5g specialized network USIM management device for USIM activation in 5g specialized network and USIM activation method using same

Abstract

The present invention relates to a USIM management device for USIM activation in a 5G specialized network and a USIM activation method using the same, whereby security is maintained by performing a USIM activation procedure through a separate 5G specialized network USIM management device, and the mobility of a terminal can be supported.

Description

5G specialized network USIM management device for USIM activation in 5G specialized network and USIM activation method using the same

[0001] [Cross-reference to related applications]

[0002] This application claims priority to Republic of Korea Patent Application No. 10-2024-0010796, filed January 24, 2024, the entire contents of which are incorporated herein by reference.

[0003] The present invention relates to a 5G specialized network USIM management device for USIM activation in a 5G specialized network and a USIM activation method using the same, and more specifically, to a 5G specialized network USIM management device for USIM activation in a 5G specialized network and a USIM activation method using the same, which performs a USIM activation procedure through a separate USIM management device to maintain security and support terminal mobility.

[0004] A 5G specialized network, a Standalone Non-Public Network (SNPN), is an independent private network operated by small groups such as companies and institutions within a limited area without using the existing mobile carrier network. It refers to a customized network specialized for the services to be provided in the area, and is also called I-eum 5G or enterprise 5G.

[0005] These 5G-specific networks require a small, low-cost network structure compared to existing large-scale mobile carriers, and instead of providing nationwide or universal services like mobile carriers, they provide limited services within certain specific regions.

[0006] Additionally, it is realistically difficult to deploy highly skilled personnel, and it is generally difficult to deploy a large number of long-term skilled technicians like existing mobile carriers.

[0007] Additionally, unlike mobile carriers that perform USIM manufacturing and ordering repetitively and professionally, there is a lack of personnel with specialized knowledge related to mobile communications and no separate system has been established.

[0008] Figure 1 is a diagram schematically showing a USIM activation procedure in a 5G specialized network according to conventional technology.

[0009] First, the user roughly determines the required number of USIMs (Universal Subscriber Identity Modules) and orders the required number of USIMs from the operating entity.

[0010] At this time, since the user who orders the USIM does not have specialized knowledge related to mobile communications, the operating entity with specialized knowledge related to mobile communications creates the information required for ordering the USIM in the form of an input file.

[0011] The operating entity that receives an order from the user places an order for USIMs with the USIM manufacturer irregularly and without going through a separate system. However, the operating entity places an order for USIMs by manually sending the above input file to the USIM manufacturer through an insecure medium such as email.

[0012] The USIM manufacturer manufactures the USIM by checking the operating entity's USIM order information and the above-mentioned input file, and delivers the manufactured USIM to the operating entity that placed the USIM order.

[0013] At this time, the USIM manufacturer manually delivers to the operating entity an output file containing encrypted key values ​​mapped to the USIM delivered to the operating entity via an insecure medium such as email.

[0014] The above output file can maintain its encrypted integrity when transmitted through the system, but if transmitted manually by a human, there is a possibility of security breaches and risk factors occurring due to human intervention.

[0015] Meanwhile, the operating entity distributes the USIM received from the USIM manufacturer to the user and inputs the output file containing the encrypted key mapped to it into the system.

[0016] And, the activation work of manually entering the activation information for each terminal to which the USIM is distributed into the 5G specialized network core equipment is performed for each terminal.

[0017] As mentioned above, in the existing 5G specialized network, the operator has both the authority to identify individual users of the terminal USIM and the authority to decrypt encrypted key values, so there is a problem that security breaches may occur when manually processed by people.

[0018] Additionally, since the operator, USIM manufacturer, etc. previously managed anonymized information, personalized information, and encrypted key values ​​separately, it is necessary to maintain security in the process.

[0019] In addition, there is a problem in that USIM mobility, which is possible in conventional mobile communication networks, such as USIM reuse and USIM movement between 5G specialized networks, is not supported.

[0020] In addition, there is a cumbersome problem in the past where opening information had to be manually entered into the 5G specialized network core equipment when opening work occurred.

[0021] The present invention has been devised to solve the above-mentioned conventional problems, and the purpose of the present invention is to provide a USIM management device for USIM activation in a 5G specialized network, which can maintain security and support terminal mobility by performing a USIM activation procedure through a separate 5G specialized network USIM management device, and a USIM activation method using the same.

[0022] In order to achieve the above-described object, a 5G specialized network USIM management device for opening a USIM in a 5G specialized network according to the present invention comprises: a VPN module for forming a VPN tunnel between an administrator terminal and a nationwide network USIM (Universal Subscriber Identity Module) management device; an authentication module for authenticating a user of the administrator terminal with which the VPN tunnel has been formed; a 5G specialized network USIM management module for requesting a USIM order from the administrator terminal to order a USIM, receiving a key value of an anonymized USIM in response thereto, and, when a request for opening the anonymized USIM is received from the administrator terminal, linking the subscriber's personal information and the network information of the 5G specialized network to the anonymized USIM to open the anonymized USIM, and transmitting 5G specialized network USIM opening information to the user terminal; a USIM information storage module for storing and managing a list of USIMs for which an order has been requested and the 5G specialized network USIM opening information; And it is characterized by including a subscriber provisioning module that transmits the key value of the USIM named in the 5G specialized network core device and the subscriber information of the subscriber linked to the named USIM.

