Method and apparatus for provisioning profiles

• US 10,075,205 B2
• Filed: 04/16/2015
• Issued: 09/11/2018
• Est. Priority Date: 04/22/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Duckey, Park, Jonghan
• Primary Examiner(s): Shedrick, Charles
• Application Number:
  US14/688,206
• Publication Number:
  US 20150303966A1
• Time in Patent Office: 1,244 Days
• Field of Search: 455466, 455558
• CPC Class Codes: H04B 1/3816 Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Provided is a technique to download and install a profile to a universal integrated circuit without receiving, from a network, an SMS for triggering reception of the profile. Specifically, a terminal according to the present invention comprises a communication unit configured to transmit and receive a signal; a control unit configured to create information for triggering reception of a profile; and a universal integrated circuit card configured to: access a profile management server and receive the profile based on the information using the communication unit, and install the received profile.

Claims

1. A terminal comprising:

a communication unit configured to transmit and receive a signal;

a controller configured to;

generate a virtual short message service (SMS) message, and

transmit the virtual SMS message to the communication unit; and

a universal integrated circuit card configured to;

in response to the controller transmitting the virtual SMS message to the communication unit, receive a profile download triggering signal from the communication unit,

when the profile download triggering signal is received, control the communication unit to access a profile management server and receive a profile from the profile management server based on an internet protocol (IP) address of the profile management server, and

install the received profile.

2. The terminal of claim 1, wherein the IP address of the profile management server is included in the virtual SMS message.

3. The terminal of claim 1, wherein the controller is further configured to generate the virtual SMS message based on at least one of an autonomous determination of the controller for a new profile download, or a reception of a command for the new profile download from at least one of a user interface of the terminal or an external device located at an outside of the terminal.

4. The terminal of claim 1, wherein the controller is further configured to:

identify an identifier of the universal integrated circuit card,

transmit, using the communication unit, a profile download preparation inquiry including the identifier of the universal integrated circuit card to the profile management server, and

receive, using the communication unit, a response of the profile download preparation inquiry including an identifier of the profile from the profile management server.

5. The terminal of claim 1,

wherein the controller and the universal integrated circuit card store an authentication key,

wherein the controller is further configured to encrypt the virtual SMS message using the authentication key, and

wherein the universal integrated circuit card is further configured to certificate and decrypt the virtual SMS message using the authentication key.

6. The terminal of claim 1, wherein the IP address of the profile management server is stored in the universal integrated circuit card.

7. The terminal of claim 1, wherein the universal integrated circuit card is physically embedded in the terminal.

8. A server comprising:

a communication unit configured to transmit and receive a signal; and

a controller configured to;

receive, using the communication unit, a profile download request including an identifier of a universal integrated circuit card, from the universal integrated circuit card of a terminal, wherein the profile download request is transmitted when a profile download triggering signal is transmitted from a communication unit of the terminal to the universal integrated circuit card of the terminal after a virtual short message service (SMS) message generated by a controller of the terminal is transmitted to the communication unit of the terminal, and

transmit, using the communication unit, a profile to the universal integrated circuit card of the terminal based on the identifier of the universal integrated circuit card.

9. The server of claim 8, wherein the controller is further configured to:

receive, before receiving the profile download request from the universal integrated circuit card of the terminal, a profile download preparation inquiry including the identifier of the universal integrated circuit card from the terminal using the communication unit, and

transmit a response of the profile download preparation inquiry including an identifier of the profile to the terminal using the communication unit.

10. The server of claim 8, wherein the controller is further configured to receive, using the communication unit, the profile download request from the terminal based on an IP-based communication network.

11. The server of claim 8, wherein the universal integrated circuit card is physically embedded in the terminal.

12. A method for installing a profile at a terminal including a communication unit, a controller, and a universal integrated circuit card, the method comprising:

generating, by the controller, a virtual short message service (SMS) message;

transmitting the virtual SMS message to the communication unit;

in response to the controller transmitting the virtual SMS message to the communication unit, receiving, by the universal integrated circuit card, a profile download triggering signal from the communication unit;

when the profile download triggering signal is received, accessing, by the universal integrated circuit card, a profile management server and receiving the profile from the profile management server based on an internet protocol (IP) address of the profile management server using the communication unit; and

installing, by the universal integrated circuit card, the received profile.

13. The method of claim 12, wherein the IP address of the profile management server is included in the virtual SMS message.

14. The method of claim 12, wherein the generating, by the controller, of the information comprises:

generating the virtual SMS message based on at least one of an autonomous determination of the controller for a new profile download, or a reception of a command for the new profile download from at least one of a user interface of the terminal or an external device located at an outside of the terminal.

15. The method of claim 12, further comprising:

identifying, by the controller, an identifier of the universal integrated circuit card;

transmitting, by the controller, a profile download preparation inquiry including the identifier of the universal integrated circuit card to the profile management server using the communication unit; and

receiving, by the controller, a response of the profile download preparation inquiry including an identifier of the profile from the profile management server using the communication unit.

16. The method of claim 12,

wherein an authentication key is stored in the controller and the universal integrated circuit card, and

wherein the method further comprises:

encrypting, by the controller, the virtual SMS message using the authentication key, and

certificating and decrypting, by the universal integrated circuit card, the virtual SMS message using the authentication key.

17. The method of claim 12, wherein the IP address of the profile management server is stored in the universal integrated circuit card.

18. The method of claim 12, wherein the universal integrated circuit card is physically embedded in the terminal.

19. A method for providing a profile at a server to a terminal including a universal integrated circuit card, the method comprising:

receiving, using a communication unit, a profile download request including an identifier of the universal integrated circuit card, from the universal integrated circuit card of the terminal, wherein the profile download request is transmitted when a profile download triggering signal is transmitted from a communication unit of the terminal to the universal integrated circuit card of the terminal after a virtual short message service (SMS) message generated by a controller of the terminal is transmitted to the communication unit of the terminal; and

transmitting, using the communication unit, the profile to the universal integrated circuit card of the terminal based on the identifier of the universal integrated circuit card.

20. The method of claim 19, further comprising:

receiving, before receiving the profile download request from the universal integrated circuit card of the terminal, a profile download preparation inquiry including the identifier of the universal integrated circuit card from the terminal using the communication unit; and

transmitting a response of the profile download preparation inquiry including an identifier of the profile to the terminal using the communication unit.

21. The method of claim 19, wherein the receiving of the profile download request from the universal integrated circuit card of the terminal is performed based on an IP-based communication network.

22. The method of claim 19, wherein the universal integrated circuit card is physically embedded in the terminal.