JP7315898B2 - PROFILE ACQUISITION PROGRAM, ELECTRONIC INFORMATION STORAGE MEDIUM, AND PROFILE ACQUISITION METHOD - Google Patents

Description

The present invention relates to a technical field such as an electronic information storage medium capable of loading a plurality of profiles.

Conventionally, SIM cards (hereinafter sometimes referred to as UICCs) used in mobile phones were written with data of only one telecommunications carrier and used for the telecommunications service of that telecommunications carrier. Therefore, when the user changed the communication carrier, it was necessary to obtain a new UICC (Universal Integrated Circuit Card). In recent years, a new SIM card called eUICC (Embedded Universal Integrated Circuit Card) has been specified by industry groups and is gradually becoming popular. The biggest difference between eUICC and UICC is that it is possible to install multiple data called profiles, which correspond to conventional UICC functions. This profile can be added or deleted by the user through the wireless communication function of the mobile phone. By selecting one from a plurality of profiles in the mobile phone, the user can easily use the communication services of a plurality of carriers. Such a profile includes a service table that indicates the functions provided by the UICC, such as that disclosed in US Pat. In addition, in Non-Patent Documents 2 and 3, profiles are transferred from SM (Subscription Manager)-DP (Data Preparation)+ to SM (Subscription Manager)-DS (Discovery Service) using the LPA (Local Profile Assistant) function in the device. is downloaded and stored in the eUICC.

Patent No. 5149516 GSM Association Official Document SGP.21-RSP Architecture Version 2.1 27 February 2017 GSM Association Official Document SGP.22-RSP Technical Specification Version 2.2 01 September 2017

By the way, the eUICC can add a profile by wireless communication function, but such addition corresponds to a new contract for the conventional UICC. Therefore, personal identification is required when adding a profile to the eUICC, and this may hinder the convenience of the eUICC, which allows users to easily add and select profiles and use the communication services of multiple carriers. be.

Accordingly, the present invention has been made in view of the above points. An object of the present invention is to provide a program, an electronic information storage medium, and a profile acquisition method.

In order to solve the above-mentioned problems, the invention according to claim 1 provides an authentication server for verifying the identity of a user who uses a communication service based on the data for verifying the identity of the user, and verifying the certificate of the authentication server. a management server that generates a profile necessary for the user to use the communication service in response to successful verification of the certificate of the authentication server or success notification of the identity verification by the authentication server; In a communication system comprising a communication terminal used by the user to use the communication service, a computer capable of acquiring identification information of an electronic information storage medium from an electronic information storage medium mounted in the communication terminal is provided to the user. authentication means for performing local authentication using the authentication information accepted from, determination means for determining whether or not the certificate of the authentication server is stored in the communication terminal, and the certificate of the authentication server is If it is determined that the information is stored, the identification information of the electronic information storage medium, the certificate of the authentication server, and the result of the local authentication are transmitted to the management server, and the certificate of the authentication server is stored. if it is determined that the identification information of the electronic information storage medium, the identity verification data of the user, and the result of the local authentication are transmitted to the management server; It is characterized by functioning as control means for acquiring the profile generated by the management server in response to successful verification of the certificate of the authentication server or success notification of the personal identification by the authentication server and storing it in the electronic information storage medium. and

The invention according to claim 2 is the profile acquisition program according to claim 1, wherein the certificate of the authentication server is generated by the authentication server based on the identification information of the electronic information storage medium. do.

The invention according to claim 3 is the profile acquisition program according to claim 1 or 2, wherein the profile is a notification of successful verification of the certificate of the authentication server by the management server or success of the identity verification by the authentication server. and verification success of the result of the local authentication.

