Electronic Device eSIM Profile Transfer With EAP-AKA Fallback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies do not provide a scheme for transferring a communication service profile from an electronic device using an eSIM to another electronic device.
Innovation Solution
The electronic device employs an extensible authentication protocol authentication and key agreement (EAP-AKA) to facilitate profile transfer by obtaining authentication information through EAP-AKA operations or alternative authenticating operations when EAP-AKA is impossible, enabling seamless profile transfer between devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a physical SIM card is used for communication service, then authentication and network access are enabled, but profile transfer between devices requires physical card removal and insertion which is inconvenient and time-consuming
Solution Approach 1:
The patent replaces the mechanical SIM card removal and insertion process with wireless communication-based profile transfer. The eUICC controller enables remote profile downloading and installation through wireless networks, eliminating the need for physical card handling and significantly reducing transfer time while improving operational convenience
Solution Approach 2:
The patent introduces an intermediary system consisting of the eUICC controller, authentication server, and profile management infrastructure. This intermediary enables seamless profile transfer by mediating between the source device, destination device, and network operator systems, allowing automated profile provisioning without direct physical intervention
2Adaptability or versatility
If an eUICC is embedded in the electronic device, then profile transfer without physical card replacement is enabled, but authentication complexity increases due to EAP-AKA and alternative authenticating operations
Solution Approach 1:
The patent implements dynamic authentication by enabling the eUICC controller to adaptively select between EAP-AKA and alternative authenticating operations based on device compatibility and network conditions. This dynamic approach allows the system to optimize the authentication process for each specific scenario, managing complexity through flexibility rather than rigid procedures
Solution Approach 2:
The patent segments the authentication process into distinct modules: EAP-AKA authentication module, alternative authenticating operation module, and profile transfer module. This segmentation allows each component to be independently managed and optimized, reducing overall system complexity by breaking down the complex authentication flow into manageable, specialized segments
3Reliability
If EAP-AKA authenticating operation is used for profile transfer, then secure authentication is achieved, but compatibility issues arise when EAP-AKA is impossible between certain devices
Solution Approach 1:
The patent implements universal authentication by equipping the eUICC controller with multiple authentication capabilities: EAP-AKA for secure scenarios and alternative authenticating operations for compatibility scenarios. This multi-functional approach ensures the system can operate reliably across diverse device types and network configurations, maintaining both security and adaptability
4Duration of action of stationary object
If profile transfer is enabled between electronic devices, then communication service continuity is maintained, but security risks increase due to remote profile installation
Solution Approach 1:
The patent applies preliminary action by performing authentication and authorization checks before profile transfer occurs. The eUICC controller verifies device legitimacy, user consent, and profile eligibility in advance, ensuring that only authorized profile installations proceed. This preliminary validation layer mitigates security risks while enabling seamless service continuity
Data Source
AI summary
An electronic device includes a communication circuit, and a processor electrically connected to the communication circuit. The processor is configured to, provide first information which triggers profile transfer from an external electronic device to the electronic device, based on the profile transfer which is based on an EAP-AKA authenticating operation being possible, obtain first authentication information which is obtained via the EAP-AKA authenticating operation between the external electronic device and a server associated with the profile transfer, based on the profile transfer which is based on the EAP-AKA authenticating operation being impossible, perform, via the communication circuit, an authenticating operation different from the EAP-AKA authenticating operation with the server to obtain second authentication information, and based on one of the first authentication information or the second authentication information, perform an operation for the profile transfer.