I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into arbitrary one won't reveal it's data.

I realize what SIM is JavaCard-based smartcard, so in theory this kind of mutual authentication might be possible.

  • It should be possible, SIM card can perform mutual authentication against a server, and the equipment could carry enough computing power to act as it's own server. – Martheen Jun 9 '17 at 10:11
  1. Store the IMEI of the equipment in the SIM card applet.
  2. On start of the mobile equipment, just check if the IMEI of the equipment is the same as that of the one stored in the SIM card applet. By comparing both, you can take a decision to update a memory byte in SIM card, which will eventually make it disable for the operation. Refer ETSI 11.14 Standard.
  • 2
    This is not going to work in practice - you can manually add the the IMEI to the SIM card (or copy it from another card). – HTLee Mar 9 '18 at 16:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.