According to a fourth aspect of the present invention, an authentication server that verifies the identity of a user who uses a communication service based on data for identity verification of the user, and a management server that verifies the certificate of the authentication server, wherein the a management server that generates a profile necessary for the user to use the communication service in response to successful verification of the certificate of the authentication server or success notification of the identity verification by the authentication server; and the user to use the communication service. An electronic information storage medium mounted on the communication terminal in a communication system comprising a communication terminal used for performing authentication, authentication means for performing local authentication using authentication information received from the user, and the authentication determining means for determining whether or not a server certificate is stored in the communication terminal; and identification information of the electronic information storage medium when it is determined that the authentication server certificate is stored. , transmitting the certificate of the authentication server and the result of the local authentication to the management server, and if it is determined that the certificate of the authentication server is not stored, the identification information of the electronic information storage medium; transmitting means for transmitting the data for identity verification of the user and the result of the local authentication to the management server; and control means for acquiring the profile generated by the management server according to the request and storing the profile in a non-volatile memory.

The invention according to claim 5 is an authentication server for verifying the identity of a user who uses a communication service based on the data for verifying the identity of the user, and a management server for verifying the certificate of the authentication server, wherein the a management server that generates a profile necessary for the user to use the communication service in response to successful verification of the certificate of the authentication server or success notification of the identity verification by the authentication server; and the user to use the communication service. A profile acquisition method executed by a computer capable of acquiring identification information of an electronic information storage medium from an electronic information storage medium mounted on the communication terminal in a communication system comprising a communication terminal used for a step of performing local authentication using authentication information accepted from a user; a step of determining whether or not a certificate of the authentication server is stored in the communication terminal; and a step of storing the certificate of the authentication server. If it is determined that the authentication server has been authenticated, the identification information of the electronic information storage medium, the certificate of the authentication server, and the result of the local authentication are transmitted to the management server, and the certificate of the authentication server is stored. a step of transmitting the identification information of the electronic information storage medium, the identity verification data of the user, and the result of the local authentication to the management server when it is determined that the authentication server is not authenticated by the management server; obtaining the profile generated by the management server in response to successful verification of the certificate of or notification of success of the personal identification by the authentication server and storing it in the electronic information storage medium. .

According to the present invention, it is possible to maintain the authentication level while reducing the burden of identity verification of the user received from the telecommunications carrier when adding a profile.

1 is a diagram showing a schematic configuration example of a communication system S; FIG. 4 is a diagram showing an example of a schematic configuration of a communication terminal 4; FIG. FIG. 10 is a diagram showing an overview of operations when a profile is acquired first; FIG. 10 is a sequence diagram showing details of operations when a profile is acquired first; FIG. 10 is a sequence diagram showing details of operations when a profile is acquired first; FIG. 10 is a diagram showing an overview of operations when a profile is acquired for the second time or later; FIG. 10 is a sequence diagram showing details of operations when a profile is acquired for the second time or later; FIG. 10 is a sequence diagram showing details of operations when a profile is acquired for the second time or later;

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[1. Outline configuration of communication system S]
First, a schematic configuration of a communication system S according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a diagram showing a schematic configuration example of a communication system S. As shown in FIG. As shown in FIG. 1, the communication system S includes a management server 1, an authentication server 2, a relay server 3, a communication terminal 4, and the like. Here, in the communication system S, the management server 1 is provided, for example, for each telecommunications carrier that provides communication services. The management server 1, the authentication server 2, and the relay server 3 can communicate with each other via the network NW. The network NW is configured by, for example, the Internet or wireless communication networks of carriers (eg, 3G, 4G, or 5G networks). The communication terminal 4 can access and communicate with the management server 1 and the relay server 3 via the network NW.

The management server 1 is equipped with SM-DP+, generates a profile necessary for the user of the communication terminal 4 to use the communication service, and includes an EID (eUICCID: an individual identifier of eUICC, which is the electronic information storage medium of the present invention). (an example of identification information) for management. Also, the management server 1 verifies the certificate of the authentication server 2 . The authentication server 2 is a server that verifies the identity of the user using the communication service based on the user's identity verification data (identity verification document data). The relay server 3 has SM-DS, has a list of connection destinations to SM-DP+, acquires a profile generated by the management server 1 in response to a request from the LPA function of the communication terminal 4, (that is, a server that relays the LPA function and SM-DP+). Also, the relay server 3 acquires the certificate of the authentication server 2 in response to a request from the LPA function of the communication terminal 4 and provides it to the LPA function of the communication terminal 4 .

