Method and apparatus for handling remote profile management exception
The disclosure relates to a communication technique for combining IoT technology with a 5G communication system for supporting a data transmission rate higher than that of a beyond-4G system, and a system therefor. The disclosure is applicable to intelligent services based on 5G communication technology and IoT-related technology (for example, smart homes, smart buildings, smart cities, smart cars or connected cars, health care, digital education, retail businesses, security and safety-related services). At least one processor receives a remote management command from a profile server, determines if the remote management command can be handled, performs the received remote management command, switches the remote management command to a local management command if necessary according to the result of performing the remote management command, and controls the transceiver so as to transmit the result of performing the remote management command or the local management command to the profile server.
1. A method performed by a terminal including an embedded universal integrated circuit card (eUICC) in a wireless communication system, the method comprising:
receiving, from a profile server, a request message to initiate a profile download, the request message including a first profile metadata associated with a profile;
in response to a reception of the request message, performing authentication with the profile server based on a certificate of the eUICC;
in case that the authentication is succeeded, receiving, from the profile server, a second profile metadata; and
in case that the first profile metadata is equal to the second profile metadata, receiving, from the profile server, the profile.
2. The method of claim 1 , further comprising:
receiving, from the profile server, a message of a remote profile management for the profile, the message including a third profile metadata; and
in case that the second profile metadata is equal to the third profile metadata, performing the remote profile management based on at least one of a function list or information on a version of the eUICC,
wherein the remote profile management indicates at least one of enabling, disabling, deleting, or updating the profile.
3. The method of claim 1 , further comprising:
transmitting, to the profile server, the second profile metadata;
receiving, from the profile server, a message indicating whether authentication of the second profile metadata is succeeded; and
in case that the message indicates that the authentication of the second profile metadata is succeeded, receiving, from the profile server, the profile;
wherein the authentication of the second profile metadata is performed by comparing a profile metadata stored in the profile server and the second profile metadata.
4. The method of claim 1 , wherein performing the authentication with the profile server comprises:
in response to the reception of the request message, transmitting, to the profile server, a value associated with the eUICC;
receiving, from the profile server, a signature of the profile server and a certificate of the profile server; and
in case that authentication of the signature of the profile server and the certificate of the profile server is succeeded, transmitting, to the profile server, a signature of the eUICC and the certificate of the eUICC,
wherein the signature of the profile server depends on the value,
wherein the signature of the eUICC depends on a private key corresponding to the certificate of the eUICC, and
wherein in case that authentication of the signature of the eUICC and the certificate of the eUICC is succeeded, the authentication with the profile server is succeeded.
5. The method of claim 1 , wherein the first profile metadata includes at least one of information on the profile server and an icon associated with the profile, and
wherein the profile server includes a SM-DP+ (subscription manager data preparation).
6. A method performed by a profile server in a wireless communication system, the method comprising:
transmitting, to a terminal including an embedded universal integrated circuit card (eUICC), a request message to initiate a profile download, the request message including a first profile metadata associated with a profile;
in response to a transmission of the request message, performing authentication with the terminal based on a certificate of the profile server;
in case that the authentication is succeeded, transmitting, to the terminal, a second profile metadata; and
in case that the first profile metadata is equal to the second profile metadata, transmitting, to the profile server, the profile.
7. The method of claim 6 , further comprising:
transmitting, to the terminal, a message of a remote profile management for the profile, the message including a third profile metadata,
wherein in case that the second profile metadata is equal to the third profile metadata, the remote profile management is performed based on at least one of a function list or information on a version of the eUICC, and
wherein the remote profile management indicates at least one of enabling, disabling, deleting, or updating the profile.
8. The method of claim 6 , further comprising:
receiving, from the terminal, the second profile metadata;
performing authentication of the second profile metadata based on whether a profile metadata stored in the profile server is equal to the second profile metadata;
in case that the authentication of the second profile metadata is succeeded, transmitting, to the terminal, a message indicating that the authentication of the second profile metadata is succeeded; and
transmitting, to the terminal, the profile.
9. The method of claim 6 , wherein performing the authentication with the terminal comprises:
in response to the transmission of the request message, receiving, from the terminal, a value associated with the eUICC;
transmitting, to the terminal, a signature of the profile server and a certificate of the profile server; and
in case that authentication of the signature of the profile server and the certificate of the profile server is succeeded, receiving, from the terminal, a signature of the eUICC and the certificate of the eUICC,
wherein the signature of the profile server depends on the value,
wherein the signature of the eUICC depends on a private key corresponding to the certificate of the eUICC, and
wherein in case that authentication of the signature of the eUICC and the certificate of the eUICC is succeeded, the authentication with the terminal is succeeded.
