Personal HSM, Privacy for Subscribers in 5G/6G Networks

This paper presents the concept of personal HSM for 5G/6G networks. In cloud infrastructures, Hardware Secure Modules provide cryptographic services, typically for bank or WEB companies. We introduce the idea of deploying USIM like devices in Edge or Core datacenters, in order to support ondemand applications. We define two planes first for application providers, using legacy ISO7816 standards, and second for subscribers based on TLS1.3 secure channel. We present an experimental platform that could be integrated in emerging embedded secure element (eSE). We detail secure element communication stacks and attestation procedure that transfers exclusive ownership of secure element from application provider to subscriber.