JP6940044B2 - Server, terminal, SIM information provision method and SIM information writing method - Google Patents

Description

The present invention relates to a technique using an eSIM (Embedded Subscriber Identity Module).

Patent Document 1 describes a terminal provided with eSIM. eSIM is also referred to as an "embedded subscriber identification module" and is sometimes referred to as an eUICC (Embedded Universal IC Card) as a hardware name. SIM (Subscriber Identity Module) information including a telephone number and the like can be written to the eSIM from the server via the network. SIM information is also referred to as a "profile".

Japanese Patent Application Laid-Open No. 2015-522976

The GSMA (GSM® Association) standard specification defines an Activation Code (also referred to as the "AC") as the code used to download the profile.

The AC contains the address of the server to connect to to download the profile. In AC, the necessity of Confirmation Code (confirmation code, hereinafter also referred to as "CC") can be defined by an option.

CC is an authentication code used to download a particular profile (eg, a profile written to eSIM). Specifically, CC is authentication information used by the server to authenticate the requester of the profile. The CC is provided to the user by the operator who assigns the profile to the user. The method of providing CC is defined as outside the scope of the GSMA.

Various information can be used as CC. Therefore, it is conceivable to use a dedicated authentication information independent of the profile (SIM information) as the CC. However, in this case, the server needs to manage the dedicated authentication information in addition to the SIM information.

One of the objects of the present invention is to provide a technique capable of reducing the need to manage dedicated authentication information as authentication information for authenticating a request source of SIM information.

In the server according to one aspect of the present invention, a storage unit that stores SIM information written in the eSIM, a communication unit that communicates with the terminal, and authentication information that the communication unit receives from the terminal are stored in the storage unit. When the information matches the predetermined information included in the SIM information, the communication unit includes a control unit that causes the communication unit to execute an operation of transmitting the SIM information to the terminal.

According to one aspect of the present invention, it is possible to reduce the need to manage dedicated authentication information as authentication information for authenticating the request source of SIM information.

It is a figure which showed the profile providing system 100 including the profile providing server 3 which concerns on 1st Embodiment of this invention. It is a figure which showed the example of the information contained in a profile. It is a sequence diagram for demonstrating the operation in the profile providing system 100. It is a figure which showed the profile providing system 100A including the user terminal 4A which concerns on 2nd Embodiment of this invention. It is a sequence diagram for demonstrating the operation in the profile providing system 100A. It is a figure which shows an example of the hardware configuration of each of a carrier server 1, a carrier store terminal 2, a profile providing server 3, a user terminal 4, a user terminal 4A, and a communication terminal 6.

Hereinafter, embodiments according to the present invention will be described with reference to the drawings. In the drawings, the dimensions and scale of each part differ from the actual configuration as appropriate. The embodiments described below are preferred specific examples of the present invention. For this reason, the present embodiment is provided with various technically preferable limitations. However, the scope of the present invention is not limited to these forms unless it is stated in the following description that the present invention is particularly limited.

<First Embodiment>
FIG. 1 is a diagram showing a profile providing system 100 including a profile providing server 3 according to the first embodiment of the present invention. As shown in FIG. 1, the profile providing system 100 includes a carrier server 1, a carrier store terminal 2, a profile providing server 3, and a user terminal 4. The user terminal 4 is equipped with an eSIM 41.

The profile providing server 3 may be configured by a plurality of servers instead of one server. For example, the profile providing server 3 may be composed of a server that communicates with the carrier server 1, a server that communicates with the user terminal 4, a server that generates a profile, and the like.

The carrier server 1 and the carrier store terminal 2 are managed by a carrier (mobile communication operator). In the carrier server 1 and the carrier store terminal 2, for example, the user of the user terminal 4 (hereinafter, simply referred to as "user") and the carrier conclude a mobile communication service contract (hereinafter, simply referred to as "contract"). Used for. The carrier server 1 further requests the profile providing server 3 to create a profile, and stores information indicating the relationship between the profile and the user.

The profile providing server 3 is managed by the profile provider. The profile providing server 3 includes a storage unit 31, a communication unit 32, and a control unit 33.

The storage unit 31 stores one or a plurality of profiles (one or a plurality of SIM information). One of the profiles stored in the storage unit 31 is written to the eSIM 41 of the user terminal 4. When a plurality of profiles are stored in the storage unit 31, two or more of the plurality of profiles may be written in the eSIM 41. In this case, the profile actually used (the profile to be activated) is selected from the plurality of profiles written in the eSIM 41.

