storage—typically supporting up to 20 phonebook entries and five short message service (SMS) messages—while primarily serving authentication via a 128-bit Ki key and A3/A8 algorithms for challenge-response verification. The deployment validated the SIM's efficacy in enabling secure, subscriber-centric mobile service, paving the way for GSM's rapid global expansion beyond Europe.^[3]^[9]^[10]

Standardization and Global Adoption

The standardization of the Subscriber Identity Module (SIM) card originated within the Groupe Spécial Mobile (GSM) initiative, formed in 1982 by the Confédération Européenne des Postes et Télécommunications (CEPT) to develop a pan-European mobile standard, later managed by the European Telecommunications Standards Institute (ETSI) from 1989 onward. ETSI Technical Committee GSM finalized core SIM specifications as part of GSM Phase 2 in 1990, defining the SIM as a removable smart card for subscriber authentication, encryption key storage, and network access in digital cellular systems operating at 900 MHz. These specifications, detailed in ETSI GSM 11.11, mandated a contact-based interface compliant with ISO/IEC 7816 standards for smart cards, ensuring interoperability across GSM networks.^[6]^[11] Initial global adoption accelerated with the launch of the first GSM network by Radiolinja in Finland on July 1, 1991, utilizing the inaugural commercial SIM cards produced by Giesecke+Devrient earlier that year. By 1993, GSM had expanded to 12 European countries, with SIM cards enabling seamless international roaming through standardized International Mobile Subscriber Identity (IMSI) and authentication processes. The GSM Association, founded in 1995, promoted worldwide deployment, leading to over 200 million subscribers by 1999 and facilitating adoption in Asia, Africa, and the Americas; by 2000, GSM accounted for approximately 70% of global mobile connections, supplanting analog systems like AMPS and TACS. SIM cards' tamper-resistant design and over-the-air provisioning capabilities were causal factors in this dominance, as they mitigated fraud prevalent in prior generations, with reported cloning incidents dropping significantly post-adoption.^[8]^[12] As mobile networks evolved, responsibility for SIM-related specifications shifted to the 3rd Generation Partnership Project (3GPP), established in 1998 to harmonize global standards beyond GSM. 3GPP Release 99 (2000) introduced the Universal Integrated Circuit Card (UICC) framework, extending SIM functionality to Universal Subscriber Identity Module (USIM) for UMTS 3G networks while maintaining backward compatibility with GSM SIMs. Subsequent releases refined SIM capabilities, including enhanced file structures in TS 31.102 and security protocols in TS 33.102, supporting higher data rates and multimedia services. Form factor standardization progressed under ETSI and 3GPP auspices: the mini-SIM (2FF) became standard in 1996, followed by micro-SIM (3FF) in 2010 via ETSI TS 102 221, and nano-SIM (4FF) in 2012, reducing size by 40% to accommodate slimmer devices without altering electrical interfaces. This iterative standardization ensured sustained global interoperability, with over 8 billion active SIM-equipped connections by 2020, predominantly in 4G LTE ecosystems per 3GPP specifications.^[13]^[14]

Procurement and Manufacturing Evolution

The manufacturing of Subscriber Identity Module (SIM) cards commenced in 1991, when Giesecke+Devrient (G+D) in Munich, Germany, produced the world's first commercial batch of 300 units for the Finnish operator Radiolinja, marking the transition from conceptual smart card technology to mass production for GSM networks.^[8] Early production involved embedding integrated circuit (IC) chips—typically with 4 KB of memory—into plastic carriers using lamination and contact pad assembly techniques derived from payment card manufacturing, with personalization of subscriber data occurring post-fabrication at operator facilities or vendor sites.^[8] Initial procurement by telecom operators relied on direct contracts with European smart card specialists like G+D, focusing on compliance with ETSI standards for security and interoperability, as global GSM rollout demanded scalable supply chains amid limited initial volumes.^[8] As mobile subscriptions surged from millions in the mid-1990s to billions by the 2010s, manufacturing evolved toward higher volumes and cost efficiencies, with annual production reaching billions of units by specialized firms including Thales (1.96 billion smart cards in 2023, encompassing SIMs), IDEMIA, and G+D (1.53 billion).^[15] This scaling incorporated advanced semiconductor processes for chips sourced from suppliers like STMicroelectronics, alongside automated personalization bureaus that encoded IMSI and authentication keys before distribution, reducing lead times for operators.^[16] Procurement processes formalized into strategic sourcing models, where operators outsourced logistics and bulk ordering to vendors, prioritizing encryption standards like DES/3DES/AES and regional compliance, with Asia-Pacific emerging as a production hub by the 2000s due to lower labor costs and proximity to high-consumption markets accounting for 40% of global SIM demand.^[17]^[18] The introduction of form factor reductions—from full-size (1FF) in 1991 to mini (2FF, 1996), micro (3FF, 2010), and nano (4FF, 2012)—preserved core manufacturing steps like chip embedding but optimized material use and automated cutting for thinner profiles, enabling sleeker devices without altering procurement fundamentals.^[19] By the 2010s, the global SIM market valued at $4.7 billion in 2022 reflected matured supply chains dominated by five top providers holding 52% share, though physical production faced pressures from embedded SIM (eSIM) standardization in 2016, which integrates profiles directly into device chips during OEM assembly, bypassing separate card fabrication and slashing logistics for operators via remote provisioning (RSP).^[20]^[21] eSIM adoption has driven a gradual decline in physical SIM volumes, with lifecycle analyses showing 46% lower CO2 emissions (123 g vs. 229 g per unit) due to eliminated plastic and shipping, prompting procurement shifts toward digital profile outsourcing and hybrid models.^[22] Emerging integrated SIM (iSIM) technology, embedding functionality into processors, further diminishes discrete manufacturing needs, projecting sustained market growth to $8.3 billion by 2032 amid IoT-driven demand despite physical form factor contraction.^[20]^[19]

Technical Design

Physical Form Factors

The Subscriber Identity Module (SIM) card has evolved through several physical form factors to accommodate shrinking device sizes while maintaining compatibility with ISO/IEC 7816 smart card standards. The initial full-size SIM, designated as the first form factor (1FF), adheres to the ID-1 format with dimensions of 85.6 mm × 53.98 mm × 0.76 mm, matching the size of a credit card, and was deployed in early GSM networks starting in 1991.^[23]^[10] This larger format facilitated easier handling and integration into initial mobile handsets but became impractical as devices miniaturized. Subsequent miniaturization led to the mini-SIM, or second form factor (2FF), measuring 25 mm × 15 mm × 0.76 mm, introduced in 1996 to fit compact mobile phones.^[24] The ID-000 size under ISO/IEC 7810:2003 enabled broader adoption in second-generation handsets. Further reduction produced the micro-SIM (3FF) at 15 mm × 12 mm × 0.76 mm, popularized in 2010 with devices like the iPhone 4, balancing space constraints in smartphones with mechanical durability.^[25] The nano-SIM (4FF), the smallest removable form factor, spans 12.3 mm × 8.8 mm × 0.67 mm and was standardized in 2012 by ETSI and 3GPP to support slimmer phone designs, representing a 40% size reduction from the micro-SIM.^[26] These dimensions are defined in ETSI TS 102 221, ensuring electrical contacts align across form factors for adapter-based compatibility.^[27] For non-removable applications, the embedded SIM (eSIM or MFF2) integrates a much smaller chip, typically 5 mm × 6 mm, directly onto device motherboards, as specified for machine-to-machine communications.^[28] All form factors retain eight electrical contacts in the same relative positions per ISO/IEC 7816-2, with gold-plated surfaces for corrosion resistance and reliable connectivity.^[29] Thickness variations, particularly the thinner nano-SIM, address tray mechanisms in ultra-thin devices without compromising functionality. Manufacturers often produce multi-cut SIMs that can be trimmed from nano to larger sizes for versatility.^[30]

Hardware Components and Architecture

The hardware architecture of a SIM card revolves around an integrated circuit (IC) module embedded within a plastic substrate, designed for durability and electrical connectivity. The IC, typically a CMOS-based secure microcontroller, comprises a central processing unit (CPU), various memory components, and interface circuitry compliant with ISO/IEC 7816 standards for smart cards. The CPU, often an 8-bit processor operating at clock speeds of 5-25 MHz, executes firmware for managing subscriber authentication, data storage, and security protocols.^[31]^[32] Memory subsystems include read-only memory (ROM) for immutable operating system code and boot routines, random access memory (RAM) for temporary processing (typically 1-8 KB), and electrically erasable programmable read-only memory (EEPROM) or flash for persistent storage of files, keys, and applications (ranging from 16 KB in early GSM SIMs to 256 KB or more in contemporary UICCs).^[31]^[33] The EEPROM enables rewritable data retention without power, essential for storing IMSI, authentication keys, and short messages, while ROM ensures tamper-resistant execution of core functions.^[31] The IC module's packaging involves die attachment to a lead frame or flexible substrate, wire bonding or flip-chip interconnects for internal signals, and epoxy encapsulation for protection against physical and environmental threats, with gold-plated contacts exposed on the surface. These contacts—eight in total—facilitate half-duplex serial communication: C1 and C5 for power supply (1.8-5 V), C2 for reset, C3 for clock input, C7 for input/output data, and auxiliary pins like C4, C6, and C8 for optional features such as ground references or auxiliary I/O in advanced configurations.^[34] The design prioritizes low power consumption and resistance to fault injection attacks, with hardware-enforced isolation between processing and memory to safeguard sensitive operations.^[31] Dedicated hardware for security includes cryptographic coprocessors supporting algorithms like A3/A8 for GSM and AES-based mechanisms in later generations, alongside true random number generators for key derivation. Chips must meet reliability standards such as MIL-STD-883 for environmental stress screening, ensuring operation across temperature ranges of -40°C to +85°C and resistance to electrostatic discharge up to 2 kV.^[31] This architecture enables the SIM to function as an autonomous tamper-resistant token, interfacing solely via the defined electrical protocol without wireless elements in traditional removable cards.^[34]

