Security risk analysis and verification of USIM application toolkit
Jingyi Fu, Xiaoming Ren, Yimeng Li, Zuhui Yue, Hui Liu · 2022
USIM Application Toolkit (USAT) is a command interaction mechanism between mobile Terminal and SIM card, SIM card applications can interact with users or terminals by calling USAT capability to realize various services. If these capabilities are improperly managed or not reasonably used and controlled, they may bring different levels of security risks. In addition to the hundreds of millions of user base of SIM cards, these security risks may cause extensive adverse effects. Based on the introduction of USAT capabilities, this paper has analyzed its typical security risks, then verified them one by one, and finally gave suggestions.