METHOD AND DEVICE FOR DOWNLOADING PROFILE OF OPERATOR

• US 20160283216A1
• Filed: 06/03/2016
• Published: 09/29/2016
• Est. Priority Date: 12/05/2013
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: GAO, Linyi
• Granted Patent: US 10,114,629 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/40 Security arrangements using identity modules
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data

Abstract

Embodiments of the present invention provide a method and device for downloading a profile of an operator, where one method includes: sending, by a terminal to the SM-DP by using an SM-SR, a request for downloading a profile of an operator, where the download request carries the download certificate, an ID of an eUICC of the terminal, and addressing information of the SM-DP and receiving, by the terminal, the profile of the operator that is sent by the SM-DP by using the SM-SR and is corresponding to the download request, and transmitting the profile of the operator to the eUICC, where the profile of the operator is obtained by the SM-DP according to an identity of the profile of the operator after the SM-DP verifies that the certificate that is for downloading the profile of the operator and is carried in the download request is valid.

Claims

1. A method for downloading a profile of an operator, comprising:

sending, by a terminal to a subscription manager-data preparing (SM-DP) by using a subscription manager-secure routing (SM-SR), a download request for downloading a profile of an operator, wherein the download request carries a certificate for downloading the profile of the operator, an ID of an embedded universal integrated circuit card (eUICC) of the terminal; and

receiving, by the terminal, the profile of the operator that is sent by the SM-DP by using the SM-SR and is associated to the download request, and

transmitting, by the terminal, the profile of the operator to the eUICC, wherein the profile of the operator is obtained by the SM-DP after the SM-DP verifies that the certificate for downloading the profile of the operator is valid.

2. The method for downloading a profile of an operator according to claim 1, the sending, by a terminal to an SM-DP by using a SM-SR, a download request for downloading a profile of an operator comprises:

sending, by the terminal to an SM-SR with which the eUICC registers, the download request for downloading the profile of the operator, wherein the download request further comprises addressing information of the SM-DP, so that after finding the SM-DP according to the addressing information of the SM-DP, the SM-SR forwards, to the SM-DP, the download request that comprises the certificate for downloading the profile of the operator and the ID of the eUICC.

3. The method for downloading a profile of an operator according to claim 2, before the sending, by a terminal to an SM-DP by using a SM-SR, a request for downloading a profile of an operator, the method further comprises:

logging in, by the terminal by using built-in application software of the terminal, to a network platform of the operator, and acquiring, from the network platform, the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator;

or

receiving, by the terminal, the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator, wherein the download certificate and the addressing information are entered by a user;

or

acquiring, by the terminal by scanning a two-dimensional code, the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator.

4. The method for downloading a profile of an operator according to claim 1, before the sending, by a terminal to an SM-DP by using a SM-SR, a request for downloading a profile of an operator, the method further comprises:

reading, by the terminal from the eUICC, the ID of the eUICC and addressing information of an SM-SR with which the eUICC registers, and finding the SM-SR according to the addressing information of the SM-SR; and

generating, by the terminal, the request for downloading the profile of the operator, wherein the download request carries the certificate for downloading the profile of the operator, the ID of the eUICC of the terminal.

5. The method for downloading a profile of an operator according to claim 1, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code;

or

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting metadata of the profile of the operator, wherein the metadata is extracted from the profile of the operator.

6. The method for downloading a profile of an operator according to claim 2, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code;

or

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting metadata of the profile of the operator, wherein the metadata is extracted from the profile of the operator;

wherein the addressing information of the SM-DP is carried in the randomly generated sequence code or the string of encoded data.

7. A method for downloading a profile of an operator, comprising:

receiving, by a subscription manager-data preparing (SM-DP) from a terminal, a download request that is for downloading a profile of an operator and is forwarded by a subscription manager-secure routing (SM-SR), wherein the download request carries an ID of an embedded universal integrated circuit card (eUICC) of the terminal and a certificate for downloading the profile of the operator;

after verifying that the certificate for downloading the profile of the operator is valid, acquiring, by the SM-DP according to an identity of the profile of the operator, the profile of the operator that is stored in the SM-DP and is associated to the download request; and

sending, by the SM-DP by using the SM-SR, the profile of the operator to the eUICC.

8. The method for downloading a profile of an operator according to claim 7, before the receiving, by a SM-DP from a terminal, a request that is for downloading a profile of an operator and is forwarded by a SM-SR, the method further comprises:

receiving and storing, by the SM-DP, the certificate for downloading the profile of the operator and the identity of the profile of the operator, wherein the download certificate and the identity are generated by the operator;

or

generating and storing, by the SM-DP according to a request of the operator, the certificate for downloading the profile of the operator and the identity of the profile of the operator.

9. The method for downloading a profile of an operator according to claim 7, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code;

and

when verifying that a sequence code that is carried in the download request and is used as the download certificate is the same as a sequence code stored in the SM-DP, the SM-DP determines that the certificate that is for downloading the profile of the operator and is carried in the download request is valid.