10. The method of claim 6 , wherein the first profile metadata includes at least one of information on the profile server and an icon associated with the profile, and
wherein the profile server includes a SM-DP+ (subscription manager data preparation).
11. A terminal including an embedded universal integrated circuit card (eUICC) in a wireless communication system, comprising:
a transceiver; and
a controller coupled with the transceiver and configured to:
receive, from a profile server, a request message to initiate a profile download, the request message including a first profile metadata associated with a profile,
in response to a reception of the request message, perform authentication with the profile server based on a certificate of the eUICC,
in case that the authentication is succeeded, receive, from the profile server, a second profile metadata, and
in case that the first profile metadata is equal to the second profile metadata, receive, from the profile server, the profile.
12. The terminal of claim 11 , wherein the controller is further configured to:
receive, from the profile server, a message of a remote profile management for the profile, the message including a third profile metadata, and
in case that the second profile metadata is equal to the third profile metadata, perform the remote profile management based on at least one of a function list or information on a version of the eUICC, and
wherein the remote profile management indicates at least one of enabling, disabling, deleting, or updating the profile.
13. The terminal of claim 11 , wherein the controller is further configured to:
transmit, to the profile server, the second profile metadata,
receive, from the profile server, a message indicating whether authentication of the second profile metadata is succeeded, and
in case that the message indicates that the authentication of the second profile metadata is succeeded, receive, from the profile server, the profile, and
wherein the authentication of the second profile metadata is performed by comparing a profile metadata stored in the profile server and the second profile metadata.
14. The terminal of claim 11 , wherein the controller is configured to:
in response to the reception of the request message, transmit, to the profile server, a value associated with the eUICC,
receive, from the profile server, a signature of the profile server and a certificate of the profile server, and
in case that authentication of the signature of the profile server and the certificate of the profile server is succeeded, transmit, to the profile server, a signature of the eUICC and the certificate of the eUICC,
wherein the signature of the profile server depends on the value,
wherein the signature of the eUICC depends on a private key corresponding to the certificate of the eUICC, and
wherein in case that authentication of the signature of the eUICC and the certificate of the eUICC is succeeded, the authentication with the profile server is succeeded.
15. The terminal of claim 11 , wherein the first profile metadata includes at least one of information on the profile server and an icon associated with the profile, and
wherein the profile server includes a SM-DP+ (subscription manager data preparation).
16. A profile server in a wireless communication system, comprising:
a transceiver; and
a controller is coupled with the transceiver and configured to:
transmit, to a terminal including an embedded universal integrated circuit card (eUICC), a request message to initiate a profile download, the request message including a first profile metadata associated with a profile,
in response to a transmission of the request message, perform authentication with the terminal based on a certificate of the profile server,
in case that the authentication is succeeded, transmit, to the terminal, a second profile metadata, and
in case that the first profile metadata is equal to the second profile metadata, transmit, to the profile server, the profile.
17. The profile server of claim 16 , wherein the controller is further configured to:
transmit, to the terminal, a message of a remote profile management for the profile, the message including a third profile metadata,
wherein in case that the second profile metadata is equal to the third profile metadata, the remote profile management is performed based on at least one of a function list or information on a version of the eUICC, and
wherein the remote profile management indicates at least one of enabling, disabling, deleting, or updating the profile.
18. The profile server of claim 16 , wherein the controller is further configured to:
receive, from the terminal, the second profile metadata,
perform authentication of the second profile metadata based on whether a profile metadata stored in the profile server is equal to the second profile metadata,
in case that the authentication of the second profile metadata is succeeded, transmit, to the terminal, a message indicating that the authentication of the second profile metadata is succeeded, and
transmitting, to the terminal, the profile.
19. The profile server of claim 16 , wherein the controller is configured to:
in response to the transmission of the request message, receive, from the terminal, a value associated with the eUICC,
transmit, to the terminal, a signature of the profile server and a certificate of the profile server,
in case that authentication of the signature of the profile server and the certificate of the profile server is succeeded, receive, from the terminal, a signature of the eUICC and the certificate of the eUICC,
wherein the signature of the profile server depends on the value,
wherein the signature of the eUICC depends on a private key corresponding to the certificate of the eUICC, and
wherein in case that authentication of the signature of the eUICC and the certificate of the eUICC is succeeded, the authentication with the terminal is succeeded.
20. The profile server of claim 16 , wherein the first profile metadata includes at least one of information on the profile server and an icon associated with the profile, and
wherein the profile server includes a SM-DP+ (subscription manager data preparation).