FIG. 2 is a diagram showing a schematic configuration example of the communication terminal 4. As shown in FIG. The communication terminal 4 is, for example, a mobile terminal such as a mobile phone or a smart phone, and has an IC module 5 mounted thereon. Furthermore, as shown in FIG. 2, the communication terminal 4 includes an I/F section 41, a communication section 42, a storage section 43, a display/operation section 44, an authentication information reception section 45, a control section 46, and the like.

The IC module 5 is an example of the electronic information storage medium of the present invention, and is mounted as an eUICC on an embedded board so that it cannot be easily removed or replaced from the communication terminal 4 (that is, formed integrally with the communication terminal 4). be done. The IC module 5 is composed of tamper-resistant hardware, and includes a CPU (Central Processing Unit) 51, a RAM (Random Access Memory) 52, a ROM (Read Only Memory) 53, a NVM (Nonvolatile Memory) 54, and an I/O memory. An F portion 55 and the like are provided. The I/F section 55 serves as an interface with the control section 46 . This interface may be an SPI, ^I2C , or ISO7816 interface. The EID of the IC module 5 is stored (saved) in the ROM 53 or NVM 54 . The NVM 54 is capable of storing respective profiles of a plurality of carriers. The profile describes, for example, an IMSI (International Mobile Subscriber Identity) unique to a user who uses a communication service, a communication method related to the communication service, an authentication method related to the communication service, key data used for authentication, and the like. Note that profiles can be added or deleted from the NVM 54 of the IC module 5 .

The I/F section 41 serves as an interface with the IC module 5 . The communication unit 42 is a communication device for connecting to the network NW. 3) communicate with. The storage unit 43 is composed of a non-volatile memory or the like, and stores an OS (operating system), application programs (including the profile acquisition program of the present invention), and the like. In addition, the storage unit 43 stores the identity verification data of the user. An example of personal identification data is data obtained by copying a driver's license in which the user's address is described. Further, the certificate of the authentication server 2 is stored later in the storage unit 43 . The display/operation unit 44 includes, for example, a touch panel having an input function for inputting instructions from the user and a display function for displaying various information.

The authentication information accepting unit 45 accepts authentication information (local authentication data) used for local authentication performed within the communication terminal 4 from the user. For example, the authentication information accepting unit 45 accepts a password input by the user on the touch panel as authentication information. Alternatively, the authentication information accepting unit 45 may be configured by a fingerprint sensor and accept a fingerprint detected from the pad of the user's finger by the fingerprint sensor as the authentication information. Note that the authentication information reception unit 45 may include a sensor that detects biometric information other than fingerprints (palmprint, blood vessel vein pattern, etc.).

The control unit 46 is an example of a computer, and includes, for example, a CPU, RAM, ROM, etc., and has a wireless communication function, an LPA function, a contract application function, and the like. These functions are implemented by executing application programs, and include functions as authentication means, determination means, transmission means, and control means in the present invention. The LPA function is an LPD (Local Profile Download) function that acquires (downloads) a profile from SM-DS and stores it in the IC module 5 (including a function to query SM-DS when searching for a profile on the network NW). ), a LUI (Local User Interface) function that presents a user interface for performing profile operations (list display, selection, deletion, etc.) in the IC module 5, and authentication accepted by the authentication information acceptance unit 45 and an authentication function that performs local authentication using the information for authentication. Furthermore, the LPA function according to this embodiment includes a function of acquiring the certificate of the authentication server 2 and storing it in the storage unit 43 . A secure channel protocol should preferably be used between the LPA function, SM-DS and SM-DP+.