10. The method for downloading a profile of an operator according to claim 7, wherein:

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting metadata of the operator; and

when metadata obtained after the SM-DP decodes, according to a locally stored decryption key, encoded data carried in the download request is the same as metadata that is of the pro file of the operator and is stored in the SM-DP, the SM-DP determines that the certificate that is for downloading the profile of the operator and is carried in the download request is valid.

11. The method for downloading a profile of an operator according to claim 7, wherein:

the download request further carries the identity of the profile of the operator, and the identity of the profile of the operator is a part of the download certificate or is independent of the download certificate; and

the SM-DP obtains the profile of the operator according to the identity that is of the profile of the operator and is carried in the download request.

12. A terminal, comprising an embedded universal integrated circuit card (eUICC), and further comprising:

an output apparatus, configured to send, to a subscription manager-data preparing (SM-DP) by using a subscription manager-secure routing (SM-SR), a download request for downloading a profile of an operator, wherein the download request carries a certificate for downloading the profile of the operator, an ID of the eUICC; and

an input apparatus, configured to;

receive the profile of the operator that is sent by the SM-DP by using the SM-SR and is associated to the download request, and transmit the profile of the operator to the eUICC, wherein the profile of the operator is obtained by the SM-DP after the SM-DP verifies that the certificate for downloading the profile of the operator.

13. The terminal according to claim 12, an output apparatus, configured to send, to a subscription manager-data preparing (SM-DP) by using a subscription manager-secure routing (SM-SR), a download request for downloading a profile of an operator, comprising:

the output apparatus, configured to send, to the SM-SR with which the eUICC registers, the download request for downloading the profile of the operator, wherein the download request further comprises addressing information of the SM-DP, so that after finding the SM-DP according to the addressing information of the SM-DP, the SM-SR forwards, to the SM-DP, the download request that comprises the certificate for downloading the profile of the operator and the ID of the eUICC.

14. The terminal according to claim 12, wherein the terminal further comprises a processor, configured to log in to a network platform of the operator by using built-in application software of the terminal;

and acquire, from the network platform, the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator;

or

the input apparatus is further configured to receive the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator, wherein the download certificate and the addressing information are entered by a user;

or acquire, by scanning a two-dimensional code, the download certificate used to download the profile of the operator and the addressing information of the SM-DP that stores the profile of the operator.

15. The terminal according to claim 12, wherein the terminal further comprises a processor, configured to:

read, from the eUICC, the ID of the eUICC and addressing information of an SM-SR with which the eUICC registers; and

find the SM-SR according to the addressing information, and

generate the request for downloading the profile of the operator, and transmit the generated download request to the sending module, wherein the download request carries the certificate for downloading the profile of the operator, the ID of the eUICC of the terminal, and the addressing information of the SM-DP.

16. The terminal according to claim 12, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code;

or

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting metadata of the operator, wherein the metadata is extracted from the profile of the operator.

17. The terminal according to claim 13, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code;

or

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting metadata of the operator, wherein the metadata is extracted from the profile of the operator.

wherein the addressing information of the SM-DP is carried in the randomly generated sequence code or the string of encoded data.

18. A subscription manager-data preparing (SM-DP), comprising:

an input apparatus, configured to receive, from a terminal, a download request that is for downloading a profile of an operator and is forwarded by a subscription manager-secure routing (SM-SR), wherein the download request carries an ID of an embedded universal integrated circuit card (eUICC) of the terminal and a certificate for downloading the profile of the operator;

a processor, configured to;

after verifying that the certificate for downloading the profile of the operator is valid, acquire, according to an identity of the profile of the operator, the profile of the operator that is stored in the SM-DP and is associated to the download request; and

an output apparatus, configured to send, by using the SM-SR, the acquired profile of the operator to the eUICC.

19. The SM-DP according to claim 18, wherein:

the input apparatus is further configured to receive the certificate for downloading the profile of the operator and the identity of the profile of the operator, wherein the download certificate and the identity are generated by the operator;

or

the processor is further configured to generate, according to a request of the operator, the certificate for downloading the profile of the operator and the identity of the profile of the operator;

wherein the SM-DP further comprises a memory, configured to store the certificate for downloading the profile of the operator and the identity of the profile of the operator

20. The subscription manager-data preparing SM-DP according to claim 18, wherein the certificate for downloading the profile of the operator is a randomly generated sequence code, and

when verifying that a sequence code that is carried in the download request and is used as the download certificate is the same as a sequence code stored in the SM-DP, the profile management module determines that the certificate that is for downloading the profile of the operator and is carried in the download request is valid;

or

the certificate for downloading the profile of the operator is a string of encoded data generated by encrypting the ICCID, and

when metadata obtained after the profile management module decodes, according to a locally stored decryption key, encoded data carried in the download request is the same as metadata that is of the profile of the operator and is stored in the SM-DP, the profile management module determines that the certificate that is for downloading the profile of the operator and is carried in the download request is valid.