Method for managing profile of Embedded UICC, and Embedded UICC, Embedded UICC-equipped terminal, provision method, and method for changing MNO using same

1. A method of protecting operating profiles transmitted to an embedded universal integrated circuit card (eUICC) from a mobile network operator (MNO) system and a subscription manager (SM), the method comprising: receiving, by the eUICC, an encrypted profile from an external entity; and decrypting the encrypted profile by using a private key stored in and generated by the eUICC or a terminal equipped with the wherein the encrypted profile is encrypted by using a public key of the eUICC, and the private key is profile access credentials or a secret key corresponding to the public key of the eUICC, wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR successively encrypts the profile, which has been encrypted using the public key, by using a separate management key so that the encrypted profile becomes a double ciphered profile, and wherein the encrypted profile is the double ciphered profile, and the eUICC successively decrypts the encrypted profile by using the separate management key and then decrypts the profile, which has been decrypted using the separate management key, by using the private key of the eUICC wherein the private key is dynamically generated at every issuance time.

2. The method of claim 1 , wherein the profile includes at least one information of a provisioning profile for provisioning, an operational profile, MNO credential information or package information comprising MNO credential information, an International Mobile Subscriber Identity (IMSI), the management key such as an UICC OTA key, a GP ISD key, value-added application, and value-added service data.

3. The method of claim 1 , wherein the public key is generated by the eUICC.

4. The method of claim 1 , wherein the eUICC transmits a key generation algorithm, for generating the public key, to the SM.

5. An embedded universal integrated circuit card (eUICC) configured to protect operating profiles transmitted from an external entity including a mobile network operator (MNO) system and a subscription manager (SM), comprising a security module decrypting an encrypted profile downloaded from the external entity by using a private key generated by the eUICC, wherein the profile is a combination of a file structure, data, and an application to be provided to the eUICC wherein the encrypted profile is encrypted by using a public key of the eUICC, and the private key is profile access credentials or a secret key corresponding to the public key of the eUICC, wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR successively encrypts the profile, which has been encrypted using the public key, by using a separate management key so that the encrypted profile becomes a double ciphered profile, and wherein the encrypted profile is the double ciphered profile, and the eUICC successively decrypts the encrypted profile by using the separate management key and then decrypts the profile, which has been decrypted using the separate management key, by using the private key of the eUICC wherein the private key is dynamically generated at every issuance time.

6. The embedded universal integrated circuit card of the claim 5 , wherein the private key is profile access credentials uniquely allocated to the eUICC and corresponding to a public key.

7. A terminal equipped with an embedded universal integrated circuit card (eUICC) configured to protect operating profiles transmitted from a mobile network operator (MNO) system and a subscription manager (SM), the terminal comprising an issuance processing module generating and managing profile access credential information for managing a profile received from the MNO or the SM, wherein the issuance processing module generates a public key as profile access credentials for the eUICC autonomously or by using an internal separate security module and responds according to a request of the SM, and wherein the issuance processing module receives the profile information encrypted using the public key from the MNO or the SM, and decrypts the profile encrypted by using a secret key or a private key corresponding to the public key, wherein the secret key and the private key are generated by the eUICC or a terminal equipped with the eUICC wherein the SM includes a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR), the SM-DP encrypts the profile by using the public key of the eUICC, and the SM-SR successively encrypts the profile, which has been encrypted using the public key, by using a separate management key so that the encrypted profile becomes a double ciphered profile, and wherein the encrypted profile is the double ciphered profile, and the eUICC successively decrypts the encrypted profile by using the separate management key and then decrypts the profile, which has been decrypted using the separate management key, by using the private key of the eUICC wherein the private key is dynamically generated at every issuance time.

8. The terminal of claim 7 , wherein the issuance processing module installs the security module according to a request of the SM-SR.

9. The terminal of claim 8 , wherein, when the issuance processing module responds to the SM-SR with the public key of the eUICC, the issuance processing module delivers encryption information of the public key including information about a key generation algorithm and a key length.

10. The terminal of claim 8 , wherein the encrypted profile information is double ciphered information successively encrypted by using both the public key of the eUICC and the separate management key of the eUICC.

11. The terminal of claim 10 , wherein the double ciphered profile information includes electronic signature information generated by using the private key of the SM-DP or the MNO which generates the profile.

12. A method of protecting operating profiles transmitted to an embedded universal integrated circuit cart (eUICC) from a mobile network operator (MNO) system, a subscription manager-data preparation (SM-DP) and a subscription manager-secure routing (SM-SR) constituting a subscription manager (SM), the method comprising:

receiving, by the SM-SR, an eUICC public key from the eUICC, and delivering the eUICC public key to the MNO;

encrypting, by the SM-DP, a profile by using the eUICC public key received from the MNO and delivering a first encrypted profile to the MNO;

requesting, by the MNO to the SM-SR, a second encrypted profile, which is the first encrypted profile encrypted by using a security key generated by the eUICC or a terminal equipped with the eUICC;

delivering, by the MNO or the SM-SR, the second encrypted profile which is double ciphered profile information to the eUICC;

decrypting, by the eUICC, original profile information from the double ciphered profile information by decrypting the double ciphered profile information firstly by using the security key and secondarily by using the private key corresponding to the eUICC public key wherein the private key is dynamically generated at every issuance time;

transmitting, by the eUICC, an activation request including eUICC identification information (eUICCiD) to the MNO; and

identifying, between the MNO and the eUICC, a status and a technical performance of the eUICC.

13. The method of claim 12 , wherein in encrypting, by the SM-DP, the profile by using the eUICC public key received from the MNO, the profile is electronically signed by the SM-DP according to an electronic signature expected by the eUICC.