The contract application function includes a judgment function for judging whether or not the certificate of the authentication server 2 is stored in the communication terminal 4 when applying for a communication service contract (usage contract) in accordance with an instruction from the user, and a judgment function for judging whether or not It also includes a transmission function for transmitting to the management server 1 "information required for a contract" according to the result of determination by the function. Here, the “information necessary for the contract” according to the determination result means that the information included in the information necessary for the contract differs according to the determination result. That is, when it is determined that the certificate of the authentication server 2 is stored, the information necessary for the contract includes the EID of the IC module 5, the certificate of the authentication server 2, and the result of local authentication by the authentication function (authentication success or authentication failure). The information necessary for the contract when it is determined that the certificate of the authentication server 2 is not stored includes the EID of the IC module 5, the user's personal identification data, and the result of local authentication by the authentication function.

[2. Operation of communication system S]
Next, the operation of the communication system S according to this embodiment will be described separately for the operation when the profile is acquired for the first time and the operation when the profile is acquired for the second and subsequent times.

(2-1. Operation when profile is acquired first)
First, with reference to FIGS. 3 to 5, the operation when the profile is acquired for the first time will be described. In the operation when the profile is first acquired, it is assumed that the certificate of the authentication server 2 is not stored in the communication terminal 4. FIG. FIG. 3 is a diagram showing an overview of the operation when the profile is first acquired, and FIGS. 4 and 5 are sequence diagrams showing details of the operation when the profile is first acquired.

In FIG. 4, when the LPA function determines that the authentication information (local authentication data) is not registered at the time of activation (step S1), the communication terminal 4 requests the user to register the authentication information (registration request). ) (step S2). Such a registration request is made by being displayed on the display/operation unit 44, for example. The authentication information input by the user in response (step S3) is accepted by the authentication information acceptance unit 45 and registered (stored in the storage unit 43) by the LPA function (step S4).

After that, the communication terminal 4 accesses the management server 1 of the communication carrier in response to a contract application instruction from the user, and submits a contract application ("1. contract application" shown in FIG. 3) for using the communication service. It is transmitted by the contract application function (step S5). Here, access from the communication terminal 4 to the management server 1 may be performed via a wireless LAN (for example, WiFi (registered trademark)) and the Internet, or may be performed via a pre-profile ( PreProfile: a profile used only for contract application) may be performed via the carrier's wireless communication network. Note that the contract application is composed of, for example, message data in a predetermined data format.

Next, when receiving the contract application from the communication terminal 4, the management server 1 transmits a transmission request for information necessary for the contract (“2. Transmission request” shown in FIG. 3) to the communication terminal 4 (step S6). The transmission request is composed of, for example, message data in a predetermined data format. Next, when the communication terminal 4 receives the transmission request from the management server 1, the communication terminal 4 requests the user to input authentication information for local authentication ("3. INPUT REQUEST" shown in FIG. 3) (step S7). ). When the authentication information input by the user (“4. authentication information” in FIG. 3) is accepted by the authentication information accepting unit 45 (step S8), the communication terminal 4 Local authentication ("5. Local authentication" shown in FIG. 3) is performed by the LPA function using the authentication information and the authentication information registered in step S4 (step S9). In such local authentication, if both pieces of information for authentication match (or if the degree of matching is equal to or greater than the threshold), authentication is determined to be successful. Note that local authentication may be performed before sending the contract application.

Next, the communication terminal 4 determines whether or not the certificate of the authentication server 2 is stored (saved) in the communication terminal 4 using the contract application function (“6. Certificate storage determination” shown in FIG. 3). . Since the certificate of authentication server 2 is not stored in the operation shown in FIG. 3, communication terminal 4 determines that the certificate of authentication server 2 is not stored (step S10), Confirmation data is acquired (step S11).

Next, the communication terminal 4 receives the contract application information (including the personal information input by the user), the EID of the IC module 5, the personal identification data acquired in step S11, and the result of the local authentication in step S9 ( For example, successful authentication) and a data acquisition key are sent to the management server 1 by the contract application function as information necessary for the contract (“7. Therefore, it is transmitted using, for example, HTTPS (Hypertext Transfer Protocol Secure) (step S12). As a result, the user applies for a contract to use the communication service with the communication carrier via the communication terminal 4 .

