Huawei Technologies Co., Limited

Huawei Device Co., Ltd.

Nokia Technologies Oy

Huawei Device (dongguan) Co., Ltd.

Linyi Gao

Shuiping Long

Xiaobo Yu

Hui Jin

Qiang Yi

Shunan Fan

Guodong Xue

Jing Liu

Yu Zhu

Yan Li

Qi Yu

Yajun Zhang

Ziyao Cheng

A method includes receiving, by an embedded universal integrated circuit card (eUICC), first information from a local profile assistant (LPA), where the first information includes a first certificate issuer (CI) public key identifier, and the first CI public key identifier is a CI public key identifier that the eUICC does not have. The method further includes sending, by the eUICC, second information to an OPS, where the second information includes the first CI public key identifier. The method further includes receiving, by the eUICC, a patch package from the OPS, where the patch package includes at least a first CI public key corresponding to the first CI public key identifier. The method further includes updating, by the eUICC, a CI public key of the eUICC by using the first CI public key.

Method and system for updating certificate issuer public key, and related device

In a subscription profile downloading method when an application in a device triggers subscription profile downloading, an operator server sends, to a subscription management server, authentication information of an application allowed to initiate subscription profile downloading; and when receiving an authentication request sent by the device, the subscription management server uses the authentication information to attempt to authenticate the application initiating subscription profile downloading in the device, and provides subscription profile downloading for the device after the authentication succeeds. The subscription management server may add the authentication information to a subscription profile downloaded last time and send the subscription profile to the device, and when the device downloads a different subscription profile next time, the device may use the authentication information in the subscription profile downloaded last time to attempt to authenticate the application.

Subscription profile downloading method, device, and server

An information verification method and a related device. The method includes: receiving, by a first profile server, a remote profile management request sent by a remote profile management server, where the remote profile management request includes a first profile owner identifier; obtaining a second profile owner identifier in profile information; determining whether the first profile owner identifier is the same as the second profile owner identifier; and sending a remote profile management command to user equipment when the first profile owner identifier is the same as the second profile owner identifier. In this way, a loss caused to an operator or a profile owner due to a user's access to an invalid network or random profile unlocking is avoided, network security is improved, and waste of network resources is reduced.

Information verification method and related device

A method for updating a certificate issuer public key includes receiving, by an eUICC, first information sent by a LPA, where the first information includes a first CI public key identifier, and the first CI public key identifier is a CI public key identifier that the eUICC does not have. The method further includes sending, by the eUICC, second information to an OPS by using the LPA, where the second information includes the first CI public key identifier. The method further includes receiving, by the eUICC, a patch package sent by the OPS by using the LPA, where the patch package includes at least a first CI public key corresponding to the first CI public key identifier. The method further includes updating, by the eUICC, a CI public key of the eUICC by using the first CI public key.

A remote management method and a device, where the method includes receiving, by a subscription manager-data preparation (SM-DP+) server, a first identifier from a local profile assistant (LPA), searching for, by the SM-DP+ server, a remote profile management command corresponding to the first identifier, generating, by the SM-DP+ server, a first digital signature according to the first identifier and the remote profile management command, and sending the first digital signature and the remote profile management command to an embedded universal integrated circuit card (eUICC) using the LPA.

Remote management method, and device

A profile download method and system, and a related device are provided, and the method includes: obtaining, by a user terminal, local profile assistant LPA indication information, and obtaining download information required for downloading a target profile; and sending, by the user terminal, the download information to an embedded universal integrated circuit card eUICC if the LPA indication information instructs to download the profile by using an LPA in the eUICC, so that the eUICC downloads, by using the LPA in the eUICC, the target profile from a download server indicated by the download information. According to the method, the profile can be downloaded when an LPA is deployed in both the user terminal and the eUICC.

