Method for forming a trust relationship, and embedded UICC therefor
The present invention relates to a method for forming a trust relationship among an MNO, an SM, and an eUICC in a communication system in which the SM is defined as an entity for managing the eUICC, as well as to an embedded UICC therefor.
1. A method for forming a trust relationship between entities under an embedded Universal Integrated Circuit Card (eUICC) environment, the method comprising:
receiving, by a first entity, trust information and verification information, wherein the verification information is transmitted from a second entity;
verifying, by the first entity, the verification information of the second entity using the trust information;
authenticating, by the first entity, the second entity by verifying the verification information; and
establishing a secure communication channel between the first entity and the second entity,
wherein the first and second entities include at least one of an eUICC, one or more Subscription Managers (SMs), and one or more Mobile Network Operators (MNOs), and
wherein the verification information is at least one certificate of the second entity.
2. The method of claim 1 , wherein the trust information is information assigned to an entity having a right to participate in a trust relationship.
3. The method of claim 1 , wherein the verification information is generated with a purpose of certificating each entity.
4. The method of claim 1 , wherein the trust information is issued by an authentication organization communicating with the entities.
5. The method of claim 1 , wherein the secure communication channel is established based on a transport layer security protocol.
6. The method of claim 1 , wherein the Subscription Manager includes one or more Subscription Manager-Secure Routings (SM-SRs) and one or more Subscription Manager-Data Preparations (SM-DPs).
7. An embedded Universal Integrated Circuit Card (eUICC) configured to form a trust relationship with an entity under an eUICC environment including at least one entity, the eUICC comprising:
a processor configured to receive trust information and verification information, the verification information being transmitted from the entity and to authenticate the entity by verifying the verification information using the trust information,
wherein the eUICC establishes a secure communication channel with the entity,
wherein the entity includes at least one of an one or more Subscription Managers (SMs), and one or more Mobile Network Operators, and
wherein the verification information is at least one certificate of the entity.
8. The eUICC of claim 7 , wherein the trust information is information assigned to an entity having a right to participate in a trust relationship.
9. The eUICC of claim 7 , wherein the verification information is generated with a purpose of certificating each entity.
10. The eUICC of claim 7 , wherein the trust information is issued by an authentication organization communicating with the at least one entity.
11. The eUICC of claim 7 , wherein the secure communication channel is established based on a transport layer security protocol.
12. The eUICC of claim 7 , wherein the Subscription Manager includes one or more Subscription Manager-Secure Routings (SM-SRs) and one or more Subscription Manager-Data Preparations (SM-DPs).