FIG. 2 is a diagram showing an example of information included in the profile.
Profile P contains unique information (unique information). Unique information includes a telephone number 101, an IMSI (International Mobile Subscriber Identity) 102, an ICCID (Integrated Circuit Card ID) 103, a key value 104 and a PIN (Personal Identification Number) unlock code 105. In other words, the unique information includes the telephone number 101, the PIN unlock code 105, and other information (eg, ICCID 103). Profile P also includes other information not shown in FIG. 2, such as PIN.

The IMSI is also referred to as the "international mobile subscriber identification number." The ICCID is also referred to as a "profile identification number". The PIN unlock code is also referred to as a "pin unlock code" or a "PUK (PIN Unlock Key)". The PIN unlock code 105 is a code for unlocking the PIN lock. The key value 104 is used in the authentication process on the network.

The explanation is returned to FIG. The communication unit 32 communicates with the user terminal 4 via a network (not shown). The communication unit 32 also communicates with the carrier server 1 via a network (not shown).

The control unit 33 controls the profile providing server 3. The control unit 33 operates as follows, for example.

The control unit 33 generates the profile P in response to a request from the carrier (carrier server 1). The control unit 33 stores the generated profile P in the storage unit 31.

The control unit 33 assigns an Activation Code (AC) to the profile P. The address of the profile providing server 3 and the Activation Code Token (hereinafter, also referred to as “AC token”) and the like are indicated in the AC.

The AC token has information that identifies the profile P. In addition, the AC token is also provided with a flag (hereinafter, simply referred to as "flag") regarding whether or not a Confirmation Code (CC) is required. The flag is set to stand (become "1") when CC is required to obtain profile P. In the following, it is assumed that the flag is set (CC is required to obtain the profile P).

The control unit 33 determines the PIN unlock code 105 included in the profile P as CC. The PIN unlock code 105 included in the profile P is an example of predetermined information included in the SIM information. Furthermore, the CC PIN unlock code 105 is part of the unique information.

The control unit 33 provides the profiles P and AC to the carrier (carrier server 1). The PIN unlock code 105, which is also used as the CC, is included in the profile P. Therefore, the fact that the control unit 33 provides the profile P to the carrier server 1 means that the control unit 33 provides the CC to the carrier server 1. The profile P is assigned to the user at the carrier store when the contract between the carrier and the user is concluded.

The user inputs AC and CC to the user terminal 4 in order to write the profile P to the user terminal 4. The user terminal 4 analyzes the AC and identifies the address of the profile providing server 3. The user terminal 4 provides the AC token described in the AC, CC (PIN unlock code 105), and the like to the profile providing server 3.

In the profile providing server 3, the control unit 33 selects the profile P specified by the AC token received from the user terminal 4 from the profiles stored in the storage unit 31.

When the CC (authentication information) received from the user terminal 4 matches the PIN unlock code 105 included in the profile P specified by the AC token to be selected, the control unit 33 transmits the profile P to the user terminal 4. The communication unit 32 is made to execute the operation.
The above is the main operation of the control unit 33.

The user terminal 4 is managed by the user. The user terminal 4 includes an eSIM 41, a reading unit 42, a reception unit 43, a display unit 44, a communication unit 45, and a control unit 46.

The profile P can be written to the eSIM 41 from the profile providing server 3 via a network (not shown).

The reading unit 42 reads the AC provided to the user at the carrier store. For example, when the AC is QR code (registered trademark), a QR code reader is used as the reading unit 42.

The reception unit 43 is, for example, a touch panel or an operation button. The reception unit 43 receives an input about the CC provided to the user at the carrier store. The CC received by the reception unit 43 functions as authentication information.

The display unit 44 executes various displays. The communication unit 45 can communicate with a device having a communication function. For example, the communication unit 45 communicates with the profile providing server 3 via a network (not shown).

The control unit 46 controls the user terminal 4. The control unit 46 operates as follows, for example.

The control unit 46 analyzes the AC read by the reading unit 42. When the flag related to CC is set in the AC token shown in AC, the control unit 46 causes the display unit 44 to display to prompt the input of CC. The user inputs the CC to the reception unit 43 according to this display.

The control unit 46 provides the eSIM 41 with the AC read by the reading unit 42 and the CC received by the receiving unit 43.