[0023] In addition, in a 5G specialized network USIM management device for opening a USIM in a 5G specialized network according to the present invention, the 5G specialized network USIM management module is characterized in that it generates an input file including information required for USIM ordering based on order information received from the administrator terminal, transmits the generated input file to the nationwide network USIM management device to request USIM ordering, and receives an output file in which a key value corresponding to an anonymized USIM is encrypted and stored from the nationwide network USIM management device.

[0024] In addition, in a 5G specialized network USIM management device for opening a USIM in a 5G specialized network according to the present invention, the 5G specialized network USIM management module receives personal information of a subscriber who has received the anonymized USIM from the administrator terminal, requests opening of the anonymized USIM, and associates the subscriber's personal information with the anonymized USIM to anonymize the anonymized USIM.

[0025] In addition, in a 5G specialized network USIM management device for opening a USIM in a 5G specialized network according to the present invention, the 5G specialized network USIM management module is characterized in that it transmits the 5G specialized network USIM opening information to the user terminal through an OTA (Over The Air) opening method or a PoS (Point of Sale) opening method.

[0026] In addition, a USIM opening method using a 5G specialized network USIM management device according to the present invention for achieving the above-described object is characterized by including an authentication step of forming a VPN tunnel between an administrator terminal and a nationwide network USIM management device, and authenticating a user of the administrator terminal; a USIM ordering step of requesting a USIM order to the nationwide network USIM management device based on order information input from the administrator terminal and receiving a key value corresponding to an anonymized USIM from the nationwide network USIM management device; and a 5G specialized network USIM opening step of linking the subscriber's personal information and the network information of the 5G specialized network to the anonymized USIM and transmitting them to the user terminal, and transmitting the key value of the anonymized USIM and the subscriber information to the 5G specialized network core device.

[0027] In addition, in the USIM opening method using the 5G specialized network USIM management device according to the present invention, the authentication step is characterized by including a step in which the administrator terminal and the 5G specialized network USIM management device perform a mutual authentication procedure to form a VPN tunnel between the administrator terminal and the 5G specialized network USIM management device; a step in which the 5G specialized network USIM management device and the nationwide network USIM management device perform a mutual authentication procedure to form a VPN tunnel between the 5G specialized network USIM management device and the nationwide network USIM management device; and a step in which the administrator terminal and the 5G specialized network USIM management device perform a user authentication procedure to confirm whether the user of the administrator terminal is a legitimate user.

[0028] In addition, in the USIM opening method using the 5G specialized network USIM management device according to the present invention, the USIM ordering step is characterized by including: a step of receiving order information from the administrator terminal; a step of generating an input file including information necessary for USIM ordering based on the received order information; a step of transmitting the input file to the nationwide network USIM management device to request a USIM order; and a step of receiving an output file in which a key value corresponding to an anonymized USIM manufactured and delivered according to the USIM ordering request is encrypted and stored from the nationwide network USIM management device.

[0029] In addition, in the USIM opening method using the 5G specialized network USIM management device according to the present invention, the 5G specialized network USIM opening step is characterized by including the steps of: receiving personal information of a subscriber who has received the anonymized USIM from the administrator terminal; linking the personal information and network information of the 5G specialized network to the anonymized USIM and storing it as 5G specialized network USIM opening information in a USIM information storage module, and transmitting the 5G specialized network USIM opening information to the user terminal; and transmitting the key value of the anonymized USIM and subscriber information linked to the anonymized USIM to the 5G specialized network core device.

[0030] In addition, in the USIM opening method using the 5G specialized network USIM management device according to the present invention, the method further includes a nationwide network USIM opening step of requesting nationwide network USIM opening to the nationwide network USIM management device using subscriber information of a subscriber who desires nationwide network opening, receiving nationwide network USIM opening information from the nationwide network USIM management device that has performed nationwide network opening in response to the nationwide network USIM opening request, transmitting the same to the user terminal, and transmitting the key value and subscriber information of the nationwide network-opened USIM to the nationwide network core device.

[0031] In addition, in the USIM opening method using the 5G specialized network USIM management device according to the present invention, the nationwide network USIM opening step is characterized by including the steps of: receiving subscriber information of a subscriber who wishes to open a nationwide network from the manager terminal; deactivating 5G specialized network USIM opening information corresponding to the subscriber based on the subscriber information of the subscriber; requesting nationwide network USIM opening to the nationwide network USIM management device using the subscriber information of the subscriber; receiving nationwide network USIM opening information from the nationwide network USIM management device that has performed nationwide network opening according to the nationwide network USIM opening request; storing the received nationwide network USIM opening information in a USIM information management module and transmitting it to the user terminal; and transmitting the key value and subscriber information of the nationwide network opened USIM to the nationwide network core device.

[0032] Specific details of other embodiments are included in the “Specific Details for Carrying Out the Invention” and the attached “Drawings.”

[0033] The advantages and / or features of the present invention and the methods for achieving them will become clear with reference to the various embodiments described in detail below together with the accompanying drawings.