The EID of the IC module 5 may be stored in advance in the storage unit 43, or may be obtained from the IC module 5 at the time of transmission of information required for the contract. The data acquisition key transmitted in step S12 is a key necessary for the user to acquire the profile and the certificate of the authentication server 2, and is generated from, for example, identity verification data unique to the user or an EID (for example, , generated by being hashed). The management server 1 may check whether or not the result of the local authentication transmitted in step S12 has been tampered with.

Next, when the management server 1 receives the information necessary for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of the local authentication" shown in FIG. 3) ( step S13). When the management server 1 determines that the result of the local authentication is a successful authentication through the verification (that is, when the verification of the result of the local authentication is successful), the EID and identity verification data included in the information required for the contract , and a data acquisition key (“9. Identity verification request” shown in FIG. 3) is sent to the authentication server 2 (step S14). The personal identification request is composed of message data in a predetermined data format, for example. Here, in order to transmit data safely, the EID should be encrypted with the public key of the authentication server 2 and transmitted to the authentication server 2 . It should be noted that if the result of the local authentication is determined to be authentication failure, the EID, the personal identification data, and the data acquisition key are not sent to the authentication server 2 .

Next, upon receiving the identity verification request from the management server 1, the authentication server 2 executes mailing arrangement processing for arranging for mailing of the necessary documents for identity verification to the address indicated by the identity verification data included in the identity verification request. (step S15). By this process, the necessary documents for identity verification are mailed to the address of the user. Then, when the user receives the mailed necessary documents for personal identification (postal item), for example, a receipt notification is transmitted from the delivery person's terminal to the authentication server 2 (step S16). Based on this receipt notification, the authentication server 2 performs identity verification of the user (“10. identity verification” shown in FIG. 3).

Next, after verifying the identity of the user, the authentication server 2 generates a certificate for the authentication server 2 based on the EID received from the management server 1 (“11. Generate certificate” shown in FIG. 3) ( step S17). For example, the certificate of the authentication server 2 is created by signing the EID with the private key of the authentication server 2 . Next, the authentication server 2 associates and registers the certificate generated in step S17 and the data acquisition key received from the management server 1 (step S18). Next, the authentication server 2 transmits a success notice of identity verification (“12. Success notice of identity verification” shown in FIG. 3) to the management server 1 (step S19).

Next, when the management server 1 receives the success notification of identity verification from the authentication server 2, in response to the success notification of identity verification, the management server 1 generates a profile necessary for the user who applied for the contract to use the communication service (Fig. 3, "13. Generate profile") (step S20). In other words, the profile is generated according to the success of the verification in step S13 and the notification of success of identity verification by the authentication server 2. FIG. Next, the management server 1 associates the profile generated in step S20 with the SID and data acquisition key received from the communication terminal 4 and registers them in SM-DP+ (step S21). As a result, a profile registration notification is sent to the communication terminal 4 .

Next, in FIG. 5, the communication terminal 4 accesses the relay server 3, and since it does not hold the certificate of the authentication server 2, it requests the transmission of the certificate and profile of the authentication server 2 ("14" shown in FIG. 3). .Transmission request”) is transmitted to the relay server 3 (SM-DS) by the LPA function (step S22). The transmission request includes the data acquisition key.

Next, upon receiving the transmission request from the communication terminal 4, the relay server 3 transmits a transmission request for the certificate of the authentication server 2 ("15. transmission request" shown in FIG. 3) to the authentication server 2 by SM-DS. (step S23). The transmission request includes the data acquisition key. Next, when the authentication server 2 receives the transmission request from the relay server 3, the certificate registered in association with the data acquisition key included in the transmission request (“16. Certificate” shown in FIG. 3). ) to the relay server 3 (step S24). Here, in order to transmit data safely, the certificate of the authentication server 2 should be encrypted with the public key of the relay server 3 and transmitted to the relay server 3 .

