HKCARD ELECTRONICS CO.,LIMITED:Custom SIM Cards for Private LTE Networks: Security, Branding, and Complete Control

Building a private LTE or 5G network is a significant infrastructure investment. Whether you are securing a manufacturing campus, deploying a utility monitoring network, or building a dedicated CCTV backbone, your network is only as secure and reliable as the SIM cards inside every connected device.

At HKCARD ELECTRONICS CO.,LIMITED, we specialize in manufacturing and personalizing custom SIM cards specifically designed for private 4G and 5G LTE network deployments. Unlike consumer SIM cards distributed by public carriers, our custom cards are engineered to your exact network specifications—locked to your infrastructure, branded with your identity, and programmed with the precise authentication credentials your core network requires.

This guide walks through everything a network operator, systems integrator, or enterprise IT team needs to know about sourcing, configuring, and deploying custom SIM cards for private LTE/5G networks.

Why Private LTE Networks Require Custom SIM Cards

A private LTE network is, by definition, a closed system. You control the base stations, the core network, and the subscriber base. Standard public carrier SIM cards are completely incompatible with this architecture for one simple reason: they are programmed to authenticate against a public carrier’s HSS (Home Subscriber Server), not yours.

To connect any User Equipment (UE)—whether a rugged CPE device, a smartphone, a tablet, or an IoT sensor—to your private LTE network, that device needs a SIM card programmed with credentials that match your network’s authentication database.

What this means in practice:

• Your HSS holds a database of IMSI numbers and corresponding Ki keys.
• Each SIM card must be programmed with a matching IMSI and Ki.
• When a device attempts to attach to your network, the SIM presents its IMSI, and the HSS validates the Ki using a challenge-response authentication procedure.
• If the credentials don’t match, the device cannot connect. Full stop.

This is exactly why custom-programmed SIM cards are not optional for private LTE networks—they are a fundamental architectural requirement.

What Goes Inside a Custom SIM Card

Understanding what data is stored on a custom SIM card helps operators make informed decisions about their provisioning strategy. Here are the core parameters:

IMSI (International Mobile Subscriber Identity)
The IMSI is the primary identity of every subscriber on a cellular network. It is a 64-bit identifier composed of:

• MCC (Mobile Country Code): Identifies the country of the network operator.
• MNC (Mobile Network Code): Identifies the specific network operator.
• MSIN (Mobile Subscriber Identification Number): Uniquely identifies the subscriber within the operator’s network.

For private LTE operators, the IMSI range must be carefully allocated to avoid conflicts with public carriers. We help operators navigate this process during the provisioning planning phase.

Ki (Authentication Key)
The Ki is a 128-bit secret key assigned to each SIM card during personalization. It is the cryptographic foundation of your network’s security. The Ki is stored in two places: on the SIM card itself, and in your network’s Authentication Center (AuC) or HSS database.

When a device attempts to connect, the network sends a random challenge (RAND) to the SIM. The SIM uses Ki and the RAND to compute a response (SRES) and a session encryption key. The network performs the same calculation independently. If both results match, authentication succeeds.

Critically, the Ki never travels over the air interface. This is what makes the system secure.

OPc (Operator Variant Algorithm Configuration Field)
For modern 3G/4G networks using the MILENAGE authentication algorithm, OPc is an additional operator-specific key derived from the master OP value and the Ki. It adds an additional layer of operator-specific security on top of the basic authentication procedure.

Authentication Algorithms: From Legacy to Modern

Our custom SIM cards support a full range of authentication algorithms, allowing operators to select the appropriate security level for their deployment:

COMP128 Family (Legacy GSM)
Originally designed for 2G GSM networks, the COMP128 algorithm family implements the A3 (authentication) and A8 (session key generation) functions defined in the GSM standard:

• COMP128-1: The original implementation with documented weaknesses. Not recommended for new deployments.
• COMP128-2: Strengthened algorithm. Generates session keys (Kc) with the 10 rightmost bits zeroed.
• COMP128-3: Same as COMP128-2 but generates all 64 bits of Kc, providing stronger encryption.
• COMP128-4: Based on the 3GPP MILENAGE algorithm using AES encryption. Recommended for modern hybrid deployments.

MILENAGE (3G/4G Standard)
MILENAGE is the industry-standard authentication algorithm for UMTS, LTE, and 5G networks. Based on AES-128 encryption, it provides significantly stronger security than legacy COMP128 variants. All modern private LTE deployments should use MILENAGE.

TUAK (Advanced 5G)
An alternative to MILENAGE introduced in 3GPP Release 11, based on the Keccak (SHA-3) algorithm. Recommended for operators deploying 5G Standalone (SA) networks requiring enhanced cryptographic security.

Privacy and Closed Network Operation

One of the most important characteristics of custom SIM cards for private LTE networks is deliberate roaming restriction.

Public carrier SIM cards are designed to roam—to authenticate on partner networks when the subscriber travels outside the home network’s coverage area. For private LTE networks, this is completely inappropriate. Your network is closed, your subscriber base is controlled, and there is no billing infrastructure to handle external roaming charges.

At HKCARD, we configure custom SIM cards to be network-locked to your specific PLMN (Public Land Mobile Network) identifier. This means:

• Devices with your custom SIM cards can only attach to your private network.
• Roaming onto public carrier networks is disabled by default.
• Unauthorized devices cannot access your network even if they are physically within coverage.
• Your network remains secure and operationally predictable.