[0034] However, the present invention is not limited to the configuration of each embodiment disclosed below, but may be implemented in various different forms, and each embodiment disclosed in this specification is provided only to ensure that the disclosure of the present invention is complete and to fully inform a person having ordinary skill in the art to which the present invention pertains of the scope of the present invention, and it should be understood that the present invention is defined only by the scope of each claim of the claims.

[0035] According to the present invention, the intervention of the 5G specialized network operator is minimized, and the USIM opening procedure is performed through a separate 5G specialized network USIM management device, thereby improving the operational efficiency of the 5G specialized network.

[0036] Additionally, each 5G specialized network will be able to perform USIM management and activation tasks without specialized personnel through the 5G specialized network USIM management device.

[0037] Additionally, each 5G specialized network will be able to have a subscriber terminal activation and 5G specialized network USIM management device at low cost.

[0038] Additionally, security can be maintained by transmitting and receiving information required for USIM ordering and activation while connected to the administrator terminal and nationwide USIM management device through a secure VPN connection.

[0039] Additionally, it will be possible to support USIM mobility by switching between 5G-specific networks and nationwide networks using a single USIM for the user terminal.

[0040] Figure 1 is a diagram schematically showing a USIM activation procedure in a 5G specialized network according to conventional technology.

[0041] FIG. 2 is a diagram schematically showing the configuration of a 5G specialized network including a 5G specialized network USIM management device according to the present invention.

[0042] FIG. 3 is a drawing schematically showing the configuration of a 5G specialized network USIM management device according to the present invention.

[0043] Figure 4 is a processing diagram for explaining a USIM opening method using a 5G specialized network USIM management device according to the present invention.

[0044] Before describing the present invention in detail, it should be understood that the terms or words used in this specification should not be interpreted as being unconditionally limited to their usual or dictionary meanings, and that the inventor of the present invention may appropriately define and use the concepts of various terms in order to explain his or her invention in the best possible manner, and further, that these terms or words should be interpreted as meanings and concepts that are consistent with the technical idea of ​​the present invention.

[0045] That is, it should be noted that the terms used in this specification are only used to describe preferred embodiments of the present invention, and are not intended to specifically limit the contents of the present invention, and that these terms are defined in consideration of various possibilities of the present invention.

[0046] Additionally, in this specification, it should be noted that singular expressions may include plural expressions unless the context clearly indicates a different meaning, and similarly, even if expressed in plural, may include a singular meaning.

[0047] Throughout this specification, whenever a component is described as "including" another component, it may mean that the component may further include any other component, rather than excluding any other component, unless specifically stated otherwise.

[0048] Furthermore, when it is described that a component is "located within, connected to, or installed within" another component, it should be understood that the component may be installed in direct connection with or in contact with the other component, may be installed spaced apart from the other component by a certain distance, and if it is installed spaced apart from the other component by a certain distance, there may be a third component or means for fixing or connecting the component to the other component, and the description of this third component or means may be omitted.

[0049] On the other hand, if a component is described as being "directly connected" or "directly connected" to another component, it should be understood that no third component or means exists.

[0050] Likewise, other expressions that describe the relationship between components, such as "between" and "directly between", or "adjacent to" and "directly adjacent to", should be interpreted as having the same meaning.

[0051] In addition, it should be noted that the terms “one side,” “the other side,” “one side,” “the other side,” “first,” “second,” etc. in this specification, if used, are used to clearly distinguish one component from another component, and the meaning of the component is not limited by such terms.

[0052] In addition, terms related to position, such as “upper,” “lower,” “left,” and “right,” if used in this specification, should be understood to indicate relative positions of the corresponding components in the corresponding drawings, and unless absolute positions are specified for these positions, these position-related terms should not be understood to refer to absolute positions.

[0053] Moreover, in the specification of the present invention, it should be noted that the terms “part”, “device”, “module”, “device”, etc., if used, mean a unit capable of processing one or more functions or operations, which may be implemented by hardware or software, or a combination of hardware and software.

[0054] In addition, in this specification, when specifying the drawing numbers for each component of each drawing, the same component has the same drawing number even if the component is shown in a different drawing, that is, the same reference number indicates the same component throughout the specification.

[0055] In the drawings attached to this specification, the size, position, connection relationship, etc. of each component constituting the present invention may be described with some exaggeration, reduction, or omission in order to sufficiently clearly convey the idea of ​​the present invention or for convenience of explanation, and therefore the proportions or scales may not be strict.

[0056] In addition, in the following description of the present invention, a detailed description of a configuration that is judged to unnecessarily obscure the gist of the present invention, for example, a known technology including a prior art, may be omitted.

[0057]

[0058] Hereinafter, with reference to the attached drawings, a USIM management device for USIM opening in a 5G specialized network according to a preferred embodiment of the present invention and a USIM opening method using the same will be described in detail.

[0059] FIG. 2 is a diagram schematically showing the configuration of a 5G specialized network including a 5G specialized network USIM management device according to the present invention.