Data and Functionality

Identification and Subscriber Data

The International Mobile Subscriber Identity (IMSI) serves as the primary unique identifier for a mobile network subscriber on a SIM card, enabling the network to recognize and authenticate the user.^[35] It is stored in the SIM's elementary file (EFIMSI) under identifier '6F07' as a variable-length record, typically comprising up to 15 decimal digits encoded in a packed format.^[35] The IMSI structure consists of three components: the Mobile Country Code (MCC, 3 digits identifying the country), the Mobile Network Code (MNC, 2-3 digits specifying the operator within the country), and the Mobile Subscriber Identification Number (MSIN, the remaining digits uniquely identifying the subscriber within the network).^[36] This hierarchical format facilitates global routing and subscriber management across GSM and subsequent networks.^[37] The Integrated Circuit Card Identifier (ICCID) provides a unique serial number for the SIM card itself, distinguishing it from the subscriber's identity and used for card lifecycle management, such as issuance and tracking.^[38] It follows the ISO/IEC 7812 standard, consisting of 19 to 20 digits: a major industry identifier (89 for telecommunications), country code, issuer identifier, account identifier, and a check digit for validation.^[38] Unlike the IMSI, which ties to the user profile and can change with number portability or multi-IMSI configurations, the ICCID remains fixed to the physical or embedded card throughout its operational life.^[38] Both identifiers are provisioned by the mobile network operator during SIM personalization and are readable by the device for initial network attachment.^[39] Additional subscriber-related data on the SIM may include the last used or preferred network codes (e.g., in EFLOCI for location information), but core identification relies on IMSI and ICCID to link the card to the subscriber's profile in the operator's Home Location Register (HLR) or equivalent database.^[35] These elements ensure privacy through temporary identifiers like the Temporary Mobile Subscriber Identity (TMSI), which the network assigns post-IMSI exchange to avoid broadcasting the full IMSI repeatedly.^[37] Subscriber data storage adheres to 3GPP and ETSI specifications, with IMSI access restricted to authenticated network queries to mitigate interception risks.^[40]

Authentication Keys and Processes

The authentication process for SIM cards in GSM networks employs a challenge-response mechanism using a shared 128-bit secret key known as Ki, provisioned securely in both the SIM card and the network's Authentication Center (AuC) during subscriber registration, and never transmitted over the air interface.^[41]^[42] The AuC generates a 128-bit random challenge (RAND) and computes a 32-bit signed response (SRES) via the A3 authentication algorithm, which takes RAND and Ki as inputs; it also derives a 64-bit ciphering key (Kc) using the A8 key generation algorithm.^[41]^[43] The RAND is forwarded to the mobile station (MS), where the SIM computes its own SRES' using the identical A3(RAND, Ki) and returns it to the network for verification against the AuC's precomputed SRES; a match grants access, enabling unilateral authentication of the MS by the network, while Kc initializes A5 encryption for subsequent communications.^[42]^[43] A common proprietary implementation of A3/A8 is COMP128 (or variants like COMP128-1), which processes the 128-bit RAND concatenated with Ki to produce a 128-bit output, from which the first 32 bits form SRES and the subsequent 54 bits (with 10 bits discarded or used for parity) yield Kc; however, cryptanalytic attacks since 1998 have demonstrated that COMP128-1 allows extraction of Ki from as few as two authentication challenges, compromising long-term secrecy in affected networks.^[41]^[44] These vulnerabilities stem from COMP128's one-way hash compression reducing effective key entropy, prompting some operators to adopt strengthened variants like COMP128-2 or -3, which resist full Ki recovery but may still leak partial information.^[41] In UMTS networks, the SIM evolves into a USIM implementing the Authentication and Key Agreement (AKA) protocol per 3GPP TS 33.102, replacing GSM's unilateral scheme with mutual authentication using a 128-bit long-term secret key K shared between the USIM and Home Environment (HE).^[45]^[46] The HE generates RAND and an authentication token (AUTN) incorporating a message authentication code (MAC) computed via the f1 integrity algorithm (using K, RAND, and sequence number SQN); the Serving Network sends both to the USIM, which verifies AUTN's MAC and freshness via f1 to authenticate the network, then computes a response (RES) using the f2 algorithm and derives 128-bit ciphering key (CK) and integrity key (IK) via f3, f4, and f5 algorithms, forwarding RES for network verification against expected XRES.^[45]^[46] This process ensures bidirectional trust and session key freshness, with keys confined to the USIM and network endpoints, mitigating eavesdropping risks inherent in GSM's weaker design.^[45] Subsequent generations like LTE extend AKA into EPS-AKA, retaining core principles but incorporating elliptic curve-based enhancements for key derivation in 5G (5G-AKA), where the root key K is used with f* operator-specific algorithms to generate longer keys resistant to quantum threats, though backward compatibility preserves Ki/K usage in legacy SIMs.^[45] Key storage in SIMs employs tamper-resistant hardware, with personalization involving encrypted delivery from manufacturers to operators, ensuring Ki or K integrity against physical extraction attempts.^[47]^[45]

Stored User Data and Applications

SIM cards maintain user data in a structured file system of elementary files (EFs), separate from core subscriber identification and authentication elements. The primary phone book storage occurs in the EF_ADN (identifier 6F3A), which records abbreviated dialing numbers comprising alpha identifiers for names and associated dialed numbers in BCD format, with optional capability for multiple numbers per entry through linkages to files like EF_EXT1 for extensions or EF_ANR for additional numbers.^[48] This file resides under the DF_PHONEBOOK (5F3A) or DF_TELECOM, enabling device-independent contact portability, though modern devices often prioritize internal storage for expanded fields like images or groups.^[48] Capacity depends on SIM memory allocation and implementation, typically accommodating 100 to 250 entries, limited by record size (up to 250 bytes per entry including extensions).^[49] Short Message Service (SMS) storage utilizes the EF_SMS (identifier 6F3C) under DF_TELECOM, preserving incoming messages as binary Protocol Data Units (PDUs) with timestamps and status flags, independent of handset deletion.^[48] Each record spans 176 bytes (including 140-byte payload plus headers), supporting 10 to 30 messages based on card capacity, with overflow or deletion handled via linear fixed record structure.^[48] Related files like EF_SMSP (6F42) store service parameters such as validity periods and protocol identifiers, while EF_SMSR (6F47) logs delivery status reports.^[48] Additional user-configurable data includes fixed dialing numbers in EF_FDN to enforce whitelists for security and service dialing numbers in EF_SDN for operator-provided shortcuts.^[48] Beyond static data, SIM cards execute applications via embedded microprocessors, primarily through the SIM Application Toolkit (SAT) for GSM-era cards and its evolution, the USIM Application Toolkit (USAT), integrated into the USIM application on UICC platforms.^[50]^[48] SAT/USAT employs a command-response protocol where the SIM issues proactive commands (e.g., DISPLAY TEXT, GET INKEY) to the mobile equipment in response to network events, user actions, or timers, enabling dynamic services without full device software updates.^[50] USAT extends this with envelope commands for data download, multimedia presentation, and IP connectivity via files like EF_IPS (6FF1) for server addresses and EF_IPD (6FF2) for bearer data.^[48] Operators deploy these for proprietary menus, such as account balance checks or configuration prompts, activated via the USIM Service Table (EF_UST, 6F38) which flags supported capabilities.^[48] Advanced USIM variants support further applets under dedicated directories like DF_MexE for executable environments or DF_V2X for vehicle-to-everything policies, though execution remains constrained by the SIM's limited processing power (typically 8-32 KB RAM).^[48]

Security Features

Core Protocols and Encryption

The core security protocol for SIM cards in GSM networks is the Authentication and Key Agreement (AKA) procedure, a challenge-response mechanism that verifies the subscriber's identity using a pre-shared secret key (Ki, 128 bits) stored securely on the SIM and in the network's Authentication Center (AuC).^[42] The network generates a 128-bit random challenge (RAND) and sends it to the mobile station, which forwards it to the SIM; the SIM then applies the A3 authentication algorithm to RAND and Ki, producing a 32-bit signed response (SRES) returned to the network for comparison against its own computation.^[51] Concurrently, the SIM executes the A8 key generation algorithm on the same inputs to derive a 64-bit cipher key (Kc), enabling subsequent air-interface encryption without transmitting sensitive data over the link.^[42]^[52] In practice, A3 and A8 are often implemented as a single COMP128 hash function on early SIMs, processing 128-bit inputs to output SRES and the truncated Kc, though this has been criticized for potential weaknesses in key derivation due to hash collisions exploitable in lab settings.^[41] The derived Kc feeds into stream ciphers like A5/1 (a 64-bit key-based linear feedback shift register design) or weaker variants (A5/2, export-restricted), applied between the mobile equipment and base transceiver station to encrypt voice and signaling data, with the base station using its own A8 computation for symmetric decryption.^[42] This protocol ensures unidirectional network authentication of the SIM, lacking mutual verification in basic GSM, which exposes it to false base station risks, though it provides forward secrecy for session keys.^[53] Evolutionary standards in UMTS (3G) extend this via UMTS AKA in 3GPP TS 33.102, where the SIM (as part of UICC) uses operator-configurable algorithms like MILENAGE (AES-based) or TUAK (for diversity) to generate longer 128-bit cipher (CK) and integrity (IK) keys from RAND and a sequence number (SQN) for replay protection, supporting stronger encryption like UEA1 (Kasumi-based) and integrity via UIA1.^[45]^[54] These keys enable end-to-end confidentiality and data integrity over the radio bearer, with the SIM verifying network authenticity via AUTN (authentication token including SQN, MAC, and AK) to mitigate impersonation.^[45] For LTE/5G, EPS-AKA and 5G-AKA build on this, incorporating home network control and elliptic curve-based enhancements, but retain SIM computation of root keys for backward compatibility.^[53] The SIM-ME interface employs T=0 or T=1 protocols per ISO/IEC 7816-3 for secure APDU exchanges during these computations, ensuring commands like RUN GSM ALGORITHM are executed tamper-resistantly.^[55] Over-the-air (OTA) management of SIM data uses GSM 03.48 (now TS 101 181) for securing SIM Toolkit commands via symmetric encryption (e.g., 3DES with derived keys) and integrity protection (MACs), allowing remote provisioning without physical access while binding packets to prevent replay or modification.^[56] These mechanisms prioritize hardware-enforced secrecy of Ki and algorithms, with SIMs certified to EAL4+ or higher under Common Criteria, though proprietary implementations vary in resistance to side-channel attacks like differential power analysis.^[42]^[57]

