SIM card

A SIM card separates subscriber identity from the mobile device that uses it. In technical terms, it is a smart card application hosted on a Universal Integrated Circuit Card (UICC), with files and security functions defined by telecommunications standards.² A card commonly contains an International Mobile Subscriber Identity (IMSI), operator-specific authentication data, and administrative information. When inserted into a handset, it enables the device to present the subscription to the serving network.

The card does not normally contain the entire customer account. Billing, service entitlements, voicemail, and the association between an IMSI and a telephone number are maintained in operator databases. Older cards could store contacts and text messages, but phones increasingly keep those data locally or synchronize them through online services.¹

SIM authentication proves possession of a valid subscription without sending the long-term secret over the radio link. The network issues a challenge; the SIM uses its protected secret to calculate a response, while the network checks the result against its own subscriber records.² The secret key is intended to remain inside the card, where its security processor performs relevant operations.

On 3G and later networks, the USIM application extended the original GSM model with mutual authentication and additional security parameters. A personal identification number (PIN) can lock access to card functions, while a personal unblocking key (PUK) is used after repeated incorrect PIN entries. Losing both credentials can permanently block a card, requiring operator replacement. The UICC standards also define file structures, access conditions, and applications rather than treating the card as simple memory.³

SIM cards have become physically smaller while retaining the same basic subscriber function. The full-size card gave way to mini-SIM, micro-SIM, and nano-SIM formats; the later formats reduce plastic around the chip rather than changing the underlying network concept. Adapters can allow a smaller card to fit a larger tray, but poorly made adapters may catch in a handset.

The term SIM is also used loosely for the application, the removable card, and the subscription profile. A modern 4G or 5G handset may use a USIM rather than the original GSM SIM application. An eSIM replaces the removable package with an embedded UICC (eUICC) that can securely download and manage operator profiles through remote provisioning.⁴ A device may support removable SIMs, eSIMs, or both, depending on its design and market.

SIM cards are small secure computers, not merely identity labels. Their operating environments can support multiple applications, cryptographic operations, and controlled communication with the handset; operator-specific applications have historically enabled services such as SIM Toolkit menus and banking or transport functions.³

Security has also evolved in response to surveillance and fraud. In 5G, the subscriber identity can be concealed on the radio interface as a Subscription Concealed Identifier (SUCI), derived from the permanent identity and protected using operator-configured public-key mechanisms.⁵ Older GSM authentication and encryption designs had known weaknesses, so a SIM card alone cannot guarantee private communications: handset software, radio protocols, operator systems, and end-to-end encryption all matter. A stolen card may still be protected by its PIN, but social engineering an operator into issuing a replacement remains a separate account-security risk.

UICC

Universal Integrated Circuit Card, the smart-card platform that can host SIM, USIM, and other applications.

IMSI

International Mobile Subscriber Identity, a permanent or long-lived identifier associated with a mobile subscription.

USIM

Universal Subscriber Identity Module application used primarily with 3G, 4G, and 5G networks.

eUICC

Embedded UICC capable of securely storing and managing downloadable operator profiles.

PUK

Personal Unblocking Key used to unlock a SIM after too many failed PIN attempts.