[0060] In Fig. 2, the administrator terminal (10) is a terminal used by the operator of the 5G specialized network, and has an application program installed therein to perform USIM ordering and 5G specialized network subscriber opening tasks. When the application program is run according to the operation of the user (administrator), it initiates linkage with a pre-designated 5G specialized network USIM management device (100) to form a VPN tunnel, and performs a user authentication procedure with the 5G specialized network USIM management device (100) to which VPN security is connected, thereby confirming whether the user (administrator) of the administrator terminal (10) is a legitimate user.

[0061] If the user is confirmed to be a legitimate user, the administrator terminal (10) can request the ordering of the required number of USIMs from the 5G specialized network USIM management device (100).

[0062] At this time, the administrator terminal (10) can request USIM ordering from the 5G specialized network USIM management device (100) by entering the minimum ordering information required for USIM ordering (e.g., USIM quantity, MCC (Mobile Country Code), MNC (Mobile Network Cord), IMSI band prefix, whether to use 5G SUCI (SUbsctiption Concealed Identifier) ​​Conceal function, etc.) through the activated application program.

[0063] After requesting a USIM order, the operating entity that receives the anonymized USIM manufactured according to the order request can load the received anonymized USIM into a user terminal (50) and input information (e.g., subscriber (user) personal information) required for opening the anonymized USIM (30) loaded into each user terminal (50) into the 5G specialized network USIM management device (100) through an application program installed in the administrator terminal (10).

[0064] In addition, when nationwide network opening is required for a 5G specialized network subscriber, the administrator terminal (10) can input information required for nationwide network USIM opening of a subscriber who wishes to open a nationwide network (e.g., subscriber information of the subscriber) into the 5G specialized network USIM management device (100).

[0065] When a VPN tunnel is formed between the administrator terminal (10) and the 5G specialized network USIM management device (100) and the administrator terminal (10) performs a mutual authentication procedure according to the operation of the application program, the 5G specialized network USIM management device (100) can initiate linkage with the nationwide network USIM management device (20) and request formation of a VPN tunnel to the nationwide network USIM management device (20).

[0066] Here, the 5G specialized network USIM management device (100) can perform a mutual authentication procedure with the nationwide network USIM management device (20) to form a VPN tunnel between the device and the nationwide network USIM management device (20).

[0067] In addition, the 5G specialized network USIM management device (100) can authenticate the user (administrator) of the administrator terminal (10) by performing a user authentication procedure.

[0068] When a 5G specialized network USIM management device (100) receives a request for USIM ordering from an administrator terminal (10), it generates an input file containing information necessary for USIM ordering based on the order information received from the administrator terminal (10) at the time of the USIM ordering request, and transmits the generated input file to a nationwide network USIM management device (20) with which a VPN tunnel is formed, thereby making a USIM ordering request.

[0069] Thereafter, the 5G specialized network USIM management device (100) can receive the key value of anonymized USIM from the nationwide network USIM management device (20) in response to the USIM ordering request.

[0070] Specifically, an output file in which a key value corresponding to an anonymous USIM manufactured in response to a USIM order request from a nationwide network USIM management device (20) and delivered to a 5G specialized network operator is encrypted and stored can be received.

[0071] In addition, the 5G specialized network USIM management device (100) receives information (e.g., subscriber's personal information, IMSI of anonymized USIM) required for opening an anonymized USIM (30) from the administrator terminal (10) and opens the anonymized USIM (30), but links the subscriber's personal information (e.g., phone number) and 5G specialized network network information (e.g., 5G specialized network profile) to the anonymized USIM (30) and stores this as 5G specialized network USIM opening information, and transmits it to the user terminal (50) through an OTA (Over The Air) opening method or a PoS (Point of Sale) opening method.

[0072] In addition, the 5G specialized network USIM management device (100) transmits the key value of the USIM linked to the subscriber, that is, the subscriber's information linked to the USIM linked to the 5G specialized network core device (40), so that the subscriber can perform encrypted communication in connection with the 5G specialized network in the future.

[0073] In addition, when the 5G specialized network USIM management device (100) receives information (e.g., subscriber information) required for nationwide network USIM opening of a subscriber who wishes to open a nationwide network from the administrator terminal (10), it can request nationwide network USIM opening to the nationwide network USIM management device (20) using the subscriber information of the subscriber.

[0074] Here, when the nationwide network USIM management device (20) receives a request for nationwide network USIM opening from the 5G specialized network USIM management device (100), it can link nationwide network information (e.g., nationwide network profile) to the corresponding USIM and transmit it as nationwide network USIM opening information to the 5G specialized network USIM management device (100).

[0075] The 5G specialized network USIM management device (100) requests nationwide network USIM opening to the nationwide network USIM management device (20), then receives nationwide network USIM opening information from the nationwide network USIM management device (20), and can transmit this to the user terminal (50) through the OTA opening method or the PoS opening method.

[0076] In addition, the 5G specialized network USIM management device (100) transmits the key value and subscriber information of the USIM opened in the nationwide network to the nationwide network core device (60) so that the subscriber can perform encrypted communication in connection with the nationwide network in the future.

[0077] The user terminal (50) is equipped with an anonymous USIM (30) distributed by the operator of the 5G specialized network.

[0078] In this way, the anonymous USIM (30) mounted on the user terminal (50) can receive and store 5G specialized network / national network USIM opening information from the 5G specialized network USIM management device (100) through the OTA opening method or the PoS opening method.