This closed-network approach is ideal for:

• Campus and facility security networks
• Industrial IoT and M2M deployments
• CCTV and surveillance infrastructure
• Disaster recovery and emergency communications
• Military and government closed networks

Custom Branding: Your Identity on Every Card

A SIM card is often the only physical component of your network that your end users or field technicians actually handle. At HKCARD, we offer complete custom branding on both sides of every SIM card:

Front Side:

• Company logo and name
• Network name and branding colors
• IMSI number or custom subscriber identifier
• QR codes or activation instructions

Rear Side:

• Installation instructions for field technicians
• Technical support contact information
• Compliance and certification marks
• Batch or lot identification

This branding capability is particularly valuable for enterprise deployments, where field technicians need to quickly identify which SIM card belongs to which network, and for managed service providers who maintain multiple customer networks simultaneously.

SIM Card Form Factors: Matching Your Hardware

SIM cards have evolved significantly since their introduction in 1991. Today, operators must navigate multiple physical standards to ensure compatibility with their device ecosystem. Here is a complete reference:

Choosing the Right Form Factor for Your Deployment:

Mini-SIM (2FF): The most common format for outdoor CPE devices, desktop routers, and MiFi units. Many private LTE networks use 2FF SIMs because the majority of industrial and enterprise CPE hardware supports this format. Our 2FF cards can be supplied in a 3-in-1 snap-out design, allowing field technicians to use the same card across 2FF, 3FF, and 4FF devices.

Micro-SIM (3FF): Common in mid-generation smartphones and tablets. Still widely used in enterprise devices manufactured between 2010-2018.

Nano-SIM (4FF): The current standard for modern smartphones and many cellular IoT modules. Required for all recent flagship devices.

Embedded SIM (eSIM): Soldered directly onto the device circuit board. Ideal for IoT and M2M deployments where physical SIM swapping is impractical. Available for custom orders (MOQ applies).

Private LTE Use Cases: Who Needs Custom SIM Cards

Industrial Campus Networks
Manufacturing facilities, logistics hubs, and warehouses deploying private LTE for automated guided vehicles (AGVs), inventory tracking, and worker communications. Custom SIM cards ensure only authorized devices connect to the network.

Utility & Infrastructure Monitoring
Power companies, water utilities, and transportation authorities deploying sensor networks across wide geographic areas. Custom SIM cards enable secure, carrier-independent connectivity for critical infrastructure.

CCTV & Physical Security
Security integrators deploying IP cameras and monitoring equipment across campuses, retail environments, or public spaces. Private LTE with custom SIM cards provides interference-resistant, secure connectivity that public WiFi cannot match.

Emergency & Disaster Recovery
Organizations deploying portable LTE infrastructure for emergency response operations. Custom SIM cards ensure that emergency responders can connect immediately, without dependency on public carrier networks that may be congested or damaged.

Military & Government
Closed-network communications for defense and government applications where carrier independence, security, and operational control are non-negotiable requirements.

Mining & Remote Operations
Mining companies and remote facility operators deploying private LTE where public carrier coverage is unavailable. Custom SIM cards programmed to local network parameters enable reliable connectivity in challenging environments.

Ordering Custom SIM Cards: Our Process

At HKCARD ELECTRONICS CO.,LIMITED, we have streamlined the custom SIM card ordering process to minimize lead time and maximize accuracy:

Step 1: Network Planning Consultation
We work with your engineering team to:

• Define your IMSI range and MCC/MNC allocation
• Select the appropriate authentication algorithm (MILENAGE recommended)
• Determine Ki and OPc generation and management procedures
• Confirm form factor requirements for your device ecosystem

Step 2: Profile Design & Artwork

• Design your SIM card branding artwork (front and rear)
• Define the complete SIM profile (services enabled, roaming restrictions, network selection preferences)
• Confirm personalization data ranges and naming conventions

Step 3: Sample Production & Validation

• Produce a small sample batch (typically 10-50 cards)
• Validate against your live or lab network infrastructure
• Confirm authentication, service access, and roaming behavior

Step 4: Bulk Production

• Minimum order quantity: 1,000 units
• Production lead time: typically 2-4 weeks depending on complexity
• Quality assurance testing on every batch
• Serialized delivery with complete provisioning data files

Step 5: Ongoing Supply

• Scheduled re-orders for network growth
• OTA (Over-The-Air) update capability for post-deployment changes
• Dedicated account management for large operators

The Bottom Line

A private LTE or 5G network is only as secure and functional as the SIM cards inside every connected device. Generic carrier SIMs simply do not work. What you need are custom-programmed cards built to your exact network specifications, carrying your brand, and locked to your infrastructure.

At HKCARD ELECTRONICS CO.,LIMITED, we have been manufacturing and personalizing custom SIM cards for private network operators for over a decade. From initial network planning through bulk production and ongoing supply, we are the partner you need to keep your network secure, reliable, and scalable.

Ready to discuss your custom SIM card requirements? Contact our technical team today.

HKCARD ELECTRONICS CO.,LIMITED
📧 Email: byronhan@cardmfg.com
🌐 Website: https://www.cardmfg.com/
📱 WhatsApp / WeChat: +86 158 1737 2512