METHOD AND APPARATUS FOR DOWNLOADING PROFILE ON EMBEDDED UNIVERSAL INTEGRATED CIRCUIT CARD OF TERMINAL

• US 20170142121A1
• Filed: 11/14/2016
• Published: 05/18/2017
• Est. Priority Date: 11/13/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LEE, Duckey, LEE, Hye-Won, PARK, Jong-Han, LEE, Sang-Soo
• Granted Patent: US 10,182,060 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A method for downloading a profile on an embedded universal integrated circuit card (eUICC) of a terminal is provided. The method includes transmitting a profile request containing eUICC authentication information to a profile providing server through a security channel, upon receiving, from the profile providing server, profile-related information generated in response to the profile request, displaying non-encrypted profile information contained in the profile-related information on a screen, identifying whether a user input indicating whether to proceed to download the profile is detected, and downloading the profile, corresponding to the identified user input.

Claims

1. A method for downloading a profile on an embedded universal integrated circuit card (eUICC) of a terminal, the method comprising:

transmitting a profile request containing eUICC authentication information to a profile providing server through a security channel;

upon receiving, from the profile providing server, profile-related information generated in response to the profile request, displaying non-encrypted profile information contained in the profile-related information on a screen;

identifying whether a user input indicating whether to proceed to download the profile is detected; and

downloading the profile, corresponding to the identified user input.

2. The method of claim 1, further comprising:

when the user input indicates to download the profile, generating first encryption information for the profile and transmitting the encryption information to the profile providing server; and

upon receiving a profile installation package containing an encrypted profile from the profile providing server, decoding and storing the encrypted profile based on encryption-related information obtained from the profile installation package,

wherein the encryption-related information contains second encryption information for the profile that is generated by the profile providing server based on the first encryption information.

3. The method of claim 2, wherein the eUICC authentication information includes at least one of a profile identifier, identifiers of a packaged eUICC and the profile providing server, an eUICC certificate, terminal information, a remaining storage space of the eUICC, and a firmware version.

4. The method of claim 1, wherein the terminal information includes at least one of a storage space of the terminal, a firmware version, an operating system (OS) version, a terminal identifier, and modem information for the terminal.

5. The method of claim 1, wherein the profile information includes at least one of the non-encrypted profile information, a character string generated by the profile providing server, a profile identifier, and authentication information for the profile providing server.

6. A method for providing by a server a profile for an embedded universal integrated circuit card (eUICC), the method comprising:

when receiving a profile request containing eUICC authentication information from a terminal through a security channel, generating profile-related information containing non-encrypted profile information and transmitting the profile-related information to the terminal in response to the profile request;

identifying whether a request for proceeding to download the non-encrypted profile information contained in the profile-related information is received from the terminal; and

upon receiving the request for proceeding to download, transmitting encrypted profile information to the terminal.

7. The method of claim 6, further comprising:

obtaining first encryption information for the profile generated by the terminal from the request for proceeding to download; and

generating second encryption information for the profile based on the first encryption information and encrypting the profile based on the second encryption information.

8. The method of claim 6, wherein the eUICC authentication information includes at least one of a profile identifier, identifiers of a packaged eUICC and the profile providing server, an eUICC certificate, terminal information, a remaining storage space of the eUICC, and a firmware version.

9. The method of claim 8, wherein the terminal information includes at least one of a storage space of the terminal, a firmware version, an operating system (OS) version, a terminal identifier, and modem information for the terminal.

10. The method of claim 6, wherein the profile information includes at least one of the non-encrypted profile information, a character string generated by the profile providing server, a profile identifier, and authentication information for the profile providing server.

11. A terminal downloading a profile on an embedded universal integrated circuit card (eUICC), the terminal comprising:

a transceiver configured to transmit a profile request containing eUICC authentication information to a profile providing server through a security channel;

a display configured to, upon receiving, from the profile providing server, profile-related information generated in response to the profile request, display non-encrypted profile information contained in the profile-related information on a screen; and

a processor configured to;

identify whether a user input indicating whether to proceed to download the profile is detected, and

download the profile, corresponding to the identified user input.

12. The terminal of claim 11, wherein, when the user input indicates to download the profile, the processor is configured to:

generate first encryption information for the profile,

control the transceiver to transmit the encryption information to the profile providing server, and

upon receiving a profile installation package containing an encrypted profile from the profile providing server, decode and store the encrypted profile based on encryption-related information obtained from the profile installation package,

wherein the encryption-related information contains second encryption information for the profile that is generated by the profile providing server based on the first encryption information.

13. The terminal of claim 12, wherein the eUICC authentication information includes at least one of a profile identifier, identifiers of a packaged eUICC and the profile providing server, an eUICC certificate, terminal information, a remaining storage space of the eUICC, and a firmware version.

14. The terminal of claim 11, wherein the terminal information includes at least one of a storage space of the terminal, a firmware version, an operating system (OS) version, a terminal identifier, and modem information for the terminal.

15. The terminal of claim 11, wherein the profile information includes at least one of the non-encrypted profile information, a character string generated by the profile providing server, a profile identifier, and authentication information for the profile providing server.

16. A server providing a profile for an embedded universal integrated circuit card (eUICC), the server comprising:

a transceiver configured to, upon receiving a profile request containing eUICC authentication information from a terminal through a security channel, generate profile-related information containing non-encrypted profile information, and transmit the profile-related information to the terminal in response to the profile request; and

a processor configured to;

identify whether a request for proceeding to download the non-encrypted profile information contained in the profile-related information is received from the terminal, and

upon receiving the request for proceeding to download, control the transceiver to transmit encrypted profile information to the terminal.

17. The server of claim 16, wherein the processor is configured to:

obtain first encryption information for the profile generated by the terminal from the request for proceeding to download,

generate second encryption information for the profile based on the first encryption information, and

encrypt the profile based on the second encryption information.

18. The server of claim 16, wherein the eUICC authentication information includes at least one of a profile identifier, identifiers of a packaged eUICC and the profile providing server, an eUICC certificate, terminal information, a remaining storage space of the eUICC, and a firmware version.

19. The server of claim 18, wherein the terminal information includes at least one of a storage space of the terminal, a firmware version, an operating system (OS) version, a terminal identifier, and modem information for the terminal.

20. The server of claim 16, wherein the profile information includes at least one of the non-encrypted profile information, a character string generated by the profile providing server, a profile identifier, and authentication information for the profile providing server.