[0079] FIG. 3 is a drawing schematically showing the configuration of a 5G specialized network USIM management device according to the present invention.

[0080] As shown in FIG. 3, the 5G specialized network USIM management device (100) according to the present invention may include a VPN module (110), an authentication module (120), a 5G specialized network USIM management module (130), a USIM information storage module (140), a subscriber provisioning module (150), etc.

[0081] The VPN module (110) can form a VPN tunnel between the administrator terminal (10) and the administrator terminal (10) by performing a mutual authentication procedure as the application program pre-installed on the administrator terminal (10) is run.

[0082] When a VPN tunnel is formed between the administrator terminal (10) and the administrator terminal (10), encrypted communication with the administrator terminal (10) becomes possible.

[0083] In addition, the VPN module (110) can form a VPN tunnel by performing a mutual authentication procedure with the nationwide USIM management device (20) to request a USIM order to the nationwide USIM management device (20).

[0084] When a VPN tunnel is formed between the nationwide USIM management device (20), encrypted communication with the nationwide USIM management device (20) becomes possible.

[0085] The authentication module (120) can perform a user authentication procedure with the administrator terminal (10) connected to a VPN security connection to confirm whether the user (administrator) of the administrator terminal (10) is a legitimate user.

[0086] The authentication module (120) can perform a user authentication procedure using a password or a physical characteristic (e.g., fingerprint, iris, face, voice, etc.).

[0087] The 5G specialized network USIM management module (130) can receive a USIM order request from an administrator terminal (10), and when a USIM order request is made, it can create an input file containing information required for USIM ordering based on the order information received from the administrator terminal (10), and transmit the created input file to a nationwide network USIM management device (20) through a VPN tunnel to make a USIM order request.

[0088] And in response to a USIM order request, the key value of an anonymized USIM can be transmitted from the nationwide USIM management device (20).

[0089] Here, the nationwide network USIM management device (20) that has received the USIM ordering request can manufacture the required number of anonymized USIMs through an internal or external USIM manufacturer according to the USIM ordering request, then deliver the manufactured anonymized USIMs to the 5G specialized network operator, encrypt the key value corresponding to the anonymized USIM delivered to the 5G specialized network operator to create an output file, and transmit the created output file to the 5G specialized network USIM management module (130) through a VPN tunnel.

[0090] In addition, the 5G specialized network USIM management module (130) receives information (e.g., subscriber's personal information) required for opening an anonymized USIM (30) from the administrator terminal (10) and, when a request for opening an anonymized USIM (30) is made, performs opening of the anonymized USIM (30), links the subscriber's personal information received from the administrator terminal (10) and the network information of the 5G specialized network to the anonymized USIM (30) and stores this as 5G specialized network USIM opening information in the USIM information storage module (140), and transmits the 5G specialized network USIM opening information to the user terminal (50) through an OTA (Over The Air) opening method or a PoS (Point of Sale) opening method, so that the USIM opening information stored in the USIM information storage module (140) and the USIM opening information stored in the UISM (30) mounted on the user terminal (50) can be synchronized with each other.

[0091] The subscriber provisioning module (150) transmits the key value of the USIM and the subscriber information of the subscriber linked to the USIM to the 5G specialized network core device (40) in the 5G specialized network USIM management module (130) so that the user terminal (50) can later use the key value for encrypted communication.

[0092] The USIM information storage module (140) can store a USIM list requested by the 5G specialized network USIM management module (130) from the administrator terminal (10), and store and manage 5G specialized network USIM opening information transmitted to the USIM (30) installed in the user terminal (50) subscribed to the 5G specialized network.

[0093] Here, the USIM information storage module (140) can store the IMSI (International Mobile Equipment Identify), encryption key, network profile, service profile, user data, etc. stored in the USIM (30) mounted on the user terminal (50) as shown in Table 1.

[0094] Category Content Management Subject IMSI Terminal Subscriber Identification NumberManaged when ordering USIM Encryption KeyKey used for encrypted communicationManaged when ordering USIM Network ProfileMobile network operator profile (SKT, KT, LG U+, etc.)Network type (2G, 3G, 4G, 5G, etc.)Network settings (APN settings, network priority settings)Forbidden PLMN settingsProffered PLMN settingsTelecommunications operator managementService profileSettings related to voice services (call quality settings, call waiting settings, etc.)Settings related to data services (data usage limit settings, data roaming settings, etc.)Settings related to text services (text message length settings, text message authentication settings, etc.)Settings related to MMS services (MMS message length settings, MMS message authentication settings, etc.)Settings related to additional services (international roaming settings, data roaming settings, additional service subscription settings, etc.)Telecommunications operator managementUser dataPhone number: Terminal user's phone numberAddress: Terminal user's addressContact: Terminal user's contact informationPassword: Terminal's unlock password (USIM PIN)Setting value: Terminal's User management of settings (screen brightness settings, sound settings, etc.)

