PROFILE ACQUISITION PROGRAM, ELECTRONIC INFORMATION STORAGE MEDIUM, AND PROFILE ACQUISITION METHOD

Abstract

To provide a profile acquisition program, an electronic information storage medium, and a profile acquisition method that can reduce a burden for identification of a user received from a common carrier during addition of a profile and maintain an authentication level.SOLUTION: A communication terminal 4 performs local authentication by using information for authentication received from a user and transmits, to a management server 1, an EID of an IC module 5, data for identification of the user, and a result of the local authentication. The communication terminal 4 acquires a profile generated by the management server 1 according to notification of success in identification performed by an authentication server 2 based on the data for identification and identification photograph data of the user, and stores the profile in the IC module 5.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to the technical field of electronic information storage media capable of storing a plurality of profiles. [Background technology]

[0002] Conventionally, SIM cards (hereinafter sometimes referred to as UICC) used in mobile phones have only data of one telecommunications carrier written on them, and are used for the telecommunications services of that telecommunications carrier. Therefore, when a user changes a telecommunications carrier, it is necessary to obtain a new UICC (Universal Integrated Circuit Card). In recent years, a new SIM card called eUICC (Embedded Universal Integrated Circuit Card) has been specified by an industry group and is gradually becoming more widespread. The biggest difference between eUICC and UICC is that it can be equipped with multiple pieces of data called profiles, which correspond to the conventional UICC functions. These profiles can be added or deleted by the user via the wireless communication function of the mobile phone. By selecting one of the multiple profiles in the mobile phone, the user can easily use the telecommunications services of multiple telecommunications carriers. Such profiles include a service table indicating the functions provided by the UICC, as disclosed in Patent Document 1, for example. In addition, Non-Patent Documents 2 and 3 disclose that a profile is downloaded from SM (Subscription Manager)-DP (Data Preparation)+ via SM (Subscription Manager)-DS (Discovery Service) by the LPA (Local Profile Assistant) function in the device and stored in the eUICC. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 5149516 [Non-patent literature]

[0004] [Non-Patent Document 1] GSM Association Official Document SGP.21-RSP Architecture Version 2.1 27 February 2017 [Non-Patent Document 3] GSM Association Official Document SGP.22-RSP Technical Specification Version 2.2 01 September 2017 Summary of the Invention [Problem to be solved by the invention]

[0005] Incidentally, eUICC can add profiles using its wireless communication function, but such addition is equivalent to a new contract for a conventional UICC. Therefore, identity verification is required when adding a profile to an eUICC, which may impair the convenience of eUICC, which allows users to easily use communication services from multiple telecommunications carriers by adding and selecting profiles.

[0006] Therefore, the present invention has been made in consideration of the above points, and aims to provide a profile acquisition program, an electronic information storage medium, and a profile acquisition method that can maintain the authentication level while reducing the burden of user identity verification placed on a telecommunications carrier when adding a profile. [Means for solving the problem]

[0007] In order to solve the above problem, the invention described in claim 1 provides a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the system including an authentication means that performs local authentication using authentication information received from the user, and a computer that can obtain identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal. The device is characterized by having a first transmitting means for transmitting identification information of a storage medium, the user's identity verification data, and the result of the local authentication to the management server, a receiving means for receiving an identity verification request transmitted from the authentication server via the management server, an acquiring means for acquiring the user's appearance photographed by a camera using a predetermined application as the identification photo data in response to the identity verification request, a second transmitting means for transmitting the identification photo data acquired by the acquiring means to the authentication server via the management server, and a control means for acquiring the profile generated by the management server in response to a notification of successful identity verification of the user by the authentication server, and storing it in the electronic information storage medium.

[0008] The invention described in claim 2 is characterized in that, in the profile acquisition program described in claim 1, it further includes a judgment means for judging whether or not a certificate of the authentication server is stored in the communication terminal, and when the judgment means judges that the certificate of the authentication server is not stored, the first transmission means transmits identification information of the electronic information storage medium, the user's identity verification data, and the result of the local authentication to the management server.

[0009] The invention described in claim 3 is characterized in that, in the profile acquisition program described in claim 1 or 2, the certificate of the authentication server is generated by the authentication server based on identification information of the electronic information storage medium.

