Samsung Electronics Co., Ltd.

Sungkyunkwan University

Duckey Lee

Jonghan Park

Hyewon Lee

Kangjin Yoon

Sujung Kang

Jonghoe Koo

Sangsoo Lee

Taehyung Lim

Youngsun Ryu

Songyean Cho

Jungje Son

Taesun Yeom

Sangsoo Jeong

Jong-Han Park

Sang-Soo Lee

Jung-Je Son

Youngkyo Baek

Sang Shin Lee

Bo-Gyeong Kang

Tae Sun Yeoum

Sun Min Hwang

Soon Hyun Cha

Ju-Ho Lee

Sung-Ho Choi

Soeng-hun Kim

Sang-Bum Kim

Woo-Seong Kim

Jaehyuk Jang

Rajavelsamy Rajadurai

Sangjin Kim

Hye-Won Lee

Seonghun Kim

Heejeong Lee

Sanghwi Lee

Hoyeon Lee

Sunghoon Kim

Soeng-Hun Kim

Jinkyu Han

Jicheol Lee

Ji-Cheol Lee

Kyungjoo Suh

Suresh Chitturi

Sang Soo Lee

Joohyun Park

Jonghyo Lee

Sooyeon Jung

Jung-Hwan Lim

Hyoung-Shick Kim

Inyoung Shin

Jae-Hyuk Jang

Taesun Yeoum

Mallikarjuna Hampali

Pratyush Pushkar

Jin-A Kang

Young-Bae Song

Hongjin Choi

A method and device for applying a different security policy, per service traffic, to a protocol data unit (PDU) session in a wireless communication system. The method comprises receiving, by a session management function (SMF) managing a session for a user equipment (UE), first configuration information about a first user plane security policy of the UE from a unified data management (UDM) managing subscription information about the UE, receiving, by the SMF, second configuration information about a second user plane security policy to be applied to a specific service data flow from a policy and control function (PCF) managing a policy and charging control (PCC) rule, and determining a user plane security policy to be applied to the UE based on one selected from the first user plane security policy and the second user plane security policy according to priority.

Method and device for applying user plane security policy for PDU session in wireless communication system

The present disclosure relates to: a communication technique merging IoT technology with a 5G communication system for supporting a data transmission rate higher than that of a 4G system; and a system therefor. The present disclosure may be applied to intelligent services (for example, smart homes, smart buildings, smart cities, smart cars or connected cars, healthcare, digital education, retail business, security- and safety-related services, and the like) on the basis of 5G communication technologies and IoT-related technologies. The present invention proposes a method and an apparatus for enabling convenient device-to-device communication service movement by combining a user's device transfer start terminal and an operator support method even if the user starts a device transfer from any terminal when moving a profile between devices. In particular, according to one embodiment of the present invention, it is possible to provide a method comprising the steps of: receiving an input for moving a first profile installed in a first terminal; determining, in the first terminal, that a communication service provider's device transfer method is an ODSA method by checking profile metadata, a configuration server, or a terminal memory; determining, by ECS, an ECS/DP+ authentication method as a subscriber authentication method for the device transfer, and performing transmission together with ECS generation nonce and SM-DP+ address to the terminal; receiving, by the ECS, authentication result data processed by SM-DP+ from the first terminal, and verifying ECS-generated and delivered nonce included in the data and signature data of an SM-DP+ server through a GSMA Root CI certificate; and if verified, providing an activation code to the terminal and displaying a QR code on the screen of the first terminal.

Method and apparatus for transferring network access information between terminals in mobile communication system

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). A terminal includes a transmission/reception unit, and at least one processor for controlling the terminal so as to receive a movement request of the profile from a user, confirm profile movement information, transmit, to a profile server, a message for requesting an activation code, receive the activation code and a profile deletion need from the profile server, delete the profile, transmit the deletion result of the profile to the profile server, transfer the activation code to another terminal, receive the activation code from another terminal, transmit a message for requesting the profile to the profile server by using the activation code, receive a profile package from the profile server, and install the profile package.

Method and device for changing EUICC terminal

The disclosure relates to a communication technique for combining an IoT technology with a 5G communication system for supporting a higher data transmission rate than that of a beyond-4G system, and a system therefor. The disclosure may be applied to intelligent services (for example, smart homes, smart buildings, smart cities, smart cars or connected cars, health care, digital education, retail businesses, security and safety related services, and the like) based on 5G communication technologies and IoT-related technologies. The disclosure provides a method and apparatus for recovering a profile in the case of a profile movement failure during a movement of a profile between smart security media.

Method and apparatus for recovering profile in case of device change failure

A method, performed by a user equipment (UE), of controlling a profile is provided. The method includes receiving a remote profile management command regarding a target profile from a profile server, determining whether an enabled profile exists, verifying whether profile owner information of the target profile corresponds to profile owner information or sub-owner information of the enabled profile, based a result of the determination, and selectively executing the remote profile management command based on a result of the verification.

Method, apparatus, and system for authorizing remote profile management

A first terminal for providing a bundle to a second terminal in a wireless communication system, includes: a transceiver; and at least one processor configured to: obtain information about the bundle to be transmitted to the second terminal; based on bundle transfer configuration information including an indicator indicating whether the first terminal is able to transmit a bundle to another terminal, determine that the first terminal is able to transmit the bundle to the second terminal; generate a bundle transmission code including identification information of the bundle to be transmitted to the second terminal; transmit the generated bundle transmission code to the second terminal; and upload the bundle to be transmitted to the second terminal to a bundle management server.