Next, the relay server 3 transmits a profile transmission request (“17. transmission request” shown in FIG. 3) to the management server 1 by SM-DS (step S25). Next, when the management server 1 receives the transmission request from the relay server 3, the management server 1 updates the registered profile ("18. profile" shown in FIG. 3) associated with the data acquisition key included in the transmission request. , SM-DP+ to the relay server 3 (step S26). Next, when the relay server 3 receives the certificate from the authentication server 2 and the profile from the management server 1, the relay server 3 sends the certificate and profile of the authentication server 2 (“19. certificate and profile” shown in FIG. 3) to the communication terminal. 4 (LPA function) (step S27).

Next, when the communication terminal 4 receives (obtains) the certificate and profile of the authentication server 2 from the relay server 3, it stores the certificate of the authentication server 2 in the storage unit 43 ("20. Save") (step S28), and the profile ("21. profile" shown in FIG. 3) is transmitted to the IC module 5 via the I/F section 41 (step S29) and stored (step S30). That is, the profile is downloaded to the IC module 5. FIG. Then, the IC module 5 enables the communication service by selecting the profile.

(2-2. Operation when acquiring a profile after the second time)
Next, with reference to FIGS. 6 to 8, the operation for acquiring the profile for the second and subsequent times will be described. It should be noted that, in the operation for acquiring the profile for the second time and thereafter, it is assumed that a contract application is made with a carrier different from the carrier with which the contract application was made in the operation for acquiring the profile for the first time. Also, in the operation for acquiring the profile for the second time and thereafter, the authentication information and the certificate of the authentication server 2 stored in the operation for acquiring the profile for the first time are used. FIG. 6 is a diagram showing an overview of the operation when the profile is acquired for the second time or later, and FIGS. 7 and 8 are sequence diagrams showing the details of the operation when the profile is acquired for the second time or later. be.

In FIG. 7, the communication terminal 4 is connected to the management server 1 of the telecommunications carrier (different from the telecommunications carrier with which the contract was applied in the operation when the profile was first acquired) in response to the contract application instruction from the user. It accesses and transmits a contract application (“1. contract application” shown in FIG. 6) for using the communication service (step S41). Next, when receiving the contract application from the communication terminal 4, the management server 1 transmits a transmission request for information necessary for the contract (“2. Transmission request” shown in FIG. 6) to the communication terminal 4 (step S42).

Next, when receiving the transmission request from the management server 1, the communication terminal 4 requests the user to input authentication information for local authentication ("3. INPUT REQUEST" shown in FIG. 6) (step S43). ). When the authentication information input by the user ("4. authentication information" shown in FIG. 6) is accepted by the authentication information accepting unit 45 (step S44), the communication terminal 4 Local authentication (“5. Local authentication” shown in FIG. 6) is performed by the LPA function using the authentication information and the already registered authentication information (step S45).

Next, if the result of the local authentication in step S45 is authentication success, the communication terminal 4 determines whether or not the certificate of the authentication server 2 is stored (saved) in the communication terminal 4 using the contract application function (( 6. Certificate Storage Determination” shown in Fig. 6).Since the certificate of the authentication server 2 is stored in the operation shown in Fig. 6, the communication terminal 4 does not store the certificate of the authentication server 2. (step S46), and acquires the certificate of the authentication server 2 from the storage unit 43 (step S47).If the result of the local authentication is authentication failure, the certificate of the authentication server 2 is not acquired. , the output of the certificate is prohibited.

Next, the communication terminal 4 transfers the contract application information, the EID of the IC module 5, the certificate acquired in step S47, the local authentication result (successful authentication) in step S45, and the data acquisition key to the contract. ("7. Information required for contract" shown in FIG. 6) is transmitted to the management server 1 by the contract application function (step S48).

