PROFILE DOWNLOAD METHOD AND APPARATUS FOR USE IN WIRELESS COMMUNICATION SYSTEM

• US 20170064552A1
• Filed: 08/31/2016
• Published: 03/02/2017
• Est. Priority Date: 08/31/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Hyewon, Park, Jonghan, Lee, Duckey, Lee, Sangsoo
• Granted Patent: US 10,368,240 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A profile downloading method and apparatus is provided for a terminal to download and install a profile in a communication system. The communication method of the terminal includes transmitting a first message including information on a profile to be received from a profile provision server; receiving a second message including information indicating whether an encryption code input is required and a first modified encryption code; generating, when the first modified encryption code is successfully authenticated, a second modified encryption code; transmitting to the profile provision server a third message including information requesting to the profile provision server for the second modified encryption code and profile download, and receiving a fourth message including information on the profile from the profile provision server.

Claims

1. A communication method of a terminal, the method comprising:

transmitting a first message including information on a profile to be received from a profile provision server;

receiving a second message including information indicating whether an encryption code input is required and a first modified encryption code;

generating, when the first modified encryption code is successfully authenticated, a second modified encryption code;

transmitting to the profile provision server a third message including information requesting to the profile provision server for the second modified encryption code and profile download; and

receiving a fourth message including information on the profile from the profile provision server.

2. The method of claim 1, wherein generating the second modified encryption code comprises:

receiving the encryption code input by a user; and

generating the second modified encryption code by performing a hash operation on the encryption code with a predetermined random value.

3. The method of claim 1, wherein generating the second modified encryption code comprises:

receiving the encryption code input by a user;

generating a third modified encryption code by performing a hash operation on the encryption code with a predetermined random value; and

authenticating the first modified encryption code by comparing the first modified encryption code with the third modified encryption code.

4. The method of claim 1, wherein the second message comprises unencrypted profile information, and the fourth message comprises encrypted profile information.

5. A communication method of a profile provision server, the method comprising:

receiving a first message including information on a profile requested by a terminal;

generating a first modified encryption code for use by the terminal in authenticating the profile provision server;

transmitting to the terminal a second message including information indicating whether encryption code input is required and the first modified encryption code;

receiving a third message including a second modified encryption code and information requesting for download of the profile from the terminal; and

transmitting, when the second modified encryption code is authenticated successfully, a fourth message including information on the profile to the terminal.

6. The method of claim 5, wherein generating the first modified encryption code comprises:

receiving an encryption code from an operator; and

generating the first modified encryption code by performing a hash operation on the encryption code with a predetermined random value.

7. The method of claim 5, wherein transmitting the fourth message comprises:

receiving an encryption code from an operator;

generating a third modified encryption code by performing a hash operation on the encryption code with a predetermined random value; and

authenticating the second modified encryption code by comparing the second modified encryption code with the third modified encryption code.

8. The method of claim 5, wherein the second message comprises unencrypted profile information, and the fourth message comprises encrypted profile information.

9. A terminal comprising:

a transceiver for communicating signals with a network entity; and

a control unit which controls transmitting a first message including information on a profile to be received from a profile provision server, receiving a second message including information indicating whether an encryption code input is required and a first modified encryption code, generating, when the first modified encryption code is successfully authenticated, a second modified encryption code, transmitting to the profile provision server a third message including information requesting to the profile provision server for the second modified encryption code and profile download, and receiving a fourth message including information on the profile from the profile provision server.

10. The terminal of claim 9, wherein the control unit controls receiving the encryption code input by a user and generating the second modified encryption code by performing a hash operation on the encryption code with a predetermined random value

11. The terminal of claim 9, wherein the control unit controls receiving the encryption code input by a user, generating a third modified encryption code by performing a hash operation on the encryption code with a predetermined random value, and authenticating the first modified encryption code by comparing the first modified encryption code with the third modified encryption code.

12. The terminal of claim 9, wherein the second message comprises unencrypted profile information, and the fourth message comprises encrypted profile information.

13. A profile provision server comprising:

a transceiver communicating signals with a network entity; and

a control unit which controls receiving a first message including information on a profile requested by a terminal, generating a first modified encryption code for use by the terminal in authenticating the profile provision server, transmitting to the terminal a second message including information indicating whether encryption code input is required and the first modified encryption code, receiving a third message including a second modified encryption code and information requesting for download of the profile from the terminal, and transmitting, when the second modified encryption code is authenticated successfully, a fourth message including information on the profile to the terminal.

14. The profile provisioning server of claim 13, wherein the control unit controls receiving an encryption code from an operator and generating the first modified encryption code by performing a hash operation on the encryption code with a predetermined random value.

15. The profile provision server of claim 13, wherein the control unit controls receiving an encryption code from an operator, generating a third modified encryption code by performing a hash operation on the encryption code with a predetermined random value, and authenticating the second modified encryption code by comparing the second modified encryption code with the third modified encryption code.