{"guid":"645c3a8f-51a2-556f-8a2b-9d741108cfea","title":"Detailed workings of OTA for SIM/USIM/eUICC","subtitle":null,"slug":"osmodevcon2024-175-detailed-workings-of-ota-for-sim-usim-euicc","link":"https://pretalx.sysmocom.de/osmodevcon2024/talk/W9X8XH/","description":"Everyone knows that OTA (over the air) access to SIM cards exists for decades, and that somehow authenticated APDUs can be sent via SMS.\n\nBut let's look at the OTA architecture in more detail:\n* OTA transport (SCP80) over SMS, USSD, CellBroadcast, CAT-TP, BIP\n* The *new* SCP81 transport (HTTPS via TLS-PSK)\n* how to address individal applications on the card via their TAR\n  * common applications like RFM and RAM\n  * custom applications on the card\n* OTA in the world of eUICCs\n  * talking to the ECASD\n  * talking to the ISD-R\n  * talking to the ISD-P/MNO-SD or applications therein","original_language":"eng","persons":["Harald Welte (sysmocom)"],"view_count":748,"promoted":false,"date":"2024-05-04T12:00:00.000+02:00","release_date":"2024-06-01T00:00:00.000+02:00","updated_at":"2026-04-22T06:15:03.640+02:00","tags":["osmodevcon2024","175","2024","osmodevcon2024","osmocom"],"length":1729,"duration":1729,"thumb_url":"https://static.media.ccc.de/media/conferences/osmodevcon/2024/175-645c3a8f-51a2-556f-8a2b-9d741108cfea.jpg","poster_url":"https://static.media.ccc.de/media/conferences/osmodevcon/2024/175-645c3a8f-51a2-556f-8a2b-9d741108cfea_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/osmodevcon/2024/175-645c3a8f-51a2-556f-8a2b-9d741108cfea.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/osmodevcon/2024/175-645c3a8f-51a2-556f-8a2b-9d741108cfea.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/osmodevcon2024-175-detailed-workings-of-ota-for-sim-usim-euicc","url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_title":"OsmoDevCon 2024","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024","related":[],"recordings":[{"size":303,"length":1729,"mime_type":"video/webm","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-06-03T00:08:07.378+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/webm-hd/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/77818","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"},{"size":102,"length":1729,"mime_type":"video/webm","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-06-02T23:14:58.844+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/webm-sd/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/77815","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"},{"size":65,"length":1729,"mime_type":"video/mp4","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-06-02T23:09:44.071+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/h264-sd/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_sd.mp4","url":"https://api.media.ccc.de/public/recordings/77812","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"},{"size":19,"length":1729,"mime_type":"audio/opus","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-06-02T23:02:44.954+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/opus/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_opus.opus","url":"https://api.media.ccc.de/public/recordings/77811","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"},{"size":26,"length":1729,"mime_type":"audio/mpeg","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-06-02T23:02:02.609+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/mp3/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/77810","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"},{"size":254,"length":1729,"mime_type":"video/mp4","language":"eng","filename":"osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-06-01T21:03:20.297+02:00","recording_url":"https://cdn.media.ccc.de/events/osmodevcon/2024/h264-hd/osmodevcon2024-175-eng-Detailed_workings_of_OTA_for_SIM_USIM_eUICC_hd.mp4","url":"https://api.media.ccc.de/public/recordings/77242","event_url":"https://api.media.ccc.de/public/events/645c3a8f-51a2-556f-8a2b-9d741108cfea","conference_url":"https://api.media.ccc.de/public/conferences/osmodevcon2024"}]}