The eSIM 41 transmits an EID (eSIM ID) for identifying the eSIM 41, an AC token indicated by the AC, and a CC to the address of the profile providing server 3 indicated by the AC via the user terminal 4. do. The EID is held in the eSIM41.

When the communication unit 45 receives the profile P from the profile providing server 3, the control unit 46 writes the profile P to the eSIM 41.

Next, the operation will be described.
FIG. 3 is a sequence diagram for explaining the operation in the profile providing system 100.
First, an operation performed before the contract between the carrier and the user (hereinafter referred to as "preliminary operation") will be described.
The carrier (carrier server 1) requests the generation of the profile P by providing the telephone number 101 and the IMSI 102 to the profile providing server 3 (step S101).

In the profile providing server 3, when the communication unit 32 receives the telephone number 101 and the IMSI 102, the control unit 33 generates the profile P (see FIG. 2) including the telephone number 101 and the IMSI 102 (step S102).

Subsequently, the control unit 33 generates an AC according to the profile P and assigns the generated AC to the profile P (step S103). When the AC is assigned, the control unit 33 determines the PIN unlock code 105 in the profile P as the CC associated with the profile P (step S104).

When the control unit 33 determines the PIN unlock code 105 as the CC, the control unit 33 stores (associates) the profile P in which the PIN unlock code 105 is set as the CC and the AC with each other in the storage unit 31 (step). S105).

Subsequently, the control unit 33 causes the communication unit 32 to execute an operation of providing the profile P, AC, and CC (PIN unlock code 105) to the carrier (carrier server 1) (step S106). In the present embodiment, the control unit 33 QR-codes the AC and provides the QR-coded AC and the profiles P and CC to the communication unit 32. The communication unit 32 transmits the QR-encoded AC and the profiles P and CC to the carrier (carrier server 1).

When the carrier (carrier server 1) receives the profile P, the AC (QR coded AC), and the CC, the carrier (carrier server 1) stores the profile P, the AC, and the CC in association with each other (step S107).
This is the pre-operation.

Subsequently, an operation (hereinafter referred to as "contract operation") performed at the time of contract between the carrier and the user will be described.
First, in the carrier store, the profile provided to the user is determined. Hereinafter, it is assumed that the profile P is determined as the profile provided to the user.

In the carrier store terminal 2, an operation for associating information about the user (hereinafter referred to as "user information") with the profile P is performed. In response to this operation, the carrier server 1 stores the user information in association with the profile P (step S108). The user information is, for example, the name of the user.

Subsequently, at the carrier store, the user is provided with the AC associated with the profile P and the PIN unlock code 105 included in the profile P (step S109). The PIN unlock code 105 is provided as a CC. In FIG. 3, the PIN unlock code 105 is indicated as “PUK”.

In the present embodiment, as shown in FIG. 1, a medium (for example, a paper medium) 5A showing a QR-coded AC51 and a medium (for example, a paper medium) 5B showing a PIN unlock code 105 are provided to the user. Will be done. At this time, the user is also provided with information that the PIN unlock code 105 is also used as CC (authentication information). The medium is not limited to the paper medium and can be changed as appropriate.
This is the contract operation. As described above, in the contract operation of the user, the profile P is not written in the user terminal 4.

Next, the profile acquisition operation will be described.
The user causes the reading unit 42 to read the QR-coded AC51 shown on the medium 5A in order to write the profile P to the eSIM 41 mounted on the user terminal 4.

When the reading unit 42 reads the QR-coded AC51 (step S110), the reading unit 42 decodes the QR-coded AC51 to generate an AC.

The control unit 46 analyzes the AC generated by the reading unit 42 and confirms the address of the profile providing server 3, the AC token, and the like (step S111).

When the flag is set in the AC token, the control unit 46 causes the display unit 44 to execute the request information for requesting the input of the CC (for example, the request information "Enter the Confirmation Code") (for example, the request information for inputting the Confirmation Code). Step S112). As described above, in this embodiment, the flag related to CC is set.

The user inputs the PIN unlock code 105 shown on the medium 5B to the reception unit 43 according to the request information displayed on the display unit 44. The reception unit 43 receives the PIN unlock code 105 input by the user as a CC (step S113).

Subsequently, the control unit 46 notifies the eSIM 41 of the AC generated by the reading unit 42 and the CC received by the receiving unit 43 (step S114).

