Apparatus and method for processing an eSIM configuration file of an iSSP device

Abstract

The present disclosure relates to a pre-fifth generation (5G) or 5G communication system to be provided to support higher data rates beyond fourth generation (4G) communication systems such as ultra long term evolution (LTE). A method and apparatus for providing communication services by installing an eSIM profile even in a terminal to which an iSSP is applied. The method includes: detecting whether information is input information of an eSIM profile download input information from a terminal to which an iSSP is applied, and determining whether the terminal supports it. The eSIM bundling information of the iSSP is collected by the terminal; an eSIM bundling to be used is selected from the collected eSIM bundlings by referring to a condition specified by the terminal; if there is no bundling to be used or when it is determined that an eSIM bundling in an existing eSIM bundling is not used, the terminal generates an eSIM bundling by itself or provides an eSIM bundling through communication with the terminal and a server; and based on the eSIM bundling information, an eSIM profile package is downloaded and installed.

Description

Technical Field

[0001] The present disclosure relates to a method and apparatus for downloading, storing and installing an eSIM configuration file in a terminal applying an integrated smart security platform (iSSP). Background Art

[0002] In order to meet the increased demand for wireless data traffic after the commercialization of 4G communication systems, efforts have been made to develop improved 5G communication systems or pre-5G communication systems. For this reason, 5G communication systems or pre-5G communication systems are called super 4G network communication systems or post-LTE systems. For this reason, 5G communication systems or pre-5G communication systems are called super 4G network communication systems or post-LTE systems. In order to achieve high data transmission rates, 5G communication systems are being considered for implementation in mmWave frequency bands (e.g., 60GHz frequency bands).

[0003] In 5G communication systems, technologies such as beamforming, massive MIMO, full-dimensional MIMO (FD-MIMO), array antennas, analog beamforming, and massive antennas are being discussed as means to mitigate propagation path losses in the mmWave band and increase propagation transmission distances.

[0004] In addition, 5G communication systems have developed technologies such as evolved small cells, advanced small cells, cloud radio access networks (RAN), ultra-dense networks, device-to-device communication (D2D), wireless backhaul, mobile networks, collaborative communications, coordinated multi-point (CoMP), and reception interference cancellation to improve system networks.

[0005] In addition, 5G systems have led to the development of hybrid FSK and QAM modulation (FQAM) and sliding window superposition coding (SWSC), which are advanced coding modulation (ACM) schemes, and filter bank multi-carrier (FBMC), non-orthogonal multiple access (NOMA), and sparse code multiple access (SCMA), which are advanced access technologies. Meanwhile, the Internet has evolved into an Internet of Things (IoT) network in which distributed components (such as objects) exchange and process information from a human-oriented connected network in which humans generate and use information.

[0006] The Internet of Everything (IoE) technology has emerged in which big data processing technology is combined with IoT technology through connection with a cloud server, etc. In order to realize IoT, technical factors such as sensing technology, wired / wireless communication, network infrastructure, service interface technology, and security technology are required, and recently, technologies for connection between objects such as sensor networks, machine-to-machine (M2M) communication, machine type communication (MTC), etc. have been studied.

[0007] In the IoT environment, by collecting and analyzing the data generated in the connected objects, intelligent Internet technology (IT) services can be provided to create new value for people's lives. IoT can be applied to fields such as smart homes, smart buildings, smart cities, smart cars, Internet of Vehicles, smart grids, health care, smart appliances, or high-tech medical services through the integration of traditional information technology (IT) with various industries. Therefore, various attempts have been made to apply 5G communications to IoT networks. For example, 5G communication technologies such as sensor networks, machine-to-machine (M2M) communications, and machine type communications (MTC) have been implemented through technologies such as beamforming, MIMO, and array antennas. The application of cloud RAN as a big data processing technology can be an example of the integration of 5G technology and IoT technology. Summary of the invention

[0008] Technical issues

[0009] Since various services can be provided according to the above description and development of the mobile communication system, a method for efficiently providing such services is required. In addition, in a wireless communication system including an authentication control module for network access of a subscriber to access a mobile communication system, secure media such as an embedded UICC (eUICC), an integrated UICC (iUICC), and an integrated security service platform (iSSP) are being developed or applied as an evolution form of a universal integrated circuit card (UICC).

[0010] Solution to the problem

[0011] In the related art, since a method for processing a Remote SIM Provisioning (RSP) protocol for supporting eSIM is not defined in an iSSP terminal equipped with an iSSP, an eSIM profile cannot be downloaded in the iSSP terminal by using an eSIM infrastructure such as an SM-DP+ server and an activation code. Therefore, one aspect of the present disclosure is to solve the above problem.

[0012] In a method for installing an embedded subscriber identity module (eSIM) profile by a terminal applying an integrated smart security platform (iSSP) according to the present disclosure, to solve the above-mentioned problem, the method may include: receiving an input of an activation code; in a case where the activation code is related to a request for an eSIM profile, obtaining information about an eSIM bundle in which the eSIM profile is installed; in a case where at least one eSIM bundle capable of downloading the eSIM profile is identified based on the obtained information, performing an eSIM profile download process for at least one eSIM bundle; and in a case where at least one eSIM bundle is not identified based on the obtained information, performing an eSIM bundle acquisition process for downloading the eSIM profile.

[0013] According to an embodiment of the present disclosure, a terminal applying an integrated smart security platform (iSSP) may include an input unit, a transceiver and a controller, wherein the controller is configured to: control the input unit to receive an input of an activation code; when the activation code is related to a request for an eSIM profile, obtain information about an eSIM bundle in which an eSIM profile is installed; when at least one eSIM bundle capable of downloading an eSIM profile is identified based on the obtained information, perform an eSIM profile download process for at least one eSIM bundle; and when at least one eSIM bundle is not identified based on the obtained information, perform an eSIM bundle acquisition process for downloading an eSIM profile.

[0014] Before proceeding to the following detailed description, it may be helpful to set forth the definitions of certain words and phrases used in this patent document: the terms "include" and "comprising" and their derivatives, mean to cover without limitation; the term "or" is inclusive, meaning and / or; the phrases "associated with" and "associated with" and their derivatives may mean to include, be included, be interconnected, contain, be contained within, be connected to or connected with, be connected to or connected with, can communicate with, cooperate with, crosslink, be juxtaposed, be close to, be bound to or bound with, have, have the property of, etc.; and the term "controller" refers to any device, system or part thereof that controls at least one operation, such a device may be implemented in hardware, firmware or software or some combination of at least two thereof. It should be noted that the functionality associated with any particular controller may be centralized or distributed, whether local or remote.

[0015] In addition, the various functions described below can be implemented or supported by one or more computer programs, each of which is formed by a computer-readable program code and embodied in a computer-readable medium. The terms "application" and "program" refer to one or more computer programs, software components, instruction sets, processes, functions, objects, classes, instances, related data or a portion thereof that are suitable for implementation with a suitable computer-readable program code. The phrase "computer-readable program code" includes any type of computer code, including source code, object code and executable code. The phrase "computer-readable medium" includes any type of medium that can be accessed by a computer, such as a read-only memory (ROM), a random access memory (RAM), a hard drive, a compact disk (CD), a digital video disk (DVD) or any other type of memory. "Non-transitory" computer-readable media does not include wired, wireless, optical or other communication links that transmit temporary electrical signals or other signals. Non-transitory computer-readable media include media that can permanently store data and media that can store data and overwrite the data later, such as rewritable disks or erasable memory devices.

[0016] Definitions for certain words and phrases are provided in this patent document, those of ordinary skill in the art should understand that in many, if not most instances, such definitions apply to prior, as well as future uses of such defined words and phrases.

