Definition
eCall (emergency call) is a mandatory in-vehicle system in the European Union. It is automatically or manually triggered when a vehicle experiences a serious accident (such as airbag deployment or collision sensor activation) and sends distress information to the rescue center (PSAP) via the cellular network (112 emergency number). eCall transmits the MSD (Minimum Set of Data): vehicle location, accident time, Vehicle Identification Number (VIN), number of passengers, etc., and establishes a voice channel to help the rescue respond quickly.
Since April 2018, eCall has been mandatory in new EU vehicle models. Similar systems include Russia's ERA-GLONASS and Japan's D-Call. Some domestic automakers also provide similar features (such as SOS emergency call). The system is usually integrated into a T-Box or a standalone eCall module and relies on IoT SIM cards or cellular SIMs for connectivity, ensuring network availability in emergencies.
Technical Features
eCall uses circuit-switched (CS) or IMS voice to ensure voice communication with PSAP. The MSD is in a standardized format, allowing PSAPs to parse it automatically. eCall modules typically have independent power supply and backup antennas, allowing them to operate even when the vehicle is powered off. IoT SIM cards need to support voice functionality and meet cross-border roaming requirements (for exported vehicles).
Use Cases
eCall is applied to passenger vehicles, commercial vehicles exported to the EU, and high-end domestic models. It can be automatically triggered or manually activated to quickly contact rescue services, reducing casualties and shortening response time. SimtoLink provides IoT SIM cards, dedicated APN, real-name verification, cross-border roaming, and IoT connectivity solutions for eCall in-vehicle systems.
Minimum Data Set and the Voice Channel
How the crash message uses the cellular bearer
eCall is not a routine vehicle-status heartbeat. After the crash sensor or airbag signal is valid, the onboard module delivers a fixed-length minimum data set to a public-safety answering point and opens a voice path that can carry a call. The data set usually holds fixed fields: trigger type, time, vehicle identification number, position and heading, and propulsion type. The answering point reads those fields. It does not open a web page. The IoT SIM is the emergency bearer. It must send the packet and also enter circuit-switched or IMS voice. Data alone means the rescue desk cannot hear the scene. Voice alone means the coordinates cannot be plotted automatically. A manual button and an automatic trigger share the same number and the same SIM. The difference is the trigger source, not a separate data-only card.
Compared with the long connection of an infotainment system, this message is short and rare, but it cannot wait. The module often has its own battery and a separate antenna, and after main power is cut it must still search, authenticate, send, and place the call. The subscription therefore has to include the voice capability the emergency call needs. A data-only plan is rejected for the voice bearer on the network side. Coordinates come from the vehicle's own positioning. The SIM does not generate location. Its job is to send the bytes already assembled, and not to let a traffic policy cut the media while the call is up.
SIM conditions for emergency calls on export vehicles
The conditions depend on where the vehicle is sold. In a market that requires the feature, the vehicle must be able to call the local emergency number where the crash happens. Both the bootstrap identity and the operational identity must be allowed to attach in the destination country. Passing only on the factory test network is not enough. If a domestic optional button reaches only the automaker's own desk, it need not use the public emergency number, but the call destination, whether roaming is allowed, and whether non-payment suspends the line must all be written on the activation order. Emergency service should not share the suspend-and-resume rule of an ordinary data pool that can be stopped in bulk. A billing exception would then knock the module offline on the day the call is needed.
On the production line, make one real attach outside the shielded area and check whether the voice codec is rejected and whether data and voice seize the channel from each other. If the backup battery holds only one complete call, the factory test itself drains it. Recharge it before the vehicle leaves, and confirm the module can still power on and search. Vehicle-to-road communication is covered separately under C-V2X. The emergency call does not depend on a roadside unit, and roadside coverage cannot stand in for reachability of the public emergency number.
Attach failure before the backup battery runs out
The usual failure is a green light in the lab and silence at the crash. If the SIM is data-only, the minimum data set may go out while the network refuses the voice channel. Device-SIM binding, or a home-network restriction, locks an export vehicle to the domestic operator, so it cannot register once it crosses the border. Another mistake is sharing a removable SIM between the emergency module and the entertainment head unit. After a crash the SIM slot loosens, and the backup antenna is actually wired to another board.
Field contents can also send rescue the wrong way. The vehicle identification number is still a test number, the occupant count is the default, or the coordinate system does not match what the answering point expects. The call connects, but no vehicle can be dispatched. If the same crash has no trigger suppression, it occupies the line again and again. The go-live record should keep four pieces of evidence: trigger, data set, voice, and hang-up, not only a signal lamp that lit. Also confirm that the number used for the test call was not later treated as a faulty SIM and suspended.
After the vehicle leaves the line, SIM state has to follow the life of the vehicle. A stock vehicle may sit for a long time. If the SIM is suspended under a silence rule, the first crash after delivery finds no network. Inventory policy should exclude the emergency number from automatic suspension, or force a registration at delivery inspection, rather than relying on the production-line record. On a used export or a model change, if the identification number stored in the module is not updated, the data set points at another vehicle. Replacing the communication module replaces the emergency bearer. Voice and data both have to be established again. A pass mark from the old module is not enough. The backup battery has a calendar life. Past that date, even a healthy SIM may lack the energy for one call. That check belongs to module maintenance, not to the usage detail.