Integrated Circuit Card

Description

An Integrated Circuit (IC) Card is a physical smart card that contains one or more integrated circuits, typically a microprocessor and memory, used to securely store and process data. In the context of 3GPP networks, the IC Card is the hardware platform that hosts the Subscriber Identity Module (SIM) or Universal SIM (USIM) application. It provides secure storage for subscriber credentials, authentication keys, and other data, and performs cryptographic operations to authenticate the subscriber to the network.

The IC Card is defined in 3GPP TS 21.905 and TS 22.101 as a card holding an integrated circuit containing subscriber, end user, authentication and/or application data for one or more applications. This broad definition encompasses various form factors, including the traditional plug-in SIM, embedded SIM (eSIM), and integrated SIM (iSIM). The card interfaces with the Mobile Equipment (ME) through a standardized electrical interface, typically using the ISO/IEC 7816 protocol for contact cards or ISO/IEC 14443 for contactless cards.

Functionally, the IC Card stores the International Mobile Subscriber Identity (IMSI), authentication keys (Ki, K), and algorithms (e.g., Milenage) used in the AKA (Authentication and Key Agreement) procedure. When a UE attaches to the network, the card participates in mutual authentication: the network sends a random challenge, and the card computes a response using its secret key. This ensures that only legitimate subscribers can access the network and prevents cloning. The card also stores other data such as the SMS parameters, phonebook, and operator-specific applications.

The IC Card supports multiple applications, allowing it to host not only SIM/USIM but also other services like payment, transport, or identity. This multi-application capability is enabled by the card's operating system, which manages application lifecycles and security domains. In 5G, the IC Card may host the 5G authentication and key management (AKA) application, supporting new authentication methods like EAP-AKA' and 5G-AKA.

Over the releases, the definition of IC Card has remained essentially unchanged, reflecting its stable role as a secure element. However, the physical form factor and provisioning methods have evolved, from removable SIM cards to embedded and integrated SIMs, driven by IoT and miniaturization needs. The IC Card remains a critical component for network security and subscriber management.

Purpose & Motivation

The IC Card exists to provide a secure, tamper-resistant element for storing subscriber credentials and performing authentication in mobile networks. Before the advent of smart cards, mobile networks used less secure methods, making it easier for attackers to clone phones or intercept calls. The IC Card introduced a hardware-based security module that could be removed and inserted into different devices, giving users portability of their subscription and enabling new business models.

The IC Card solves several problems: it securely stores the authentication key (Ki) that never leaves the card, preventing exposure even if the device is compromised; it enables mutual authentication between the subscriber and the network, ensuring both parties are legitimate; and it supports multiple applications, allowing the same card to be used for different services. This flexibility was crucial for the evolution from 2G to 3G and beyond, where new authentication protocols and services were introduced.

Historically, the IC Card evolved from the simple SIM card in GSM to the USIM in UMTS, adding new capabilities like larger memory and support for multiple applications. In 4G and 5G, the card continues to adapt, supporting new authentication frameworks and form factors like eSIM for IoT devices. The IC Card's purpose remains to provide a secure anchor of trust for mobile communications, enabling operators to manage subscriptions and users to access services seamlessly.