Information processing apparatus, method, and system
An information processing apparatus includes an eUICC that holds first profile information that is used for connection to a first communication system, and a processor configured to connect to the first communication system by using the first profile information. The processor acquires, from a predetermined certificate authority, a first electronic certificate that certifies that first authentication information that is used for authentication by a first server is for a first owner, stores the first authentication information and the first electronic certificate in the eUICC, and receives authentication by the first server by using the first authentication information and the first electronic certificate. A default profile is stored in the eUICC, and the information processing apparatus connects to the first communication system by using the default profile while the information processing apparatus is being sold as a new product or a used product.
1 . An information processing apparatus comprising:
an eUICC (Embedded Universal Integrated Circuit Card) that holds first profile information that is used for connection to a first communication system and that is associated with a first owner of the information processing apparatus;
an applet configured to generate first authentication information with the first profile information as a key; and
a processor configured to connect to the first communication system by using the first profile information, wherein
the processor is further configured to
acquire, from a second server that manages profile information, the first profile information and the applet;
store the first profile information and the applet in the eUICC;
start the applet, and cause the applet to generate the first authentication information:
acquire, from a predetermined certificate authority, a first electronic certificate that certifies that the first authentication information is for the first owner, the first authentication information being used for authentication by a first server trusted by the first communication system and corresponding to the first profile information;
store the first authentication information and the first electronic certificate in the eUICC; and
receive authentication by the first server by using the first authentication information and the first electronic certificate, and
wherein, in a case where the applet is updated, the processor is configured to
acquire, from the second server, at least updated applet;
store the updated applet in the eUICC;
start the updated applet, and cause the updated applet to newly generate the first authentication information;
acquire, from the predetermined certificate authority, the first electronic certificate in relation to the newly generated first authentication information; and
store, in the eUICC, the newly generated first authentication information and the first electronic certificate that is newly acquired.
2 . The information processing apparatus according to claim 1 , wherein
the processor is configured to
acquire, from the predetermined certificate authority, in a case where second profile information that is newly held in the eUICC is enabled, a second electronic certificate that certifies that second authentication information corresponding to the second profile information is for a second owner, the second profile information being used for connection to the first communication system, and being associated with the second owner of the information processing apparatus,
store the second authentication information and the second electronic certificate in the eUICC, and
receive authentication by the first server by using the second authentication information and the second electronic certificate, and
the first profile information and the first electronic certificate are disabled or deleted.
3 . The information processing apparatus according to claim 1 , wherein, after authentication by the first server, the first owner is identified by the first server based on the first electronic certificate, and the processor is configured to receive provision of a service with contents matching the first owner from the first server.
4 . The information processing apparatus according to claim 1 , wherein
the eUICC does not hold the first profile information and holds default profile information that is used for connection to the first communication system, at a time of shipping from a factory, and
the processor is configured to
connect to the first communication system by enabling the default profile information,
disable the default profile information and enable the first profile information, in a case where the first profile information is acquired from the second server that manages profile information and is stored in the eUICC, and
disable or delete the first profile information and enable the default profile information, in a case where a predetermined secondhand dealer sells the information processing apparatus second hand.
5 . The information processing apparatus according to claim 1 , wherein
the information processing apparatus is mounted on a vehicle,
the first communication system is a system that is managed by a manufacturer of the vehicle, and
the first profile information is issued by the first communication system in a case where the vehicle is purchased by the first owner.
6 . A method executed by a computer, the computer including an eUICC (Embedded Universal Integrated Circuit Card) that holds first profile information that is used for connection to a first communication system and that is associated with a first owner of an information processing apparatus, and an applet configured to generate first authentication information with the first profile information as a key, the method comprising:
acquiring, from a second server that manages profile information, the first profile information and the applet;
storing the first profile information and the applet in the eUICC; and
starting the applet, and causing the applet to generate the first authentication information;
connecting to the first communication system by using the first profile information;
acquiring, from a predetermined certificate authority, a first electronic certificate that certifies that first authentication information is for the first owner, the first authentication information being used for authentication by a first server trusted by the first communication system and corresponding to the first profile information;
storing the first authentication information and the first electronic certificate in the eUICC; and
receiving authentication by the first server by using the first authentication information and the first electronic certificate,
wherein, in a case where the applet is updated, the method further comprising:
acquiring, from the second server, at least updated applet;
storing the updated applet in the eUICC;
starting the updated applet, and causing the applet to newly generate the first authentication information;
acquiring, from the predetermined certificate authority, the first electronic certificate in relation to the newly generated first authentication information; and
storing, in the eUICC, the newly generated first authentication information and the first electronic certificate that is newly acquired.
7 . The method according to claim 6 , further comprising
acquiring, from the predetermined certificate authority, in a case where second profile information that is newly held in the eUICC is enabled, a second electronic certificate that certifies that second authentication information corresponding to the second profile information is for a second owner, the second profile information being used for connection to the first communication system, and being associated with the second owner of the information processing apparatus,
storing the second authentication information and the second electronic certificate in the eUICC, and
receiving authentication by the first server by using the second authentication information and the second electronic certificate, wherein
the first profile information and the first electronic certificate are disabled or deleted.
8 . The method according to claim 6 , wherein
the eUICC does not hold the first profile information and holds default profile information that is used for connection to the first communication system, at a time of shipping from a factory, and
further comprising
connecting to the first communication system by enabling the default profile information,
disabling the default profile information and enabling the first profile information, in a case where the first profile information is acquired from the second server that manages profile information and is stored in the eUICC, and
disabling or deleting the first profile information and enabling the default profile information, in a case where a predetermined secondhand dealer sells the information processing apparatus second hand.
9 . The method according to claim 6 , wherein
the computer is mounted on a vehicle,
the first communication system is a system that is managed by a manufacturer of the vehicle, and
the first profile information is issued by the first communication system in a case where the vehicle is purchased by the first owner.