Subsequently, the control unit 46 connects to the profile providing server 3 via the communication unit 45 using the address of the profile providing server 3 confirmed by analyzing the AC. When the profile providing server 3 and the user terminal 4 are connected, necessary authentication processing is executed between the profile providing server 3 and the user terminal 4 and between the profile providing server 3 and the eSIM 41 (step S115 and). S116).

If the authentication is successful between the profile providing server 3 and the user terminal 4 and between the profile providing server 3 and the eSIM 41, the eSIM 41 executes step S117. In step S117, the eSIM 41 provides the AC token described in the AC, the EID of the eSIM 41, the CC, the certificate for communication, and the like to the profile providing server 3 via the user terminal 4. The certificate for communication is held in advance by the eSIM41. The AC token functions as a so-called matching ID (Matching ID defined in the GSMA standard specifications).

The control unit 33 in the profile providing server 3 verifies whether the information provided by the eSIM 41 is correct (step S118).
For example, in step S118, the control unit 33 verifies whether the information provided by the eSIM 41 is correct by using the communication certificate provided by the eSIM 41. Further, the control unit 33 may verify whether or not the information provided by the eSIM 41 is correct, depending on whether or not the profile specified by the AC token provided by the eSIM 41 is stored in the storage unit 31. For example, the control unit 33 determines that the information provided by the eSIM 41 is correct when the profile specified by the AC token is stored in the storage unit 31.

When the information provided by the eSIM 41 is correct, the control unit 33 selects a profile (hereinafter referred to as "corresponding candidate profile") specified by the AC token received from the eSIM 41 from the profiles stored in the storage unit 31. select. Subsequently, the control unit 33 executes the authentication process using the CC when the flag of the AC token stored in the storage unit 31 is set in association with the corresponding candidate profile (step S119).

In step S119, the control unit 33 operates as follows.
The control unit 33 determines whether or not the CC provided by the eSIM 41 matches the PIN unlock code 105 included in the corresponding candidate profile.
The fact that the CC matches the PIN unlock code 105 included in the corresponding candidate profile means that the AC and CC received from the eSIM 41 correspond to each other. The fact that the ACs and CCs received from the eSIM41 correspond to each other means that the user using these ACs and CCs is a legitimate user.
Therefore, when the CC provided by the eSIM 41 matches the PIN unlock code 105 included in the corresponding candidate profile, the control unit 33 executes an operation of transmitting the corresponding candidate profile to the user terminal 4 to the communication unit 32. (Step S120).

In the user terminal 4, when the communication unit 45 receives the corresponding candidate profile, the control unit 46 writes the corresponding candidate profile received by the communication unit 45 in the eSIM 41 (step S121). When the corresponding candidate profile is written in the eSIM 41, the user terminal 4 can perform communication using the corresponding candidate profile.

According to the profile providing server 3 and the SIM information providing method according to the present embodiment, the control unit 33 includes the CC received from the user terminal 4 by the communication unit 32 in the profile P stored in the storage unit 31. When the information matches the predetermined information (PIN unlock code 105), the communication unit 32 is made to execute the operation of transmitting the profile P to the user terminal 4.

Therefore, it is possible to reduce the need for the profile providing server 3 to manage the dedicated authentication information as the authentication information for authenticating the request source of the profile P in addition to the profile P written in the eSIM 41. Therefore, it is possible to suppress an increase in the information managed by the profile providing server 3 in order to perform authentication using CC.
The predetermined information used as the CC is not limited to the PIN unlock code 105, and may be any information included in the profile P.

In the present embodiment, a part of the unique information (PIN unlock code 105) possessed by the profile P is used as the CC. Therefore, highly specific information can be used as the CC, and the accuracy of authentication can be improved.
Note that a part of the unique information used as CC is not limited to the PIN unlock code 105, and may be any unique information included in the profile P.

In this embodiment, the PIN unlock code 105 is used as the CC. The PIN unlock code 105 does not indicate the user's contact information. Therefore, even if the PIN unlock code 105 is leaked during authentication, the inconvenience given to the user can be reduced as compared with the case where the telephone number 101 indicating the user's contact information is leaked.

<Second Embodiment>
FIG. 4 is a diagram showing a profile providing system 100A including a user terminal 4A according to the second embodiment of the present invention. In FIG. 4, components having the same configuration as the components shown in FIG. 1 are designated by the same reference numerals. Hereinafter, the second embodiment will be described focusing on the differences from the first embodiment.

