METHOD AND DEVICE FOR INSTALLING PROFILE OF EUICC

• US 20170155507A1
• Filed: 07/10/2015
• Published: 06/01/2017
• Est. Priority Date: 07/17/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LEE, Duckey, CHO, Songyean, PARK, Jonghan, LEE, Sangsoo
• Granted Patent: US 10,476,671 B2
• Time in Patent Office: Days
• CPC Class Codes: H04B 1/3816 Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/42 using virtual identity modules
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 88/18 Service support devices; Network management devices

Abstract

The present disclosure relates to a method and a device for installing a profile of an embedded universal integrated circuit boards (eUICC) and, more particularly, to a method and a device for remotely installing mobile communication subscriber information (profile) substituting for a universal integrated circuit boards (UICC), on a security module. The present disclosure relate to a method and a device for installing a profile of an eUICC of a network device, the method comprising the steps of: acquiring at least one of or more profiles encrypted with a first password key and one or more first password keys encrypted with a second password key; and when profile installation for the eUICC starts, transmitting to, at least one eUICC, the one or more encrypted profiles and the one or more encrypted first password keys, wherein the first password key is re-encrypted by the first password key with a third password key and transmitted to the one or more eUICCs and the encrypted profiles are decrypted by the first password key and installed on the one or more eUICCs, respectively.

Claims

1. A method for installing a profile of an eUICC (embedded Universal Integrated Circuit Card) of a networks device, the method comprising:

acquiring at least one profile encrypted with a first password key and at least one first password key encrypted with a second password key; and

transmitting the at least one encrypted profile and the at least one encrypted first password key to at least one eUICC when profile installation for the eUICC starts,

wherein the first password key is re-encrypted by the first password key with a third password key and transmitted to the at least one eUICC and the encrypted profiles are decrypted by the first password key and installed in the at least one eUICC, respectively.

2. The method of claim 1, wherein acquiring comprises:

receiving at least one profile encrypted with the at least one first password key and the at least one first password key encrypted with a second from a profile providing server (SM-DP;

Subscription Manager Data Preparation).

3. The method of claim 2, wherein transmitting comprises:

decrypting the at least one first password key encrypted with the second password key;

encrypting the at least one first password key decrypted with the third password key; and

transmitting the at least one first password key encrypted with the third password key and the at least one profile encrypted with the at least one first password key to the eUICC.

4. The method of claim 1, wherein acquiring comprises:

receiving at least one profile encrypted with a second password key from an SM-DP;

decrypting the at least one profile encrypted with the second password key;

generating the at least one first password key; and

encrypting the at least one decrypted profile with the at least one first password key.

5. The method of claim 4, wherein transmitting comprises:

transmitting the at least one profile encrypted with the at least one first password key and the at least one first password key to the SM-DP, and

wherein the at least one first password key is encrypted with the third password key by the SM-DP and transmitted to the at least one eUICC.

6. The method of claim 5, wherein the at least one profile encrypted with the at least one first password key is transmitted to the at least one eUICC in an APDU (Application Protocol Data Unit) type.

7. The method of claim 1, wherein acquiring comprises:

receiving the at least one profile encrypted with the at least one first password key from an SM-DP.

8. The method of claim 7, wherein transmitting comprises:

transmitting an eUICC list for installing profiles to the SM-DP;

receiving the at least one first password key encrypted with the third password ley from the SM-DP; and

transmitting the at least one first password key encrypted with the third password key and the at least one profile encrypted with the at least one first password key to the at least one eUICC included in the eUCC list.

9. The method of claim 1, wherein the at least one first password key is a random key generated for encrypting at least one profile corresponding to the at least one profile.

10. The method of claim 1, wherein the third password key is a session key generated for encrypting the at least one first password key corresponding to the at least one eUICC.