[0010] The invention described in claim 4 is characterized in that, in the profile acquisition program described in any one of claims 1 to 3, the profile is generated in response to a notification of successful identity verification by the authentication server and successful verification of the result of the local authentication.

[0011] The invention described in claim 5 is a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server, the administration server generating a profile required for the user to use the communication service in response to a successful notification of the identity verification by the authentication server, and a communication terminal used by the user to use the communication service, the communication system including an electronic information storage medium mounted on the communication terminal, the electronic information storage medium having an authentication means that performs local authentication using authentication information received from the user, and an identification information of the electronic information storage medium, the user, and an administration server that performs authentication of the user based on a successful notification of the identity verification by the authentication server. the user's appearance photographed by a camera using a predetermined application as the identification photo data in response to the identification request; a second transmission means for transmitting the identification photo data acquired by the acquisition means to the authentication server via the management server; and a control means for acquiring the profile generated by the management server in response to a notification of success of the identification by the authentication server, and storing the profile in a non-volatile memory.

[0012] The invention described in claim 6 is a profile acquisition method for a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and that generates a profile required for the user to use the communication service in response to a successful identity verification notification by the authentication server, and a communication terminal used by the user to use the communication service, the method being executed by a computer capable of acquiring identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal, the method performing local authentication using authentication information received from the user. a step of transmitting identification information of the electronic information storage medium, the user's identity verification data, and the result of the local authentication to the management server; a step of receiving an identity verification request transmitted from the authentication server via the management server; a step of acquiring the user's appearance photographed by a camera using a predetermined application as the identification photo data in response to the identity verification request; a step of transmitting the acquired identification photo data to the authentication server via the management server; and a step of acquiring the profile generated by the management server in response to a notification of success of the identity verification by the authentication server and storing it in the electronic information storage medium. Effect of the Invention

[0013] According to the present invention, it is possible to maintain the authentication level while reducing the burden of user identity verification imposed on a communication carrier when adding a profile. [Brief description of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram illustrating an example of a schematic configuration of a communication system S. [Diagram 2] FIG. 2 is a diagram illustrating an example of a schematic configuration of a communication terminal 4. [Diagram 3] FIG. 13 is a diagram showing an outline of the operation when a profile is acquired for the first time. [Figure 4] FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the first time. [Diagram 5] FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the first time. [Figure 6] FIG. 13 is a diagram showing an outline of the operation when a profile is acquired for the second or subsequent time. [Figure 7] FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the second or subsequent time. [Figure 8] FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the second or subsequent time. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

[0016] [1. Overview of communication system S] First, referring to FIG. 1, a schematic configuration of a communication system S according to an embodiment of the present invention will be described. FIG. 1 is a diagram showing a schematic configuration example of the communication system S. As shown in FIG. 1, the communication system S includes a management server 1, an authentication server 2, a relay server 3, and a communication terminal 4. Here, in the communication system S, the management server 1 is provided for each communication carrier that provides a communication service, for example, and in this embodiment, one of the management servers 1 will be described as an example. The management server 1, the authentication server 2, and the relay server 3 are capable of communicating with each other via a network NW. The network NW is, for example, the Internet or a wireless communication network of a communication carrier (for example, a 3G, 4G, or 5G network). The communication terminal 4 is capable of accessing and communicating with the management server 1 and the relay server 3 via the network NW.

[0017] The management server 1 is a server that includes SM-DP+, generates a profile required for a user of the communication terminal 4 to use the communication service, and manages the profile by linking it to an EID (eUICCID: an individual identifier of an eUICC, which is an example of identification information of an electronic information storage medium of the present invention). The management server 1 also verifies the certificate of the authentication server 2. The authentication server 2 is a server that performs identity verification of a user who uses the communication service based on the identity verification data (identification document data) of the user and the user's ID photo data. The eKYC (electronic Know Your Customer) technology is used for the identity verification of the user. The relay server 3 is a server that includes SM-DS, has a list of connection destinations to SM-DP+, and acquires a profile generated by the management server 1 in response to a request from the LPA function of the communication terminal 4, and provides the profile to the LPA function of the communication terminal 4 (i.e., a server that relays the LPA function and SM-DP+). The relay server 3 also acquires a certificate of the authentication server 2 in response to a request from the LPA function of the communication terminal 4, and provides the certificate to the LPA function of the communication terminal 4.