[0017] Advantageous Effects of the Invention

[0018] According to an embodiment, the eSIM profile package for eUICC can also be installed and used in the integrated security service platform (iSSP). Therefore, even a mobile communication operator that only holds or supports an SM-DP+ server (which is a server that generates and stores an eSIM profile package) can provide communication services and install the eSIM profile package in a terminal to which iSSP is applied. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] For a more complete understanding of the present disclosure and its advantages, reference is now made to the following description in conjunction with the accompanying drawings, wherein like reference numerals represent like parts:

[0020] Figure 1 A diagram showing an access hierarchy structure for accessing communication carrier information and an application responsible for access / management of communication carrier information for each UICC, eUICC, and iSSP according to some embodiments of the present disclosure;

[0021] Figure 2 A diagram showing an environment for eSIM profile installation in an iSSP terminal according to an embodiment of the present disclosure;

[0022] Figure 3 A diagram showing a basic process of eSIM profile installation in an iSSP terminal according to an embodiment of the present disclosure;

[0023] Figure 4 A diagram showing a process of downloading and installing, by an iSSP terminal, an eSIM profile in one of the existing eSIM bundles installed in the terminal;

[0024] Figure 5 A detailed diagram showing a process of identifying and determining an activation code for an eSIM profile installation in an iSSP terminal according to the present disclosure;

[0025] Figure 6 A diagram showing a process of downloading a bundle and downloading an eSIM profile in the corresponding bundle through authentication and capability negotiation between an iSSP terminal and an SPBM server according to an embodiment of the present disclosure;

[0026] Figure 7 A diagram showing a process of self-generating a bundle in an iSSP terminal according to an embodiment of the present disclosure; and

[0027] Figure 8 A diagram showing a detailed configuration of a terminal in a wireless communication system according to some embodiments of the present disclosure. DETAILED DESCRIPTION

[0028] Discussed below Figures 1 to 8 The various embodiments used to describe the principles of the present disclosure in this patent document are only for illustration and should not be interpreted in any way as limiting the scope of the present disclosure. Those skilled in the art will understand that the principles of the present disclosure can be implemented in any appropriately arranged system or device.

[0029] The operating principle of the present invention will be described in detail below with reference to the accompanying drawings. In the following description of the present disclosure, when it is determined that a detailed description of a known configuration or function incorporated herein may make the subject matter of the present disclosure unclear, the detailed description will be omitted. The terms described below are defined in consideration of the functions in the embodiments, and the meaning of the terms may vary according to the intention, convention, etc. of the user or operator. Therefore, the definition of the terms should be based on the content of the entire specification.

[0030] Similarly, in the accompanying drawings, some elements may be exaggerated, omitted or schematically shown. In addition, the size of each element does not fully reflect the actual size. In each figure, the same reference numerals are assigned to the same or corresponding elements. The advantages and features of the present disclosure and the way to achieve them will become apparent by referring to the embodiments described in detail below in conjunction with the accompanying drawings. However, the present disclosure is not limited to the embodiments set forth below, but can be implemented in various different forms. The following embodiments are provided only to fully disclose the present disclosure and inform the scope of the present disclosure to those skilled in the art, and the present disclosure is limited only by the scope of the attached claims. The following embodiments are provided only to fully disclose the present disclosure and inform the scope of the present disclosure to those skilled in the art, and the present disclosure is limited only by the scope of the attached claims. Throughout the specification, the same or similar reference numerals represent the same or similar elements.

[0031] In addition, when describing the present disclosure, when it is determined that the detailed description of the relevant function or configuration may unnecessarily obscure the subject matter of the present disclosure, its detailed description will be omitted. The terms to be described below are terms defined in consideration of the functions in the present disclosure, and may differ depending on the user, the user's intention or habit. Therefore, the definition of terms should be made based on the content of the entire specification. Hereinafter, the base station is the subject that performs resource allocation for the terminal, and may be a gNode B, an eNodeB, a Node B, a base station (BS), a wireless access unit, a base station controller, or one of the nodes on the network.

[0032] The terminal may include a user equipment (UE), a mobile station (MS), a cellular phone, a smart phone, a computer, or a multimedia system capable of performing a communication function. In the present disclosure, a downlink (DL) is a radio transmission path for a signal sent from a base station to a terminal, and an uplink (UL) refers to a radio transmission path for a signal sent from a terminal to a base station. Although an LTE or LTE-A system may be described below as an example, embodiments of the present disclosure may also be applied to other communication systems with similar technical backgrounds or channel forms. For example, the fifth generation mobile communication technology (5G, new radio, NR) developed after LTE-A may be included in a system to which embodiments of the present disclosure may be applied, and 5G may be a concept including existing LTE, LTE-A, and other similar services hereinafter.

[0033] In addition, according to the judgment of those skilled in the art, the present disclosure may be applied to other communication systems with some modifications without departing from the scope of the present disclosure. Here, it will be understood that each block of the flowchart illustration and the combination of blocks in the flowchart illustration can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or the processor of the data processing device capable of other programming create a device for performing the functions described in one or more flowchart blocks.

[0034] These computer program instructions may also be stored in a computer-usable or computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner so that the instructions stored in the computer-usable or computer-readable memory produce an article of manufacture including instruction means for implementing the functions specified in one or more flowchart blocks. The computer program instructions may also be loaded onto a computer or other programmable data processing device to cause a series of operating steps to be performed on the computer or other programmable data processing device, thereby producing a computer-implemented process, so that the instructions executed on the computer or other programmable data processing device provide steps for implementing the functions specified in one or more flowchart blocks.

[0035] In addition, each box of the flowchart diagram can represent a module, a segment or a part of a code, which includes one or more executable instructions for realizing (one or more) specified logical functions. It should also be noted that in some alternative embodiments, the functions noted in the box may not occur in order. For example, depending on the function involved, the two boxes shown in succession can actually be executed substantially at the same time, or sometimes can be executed in reverse order. When used in this article, "-unit" refers to a software element or a hardware element that performs a predetermined function, such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). However, "unit" does not always have the meaning that is limited to software or hardware. "-unit" can be configured to be stored in an addressable storage medium or to execute one or more processors. Therefore, "-unit" includes, for example, software elements, object-oriented software elements, class elements and task elements, processes, functions, attributes, procedures, subroutines, program code segments, drivers, firmware, microcodes, circuits, data, databases, data structures, tables, arrays and parameters.

[0036] The elements and functions provided by the "-units" may be combined into a smaller number of elements and "-units", or may be divided into a larger number of elements and "-units". In addition, the elements and "units" may be implemented to reproduce one or more CPUs within a device or secure multimedia card. Furthermore, in an embodiment, the "-units" may include one or more processors.

[0037] In the present disclosure, if an activation code is detected in an iSSP terminal as predetermined information for downloading an eSIM profile package through a local bundle assistance (LBA) installed in the terminal, the terminal can retrieve and collect information of the eSIM bundle installed in the iSSP, and then can perform downloading of one of the retrieved eSIM bundles to install the eSIM profile package. If no eSIM bundle is retrieved in the terminal, or if it is determined not to use the retrieved existing eSIM bundle according to the configuration of the terminal or the user's choice, the iSSP terminal can generate an eSIM bundle by itself based on the predetermined information stored in the terminal, or can generate an eSIM bundle through interactive work with an SPBM server or communication with the terminal or server, and then can download and install the eSIM profile package in the eSIM bundle.

[0038] In a wireless communication system, a universal integrated circuit card (UICC) is a smart card used by inserting into a mobile communication terminal, etc., and the UICC may include an access control module for accessing a network of a mobile communication operator. According to some embodiments, examples of the access control module may include a universal subscriber identity module (USIM), a subscriber identity module (SIM), an IP multimedia service identity module (ISIM), etc., and are not limited to the above examples. The UICC is also called a UICC card, a USIM card, or a SIM card, and may generally be referred to as a SIM card. The UICC stores private information of mobile communication subscribers, and authenticates the subscriber and creates a traffic security key when the subscriber accesses the mobile communication network, so that mobile communications can be used stably.

