Method and apparatus for downloading a profile in a wireless communication system

• US 10,638,314 B2
• Filed: 09/12/2018
• Issued: 04/28/2020
• Est. Priority Date: 04/08/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Park, Jonghan, Lee, Duckey, Yeom, Taesun, Lee, Sangsoo
• Primary Examiner(s): Su, Sarah
• Application Number:
  US16/129,588
• Publication Number:
  US 20190014467A1
• Time in Patent Office: 594 Days
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A method for downloading profiles in a terminal in a wireless communication system include generating and storing an encryption key at a time point, loading the stored encryption key, when receiving profile download start information from a profile providing server, and downloading an encrypted profile for the electronic device from the profile providing server, via the loaded encryption key, and installing the encrypted profile in the electronic device. An electronic device configured to download a profile in a wireless communication system includes a memory, and a controller configured to generate an encryption key at a time point, store the encryption key in the memory, loading the stored encryption key, when receiving profile download start information from a profile providing server, and downloading an encrypted profile for the electronic device from the profile providing server, by using the loaded encryption key, and installing the downloaded profile.

Claims

1. A method of downloading a profile by an electronic device including a transceiver, a processor and a universal integrated circuit card (UICC) in a wireless communication system, the method comprising:

storing, by the UICC, a one-time key pair including a one-time public key of the UICC;

obtaining, by the UICC from the processor after the storing, a command for initiating a download of the profile, the command being received from a profile providing server by the processor;

generating, by the UICC, information for requesting the profile based on the command, wherein the information includes the one-time public key of the UICC and is delivered to the processor;

transmitting, by the processor to the profile providing server, a message including the information generated by the UICC; and

receiving, by the processor from the profile providing server, the profile for the UICC based on the message, the profile being delivered to the UICC.

2. The method of claim 1, wherein the one-time key pair further includes a one-time private key of the UICC, the one-time private key being asymmetric to the one-time public key.

3. The method of claim 1, wherein the one-time public key is used to generate a shared key for an encryption of the profile.

4. The method of claim 1, wherein the profile is installed in the UICC.

5. The method of claim 1, further comprising generating, by the UICC, a new one-time key pair to generate the information, in case that the one-time key pair is not stored in the UICC.

6. An electronic device for downloading a profile in a wireless communication system, the electronic device comprising:

a transceiver configured to transmit and receive a signal;

a processor; and

a universal integrated circuit card (UICC),

wherein the UICC is configured to;

store a one-time key pair including a one-time public key of the UICC,

obtain, from the processor after the storing, a command for initiating a download of the profile,

generate information for requesting the profile based on the command, the information including the one-time public key of the UICC, and

deliver, to the processor, the generated information,

wherein the processor is configured to;

receive, from a profile providing server, the command for initiating the download of the profile,

transmit, to the profile providing server, a message including the information generated by the UICC,

receive, from the profile providing server, the profile for the UICC based on the message, and

deliver, to the UICC, the profile.

7. The electronic device of claim 6, wherein the one-time key pair further includes a one-time private key of the UICC, the one-time private key being asymmetric to the one-time public key.

8. The electronic device of claim 6, wherein the one-time public key is used to generate a shared key for an encryption of the profile.

9. The electronic device of claim 6, wherein the UICC is further configured to install the profile.

10. The electronic device of claim 6, wherein the UICC is further configured to generate a new one-time key pair to generate the information, in case that the one-time key pair is not stored in the UICC.

11. A method of providing a profile by a server in a wireless communication system, the method comprising:

transmitting, to an electronic device, a command for initiating a download of the profile;

receiving, from the electronic device, a message including information for requesting the profile, wherein the information includes a one-time public key of a universal integrated circuit card (UICC) of the electronic device and is generated by the UICC; and

transmitting, to the electronic device, the profile for the UICC based on the message,

wherein a one-time key pair including the one-time public key of the UICC is stored in the UICC of the electronic device prior to the transmitting of the command, and

wherein the information is generated based on the command for initiating the download of the profile, the command being obtained by the UICC after storing of the one-time key pair.

12. The method of claim 11, wherein the one-time key pair further includes a one-time private key of the UICC, the one-time private key being asymmetric to the one-time public key.

13. The method of claim 11, wherein the one-time public key is used to generate a shared key for an encryption of the profile.

14. The method of claim 11, wherein the profile is installed in the UICC.

15. The method of claim 11, wherein a new one-time key pair is generated by the UICC to generate the information, in case that the one-time key pair is not stored in the UICC.

16. A server for providing a profile in a wireless communication system, the server comprising:

a transceiver configured to transmit and receive a signal; and

a controller configured to;

transmit, to an electronic device, a command for initiating a download of the profile,

receive, from the electronic device, a message including information for requesting the profile, wherein the information includes a one-time public key of a universal integrated circuit card (UICC) of the electronic device and is generated by the UICC, and

transmit, to the electronic device, the profile for the UICC based on the message,

wherein an one-time key pair including the one-time public key of the UICC is stored in the UICC of the electronic device prior to the transmitting of the command, and

wherein the information is generated based on the command for initiating the download of the profile, the command being obtained by the UICC after storing of the one-time key pair.

17. The server of claim 16, wherein the one-time key pair further includes a one-time private key of the UICC, the one-time private key being asymmetric to the one-time public key.

18. The server of claim 16, wherein the one-time public key is used to generate a shared key for an encryption of the profile.

19. The server of claim 16, wherein the profile is installed in the UICC.

20. The server of claim 16, wherein a new one-time key pair is generated by the UICC to generate the information, in case that the one-time key pair is not stored in the UICC.