Profile download method and system, and related device

An embedded universal integrated circuit card (eUICC) profile management method and apparatus update an operating system of an eUICC include setting, by a local profile assistant (LPA), an operating system update flag, and obtaining and storing first metadata of a first profile. A profile server generates a second profile based on the operating system update flag, and generates second metadata of the second profile. The LPA configures the second metadata based on the first metadata, and activates the second profile based on the second metadata.

Embedded universal integrated circuit card profile management method and apparatus

An application processing method and apparatus for an embedded universal integrated circuit card (eUICC) are disclosed. The method includes: activating, by a terminal device, an embedded universal integrated circuit card (eUICC); and selecting, by the terminal device, an Issuer Security Domain Root (ISD-R) application on the eUICC during an initialization process of the eUICC, to maintain a session between the terminal device and the eUICC. The session between the terminal device and the eUICC can be maintained during the initialization process of the eUICC.

Application processing method and apparatus for embedded universal integrated circuit card

A method for downloading a profile of an operator includes sending, by a terminal to a subscription manager-data preparer (SMDP) using a subscription manager-secure router (SM-SR), a request for downloading a profile of an operator, where the download request carries the download certificate, an identifier (ID) of an embedded universal integrated circuit card (eUICC) of the terminal, and addressing information of the SM-DP; and receiving, by the terminal, the profile of the operator that is sent by the SM-DP using the SM-SR and that corresponds to the download request, and transmitting the profile of the operator to the eUICC, where the profile of the operator is obtained by the SM-DP according to an identity of the profile of the operator after the SM-DP verifies that the certificate that is for downloading the profile of the operator and is carried in the download request is valid.

Method and device for downloading profile of operator

Embodiments include a method for installing a subscription profile, a terminal, and a server. The method includes obtaining, by a local profile assistant (LPA) in the terminal, metadata of a subscription profile, determining, based on an authorization file, whether use of each policy rule included in the metadata is allowed. The method further includes obtaining, by the LPA, the subscription profile when the use of each policy rule included in the metadata is allowed. The method further includes sending the subscription profile to an embedded universal integrated circuit card (eUICC) in the terminal. The method further includes determining, by the eUICC based on the authorization file, whether use of the subscription profile is allowed. The method further includes installing, by the eUICC, the subscription profile when the use of the subscription profile is allowed.

Method for installing subscription profile, terminal, and server

A method for authorizing management for an embedded universal integrated circuit card includes: generating, by an eUICC manager, authorization information (S); encrypting the authorization information by using eUICC management credential (S); and sending the encrypted authorization information to an eUICC (S), where the authorization information includes an identifier of at least one first device; or the authorization information includes at least one authorization credential. The authorization information is configured in the eUICC, and therefore, when a subsequently authorized first device manages a profile in the eUICC, the eUICC may directly accept or reject, according to a stored correspondence between a profile management function and an authorized first device, to be managed, without obtaining authorization information each time.

Method and apparatus for authorizing management for embedded universal integrated circuit card

A profile download method and system, and a related device, where the method includes obtaining, by a user terminal, local profile assistant (LPA) indication information, obtaining download information required for downloading a target profile, and sending, by the user terminal, the download information to an embedded universal integrated circuit card (eUICC) when the LPA indication information instructs to download the profile using an LPA in the eUICC such that the eUICC downloads, using the LPA in the eUICC, the target profile from a download server indicated by the download information. Hence, the profile can be downloaded when an LPA is deployed in both the user terminal and the eUICC.

A profile processing method, a profile processing apparatus, a user terminal (UE), and an embedded universal integrated circuit card (eUICC) conducive to profile processing efficiency enhancement of the eUICC and user experience improvement, where the method includes generating, by a local profile assistant (LPA) of a first UE (UE), a profile request according to information about an eUICC of a second UE (UE), sending the profile request, receiving, by the LPA, a profile request response, where the profile request response includes at least a profile of the eUICC, and forwarding, by the LPA, the profile to the eUICC.

Growing community of inventors

Beijing, China

Linyi Gao