The profile providing system 100A includes a carrier server 1, a carrier store terminal 2, a profile providing server 3, a user terminal 4A, and a communication terminal 6. The communication terminal 6 is an example of a first device including eSIM. The communication terminal 6 is managed by the user of the user terminal 4A.

In the second embodiment, the carrier provides the user with AC and CC required for writing the profile to the eSIM 61 mounted on the communication terminal 6.

In the second embodiment, the communication terminal 6 equipped with the eSIM 61 does not have a reception unit for receiving CC. Therefore, even if the communication terminal 6 can communicate with the profile providing server 3, the CC cannot be transmitted to the profile providing server 3.
Therefore, in the present embodiment, the reception unit 43 in the user terminal 4A receives the CC instead of the communication terminal 6, acquires the profile for the eSIM61 instead of the communication terminal 6, and transfers the acquired profile to the eSIM61 in the communication terminal 6. Write.

The user terminal 4A includes a reading unit 42, a reception unit 43, a display unit 44, a communication unit 45, a control unit 46A, and a communication unit 47. The user terminal 4A is different from the user terminal 4 in the first embodiment in that it does not include the eSIM 41, includes the control unit 46A instead of the control unit 46, and further includes the communication unit 47. The reading unit 42 reads an AC (for example, a QR-coded AC) required for writing a profile to the eSIM 61. The reception unit 43 receives the CC required to write the profile in the eSIM61.

The communication unit 47 communicates with the communication terminal 6. The communication unit 47 wirelessly communicates with the communication terminal 6 by, for example, short-range wireless communication such as bluetooth (registered trademark). The communication unit 47 acquires the EID of the eSIM61 from the eSIM61 mounted on the communication terminal 6. The EID of the eSIM61 is an example of identification information that identifies the eSIM61. The communication unit 47 is an example of an acquisition unit. Further, the communication unit 47 transmits the profile for eSIM61 provided by the profile providing server 3 to the communication terminal 6.

The control unit 46A controls the user terminal 4A. The control unit 46A includes a transmission control unit 461 and a write control unit 462.

The transmission control unit 461 causes the communication unit 45 to execute an operation of transmitting the information necessary for acquiring the profile to be written to the eSIM 61 to the profile providing server 3. For example, the transmission control unit 461 executes an operation of simultaneously or separately transmitting the EID acquired by the communication unit 47 from the communication terminal 6 and the CC received by the reception unit 43 to the profile providing server 3 to the communication unit 45. Let me.

When the communication unit 45 receives the profile transmitted by the profile providing server 3 for the eSIM 61, the write control unit 462 writes the profile to the eSIM 61 included in the communication terminal 6. In the present embodiment, the write control unit 462 writes the profile for the eSIM 61 to the eSIM 61 by transmitting the profile for the eSIM 61 to the communication terminal 6 using the communication unit 47.

The communication terminal 6 includes an eSIM 61, communication units 62 and 63, and a control unit 64.
The profile for eSIM61 is stored in the eSIM61.
The communication unit 62 uses the profile stored in the eSIM 61 to perform communication using, for example, the communication network of the carrier.
The communication unit 63 communicates with the user terminal 4A. The communication unit 63 wirelessly communicates with the user terminal 4A by, for example, short-range wireless communication such as bluetooth (registered trademark).
The control unit 64 controls the communication terminal 6. For example, the control unit 64 controls the writing of the profile to the eSIM 61, and controls the operation of the communication unit 62 using the profile stored in the eSIM 61.

Next, the operation will be described.
FIG. 5 is a sequence diagram for explaining the operation in the profile providing system 100A. In FIG. 5, the same processes as those shown in FIG. 3 are designated by the same reference numerals. Hereinafter, among the processes shown in FIG. 5, a process different from the process shown in FIG. 3 will be mainly described. In FIG. 5, steps S111 and S112 are executed by the transmission control unit 461.

When step S113 is completed, the user connects the user terminal 4A and the communication terminal 6 by Bluetooth (registered trademark) or the like. The user may connect the user terminal 4A and the communication terminal 6 before the step S113 is completed.

When the user terminal 4A and the communication terminal 6 are connected, the transmission control unit 461 requests the communication terminal 6 for the EID of the eSIM 61 by using the communication unit 47. The control unit 64 in the communication terminal 6 acquires an EID from the eSIM 61 in response to a request for the EID, and transmits the acquired EID to the user terminal 4A using the communication unit 63 (step S122). The user terminal 4A holds the EID transmitted from the communication terminal 6.