[0095] In addition, the 5G specialized network USIM management module (130) receives information (e.g., subscriber information) required for nationwide network USIM opening of a subscriber who wishes to open a nationwide network from the administrator terminal (10) and, when a request for nationwide network USIM opening is made, deactivates the 5G specialized network USIM opening information corresponding to the subscriber based on the subscriber information of the subscriber, and requests nationwide network USIM opening to the nationwide network USIM management device (20) using the subscriber information of the subscriber. Here, the reason why the 5G specialized network USIM management module (130) deactivates the 5G specialized network USIM opening information of the subscriber who wishes to open a nationwide network USIM is to convert the subscriber back to a 5G specialized network subscriber in the future, and the 5G specialized network USIM opening information is managed in a deactivated state, and when a request for conversion from a nationwide network subscriber to a 5G specialized network subscriber is made, the deactivated 5G specialized network USIM opening information is reactivated so that the subscriber can use the 5G specialized network service. You can do it.

[0096] The nationwide network USIM management device (20) that receives a request for nationwide network USIM opening from the 5G specialized network USIM management module (130) performs nationwide network opening of the USIM corresponding to the subscriber in accordance with the nationwide network USIM opening request, and can link nationwide network information (e.g., nationwide network profile) to the corresponding USIM and transmit this as nationwide network USIM opening information to the 5G specialized network USIM management module (130).

[0097] The 5G specialized network USIM management module (130) can transmit nationwide network USIM opening information received from the nationwide network USIM management device (20) to the user terminal (50) through the OTA opening method or the PoS opening method.

[0098] Meanwhile, the subscriber provisioning module (150) transmits the key value of the USIM opened in the nationwide network and the subscriber information of the corresponding subscriber to the nationwide network core device (60) so that the corresponding user terminal (50) can later use the key value for encrypted communication.

[0099] Figure 4 is a processing diagram for explaining a USIM opening method using a 5G specialized network USIM management device according to the present invention.

[0100] First, in step S10, the administrator terminal (10) can form a VPN tunnel by performing a mutual authentication procedure with a pre-designated 5G specialized network USIM management device (100) according to the operation of a pre-installed application program.

[0101] In step S10, the 5G specialized network USIM management device (100) that has formed a VPN tunnel with the administrator terminal (10) can form a VPN tunnel by performing a mutual authentication procedure with the nationwide network USIM management device (20) (S20).

[0102] When a VPN tunnel is formed between the administrator terminal (10) and the 5G specialized network USIM management device (100) through the above-described step S10, the 5G specialized network USIM management device (100) can perform a user authentication procedure with the administrator terminal (10) to confirm whether the user of the administrator terminal (10) is a legitimate user (S30).

[0103] When the user of the administrator terminal (10) is authenticated through the above-described step S30, the administrator terminal (10) can request the order of the required number of USIMs from the 5G specialized network USIM management device (100) in step S40.

[0104] In the above step S40, the administrator terminal (10) can request a USIM order from the 5G specialized network USIM management device (100) by entering the minimum ordering information (e.g., ) required for USIM ordering.

[0105] The 5G specialized network USIM management device (100) that has received a USIM order request from the administrator terminal (10) through the above-described step S40 can generate an input file containing information required for USIM ordering based on the order information received from the administrator terminal (10) through the above-described step S40, and transmit the generated input file to the nationwide network USIM management device (20) with which the VPN tunnel is formed in the above-described step S20 to make a USIM order request (S50).

[0106] The nationwide network USIM management device (20) that has received a request for USIM ordering from the 5G specialized network USIM management device (100) through the above-mentioned step S50 manufactures the required number of anonymous USIMs through an internal or external USIM manufacturer, and delivers the manufactured anonymous USIMs to the 5G specialized network operating entity that has requested the USIM order.

[0107] Thereafter, the nationwide network USIM management device (20) encrypts the key value corresponding to the anonymized USIM delivered to the 5G specialized network operator that requested the USIM order, creates an output file, and then transmits the created output file to the 5G specialized network USIM management device (100) through the VPN tunnel (S60).

[0108] Meanwhile, the 5G specialized network operator who has received an anonymized USIM from the USIM manufacturer can load the received anonymized USIM into a user terminal (50) to be opened, and then input information (e.g., subscriber's personal information) required for opening the anonymized USIM (30) loaded in each user terminal (50) into the 5G specialized network USIM management device (100) through the administrator terminal (10) to request opening of the 5G specialized network USIM (S70).

[0109] When the information (e.g., subscriber's personal information) required for opening an anonymized USIM (30) is input from the administrator terminal (10) through the above-described step S70 and a request for opening an anonymized USIM (30) is received, the 5G specialized network USIM management device (100) links the subscriber's personal information input from the administrator terminal (10) through the above-described step S70 and the network information (5G specialized network profile) of the 5G specialized network to the anonymized USIM, thereby anonymizing the USIM, thereby opening the USIM (S80), and stores the subscriber's personal information and the network information (5G specialized network profile) of the 5G specialized network linked to the USIM as 5G specialized network USIM opening information in the USIM information storage module (140), while transmitting the 5G specialized network USIM opening information to the user terminal (50) through the OTA opening method or the PoS opening method (S90).

[0110] The user terminal (50) that has received the 5G specialized network USIM opening information through the above-described step S90 can store the received 5G specialized network USIM opening information in the USIM (30) installed in the terminal.

