Security method and system for supporting re-subscription or additional subscription restriction policy in mobile communications
Provided is a system that enables a device to perform a communication function. A communication method for a user equipment (UE) may include: sending a subscription request for a first network; receiving information regarding an identifier of a first profile associated with the first network and the date on which the first profile is deactivated; and determining whether a subscription to the first network is allowed on the basis of the date information. Accordingly, in an environment such as Universal Terrestrial Radio Access Network (UTRAN), GSM/EDGE Radio Access Network (GERAN) or Evolved UTRAN (EUTRAN), when a device having an eSIM attempts to make a re-subscription to an MNO, or when the device attempts to make a re-subscription or additional subscription to an MNO according to a national electricity or infrastructure plan for M2M equipment, it is possible to accommodate MNO policies and determine whether a re-subscription to an MNO is allowed according to the MNO policies. When MNO re-subscription is not allowed, a lock may be placed so as to update or reconfigure communication and security information in an easy and safe manner.
1. A method of communication for a user equipment (UE), the method comprising:
sending, while including a first subscription to a first network through a first profile, a subscription request for a second subscription to the first network;
receiving first network access information containing a second profile identifier associated with the first network in response to the subscription request; and
determining whether de-subscription restriction information related to the second subscription is contained in the first network access information based on an indication indicating that a cancellation of the second subscription for the first network is not allowed within a preset duration.
2. The method of claim 1 , wherein determining whether the de-subscription restriction information related to the second subscription is contained in the first network access information comprises:
determining whether the cancellation of the second subscription is not allowed for the preset duration; and
blocking, when the cancellation of the second subscription is not allowed for the preset duration, the cancellation of the second subscription for the preset duration.
3. The method of claim 1 , wherein determining whether the de-subscription restriction information related to the second subscription is contained in the first network access information comprises:
sending information that is necessary for determining whether a cancellation of the second subscription is not allowed for a preset duration; and
receiving an indication indicating that the cancellation of the second subscription for the first network is not allowed within the preset duration.
4. The method of claim 1 , wherein determining whether the de-subscription restriction information related to the second subscription is contained in the first network access information further comprises providing an interface configured to notify a user of a presence of the de-subscription restriction information related to the second subscription for the first network.
5. A method of communication for a device, the method comprising:
receiving, while a first subscription to a first network is maintained, a subscription request for a second subscription to the first network;
sending first network access information containing a second profile identifier associated with the first network in response to the subscription request;
determining whether the first network access information contains de-subscription restriction information related to the second subscription; and
receiving information for determining whether a cancellation of the second subscription is not allowed for a preset duration.
6. The method of claim 5 , wherein determining whether the first network access information contains the de-subscription restriction information comprises:
determining whether a cancellation of the second subscription is not allowed for a preset duration; and
sending, when the cancellation of the second subscription is not allowed for the preset duration, an indication indicating that the cancellation of the second subscription is not allowed for the preset duration.
7. The method of claim 6 , further comprising:
sending a request for the information that is necessary for determining whether the cancellation of the second subscription is not allowed for the preset duration; and
receiving the information that is necessary for determining whether the cancellation of the second subscription is not allowed for the preset duration.
8. A user equipment (UE) comprising:
a communication unit configured to communicate with an external device; and
a controller configured to:
send, while including a first subscription to a first network through a first profile, a subscription request for a second subscription to the first network;
receive first network access information containing a second profile identifier associated with the first network in response to the subscription request; and
determine whether de-subscription restriction information related to the second subscription is contained in the first network access information based on an indication indicating that a cancellation of the second subscription for the first network is not allowed within a preset duration.
9. The user equipment of claim 8 , wherein the controller further configured to control to determine whether cancellation of the second subscription is not allowed for a preset duration, and block when cancellation of the second subscription is not allowed for the preset duration, cancellation of the second subscription for the preset duration.
10. The user equipment of claim 8 , wherein the controller is further configured to:
send information that is necessary for determining whether cancellation of the second subscription is not allowed for a preset duration; and
receive the indication indicating that cancellation of the second subscription for the first network is not allowed within the preset duration.
11. The user equipment of claim 8 , wherein the controller is further configured to provide an interface that notifies a user of presence of de-subscription restriction information related to the second subscription for the first network.
12. A device in a communication system, comprising:
a communication unit configured to communicate with a user equipment; and
a controller configured to:
receive, while a first subscription to a first network is maintained, a subscription request for a second subscription to the first network;
send first network access information containing a second profile identifier associated with the first network in response to the subscription request;
determine whether the first network access information contains de-subscription restriction information related to the second subscription; and
receive information for determining whether a cancellation of the second subscription is not allowed for a preset duration.
13. The device of claim 12 , wherein the controller is further configured to:
determine whether cancellation of the second subscription is not allowed for a preset duration; and
send when cancellation of the second subscription is not allowed for the preset duration, an indication indicating that cancellation of the second subscription is not allowed for the preset duration.
14. The device of claim 13 , wherein the controller is further configured to:
send a request for the information that is necessary for determining whether cancellation of the second subscription is not allowed for a preset duration; and
receive the information that is necessary for determining whether cancellation of the second subscription is not allowed for the preset duration.