[0039] Due to the development of the Internet of Things (IOT) field, embedded UICC (eUICC) is being applied to various terminals such as wearable devices, automobiles, and smart meters. eUICC may refer to a UICC card that can be selected by downloading a SIM module. That is, the eUICC may include a UICC card that is fixed or not fixed to the terminal in a UICC card that can be selected by remotely downloading a SIM module, and the SIM module information downloaded in the eUICC may be referred to as an eUICC profile.

[0040] The eUICC Profile may be used interchangeably with the terms SIM Profile, eSIM Profile, eSIM Profile Package, and eSIM Profile. A server that generates, prepares, or stores eSIM Profiles for download is called a Subscription Manager and Data Preparation Server, SM-DP Server, Subscription Manager and Data Preparation+ Server, SM-DP+ Server, or DP+ Server.

[0041] Recently, the European Telecommunications Standards Institute (ETSI) is standardizing the integrated smart security platform (iSSP). iSSP refers to a hardware security module (SSP) integrated into a communication processor or application processor chip (system on chip (SoC)), and the SoC is generally soldered to the terminal in a non-detachable manner.

[0042] iSSP may include a primary platform and a secondary platform bundle, the primary platform may include at least one of a hardware platform and a low-level operating system (OS), and the secondary platform bundle may include at least one of a high-level OS and an application executed on the OS. The secondary platform bundle may also be referred to as an SPB or a bundle.

[0043] Download bundles can be represented as download mirrors. The server that prepares or stores the images to be downloaded is called a Secondary Platform Bundle Manager or SPBM.

[0044] The SPBM may be generated in the form of an upgrade of an existing SM-DP+ server or a new server, or may exist in the form of integration with the SM-DP+ server. As described above, the mirror may include an advanced OS and applications executed on the OS, and may exist in the form of no applications. An application including an access control module for accessing a mobile communication operator's network among the applications installed and executed in the bundle is referred to as a network access application (NAA). The current standard defines an SPB with telecommunications attributes, and the telecommunications SPB may include an eSIM bundle with attributes corresponding to one eUICC and a SIM bundle with attributes corresponding to one UICC. Of course, the SPB is not limited to the above examples. The eUICC profile can be downloaded, installed and executed in the eSIM bundle of an iSSP or an eUICC, and when the eUICC profile is downloaded, installed and executed in the eSIM bundle of an iSSP, the eUICC profile may also be referred to as an NAA.

[0045] In order to download the telecom bundle, an SPBM server should be established in the iSSP terminal. However, before fully converting to SPBM, eSIM Infra (SM-DP+, activation code, etc.) support is required in the iSSP. Communication service providers who do not want to customize SIM OS are expected to maintain SM-DP+ without switching to SPBM, so it is determined that a solution that also accepts operators with only SM-DP+ servers is needed.

[0046] The 3rd Generation Partnership Project (3GPP) has formally accepted eUICC as the 5G primary standard (completed in June 2018), and ETSI's iSSP also plans to formally accept eUICC as a 5G secondary standardization, which will be implemented in December 2019. Therefore, it is expected that terminals supporting UICC, eUICC, or iSSP SoC chips will be released in the future. GSMA is also discussing the standardization of iUICC. iUICC is a form of fixing the existing eUICC to the modem, and its internal structure is similar to that of iSSP. However, it is expected that iUICC will only support eSIM bundling.

[0047] As market demand for dual SIM function support that can use two communication networks simultaneously in one terminal increases, terminals in which various secure elements (SEs) supporting dual SIM functions (such as UICC and eUICC, eUICC and eUICC, and eUICC and iSSP SoC chips) are combined are expected to be launched.

[0048] In order for the user to read the information stored in the eUICC and display the read information in the terminal applying the eUICC, the terminal shall execute the Local Profile Agent (LPA) application defined by the Global System for Mobile Communications Association (GSMA), and shall execute the Local Bundling Assistant (LBA) application defined by ETSI in the iSSP. In the iSSP, in order to download, install and execute the profile in the eSIM bundle of the iSSP, the LBA of the iSSP may support the function of the LPA, or the LPA module may be installed separately in the terminal. In this specification, an example in which the LPA function is integrated into the LBA is described as an example, but is not limited to this.

[0049] In the following of this specification, SIM card is used to refer to UICC card, USIM card, UICC including ISIM, etc. In other words, the technical application of SIM card can also be applied to USIM card, ISIM card or universal UICC card.

[0050] According to some embodiments, the SIM card stores private information of a mobile communication subscriber, and authenticates the user and creates a traffic security key when the subscriber accesses a mobile communication network, thereby enabling stable use of mobile communications.

[0051] According to some embodiments, when manufacturing a SIM card, according to the operator's request, the SIM card can be manufactured as a dedicated card for a specific mobile communication operator, and authentication information for accessing the operator's network (e.g., a universal subscriber identity module (USIM) application and an international mobile subscriber identity (IMSI), a K (subscriber key) value, an operator constant (OPc) value, etc.) can be preloaded into the SIM card and issued. Thus, the manufactured SIM card is received by the corresponding mobile communication operator and provided to the subscriber, and if needed later, the terminal can perform management in the UICC, such as installation, modification, and deletion of applications, by using a technology such as an over-the-air download (OTA) technology.

[0052] The subscriber may be able to use the application services and network of the mobile communication operator by inserting the UICC card into the owned mobile terminal, and may use the personal phone book, mobile communication phone number and authentication information stored in the UICC as is in the new terminal by transferring the UICC card from the existing terminal and inserting it into the new terminal when replacing the existing terminal with the new terminal. According to some embodiments, when the SIM module is remotely downloaded and installed in the UICC card, the SIM module of the mobile communication service that the user wants to use at the desired time point may be downloaded into the UICC card. In addition, according to some embodiments, multiple SIM modules are downloaded and installed in the UICC card, and only one SIM module may be selected and used therefrom. The UICC card may be fixed or not fixed to the terminal. In particular, the UICC fixed to the terminal is called eUICC (embedded UICC).

[0053] In the following of the specification, among UICC cards in which SIM modules can be downloaded and selected remotely, all UICC cards fixed or not fixed to the terminal are referred to as eUICC. The downloaded SIM module information is referred to as an eUICC profile or an eSIM profile. In the following of the specification, a communication service operator may be used in the same sense as a service operator, a communication operator, a mobile communication operator, and a communication company. For ease of description, in the following of the specification, the terms and names defined in the ETSI standard are used in the case of iSSP, and the terms and names defined in the GSMA standard are used in the case of eUICC. However, the present disclosure may not be limited by the terms and names, and may be equally applied to a system based on another standard.

[0054] As described above, the technical task to be achieved by the present disclosure is to provide a method and apparatus to allow a terminal using iSSP to accept the remote SIM provisioning scheme defined in GSMA, and download, install, and open the eSIM configuration file package to enable communication services.

[0055] In particular, the present disclosure includes the following embodiments to achieve this task:

[0056] A method for detecting whether predetermined information input into a terminal is information for eSIM profile download, and if a specific condition is satisfied, retrieving an eSIM bundle installed in the terminal without error processing;

[0057] A method for a terminal to collect eSIM bundle information of an iSSP and select an eSIM bundle to be used with reference to conditions specified by the terminal;

[0058] A method for downloading an eSIM bundle by requesting access including information indicating that the access is for generating or downloading a pre-subscribed bundle when a terminal accesses an SPB manager;

[0059] A method for generating or providing a bundle by a terminal by using predetermined information required for requesting eSIM bundle generation to an eSIM bundle or SPBM; and

[0060] A method for generating a network tunnel between an LPA and a corresponding eSIM bundle based on selected eSIM bundle information, and processing functions for the LPA through the tunnel.

[0061] Figure 1 A diagram illustrating an access hierarchy structure for accessing communication carrier information and an application responsible for access / management of communication carrier information for each UICC, eUICC, and iSSP according to some embodiments of the present disclosure.