Authentication and Integrity Mechanisms

The SIM card facilitates subscriber authentication to the cellular network through challenge-response protocols that leverage a pre-shared secret key, Ki, stored securely within the card's tamper-resistant hardware. This key, a 128-bit value generated during SIM provisioning and unknown to the subscriber, is paired with cryptographic algorithms to compute authentication responses and session keys. The process ensures that only legitimate subscribers with valid SIMs can access network services, while deriving keys for subsequent confidentiality protection.^[45] In the original GSM standard, authentication operates via the GSM AKA procedure, where the network's Visitor Location Register (VLR) retrieves an authentication triplet (RAND, SRES, Kc) from the Home Location Register (HLR) or AuC. The 128-bit random number RAND is sent to the SIM, which applies the A3 algorithm to produce a 32-bit signed response SRES and the A8 algorithm to derive the 64-bit ciphering key Kc. The network compares the SIM-returned SRES against its stored value; a match enables ciphering with the A5 stream cipher but provides only unidirectional authentication, lacking network-to-subscriber verification or signaling integrity checks.^[45]^[58] Evolving to UMTS with the USIM application on the Universal Integrated Circuit Card (UICC), the UMTS AKA protocol introduces mutual authentication and integrity mechanisms. The network issues an authentication vector including a 128-bit RAND, a 128-bit expected response XRES, cipher/integrity keys CK/IK, and an authentication token AUTN comprising a sequence number SQN, authentication management field AMF, and message authentication code MAC. The USIM verifies AUTN using the operator-specific key OPc (derived from a 128-bit or 256-bit OP) and functions f1* through f5* (standardized as MILENAGE in 3GPP TS 35.205), ensuring freshness via SQN synchronization and rejecting replays or false base stations. Successful verification yields a 128-bit response RES (for network comparison), alongside CK for confidentiality and IK for integrity protection of signaling messages via the UIA algorithm family.^[45]^[59] Subsequent advancements in LTE (EPS-AKA) and 5G (5G-AKA) retain the SIM/USIM's core role in key derivation, incorporating enhanced null-encryption options and home network control over integrity algorithms like NEA0/1/2/3 for confidentiality and NIA0/1/2/3 for NAS-layer integrity, mitigating man-in-the-middle risks through stronger key separation and optional SUCI encryption for IMSI privacy. Integrity mechanisms specifically employ IK or derived keys to compute message authentication codes on RRC and NAS messages, detecting tampering during transmission, with the SIM's computations occurring offline to preserve key secrecy. These protocols, defined in 3GPP Release 8 onward, address GSM's vulnerabilities by enforcing bidirectional verification and replay protection, though implementation flaws in proprietary algorithms like COMP128 have historically enabled cloning attacks.^[45]^[53]^[59]

Security Vulnerabilities and Attacks

Physical and Cloning Exploits

Physical exploits against SIM cards typically require direct access to the card, enabling attackers to interface with the embedded microcontroller using specialized readers or oscilloscopes. These attacks often target the card's hardware to extract sensitive data such as the International Mobile Subscriber Identity (IMSI) and the individual subscriber authentication key (Ki), which are essential for network authentication. Without physical protections like secure elements or tamper-resistant packaging, attackers can repeatedly query the card offline, bypassing network-imposed rate limits.^[60] A prominent example involves side-channel attacks on the COMP128-1 algorithm used in early GSM SIM cards for A3/A8 authentication functions. In 1998, researchers demonstrated that COMP128-1's design flaw—a "narrow pipe" vulnerability—allows recovery of the 128-bit Ki after approximately 150,000 offline challenge-response queries, as the algorithm's internal state leaks information through truncated outputs. This enables full cloning by programming the extracted IMSI and Ki onto a programmable SIM card, allowing duplicate authentication to the network. Commercial cloning kits exploiting this have been available online for legacy cards.^[61]^[60] Advanced physical attacks extend to 3G and 4G SIMs (USIMs) using techniques like differential power analysis (DPA) or electromagnetic analysis with an oscilloscope connected to the card's contacts during operations. A 2015 demonstration showed that even with stronger algorithms like Milenage, insufficient countermeasures against physical probes allow key extraction in hours using consumer-grade equipment, highlighting the need for hardware-level protections such as active shielding or epoxy potting. These exploits underscore that cryptographic strength alone is inadequate without robust physical security, as attackers with card possession can perform unlimited trials.^[60]^[62] Cloning remains feasible for older or poorly implemented SIMs, but modern cards mitigate risks through updated algorithms (e.g., COMP128-3, Milenage) and hardware enhancements like secure memory partitioning. However, physical access still poses a threat in scenarios involving device theft or supply chain compromises, where attackers can decapsulate chips for invasive reverse engineering. Operators have responded by phasing out vulnerable cards, though billions of legacy SIMs persist globally.^[63]^[64]

SIM Swapping and Operator Compromises

SIM swapping, also known as SIM hijacking, involves fraudsters exploiting weaknesses in mobile network operators' customer verification processes to transfer a victim's phone number to a SIM card under the attacker's control. Attackers typically gather personal information through data breaches, phishing, or public sources to impersonate the victim during contact with carrier support, requesting a number port to a new SIM; in some cases, they bribe or collude with carrier employees to bypass checks. This deactivates the victim's legitimate SIM, redirecting calls and SMS—including two-factor authentication codes—to the attacker, enabling unauthorized access to linked financial, email, or cryptocurrency accounts.^[65]^[66]^[67] Prevalence has surged due to lax operator safeguards, with the FBI investigating 1,075 SIM swap incidents in 2023 resulting in approximately $50 million in losses. In the UK, reported cases increased 1,055% in 2024, from 289 to nearly 3,000 incidents. High-profile examples include the August 30, 2019, hijacking of Twitter CEO Jack Dorsey's account by the "Chuckling Squad" hacking group, who used a SIM swap to post inflammatory content before regaining control. In January 2018, investor Michael Terpin lost $24 million in cryptocurrency after an AT&T SIM swap facilitated by an insider; he sued the carrier for $224 million, with the Ninth Circuit Court of Appeals reviving key claims under the Federal Communications Act in September 2024. Such attacks have also enabled multimillion-dollar thefts, including a November 2022 SIM swap leading to over $400 million stolen, resulting in charges against three individuals in 2025.^[68]^[69]^[70] Operator compromises extend beyond social engineering to include direct breaches of telecom infrastructure, enabling bulk unauthorized SIM activations or data manipulation. In April 2025, South Korea's SK Telecom suffered a breach exposing customer data, potentially aiding SIM-related fraud by revealing verification details. SIM farms—networks of activated SIMs used for fraud or surveillance—represent another vulnerability; U.S. Secret Service operations in September 2025 disrupted such setups in New York City involving over 100,000 SIM cards across multiple sites, linked to foreign actors evading detection for espionage or mass attacks. Insider threats compound these risks, as seen in SIM swapping cases where carrier employees facilitated ports for bribes, highlighting systemic failures in access controls and monitoring. SIMbox fraud, involving hidden banks of SIMs to reroute international calls and bypass billing, further erodes operator security by enabling unmonitored interception of communications.^[71]^[72]^[73]

Remote and Protocol-Based Attacks

Remote and protocol-based attacks on SIM cards exploit vulnerabilities in the over-the-air (OTA) communication channels and authentication protocols, such as SMS delivery or signaling exchanges, without requiring physical possession of the card. These attacks leverage flaws in the SIM's firmware, toolkit applications, or cryptographic implementations to execute unauthorized commands, extract sensitive data like location information, or compromise authentication keys remotely. Unlike physical exploits, they rely on network-accessible interfaces, often targeting legacy GSM or UMTS protocols where mutual authentication is absent or weakly enforced, allowing adversaries to impersonate legitimate network elements or inject malicious payloads via standard messaging.^[74]^[75] A prominent example is the Simjacker vulnerability, disclosed in September 2019 by AdaptiveMobile Security (now part of Enea), which affects SIM cards equipped with the S@T SIM Toolkit browser or similar applications supporting interactive SMS commands. Attackers send a specially crafted binary SMS—undetectable as such by the user—that instructs the SIM to query its current cell ID and transmit it back to the attacker's server, enabling precise location tracking with an accuracy of 10-100 meters in urban areas. This exploit was actively used by a surveillance firm operating in at least 29 countries, potentially impacting up to 1 billion devices with vulnerable SIMs from various manufacturers, as the flaw stems from unpatched SIM firmware lacking input validation on toolkit commands. The attack succeeds silently because the SIM executes the payload independently of the handset OS, bypassing device-level security; variants have included commands for device info retrieval or further payload delivery.^[74]^[76]^[77] Earlier protocol weaknesses, such as those identified in 2013 by Security Research Lab, exposed certain SIM cards to remote reprogramming via OTA channels using the Data Download via SMS-Point-to-Point mechanism under GSM 03.48. These SIMs employed a flawed pseudorandom number generator (PRNG) for session keys in the COMP128 authentication algorithm, generating predictable keys that allowed decryption of OTA messages with minimal computational effort—approximately 95% success rate against affected cards from a specific manufacturer supplying over 500 million units. Attackers could then inject malware or extract the secret Ki authentication key, enabling full SIM cloning. While carriers mitigated this through OTA patches where possible, many legacy SIMs remain unupdatable due to hardware constraints, highlighting persistent risks in deployed infrastructure. In contrast, modern remote SIM provisioning protocols like GSMA's RSP for eUICCs have undergone formal verification showing resilience against similar network adversaries when implemented correctly, though they inherit risks if endpoint SIM crypto is compromised.^[78]^[79]

