5

Card OS technical features

5.1

Supported standards and networks

The ST4SIM-200M solution complies with the standard networks (2G / 3G / 4G LTE) and low power networks

(CAT-M / NB-IoT).

From a technical point of view, the ST4SIM-200M solution integrates all advanced NAAs for eSIM solution:

•

USIM applications providing access to universal mobile telecommunications system (UMTS) networks,

•

IP multimedia services identity module (ISIM) to access IP multimedia subsystem (IMS) networks,

•

CDMA subscriber identity module (CSIM) including CAVE algorithm.

To grant mobile network operators (MNO) the best solution for UICC-centric services either owned by the MNO or

by third parties, the ST4SIM-200M complies with GlobalPlatform® Card Specifications v2.2 (depending on UICC

configuration) and related amendments.

5.2

Algorithms and cryptography

The ST4SIM-200M supports the following standard authentication algorithms:

•

CAVE

•

MILENAGE

•

TUAK

The MILENAGE algorithm enables authorized access to UMTS/LTE networks with an easy and flexible parameter

customization, according to specific MNO requirements.

The TUAK authentication algorithm is supported with both 128-bit key length and 256-bit key length.

In addition to these algorithms, the ST4SIM-200M also supports the "3GPP test algorithm" for test profiles.

In order to increase security performance, the ST4SIM-200M also incorporates a ratification counter that limits

the number of authentication attempts to prevent brute-force attacks designed to break algorithms. In addition, all

algorithms support dedicated DPA/SPA attack countermeasures.

Besides standard symmetric cryptography and hashing algorithms (DES, Triple DES, AES, MD5, and so on), the

ST4SIM-200M provides a cryptographic co-processor with asymmetric cryptography capabilities.

For applications requiring the strongest level of cryptography, the ST4SIM-200M supports:

•

RSA with a key length of up to 2048 bits

•

elliptic curve cryptography (ECC) with a key length of up to 521 bits.

In addition, the ST4SIM-200M fully supports the PKCS#15 standard and offers a rule-based access control

mechanism such as digital signature/certificates for data/applications requiring a strong level of cryptography.

The security algorithm implementation adheres to the chip security guidelines of the ST33G1M2M to guarantee

the best security level (for more information, contact the local STMicroelectronics sales office).

5.3

Over the air (OTA) functionality

The ST4SIM-200M supports over the air protocol for remote application management (RAM) and remote file

management (RFM) compliant with ETSI standard (ETSI TS 102 225 and ETSI TS 102 226 specifications

Release 12).

The RAM application is also fully supported by GlobalPlatform v2.2 and the related amendment B (which enables

remote applet management and remote file management over HTTP/TLS).

TLS v1.0, 1.1 and 1.2 are available in the ST4SIM-200M. In addition, the ST4SIM-200M integrates a DNS

mechanism allowing the card to request the HTTPS server address from a DNS server.

The ST4SIM-200M is able to remotely control the execution of APDU commands over the air, to administrate the

card content. It also allows proactive commands to interact with the host device.

The ST4SIM-200M supports the secured packet structure and the remote APDU structure for (U)SIM toolkit

applications, conforming 3GPP TS 31.115 and TS 31.116 specifications.

The CAT-TP protocol defined by ETSI release 7 is supported.

ST4SIM-200M

Card OS technical features

DB4082 - Rev 5

page 8/26