Mobile telecommunications
USIM (Universal Subscriber Identity Module) is the subscriber-identity application used in UMTS, LTE, and 5G mobile networks. Stored on a UICC, it authenticates a subscriber and supports cryptographic protection, network selection, and operator-specific data; unlike the older GSM SIM application, it is designed for mutual authentication between the device and the network.
USIM provides a secure subscriber identity and authentication application for 3GPP mobile networks. It normally resides on a UICC, the removable or embedded smart-card platform commonly called a SIM card, and communicates with the mobile equipment through standardized card commands.1 The USIM stores or derives credentials such as the International Mobile Subscriber Identity (IMSI), the long-term authentication key, preferred network information, and service parameters. The key is intended to remain inside the secure card environment rather than being exposed to the handset operating system.
The distinction between the UICC and the USIM is structural: a UICC is the card platform, while USIM is one application on that platform. A single UICC can also host a GSM SIM application, an IP Multimedia Services (IMS) application, or operator-specific applications. Modern embedded UICCs and eUICCs retain the same conceptual separation even when there is no removable plastic card.
USIM enables mutual authentication, allowing both the handset and the serving network to verify credentials. In the UMTS Authentication and Key Agreement procedure, the home network supplies an authentication vector; the USIM checks the network's authentication token, computes a response, and derives ciphering and integrity keys.2 This was a major security improvement over the original GSM authentication model, in which the handset generally authenticated to the network without equivalent network authentication.
In LTE and 5G, USIM credentials remain central even though access procedures and key hierarchies differ. The resulting keys protect radio signaling and, in suitable circumstances, user-plane traffic; they do not by themselves encrypt every application or guarantee privacy against all forms of tracking. The IMSI may be concealed or replaced during initial access by temporary identities, while the permanent subscription identity remains under the operator's control.
USIM is also a structured data store whose files support network operation and user services. Standardized files can contain home-network identifiers, forbidden and preferred networks, location-area information, access-point-related parameters, and lists used for short-message or service management functions.1 The exact files available, their access conditions, and their contents vary by operator and generation of the specification.
USIM authentication is used beyond ordinary packet-data access. The EAP-AKA and EAP-AKA' methods adapt cellular authentication for networks such as Wi-Fi access controlled by an operator, while IMS registration can use credentials associated with the subscription.3 This interoperability explains why a USIM can support services that are not carried directly over the cellular radio interface. It does not, however, make a USIM a general-purpose password manager or an independent network connection.
USIM behavior includes several less visible safeguards and edge cases. Authentication uses a sequence number and freshness checks to limit replay of old authentication material; synchronization failures can trigger a controlled resynchronization exchange rather than immediate abandonment.2 Operators can also use card-resident applications and files to manage roaming preferences, service restrictions, and security policies, although many customer-facing functions are now implemented in the handset or network instead.
USIM should not be confused with the telephone number, the device identifier, or the subscription itself. The IMSI identifies a subscription, the International Mobile Equipment Identity identifies equipment, and a mobile number is an address assigned through operator databases. A stolen card can therefore expose a subscription to misuse if its local protections are bypassed, but copying visible card data alone is insufficient to reproduce the secret authentication key. In eSIM deployments, remote provisioning changes how credentials are delivered; it does not eliminate the USIM application model.
USIM is an application specification within the 3GPP security and UICC framework; commercial implementations may expose only a subset of its standardized features.
Help improve the encyclopedia. Reports go straight to the site manager.