Evolutionary Variants

USIM and UICC Advancements

The Universal Subscriber Identity Module (USIM) was standardized in 3GPP Release 99, finalized in 2000, as an application on the Universal Integrated Circuit Card (UICC) to support UMTS networks, offering enhanced security over the GSM SIM through mutual authentication and 128-bit cipher and integrity keys derived via the f8 and f9 algorithms, respectively, compared to the SIM's one-way authentication and 64-bit A5 encryption.^[80] The USIM's file structure, defined in 3GPP TS 31.102, includes dedicated files for UMTS-specific parameters like the Home Environment IMSI and authentication vectors, enabling support for higher data rates and integrity-protected signaling absent in 2G SIMs. This shift addressed GSM's vulnerabilities, such as COMP128's predictable Ki derivation, by introducing stronger key generation compliant with 3GPP's MILENAGE algorithm.^[81] The UICC, specified in 3GPP TS 31.101 for physical and logical terminal interfaces, evolved from the UMTS IC card concept in ETSI standards to a multi-application platform by Release 5 (2002), supporting not only USIM but also ISIM for IMS services and CSIM for CDMA compatibility, with a shared file system under the Master File (MF) and Application Dedicated Files (ADF).^[82] Advancements through Release 8 (2008-2009) included extensions for LTE, adding E-UTRAN parameters to USIM elementary files and increasing voltage options to 1.8V/3V/5V for broader device compatibility, while TS 31.101 updates raised maximum clock frequencies to 5 MHz and supported half-duplex transmission modes for efficiency.^[83] By Release 17 (2022), UICC specifications incorporated Java Card 3.0.5 APIs for secure applet execution, enabling dynamic service provisioning via over-the-air (OTA) updates through BIP (Bearer Independent Protocol) and CAT-TP, with enhanced error handling and power management for low-power IoT integration.^[82] Security-focused advancements in USIM/UICC include the adoption of elliptic curve cryptography (ECC) options in Release 9 (2010) for key agreement, reducing computational load versus RSA, and integrity checks on USIM applets to prevent tampering, as mandated in TS 31.111 for test procedures.^[84] These developments maintained backward compatibility—USIM cards emulate SIM behavior via the 2G ADF—while scaling storage to gigabytes in modern UICCs, supporting encrypted user data files up to 256 KB per elementary file and multi-profile configurations for global roaming.^[1] Empirical testing in 3GPP conformance suites confirms USIM's resilience to replay attacks through sequence counters and fresh RAND challenges, though implementations must adhere strictly to specs to avoid operator-specific flaws observed in early deployments.^[85]

Embedded SIM (eSIM)

The embedded SIM (eSIM), also known as eUICC, integrates the functionality of a traditional Universal Integrated Circuit Card (UICC) directly into a device's hardware as a non-removable chip, enabling remote provisioning and management of subscriber profiles without physical card insertion. Defined by GSMA specifications, eSIM allows devices to download and switch cellular network operator profiles over-the-air, supporting multiple profiles stored simultaneously for seamless transitions between carriers. This evolution addresses limitations of removable SIMs by embedding secure elements compliant with standards like SGP.22 for consumer applications, which detail protocols for profile installation, enabling, and deletion via entities such as the Subscription Manager Data Preparation (SM-DP+) server.^[86] GSMA initiated eSIM standardization in the early 2010s to prevent market fragmentation, with initial specifications emerging around 2016; the first commercial deployments occurred in machine-to-machine (M2M) markets in 2012, followed by consumer devices such as the Apple Watch Series 3 in 2017 and smartphones like the Google Pixel 2 and iPhone XS in 2017-2018. For IoT, dedicated specs like SGP.32 (version 1.2, June 2024) provide tailored technical requirements for remote management in low-power, high-volume deployments. eSIM maintains equivalent security to physical SIMs through embedded secure elements that handle authentication and encryption, but relies on operator infrastructure for profile delivery, which has driven ecosystem development including certification programs for interoperability.^[87]^[88] Key advantages include space efficiency for compact devices like wearables and IoT sensors, simplified user experience for carrier switching without hardware swaps, and enhanced dual-SIM capabilities by storing multiple profiles. However, eSIM adoption requires compatible device hardware and carrier support for provisioning platforms, with challenges such as profile transfer difficulties between devices and potential vendor lock-in if operators restrict profile switching. By 2025, eSIM shipments in smartphones and IoT devices exceed hundreds of millions annually, with projections estimating 75% of smartphones eSIM-enabled by 2030, accelerating due to regulatory pushes for consumer choice and 5G integration.^[89]

Integrated SIM (iSIM) and IoT Variants

The Integrated SIM (iSIM), also known as the integrated Universal Integrated Circuit Card (iUICC), embeds SIM functionality directly into a device's system-on-chip (SoC), typically as a secure enclave housing the SIM operating system and mobile network operator (MNO) profile.^[90] ^[91] This architecture eliminates the need for discrete SIM hardware, allowing the device to authenticate with cellular networks using integrated processing resources for encryption and profile management.^[92] Standardization efforts by the GSMA, building on embedded Universal Integrated Circuit Card (eUICC) foundations, advanced through a proof-of-concept phase following the ieUICC initiative launched in 2015, with full specifications enabling remote provisioning similar to eSIM but without separate chip soldering.^[93] ^[94] In contrast to eSIMs, which require a dedicated reprogrammable chip mounted on the printed circuit board (PCB), iSIMs fuse connectivity logic into the primary processor, reducing bill-of-materials costs by up to 20-30% in low-complexity designs and minimizing PCB real estate by avoiding additional components.^[93] ^[95] Power efficiency improves due to shared resources, with iSIMs drawing less standby current—critical for battery-constrained applications—while maintaining compatibility with 3GPP-defined authentication protocols like those in Release 17 for 5G IoT.^[96] ^[97] Security enhancements include tamper-resistant integration, as the SIM enclave leverages the SoC's hardware root of trust, reducing attack surfaces compared to exposed eSIM chips vulnerable to physical extraction.^[92] However, iSIM deployment demands early-stage SoC customization, limiting flexibility for aftermarket profile switches without firmware updates.^[98] For IoT variants, iSIM optimizes resource-limited devices such as sensors, asset trackers, and wearables, where form factors under 1 mm² and power budgets below 1 mW are essential.^[99] Advantages include simplified supply chain logistics, as manufacturers avoid SIM inventory and pre-provisioning, enabling just-in-time MNO profile downloads during activation.^[100] In 2025, adoption accelerated with partnerships like Quectel, Giesecke+Devrient, and Vodafone IoT demonstrating iSIM in production modules supporting multi-network roaming and 5G RedCap standards, projecting deployment in over 10% of new low-power wide-area network (LPWAN) devices by 2026.^[101] These variants prioritize durability in harsh environments, with integrated error correction and over-the-air updates, though challenges persist in interoperability testing across SoC vendors and regulatory certification for global markets.^[102] GSMA reports indicate iSIM's edge in total cost of ownership for deployments exceeding 1 million units, driven by reduced failure rates from fewer solder joints.^[96]

Usage in Networks and Devices

Integration with Cellular Standards

The Subscriber Identity Module (SIM) was initially integrated into the Global System for Mobile Communications (GSM) standard, defined by the European Telecommunications Standards Institute (ETSI) in the early 1990s, where it served as a removable smart card storing the International Mobile Subscriber Identity (IMSI) and performing challenge-response authentication using the A3 and A8 algorithms to generate session keys for air-interface encryption and integrity. This integration enabled network operators to authenticate users and provision services without embedding credentials in the mobile equipment (ME), with the SIM-ME interface specified via ISO/IEC 7816-compliant Application Protocol Data Units (APDUs).^[103] With the transition to Universal Mobile Telecommunications System (UMTS) under 3GPP Release 99 in 2000, the SIM evolved into the Universal SIM (USIM) application hosted on the Universal Integrated Circuit Card (UICC) platform, enhancing authentication through the Authentication and Key Agreement (AKA) protocol with stronger cryptographic primitives like the MILENAGE algorithm family for mutual authentication, integrity protection, and key derivation compliant with 3GPP TS 33.102. The UICC maintained backward compatibility with GSM SIM via multi-application support, allowing dual-mode devices to fallback to 2G while leveraging USIM for 3G-specific features such as higher-bandwidth packet data and IMSI privacy via temporary identifiers.^[104] In Long-Term Evolution (LTE) networks under 3GPP Releases 8-10 (circa 2008-2011), the USIM on UICC remained the core integration point, supporting evolved packet system (EPS) AKA for Evolved Packet Core (EPC) attachment, with extensions for IP Multimedia Subsystem (IMS) via the IP Multimedia Services Identity Module (ISIM) application on the same card to handle SIP-based services and VoLTE.^[105] Physical and logical interfaces were standardized in TS 31.101 and TS 31.102, ensuring interoperability across multi-mode devices capable of handover between 2G, 3G, and 4G radio access technologies (RATs).^[83] For 5G New Radio (NR) in 3GPP Release 15 onward (2018+), integration persists via the 5G AKA protocol on USIM/UICC, incorporating enhanced key separation for network slicing and edge computing while retaining the long-term secret key (K) for primary authentication against the home network's Unified Data Management (UDM), with optional secondary authentication for non-3GPP access.^[106] This ensures seamless RAT interoperability, as mandated in TS 33.501, though legacy SIMs may limit access to basic 5G features without USIM-compliant updates. The UICC's role extends to provisioning via Remote SIM Provisioning (RSP) under GSMA SGP.22 standards, facilitating over-the-air profile management across generations without physical card swaps.

