Patent ID: 8924715

Claim:
A wireless apparatus, comprising: at least one wireless adapter configured to communicate with at least one wireless network; a secure element configured to store a plurality of electronic Subscriber Identity Modules (eSIMs), wherein: the secure element is pre-associated with both a cryptographic key and a first endorsement certificate, and includes, for each eSIM in the plurality of eSIMs, a secure partition that is associated with the eSIM, and each eSIM of the plurality of eSIMs represents a virtualization of a physical Subscriber Identity Module (SIM) card; and a processor configured to cause the wireless apparatus to: transmit, via the at least one wireless adapter, a request for an eSIM that is not included in the plurality of eSIMs, wherein the request includes the first endorsement certificate and is addressed to a third party entity that is different than a network operator associated with the at least one wireless network; receive, via the at least one wireless adapter and from the third party entity, the eSIM and a second endorsement certificate associated with the third party entity; and responsive to successful verification of the second endorsement certificate: identify a secure partition that corresponds to the eSIM, and store the eSIM to the secure partition.