Profile download method and apparatus for use in wireless communication system

A communication method of a terminal, the method comprising:

• transmitting, to a profile provision server, an initial authentication message including a first challenge value for authentication of the profile provision server;
• receiving, from the profile provision server, an initial authentication response message including a first data and a first signature value, wherein the first data includes the first challenge value and a second challenge value for authentication of the terminal, and the first signature value is computed over the first data;
• verifying the first signature value;
• generating a second data including the second challenge value and profile mapping information, and computing a second signature value over the second data;
• transmitting, to the profile provision server, an authentication client message including the second data and the second signature value;
• receiving, from the profile provision server, an authentication client response message including unencrypted information related to a profile and information indicating whether a confirmation code is required for the profile;
• receiving, via a user interface, a confirmation code based on the unencrypted information related to the profile in case that the information indicates the confirmation code is required;
• transmitting, to the profile provision server, a profile download request message including the confirmation code;
• and
• receiving, from the profile provision server, a profile download response message including an encrypted profile data in response to the profile download request message.