Method and device for online moving of bundles or profiles between devices

Patent metadata

Field	Value
Publication number	US-12335246-B2
Application number	US-202117911081-A
Country	US
Kind code	B2
Filing date	Mar 16, 2021
Priority date	Mar 16, 2020
Publication date	Jun 17, 2025
Grant date	Jun 17, 2025

Abstract

A first terminal for providing a bundle to a second terminal in a wireless communication system, includes: a transceiver; and at least one processor configured to: obtain information about the bundle to be transmitted to the second terminal; based on bundle transfer configuration information including an indicator indicating whether the first terminal is able to transmit a bundle to another terminal, determine that the first terminal is able to transmit the bundle to the second terminal; generate a bundle transmission code including identification information of the bundle to be transmitted to the second terminal; transmit the generated bundle transmission code to the second terminal; and upload the bundle to be transmitted to the second terminal to a bundle management server.

First claim

The invention claimed is:

1. A first terminal for providing a bundle to a second terminal in a wireless communication system, the first terminal comprising:
a transceiver; and
at least one processor configured to:
obtain information about the bundle to be transmitted to the second terminal;
based on bundle transfer configuration information including an indicator indicating whether the first terminal is able to transmit a bundle to another terminal, determine that the first terminal is able to transmit the bundle to the second terminal;
generate a bundle transmission code including identification information of the bundle to be transmitted to the second terminal;
transmit the generated bundle transmission code to the second terminal;
upload the bundle to be transmitted to the second terminal to a bundle management server:
transmit, to the bundle management server, bundle transfer authentication information including at least one of first smart secure platform (SSP) information of the first terminal, certificate negotiation information for authentication between the first terminal and the bundle management server, or version information of the first SSP; and
receive server authentication information from the bundle management server, based on the transmitted bundle transfer authentication information,
wherein the bundle to be transmitted to the second terminal is installed in the second terminal by being transmitted to the second terminal through the bundle management server.

2. The first terminal of claim 1 , wherein the bundle transfer configuration information comprises at least one of information about a condition required for bundle transmission between the first terminal and the second terminal, or an indicator indicating whether bundle transmission between the first terminal and the second terminal through the bundle management server is allowed.

3. The first terminal of claim 1 , wherein the identification information of the bundle comprises at least one of an identity (ID), a bundle family ID (Fid), or a bundle family custodian object ID (Oid) of the bundle to be transmitted to the second terminal, and
the bundle transmission code further comprises at least one of information related to an attribute of the bundle to be transmitted to the second terminal, an address of the bundle management server, information for connecting the first terminal and the second terminal, or encryption algorithm information supported by the first terminal.

4. The first terminal of claim 1 , wherein the at least one processor is further configured to:
transmit, to the bundle management server, first terminal authentication information and a bundle ID of the bundle to be transmitted to the second terminal, based on the received server authentication information;
receive a bundle request message from the bundle management server, in response to the bundle management server determining, based on the first terminal authentication information, the first terminal as a terminal capable of transmitting the bundle to be transmitted to the second terminal; and
upload the bundle to be transmitted to the second terminal to the bundle management server, based on the received bundle request message.

5. A second terminal for receiving a bundle from a first terminal in a wireless communication system, the second terminal comprising:
a transceiver; and
at least one processor configured to:
receive, from the first terminal, a bundle transmission code including identification information of the bundle to be received by the second terminal;
perform an authentication procedure with a bundle management server, based on the received bundle transmission code;
transmit, to the bundle management server, information of the bundle to be received, in response to the authentication procedure with the bundle management server being successfully performed;
receive first bundle and first bundle information, in response to the bundle management server determining that a bundle received by the second terminal corresponds to the bundle to be received;
transmit, to the bundle management server, second smart secure platform (SSP) information including certificate negotiation information for authentication between the bundle management server and a second SSP of the second terminal; and
receive, from the bundle management server, server authentication information generated by the bundle management server based on the second SSP information.

6. The second terminal of claim 5 , wherein the identification information of the bundle to be received by the second terminal comprises at least one of an identity (ID), a bundle family ID (Fid), or a bundle family custodian object ID (Oid) of the bundle to be received by the second terminal, and
the bundle transmission code further comprises at least one of information related to an attribute of the bundle to be received by the second terminal, an address of the bundle management server, information for connecting the first terminal to the second terminal, or encryption algorithm information supported by the first terminal.

7. The second terminal of claim 5 , wherein the at least one processor is further configured to:
transmit, to the bundle management server, second terminal information including an ID of the second SSP and an ID of the bundle to be received, based on the server authentication information; and
receive, from the bundle management server, the first bundle and the first bundle information, in response to the bundle management server determining that an ID of the second SSP received from the first terminal and the identification information of the bundle to be received by the second terminal respectively correspond to the ID of the second SSP received from the second terminal and the ID of the bundle to be received.

8. The second terminal of claim 5 , wherein the bundle management server is configured to determine the second terminal as a terminal capable of receiving a bundle from another terminal, based on bundle transfer configuration information, and
the bundle management server is configured to determine the bundle to be received as a bundle capable of being installed in the second terminal.

9. A first terminal for providing a profile to a second terminal in a wireless communication system, the first terminal comprising:
a transceiver; and
at least one processor configured to:
determine a first profile to be transmitted to the second terminal from among profiles installed in the first terminal;
determine that the first profile is capable of being transmitted to the second terminal through a profile management server, based on profile transfer configuration information including an identity (ID) of an embedded universal integrated circuit card (eUICC) of the second terminal;
transmit, to the profile management server, first terminal authentication information including a first profile ID and eUICC ID of the first terminal, in response to verifying the profile management server;
receive a profile request message from the profile management server, in response to the profile management server verifying that the first terminal is using the first profile, by using the first profile ID and eUICC ID of the first terminal;
transmit, to the profile management server, a profile package for the first profile, based on the profile request message;
when the transmitted profile package for the first profile is encoded by the first terminal, decode the profile package for the first profile by using a first public key of the first terminal and a secret key of the second terminal; and
when the transmitted profile package for the first profile is encoded by the profile management server, decode the profile pac

Assignees

• Samsung Electronics Co Ltd

Inventors

• Lim Taehyung
• Koo Jonghoe
• Yoon Kangjin
• Lee Duckey
• Lee Hyewon

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/0442 Primary

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title