Subsequently, steps S115 and S116 are executed. If the authentication is successful between the profile providing server 3 and the user terminal 4A, the transmission control unit 461 executes step S123. In step S123, the transmission control unit 461 provides the profile providing server 3 with the AC token described in the AC, the EID of the eSIM61, the CC, the certificate for communication, and the like. The communication certificate is held in advance by the transmission control unit 461.

Hereinafter, when the information transmitted from the user terminal 4A is correct (step S118) and the authentication using the CC is successful (step S119), the control unit 33 communicates the operation of transmitting the corresponding candidate profile to the user terminal 4A. Let unit 32 execute (step S120). In the present embodiment, the corresponding candidate profile is a profile for eSIM61.

In the user terminal 4A, when the communication unit 45 receives the corresponding candidate profile, the write control unit 462 writes the corresponding candidate profile in the eSIM 61 using the communication unit 47 (step S121). When the corresponding candidate profile is written in the eSIM 61, the communication terminal 6 can perform communication using the corresponding candidate profile.

According to the user terminal 4A and the SIM information writing method according to the present embodiment, the transmission control unit 461 simultaneously or separately sends the EID acquired by the communication unit 47 and the CC received by the reception unit 43 to the profile providing server 3. The communication unit 45 is made to execute the operation of transmitting.
The write control unit 462 writes the profile transmitted by the profile providing server 3 for eSIM61 to the eSIM61 when the CC matches the predetermined information (PIN unlock code 105) included in the profile.
Therefore, even if the eSIM61 is mounted on a device that cannot accept the CC, the user terminal 4A can acquire the profile for the eSIM61 using the CC and write the acquired profile in the eSIM61 instead of the device. It will be possible.

Also in this embodiment, the predetermined information of CC is not limited to the PIN unlock code 105, and may be any information included in the profile. Further, a part of the unique information used as CC is not limited to the PIN unlock code 105, and may be another part of the unique information included in the profile P.

<Modification example>
The present invention is not limited to the embodiments described above. The present invention may be made, for example, in various modifications as described below. In addition, one or more modifications arbitrarily selected from the following modifications may be combined as appropriate.

<Modification example 1>
As the CC, the telephone number 101 may be used instead of the PIN unlock code 105. In this case, the telephone number 101 is an example of predetermined information included in the profile and a part of unique information included in the profile.
According to the first modification, the telephone number 101 is used as the CC, so that the user cannot forget the CC.
As the CC, information obtained by synthesizing the PIN unlock code 105 and the telephone number 101, more specifically, information composed of a plurality of unique information may be used as the CC.

<Modification 2>
The AC provided to the user does not have to be QR coded.

<Modification example 3>
AC and CC may be shown on the same medium (eg, the same paper medium).

<Modification example 4>
The block diagram used in the description of the above embodiment shows a block of functional units. These functional blocks (components) are realized by any combination of hardware and / or software. Further, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized by one physically and / or logically coupled device. In addition, each functional block is realized by directly and / or indirectly (for example, wired and / or wireless) connecting two or more physically and / or logically separated devices. You may.

For example, each of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 according to the embodiment of the present invention is realized by the computer that performs the processing of the present invention. May be good.
FIG. 6 is a diagram showing an example of each hardware configuration of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 according to the embodiment of the present invention. ..
Each of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 physically has a processor 1001, a memory 1002, a storage 1003, a communication device 1004, and an input device 1005. , The output device 1006, the bus 1007, and the like may be configured as a computer device.
The processor 1001, the memory 1002, the storage 1003, the communication device 1004, the input device 1005, the output device 1006, and the bus 1007 are hardware, respectively.
The word "device" can be read as a circuit, device, unit, or the like.
Each hardware configuration of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 may include one or more of the devices shown in FIG. It is not necessary to include some devices.

Each function of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 causes the processor 1001 or the memory 1002 to read predetermined software (program), and the processor 1001 Is realized by executing a predetermined software (program). For example, each of the above-mentioned functions is realized by the processor 1001 executing predetermined software (program) to control the communication performed by the communication device 1004 and the reading and / or writing of data in the memory 1002 and the storage 1003. ..