[0062] A secure element (SE) is an element capable of downloading or installing a hardware-based network access module, including the above-mentioned UICC, eUICC, and iSSP. Since UICC, eUICC, and iSSP correspond to those described above, their detailed description will be omitted.

[0063] For the application 109 configured to control the operation and access to each SE, the card application toolkit (CAT) is defined as a standard in the UICC, the local profile agent (LPA) is defined as a standard in the eUICC, and the local bundling assistant (LBA) is defined as a standard in the iSSP, and the application 109 configured to control the operation and access to each SE can allow the terminal user to control the operation and access to each SE through the application 109, including the user interface (UI) function of the terminal.

[0064] The LBA 115 includes a secondary platform (SPB) loader agent, and the SPB loader agent directly communicates with the SPB loader 131 of the iSSP. The card application toolkit (CAT) client 111 is defined as a standard, and the CAT client 111 may optionally exist. The CAT client 111 may obtain the SIM application 123 information in the UICC by communicating with the CAT 121 of the UICC and may perform a reply. In the case of a terminal without a UI, the modem 119 may directly request and obtain the information of the SIM application 123 in the UICC through an AT command 121 message.

[0065] According to some embodiments, in the eUICC 105, if the terminal user wants to view the communication operator information in the LPA 113, the LPA 113 may request information related to the eSIM profile 129 (ie, SIM application) from the issuer security domain root (ISD-R) 127, and the ISD-R 127 may obtain information from each profile and may play back the obtained information.

[0066] According to some embodiments, in the case of iSSP 107, in order to enable the end user to access the communication operator information, the LBA 115 can request the bundled communication operator information with the telecom family identifier from the internal secondary platform bundle loader (SPBL) 131, and the SPBL 131 can collect the bundled metadata from the eSIM bundle 133 and the SIM bundle 135 as a telecom bundle, and can reply with the result of the requested information.

[0067] According to some embodiments, the SPBL 131 may only bring the metadata value of the bundle, and the eSIM bundle 133 may not store the information of the profile in the metadata of the bundle. Therefore, in the case of the eSIM bundle 133, the communication operator information may not be replied. In order for the eSIM bundle 133 to reply the communication service provider information of the profile, the SPBL 131 may enable the eSIM bundle 133 or the SPBL may enable the LPA, and the LPA may re-enable the eSIM bundle to access the eSIM bundle 133.

[0068] Figure 2 A diagram showing an environment for eSIM profile installation in an iSSP terminal according to an embodiment of the present disclosure.

[0069] In the terminal 200, the SSP is fixed to the modem in the form of a SoC, and the LBA 210 exists as a separate application. In the terminal in which the eUICC is installed, the terminal user can input an activation code or an advanced activation code 250 into the terminal as predetermined information required for downloading and installing the eSIM profile package in the terminal (e.g., directly input using a keyboard, scanning a quick response (QR) code, or inputting the terminal through communication with the terminal and the server).

[0070] The activation code or advanced activation code may be marked as AC and AAC, and AC includes AAC. The activation code may include an SM-DP+ address, which is a SIM server capable of downloading a configuration file or a server capable of notifying the SM-DP+ address; a token value indicating whether the purpose is to download a configuration file in SM-DP+; authentication information, etc., and the advanced activation code may include a uniform resource locator (URL) of a secure web portal capable of downloading a configuration file. AC for downloading eSIM configuration files may be marked as eSIM AC. If AC and AAC are entered in QR code form, LPA: is used as a prefix.

[0071] In the iSSP terminal, a bundle activation code 255 for downloading a bundle image can be introduced, and the bundle activation code can exist as a bundle activation code or a bundle advanced activation code. The bundle activation code or the bundle advanced activation code can be marked as bundle AC and bundle AAC, and the bundle AC includes bundle AAC.

[0072] The bundled AC can be distinguished by including LBA in the QR code information: or identifier information indicating that the bundled AC is used to download the bundle from the iSSP. The bundled AC may include all or part of the bundled AC identifier (e.g., AC_Format=3), the SPBM server address, the iSSP Info(), and the AC token, and may include the family ID and the bundle class, the SPBM owner ID, and the predefined parameters between the SPBM and the iSSP as additional information. The bundled AAC may include all or part of the service operator web server address (e.g., AC_Format=4), and may include the SPBM server address, the iSSP Info(), the AC token, the family ID and the bundle class, the SPBM owner ID, and the predefined parameters between the SPBM and the iSSP as additional information.

[0073] As described above, the bundled AC or eSIM RSP AC for downloading the eSIM profile package can be input in a QR code form and a form other than the QR code form. For example, there is a method in which a user presses a specific button as an input for requesting to download the eSIM profile or inputs text. Alternatively, there is a method in which a user clicks a button as an input for requesting to download the eSIM profile in an application configured to perform a communication opening service or a terminal receives a value returned by a specific function. Alternatively, a method may include storing a specific event value indicating downloading the eSIM profile in the iSSP in a server, and periodically polling whether the specific event value is in the server.

[0074] If the terminal receives the predetermined information in various forms as described above, the display / input unit of the LBA 210 of the terminal detects whether the activation code is for the eSIM based on the information. The LBA 210 may include an LPA 220 function to download the eSIM profile in the eSIM bundle. The LPA may communicate with an SM=DS storing an event value and an SM-DP+ address or SM-DP+, which is an eSIM profile generation and storage server configured to download a profile, where 240 is marked as SM-XX.

[0075] The LBA is connected to and communicates with the SPBM server, which is a server configured to generate and store a bundle image for downloading and installing the bundle image. Since the SPBM 230 server has been described above, a detailed description thereof will be omitted.

[0076] The smart security platform (SSP) 260 may also include bundles that do not include network access applications, such as multi-eSIM bundling and payment. If the LBA determines that the input AC / AAC value requires LPA 220, LPA 220 is executed, and if the eSIM bundling information in the iSSP to be accessed by LPA 220 is given and bundling is enabled, LPA 220 may communicate 280 directly with the bundled ISD-R.

[0077] Although the location of the memory is not separately shown, the iSSP includes the memory, and the memory may include information such as a bundle activation code, predetermined information required for bundle generation, and the like.

[0078] Figure 3 A diagram showing a basic process of eSIM profile installation in an iSSP terminal according to an embodiment of the present disclosure.

[0079] When the predetermined information is input into the iSSP terminal, the terminal detects 320 whether there is an eSIM activation code. The predetermined information may be manually or automatically input into the terminal by means of QR code scanning, user text input, camera input, etc., and the terminal determines whether the predetermined information is an eSIM activation code as a separate user input (e.g., button click) capable of distinguishing between an LPA: prefix and an LPA, or a predefined specific function value or event value for instructing downloading an eSIM configuration file according to a preconfigured command.

[0080] In the above process, the terminal can also perform a capability check of the terminal to determine whether the terminal can support eSIM configuration file download. In this process, the terminal determines whether the terminal is only equipped with iSSP, whether the terminal supports LPA function, or whether the terminal can generate eSIM bundle by itself or generate eSIM by interacting with the server.

[0081] If an eSIM AC is detected, the LBA of the terminal requests information about the eSIM bundles installed in the iSSP and determines 330 whether there is an eSIM bundle in the terminal that can be used to download and install one or more configuration files.

[0082] If there are eSIM bundles available in the terminal for downloading and installing one or more profiles, the terminal determines 340 whether to select and use one of the bundles based on user determination or terminal configuration. If no previously installed eSIM bundle is selected and used, or if no eSIM bundle is available, the terminal may generate 350 an eSIM bundle to download an eSIM profile.

[0083] The terminal may generate an eSIM bundle in the terminal using information acquired through a separate connection to a server that supports communication connected to the terminal or a memory of the terminal is opened, or may transmit the acquired predetermined information to the SPBM server to download the eSIM bundle. The terminal requests the user to select a bundle to be used from an existing bundle or a generated bundle, or selects a bundle according to a standard configured to the terminal, 340.

