Method and apparatus of constructing secure infra-structure for using embedded universal integrated circuit card

Abstract

Provided are a method and device for building a security-based environment that uses an eUICC. A method of building a trust relationship in an eUICC environment includes transmitting, by a trust requesting object, a trust relationship requesting message including identification information and signature information of the trust requesting object to a trust verifying object, delivering, by the trust verifying object, the trust relationship requesting message to a trust relationship relay object and receiving trust information of the trust requesting object corresponding to the trust relationship requesting message from the trust relationship relay object, and verifying, by the trust verifying object, the signature information of the trust requesting object using the trust information of the trust requesting object.

What is claimed is: 
     
         1 . A method of building a secure link to be performed in an embedded universal integrated circuit card (eUICC), the method comprising:
 building the secure link with a profile loading object;   building the secure link with a profile creating object; and   building the secure link with a mobile network operator (MNO).   
     
     
         2 . The method of  claim 1 , wherein the secure link is built based on authentication information and trust information. 
     
     
         3 . The method of  claim 2 , wherein each object holds the authentication information to authenticate its identity, and writes a signature using the authentication information. 
     
     
         4 . The method of  claim 3 , wherein the each object obtains the trust information through a trust relationship relay object for verifying the signature based on the authentication information. 
     
     
         5 . The method of  claim 4 , wherein the trust relationship relay object is a certificate authority (CA). 
     
     
         6 . The method of  claim 4 , wherein the trust relationship relay object builds initial trust relationships with the eUICC, the MNO, the profile loading object, and the profile creating object. 
     
     
         7 . The method of  claim 1 , wherein the profile loading object performs a subscription manager-secure routing (SM-SR) function. 
     
     
         8 . The method of  claim 1 , wherein the profile creating object performs a subscription manager-data preparation (SM-DP) function. 
     
     
         9 . An embedded universal integrated circuit card (eUICC) of building a secure link,
 the eUICC builds the secure link with a profile loading object, and a mobile network operator (MNO) respectively,   wherein the secure link is built based on authentication information and trust information.   
     
     
         10 . The eUICC of  claim 9 , wherein each object holds the authentication information to authenticate its identity, and writes a signature using the authentication information. 
     
     
         11 . The eUICC of  claim 9 , wherein the each object obtains the trust information through a trust relationship relay object for verifying the signature based on the authentication information. 
     
     
         12 . The eUICC of  claim 11 , wherein the trust relationship relay object is a certificate authority (CA). 
     
     
         13 . The eUICC of  claim 11 , wherein the trust relationship relay object builds initial trust relationships with the eUICC, the MNO, the profile loading object, and the profile creating object. 
     
     
         14 . The eUICC of  claim 9 , wherein the profile loading object performs a subscription manager-secure routing (SM-SR) function. 
     
     
         15 . The eUICC of  claim 9 , wherein the profile creating object performs a subscription manager-data preparation (SM-DP) function.