Technique for managing profile in communication system

Patent metadata

Field	Value
Publication number	US-2020052907-A1
Application number	US-201916594752-A
Country	US
Kind code	A1
Filing date	Oct 7, 2019
Priority date	Apr 13, 2015
Publication date	Feb 13, 2020
Grant date	—

Abstract

Disclosed are: a communication technique and a system therefor for fusing, with IoT technology, a 5G communication system for supporting a data transmission rate higher than that of a 4G system. Provided is a method for installing a profile of a terminal having an embed universal integrated circuit card (eUICC) in a mobile communication system, the method comprising: requesting for an eUICC authentication certificate to an eUICC and receiving the eUICC authentication certificate; and transferring a profile package to the eUICC so as to install a profile, wherein the received eUICC authentication certificate further comprises an eUICC manufacturer (EUM) authentication certificate.

First claim

What is claimed:

1 . A method of a terminal having a local profile assistant (LPA) and an embedded universal integrated circuit card (eUICC) in a mobile communication system, the method comprising:
transmitting, by the LPA, a first message including first information of the eUICC and an eUICC challenge to a server; receiving, by the LPA, a first response message including at least one certificate of the server from the server; transmitting, by the LPA, the at least one certificate of the server to the eUICC; receiving, by the LPA, second information of the eUICC including a signature value of the eUICC; transmitting, by the LPA, a second message including the second information of the eUICC to the server; receiving, by the LPA, a second response message including a profile package from the server; and transmitting, by the LPA, the profile package to the eUICC to install the profile package.

2 . The method of claim 1 , further comprising:
transmitting, by the LPA, a request for the first information of the eUICC to the eUICC; and receiving, by the LPA, the first information of the eUICC from the eUICC in response to the request for the first information.

3 . The method of claim 1 , further comprising:
transmitting, by the LPA, a request for the eUICC challenge to the eUICC; and receiving, by the LPA, the eUICC challenge from the eUICC in response to the request for the eUICC challenge.

4 . The method of claim 1 , further comprising:
establishing, by the LPA, a hyper text transfer protocol over secure socket layer, HTTPs, connection with the server.

5 . The method of claim 1 , wherein the second information further includes an eUICC manufacturer (EMI) certificate and an eUICC certificate.

6 . The method of claim 1 , wherein the first response message further includes a transaction ID for identifying a profile download session.

7 . The method of claim 6 , wherein the transaction ID is delivered to the eUICC, along with the at least one certificate of the server.

8 . A terminal in a mobile communication system, the terminal comprising:
an embedded universal integrated circuit card, eUICC; a transceiver; and a processor coupled with the transceiver and configured to:
control the transceiver to transmit a first message including first information of the eUICC and an eUICC challenge to a server;
receive, via the transceiver, a first response message including at least one certificate of the server from the server;
control the transceiver to transmit the at least one certificate of the server;
receive, via the transceiver, second information of the eUICC including a signature value of the eUICC;
control the transceiver to transmit a second message including the second information of the eUICC to the server;
receive, via the transceiver, a second response message including a profile package in response to the second message from the server; and
transmit the profile package to the eUICC to install the profile package.

9 . The terminal of claim 8 , the processor is further configured to:
transmit a request for the first information of the eUICC to the eUICC; and receive the first information of the eUICC from the eUICC in response to the request for the first information.

10 . The terminal of claim 8 , the processor is further configured to:
transmit a request for the eUICC challenge to the eUICC; and receive the eUICC challenge from the eUICC in response to the request for the eUICC challenge.

11 . The terminal of claim 8 , wherein the second information further includes an eUICC manufacturer (EMI) certificate and an eUICC certificate.

12 . The terminal of claim 8 ,
wherein the first response message further includes a transaction ID for identifying a profile download session, and wherein the transaction ID is delivered to the eUICC, along with the at least one certificate of the server.

13 . A method of a server in a mobile communication system, the method comprising:
receiving, from a terminal, a first message including an embedded universal integrated circuit card (eUICC) challenge of an eUICC included in the terminal and first information of the eUICC; transmitting, to the terminal, a first response message including at least one certificate of the server; receiving, from the terminal, a second message including a signature value of the eUICC; and transmitting, to the terminal, a second response message including a profile package.

14 . The method of claim 13 , further comprising:
determining whether an address of the server included in the first message is valid; and determining whether an encryption key information included in the first message is supportable by the server.

15 . The method of claim 13 , further comprising:
checking whether an eUICC manufacturer (EUM)certificate and an eUICC certificate included in the second message is valid.

16 . The method of claim 15 , wherein the eUICC certificate is used to verify the signature value of the eUICC included in the second message.

17 . A server in a mobile communication system, the server comprising:
a transceiver; and a processor coupled with the transceiver and configured to:
receive, from a terminal, a first message including an embedded universal integrated circuit card (eUICC) challenge of an eUICC included in the terminal and first information of the eUICC;
control the transceiver to transmit, to the terminal, a first response message including at least one certificate of the server;
receive, from the terminal via the transceiver, a second message including a signature value of the eUICC; and
control the transceiver to transmit, to the terminal, a second response message including a profile package.

18 . The server of claim 17 , wherein the processor is further configured to:
determine whether an address of the server included in the first message is valid; and determine whether an encryption key information included in the first message is supportable by the server.

19 . The server of claim 17 , wherein the processor is further configured to:
determine whether an eUICC manufacturer (EUM) certificate and an eUICC certificate included in the second message is valid.

20 . The server of claim 19 , wherein the eUICC certificate is used to verify the signature value of the eUICC included in the second message.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Park Jong-Han
• Lee Duc-Key
• Lee Sang-Soo
• Yeoum Tae-Sun
• Lee Hye-Won

Classifications

• H04L9/3247

  involving digital signatures · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/3263 Primary

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04W12/06 Primary

  Authentication · CPC title