[0111] Thereafter, the 5G specialized network USIM management device (100) can transmit the key value of the annotated USIM and subscriber information of the subscriber linked to the annotated USIM through the above-described step S80 to the 5G specialized network core device (40) (S100).

[0112] Meanwhile, if there is a subscriber among the subscribers of the 5G specialized network who wants to open a nationwide network, the subscriber who wants to open a nationwide network can request opening of the nationwide network by inputting the information required for opening the nationwide network USIM (e.g., the subscriber's subscriber information) into the 5G specialized network USIM management device (100) through the administrator terminal (10) (S110).

[0113] When a request for nationwide network USIM opening is made by receiving information (e.g., subscriber's personal information) required for nationwide network USIM opening of a subscriber who wishes to open a nationwide network from the administrator terminal (10) through the above-described step S110, the 5G specialized network USIM management device (100) can deactivate the 5G specialized network USIM opening information corresponding to the subscriber based on the subscriber information of the subscriber.

[0114] And, using the subscriber information of the subscriber, a request for nationwide USIM activation can be made to the nationwide USIM management device (20) (S120).

[0115] The nationwide network USIM management device (20) that has received a request for nationwide network USIM opening through the above-described step S120 can link nationwide network information (e.g., nationwide network profile) to the USIM corresponding to the subscriber in response to the nationwide network USIM opening request (S130), and transmit the nationwide network information (e.g., nationwide network profile) linked to the corresponding USIM as nationwide network USIM opening information to the 5G specialized network USIM management device (100) (S140).

[0116] Through the above-described step S140, the 5G specialized network USIM management device (100) receives nationwide network USIM opening information from the nationwide network USIM management device (20) in response to the nationwide network USIM opening request of the above-described step S120, and can transmit the nationwide network USIM opening information received from the nationwide network USIM management device (20) to the user terminal (50) through the OTA opening method or the PoS opening method (S150).

[0117] The user terminal (50) that has received the nationwide USIM opening information through the above-mentioned step S150 can store the received nationwide USIM opening information in the USIM (30) installed in the terminal.

[0118] And the 5G specialized network USIM management device (100) can transmit the key value of the USIM opened in the nationwide network and the subscriber information of the subscriber opened in the nationwide network to the nationwide network core device (60) (S160).

[0119] The USIM activation method according to the present invention may be implemented as an application or in the form of program commands that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, either singly or in combination.

[0120] The program commands recorded on the above computer-readable recording medium are those specifically designed and configured for the present invention, and may also be known and available to those skilled in the art of computer software.

[0121] Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, and flash memory.

[0122] Examples of program instructions include not only machine language code, such as that produced by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

[0123] In this way, according to the present invention, the intervention of the 5G specialized network operator is minimized, and the USIM opening procedure is performed through a separate 5G specialized network USIM management device, thereby improving the operational efficiency of the 5G specialized network.

[0124] Additionally, each 5G specialized network can perform USIM management and activation tasks without specialized personnel through a 5G specialized network USIM management device, and can have subscriber terminal activation and 5G specialized network USIM management devices at low cost.

[0125] Additionally, since the 5G specialized network USIM management device transmits and receives information required for USIM ordering and activation while connected to the administrator terminal and nationwide network USIM management device through a secure VPN connection, security can be maintained.

[0126] Additionally, USIM mobility can be supported as it is possible to switch between 5G-specific networks and nationwide networks using a single USIM for a user terminal.

[0127] Above, although some examples have been given and various preferred embodiments of the present invention have been described, the description of the various embodiments described in the “Specific Details for Carrying Out the Invention” section is merely exemplary, and those skilled in the art to which the present invention pertains will readily understand that they can carry out various modifications of the present invention or carry out equivalent implementations of the present invention based on the above description.

[0128] In addition, since the present invention can be implemented in various other forms, the present invention is not limited by the above description, and the above description is provided only to make the disclosure of the present invention complete and to fully inform a person having ordinary skill in the art to which the present invention belongs of the scope of the present invention, and it should be understood that the present invention is defined only by each claim of the claims.

[0129] [Explanation of symbols]

[0130] 10. Administrator terminal,

[0131] 20. Nationwide USIM management device,

[0132] 30. USIM,

[0133] 40. 5G specialized network core device,

[0134] 50. User terminal,

[0135] 60. National network core device,

[0136] 100. 5G specialized network USIM management device,

[0137] 110. VPN module,

[0138] 120. Authentication module,

[0139] 130. 5G specialized network USIM management module,

[0140] 140. USIM information storage module,

[0141] 150. Subscriber Provisioning Module

Claims

1. A VPN module that forms a VPN (Virtual Private Network) tunnel between the administrator terminal and the national network USIM (Universal Subscriber Identity Module) management device; An authentication module that authenticates a user of the administrator terminal where a VPN tunnel is formed; A 5G specialized network USIM management module that requests a USIM order from the national network USIM management device in response to a USIM order request from the above-mentioned administrator terminal, receives a key value of an anonymized USIM in response thereto, and, when a request for opening the anonymized USIM is received from the above-mentioned administrator terminal, links the subscriber's personal information and the network information of the 5G specialized network to the anonymized USIM to open the anonymized USIM, and transmits the 5G specialized network USIM opening information to the user terminal; A USIM information storage module that stores and manages the list of requested USIMs and the above 5G specialized network USIM opening information; and A 5G specialized network USIM management device for opening a USIM in a 5G specialized network, characterized by including a subscriber provisioning module that transmits a key value of a USIM named in a 5G specialized network core device and subscriber information of a subscriber linked to the named USIM.