[0018] Fig. 2 is a diagram showing an example of a schematic configuration of the communication terminal 4. The communication terminal 4 is, for example, a portable terminal such as a mobile phone or a smartphone, and is equipped with an IC module 5. As shown in Fig. 2, the communication terminal 4 further includes an I / F unit 41, a communication unit 42, a storage unit 43, a display / operation unit 44, an authentication information receiving unit 45, a camera 46, and a control unit 47.

[0019] The IC module 5 is an example of an electronic information storage medium of the present invention, and is mounted as an eUICC on an embedded board (i.e., formed integrally with the communication terminal 4) so ​​that it cannot be easily removed or replaced from the communication terminal 4. The IC module 5 is composed of tamper-resistant hardware, and includes a CPU (Central Processing Unit) 51, a RAM (Random Access Memory) 52, a ROM (Read Only Memory) 53, an NVM (Nonvolatile Memory) 54 which is a nonvolatile memory, and an I / F unit 55. The I / F unit 55 serves as an interface with the control unit 47. This interface includes SPI, I 2 C, or ISO7816 interface. The ROM 53 or NVM 54 stores (stores) the EID of the IC module 5. The NVM 54 is capable of storing profiles of a plurality of communication carriers. In the profile, for example, an International Mobile Subscriber Identity (IMSI) unique to a user who uses a communication service, a communication method related to the communication service, an authentication method related to the communication service, key data used for authentication, etc. are described. The profile can be added or deleted from the NVM 54 of the IC module 5.

[0020] The I / F unit 41 serves as an interface with the IC module 5. The communication unit 42 is a communication device for connecting to the network NW, and communicates with an external server (the management server 1 or the relay server 3) according to, for example, TCP (Transmission Control Protocol) / IP (Internet protocol) and TLS (Transport Layer Security) protocols. The storage unit 43 is composed of a non-volatile memory and stores an OS (operating system) and applications (including the profile acquisition program of the present invention). The applications include an application for eKYC (an example of a predetermined application). The application for eKYC is programmed to obtain the user's ID photo data, and has an anti-spoofing function such as liveness judgment to confirm that the image showing the user's appearance is not a still image prepared in advance. The application for eKYC is provided by, for example, a telecommunications carrier. In addition, the storage unit 43 stores user identity verification data. Examples of identity verification data include data copied from a driver's license (driver's license with the user's address written on it), a driving history certificate, a passport, a My Number card, or a residence card. Furthermore, the certificate of the authentication server 2 is later stored in the storage unit 43. The display / operation unit 44 includes, for example, a touch panel having an input function for inputting instructions from the user and a display function for displaying various information.

[0021] The authentication information receiving unit 45 receives authentication information (local authentication data) used for local authentication performed in the communication terminal 4 from the user. For example, the authentication information receiving unit 45 receives a password input by the user on a touch panel as the authentication information. Alternatively, the authentication information receiving unit 45 may be composed of a fingerprint sensor and receive a fingerprint detected from the pad of the user's finger by the fingerprint sensor as the authentication information. Note that the authentication information receiving unit 45 may include a sensor that detects biometric information other than fingerprints (palm prints, blood vessel vein patterns, etc.). The camera 46 captures a subject within the angle of view according to instructions from the user.