Method and device for online moving of bundles or profiles between devices

A communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method for remote management and remote management authority verification by a terminal includes: receiving a remote management instruction package; obtaining certificate information configured for a security module, which may be used when remotely managing a security service module corresponding to at least one identifier among a plurality of identifiers; and verifying a remote security service module management certificate of a bundle management server and the remote management instruction package by using the obtained certificate information.

Method and device for remote management and verification of remote management authority

The disclosure relates to a method and apparatus for reinstalling a profile at the time of changing an eUICC terminal. A terminal for managing a profile for network connection by using an eUICC in a wireless communication system includes a transceiver and at least one processor configured to control the terminal to receive a request for profile transfer from a user, identify profile transfer information, transmit a message requesting an activation code to a profile server, receive, from the profile server, the activation code and information indicating whether a profile deletion is required, delete the profile, transmit a deletion result of the profile to the profile server, transmit the activation code to another terminal, receive the activation code from the other terminal, transmit a message requesting a profile to the profile server by using the activation code, receive a profile package from the profile server, and install the profile package.

Method and apparatus for identifying profile deletion when eUICC terminal is changed

A communication method of a network function (NF) consumer in a wireless communication system according to an embodiment of the disclosure may include: receiving, from an NF repository function (NRF), a discovery response message in a discovery procedure, the discovery response message including NF set information including NF instance identifiers (IDs) for providing a service; transmitting, to the NRF, an access token request message including an NF producer instance ID; receiving, from the NRF, an access token response message including an access token; transmitting, to a service communication proxy (SCP), a service request message to be transmitted to an NF producer instance, the service request message including the token received from the NRF, a client credentials assertion (CCA) of the NF consumer, and the NF set information; and receiving, from the SCP, a service response message including a CCA of the NF producer instance.

Method and apparatus for authentication between core network devices in mobile communication system

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method and an apparatus for providing a dual subscriber identity module (SIM) function even in a terminal with a single embedded universal integrated circuit card (eUICC) mounted are provided. A method and an apparatus for installing, activating, and managing a plurality of profiles are provided, so that even a terminal with a single eUICC mounted may provide a dual SIM function in a communication system. The method includes the following embodiments to achieve the foregoing aspect, a method in which an eUICC receives a command involving a profile state change from a local profile assistant (LPA), registers a proactive command, and notifies a modem of logical interface information for obtaining the proactive command, a method in which the eUICC determines whether to perform polling on a specific logical interface by combining predetermined information, such as the logical interface information received from the mode, the state of a logical interface collected and possessed by the modem, and the number of an interface on which a corresponding message is received, a method in which the modem receives and processes the proactive command by performing polling on the logical interface, and a method in which the eUICC receives the result of processing the proactive command and completely changes the state of a profile connected to the logical interface. Further, a method in which the eUICC selectively configures a REFRESH message depending on whether the modem supports multiple enabled profiles (MEP) and divisively transmits the message to the modem when the eUICC receives a request for eUICC memory resetting or a profile state change in the terminal may be provided.

Method and apparatus for obtaining and handle proactive command(s) between terminal and card supporting logical interfaces

A method of a local bundle assistant (LBA) negotiating a certificate with a secondary platform bundle manager (SPBM) in a wireless communication system including: transmitting a request message requesting information of certificates supported by a secondary secure platform (SSP) to a secondary platform bundle loader (SPBL) of the SSP; receiving the information of certificates supported by the SSP including information of certificate issuers corresponding to a family identifier from the SPBL; transmitting the information of certificates supported by the SSP to the SPBM; and receiving a certificate of the SPBM for key agreement, information of public key identifiers of certificate issuers to be used by the SSP, and information of the family identifier from the SPBM.

Apparatus and method for SSP device and server to negotiate digital certificates

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. The disclosure provides a method and an apparatus for efficient event management using a secure element and a bundle installed therein.

Method and apparatus for managing event for smart secure platform

A method, performed by a user equipment (UE), of managing secondary platform bundles (SPBs), includes receiving an end user selection for managing a state of at least one SPB among SPBs installed in a smart secure platform (SSP) module; checking bundle management information required to manage the state of the at least one SPB based on the end user selection; determining whether end user intent confirmation is required to manage the state of the at least one SPB according to the end user selection based on the bundle management information; and managing the state of the at least one SPB based on a result of the determining.

Method and apparatus for managing bundles of smart secure platform

A method performed by a subscription manager discovery service (SM-DS) server in a wireless communication system is provided. The method includes performing a mutual authentication procedure with a terminal, generating an event checking identifier (ECID) associated with an embedded universal integrated circuit card (eUICC) identifier (EID), and transmitting, to the terminal, a message including the ECID, wherein the ECID is stored in the terminal and associated with an address of the SM-DS server.

Method and apparatus for managing events in a wireless communication system

The present disclosure relates to a communication technique that combines a 5G communication system for supporting a data rate that is higher than that of a beyond 4G system with IoT technology, and a system thereof. The present disclosure may be applied to intelligent services on the basis of 5G communication technology and IoT related technology, such as smart home, smart building, smart city, smart car or connected car, health care, digital education, retail, security and safety related services. Disclosed is a method for causing a cellular network itself to receive provisioning of a SIM profile to make it possible to use a normal cellular network service.

Method and apparatus for accessing cellular network for SIM profile

Growing community of inventors

Seoul, South Korea

Duckey Lee