Technique for managing profile in communication system
Disclosed are: a communication technique and a system therefor for fusing, with IoT technology, a 5G communication system for supporting a data transmission rate higher than that of a 4G system. Provided is a method for installing a profile of a terminal having an embed universal integrated circuit card (eUICC) in a mobile communication system, the method comprising: requesting for an eUICC authentication certificate to an eUICC and receiving the eUICC authentication certificate; and transferring a profile package to the eUICC so as to install a profile, wherein the received eUICC authentication certificate further comprises an eUICC manufacturer (EUM) authentication certificate.
1. A method of a terminal having a local profile assistant (LPA) and an embedded universal integrated circuit card (eUICC) in a mobile communication system, the method comprising:
transmitting, by the LPA, a first message including first information of the eUICC and an eUICC challenge to a server;
receiving, by the LPA, a first response message including at least one certificate of the server from the server;
transmitting, by the LPA, the at least one certificate of the server to the eUICC;
receiving, by the LPA, second information of the eUICC including a signature value of the eUICC;
transmitting, by the LPA, a second message including the second information of the eUICC to the server;
receiving, by the LPA, a second response message including a profile package from the server; and
transmitting, by the LPA, the profile package to the eUICC to install the profile package.
2. The method of claim 1 , further comprising:
transmitting, by the LPA, a request for the first information of the eUICC to the eUICC; and
receiving, by the LPA, the first information of the eUICC from the eUICC in response to the request for the first information.
3. The method of claim 1 , further comprising:
transmitting, by the LPA, a request for the eUICC challenge to the eUICC; and
receiving, by the LPA, the eUICC challenge from the eUICC in response to the request for the eUICC challenge.
4. The method of claim 1 , further comprising:
establishing, by the LPA, a hyper text transfer protocol over secure socket layer, HTTPs, connection with the server.
5. The method of claim 1 , wherein the second information further includes an eUICC manufacturer (EUM) certificate and an eUICC certificate.
6. The method of claim 1 , wherein the first response message further includes a transaction ID for identifying a profile download session.
7. The method of claim 6 , wherein the transaction ID is delivered to the eUICC, along with the at least one certificate of the server.
8. A terminal in a mobile communication system, the terminal comprising:
an embedded universal integrated circuit card, eUICC;
a transceiver; and
a processor coupled with the transceiver and configured to:
control the transceiver to transmit a first message including first information of the eUICC and an eUICC challenge to a server;
receive, via the transceiver, a first response message including at least one certificate of the server from the server;
control the transceiver to transmit the at least one certificate of the server;
receive, via the transceiver, second information of the eUICC including a signature value of the eUICC;
control the transceiver to transmit a second message including the second information of the eUICC to the server;
receive, via the transceiver, a second response message including a profile package in response to the second message from the server; and
transmit the profile package to the eUICC to install the profile package.
9. The terminal of claim 8 , the processor is further configured to:
transmit a request for the first information of the eUICC to the eUICC; and
receive the first information of the eUICC from the eUICC in response to the request for the first information.
10. The terminal of claim 8 , the processor is further configured to:
transmit a request for the eUICC challenge to the eUICC; and
receive the eUICC challenge from the eUICC in response to the request for the eUICC challenge.
11. The terminal of claim 8 , wherein the second information further includes an eUICC manufacturer (EUM) certificate and an eUICC certificate.
12. The terminal of claim 8 ,
wherein the first response message further includes a transaction ID for identifying a profile download session, and
wherein the transaction ID is delivered to the eUICC, along with the at least one certificate of the server.
13. A method of a server in a mobile communication system, the method comprising:
receiving, from a terminal, a first message including an embedded universal integrated circuit card (eUICC) challenge of an eUICC included in the terminal and first information of the eUICC;
transmitting, to the terminal, a first response message including at least one certificate of the server;
receiving, from the terminal, a second message including a signature value of the eUICC;
transmitting, to the terminal, a second response message including a profile package; and
checking whether an eUICC manufacturer (EUM) certificate and an eUICC certificate included in the second message is valid.
14. The method of claim 13 , further comprising:
determining whether an address of the server included in the first message is valid; and
determining whether an encryption key information included in the first message is supportable by the server.
15. The method of claim 13 , wherein the eUICC certificate is used to verify the signature value of the eUICC included in the second message.
16. A server in a mobile communication system, the server comprising:
a transceiver; and
a processor coupled with the transceiver and configured to:
receive, from a terminal, a first message including an embedded universal integrated circuit card (eUICC) challenge of an eUICC included in the terminal and first information of the eUICC;
control the transceiver to transmit, to the terminal, a first response message including at least one certificate of the server;
receive, from the terminal via the transceiver, a second message including a signature value of the eUICC;
control the transceiver to transmit, to the terminal, a second response message including a profile package; and
determine whether an eUICC manufacturer (EUM) certificate and an eUICC certificate included in the second message is valid.
17. The server of claim 16 , wherein the processor is further configured to:
determine whether an address of the server included in the first message is valid; and
determine whether an encryption key information included in the first message is supportable by the server.
18. The server of claim 16 , wherein the eUICC certificate is used to verify the signature value of the eUICC included in the second message.