# US 2020/0287907 A1 · Method and apparatus for providing profile

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2020/0287907 A1
- Document ID: US20200287907A1
- Status: Published application
- Kind: A1
- Application number: 16/881,673
- Filed: 2020-05-22
- Published: 2020-09-10
- Earliest claimed: 2015-05-07
- Assignees: Samsung Electronics Co., Ltd.
- Applicants: Samsung Electronics Co., Ltd.
- Inventors: Jonghan PARK; Duckey LEE; Hyewon LEE; Sangsoo LEE; Taesun YEOM
- Web page: https://patentgrep.com/patent/US20200287907A1

## CPC

- H04L 63/102: {Entity profiles}
- H04L 63/0281: {Proxies}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 67/30: Profiles
- H04W 8/205: {Transfer to or from user equipment or user record carrier}
- H04W 12/06: Authentication
- H04W 12/08: Access security
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- G06F 8/61: Installation
- H04W 84/042: {Public Land Mobile systems, e.g. cellular systems}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Provided are a communication method and system that integrate 5G communication systems with IoT technologies to support higher data rates after 4G systems. The present disclosure is based on 5G communication technologies and IoT related technologies, and may be applied to intelligent services (e.g. smart homes, smart buildings, smart cities, smart or connected cars, health care, digital education, retail, and security and safety). There is provided a method of profile downloading for a terminal. The method may include: transmitting a first profile download request to a profile providing server; receiving unencrypted first profile information from the profile providing server; checking whether there is an input for consenting to profile downloading after receiving unencrypted profile information; and determining whether to download an encrypted profile on the basis of the check result. There is also provided a terminal capable of performing the above method. In addition, there are provided a profile providing server and an operation method therefor for delivering a profile to the above terminal.

## Claims

### Claim 1

A method of profile download performed by a terminal for provision on a universal integrated circuit card (UICC) of the terminal, the method comprising:
transmitting, to a profile providing server, a message including a UICC challenge;
receiving, from the profile providing server, data and a signature associated with the profile providing server, wherein the signature associated with the profile providing server is computed using a private key and the data includes a profile providing server challenge and the UICC challenge;
verifying the signature associated with the profile providing server;
transmitting, to the profile providing server, a first message including a first signature of the UICC of the terminal and profile mapping information, in case that the signature associated with the profile providing server is successfully verified;
receiving, from the profile providing server, a second message including profile metadata corresponding to the profile mapping information and a first signature of the profile providing server, the profile metadata including an integrated circuit card identity (ICCID) and an operator name;
transmitting, to the profile providing server, a third message for requesting a profile package; and
receiving, from the profile providing server, a fourth message including an encrypted profile package based on the third message.