Multi-SIM Devices and Carrier Practices

Multi-SIM devices, also known as multi-universal subscriber identity module (MUSIM) user equipment, enable the simultaneous management of multiple subscriber identity modules within a single device, allowing users to maintain connections to different networks or services.^[107] These capabilities are standardized by bodies such as 3GPP and GSMA, with support extending to LTE and 5G NR networks to handle challenges like paging occasion collisions in single receive/transmit configurations.^[107] Common implementations include dual-SIM setups, where devices support either Dual SIM Dual Standby (DSDS) or Dual SIM Dual Active (DSDA) modes.^[108] In DSDS mode, both SIMs remain registered in idle state for incoming calls or messages, but only one can engage in active voice or data sessions at a time, relying on a single transceiver that switches between SIMs.^[109] DSDA, conversely, permits concurrent active connections on both SIMs, necessitating dual transceivers and consuming more power, which limits its adoption to premium devices.^[108] GSMA's TS.37 specification outlines requirements for multi-SIM devices, including multiple IMEIs for distinct network connections and baseband support for dual-SIM operations.^[110] Carrier practices regarding multi-SIM usage vary by region and operator, often influenced by device unlocking policies and network compatibility. In the United States, major carriers have historically restricted dual-SIM functionality in subsidized devices to encourage single-carrier loyalty, with some blocking high-end models from featuring full multi-SIM support.^[111] Unlocked devices are required for multi-carrier operation, and the FCC has pushed for standardized unlocking timelines, such as 60 days, to facilitate dual-SIM portability.^[111] Certain carriers limit mobile data allocation to a primary SIM slot, particularly in international variants, potentially overriding user preferences for secondary lines.^[112] Benefits of multi-SIM include enhanced flexibility for separating personal and business lines, cost-effective international roaming via local SIM insertion, and redundancy against network outages through carrier switching.^[113] However, limitations persist, such as accelerated battery drain from dual registrations, management complexity in SIM prioritization, and temporary unavailability of the standby SIM during active sessions on the primary.^[114] Multi-carrier SIM variants, leveraging roaming agreements, further enable seamless network selection but may incur higher costs without direct carrier affiliation.^[113] As of 2025, eSIM integration has expanded multi-SIM viability by allowing virtual profiles alongside physical slots, though carrier provisioning remains a bottleneck in locked ecosystems.^[115]

Recent Developments and Challenges

eSIM Adoption Trends

![Embedded SIM from M2M supplier Eseye with an adapter board for evaluation in a Mini-SIM socket][float-right] The global eSIM market, valued at approximately $1.46 billion in 2024, is projected to expand to $6.29 billion by 2032, reflecting a compound annual growth rate (CAGR) of 20%, driven primarily by increasing integration in smartphones and IoT devices.^[116] Alternative estimates place the 2024 market size at $10.32 billion, with growth to $17.67 billion by 2033 at a CAGR of 5.1%, highlighting variances in scope across consumer and enterprise segments but underscoring robust overall expansion.^[117] Smartphone eSIM connections nearly doubled from 310 million in 2023 to 598 million in 2024, with forecasts indicating that 60% of global smartphone unit sales will be eSIM-compatible by 2025.^[118] ^[119] Adoption trends show acceleration in consumer electronics, particularly following mandates like Apple's shift to eSIM-only iPhones in the US starting September 2022, which boosted domestic uptake.^[120] By 2025, an estimated 3.4 billion eSIM-enabled devices are in use globally, up from 1.2 billion in 2021, with shipments of eSIM-capable devices expected to exceed 633 million units in 2026, propelled by advancements in standards like SGP.32 and strong demand in Chinese smartphone markets.^[121] ^[122] In IoT applications, eSIM facilitates scalable connectivity for machine-to-machine communications, contributing to projections of over 9 billion eSIM/iSIM-capable devices shipped cumulatively by 2030, growing at a 22% CAGR from 2024 levels.^[123] Regionally, the United States maintains leadership in eSIM penetration, with nearly 20% of international trips from North America utilizing eSIMs as of 2025, supported by widespread carrier compatibility and regulatory pushes for digital provisioning.^[120] ^[124] Asia-Pacific exhibits the highest growth trajectory for eSIM-enabled smartphones, driven by high-volume shipments in China and expanding IoT deployments, while Europe benefits from seamless regional roaming under frameworks like the EU's connectivity directives, though adoption lags in rural areas.^[122] ^[125] North America, Europe, and Asia-Pacific collectively account for over 80% of eSIM smartphone shipments.^[126] Travel eSIM usage has surged as an alternative to traditional roaming, with revenues projected to reach $1.8 billion by the end of 2025, an 85% increase from $989 million in 2024, reflecting consumer preference for flexible, app-based activation amid rising international mobility.^[127] Challenges persist, including uneven carrier support and interoperability issues in emerging markets, but standardization efforts by bodies like GSMA are mitigating these, fostering broader enterprise and consumer uptake.^[128]

Sustainability and Market Impacts

The widespread production of physical SIM cards, with approximately 4.19 billion removable units shipped in 2023, generates substantial plastic waste from materials like PVC and embedded metals, contributing to broader e-waste challenges where global recycling rates hover at 15-20%.^[129]^[130] The transition to embedded SIM (eSIM) technology addresses these issues by obviating physical cards entirely, thereby curtailing manufacturing demands and eliminating distribution logistics that account for a portion of emissions in traditional SIM lifecycles.^[131] eSIM deployment yields measurable environmental gains, including 46% lower CO2 emissions per unit compared to physical SIMs, with production responsible for just 2% of an eSIM's total footprint and zero emissions from card transport or packaging.^[22] Independent assessments further quantify reductions in carbon intensity by up to 87%, alongside avoidance of millions of tons of annual plastic discards from SIM production scales.^[132]^[133] However, eSIMs necessitate integrated chipsets in devices, which could elevate initial resource use if not offset by extended device lifespans or modular designs.^[134] Market dynamics reflect this shift, with eSIM comprising 28% of global SIM shipments in 2024 and projected to drive further erosion of physical SIM demand through 2030.^[17] The eSIM sector, valued at $1.46 billion in 2024, is forecasted to expand to $6.29 billion by 2032 at a compound annual growth rate of 19.4%, fueled by IoT proliferation and carrier efficiencies in provisioning without physical inventory.^[135] This disrupts legacy SIM suppliers, who supplied billions of units annually but now pivot to eSIM provisioning platforms amid declining removable card volumes, while operators realize cost savings from streamlined activation and reduced waste handling.^[129]^[136]

Future Directions and Limitations

![Embedded SIM for IoT evaluation][float-right] The transition toward embedded SIM (eSIM) and integrated SIM (iSIM) technologies represents a primary future direction for SIM cards, with eSIM adoption surging 594% since 2022 and projected to become the connectivity standard by 2025, driven by remote provisioning and reduced hardware dependency.^[137] iSIM variants, integrating connectivity directly into device chips, are anticipated to grow at a 63% compound annual growth rate from 2023 to 2028, particularly suiting space-constrained IoT applications through enhanced power efficiency and security.^[138] In IoT ecosystems, eSIM facilitates improved roaming, provisioning, and authentication, though current usage stands at only 33% of cellular IoT devices, with eSIM-enabled connections expected to rise 43% amid expanding device numbers.^[139] Sustainability benefits emerge from eSIM's elimination of physical cards, minimizing materials, waste, and logistics in production and distribution.^[140] Advancements in SIM security for emerging networks include quantum-resistant upgrades, such as post-quantum cryptography (PQC) integration into 5G/6G Trusted SIMs to counter quantum computing threats to traditional asymmetric encryption, enabling hybrid algorithms for user identity protection.^[141] These developments align with 6G's demands for AI-native networks and enhanced physical layer security, though full implementation requires core network overhauls.^[142] Despite these trajectories, SIM technologies face persistent limitations in security and privacy. Physical SIM cards remain susceptible to cloning, theft, and SIM swapping attacks, where hackers exploit social engineering or carrier vulnerabilities to hijack numbers and access linked data like banking credentials.^[143] ^[144] eSIMs mitigate physical risks but introduce challenges in remote management, potentially exposing profiles to over-the-air exploits if provisioning platforms lack robust safeguards.^[145] Privacy concerns amplify with mandatory SIM registration, which collects personally identifiable information (PII) prone to breaches, unauthorized surveillance, or opaque data handling by carriers and governments.^[146] ^[147] Adoption barriers persist due to interoperability issues across carriers, device compatibility, and regulatory fragmentation, hindering seamless global deployment.^[148] Quantum threats further underscore cryptographic vulnerabilities in legacy SIM authentication, necessitating proactive PQC migration amid evolving attack vectors.^[149]