[0022] The control unit 47 is an example of a computer, and is configured with, for example, a CPU, a RAM, and a ROM, and has a wireless communication function, an LPA function, and a contract application function. These functions are realized by executing an application, and include functions as an authentication means, a determination means, a first transmission means, a second transmission means, a receiving means, an acquisition means, and a control means in the present invention. The LPA function includes an LPD (Local Profile Download) function (including a function of querying the SM-DS when searching for a profile on the network NW) that acquires (downloads) a profile from the SM-DS and stores (stores) it in the IC module 5, a LUI (Local User Interface) function that presents a user interface for performing operations (list display, selection, deletion, etc.) of the profile in the IC module 5, an authentication function that performs local authentication using authentication information accepted by the authentication information acceptance unit 45, and an acquisition function that acquires the user's appearance photographed by the camera 46 as identification photo data using an application for eKYC in response to a personal identification request. Here, the identification photo data includes, for example, data of an image that represents the user's appearance (particularly, the face) and includes the user's movement. The user's movement is the movement of the user facing at least one of the up, down, left and right directions in response to a message from the eKYC application. The ID photo data may include an image of the user holding an identification document such as a driver's license, along with the user's appearance (particularly, face). Furthermore, the LPA function according to this embodiment includes a function of acquiring the certificate of the authentication server 2 and storing it in the memory unit 43. It is preferable that a secure channel protocol be used between the LPA function, the SM-DS and the SM-DP+.

[0023] The contract application function includes a determination function for determining whether or not the certificate of the authentication server 2 is stored in the communication terminal 4 when applying for a contract (usage contract) for a communication service in response to an instruction from a user, a first transmission function for transmitting "information necessary for the contract" according to the determination result by the determination function to the management server 1, and a second transmission function for transmitting ID photo data acquired by the LPA function to the management server 1. Here, the "information necessary for the contract" according to the determination result means that the information included in the information necessary for the contract differs depending on the determination result. That is, the information necessary for the contract when it is determined that the certificate of the authentication server 2 is stored includes the EID of the IC module 5, the certificate of the authentication server 2, and the result of local authentication by the authentication function (authentication success or authentication failure), etc. The information necessary for the contract when it is determined that the certificate of the authentication server 2 is not stored includes the EID of the IC module 5, the user's identity verification data, and the result of local authentication by the authentication function.

[0024] [2. Operation of communication system S] Next, the operation of the communication system S according to this embodiment will be described separately for the operation when a profile is acquired for the first time and the operation when a profile is acquired for the second or subsequent time.

[0025] (2-1. Behavior when a profile is acquired for the first time) First, the operation when a profile is acquired for the first time will be described with reference to Fig. 3 to Fig. 5. In the operation when a profile is acquired for the first time, it is assumed that the certificate of the authentication server 2 is not stored in the communication terminal 4. Fig. 3 is a diagram showing an overview of the operation when a profile is acquired for the first time, and Fig. 4 and Fig. 5 are sequence diagrams showing the details of the operation when a profile is acquired for the first time.

[0026] 4, when the communication terminal 4 determines by the LPA function that authentication information (local authentication data) is not registered, for example, at startup (step S1), it requests the user to register authentication information (registration request) (step S2). Such a registration request is made, for example, by displaying on the display / operation unit 44. In response to this, authentication information input by the user (step S3) is accepted by the authentication information acceptance unit 45 and registered (stored in the memory unit 43) by the LPA function (step S4).

[0027] Thereafter, the communication terminal 4 accesses the management server 1 of the communication carrier in response to a contract application instruction from the user, and transmits a contract application for using the communication service ("1. Contract Application" shown in FIG. 3) by using a contract application function (step S5). Here, the access from the communication terminal 4 to the management server 1 may be performed via a wireless LAN (e.g., Wi-Fi (registered trademark)) and the Internet, or may be performed via the wireless communication network of the communication carrier in accordance with a preprofile (PreProfile: a profile used only for contract applications) provided in advance by the communication carrier. The contract application is composed of message data in a predetermined data format, for example.

[0028] Next, when the management server 1 receives the contract application from the communication terminal 4, it transmits a transmission request for information required for the contract ("2. Transmission request" shown in FIG. 3) to the communication terminal 4 (step S6). The transmission request is composed of message data in a predetermined data format, for example. Next, when the communication terminal 4 receives the transmission request from the management server 1, it requests the user to input authentication information for local authentication ("3. Input request" shown in FIG. 3) (step S7). When the authentication information input by the user in response to this ("4. Authentication information" shown in FIG. 3) is accepted by the authentication information acceptance unit 45 (step S8), the communication terminal 4 performs local authentication ("5. Local authentication" shown in FIG. 3) by the LPA function using the accepted authentication information and the authentication information registered in step S4 (step S9). When both pieces of authentication information match in the local authentication (or when the degree of match is equal to or greater than a threshold), it is determined that the authentication is successful. Note that the local authentication may be performed before the contract application is sent.

