Method and apparatus for providing profile

A method performed by a profile providing server in a wireless communication system, the method comprising:

• receiving, from a terminal, a first message including a universal integrated circuit card (UICC) challenge;
• transmitting, to the terminal, a second message including a profile providing server challenge and a first signature associated with the profile providing server, wherein the first signature associated with the profile providing server is computed using a private key of the profile providing server for data including the profile providing server challenge and the UICC challenge;
• receiving, from the terminal, a third message including a second signature of a UICC of the terminal, the profile providing server challenge, and profile mapping information, in case that the first signature associated with the profile providing server is successfully verified, wherein the second signature of the UICC of the terminal is computed based on data including the profile providing server challenge and the profile mapping information;
• verifying a profile based on the profile mapping information;
• transmitting, to the terminal, a fourth message including profile metadata of the verified profile and a third signature of the profile providing server;
• receiving, from the terminal, a fifth message for requesting a profile package, wherein the fifth message includes a fourth signature of the UICC of the terminal;
• and
• transmitting, to the terminal, a sixth message including an encrypted profile package and information included in the profile metadata.

A terminal in a wireless communication system, the terminal comprising:

• a transceiver;
• and
• a controller configured to:
• transmit, to a profile providing server via the transceiver, a first message including a universal integrated circuit card (UICC) challenge,
• receive, from the profile providing server via the transceiver, a second message including a profile providing server challenge and a first signature associated with the profile providing server, wherein the first signature associated with the profile providing server is computed using a private key of the profile providing server for data including the profile providing server challenge and the UICC challenge,
• verify the first signature associated with the profile providing server,
• transmit, to the profile providing server via the transceiver, a third message including a second signature of the UICC of the terminal, the profile providing server challenge, and profile mapping information, in case that the first signature associated with the profile providing server is successfully verified, wherein the second signature of the UICC of the terminal is computed based on data including the profile providing server challenge and the profile mapping information,
• receive, from the profile providing server via the transceiver, a fourth message including profile metadata corresponding to the profile mapping information and a third signature of the profile providing server,
• transmit, to the profile providing server via the transceiver, a fifth message for requesting a profile package, wherein the fifth message includes a fourth signature of the UICC of the terminal, and
• receive, from the profile providing server via the transceiver, a sixth message including an encrypted profile package and information included in the profile metadata.

A profile providing server in a wireless communication system, the profile providing server comprising:

• a transceiver;
• and
• a controller configured to:
• receive, from a terminal via the transceiver, a first message including a universal integrated circuit card (UICC) challenge,
• transmit, to the terminal via the transceiver, a second message including a profile providing server challenge and a first signature associated with the profile providing server, wherein the first signature associated with the profile providing server is computed using a private key of the profile providing server for data including the profile providing server challenge and the UICC challenge,
• receive, from the terminal via the transceiver, a third message including a second signature of a UICC of the terminal, the profile providing server challenge, and profile mapping information, in case that the first signature associated with the profile providing server is successfully verified, wherein the second signature of the UICC of the terminal is computed based on data including the profile providing server challenge and the profile mapping information,
• verify a profile based on the profile mapping information,
• transmit, to the terminal via the transceiver, a fourth message including profile metadata of the verified profile and a third signature of the profile providing server,
• receive, from the terminal via the transceiver, a fifth message for requesting a profile package, wherein the fifth message includes a fourth signature of the UICC of the terminal, and
• transmit, to the terminal via the transceiver, a sixth message including an encrypted profile package and information included in the profile metadata.