References

[1]
ETSI - Sim Card Technology - ETSI
The Universal Subscriber Identity Module (USIM) is a 3GPP application on the UICC. It interoperates with a 3GPP terminal and provides access to 3GPP services.
[2]
[PDF] ETSI TS 151 011 V4.14.0 (2005-03)
3GPP TS 51.011 version 4.14.0 Release 4. 1. Scope. The present document defines the interface between the Subscriber Identity Module (SIM) and the Mobile ...
[3]
30 years of SIM: A fascinating success story | G+D
Dec 20, 2021 · The success story began in 1991, when G+D delivered the first commercial SIM to a telecommunications company in Finland. Originally, it was just ...
[4]
[PDF] ETSI TS 131 102 V15.8.0 (2020-01)
The present document may refer to technical specifications or reports using their 3GPP identities. These shall be interpreted as being references to the ...
[5]
[PDF] USIM and IC Card Requirements - 3GPP
Jan 27, 1999 · This document defines the functional characteristics and requirements of the USIM (User Service Identity Module) and the IC card for UMTS (UICC) ...
[6]
Our history - About Us - GSMA
Groupe Speciale Mobile (GSM) is formed by the Confederation of European Posts and Telecommunications (CEPT) to design a pan-European mobile technology. 1984.
[7]
GSM History: Development Story - Electronics Notes
A description of the development story or history of GSM, Global System for Mobile communications developed out of the original Groupe Special Mobile ...
[8]
SIM card development: from its inception until now | G+D Spotlight
Nov 16, 2021 · The first commercial SIM was delivered 30 years ago. It evolved from early payment cards, with the first plug-in SIM in 1989, and now eSIMs are ...An Evolution Founded In... · An Innovative Forerunner · Where Would We Be Without...Missing: history | Show results with:history
[9]
All you ever wanted to know about the SIM card - GovTech Singapore
Jun 3, 2022 · The earliest versions of SIM cards were able to store a whopping five SMS messages and 20 contacts. Remember, this was the early 90s, where you ...
[10]
https://www.airalo.com/blog/the-history-of-the-sim-card-everything-you-need-to-know
[11]
[EPUB] The Creation of Standards for Global Mobile Communication - ETSI
The digital GSM standard was developed in Europe from 1982 onwards with the target to enable a European market with economies of scale and international ...
[12]
From Concept to Connectivity: Tracing the Path of SIM Card History
Rating 4.6 (411) · Free · TravelJul 8, 2024 · The European Telecommunications Standards Institute (ETSI) played a pivotal role in standardizing SIM cards, leading to the birth of the modern ...
[13]
Specifications by Series - 3GPP
All 3GPP specifications have a specification number consisting of 5 digits, in a seriesinspired by the pre-1998 GSM series of specification numbering.
[14]
New SIM card format for slimmer, smaller phones - ETSI
Jun 1, 2012 · ETSI has standardized a new form factor (4FF) for the SIM card, 40% smaller than the current smallest design. At its 55th meeting held on 31 May ...
[15]
Card Manufacturers in 2023— Part 2 - Nilson Report
The largest card manufacturers of chip and magstripe cards were Thales (1.96 billion), Idemia (1.61 billion) and G+D (1.53 billion).
[16]
https://www.emergenresearch.com/industry-report/subscriber-identity-module-cards-market
[17]
SIM Cards Market Size, Growth | Industry Report [2033]
The global SIM Cards Market was valued at USD 3472 billion in 2024 and is projected to reach around USD 3493 billion in 2025, further growing to USD 5567 ...Missing: volume | Show results with:volume
[18]
Why did semiconductor manufacturing shift from the US to Asia in ...
Oct 13, 2023 · The reason for the overall success in Asia was low wage costs and a great work ethic. That was followed by engineering talent getting trained in the US, then ...How to think the structural shift in manufacturing supply chains ...What are valid reasons for people switching phones and SIM cards?More results from www.quora.com
[19]
The evolution of SIM cards in 8 parts | IoT Now News & Reports
Feb 15, 2024 · From the first-generation sim through to today's cutting-edge technologies, sim cards have adapted and evolved with the telecoms industry itself.
[20]
SIM Card Market Size, Share Forecast Analysis 2032
The Global Sim Card Market was valued at $4.7 billion in 2022, and is projected to reach $8.3 billion by 2032, growing at a CAGR of 5.9% from 2023 to 2032.Missing: production | Show results with:production
[21]
SIM Cards Market Share | Growth Report, 2035
The sim cards market, valued at USD 4.49 billion in 2025, is forecasted to increase to USD 4.6 billion in 2026 and surpass USD 5.67 billion by 2035, ...
[22]
eSIM or pluggable SIM: which is the greener choice
Feb 17, 2023 · The study showed that the use of an eSIM generates 46% less CO 2 emissions than a SIM card: 123 g CO 2 versus 229 g CO 2 equivalent (eq.).
[23]
SIM Card Types and Sizes Explained - Zipit Wireless
May 8, 2023 · SIM card sizes · 1. Standard SIM (1FF). Size: 85.6mm × 53.98mm × 0.76 mm. This was the precursor to the types of SIM form factors we see today.
[24]
This is how the SIM Card has evolved over the years - Encriptados
Feb 27, 2024 · The mini SIM was introduced to the world in 1996 with a size of 25 x 15 mm. Then we came to the micro SIM which was much more manageable and did ...
[25]
the evolution of sim cards from mini to nano to esim | Prune Blog
Jul 18, 2025 · Micro SIM- The size of the SIM further shrunk to a micro level in 2010. Apple iPhone 4 was the first device to introduce support for microSIM ...
[26]
SIM card format for slimmer, smaller phones - 3GPP
Jun 1, 2012 · The fourth form factor (4FF) card will be 40% smaller than the current smallest SIM card design, at 12.3mm wide by 8.8mm high, and 0.67mm thick.Missing: dimensions | Show results with:dimensions
[27]
IoT SIM Card Business - 1NCE Developer Hub
The four SIM Card form factors are specified in ETSI TS 102 221. The exact dimension specifications of the form factors are listed in the table below.
[28]
Understanding SIM form factors: A comprehensive guide - Telnyx
Jul 19, 2024 · There are four main SIM form factors: Standard SIM (1FF), Mini-SIM (2FF), Micro-SIM (3FF), Nano-SIM (4FF), and embedded MFF2 SIM.Missing: ETSI 3GPP
[29]
A guide to SIM card form factors - Hologram.io
Aug 19, 2021 · SIM cards today come in various sizes or form factors. When the first SIM cards appeared in the 1980s, there was only one form factor: the credit-card-size 1FF.
[30]
SIM Card Types and Form Factors Explained - Telit Cinterion
Aug 11, 2023 · The 2FF SIM card form factor is best for larger devices like ATMs and vending machines. 3FF is ideal for medium-sized IoT devices like tablets.
[31]
[PDF] GSM Subscriber Identity Module (SIM) Card (16 KB) - tec@gov
The document covers briefly the role of SIM, its components, functions, physical. & electrical characteristics, electronic signals and transmission protocols, ...
[32]
Understanding SIM Cards in One Article - EEWorld
Aug 31, 2025 · In addition to the CPU , the SIM card also contains program memory (ROM) , working memory (RAM) , data memory (EEPROM) , and a serial ...Missing: processor | Show results with:processor
[33]
What Is a SIM Card and How Does It Work? - Built In
These chips contain processor and memory circuits that allow them to store up to 256 KB of digital information.Missing: GSM | Show results with:GSM
[34]
[PDF] ETSI TS 102 221 V17.4.0 (2023-02)
ETSI. ETSI TS 102 221 V17.4.0 (2023-02). 2. Release 17. Reference. RTS/SET-T102221vh40. Keywords embedded, SIM, smart card, UICC. ETSI. 650 Route des Lucioles.
[35]
[PDF] ETSI TS 131 102 V11.6.0 (2013-10)
3GPP TS 31.102 version 11.6.0 Release 11. 4.2.2 EFIMSI (IMSI). This EF contains the International Mobile Subscriber Identity (IMSI). Identifier: '6F07 ...
[36]
IMSI vs IMEI: 6 Key Differences & How They Work Together - floLIVE
Mar 18, 2025 · Its structure is divided into three parts: the mobile country code (MCC), the mobile network code (MNC), and the mobile subscriber ...
[37]
What is IMSI? Exploring Its Role in Mobile Identity and ... - P1 Security
Feb 6, 2025 · The International Mobile Subscriber Identity (IMSI) is a unique identifier assigned to every mobile subscriber in a telecom network.
[38]
SIM card ICCID numbers explained - Onomondo
IMSI identifies the SIM card user. We recommend using ICCID to identify SIMs, as it's more static. IMSI. IMSI (Multiple International Mobile Subscriber Identity) ...
[39]
What is a SIM (Subscriber Identity Module) Card? - Trenton Systems
Nov 15, 2022 · What is a SIM card? First released in 1991, a SIM (Subscriber Identity Module) card is a tiny, portable memory chip that stores user ...
[40]
[PDF] ETSI TS 131 102 V16.11.0 (2022-08)
The cross reference between 3GPP and ETSI identities can be found under http://webapp.etsi.org/key/queryform.asp.
[41]
[PDF] GSM Authentication Algorithm 'COMP128' - JUST
Aug 15, 2005 · The shared secret, called Ki, is a 128-bit key used to generate a 32- bit signed response, called SRES, to a Random Challenge, called RAND, made ...
[42]
[PDF] The GSM Standard (An Overview of its Security) - GIAC Certifications
Although GSM was initially developed as a European digital communication standard to allow users to use their cellular devices seamlessly across Europe, it ...<|separator|>
[43]
[PDF] GSM Security - AMiner
128-bit RAND is from a simple random number generator. • 32-bit SRES is the result from Authentication algorithm (A3), using RAND and KI as inputs (see the ...
[44]
[PDF] A3/A8 & COMP128 - TCS
Nov 18, 2004 · GSM Authentication. • RAND is a 128-bit random challenge issued ... • A3 Input: 128-bit RAND random challenge, Ki. 128-bit private key.
[45]
[PDF] ETSI TS 133 102 V18.0.0 (2024-04)
This specification defines 3G security procedures performed within 3G capable networks (R99+), i.e. intra-UMTS and. UMTS-GSM. As an example, UMTS authentication ...
[46]
[PDF] UMTS Authentication and Key Agreement
The AKA procedure is the essence of authenticating a user to the network and vice versa. This is possible due to the pre-shared secret key K stored in the ...
[47]
Telecoms l Sim Cards | 6point6
The hardware component of a modern-day mobile smart card is called Universal Integrated Circuit Card (UICC), whereas the applications that run on it are called ...What Are Sim Cards? · File System And Data · At Commands
[48]
[PDF] ETSI TS 131 102 V18.4.0 (2024-05)
This Technical Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP). The present document may refer to technical ...
[49]
What is stored on a SIM card? - Saily
Dec 17, 2024 · Your SIM stores data that helps your phone connect to the right network, including location details and network authorization data. The ICCID ( ...
[50]
[PDF] ETSI TS 101 267 V8.18.0 (2007-06)
