Apparatus and method for managing virtual subscriber indentity module

A method of managing a SIM of an electronic device that supports a rich execution environment (REE) and a trusted execution environment (TEE) independent of the REE, the method comprising:

• transmitting a SIM order message to a server through a first application executed in the REE;
• obtaining a random value from the server in response to the transmission of the SIM order message;
• transmitting a response message including the random value and a public key, generated by a second application executed in the TEE, to the server;
• receiving encrypted SIM data from the server;
• obtaining a SIM profile from the encrypted SIM data with a private key generated by the second application corresponding to the public key;
• and
• storing the obtained SIM profile in a secure memory area that is accessible by the TEE.

A method of managing a SIM by a server, the method comprising:

• receiving a SIM order message from an electronic device;
• transmitting a random value to the electronic device;
• receiving a response message including a first value and a public key from the electronic device;
• generating encrypted SIM data corresponding to the SIM order message using the public key based on the random value being the same as the first value;
• and
• transmitting the encrypted SIM data to the electronic device.