Processor 1001 operates, for example, an operating system to control the entire computer device. The processor 1001 may be configured by a central processing unit (CPU) including an interface with a peripheral device, a control device, an arithmetic unit, a register, and the like. For example, the above-mentioned control units 33, 46, 46A and 64, the transmission control unit 461 and the write control unit 462 may be realized by the processor 1001.

The processor 1001 reads a program (program code), a software module, and data from the storage 1003 and / or the communication device 1004 into the memory 1002, and executes various processes according to these.

As the program, a program that causes a computer device to execute at least a part of the operations described in the above-described embodiment is used. For example, the control unit 33 may be realized by a control program stored in the memory 1002 and operated by the processor 1001. Other functional blocks may be realized in the same manner as the control unit 33.
It has been described that the above-mentioned various processes are executed by one processor 1001. However, the various processes described above may be executed simultaneously or sequentially by two or more processors 1001.
Processor 1001 may be implemented by one or more chips.

The memory 1002 is a computer-readable recording medium. The memory 1002 may be composed of at least one such as a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electrically Erasable Programmable ROM), and a RAM (Random Access Memory). The memory 1002 may be referred to as a register, cache, main memory (main storage device), or the like. The memory 1002 can store an executable program (program code) or software module for carrying out one embodiment of the present invention.

Storage 1003 is a computer-readable recording medium. The storage 1003 may be composed of at least one such as an optical disk, a hard disk drive, a flexible disk, a magneto-optical disk, a smart card, a flash memory, a floppy (registered trademark) disk, and a magnetic strip. The storage 1003 may be referred to as an auxiliary storage device.

The storage medium described above may be, for example, a database or server or other suitable medium containing memory 1002 and / or storage 1003. The above-mentioned storage unit 31 is realized by the memory 1002 and the storage 1003.

The communication device 1004 is hardware (transmission / reception device) for communicating between computers via a wireless network. The communication device 1004 is also referred to as, for example, a network device, a network controller, a network card, a communication module, or the like. The communication units 32, 45, 47, 62 and 63 described above may be realized by the communication device 1004.

The input device 1005 is an input device (for example, a switch or a button) that receives an input from the outside. The input device 1005 realizes the reception unit 43. The output device 1006 is an output device (eg, a display, a speaker, an LED (light emitting diode) lamp, or the like) that performs output to the outside. The output device 1006 realizes the display unit 44. A configuration in which the input device 1005 and the output device 1006 are integrated (for example, a touch panel with a display function) may be used.

Further, each device such as the processor 1001 and the memory 1002 is connected by a bus 1007 for communicating information. Bus 1007 may be composed of a single bus or may be composed of different buses between devices.

Further, each of the carrier server 1, the carrier store terminal 2, the profile providing server 3, the user terminal 4, the user terminal 4A, and the communication terminal 6 is a microprocessor, a digital signal processor (DSP: Digital Signal Processor), and an ASIC (Application Specific Integrated). It may be configured by an aspect including hardware such as Circuit), PLD (Programmable Logic Device), FPGA (Field Programmable Gate Array), and a part or all of each functional block may be realized by the hardware. .. For example, processor 1001 may be implemented by at least one of these hardware.

In addition to the hardware configuration shown in FIG. 6, the user terminal 4 includes a QR code reader (hardware) that functions as a reading unit 42, and an eSIM (hardware) 41. In addition to the hardware configuration shown in FIG. 6, the user terminal 4A includes a QR code reader (hardware) that functions as a reading unit 42. The communication terminal 6 includes an eSIM (hardware) 61 in addition to the hardware configuration shown in FIG.

<Modification 5>
As long as there is no contradiction, the order of the steps may be changed in the processing procedure, sequence, flowchart, and the like of each aspect / embodiment described in the present specification. For example, the methods described herein present elements of various steps in an exemplary order, and are not limited to the particular order presented.

<Modification 6>
Each aspect / embodiment described herein may be used alone, in combination, or switched with execution. Further, the notification of predetermined information (for example, the notification of "being X") is not limited to the explicit notification, and may be implicitly (for example, not notifying the predetermined information). ..
It will be apparent to those skilled in the art that the invention is not limited to the embodiments described herein. The present invention may be implemented as modifications and modifications without departing from the spirit and scope of the present invention, which is determined based on the description of the scope of claims. Therefore, the description herein is for purposes of illustration and has no limiting implications for the present invention.

