METHOD FOR TRANSFERRING PROFILE AND ELECTRONIC DEVICE SUPPORTING THE SAME

• US 20160241537A1
• Filed: 02/17/2016
• Published: 08/18/2016
• Est. Priority Date: 02/17/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: HWANG, Sun Min, CHA, Soon Hyun, LEE, Sang Soo, YEOUM, Tae Sun
• Granted Patent: US 10,356,070 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A method of transferring a profile by an electronic device and an electronic device supporting the same are provided. The electronic device includes a secure memory that installs and deletes at least one profile, a profile manager module that performs an authentication procedure about a target electronic device based on device information of the target electronic device and profile information of a target profile, when a profile transfer event about a target profile of the at least one profile installed on the secure memory occurs, and a communication interface that transfers the target profile based on an authentication result about the target electronic device.

Claims

1. An electronic device, comprising:

a secure memory that installs and deletes at least one profile;

a profile manager module that performs an authentication procedure about a target electronic device based on device information of the target electronic device and profile information of a target profile, when a profile transfer event about a target profile of the at least one profile installed on the secure memory occurs; and

a communication interface that transfers the target profile based on an authentication result about the target electronic device.

2. The electronic device of claim 1, wherein the profile manager module encrypts the target profile based on the authentication result, and

wherein the communication interface transfers the encrypted target profile.

3. The electronic device of claim 1, wherein the communication interface establishes a secure channel between the target electronic device and the electronic device and transfers the target profile through the secure channel.

4. The electronic device of claim 1, wherein the profile manager module transmits the device information and the profile information to a server and receives the authentication result about the target electronic device from the server.

5. The electronic device of claim 1, wherein the communication interface transfers the target profile or an encrypted target profile to the target electronic device directly or through a server.

6. The electronic device of claim 1, wherein when the profile transfer event occurs, the profile manager module performs the authentication procedure based on a result of determining whether the target electronic device corresponds to a previously authenticated electronic device.

7. The electronic device of claim 1, wherein the profile manager module performs user authentication in transferring the target profile.

8. The electronic device of claim 1, wherein the communication interface transfers user data associated with the target profile together with the target profile.

9. The electronic device of claim 1, wherein the communication interface receives the device information from the target electronic device through a local area network.

10. A second electronic device, comprising:

a secure memory that installs and deletes at least one profile;

a communication interface that transfers device information to a first electronic device and receives a profile; and

a profile manager module that stores the received profile in a secure area, and when the profile is deleted from the first electronic device, installs the profile in the secure memory.

11. The electronic device of claim 10, wherein the communication interface receives the profile encrypted, through a secure channel between the first electronic device and the second electronic device.

12. The electronic device of claim 10, wherein the device information comprises at least one of a unique identifier of the second electronic device, information associated with a security feature of the second electronic device, and manufacturing information of the second electronic device.

13. The electronic device of claim 10, wherein the communication interface further receives user data associated with the profile in addition to the profile, and

wherein the profile manager module adds user data associated with the profile to data of the profile installed in the secure memory.

14. A method for transferring a profile, the method comprising:

detecting an occurrence of a profile transfer event about a profile installed on a secure memory of a first electronic device;

receiving device information from a second electronic device corresponding to a target of the profile transfer event;

performing an authentication procedure about the second electronic device based on the device information and profile information; and

transferring the profile to the second electronic device based on an authentication result about the second electronic device.

15. The electronic device of claim 14, further comprising:

encrypting the profile based on the authentication result,

wherein transferring the profile comprises transferring the encrypted profile.

16. The method of claim 14, further comprising:

establishing a secure channel between the first electronic device and the second electronic device,

wherein transferring the profile comprises transferring the profile through the secure channel.

17. The method of claim 14, wherein performing the authentication procedure comprises:

transmitting the device information and the profile information to a server; and

receiving the authentication result about the second electronic device from the server.

18. The method of claim 14, wherein transferring the profile comprises:

transferring the profile or an encrypted profile to the second electronic device directly or through a server.

19. The method of claim 14, wherein performing the authentication procedure comprises:

determining whether the second electronic device corresponds to a previously authenticated electronic device with respect to the profile.

20. The method of claim 14, further comprising:

transferring user data associated with the profile together with the profile.