# US 10,768,918 B2 · Method and device for downloading profile of operator > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,768,918 B2 - Document ID: US10768918B2 - Status: Granted - Kind: B2 - Application number: 16/440,387 - Filed: 2019-06-13 - Published: 2019-09-26 - Granted: 2020-09-08 - Earliest claimed: 2013-12-05 - Assignees: Huawei Device Co., Ltd. - Applicants: Huawei Device Co., Ltd. - Inventors: Linyi Gao - Web page: https://patentgrep.com/patent/US10768918B2 ## CPC - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - G06F 8/61: Installation - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 67/303: Terminal profiles - H04W 8/20: Transfer of user or subscriber data - H04W 12/041: Key generation or derivation - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/10: Integrity - H04W 12/106: Packet or message integrity - H04W 12/40: Security arrangements using identity modules - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/126: {the source of the received data} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for downloading a profile of an operator includes sending, by a terminal to a subscription manager-data preparer (SMDP) using a subscription manager-secure router (SM-SR), a request for downloading a profile of an operator, where the download request carries the download certificate, an identifier (ID) of an embedded universal integrated circuit card (eUICC) of the terminal, and addressing information of the SM-DP; and receiving, by the terminal, the profile of the operator that is sent by the SM-DP using the SM-SR and that corresponds to the download request, and transmitting the profile of the operator to the eUICC, where the profile of the operator is obtained by the SM-DP according to an identity of the profile of the operator after the SM-DP verifies that the certificate that is for downloading the profile of the operator and is carried in the download request is valid. ## Claims ### Claim 1 A method of downloading a profile, comprising: scanning a two-dimensional code, by an electronic device, to obtain both a download certificate to download the profile and address information of a subscription manager-data preparer (SM-DP) that stores the profile; sending, by the electronic device, a download request to download the profile to the SM-DP in accordance with the address information, wherein the download request comprises the download certificate and a first identity, and wherein the first identity identifies an embedded universal integrated circuit card (eUICC) in the electronic device or identifies the electronic device; receiving, by the electronic device, the profile from the SM-DP in response to the download request; and communicating, by the eUICC in the electronic device, with a network of an operator using the profile. ### Claim 2 (depends on 1) The method of claim 1, wherein the download certificate comprises a randomly generated sequence code. ### Claim 3 (depends on 1) The method of claim 1, wherein the download certificate comprises a string of encoded data generated by encrypting metadata extracted from the profile. ### Claim 4 (depends on 1) The method of claim 1, wherein the download request further comprises a second identity that uniquely identifies the profile. ### Claim 5 (depends on 4) The method of claim 4, wherein the second identity comprises an integrated circuit card identity (ICCID). ### Claim 6 (depends on 1) The method of claim 1, wherein the first identity that identifies the electronic device comprises an international mobile equipment identity (IMEI). ### Claim 7 (depends on 1) The method of claim 1, wherein the profile comprises at least one of an international mobile subscriber identity (IMSI), a 16-byte key data generated by a card manufacturer, a parameter required in an encryption algorithm, an installation package of an application, or a revision package of an application. ### Claim 8 (depends on 1) The method of claim 1, wherein the eUICC is formed by embedding a universal integrated circuit card (UICC) into the electronic device and cannot be inserted or removed, wherein the profile is associated with an integrated circuit card identity (ICCID) that uniquely identifies the profile, and wherein the download certificate is generated by the operator or the SM-DP. ### Claim 9 (depends on 8) The method of claim 8, wherein the two-dimensional code and the ICCID are comprised on a card that is used to download the profile, and wherein the download certificate is different from the ICCID. ### Claim 10 An electronic device, comprising: an embedded universal integrated circuit card (eUICC); a memory configured to store instructions; and a processor coupled to the eUICC and the memory and configured to execute the instructions to cause the electronic device to: scan a two-dimensional code to obtain both a download certificate to download a profile and address information of a subscription manager-data preparer (SM-DP) that stores the profile; send a download request to download the profile to the SM-DP in accordance with the address information, wherein the download request comprises the download certificate and a first identity, and wherein the first identity identifies the eUICC in the electronic device or identifies the electronic device; receive the profile from the SM-DP in response to the download request; and communicate, by the eUICC in the electronic device, with a network of an operator using the profile. ### Claim 11 (depends on 10) The electronic device of claim 10, wherein the download certificate comprises a randomly generated sequence code. ### Claim 12 (depends on 10) The electronic device of claim 10, wherein the download certificate comprises a string of encoded data generated by encrypting metadata extracted from the profile. ### Claim 13 (depends on 10) The electronic device of claim 10, wherein the download request further comprises a second identity that uniquely identifies the profile. ### Claim 14 (depends on 13) The electronic device of claim 13, wherein the second identity comprises an integrated circuit card identity (ICCID). ### Claim 15 (depends on 10) The electronic device of claim 10, wherein the first identity that identifies the electronic device comprises an international mobile equipment identity (IMEI). ### Claim 16 (depends on 10) The electronic device of claim 10, wherein the profile comprises at least one of an international mobile subscriber identity (IMSI), a 16-byte key data generated by a card manufacturer, a parameter required in an encryption algorithm, an installation package of an application, or a revision package of an application. ### Claim 17 (depends on 10) The electronic device of claim 10, wherein the eUICC is formed by embedding a universal integrated circuit card (UICC) into the electronic device and cannot be inserted or removed, wherein the profile is associated with an integrated circuit card identity (ICCID) that uniquely identifies the profile, and wherein the download certificate is generated by the operator or the SM-DP. ### Claim 18 (depends on 10) The method of claim 10, wherein the two-dimensional code and the ICCID are comprised on a card that is used to download the profile, and wherein the download certificate is different from the ICCID. ### Claim 19 A system, comprising: a subscription manager-data preparer (SM-DP) comprising: a first computer processor; and a first non-transitory storage medium coupled to the first computer processor and configured to store first instructions that are executable by the first computer processor; and an electronic device coupled to the SM-DP and comprising: a second computer processor; and a second non-transitory storage medium coupled to the second computer processor and configured to store second instructions that are executable by the second computer processor to cause the electronic device to: scan a two-dimensional code to obtain both of a download certificate to download a profile and address information of the SM-DP that stores the profile; send a download request to download the profile to the SM-DP in accordance with the address information, wherein the download request comprises the download certificate and a first identity, and wherein the first identity identifies an embedded universal integrated circuit card (eUICC) in the electronic device or identifies the electronic device; receive the profile from the SM-DP in response to the download request; and communicate, by the eUICC in the electronic device, with a network of an operator using the profile. ### Claim 20 (depends on 19) The system of claim 19, wherein the first instructions are executed by the first computer processor to cause the SM-DP to verify whether the download certificate carried in the download request is a valid download certificate. ### Claim 21 (depends on 19) The system of claim 19, wherein the first instructions are executed by the first computer processor to cause the SM-DP to store an identity of another electronic device or a classification identity of the other electronic device that is authorized to download the profile. ### Claim 22 (depends on 19) The system of claim 19, wherein the eUICC is formed by embedding a universal integrated circuit card (UICC) into the electronic device and cannot be inserted or removed, wherein the profile is associated with an integrated circuit card identity (ICCID) that uniquely identifies the profile, and wherein the download certificate is generated by the operator or the SM-DP.