[0084] If a bundle to be used is selected, the terminal transmits the selected eSIM bundle information to the LPA to perform a preparation process for downloading a profile in the eSIM bundle or perform downloading, 360. If the terminal does not support the LPA function of processing the eSIM profile, a message of error processing or support failure may be displayed to the user. For example, if the terminal does not allow the use of the AC input for downloading the eSIM profile, an error processing and support failure may be displayed and the process may be terminated.

[0085] Figure 4 A diagram showing the process of downloading and installing, by an iSSP terminal, an eSIM profile in one of the existing eSIM bundles installed in the terminal.

[0086] If the subscriber 1000 signs up with the operator 1010 for an online or offline communication service, the subscriber 1000 may receive a QR code, a text message, etc. including AC information required for downloading an eSIM profile, and may input it into the LBA, 400. Alternatively, if the subscriber 1000 signs up in a service provider application or a web portal 1070, event values, functions, etc. pre-defined with the terminal may be pushed and input into the LBA 1030, 400.

[0087] If the corresponding information is input, the LBA 1030 of the terminal detects whether there is predetermined information that allows determination of whether the information is eSIM AC, 405. The information that allows determination of whether the information is eSIM AC may include LPA: as a prefix in the QR code, a specific code value of AC, an event value predefined between the terminal and the server, and function 405.

[0088] When the input information received in LBA 1030 is abnormal, the iSSP terminal should generally process the error, and if the terminal supports the function of eSIM AC processing and if the above-mentioned predetermined eSIM AC is detected, the terminal performs 415 the step of collecting bundling information without processing the error.

[0089] The LBA 1030 requests 415 a list and properties of bundles from the bundles previously installed in the iSSP 1050, where the family identifier is telecom and the bundle class is eSIM. The iSSP 1050, receiving the request from the LBA 1030, collects and combines 420 metadata for each eSIM bundle, information stored in the SPB loader or requested by enabling eSIM bundling as needed, and then replies 423 the result value to the LBA 1030.

[0090] The result value of the reply includes the bundle ID of the 423 eSIM bundle, the EID, information about the usage rights of the bundle, and part or all of the bundle status information, and needs to include the eSIM bundle identification information. The usage rights refer to the list of companies that are allowed to download the eSIM profile in the corresponding eSIM bundle. The status information refers to information about whether the corresponding bundle is enabled, disabled, or active.

[0091] LBA 1030 determines 425 whether the number of available eSIM bundles pre-installed in the terminal is one or more through the replied information. If there are one or more available eSIM bundles, the terminal determines and selects 430 whether to perform downloading to one of the existing eSIM bundles. The determination of whether to perform downloading to one of the existing eSIM bundles can be queried 435 from the user for processing, and can be determined by the terminal according to the configuration of the terminal.

[0092] If it is determined to perform downloading to one of the existing eSIM bundles and the determination is replied, the terminal selects 430 one of the eSIM bundles detected according to the user selection or the specific determination of the terminal. If the terminal selects the eSIM bundle arbitrarily, the terminal may select the eSIM bundle in ascending order of the number of the profiles installed in the eSIM bundle.

[0093] As an embodiment of the method, the following case is possible, but not limited thereto. The terminal preloads and releases multiple eSIM bundles, and stores the number and information of unused bundles among the installed bundles in the LBA, and if there are unused bundles by mapping with the bundle information replied from the iSSP, the terminal receives the user's consent to use the bundle or randomly selects one of the bundles according to the terminal configuration. The following is an example of this case.

[0094] Reply message from iSSP

[0095] eSIM bundle, bundle ID = 3, EID = XXX, allowed installation carrier = Samsung, status information = disable LBA storage information

[0096] eSIM bundling, Bundle ID = 2, EID = XXX, Use = N

[0097] eSIM bundling, Bundle ID = 3, EID = XXX, Usage = Y

[0098] eSIM bundling, Bundle ID = 4, EID = XXX, Use = N

[0099] Select and provide any two of the following unused

[0100] eSIM bundling, Bundle ID = 2, EID = XXX, Use = N

[0101] eSIM bundling, Bundle ID = 4, EID = XXX, Use = N

[0102] In another method, the user 1000 may directly select an eSIM bundle, or when the terminal selects an eSIM bundle, in order to help the terminal make a determination, the LBA 1030 may simultaneously or further request information from the iSSP 1050 in step 415, such as the number of eSIM profiles installed in the eSIM bundle, the name of the installed communication service provider, etc., to use the information. When one or more eSIM bundles are detected, the process of selecting an eSIM bundle may be performed in step 425.

[0103] Although one or more available existing eSIM bundles are detected, if the user replies not to use the detected eSIM bundle, LBA1030 may execute a method for generating an eSIM bundle according to the configuration of the terminal or terminate the generation of the eSIM bundle. The method for generating an eSIM bundle will refer to Figure 6 and Figure 7 will not be described in detail. Figure 4 Described in.

[0104] Through the above process, if an eSIM bundle in which an eSIM profile is to be installed is selected in the terminal, the LBA 1030 transmits 450 to the LPA a command for executing a process for performing AC processing, including the selected bundle ID value. If the state information of the selected bundle = disabled state, before executing 450, the LBA executes 440 a process for enabling the selected eSIM bundle in the iSSP.

[0105] The LPA receiving the command 450 generates 455 a network tunnel for connecting directly to the bundled ISD-R. Thereafter, the LPA and the ISD-R of the selected bundled platform 460 perform 460 a preparation process for profile download. The preparation process for profile download is performed by applying the processes and functions described in the GSMA Remote SIM Provisioning (RSP) standard.

[0106] After completing the preparation process, the process of downloading the eSIM profile is processed 465 according to the GSMA Remote SIM Provisioning (RSP) procedure.

[0107] Figure 5 A detailed diagram of the process of identifying and determining the activation code for the installation of an eSIM profile in an iSSP terminal according to the present disclosure is shown, and is Figure 4 The additional description of the above steps 400 and 405 corresponds to the above steps 400 and 405.

[0108] Figure 5 A method 500 of using an issued QR code by an iSSP terminal, such as a credential for installing and opening an eSIM profile, or a method 530 of installing and opening an eSIM profile through a web portal or application is shown.

[0109] As a first option, a method of detecting 500AC using a QR code will be described.

[0110] like Figure 4 As mentioned in , if a subscriber 1000 signs up 510 with an operator 1010 for an online or offline communication service, the subscriber may receive a QR code including AC information required to download an eSIM profile.

[0111] The user 1000 scans 515 the QR code sent by the camera of the user terminal to download the eSIM profile, and the QR code includes information related to the SM-DP+ address, AC token, and AC_Format=1 defined in the current GSMA RSP protocol. The AC token is also called a matching ID, and is a value transmitted for downloading the eSIM profile in the SM-DP+, and the matching ID is pre-generated in the ordered process of profile generation between the communication operator and the SM-DP+ server. For more information, please refer to the GSMA RSP specification.

[0112] If the corresponding AC is input to the iSSP terminal, LBA 1030 determines whether the input value is an AC for downloading an eSIM profile through a capability check of the device, and determines whether the terminal supports LPA. If an AC value for eSIM download is detected, and if it is determined that the iSSP terminal supports the LPA function, LBA 1030 requests 415 the bundling information from iSSP 1050 and performs Figure 4 The subsequent process mentioned in .

[0113] The second option is to open it through a web portal or app.

[0114] The subscriber 1000 may subscribe to a communication service through the service operator's application 1070. The service provider may be an application of a mobile communication operator or a service operator intermediating the mobile communication operator, and may be expressed as an SP application or an SPapp.

[0115] An example of obtaining 570AC through an application is as follows: A user 1000 accesses 575 an application 1070 from an iSSP terminal owned by the user. When accessing the application, the terminal sends information of the terminal to the application.