11. A method for installing a profile of an eUICC (embedded Universal Integrated Circuit Card) of an SM-DP (Subscription Manager Data Preparation), the method comprising:

transmitting at least one of at least one encrypted profile and at least one first password key for encrypting the at least one profile to a network device,

wherein the at least one encrypted profile and the at least one first password key are transmitted to at least one eUICC when profile installation for the eUICC starts, and

wherein the at least one first password key is transmitted to the at least one eUICC by encrypting with a third password key and the at least one encrypted profile is transmitted to the at least one eUICC by decrypting with the at least one first password key.

12. The method of claim 11, wherein transmitting comprises:

transmitting at least one profile encrypted with the at least one first password key and the at least one first password key encrypted with a second password key to the network device.

13. The method of claim 11, wherein transmitting comprises:

transmitting at least one profile encrypted with a second password key to the network device;

receiving the at least one profile encrypted with the at least one first password key and the at least one first password key from the network device; and

transmitting the at least one first password key to the at least one eUICC by encrypting with the third password key.

14. The method of claim 14, wherein transmitting further comprises:

transmitting the at least one profile encrypted with the at least one first password key to the at least one eUICC.

15. A network device for installing a profile of an eUICC (embedded Universal Integrated Circuit Card), the network device comprising:

a communication unit configured to perform data communication;

an encryption device configured to perform encryption and decryption; and

a storage device configured to acquire at least one encrypted profile and at least one first password for encrypting the at least one profile,

wherein the communication unit transmits the at least one encrypted profile and the at least one first password key to at least one eUICC if profile installation for the eUICC starts,

wherein the encryption device transmits the at least one first password key to the at least one eUICC by encrypting with a third password key, and

wherein the at least one encrypted profile is installed in the at least one eUICC by decrypting with the at least one first password key.

16. The network device of claim 15,

wherein the storage device receives at least one profile encrypted with the at least one first password key and the at least one first password key encrypted with a second password key from a profile providing server (SM-DP;

Subscription Manager Data Preparation), and

wherein the encryption device decrypts the at least one first password key encrypted with the second password key, encrypts the at least one first password key decrypted with the third password key, and transmits the at least one first password key encrypted with the third password key and the at least one profile encrypted with the first password key to the eUICC.

17. The network device of claim 15,

wherein the storage device receives at least one profile encrypted with a second password key from an SM-DP;

wherein the encryption device decrypts at least one profile encrypted with the second password key, generates the at least one first password key, encrypts the at least one decrypted profile with the at least one first password key, and transmits the at least one profile encrypted with the at least one first password key and the at least one first password key to the SM-DP; and

wherein the at least one first password key is encrypted with the third password key by the SM-DP and transmitted to the at least one eUICC.

18. The network device of claim 15, wherein the network device receives the at least one profile encrypted with the at least one first password key from a SM-DP, transmits an eUICC list for installing profiles to the SM-DP, receives the at least one first password key encrypted with the third password key from the SM-DP, and transmits the at least one first password key encrypted with the third password key and the at least one profile encrypted with the at least one first password key to the at least one eUICC included in the eUICC list.

19. An SM-DP (Subscription Manager Data Preparation) server for installing a profile of an eUICC (embedded Universal Integrated Circuit Card), the SM-DP server comprising:

a communication unit configured to perform data communication; and

a control unit configured to control to transmit at least one of at least one encrypted profile and at least one first password key for encrypting the at least one profile to a network device,

wherein the at least one encrypted profile and the at least one first password key are transmitted to at least one eUICC when a profile installation starts for the eUICC, and

wherein the at least one first password key is transmitted to the at least one eUICC by encrypting with a third password key, and the at least one encrypted profile is installed in the at least one eUICC by decrypting with the at least one first password key.

20. The SM-DP server of claim 19, wherein the control unit transmits at least one profile encrypted with the at least one first password key and the at least one first password key encrypted with a second password key to the network device.

21. The SM-DP server of claim 19, wherein the control unit transmits at least one profile encrypted with a second password key to the network device, receives the at least one profile encrypted with the at least one first password key and the at least one first password key from the network device, and transmits the at least one first password key to the at least one eUICC by encrypting with the third password key.

22. The SM-DP server of claim 19, wherein the control unit transmits the at least one profile encrypted with the at least one first password key to the at least one eUICC.