METHOD OF PROVIDING MOBILE COMMUNICATION PROVIDER INFORMATION AND DEVICE FOR PERFORMING THE SAME

• US 20180014190A1
• Filed: 09/06/2017
• Published: 01/11/2018
• Est. Priority Date: 05/24/2012
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: KT Corporation
• Inventors: LEE, Hyung Jin, KIM, Kwan Lae, KIM, Joo Young, PARK, Chul Hyun, LEE, Jin Hyoung, JEUNG, Youn Pil
• Granted Patent: US 10,462,667 B2
• Time in Patent Office: Days
• CPC Class Codes: H04B 7/0413 MIMO systems
• CPC Class Codes: H04B 7/0617 for beam forming
• CPC Class Codes: H04B 7/0626 Channel coefficients, e.g. channel state information [CSI]
• CPC Class Codes: H04B 7/0695 using beam selection
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 72/23 in the downlink direction of a wireless link, i.e. towards a terminal
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A method for providing mobile communication provider information and a device for performing the same are disclosed. A terminal having an eUICC receives data, in which mobile communication provider information is capsulized and included, and stores the received data in the eUICC. Therefore, the mobile communication provider information can be transferred by applying the highest security scheme, and duplication of the eUICC due to the exposure of an authentication key by external hacking attacks can be prevented.

Claims

1. An apparatus configured to communicate with a mobile communication network comprising an embedded universal integrated circuit card (eUICC) insertable into the apparatus,

wherein the eUICC comprises a processor configured to:

download a profile package including at least one profile;

obtain profile including an authentication key for authenticating the subscriber or the eUICC by unsecuring the profile package;

store the obtained profile in an embedded universal integrated circuit card (eUICC) of a user terminal; and

authenticate a subscriber or the eUICC with the mobile communication network using the authentication key included in the profile,

wherein security is applied to the profile package.

2. The apparatus of claim 1, wherein the profile further includes at least one of a credential of a mobile network provider (MNO), a network connection file, a file of user information and an applet.

3. The apparatus of claim 2, wherein the network connection file is at least one of an international mobile subscriber identity (IMSI) and a home public land mobile network (HPLMN).

4. The apparatus of claim 1, wherein the processor is further configured to receive the profile package from a subscription manager-secure routing (SM-SR) through an Over the Air (OTA) communication scheme.

5. The apparatus of claim 4, wherein security is applied to the Over the Air (OTA) communication scheme.

6. The apparatus of claim 1, wherein the authentication key is used to generate a message authentication code (MAC), a ciphering key (CK), and an integrity key (IK) which are the parameters for authentication between the mobile communication network and the eUICC of the user terminal.

7. The apparatus of claim 4, wherein the profile package is transferred from a subscription manager-data preparation (SM-DP) to the SM-SR.

8. The apparatus of claim 7, wherein the SM-DP configures the profile package to which security is applied by performing a ciphering process on data to be provided by the mobile communication provider (MNO) to the eUICC.

9. A method of communicating with a mobile communication network comprising:

receiving a profile package including at least one profile;

obtaining profile including an authentication key for authenticating a subscriber or an embedded universal integrated circuit card (eUICC) by unsecuring the profile package;

storing the obtained profile in the eUICC of the user terminal; and

authenticating the subscriber or the eUICC with the mobile communication network using the authentication key included in the profile,

wherein security is applied to the profile package.

10. The method of claim 9, wherein the profile further includes at least one of a credential of a mobile network provider (MNO), a network connection file, a file of user information, and an applet.

11. The method of claim 10, wherein the network connection file is at least one of an international mobile subscriber identity (IMSI) and a home public land mobile network (HPLMN).

12. The method of claim 9, wherein the profile package is transmitted from a subscription manager-secure routing (SM-SR) through an Over the Air (OTA) communication scheme.

13. The method of claim 12, wherein security is applied to the Over the Air (OTA) communication scheme.

14. The method of claim 9, wherein the authentication key is used to generate a message authentication code (MAC), a ciphering key (CK), and an integrity key (IK) which are the parameters for authentication between the mobile communication network and the eUICC of the user terminal.

15. The method of claim 12, wherein the profile package is transferred from a subscription manager-data preparation (SM-DP) to the SM-SR.

16. The method of claim 15, wherein the SM-DP configures the profile package to which security is applied by performing a ciphering process on data to be provided by the mobile communication provider (MNO) to the eUICC.