[0116] In the case of access through a web portal, processes 540 to 565 may be performed instead of process 575, and process 580 may be performed. When the process is performed, user 1000 signs a service contract with operator 1010 and receives a QR code as an AAC, which includes information for accessing the web portal. The QR code includes prefix -LPA: information and includes AC_Format=2 and the address of the web portal. For detailed information on AAC, refer to the GSMA RSP specification. The web portal used for communication opening processing can be a web portal of a communication operator or a web portal of an operator that mediates communication services.

[0117] Thereafter, when the user 1000 scans the QR code through the terminal, the LBA 1030 detects whether there is an eSIM AC and checks 550 the capabilities of the device, such as whether the device supports the LPA function or is only an iSSP terminal, and if the LBA 1030 supports the LPA function, the LBA 1030 transmits information about the QR code to the LPA 1040 and parses 560 it, detects 565 a network portal address and then connects 1070 to the detected network portal address.

[0118] Subsequently, when the user 1000 requests eSIM profile download via a button click on the corresponding application or web portal 1070, the terminal transmits 580 information of the terminal and performs a capability check on whether the terminal is a compatible terminal. If it is detected 585 through the capability check that the terminal is an iSSP-only terminal and the selected communication service provider only supports SM-DP+, the application / web portal 1070 may display 585 a notification indicating that an additional search is required to determine whether the user has an eSIM bundled in the terminal, which may enable downloading of the corresponding eSIM profile.

[0119] Thereafter, the application / web portal 1070 requests 590 the user 1000 to agree to request the eSIM bundle search of the terminal, and if the user agrees 593, the user 1000 requests 596 a command (e.g., Event=Check RSP D / L to Bundle) predefined between the server and the terminal from the LBA 1030 to search for information related to the eSIM bundle. Upon receiving the request, the LBA 1030 transmits a request 415 for searching for eSIM bundle information to the iSSP 1050, and executes the previously executed command in Figure 4 The terminal that has received the notification 585 can omit the user consent process 590, 593 according to the configuration of the terminal or the application / web portal.

[0120] Figure 6 A diagram showing a process of downloading a bundle and downloading an eSIM profile in the corresponding bundle through authentication and capability negotiation between an iSSP terminal and an SPBM server according to an embodiment of the present disclosure.

[0121] exist Figure 3 In , if there is no 330 available eSIM bundle or the existing eSIM bundle is not used 340, the terminal may generate 350 a bundle by using predetermined information stored in the terminal. Figure 6 , as an example of a method of generating a bundle in 350 , a method of generating an eSIM bundle in an SPBM server and downloading the generated bundle to a terminal will be described.

[0122] Entity implementation reference of subscriber 1000, operator 1010, SM-DP+ 1020, LBA 1030, LPA 1040 and iSSP 1050 Figure 4 and Figure 5A series of operations described in detail, inputting a text string or QR code as predetermined information, and identifying information automatically pushed to the terminal from the app, and event information periodically sent to a specific server and polled by the terminal, and the terminal detecting information about eSIM AC. After the terminal performs a capability check (including whether the terminal supports the LPA function), if the terminal is an iSSP terminal and supports eSIM AC, LBA 1030 requests information about eSIM bundling from iSSP 1050 and obtains 600 the information.

[0123] If the user 1000 or the terminal decides not to use one of the requested and replied eSIM bundles or if there is no available reply eSIM bundle 610, the terminal generates a new bundle and determines whether to perform downloading, and if the terminal has a bundled AC and wants to use AC, the terminal determines 615 whether to use AC. The determination 615 whether to use AC can be processed by requesting 620 user consent or can be determined based on the configuration of LBA.

[0124] If it is determined 615 whether AC is used, the LBA 1030 selects and provides one of the two download options 625. The terminal manufacturer receives the corresponding bundle activation code and ETSI bundle activation code issued for the terminal LBA 1030 or iSSP 1050 through pre-contracting with the SPBM 1080 company, and can store the received bundle activation code in a secure storage (such as the iSSP of the terminal), or can store the bundle activation code in an open server for communication service open management, and then can request and receive the bundle activation code from the server for use.

[0125] Option 1 is a method of storing the bundled AC in the iSSP 1060 of a plurality of terminals by contract in advance and using it at the time of selection, and Option 2 is a method of using predefined parameters between the terminal and the SPBM 1080.

[0126] The terminal selects one of the options by determining according to the user's selection or the configuration of the terminal, and transmits predetermined information required for downloading to the SPBM 1080. The address of the SPBM 1080 may be pre-stored in the iSSP 1050 or LBA 1030 of the terminal. In the case of option 1, information 630 transmitted to the SPBM 1080 is transmitted from the LBA 1030 to the SPBM 1080, and the information includes information stored in the bundled AC, such as the AC token, the iSSP information (), and the family ID, and in the case of option 2, the transmission 630 is performed using a specific parameter as a necessary value capable of identifying a pre-defined contract.

[0127] If information is sent according to option 1 and option 2, during the capability negotiation and mutual authentication process between LBA 1030 and SPBM 1080, SPBM 1080 identifies 635 the corresponding contract and downloads 645 the pre-signed eSIM bundle to iSSP 1060. The bundle contains the bundle image, the bundle's Familyid, BundleClass, and the authentication token required for installation on the terminal.

[0128] If a result indicating that the eSIM bundle has been downloaded and installed is replied 650 from iSSP 1060 to LBA 1030, LBA 1030 allocates 655 an ID for the bundle, and transmits 6650 a command to LPA 1040 for LBA 1030 to execute a process for performing AC processing (including the corresponding generation of a bundle ID value). LPA 1040, which receives the command, may generate 670 a tunnel between the ISD-Rs of the bundle, and then LPA 1040 may perform a preparation process 673 for downloading an eSIM profile to the selected bundle, and a profile download process 675 according to a process defined in RSP.

[0129] Figure 7 A diagram showing a process of self-generating a bundle in an iSSP terminal according to an embodiment of the present disclosure.

[0130] exist Figure 3 In , if there is no 330 available eSIM bundle or the existing eSIM bundle is not used 340, the terminal may generate 350 a bundle by using predetermined information stored in the terminal. Figure 7 In the method of generating an eSIM bundle in 350, a method of generating an eSIM bundle by itself and providing the eSIM bundle will be described.

[0131] On receiving Figure 4 and Figure 5 After the above process replies with the number of eSIM bundles, in the case where there is no available eSIM bundle replied at 330 or it is determined at 340 that one eSIM bundle selected from the eSIM bundles requested by the user 1000 or the terminal and replied is not used, the terminal may generate a new bundle and may request 715 the user for consent on whether to perform downloading based on the configuration of the terminal, or may perform downloading without requesting separate user consent.

[0132] If downloading is allowed according to the configuration of the user or the terminal, the LBA determines 725 whether to perform a process for generating an eSIM bundle instance. The terminal determines whether to generate an eSIM bundle by interworking with the SPBM server or to generate an eSIM bundle by itself according to specific conditions, and the network connection state, terminal mobility, specific time slot, OS version, etc. can be regarded as conditions for determination. For example, if there is no network connection, the terminal cannot connect to the server, so that the terminal generates an eSIM bundle by itself.

[0133] If the terminal determines to generate an eSIM bundle by itself by combining the conditions, the terminal requests the iSSP to generate an instance by using a specific eSIM bundle template 730. The method and process 730 of generating an instance are described below as an example.

[0134] By pre-signing with SPBM / EUM, the terminal manufacturer stores the specific eSIM bundle template that can generate instances and the predetermined information required to authenticate the eSIM bundle template in the terminal's secure memory (such as iSSP). If it is determined that the terminal generates the eSIM bundle by itself, the LBA selects the bundle template pre-stored in the iSSP and sends an instantiation command (e.g., instance generation=tag 1).

[0135] If the selected eSIM bundle of the iSSP receives the instantiation command, the bundle is copied, including the information included in the ECASD. ECASD is the module responsible for managing and generating keys and certificates related to security and authentication in the eSIM bundle, and should store the ECASD GSMA CI root public key, ECAD content, EUM key sets for update (key / certificate update), EUM certificates for eUICC authentication (CERT.EUM.ECDSA), eUICC private keys for generating ECDSA signatures (SK.EUICC.ECDSA) and eUICC certificates (CERT.EUICC.ECDSA).