[Meaning and interpretation of terms]
<Information, signals>
The information, signals and the like described herein may be represented using any of a variety of different techniques. For example, information, signals and instructions that may be referred to throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields, magnetic particles, light fields, photons or any combination thereof.
The terms described in the present specification and / or the terms necessary for understanding the present specification may be replaced with terms having the same or similar meanings. For example, the instructions and information may be messages.

<"System", "Network">
The terms "system" and "network" used herein are used interchangeably.

<Decision>
The term "determining" as used herein may include a wide variety of actions. A "decision" is, for example, judging, calculating, computing, processing, deriving, investigating, looking up (eg, table, database or separate). It can include searching in the data structure of the above, and considering that the ascertaining is "decided". Also, the "decision" is receiving (eg, receiving information), transmitting (eg, transmitting information), input, output, accessing (accessing) ( For example, it may include that (accessing the data in the memory) is regarded as "decided". In addition, "decision" may include resolving, selecting, choosing, establishing, comparing, and the like as being regarded as "decision". That is, "decision" may include considering some action as "decision".

<Based on>
As used herein, the phrase "based on" does not mean "based on" unless otherwise stated. In other words, the statement "based on" means both "based only" and "at least based on".

<1st, 2nd>
Any reference to elements using designations such as "first" and "second" as used herein does not generally limit the quantity or order of those elements. These designations can be used herein as a convenient way to distinguish between two or more elements. Therefore, references to the first and second elements do not mean that only two elements can be adopted or that the first element must somehow precede the second element.

<Open format>
As long as "including,""comprising," and variations thereof are used herein or in the claims, these terms are as comprehensive as the term "comprising." Is intended to be. Furthermore, the term "or" as used herein or in the claims is intended not to be an exclusive OR.

<Article>
Throughout this disclosure, if articles are added by translation, for example a, an, and the in English, these articles are plural unless the context clearly indicates that they are not. Is included.

3 ... Profile providing server, 31 ... Storage unit, 32 ... Communication unit, 33 ... Control unit, 4A ... User terminal, 42 ... Reading unit, 43 ... Reception unit, 44 ... Display unit, 45 ... Communication unit, 46A ... Control unit , 461 ... Transmission control unit, 462 ... Write control unit, 47 ... Communication unit.

Claims (10)

A storage unit that stores SIM information written to eSIM,
The communication unit that communicates with the terminal,
When the authentication information received from the terminal by the communication unit matches the predetermined information included in the SIM information stored in the storage unit, the operation of transmitting the SIM information to the terminal is executed to the communication unit. A control unit and a server that includes. The SIM information includes unique information.
The server according to claim 1, wherein the predetermined information is a part of the unique information. The server according to claim 2, wherein a part of the unique information is a pin unlock code. The server according to claim 2, wherein a part of the unique information is a telephone number. An acquisition unit that acquires identification information that identifies the eSIM from the first device including the eSIM, and an acquisition unit.
A reception unit that accepts authentication information related to the first device,
A communication unit that communicates with a server that stores SIM information written in the eSIM.
A transmission control unit that causes the communication unit to execute an operation of simultaneously or separately transmitting the identification information acquired by the acquisition unit and the authentication information received by the reception unit to the server.
When the communication unit receives the SIM information transmitted by the server for eSIM specified by the identification information when the predetermined information included in the SIM information and the authentication information match, the SIM information is transmitted. A terminal including a write control unit for writing to eSIM included in the first device. The SIM information includes unique information.
The terminal according to claim 5, wherein the predetermined information is a part of the unique information. The terminal according to claim 6, wherein a part of the unique information is a pin lock release code. The terminal according to claim 6, wherein a part of the unique information is a telephone number. It is a method of providing SIM information executed by the server.
The server receives the authentication information sent by the terminal and receives the authentication information.
A method of providing SIM information in which the server transmits the SIM information to the terminal when the authentication information matches a predetermined information included in the SIM information stored in the storage unit. It is a method of writing SIM information executed by the terminal.
The terminal acquires identification information for identifying the eSIM from the first device including the eSIM, and obtains identification information for identifying the eSIM.
The terminal receives the authentication information regarding the first device, and receives the authentication information.
The terminal transmits the identification information and the authentication information to a server that stores SIM information written in the eSIM at the same time or separately.
When the terminal receives the SIM information transmitted by the server for eSIM specified by the identification information when the predetermined information included in the SIM information and the authentication information match, the SIM information is transmitted to the first. 1 A method of writing SIM information to be written in the eSIM included in the device.

Images