Integrated Circuit Card Identification

Description

The Integrated Circuit Card Identification (ICCID) is a globally unique serial number assigned to each SIM or UICC card at the point of manufacturing. Defined by the ITU-T E.118 recommendation and adopted within 3GPP specifications, it serves as the primary identifier for the physical hardware, distinct from subscriber identities like IMSI or MSISDN. The ICCID is typically 19 or 20 digits long, though it can be up to 22 digits, and is structured to include major industry identifiers (MII), issuer identification number (IIN), individual account identification, and a check digit calculated using the Luhn algorithm. This number is physically engraved or printed on the card and is also stored electronically in the card's non-volatile memory, specifically in the EF_ICCID elementary file within the telecom file system.

Architecturally, the ICCID is used by various network and management entities. During the initial personalization process, the card issuer (e.g., SIM vendor, mobile operator) uses the ICCID to track the card through its lifecycle. In the network, while not used for routine subscriber authentication (that's the IMSI's role), the ICCID can be read by the mobile device and reported to the network. For example, the device may send it in certain registration or equipment identity procedures. In the OTA (Over-The-Air) platform, the ICCID is a key addressing token used by the OTA server to securely identify and target a specific UICC for remote application management, file updates, or profile provisioning, as defined in 3GPP TS 31.115.

Its role extends to management systems like the Equipment Identity Register (EIR), where it can be used in conjunction with the IMEI for device and card pairing validation. In eSIM (embedded SIM) and remote SIM provisioning architectures defined by GSMA, the ICCID is a fundamental identifier for the embedded hardware element (eUICC) and for the profiles downloaded onto it. The number works as an immutable anchor point for logistical control, fraud prevention (e.g., detecting cloned cards if multiple active IMSIs are associated with one ICCID), and as a fallback identifier if subscriber data is corrupted. It is a critical component in the end-to-end supply chain and operational management of subscriber identity modules.

Purpose & Motivation

The ICCID was created to provide a unique, permanent, and industry-standardized identifier for each physical SIM card, addressing the need for effective inventory management, manufacturing control, and logistical tracking. Before such standardization, identifying individual cards in production batches and operator inventories was challenging. The ICCID solves the problem of unambiguously distinguishing one card from another throughout its global lifecycle, from fabrication and personalization to distribution, activation, and eventual decommissioning.

Its creation was motivated by the expansion of GSM and the need for a robust administrative identifier separate from the subscriber-specific IMSI. This separation is crucial because a SIM card can be re-personalized for different subscribers (e.g., in MVNO scenarios or when a card is reused), but the physical card itself remains the same. The ICCID provides a constant reference for the hardware. Furthermore, it enables key operational processes: it is used in bulk SIM ordering, in OTA platform commands to address a specific card for updates, and in pairing with device identifiers for enhanced security services. It addressed the limitations of earlier, less formalized identification methods that could lead to duplication or tracking errors in large-scale deployments, thereby supporting the scalable, global management of hundreds of millions of SIM cards.

Key Features

• Globally unique serial number for each physical SIM/UICC card
• Permanently stored in card's non-volatile memory and printed on the card body
• Structured number compliant with ITU-T E.118, including issuer identification and check digit
• Used for card inventory, logistics, and personalization tracking
• Serves as a key identifier for OTA (Over-The-Air) management and remote provisioning
• Provides a hardware-based reference distinct from subscriber identities like IMSI

Evolution Across Releases

Defining Specifications