[0029] Next, the communication terminal 4 determines whether or not the certificate of the authentication server 2 is stored (saved) in the communication terminal 4 by using the contract application function ("6. Certificate storage determination" shown in FIG. 3). Since the certificate of the authentication server 2 is not stored in the operation shown in FIG. 3, the communication terminal 4 determines that the certificate of the authentication server 2 is not stored (step S10) and acquires user identity verification data from the storage unit 43 (step S11).

[0030] Next, the communication terminal 4 transmits the contract application information (including personal information entered by the user), the EID of the IC module 5, the identity verification data acquired in step S11, the result of the local authentication in step S9 (e.g., authentication success), and the data acquisition key as information required for the contract ("7. Information required for the contract" shown in FIG. 3) to the management server 1 by the contract application function (for example, using HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely) (step S12). As a result, the user applies for a contract to use a communication service with the communication carrier via the communication terminal 4.

[0031] The EID of the IC module 5 may be stored in advance in the storage unit 43, or may be acquired from the IC module 5 when the information required for the contract is transmitted. The data acquisition key transmitted in step S12 is a key required for the user to acquire a profile or a certificate of the authentication server 2, and is generated from, for example, personal identification data unique to the user or the EID (for example, generated by hashing). The management server 1 may check whether the result of the local authentication transmitted in step S12 has been tampered with.

[0032] Next, when the management server 1 receives the information required for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of the local authentication" shown in FIG. 3) (step S13). If the management server 1 determines that the result of the local authentication is successful through the verification (i.e., the verification of the result of the local authentication is successful), it transmits an identity verification request including the EID, identity verification data, and data acquisition key included in the information required for the contract ("9. Identity Verification Request" shown in FIG. 3) to the authentication server 2 (step S14). The identity verification request is composed of message data in a predetermined data format, for example. Here, in order to transmit data safely, it is preferable that the EID is encrypted with the public key of the authentication server 2 and transmitted to the authentication server 2. If the verification determines that the result of the local authentication is unsuccessful, the EID, identity verification data, and data acquisition key are not transmitted to the authentication server 2.

[0033] Next, when the authentication server 2 receives the identity verification request from the management server 1, it transmits an identity verification request for verifying the identity of the user to the management server 1 (step S15). Here, the authentication server 2 may transmit the identity verification request to the management server 1 only when it determines that the certificate of the authentication server 2 has not already been registered in association with the data acquisition key received from the management server 1. Next, when the management server 1 receives the identity verification request from the authentication server 2, it transmits the identity verification request ("11. Identity verification request" shown in FIG. 3) to the communication terminal 4 (step S16). The identity verification request is composed of, for example, message data in a predetermined data format.

[0034] Next, when the communication terminal 4 receives an identity verification request from the management server 1 (i.e., receives an identity verification request transmitted from the authentication server 2 via the management server 1), it starts an application for eKYC in response to the identity verification request and requests a photograph of the user's appearance ("12. Identity verification request" shown in FIG. 3) (step S17). Such a request is made, for example, by displaying a message indicating the procedure for photographing by the camera 46 on the display / operation unit 44. Then, the appearance of the user photographed by the camera 46 is acquired as ID photo data ("13. ID photo data" shown in FIG. 3) by the LPA function (step S18). Next, in response to a transmission instruction from the user, the communication terminal 4 transmits the ID photo data acquired in step S18 ("14. ID photo data" shown in FIG. 3) to the management server 1 by the contract application function (step S19). That is, the ID photo data is transmitted from the communication terminal 4 to the authentication server 2 via the management server 1.

[0035] Next, when the management server 1 receives the ID photo data from the communication terminal 4, it transmits the ID photo data ("15. ID photo data" shown in FIG. 3) to the authentication server 2 (step S20). Next, when the authentication server 2 receives the ID photo data from the management server 1, it performs identity verification of the user and generates a certificate of the authentication server 2 based on the EID received from the management server 1 ("16. Perform identity verification, generate certificate" shown in FIG. 3) (step S22). Here, the identity verification of the user is performed based on the user's identity verification data and ID photo data according to a known eKYC algorithm. The certificate of the authentication server 2 is created, for example, by signing the EID with the private key of the authentication server 2. Next, the authentication server 2 registers the certificate generated in step S22 in association with the data acquisition key received from the management server 1 (step S23). It is preferable that the ID photo data is stored in the authentication server 2 in association with the data acquisition key. Next, the authentication server 2 transmits a notification of success in the identity verification ("17. Notification of success in identity verification" shown in FIG. 3) to the management server 1 (step S24).