[0136] Instead, only the bundle template is copied from the eSIM bundle, and then the predetermined information required for bundle authentication is generated on the fly in the iSSP's main platform and injected into the bundle.

[0137] As an example of the process, the iSSP has the EUM key set, GSMA CI root public key, EID and EUM certificate in advance, and when receiving a request for bundle generation from the LBA, the iSSP uses the corresponding EUM key set in the iSSP's main platform and generates a private key and public key pair. After that, the eUICC certificate is generated and stored in the ECASD by signing with the EID, the generated public key and the EUM certificate.

[0138] When generating a private key and public key pair, if the pair is generated by extracting and using the same key derived from the same variable, or using the EID and eUICC certificate as the same value, a bundle with the same EID and eUICC certificate is generated in multiple terminals, and the terminal allocates a different bundle ID value to each bundle for management. If mutual authentication of the profile information stored in the SM-DP+ server and a specific bundle is required, the LBA transmits the bundle ID information to the LPA (InitiateLPA(Selected Bundle ID)), and then performs subsequent operations.

[0139] The terminal may perform an attach process 735 for performing personalization of ECASD by using information stored in the iSSP. As described above, the eUICC certificate is generated using the public key (PK.EUICC.ECDSA) of the eUICC, the EID as the ID of the eUICC, and the EUM signature.

[0140] After the instance is generated, ECASD personalization is performed using the eUICC certificate, private key, and EUM certificate. The terminal manufacturer stores the number of eUICC private keys, EUM certificates, and pre-generated and signed eUICC certificates (which are pre-signed by the SIM manufacturer) in the iSSP, and then after the instance is completed, one of the EUM certificates, eUICC certificates, and eUICC private key sets that are not used for the personalization process is selected and used for ECASD personalization. The used eUICC certificate is changed to the used state and processed so as not to be used for the next generated eSIM bundle. If the eSIM bundle is deleted, the status of the eUICC certificate becomes available again.

[0141] One method is to protect and store the EID in advance instead of the eUICC certificate, and select one of the unused EID values ​​in the stored EID, thereby generating / signing and using the eUICC certificate immediately. The eUICC certificate is signed with the EUM private key of the EUM key set and stored in the bundled ECASD generated using the EUM certificate and the eUICC private key. If the eSIM bundle is deleted, the status of the EID becomes available again.

[0142] When the generation is completed, the LBA transmits the bundle information to the SPBM, and the SPBM can perform an update by providing metadata information of the bundle. If the terminal determines that the template of the eSIM bundle stored in the terminal was last used a long time ago (e.g., more than one year), then when or after the eSIM bundle instance is generated 730, the terminal can access the SPBM server after personalization 735 to determine whether there are further OS updates and can update the OS.

[0143] The LBA now assigns an ID to the bundle and transmits the bundle ID to the LPA 740 so that the LPA can perform subsequent processes of the 360 ​​eSIM profile D / L.

[0144] Figure 8 A detailed configuration of a terminal in a wireless communication system according to some embodiments of the present disclosure is shown.

[0145] refer to Figure 8 , terminal 800 includes a transceiver 810, a message processing unit 820, a processor (control unit) 830, a memory 840, and a screen display unit 860. However, the elements of terminal 800 are not limited to the above description. For example, the terminal may include more or less elements than the above elements. In addition, at least one element of terminal 800 may be implemented in a chip form.

[0146] According to some embodiments, the transceiver 810 performs functions for transmitting or receiving signals through a wireless channel, such as frequency band conversion and amplification of the signal. That is, the transceiver 810 can up-convert the baseband signal into a radio frequency (RF) band signal, and then can transmit the up-converted signal through an antenna. The transceiver 810 may include an RF processing unit that down-converts the RF band signal received through the antenna into a baseband signal, and may also include a transmit filter, a receive filter, an amplifier, a mixer, an oscillator, a digital-to-analog converter (DAC), an analog-to-digital converter (ADC), etc.

[0147] In addition, the transceiver 810 may receive a signal through a wireless channel, may output a signal to the processor 830, and may transmit a signal output from the processor 830 through a wireless channel. Figure 8 In FIG. 8 , only one antenna is shown, but the terminal may include multiple antennas. The transceiver 810 may include multiple RF chains.

[0148] The transceiver 810 may perform beamforming. For beamforming, the transceiver 810 may adjust the phase and amplitude of each signal transmitted or received through multiple antennas or antenna elements. The baseband processing unit in the transceiver 810 performs a conversion function between a baseband signal and a bit stream according to the physical layer standard of the system. For example, during data transmission, the baseband processing unit generates complex symbols by encoding and modulating the transmitted bit stream. When receiving data, the baseband processing unit recovers the received bit stream by demodulating and decoding the baseband signal provided from the radio frequency processing unit. For example, in the case of following an orthogonal frequency division multiplexing (OFDM) scheme, during data transmission, the baseband processing unit generates complex symbols by encoding and modulating the transmitted bit stream, maps the complex symbols to subcarriers, and then configures OFDM symbols by performing an inverse fast Fourier transform (IFFT) operation and a cyclic prefix (CP) insertion.

[0149] Further, when receiving data, the baseband processing unit divides the baseband signal provided from the RF processing unit in units of OFDM symbols, reconstructs the signal mapped to the subcarriers through a fast Fourier transform (FFT) operation, and then reconstructs the received bit stream through demodulation and decoding.

[0150] The transceiver 810 may be defined as a transceiver device and may include a message transceiver. The message processing unit 820 may perform transmission through the transceiver 810 or may perform an operation of determining what type of message the received data is. For example, the message processing unit 820 may determine whether the received message is a control message (including a system information block (SIB)) of a radio resource control (RRC) layer or a data message of a user. The message processing unit 820 may be included in the processor 830.

[0151] The processor 830 may control the overall operation of the terminal 800. For example, the control unit 830 transmits or receives a signal through the message processing unit 820. In addition, the processor 830 records and reads data in the memory 840. There may be at least one processor 830. For example, the control unit 830 may include a communication processor (CP) that performs communication control and an application processor (AP) that controls a higher layer such as an application program.

[0152] According to some embodiments, if a bundling or activation code is stored in the memory 840 in advance, the processor 830 may request corresponding information from the memory 840 to allow the screen display unit 860 to display the information, or may receive the information to perform additional operations.

[0153] The processor 830, the message processing unit 820, and the transceiver 810 may control the terminal 800 to access the operator network selected according to the user or terminal configuration. According to some embodiments, the processor 830 matches the data record read by the memory 840 or the information collected by the processor 830, the message processing unit 820, and the transceiver 810 to perform a process in which the terminal infers information that can be referred to as making a service selection. According to some embodiments, the processor 830 may determine whether user consent is required for specific information stored in the terminal 800, and may display the determination result on the screen display unit 860.

[0154] The processor 830 may control the terminal 800 to perform operations corresponding thereto. According to some embodiments, the processor 830 may include an application responsible for executing and controlling security elements such as LPA, CAT, and LBA. In addition, the processor 830 may determine whether an LPA operation for eSIM profile processing is required, and obtain predetermined information required for generating a bundle through the processor 830 and the memory 840 to process subsequent processes.

[0155] The processor 830 obtains configuration file download type information that may be provided by the communication operator, which has been collected through the message processing unit 820 and the transceiver 810, and may combine the configuration file download type information with the presence or absence of the iSSP and information about the iSSP (which is obtained from the memory 840 of the terminal 800) to control the terminal 800, thereby determining the storage location of the configuration file and storing it as the required bundle.

