Method for forming a trust relationship, and embedded UICC therefor

• US 10,462,668 B2
• Filed: 04/25/2018
• Issued: 10/29/2019
• Est. Priority Date: 11/04/2011
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: KT Corporation
• Inventors: Lee, Jin Hyoung
• Primary Examiner(s): Elhag, Magdi
• Application Number:
  US15/962,469
• Publication Number:
  US 20180242153A1
• Time in Patent Office: 552 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

The present invention relates to a method for forming a trust relationship among an MNO, an SM, and an eUICC in a communication system in which the SM is defined as an entity for managing the eUICC, as well as to an embedded UICC therefor.

Claims

1. A method for forming a trust relationship between entities under an embedded Universal Integrated Circuit Card (eUICC) environment, the method comprising:

receiving, by a first entity, trust information and verification information, wherein the verification information is transmitted from a second entity;

verifying, by the first entity, the verification information of the second entity using the trust information;

authenticating, by the first entity, the second entity by verifying the verification information; and

establishing a secure communication channel between the first entity and the second entity,

wherein the first and second entities include at least one of an eUICC, one or more Subscription Managers (SMs), and one or more Mobile Network Operators (MNOs), and

wherein the verification information is generated, by the second entity, using at least one of a hash function computation and a random value.

2. The method of claim 1, wherein the trust information is information assigned to an entity having a right to participate in a trust relationship.

3. The method of claim 1, wherein the verification information is generated with a purpose of certificating each entity.

4. The method of claim 1, wherein the trust information is issued by an authentication organization communicating with the entities.

5. The method of claim 1, wherein the secure communication channel is established based on a transport layer security protocol.

6. The method of claim 1, wherein the Subscription Manager includes one or more Subscription Manager-Secure Routings (SM-SRs) and one or more Subscription Manager-Data Preparations (SM-DPs).

13. The method of claim 1, wherein the verification information is at least one certificate of the second entity.

14. The method of claim 1, wherein the first entity is the eUICC.

15. The method of claim 1, wherein the second entity is a Subscription Manager.

18. The method of claim 1, wherein the second entity is a subscription manager (SM) and the first entity is the eUICC and wherein the verification information is a key or a signature and the trust information is at least one certificate.

7. An embedded Universal Integrated Circuit Card (eUICC) configured to form a trust relationship with an entity under an eUICC environment including at least one entity, the eUICC comprising:

processor configured to receive trust information and verification information, the verification information being transmitted from the entity and to authenticate the entity by verifying the verification information using the trust information,

wherein the eUICC establishes a secure communication channel with the entity, and

wherein the entity includes at least one of one or more Subscription Managers (SMs) and one or more Mobile Network Operators, and

wherein the verification information is generated, by the entity, using at least one of a hash function computation and a random value.

8. The eUICC of claim 7, wherein the trust information is information assigned to an entity having a right to participate in a trust relationship.

9. The eUICC of claim 7, wherein the verification information is generated with a purpose of certificating each entity.

10. The eUICC of claim 7, wherein the trust information is issued by an authentication organization communicating with the at least one entity.

11. The eUICC of claim 7, wherein the secure communication channel is established based on a transport layer security protocol.

12. The eUICC of claim 7, wherein the Subscription Manager includes one or more Subscription Manager-Secure Routings (SM-SRs) and one or more Subscription Manager-Data Preparations (SM-DPs).

16. The eUICC of claim 10, wherein the verification information is at least one certificate of the entity.

17. The eUICC of claim 10, wherein the entity is a Subscription Manager.