[0036] Next, when the management server 1 receives a successful identity verification notification from the authentication server 2, it generates a profile required for the user who applied for the contract to use the communication service in response to the successful identity verification notification ("18. Profile generation" shown in FIG. 3) (step S25). That is, a profile is generated in response to the successful verification in step S13 and the successful identity verification notification by the authentication server 2. Next, the management server 1 associates the profile generated in step S25 with the SID and data acquisition key received from the communication terminal 4 and registers them in the SM-DP+ (step S26). As a result, a profile registration notification is transmitted to the communication terminal 4.

[0037] 5, the communication terminal 4 accesses the relay server 3, and since it does not hold the certificate of the authentication server 2, it transmits a request to transmit the certificate of the authentication server 2 and a profile to the relay server 3 (SM-DS) by the LPA function (step S27). The transmission request includes the data acquisition key.

[0038] Next, when the relay server 3 receives the transmission request from the communication terminal 4, it transmits a transmission request for the authentication server 2's certificate ("20. Transmission request" shown in FIG. 3) to the authentication server 2 by SM-DS (step S28). The transmission request includes the above-mentioned data acquisition key. Next, when the authentication server 2 receives the transmission request from the relay server 3, it transmits the certificate ("21. Certificate" shown in FIG. 3) registered in association with the data acquisition key included in the transmission request to the relay server 3 (step S29). Here, in order to transmit data securely, it is preferable that the authentication server 2's certificate is encrypted with the public key of the relay server 3 and transmitted to the relay server 3.

[0039] Next, the relay server 3 transmits a profile transmission request ("22. Transmission request" shown in FIG. 3) to the management server 1 by SM-DS (step S30). Next, when the management server 1 receives the transmission request from the relay server 3, it transmits the profile ("23. Profile" shown in FIG. 3) registered in association with the data acquisition key included in the transmission request to the relay server 3 by SM-DP+ (step S31). Next, when the relay server 3 receives the certificate from the authentication server 2 and the profile from the management server 1, it transmits the certificate and profile of the authentication server 2 ("24. Certificate and profile" shown in FIG. 3) to the communication terminal 4 (LPA function) (step S32).

[0040] Next, when the communications terminal 4 receives (acquires) the certificate and profile of the authentication server 2 from the relay server 3, it stores the certificate of the authentication server 2 in the memory unit 43 ("25. Save certificate" shown in FIG. 3) (step S33), and transmits the profile ("26. Profile" shown in FIG. 3) to the IC module 5 via the I / F unit 41 (step S34) to store it in the NVM 54 (step S35). That is, the profile is downloaded to the IC module 5. Then, the IC module 5 makes the communication service available by selecting the profile.

[0041] (2-2. Behavior when acquiring a profile for the second or subsequent time) Next, the operation when acquiring a profile for the second or later time will be described with reference to Fig. 6 to Fig. 8. Note that in the operation when acquiring a profile for the second or later time, a contract is applied for with a communications carrier different from the communications carrier applied for in the operation when the profile was acquired for the first time. Also, in the operation when acquiring a profile for the second or later time, the authentication information stored in the operation when the profile was acquired for the first time and the certificate of the authentication server 2 are used. Fig. 6 is a diagram showing an overview of the operation when acquiring a profile for the second or later time, and Figs. 7 and 8 are sequence diagrams showing the details of the operation when acquiring a profile for the second or later time.

[0042] 7, in response to a contract application instruction from a user, the communication terminal 4 accesses the management server 1 of a communication carrier (different from the communication carrier with which the contract application was made in the operation when the profile was first acquired) and transmits a contract application for using a communication service ("1. Contract Application" shown in FIG. 6) (step S41). Next, upon receiving the contract application from the communication terminal 4, the management server 1 transmits a transmission request for information required for the contract ("2. Transmission Request" shown in FIG. 6) to the communication terminal 4 (step S42).