[0156] In addition, the information about the profile type that may be provided by the operator may include at least one of a telecommunication group identifier, a telecommunication group class, an eSIM bundle identification information, and a SIM bundle identification information. The processor 830 may combine the capability information of the terminal acquired from the message processing unit 820, the transceiver 810, and the memory 840 with the predetermined information input from the screen display unit 860 to determine whether the terminal supports eSIM profile download, and if the terminal supports eSIM profile download, the processor 830 may determine whether to perform an additional process for eSIM bundle generation or to perform a download to an existing eSIM bundle.

[0157] The processor 830 may control the terminal 800 to send and process a request for protecting a bundle activation code stored in the memory 840 or predetermined authentication information required for bundle generation. According to some embodiments, the processor 830 may receive a bundle activation code from the memory 840, may send information to the SPBM server through the message processing unit 820 and the message transceiving unit 810, and may select specific parameters to send information to the SPBM server through the message processing unit 820 and the message transceiving unit 810. If it is determined that the terminal does not provide the LPA function, the processor 830 may control the terminal 800 to limit the operation for downloading the eSIM profile.

[0158] The memory 840 stores data such as basic programs, applications, and configuration information for the operation of the terminal 800. The memory 840 may include a UICC, an eUICC, an iSSP, and an iUICC, which is a hardware security module built into the terminal. In an embodiment, the memory 840 includes a storage medium or a combination of storage media, such as ROM, RAM, a hard disk, a CD-ROM, a DVD, etc., and provides stored data at the request of the processor 830. The memory 840 may be integrated with the processor 830 and a system on chip (SoC). For example, in the case of an iSSP, the memory 840 is integrated with the processor 830. In addition, the memory 840 may include a plurality of memories.

[0159] The screen display unit 860 may display information processed by the processor 830, or may display the process of the operation performed by the terminal 800 through the processing of the processor 830 or the consent of the event requested to be performed by the user. According to some embodiments, the input and input result of AC / AAC or bundled AC / AAC may be replied to the user for display. According to some embodiments, the LBA application may control or include the screen display unit 860 and the processor 830. Of course, the present disclosure is not limited to the above examples.

[0160] The method according to the embodiment stated in the claims and / or specification of the present disclosure can be implemented in hardware, software or a combination of hardware and software. When the method is implemented by software, a computer-readable storage medium for storing one or more programs (software modules) can be provided. One or more programs stored in the computer-readable storage medium can be configured to be executed by one or more processors in an electronic device. At least one program may include instructions for causing an electronic device to execute the method of various embodiments of the present disclosure defined in the attached claims and / or this document.

[0161] The program (software module or software) may be stored in a non-volatile memory including random access memory and flash memory, read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic disk storage, compact disk rom (CD-ROM), digital versatile disk (DVD) or other types of optical storage devices, or magnetic tape cassettes. Alternatively, any combination of some or all of these may form a memory storing the program.

[0162] In addition, multiple such memories may be included in the electronic device. In addition, the program may be stored in a connectable storage device accessible through a communication network, such as the Internet, an intranet, a local area network (LAN), a wide area network (WAN), and a storage area network (SAN) or a combination thereof. Such a storage device may access the device of the embodiment of the present disclosure through an external port. In addition, a separate storage device on the communication network may access the portable electronic device.

[0163] In the above detailed embodiments of the present disclosure, the elements included in the present disclosure are represented in singular or plural form according to the detailed embodiments presented. However, the singular form or plural form is selected for the convenience of describing the situation applicable to the presentation, and the various embodiments of the present disclosure are not limited to a single element or multiple elements thereof. In addition, multiple elements represented in the specification can be configured as a single element, or a single element in the specification can be configured as multiple elements.

[0164] Although the present disclosure has been described with various embodiments, various changes and modifications may be suggested to those skilled in the art. The present disclosure is intended to encompass such changes and modifications as fall within the scope of the appended claims.

Claims

1. A method for installing an embedded subscriber identity module (eSIM) profile by a terminal of an application integrated intelligent security platform (iSSP), the method comprising: Receive input of an activation code; In case the activation code is associated with the request for an eSIM profile, obtaining information about an eSIM bundle in which the eSIM profile is installed; identifying whether there is at least one eSIM bundle capable of downloading an eSIM profile in the terminal based on the obtained information; In a case where at least one eSIM bundle exists in the terminal and one of the at least one eSIM bundle is selected for downloading an eSIM profile from the at least one eSIM bundle, performing an eSIM profile download process for one of the at least one eSIM bundles; and In a case where the at least one eSIM bundle does not exist in the terminal or one of the at least one eSIM bundle is not selected, an eSIM bundle obtaining procedure for downloading an eSIM profile is performed.

2. The method according to claim 1, wherein: Get information about eSIM bundling including: Information about a bundle having a specific bundle identification ID and a specific bundle class among at least one pre-installed eSIM bundle in the terminal is obtained.

3. The method according to claim 2, wherein: The eSIM configuration file download process includes: generating a tunnel configured to connect one of the at least one eSIM bundle and the issuer security domain-root ISD-R; and Download the eSIM configuration file through the tunnel, One of the at least one eSIM bundle selected from the at least one eSIM bundle has a specific bundle ID and a specific bundle class.

4. The method according to claim 3, wherein: One of the at least one eSIM bundle is selected based on a user input or the activation code.

5. The method according to claim 1, wherein: The eSIM bundling acquisition process includes: Get information related to eSIM bundling; Sending the eSIM bundling related information to the secondary platform bundling manager SPBM server; and The eSIM binding in the iSSP of the terminal is received from the SPBM server based on the eSIM binding related information.

6. The method according to claim 5, wherein: The eSIM bundling related information includes activation code information and pre-configured parameter information about bundling.

7. The method according to claim 1, wherein: The eSIM bundling acquisition process includes: An eSIM bundle is generated by using a stored eSIM bundle template and information for eSIM bundle authentication.

8. A terminal using an integrated intelligent security platform iSSP, the terminal comprising: Input unit; Transceiver; and A controller, the controller being configured to: Controlling the input unit to receive input of an activation code; In case the activation code is associated with a request for an embedded subscriber identity module (eSIM) profile, obtaining information about an eSIM bundle in which the eSIM profile is installed; identifying whether there is at least one eSIM bundle capable of downloading an eSIM profile in the terminal based on the obtained information; In a case where the at least one eSIM bundle exists in the terminal and one of the at least one eSIM bundle is selected for downloading an eSIM profile from the at least one eSIM bundle, performing an eSIM profile download process for one of the at least one eSIM bundles; and In case that the at least one eSIM bundle does not exist in the terminal or one of the at least one eSIM bundle is not selected, an eSIM bundle obtaining procedure for downloading the eSIM profile is performed.

9. The terminal according to claim 8, further comprising: a memory in which the iSSP is installed, The controller is further configured to obtain information about a bundle having a specific bundle identification ID and a specific bundle class in at least one pre-installed eSIM bundle in the terminal.

10. The terminal according to claim 9, wherein: The controller is further configured to perform the eSIM profile download process by selecting one of the at least one eSIM bundles having a specific bundle ID and a specific bundle class, generating a tunnel configured to connect the selected bundle and an issuer security domain-root ISD-R, and controlling the transceiver to download the eSIM profile through the tunnel. The terminal according to claim 10 , wherein: The controller is further configured to select one of the at least one eSIM bundles based on a user input and the activation code.

12. The terminal according to claim 8, wherein: The controller is also configured to perform the eSIM bundling acquisition process by obtaining eSIM bundling related information, controlling the transceiver to send the eSIM bundling related information to a secondary platform bundling manager SPBM server, and controlling the transceiver to receive the eSIM bundling in the iSSP of the terminal from the SPBM server based on the eSIM bundling related information.

13. The terminal according to claim 12, wherein: The eSIM bundling related information includes activation code information and pre-configured parameter information about bundling.

14. The terminal according to claim 9, wherein: The controller is further configured to perform the eSIM bundle obtaining process by generating the eSIM bundle using a stored eSIM bundle template and information for eSIM bundle authentication.

Images