Next, when the management server 1 receives the information required for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of the local authentication" shown in FIG. 6) ( step S49). Next, the management server 1 verifies the certificate of the authentication server 2 included in the information (“9. Verification of certificate” shown in FIG. 6) (step S50). For example, the management server 1 verifies the signature in the certificate of the authentication server 2 with the public key of the authentication server 2 . As a result, it is confirmed that the EID included in the information required for the contract has been verified by another telecommunications carrier (the telecommunications carrier with whom the contract was applied for in the operation when the profile was first acquired). In order to guarantee the public key of the authentication server 2, it is preferable that the certificate authority signs the public key of the authentication server 2 and the signature is verified before the public key is used.

Next, when the management server 1 determines that the verification result in step S49 is successful and also determines that the verification result in step S50 is successful, the user who applied for the contract uses the communication service. ("10. Profile Generation" shown in FIG. 6) is generated (step S51). That is, a profile is generated according to the verification success in step S49 and the verification success in step S50. Next, the management server 1 associates the profile generated in step S51 with the data acquisition key received from the communication terminal 4 and registers them in SM-DP+ (step S52). As a result, a profile registration notification is sent to the communication terminal 4 .

Next, in FIG. 8, the communication terminal 4 accesses the relay server 3 and, since it holds the certificate of the authentication server 2, issues a transmission request for only the profile (“11. transmission request” shown in FIG. 6). It is transmitted to the relay server 3 (SM-DS) by the LPA function (step S53). The transmission request includes the data acquisition key.

Next, when relay server 3 receives the transmission request from communication terminal 4, relay server 3 transmits a profile transmission request (“12. transmission request” shown in FIG. 6) to management server 1 by SM-DS (step S54). . The transmission request includes the data acquisition key. Next, when the management server 1 receives the transmission request from the relay server 3, the management server 1 updates the registered profile (“13. , SM-DP+ to the relay server 3 (step S55). Next, upon receiving the profile from the management server 1, the relay server 3 transmits the profile (“14. Profile” shown in FIG. 6) to the communication terminal 4 (LPA function) (step S56).

Next, when the communication terminal 4 receives the profile from the relay server 3, it transmits the profile (“15. Profile” shown in FIG. 6) to the IC module 5 via the I/F section 41 (step S57). It is stored (step S58). Then, the IC module 5 enables the communication service by selecting the profile.

As described above, according to the above embodiment, the communication terminal 4 performs local authentication using the authentication information received from the user, and checks whether the certificate of the authentication server 2 is stored in the communication terminal 4. If it is determined that the certificate of the authentication server 2 is stored, at least the EID of the IC module 5, the certificate of the authentication server 2, and the result of the local authentication are sent to the management server 1. On the other hand, if it is determined that the certificate of the authentication server 2 is not stored, at least the EID of the IC module 5, the user's personal identification data, and the result of local authentication are sent to the management server 1. . Then, the communication terminal 4 acquires the profile generated by the management server 1 in response to the successful verification of the certificate of the authentication server 2 by the management server 1 or the success notification of the personal identification by the authentication server 2, and stores it in the IC module 5. Since it is configured to allow the profile to be added, it is possible to maintain the authentication level while reducing the burden of identity verification of the user received from the carrier when adding the profile. That is, according to the above embodiment, the certificate generated based on the identity verification performed by the authentication server 2 to provide the user with the profile of the telecommunications carrier at the time of the initial contract between the user and the telecommunications carrier. By using this document at the time of the second and subsequent use contracts between the user and other telecommunications carriers, it is possible to provide the user with the profile of the other telecommunications carrier, so the user's identity confirmation received from the telecommunications carrier authentication level can be maintained while reducing the load on

In the above-described embodiment, the LPA function and the contract application function are configured to be possessed by the control unit 46, but may be configured to be possessed by the IC module 5 instead of being possessed by the control unit 46. FIG. Further, as an example of the electronic information storage medium of the present invention, the IC module 2 built into the communication terminal 4 has been described as an example, but the present invention may be applied to an IC card detachable from the communication terminal 4. good.