[0043] Next, when the communication terminal 4 receives the transmission request from the management server 1, it requests the user to input authentication information for local authentication ("3. Input request" shown in FIG. 6) (step S43). When the authentication information input by the user in response to this ("4. Authentication information" shown in FIG. 6) is accepted by the authentication information accepting unit 45 (step S44), the communication terminal 4 performs local authentication ("5. Local authentication" shown in FIG. 6) by the LPA function using the accepted authentication information and the authentication information already registered (step S45).

[0044] Next, if the result of the local authentication in step S45 is successful, the communications terminal 4 uses a contract application function to determine whether or not the certificate of authentication server 2 is stored (saved) in the communications terminal 4 ("6. Certificate storage determination" shown in Figure 6). Since the certificate of authentication server 2 is stored in the operation shown in Figure 6, the communications terminal 4 determines that the certificate of authentication server 2 is stored (step S46) and obtains the certificate of authentication server 2 from the memory unit 43 (step S47). Note that if the result of the local authentication is unsuccessful, the certificate of authentication server 2 is not obtained, and output of the certificate is prohibited.

[0045] Next, the communications terminal 4 transmits the contract application information, the EID of the IC module 5, the certificate acquired in step S47, the result of the local authentication in step S45 (authentication successful), and the data acquisition key as information required for the contract ("7. Information required for the contract" shown in FIG. 6) to the management server 1 using the contract application function (step S48).

[0046] Next, when the management server 1 receives the information required for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of the local authentication" shown in FIG. 6) (step S49). Next, the management server 1 verifies the certificate of the authentication server 2 included in the information ("9. Verification of the certificate" shown in FIG. 6) (step S50). For example, the management server 1 verifies the signature in the certificate of the authentication server 2 with the public key of the authentication server 2. This makes it possible to confirm that the EID included in the information required for the contract has been verified by another carrier (the carrier to which the contract was applied in the operation when the profile was first acquired). Note that, in order to guarantee the public key of the authentication server 2, it is preferable that a certification authority signs the public key of the authentication server 2, and the signature is verified before the public key is used.

[0047] Next, if the management server 1 determines that the verification result in step S49 is successful and that the verification result in step S50 is successful, it generates a profile required for the user who applied for the contract to use the communication service ("10. Profile Generation" shown in FIG. 6) (step S51). That is, a profile is generated according to the successful verification in step S49 and the successful verification in step S50. Next, the management server 1 registers the profile generated in step S51 and the data acquisition key received from the communication terminal 4 in association with each other in the SM-DP+ (step S52). As a result, a profile registration notification is transmitted to the communication terminal 4.

[0048] 8, the communication terminal 4 accesses the relay server 3, and since it holds the certificate of the authentication server 2, it transmits a request to transmit only the profile ("11. Transmission request" shown in FIG. 6) to the relay server 3 (SM-DS) by the LPA function (step S53). The transmission request includes the data acquisition key.

[0049] Next, when the relay server 3 receives a transmission request from the communication terminal 4, it transmits a profile transmission request ("12. Transmission request" shown in FIG. 6) to the management server 1 by SM-DS (step S54). The transmission request includes the data acquisition key. Next, when the management server 1 receives a transmission request from the relay server 3, it transmits the profile ("13. Profile" shown in FIG. 6) registered in association with the data acquisition key included in the transmission request to the relay server 3 by SM-DP+ (step S55). Next, when the relay server 3 receives the profile from the management server 1, it transmits the profile ("14. Profile" shown in FIG. 6) to the communication terminal 4 (LPA function) (step S56).

[0050] Next, when the communication terminal 4 receives the profile from the relay server 3, it transmits the profile ("15. Profile" shown in FIG. 6) to the IC module 5 via the I / F unit 41 (step S57) and stores it (step S58). Then, the IC module 5 selects the profile to enable the communication service.

