eSIM GSMA Architecture: How Embedded SIM Profiles Are Provisioned
A technical examination of the GSMA RSP (Remote SIM Provisioning) architecture that underpins all commercial eSIM deployments.
Deep technical analysis of eSIM infrastructure, mobile network architecture, and international connectivity systems for the informed traveler and technology professional.
A technical examination of the GSMA RSP (Remote SIM Provisioning) architecture that underpins all commercial eSIM deployments.
Standalone vs Non-Standalone 5G architectures have different implications for roaming compatibility and real-world performance.
An analysis of the security landscape for travelers using public networks, eSIM services, and mobile hotspots across Europe.
The eSIM standard, formally defined by the GSMA as the Embedded SIM Specification (SGP.02 for M2M and SGP.22 for consumer devices), represents a fundamental shift in how cellular identity is managed. Unlike traditional SIM cards that store a single carrier profile on a removable chip, eSIM uses a secure element (SE) embedded in the device's circuit board that can store and manage multiple operator profiles simultaneously.
The Remote SIM Provisioning (RSP) architecture consists of three primary components: the Subscription Manager Data Preparation (SM-DP+) server operated by the eSIM provider, the Local Profile Assistant (LPA) software on the device, and the eUICC (embedded Universal Integrated Circuit Card) hardware. When a user purchases an eSIM plan, the SM-DP+ server prepares an encrypted profile package that is downloaded to the device's eUICC via the LPA.
This architecture enables several capabilities that are impossible with physical SIM cards: remote provisioning without physical card exchange, multiple concurrent profile storage, cryptographically secure profile transfer, and device-manufacturer-level integration with the operating system.
Europe's 5G rollout is proceeding at varying rates across different countries and network operators. The deployment strategy chosen by each operator — Standalone (SA) versus Non-Standalone (NSA) — has significant implications for the actual performance experienced by travelers and the compatibility with eSIM roaming arrangements.
Non-Standalone 5G (NSA, also called 5G NR NSA) uses existing 4G LTE infrastructure for control plane functions while adding 5G New Radio for data plane capacity. This approach allows faster initial deployment but means that 5G devices still anchor to 4G networks for signaling. Most current European 5G deployments use NSA architecture.
Standalone 5G (SA) operates entirely on 5G infrastructure, enabling the full range of 5G capabilities including ultra-low latency and network slicing. SA deployments are more limited but are expanding, particularly in Germany, the Netherlands, and the Nordic countries.
| Country | 5G Status | Architecture | Urban Coverage |
|---|---|---|---|
| Germany | ACTIVE | NSA + SA (expanding) | High |
| Netherlands | ACTIVE | NSA + SA | Very High |
| France | ACTIVE | NSA | High |
| Spain | ACTIVE | NSA | Moderate-High |
| Italy | ACTIVE | NSA | Moderate |
| Poland | EXPANDING | NSA | Moderate |
SGP.22 is the GSMA's technical specification for consumer eSIM (Remote SIM Provisioning for Consumer Devices). It defines the architecture, interfaces, and security requirements for eSIM profile management in smartphones and other consumer devices.
With physical SIM roaming, your home carrier's SIM connects to a foreign network via a roaming agreement. With eSIM travel plans, you're typically activating a local or regional carrier profile, which may offer better pricing but operates as a separate account from your home carrier.
An MVNO (Mobile Virtual Network Operator) is a company that provides mobile services without owning network infrastructure, instead purchasing wholesale capacity from MNOs. Many travel eSIM providers operate as MVNOs or as resellers of MVNO capacity.
The primary security considerations include the trustworthiness of the SM-DP+ server operator, the security of the QR code activation process, and the risk of profile cloning. Reputable providers use GSMA-certified infrastructure that mitigates these risks.
Technical analysis, network deployment updates, and eSIM ecosystem intelligence. For technology professionals and informed travelers.
No spam. Unsubscribe anytime. Privacy policy.