Specification of the SIM Application Toolkit (SAT) for the Subscriber Identity Module -. Mobile Equipment (SIM-ME) interface. (3GPP TS 11.14 version 8.18.0 ...
[51]
[PDF] ETSI TS 143 020 V15.0.0 (2018-07)
On the MS side, Algorithm A8 is contained in the SIM, as specified in 3GPP TS 42.017. On the network side, Algorithm A8 is co-located with Algorithm A3. The two ...<|separator|>
[52]
GSM Authentication and Encryption. - ResearchGate
The first algorithm is A3 that is used for the challenge-response mechanism in order to authenticate the user. The second algorithm is A8 that is used to ...
[53]
Authentication and key agreement cheat sheets for 2G, 3G, 4G and 5G
Sep 6, 2021 · From 2G to 5G, there are eight main versions of Authentication and Key Agreement (AKA) protocol, details of which are embedded deep in ...
[54]
[PDF] ETSI TS 133 102 V6.3.0 (2004-12)
authentication of a SIM to a serving network domain and to generate the key Kc ... 3GPP TS 33.102 version 6.3.0 Release 6 authentication and key agreement.
[55]
[PDF] ETSI TS 101 413 V7.1.0 (1999-07)
[4]. GSM 03.48: "Digital cellular telecommunications system (Phase 2+); Security Mechanisms for the. SIM application toolkit; Stage 2". [5]. ISO/IEC 7816-3 ...
[56]
[PDF] ETSI TS 101 181 V8.3.0 (2000-08)
The present document defines the stage 2 description for the standardised security mechanisms in conjunction with the. SIM Application Toolkit for the interface ...
[57]
[PDF] A Strong User Authentication Protocol for GSM
For authentication, GSM relies on a symmetric encryption key embedded in the SIM card [3, 6, 11]. One of the reasons for preferring device authentication in GSM ...Missing: core | Show results with:core
[58]
[PDF] GSM Mobile Authentication Based On User SIM - IJCST
In GSM mobile communication mobile station and network share common secret key for entire communication. In GSM secret key distribution is done between mobile.
[59]
[PDF] cheatsheets for authentication and key agreements in 2g, 3g, 4g ...
Jun 13, 2021 · Authentication and Key Agreement (AKA) is a type of security protocol, used in 3GPP mobile networks, that provides two security capabilities ...
[60]
[PDF] Cloning 3G/4G SIM Cards with a PC and an Oscilloscope - Black Hat
AKA algorithm of GSM: COMP128-1 (A3+A8). Encryption algorithm : A5. Insecurity: 1. COMP128-1 is fatally flawed (narrow pipe attacks [BGW98]). 2. Only one-way ...
[61]
[PDF] a Case Study with COMP128-1 Implementations in SIM Cards (long ...
SIM Cloning Fraud and Countermeasures. For unprotected (and weakly protected) implementations of COMP128-1, SIM card cloning kits are available from eBay ...
[62]
[PDF] A Case Study with COMP128-1 Implementations in SIM Cards
Authentication between SIM card and base station (AuC). GSM SIM uses the COMP128-1 algorithm for the authentication. Page 10. Mathematical vs. physical ...<|control11|><|separator|>
[63]
[PDF] Solutions to the GSM Security Weaknesses - arXiv
Currently, both COMP128-2 and. COMP128-3 algorithms thwart the SIM card cloning and over-the-air cracking of Ki. Since COMP128-3 enhances the effective key ...
[64]
A Case Study with COMP128-1 Implementations in SIM Cards
Aug 7, 2025 · In this paper, we consider the case of SIM cards to discuss these issues, and report on successful side-channel attacks against several (old but ...
[65]
What Is SIM Swapping? Attack, Definition, Prevention | Proofpoint US
These high-profile incidents demonstrate how attackers exploit mobile carrier vulnerabilities to cause financial havoc and institutional damage.
[66]
How Twitter CEO Jack Dorsey's Account Was Hacked - WIRED
Aug 30, 2019 · In a SIM swap, a hacker either convinces or bribes a carrier employee to switch the number associated with a SIM card to another device, at ...
[67]
Understanding and Preventing SIM Swapping Attacks | Bitsight
Jul 2, 2025 · SIM swapping, also known as SIM hijacking, is a type of identity theft in which attackers deceive or bribe mobile carriers into transferring a victim's phone ...
[68]
A deep dive into the growing threat of SIM swap fraud
Aug 18, 2025 · In 2023, the FBI investigated 1,075 SIM swap attacks, with losses approaching $50 million. In 2024, IDCARE reported a 240% surge in SIM swap ...Missing: notable | Show results with:notable
[69]
SIM Swap Fraud 2025: Stats, Legal Risks & 360° Defenses - Keepnet
Jul 5, 2025 · In the UK alone, reports of SIM-swap fraud rocketed 1,055 % in 2024—from just 289 incidents to almost 3,000, according to Cifas' Fraudscape data ...
[70]
Hackers Hit Twitter C.E.O. Jack Dorsey in a 'SIM Swap.' You're at ...
Sep 5, 2019 · The Twitter account of Jack Dorsey, Twitter's chief executive, was hijacked last week in a hack known as a SIM swap.
[71]
SK Telecom Breach: What Happened?
Jul 15, 2025 · In April 2025, SK Telecom—South Korea's largest mobile carrier—formally notified regulators of a significant data breach that compromised ...
[72]
Secret Service busts massive NYC telecom network with ... - Fox News
Sep 30, 2025 · Upon discovering the telecom threat, investigators found over 100,000 SIM cards that had already been activated. However, many devices had ...
[73]
SIMBox Fraud: Challenges and AI-Powered Solutions for Telecom ...
May 22, 2025 · Learn how SIM Box fraud operates, its impact on telecom operators, and discover AI-powered fraud management strategies.Missing: procurement | Show results with:procurement
[74]
Simjacker - Next Generation Spying via SIM Card Vulnerability | Enea
Sep 11, 2019 · The main Simjacker attack involves a SMS containing a specific type of spyware-like code being sent to a mobile phone.
[75]
CAPEC-614: Rooting SIM Cards (Version 3.9)
This attack leverages over-the-air (OTA) updates deployed via cryptographically-secured SMS messages to deliver executable code to the SIM.
[76]
Simjacker Vulnerability Impacting up to 1 Billion Phone Users
Sep 13, 2019 · The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone.
[77]
[PDF] Lookout Simjacker
AdaptiveMobile Security, a telecom network security provider, uncovered a new and previously undetected vulnerability within SIM cards called Simjacker.Missing: details | Show results with:details
[78]
SIM Cards Encryption Vulnerability: The Scope of the Problem
Aug 1, 2013 · Security Research Lab's Karsten Nohl found a SIM security flaw, a vulnerability that allows remote cloning of millions of SIM cards.Missing: protocol | Show results with:protocol
[79]
https://www.gsma.com/solutions-and-impact/technologies/esim/security-analysis-of-the-consumer-remote-sim-provisioning-protocol/
[80]
[PDF] ETSI TR 131 900 V5.2.0 (2003-03)
3GPP TS 31.102: "Characteristics of the USIM Application". [3]. 3GPP TS 21.111: "USIM and IC Card Requirements". [4]. 3GPP TS 22.100: "UMTS Phase 1". [5]. 3GPP ...Missing: advancements | Show results with:advancements
[81]
(PDF) The Evolution of the Smart Card in Mobile Communications
Aug 6, 2025 · The smart card, subscriber identity module (SIM/USIM), is the network operator's 'business card' that is handed out to the end-user.<|separator|>
[82]
[PDF] ETSI TS 131 101 V17.0.0 (2022-04)
3GPP TS 31.101 version 17.0.0 Release 17 IPRs essential or potentially essential to normative deliverables may have been declared to ETSI.
[83]
Specification # 31.101 - 3GPP
Mar 1, 2017 · 31.101. Title: UICC-terminal interface; Physical and logical characteristics. Status: Under change control. Type: Technical specification (TS).
[84]
3GPP specification series: 31series
3GPP Specification series ; TS 31.102, Characteristics of the Universal Subscriber Identity Module (USIM) application ; TS 31.103, Characteristics of the IP ...
[85]
[PDF] Trusted Connectivity Alliance Recommended 5G SIM: A Definition
3GPP TS 31.111. Network Slicing is the 5G networks ability to guarantee management of broadband and latency connections. Each particular type of application ...
[86]
What is eSIM? Guide to eSIM Technology & Use Cases - GSMA
eSIM is a global specification by the GSMA which enables remote SIM provisioning of any mobile device.IoT eSIM specification · Embedded SIM Remote... · What is eSIM for Consumer?
[87]
eSIM Consumer and IoT Specifications - GSMA
The below content provides the status of the eSIM specifications that have been published by GSMA and a comprehensive way to link the core specifications.
[88]
As eSIM Takes Off, MNOs Must Modernize Their Provisioning ...
Sep 15, 2023 · According to Giesecke+Devrient, also known as G+D, the first deployment of eSIM technology was in 2012 for M2M markets. In 2016, Samsung ...
[89]
eSIM adoption: A game-changer for the telecommunications market
Oct 30, 2024 · How eSIMs both benefit and disrupt the telecommunications value chain. The shift towards eSIM cards is causing a gradual decline in market ...
[90]
iSIM: The latest innovation in SIM technology, explained - u-blox
Jun 15, 2023 · iSIM: An iSIM is a SIM integrated in a system-on-chip (SoC), typically as a secure enclave containing a SIM OS and an MNO profile.
[91]
iSIM – the Integrated SIM is the future of connectivity | G+D
The iSIM, also known as integrated Universal Integrated Circuit Card (iUICC), is the next phase of SIM solution technology.
[92]
What is iSIM (integrated SIM) and how does it benefit IoT devices?
Sep 26, 2024 · iSIM (integrated SIM) is a new generation of SIM technology that incorporates the SIM functionality directly into the device's central processor.
[93]
The Differences between SIM, eSIM and iSIM - Telit Cinterion
Jul 25, 2023 · What is iSIM? An integrated SIM (iSIM) is a next-generation SIM technology. It embeds SIM functionality into a device's main processor.Traditional Sim · What Is Esim? · What Is Isim?
[94]
Blog from ARM: Unlocking Secure IoT Device Connectivity with iSIM
Oct 9, 2025 · Integrated SIM (iSIM) technology builds on eUICC functionality targeting low-power IoT devices. By integrating the processor core and encryption ...
[95]
iSIM vs eSIM: 5 Key Differences - floLIVE
An iSIM (Integrated SIM) is directly embedded into the processor of a device. An eSIM is any type of SIM card that can be reprogrammed to have different ...What Is Isim? · What Is Esim? · Isim Vs. Esim: Understanding...<|separator|>
[96]
iSIM opens a new world of opportunity for mobile and IoT innovation
Oct 9, 2025 · An iSIM enables devices to connect to a mobile network without needing a physical SIM card or soldered eSIM in a printed circuit board.
[97]
Soft SIM, eSIM and iSIM: What's the difference? - Eseye
Nov 29, 2023 · iSIM, or Integrated SIM, takes the concept of eSIM a step further by embedding the SIM card functionality directly into the modem chipset. This ...
[98]
SIM, eSIM vs iSIM: What's the Difference? | IoT Glossary - EMnify
The most obvious difference between the SIM, embedded SIM, and iSIM is size. Smaller SIM formats give you greater flexibility when it comes to designing your ...What Is A Sim? · What Is An Esim? · What Is An Isim?