[0051] As described above, according to the above embodiment, the communication terminal 4 performs local authentication using authentication information received from the user, determines whether or not the certificate of the authentication server 2 is stored in the communication terminal 4, and if it is determined that the certificate of the authentication server 2 is not stored, transmits at least the EID of the IC module 5, the user's identity verification data, and the result of the local authentication to the management server 1. The communication terminal 4 is configured to acquire the profile generated by the management server 1 in response to a successful identity verification notification based on the user's identity verification data and ID photo data by the authentication server 2, and store it in the IC module 5, so that the authentication level can be maintained while reducing the burden of identity verification of the user received from the telecommunications carrier when adding a profile. That is, according to the above embodiment, the certificate generated based on identity verification performed by the authentication server 2 to provide the user with the profile of the telecommunications carrier at the time of the first service contract between the user and the telecommunications carrier is used at the time of the second or subsequent service contract between the user and another telecommunications carrier, so that the profile of the other telecommunications carrier can be provided to the user, so that the authentication level can be maintained while reducing the burden of identity verification of the user received from the telecommunications carrier.

[0052] In the above embodiment, the LPA function and the contract application function are configured to be possessed by the control unit 47, but they may be configured to be possessed by the IC module 5 instead of the control unit 47. Also, although the IC module 5 built into the communication terminal 4 has been described as an example of an electronic information storage medium of the present invention, the present invention may be applied to an IC card that is detachable from the communication terminal 4. [Explanation of symbols]

[0053] 1 Management Server 2 Authentication Server 3. Relay Server 4. Communication terminals 5 IC Module 41 I / F section 42 Communications Department 43 Storage section 44 Display / operation section 45 Authentication information reception unit 46 Camera 47 Control Unit

Claims

1. In a communication system including an authentication server that performs identity verification of a user who uses a communication service based on the user's identity verification data and the user's ID photo data, an administration server that verifies a certificate of the authentication server and that generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, a computer capable of acquiring identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal, an authentication means for performing local authentication using authentication information received from the user; a first transmission means for transmitting identification information of the electronic information storage medium, personal identification data of the user, and a result of the local authentication to the management server; a receiving means for receiving an identity verification request transmitted from the authentication server via the management server; an acquisition means for acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data; a second transmission means for transmitting the ID photograph data acquired by the acquisition means to the authentication server via the management server; A profile acquisition program characterized by functioning as a control means for acquiring the profile generated by the management server in response to a successful identity verification notification of the user by the authentication server and storing the profile in the electronic information storage medium.

2. a determination unit that determines whether a certificate of the authentication server is stored in the communication terminal; The profile acquisition program according to claim 1, characterized in that the first transmission means transmits identification information of the electronic information storage medium, the user's identity verification data, and the result of the local authentication to the management server when the determination means determines that the certificate of the authentication server is not stored.

3. 3. The profile acquisition program according to claim 1, wherein the certificate of the authentication server is generated by the authentication server based on the identification information of the electronic information storage medium.

4. 4. The profile acquisition program according to claim 1, wherein the profile is generated in response to a notification of success in the identity verification by the authentication server and a successful verification of a result of the local authentication.

5. An electronic information storage medium mounted on a communication terminal in a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the electronic information storage medium comprising: an authentication means for performing local authentication using authentication information received from the user; a first transmission means for transmitting the identification information of the electronic information storage medium, the user's personal identification data, and the result of the local authentication to the management server; a receiving means for receiving an identity verification request transmitted from the authentication server via the management server; an acquisition means for acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data; a second transmission means for transmitting the ID photograph data acquired by the acquisition means to the authentication server via the management server; a control means for acquiring the profile generated by the management server in response to a notification of success of the identity verification by the authentication server and storing the profile in a non-volatile memory; An electronic information storage medium comprising:

6. A profile acquisition method for a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and that generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the method being executed by a computer capable of acquiring identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal, the method comprising: performing local authentication using authentication information received from the user; transmitting identification information of the electronic information storage medium, identity verification data of the user, and a result of the local authentication to the management server; receiving, via the management server, an identity verification request transmitted from the authentication server; acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data; transmitting the acquired ID photo data to the authentication server via the management server; acquiring the profile generated by the management server in response to a successful notification of the identity verification by the authentication server, and storing the profile in the electronic information storage medium; A profile acquisition method comprising:

Images