Method for managing embedded UICC and embedded UICC, MNO system, provision method, and method for changing MNO using same
AssigneeKt Corporation
InventorsJaemin Park, Jinhyoung Lee
Life of this patent
Estimating the term…
Abstract
The present invention relates to profile access credentials used for encoding profiles in a system comprising an mobile network operator (MNO), a subscription manager (SM), an embedded UICC (eUICC) and the like, that is, a method for storing/managing an eUICC publication key and a corresponding secret or the like inside the eUICC. In addition, the invention also provides a method for transmitting information on profile access credentials inside the eUICC to external entities for encoding and the like.
Claims13
A method of managing key information of an embedded universal integrated circuit card (eUICC), performed in the eUICC interworking with external entities including a mobile network operator (MNO) system and a subscription manager (SM) system, the method comprising:
- the eUICC performing a procedure of checking status and capability with at least one of the external entities;
- the eUICC providing information about its status and capability during the procedure of checking status and capability, wherein the information about its status and capability is key information including information about at least one of a key generation algorithm, a key length, and a key generation manner,
- wherein the MNO is separate from the SM system,
- wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR encrypts the profile which is encrypted using the public key by using a separate management key so that the encrypted profile becomes a double ciphered profile, and
- wherein the MNO separately communicates with the SM-SR and SM-DP via separate channels.
A method of provisioning, performed in an embedded universal integrated circuit card (eUICC) system including a mobile network operator (MNO) system, a subscription manager (SM), and a eUICC interworking with the MNO system and the SM, the method comprising:
- receiving, by the MNO system, PKI key information about a eUICC public key which can encrypt a profile from the eUICC;
- encrypting, by the MNO system or the SM, the profile using the eUICC public key primarily;
- and
- transmitting, by the MNO system, the encrypted profile to the eUICC,
- wherein the SM is separate from the MNO system,
- wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR encrypts the profile which is encrypted using the public key by using a separate management key so that the encrypted profile becomes a double ciphered profile, and
- wherein the MNO separately communicates with the SM-SR and SM-DP via separate channels.
A method of changing MNO, performed in an embedded universal integrated circuit card (eUICC) system including a mobile network operator (MNO) system, a subscription manager (SM), and a eUICC interworking with the MNO system and the SM, the method comprising:
- receiving, by a receiving MNO system, PKI key information about a eUICC public key which can encrypt a profile from the eUICC;
- encrypting, by the receiving MNO system or the SM, the profile using the eUICC public key primarily;
- notifying, by the receiving MNO system, a fact that an MNO is changed, to a donor MNO system, and being certificated, the donor MNO system being a previous system of the eUICC prior to a current MNO;
- requesting, by the receiving MNO system, a second encryption to the SM by transmitting the primarily encrypted profile to the SM, and receiving a secondarily encrypted profile from the SM in response to the request;
- and
- transmitting, by the receiving MNO system, the secondarily encrypted profile to the eUICC,
- wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR encrypts the profile which is encrypted using the public key by using a separate management key so that the encrypted profile becomes a double ciphered profile,
- wherein the MNO separately communicates with the SM-SR and SM-DP via separate channels.
An embedded universal integrated circuit card (eUICC) interworking with external entities including a mobile network operator (MNO) system and a subscription manager (SM) system, wherein the eUICC includes profile access credentials which can decrypt a profile transmitted from one of the external entities, and the eUICC provides key information which is information about its status and capability, and the key information includes information about at least one of a key generation algorithm, a key length, and a key generation manner,
- wherein the SM system is separate from the MNO system,
- wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR encrypts the profile which is encrypted using the public key by using a separate management key so that the encrypted profile becomes a double ciphered profile, and
- wherein the MNO separately communicates with the SM-SR and SM-DP via separate channels.
Dependencies are inferred from the claim text.