2. In paragraph 1, The above 5G specialized network USIM management module is: A 5G specialized network USIM management device for USIM activation in a 5G specialized network, characterized in that it generates an input file containing information required for USIM ordering based on order information received from the administrator terminal, transmits the generated input file to the nationwide network USIM management device to request USIM ordering, and receives an output file in which a key value corresponding to an anonymized USIM is encrypted and stored from the nationwide network USIM management device.

3. In paragraph 1, The above 5G specialized network USIM management module is: A 5G specialized network USIM management device for USIM activation in a 5G specialized network, characterized in that it receives personal information of a subscriber who has received the anonymized USIM from the administrator terminal, requests activation of the anonymized USIM, and links the subscriber's personal information to the anonymized USIM to anonymize the anonymized USIM.

4. In paragraph 1, The above 5G specialized network USIM management module is: A 5G specialized network USIM management device for USIM activation in a 5G specialized network, characterized in that the 5G specialized network USIM activation information is transmitted to the user terminal through an OTA (Over The Air) activation method or a PoS (Point of Sale) activation method.

5. An authentication step of forming a VPN tunnel between the administrator terminal and the national network USIM management device, and authenticating the user of the administrator terminal; A USIM ordering step of requesting a USIM order to the nationwide USIM management device based on order information received from the administrator terminal and receiving a key value corresponding to an anonymized USIM from the nationwide USIM management device; and A USIM opening method using a 5G specialized network USIM management device, characterized in that it includes a 5G specialized network USIM opening step of linking the subscriber's personal information and the network information of the 5G specialized network to the anonymized USIM and transmitting them to the user terminal, and transmitting the key value of the USIM and subscriber information signed to the 5G specialized network core device.

6. In paragraph 5, The above authentication steps are: A step of forming a VPN tunnel between the administrator terminal and the 5G specialized network USIM management device by performing a mutual authentication procedure between the administrator terminal and the 5G specialized network USIM management device; A step of forming a VPN tunnel between the 5G specialized network USIM management device and the nationwide network USIM management device by performing a mutual authentication procedure; and A USIM activation method using a 5G specialized network USIM management device, characterized in that it includes a step of performing a user authentication procedure between the administrator terminal and the 5G specialized network USIM management device to confirm whether the user of the administrator terminal is a legitimate user.

7. In paragraph 5, The above USIM ordering steps are: A step of receiving order information from the above administrator terminal; A step of creating an input file containing information required for USIM ordering based on the above-mentioned input ordering information; A step of requesting a USIM order by transmitting the input file to the nationwide USIM management device; and A USIM activation method using a 5G specialized network USIM management device, characterized in that it comprises a step of receiving an output file in which a key value corresponding to an anonymized USIM manufactured and delivered in response to a USIM order request from the nationwide network USIM management device is encrypted and stored.

8. In paragraph 5, The above 5G specialized network USIM opening steps are: A step of receiving personal information of a subscriber who has received the anonymized USIM from the above administrator terminal; A step of linking the above personal information and the network information of the 5G specialized network to the anonymized USIM and storing the 5G specialized network USIM opening information in the USIM information storage module, and transmitting the 5G specialized network USIM opening information to the user terminal; and A method for opening a USIM using a 5G specialized network USIM management device, characterized in that it includes a step of transmitting a key value of a USIM and subscriber information linked to the named USIM to a 5G specialized network core device.

9. In paragraph 5, A USIM opening method using a 5G specialized network USIM management device, characterized in that it further includes a nationwide network USIM opening step of requesting nationwide network USIM opening to the nationwide network USIM management device using subscriber information of a subscriber who wishes to open a nationwide network, receiving nationwide network USIM opening information from the nationwide network USIM management device that has performed nationwide network opening in response to the nationwide network USIM opening request, transmitting the same to the user terminal, and transmitting the key value and subscriber information of the nationwide network-opened USIM to the nationwide network core device.

10. In paragraph 9, The above nationwide USIM opening steps are: A step of receiving subscriber information of a subscriber who wishes to open a nationwide network from the above administrator terminal; A step of deactivating 5G specialized network USIM activation information corresponding to the subscriber based on the subscriber information of the subscriber; A step of requesting nationwide USIM activation to the nationwide USIM management device using the subscriber information of the subscriber; A step of receiving nationwide network USIM opening information from the nationwide network USIM management device that performed nationwide network opening in response to a nationwide network USIM opening request; A step of storing the received nationwide USIM activation information in a USIM information management module and transmitting it to the user terminal; and A method for opening a USIM using a 5G specialized network USIM management device, characterized in that it includes a step of transmitting a key value and subscriber information of a USIM opened in a nationwide network to a nationwide network core device.

11. A computer-readable recording medium having recorded thereon a computer program for performing a USIM opening method using a 5G specialized network USIM management device according to any one of Articles 5 to 10.

Images