[99]
eSIM or iSIM: Pick the Best SIM for Your IoT Devices - Com4
Oct 14, 2025 · iSIM is attractive for battery-powered IoT devices such as sensors, wearables, or asset trackers where space and energy are limited. While still ...
[100]
iSIM: The future of IoT device production? - Kigen
Mar 24, 2025 · Benefits of iSIM-enabled IoT devices: Optimized Space Efficiency; Simplified Inventory Management; Faster Deployment with iSIM secure package ...
[101]
Quectel, G+D and Vodafone IoT collaborate on iSIM adoption
May 8, 2025 · The iSIM is set to transform IoT by offering a future-proof, tamper-resistant solution that is adaptable with new network technologies. Despite ...
[102]
Why iSIM is the Future of IoT | Sony Semiconductor Israel
Device vendors that use iSIM benefit from less complexity and reduced cost of ownership (TCO). Additionally, iSIM enables manufacturers to deliver an ...What Is Driving This Growth? · What's The Difference... · Isims Offer A Multitude Of...
[103]
[PDF] ETSI TS 131 101 V18.1.0 (2024-07)
This document is a technical specification for the Universal Mobile Telecommunications System (UMTS), LTE, and 5G, covering UICC-terminal interface, physical ...
[104]
[PDF] ETSI TS 121 111 V18.0.0 (2024-05)
This document is intended to serve as a basis for the detailed specification of the USIM and the UICC, and the interface to the 3G terminal.
[105]
https://www.3gpp.org/DynaReport/31102.htm
[106]
An overview of the 3GPP 5G security standard - Ericsson
Jul 17, 2019 · A central security procedure in all generations of 3GPP networks is the access authentication, known as primary authentication in 3GPP 5G security standards.
[107]
Support for Multi-SIM devices for LTE/NR - 3GPP
Aug 8, 2022 · The Multi-(U)SIM work item specifies solutions to address the paging occasion collision issue for single-Rx/single-Tx Multi-USIM (MUSIM) User Equipment (UE).
[108]
[PDF] Multi-SIM support in 5G Evolution: Challenges and Opportunities
Jan 20, 2022 · The GSMA has defined Dual SIM Dual Standby (DSDS) and Dual SIM Dual Active (DSDA) operation modes for two different categories of multi-SIM ...
[109]
[DOC] TS.37-v11.0-Requirements-for-Multi-SIM-Devices.docx - GSMA
Dual SIM Dual Standby (DSDS): both SIMs can be used for idle-mode cellular network connection, but when a cellular radio connection is active the second ...
[110]
TS.37 Requirements for Multi SIM Devices | Newsroom - GSMA
Jul 17, 2024 · * The device has multiple simultaneous 3GPP/3GPP2 network connections and multiple IMEIs each of which is associated with a particular SIM. ...
[111]
FCC Urged To Mandate Phone Unlocking For Dual SIM Use - Law360
or subscriber identity modules — the FCC should act "quickly to adopt a uniform, 60-day ...
[112]
What Is A Dual Sim Phone? A Complete Guide for Travellers ...
Carrier Limitations: Some carriers restrict mobile data to SIM 1 only, especially for international models, so checking with your carrier before setting up ...
[113]
Multi-Carrier SIM Card: How It Works, Pros/Cons & Best Practices
Mar 23, 2025 · Multi-carrier SIM cards operate by leveraging roaming agreements and intelligent network selection mechanisms. These SIMs maintain multiple network profiles.Missing: restrictions | Show results with:restrictions
[114]
6 Disadvantages of Dual SIM Mobile Phones in 2025
Jul 28, 2025 · 6 Disadvantages of Dual SIM Mobile Phones in 2025 · 1. Increased Battery Consumption · 2. More Technical to Use · 3. Potential Temporary ...
[115]
https://www.airalo.com/blog/future-of-esim-2025-and-beyond
[116]
eSIM Market Size and Trends: Growth, Adoption & Future Outlook
Jul 11, 2025 · The global eSIM market is valued at $1.46 billion in 2024 and is projected to reach $6.29 billion by 2030, growing at a CAGR of 20%. Its ...
[117]
eSIM Market Size, Share & Growth | Industry Report, 2033
The global eSIM market size was estimated at USD 10.32 billion in 2024, and is projected to reach USD 17.67 billion by 2033, growing at a CAGR of 5.1% from 2025 ...
[118]
100+ eSIM statistics telecom service providers need to know in 2025
Apr 25, 2023 · In 2024 alone, smartphone connections using eSIM technology increased from 310 million in 2023 to 598 million, nearly doubling year on year. The ...Consumer Esim Market Size &... · Global Esim Market Growth... · Esim Awareness And Adoption...<|separator|>
[119]
eSIM trends and insights for 2025 & Infographic
GSMA's survey announced that 31% of European operators are waiting until 2022 or 2023 to launch eSIM services for smart phones. Is their delay related to the ...
[120]
https://www.statista.com/topics/9909/esim/
[121]
Why eSIM adoption Is accelerating across industries and borders
Jun 19, 2025 · According to GSMA Intelligence, global eSIM adoption is projected to reach 3.4 billion eSIM-enabled devices by 2025, up from 1.2 billion in 2021 ...
[122]
eSIM-enabled Device Shipments Will Exceed 633 Million in 2026 ...
Sep 16, 2025 · "The continued dominance of smartphones, which constituted 66% of total eSIM-enabled device shipments in 2024 and 74% in 2025, explains the ...Missing: timeline | Show results with:timeline
[123]
Over 9 Billion eSIM-capable Devices to be Shipped by 2030
Jul 3, 2024 · eSIM/iSIM-capable devices are expected to grow at a CAGR of 22% between 2024 and 2030. The installed base of xSIM-capable consumer devices is ...
[124]
Travel eSIM Adoption Set to Surge in North America by 2030 ...
Sep 7, 2025 · As of 2025, nearly 20% of international trips originating from North America utilize eSIM technology. By 2030, this figure is projected to ...
[125]
https://voyeglobal.com/esim-only-phones-2025/
[126]
eSIM Market Shipments, 2025 to 2030 - ABI Research
Within the eSIM smartphone market, Asia-Pacific, North America, and Europe are the biggest recipients. These three regions will account for over 80% of ...<|control11|><|separator|>
[127]
Travel eSIMs Surge as Roaming Alternative - Up 85% in 2025
Oct 7, 2025 · Juniper Research has found that revenue from travel eSIM packages will reach $1.8 billion by the end of 2025; growing 85% from $989 million ...
[128]
Industry Checkpoint: consumer eSIM, Q3 2025 - GSMA Intelligence
Aug 8, 2025 · The report considers four major developments: MNOs increasingly launching travel eSIM offers; new eSIM developments spanning FWA, children ...Missing: statistics | Show results with:statistics
[129]
eSIM Is Gaining Ground on Removable SIM Cards - ABI Research
Oct 28, 2024 · Although removable SIM card demand will bounce back with 4.19 billion shipments in 2023, ABI Research expects the market to consistently decline ...Missing: size | Show results with:size
[130]
Time to Act:15 E-Waste Facts We All Need to Know | Updated Blog
13. Low Recycling rates ... Worldwide, it's been estimated that only 15-20 percent of all e-waste is being recycled. 14. Recycling Creates Jobs.
[131]
https://www.airalo.com/blog/esim-technology-and-environmental-sustainability
[132]
eSIMs: Reduce Your Carbon Footprint While You Travel | Roamless
Sep 30, 2024 · eSIMs reduce carbon emissions by 87% and produce 46% less CO2 than physical SIMs, with no plastic production and reduced transportation.
[133]
The Environmental Impact of eSIM Technology | HackerNoon
Apr 20, 2025 · A study commissioned by G+D in collaboration with Fraunhofer IZM found that eSIMs generate 46% less CO₂ emissions compared to traditional SIM ...Missing: decline | Show results with:decline
[134]
The green benefits of eSIM | G+D - Giesecke+Devrient
eSIMs reduce plastic waste, CO2 emissions, and logistics by eliminating physical cards and packaging, and reducing the need for physical production and ...<|separator|>
[135]
eSIM Market Size, Share, Growth & Forecast Analysis [2032]
Oct 6, 2025 · The global eSIM market size was valued at $1.22 billion in 2023. & is projected to grow from $1.46 billion in 2024 to $6.29 billion by 2032.
[136]
eSIM Market Size, Growth, Trends - Share Analysis 2025 - 2030
Jun 12, 2025 · The Embedded SIM market stands at USD 11.29 billion in 2025 and is forecast to reach USD 21.91 billion by 2030, reflecting a 14.18% CAGR.<|separator|>
[137]
https://thebitjoy.com/fr/blogs/blog/esim-vs-isim
[138]
What is iSIM? 2025 Guide to Integrated SIM vs. Traditional SIM Cards
The xSIM (iSIM & eSIM) active connections are projected to grow 63% CAGR from 2023 to 2028, forecasting its exponential demand in M2M and consumer applications ...
[139]
The role of eSIM for IoT - IoT Analytics
Oct 14, 2024 · The role of eSIM for IoT: Better security, simplified roaming, and easier provisioning—but only 33% of cellular IoT devices use it · IoT ...
[140]
Evolving SIM technology for a more sustainable future - TechRadar
Oct 10, 2025 · Although the adoption of eSIMs, which are embedded chips in devices, is driving a gradual decline in physical SIM volumes, the number of ...
[141]
Safeguarding Mobile Connectivity in a Post-Quantum Environment
Jul 2, 2025 · An upgraded 5G Trusted SIM able to generate a quantum-safe user identity concealment based on hybrid traditional asymmetric and PQC algorithm ...
[142]
Telecom's Quantum‑Safe Imperative: Challenges in Adopting Post ...
Upgrading 5G/6G and IMS Networks for Quantum Safety. Adopting PQC in modern telecom networks will require upgrades to core mobile systems (5G today, 6G tomorrow) ...
[143]
SIM Card Hacking: What It Is, How It Works, and How to Protect ...
Apr 11, 2025 · Learn how hackers use SIM card attacks to steal PII and compromise accounts—and how to protect against these growing cyber threats.Missing: integrity mechanisms
[144]
https://microesim.com/blogs/microesim-blogs/can-esim-guarantee-communication-security-and-privacy
[145]
Unpacking Security Implications of eSIMS: How to Use eSIMS Safely
Jul 14, 2025 · By removing the physical component, eSIMs make it significantly harder for attackers to undertake common SIM-based fraud schemes.
[146]
Data Privacy Concerns in SIM Card Registration - hashnode.dev
Aug 6, 2025 · 1. Collection of Personally Identifiable Information (PII) · 2. Data Security Risks · 3. Lack of Transparency and Consent · 4. Mass Surveillance ...
[147]
SIM card registration and privacy issues - Law Gratis
Sep 18, 2025 · SIM card registration raises complex privacy issues due to extensive personal data collection. Courts worldwide emphasize privacy as a ...
[148]
eSIM Evolution: From Barriers to Breakthroughs - Vocal Media
eSIM (and iSIM) will eventually replace physical SIM cards. With key players like Apple leading the charge, GSMA innovating eSIM standards, and eSIM providers ...
[149]
Quantum-Safe Networks for 6G: An Integrated Survey on PQC, QKD ...
Quantum computing poses significant challenges to the current cryptographic landscape, particularly with the upcoming deployment of 6G networks.