What does "has carrier priviliges" means in android 5.1.1

Question

I am trying to develope an android application who communicate with SIM card (Android 5.1.1). When using some methods (example : iccOpenLogicalChannel), they said in documentation that I should have carrier privileges app to use this method, i am wondering what they mean exactly ? May someone tell me how i can get "carrier privileges" ?

Answer 1

There are new APIs in 5.1.1 to allow carrier-developed apps, distributed through Google Play, to perform network provisioning tasks and other functions in the telephony system. Communicating directly with the network interface is now possible via an app with "carrier privileges."

As Google explains:

These APIs provide a secure and flexible way for carrier-developed apps to perform these tasks and be distributed through Google Play. Apps that use these functions must be signed by a certificate that matches the certificate in the device's Universal Integrated Circuit Card (UICC). The carrier service APIs have been added to the TelephonyManager class, the SmsManager class, and the new CarrierMessagingService class. Apps can check for access to these APIs by calling the hasCarrierPrivileges() method. Apps that call these APIs without access receive a SecurityException.

So far what I understand, the carrier privileges are set by the carrier operators and without the certification from the carrier you won't be able to access the methods.

Source: https://developer.android.com/about/versions/android-5.1.html

Answer 2

To put it simply, you can not get a certificate that matches that of a certificate on a UICC/SIM. There are ways to work with the carriers to build applications. If you are interested please feel free to contact me I can guide you through it. I work for T-Mobile on the SIM team and am happy to help!