A server comprising: a memory; and a processor, wherein the memory comprises instructions that when executed by the processor cause the server to perform steps comprising: at the server, which is associated with a long-term public key, PK server, and a long-term private key, SK server,: receiving, from a mobile device, a request to establish a secure connection with the mobile device, wherein: i) the mobile device comprises an embedded Universal Integrated Circuit Card, eUICC, (120, 320) and ii) the eUICC is associated with a long-term public key, PK eUICC, and a long-term private key, (SK eUICC; receiving, from the eUICC, a signature; authenticating an identity of the eUICC, wherein the authenticating comprises determining that the signature is based on the SK eUICC; generating (415, 504), subsequent to the authenticating, an ephemeral public key, ePK server, and an ephemeral private key, eSK server; signing the ePK server using the SK server to produce a signed ePK server; providing the signed ePK server to the mobile device; receiving, from the mobile device, an ephemeral key, ePK eUICC, that is signed using the SK eUICC; generating a shared symmetric key using the eSK server and the ePK eUICC; and transmitting data encrypted with the shared symmetric key over the secure connection to the eUICC. a memory; and a processor, wherein the memory comprises instructions that when executed by the processor cause the server to perform steps comprising: at the server, which is associated with a long-term public key, PK server, and a long-term private key, SK server,: receiving, from a mobile device, a request to establish a secure connection with the mobile device, wherein: i) the mobile device comprises an embedded Universal Integrated Circuit Card, eUICC, (120, 320) and ii) the eUICC is associated with a long-term public key, PK eUICC, and a long-term private key, (SK eUICC; receiving, from the eUICC, a signature; authenticating an identity of the eUICC, wherein the authenticating comprises determining that the signature is based on the SK eUICC; generating (415, 504), subsequent to the authenticating, an ephemeral public key, ePK server, and an ephemeral private key, eSK server; signing the ePK server using the SK server to produce a signed ePK server; providing the signed ePK server to the mobile device; receiving, from the mobile device, an ephemeral key, ePK eUICC, that is signed using the SK eUICC; generating a shared symmetric key using the eSK server and the ePK eUICC; and transmitting data encrypted with the shared symmetric key over the secure connection to the eUICC. receiving, from a mobile device, a request to establish a secure connection with the mobile device, wherein: i) the mobile device comprises an embedded Universal Integrated Circuit Card, eUICC, (120, 320) and ii) the eUICC is associated with a long-term public key, PK eUICC, and a long-term private key, (SK eUICC; receiving, from the eUICC, a signature; authenticating an identity of the eUICC, wherein the authenticating comprises determining that the signature is based on the SK eUICC; generating (415, 504), subsequent to the authenticating, an ephemeral public key, ePK server, and an ephemeral private key, eSK server; signing the ePK server using the SK server to produce a signed ePK server; providing the signed ePK server to the mobile device; receiving, from the mobile device, an ephemeral key, ePK eUICC, that is signed using the SK eUICC; generating a shared symmetric key using the eSK server and the ePK eUICC; and transmitting data encrypted with the shared symmetric key over the secure connection to the eUICC.