1 Management Server 2 Authentication Server 3 Relay Server 4 Communication Terminal 5 IC Module 41 I/F Section 42 Communication Section 43 Storage Section 44 Display/Operation Section 45 Authentication Information Acceptance Section 46 Control Section

Claims (5)

An authentication server that verifies the identity of a user who uses a communication service based on data for verifying the identity of the user, and a management server that verifies the certificate of the authentication server, and the verification of the certificate of the authentication server succeeds or a management server that generates a profile necessary for the user to use the communication service in response to the success notification of the personal identification by the authentication server; and a communication terminal that the user uses to use the communication service. A computer capable of acquiring identification information of an electronic information storage medium from an electronic information storage medium mounted on the communication terminal in a communication system comprising:
authentication means for performing local authentication using the authentication information received from the user;
determination means for determining whether or not the certificate of the authentication server is stored in the communication terminal;
if it is determined that the certificate of the authentication server is stored, the identification information of the electronic information storage medium, the certificate of the authentication server, and the result of the local authentication are transmitted to the management server; Transmission means for transmitting the identification information of the electronic information storage medium, the identity verification data of the user, and the result of the local authentication to the management server when it is determined that the certificate of the authentication server is not stored. and,
Control means for acquiring the profile generated by the management server in response to successful verification of the certificate of the authentication server by the management server or success notification of the identity verification by the authentication server and storing it in the electronic information storage medium A profile acquisition program characterized by functioning. 2. The profile acquisition program according to claim 1, wherein the certificate of the authentication server is generated by the authentication server based on the identification information of the electronic information storage medium. The profile is characterized in that it is generated according to successful verification of the certificate of the authentication server by the management server or success notification of the identity verification by the authentication server, and successful verification of the result of the local authentication. 3. The profile acquisition program according to claim 1 or 2. An authentication server that verifies the identity of a user who uses a communication service based on data for verifying the identity of the user, and a management server that verifies the certificate of the authentication server, and the verification of the certificate of the authentication server succeeds or a management server that generates a profile necessary for the user to use the communication service in response to the success notification of the personal identification by the authentication server; and a communication terminal that the user uses to use the communication service. An electronic information storage medium mounted on the communication terminal in a communication system comprising
authentication means for performing local authentication using the authentication information received from the user;
determination means for determining whether or not the certificate of the authentication server is stored in the communication terminal;
if it is determined that the certificate of the authentication server is stored, the identification information of the electronic information storage medium, the certificate of the authentication server, and the result of the local authentication are transmitted to the management server; Transmission means for transmitting the identification information of the electronic information storage medium, the identity verification data of the user, and the result of the local authentication to the management server when it is determined that the certificate of the authentication server is not stored. and,
Control means for acquiring the profile generated by the management server in response to successful verification of the certificate of the authentication server by the management server or success notification of the identity verification by the authentication server and storing it in a non-volatile memory;
An electronic information storage medium comprising: An authentication server that verifies the identity of a user who uses a communication service based on data for verifying the identity of the user, and a management server that verifies the certificate of the authentication server, and the verification of the certificate of the authentication server succeeds or a management server that generates a profile necessary for the user to use the communication service in response to the success notification of the personal identification by the authentication server; and a communication terminal that the user uses to use the communication service. A profile acquisition method executed by a computer capable of acquiring identification information of an electronic information storage medium from an electronic information storage medium mounted on the communication terminal in a communication system comprising:
performing local authentication using authentication information received from the user;
determining whether a certificate of the authentication server is stored in the communication terminal;
if it is determined that the certificate of the authentication server is stored, the identification information of the electronic information storage medium, the certificate of the authentication server, and the result of the local authentication are transmitted to the management server; a step of transmitting the identification information of the electronic information storage medium, the identity verification data of the user, and the result of the local authentication to the management server when it is determined that the certificate of the authentication server is not stored; ,
Acquiring the profile generated by the management server in response to successful verification of the certificate of the authentication server by the management server or success notification of the identity verification by the authentication server, and storing the profile in the electronic information storage medium;
A profile acquisition method comprising:

Images