KR20220115256A - Method of initializing subscriber identity module and user terminal initializing subscriber identity module - Google Patents

Abstract

A user terminal includes a communication chipset. The communication chipset includes a processor, a storage and a subscriber identity module, and the storage stores instructions. When the instructions are executed by the processor of the communication chipset, the processor of the communication chipset transmits an access request message to a network operator server, receives an access rejection message from the network operator server, and transmits, in response to receiving the access rejection message, a subscriber identity module initialization instruction to the subscriber identity module, which causes the processor of the subscriber identity module to initialize the subscriber identity module.

Description

A method of initializing a subscriber authentication module and a user terminal initializing the subscriber authentication module

The present disclosure relates to a method for initializing a subscriber authentication module and a user terminal for initializing a subscriber authentication module, and more particularly, to a method for initializing a Universal Integrated Circuit Card (UICC) integrated with a communication chipset and a user terminal.

A UICC (Universal Integrated Circuit Card) is a smart card that is inserted into a user terminal and can be used as a module for user authentication and a mobile communication network subscribed by the user. UICC is also called SIM (Subscriber Identity Module) card in GSM (Global System for Mobile communications) method, USIM (Universal Subscriber Identity Module) card in case of WCDMA (Wideband Code Division Multiple Access) and LTE (Long Term Evolution) method. do. In the case of detaching the UICC from the user terminal, the user can easily replace the user terminal by installing the UICC on the new user terminal. By replacing it with the UICC of the operator you want to change, you could easily change the mobile operator. However, in the case of detaching the UICC from the user terminal, there is a problem that the UICC occupies the internal mounting area of the user terminal. technology to reduce

As a way to initialize the existing detachable UICC, 1) change the profile through the GSMA SGP standard (RSP interworking), 2) connect a UICC reader to access the service provider's system, and initialize it, 3) Initialize the UICC applet development and how to use it. However, in the case of an integrated UICC (iUICC), the GSMA standard is not made, a UICC reader cannot be connected, and the initialization applet has a weak security problem.

Korean Patent Registration No. 10-2128278 Korean Patent Registration No. 10-2114432 Korean Patent Registration No. 10-2007706 Korean Patent Publication No. 10-2013-0009659

The present disclosure provides a method of initializing the iUICC using an attach reject message for an attach request used in the existing 3GPP standard in the initialization of the iUICC.

According to one aspect of the present disclosure, in a user terminal including a communication chipset, the communication chipset includes a processor, a storage and a subscriber authentication module, and the storage stores an instruction, wherein the instruction is transmitted to the processor of the communication chipset. When executed by the processor of the communication chipset, in response to sending a connection request message to the network operator server, receiving the connection rejection message from the network operator server, and receiving the access rejection message, to the processor of the subscriber authentication module Disclosed is a user terminal, which is an instruction for sending a subscriber authentication module initialization instruction to initialize the subscriber authentication module to the subscriber authentication module.

In an embodiment, the initialization instruction of the subscriber authentication module may be an instruction to return the IMSI stored in the storage of the subscriber authentication module to a pseudo IMSI (pseudo IMSI).

In an embodiment, the access rejection message may include a cause value indicating that the user terminal cannot access the network of the network operator server.

In an embodiment, the processor of the subscriber authentication module may return the IMSI stored in the storage of the subscriber authentication module to the virtual IMSI in response to receiving the initialization instruction of the subscriber authentication module.

According to another aspect of the present disclosure, a method of initializing a subscriber authentication module embedded in a communication chipset includes: transmitting, by the communication chipset, an access request message to a network operator server; receiving, by the communication chipset, a connection rejection message from the network operator server; in response to receiving the access rejection message, transmitting, by the communication chipset, a subscriber authentication module initialization instruction to the subscriber authentication module, causing the processor of the subscriber authentication module to initialize the subscriber authentication module; and in response to receiving the subscriber authentication module initialization instruction, the processor of the subscriber authentication module initializes the subscriber authentication module.

In an embodiment, before the communication chipset transmits the access request message to the network operator server, the method may further include the step of transmitting, by the communication chipset, to the network operator server an event of canceling the service of the network operator server. can

In an embodiment, initializing the subscriber authentication module may include returning the IMSI stored in the storage of the subscriber authentication module to a pseudo IMSI (pseudo IMSI).

In an embodiment, the access rejection message may include a cause value indicating that the user terminal cannot access the network of the network operator server.

In an embodiment, the access rejection message may include an EMM cause value defined in 3GPP TS 24.301.

In an embodiment, the cause value may include a value indicating an initialization request of iUICC included in the EMM cause defined in 3GPP TS 24.301.

According to another aspect of the present disclosure, there is provided a method of initializing a subscriber authentication module embedded in a communication chipset, the method comprising: receiving, by a network operator server, a service cancellation event of a user terminal including the communication chipset from the communication chipset; registering, by the network operator server, that the subscriber authentication module has been initialized in an internal database in response to receiving the cancellation event; receiving, by the network operator server, a message from the communication chipset requesting that the user terminal access the network of the network operator server; The network operator server compares information included in the access request message with information on a subscriber authentication module registered in the server of the network operator server to confirm that the communication chipset cannot access the network of the network operator server step; and transmitting, by the network operator server, a network connection rejection message including a cause value indicating that the subscriber authentication module needs to be initialized to the communication chipset.

In an embodiment, the network access rejection message may include a value indicating an initialization request of iUICC included in the EMM cause defined in 3GPP TS 24.301.

It is possible to initialize the iUICC coupled to the communication chip, so that the terminal equipped with the iUICC can be recycled, and the security problem in the initialization process for recycling can also be solved.

1 is a conceptual diagram of a user terminal according to an embodiment.
2 is a flowchart illustrating initialization of iUICC according to an embodiment.
3 is an example of a connection rejection message according to an embodiment.

Hereinafter, the present disclosure will be described in detail with reference to the drawings. In describing the present disclosure, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present disclosure, a detailed description thereof will be omitted. In addition, the following examples may be modified in various other forms, and the scope of the technical spirit of the present disclosure is not limited to the following examples. Rather, these embodiments are provided to more fully and complete the present disclosure, and to fully convey the technical spirit of the present disclosure to those skilled in the art.

It is to be understood that the techniques described in the present disclosure are not intended to be limited to specific embodiments, and include various modifications, equivalents, and/or alternatives of the embodiments of the present disclosure.

In connection with the description of the drawings, like reference numerals may be used for like components.

In the present disclosure, expressions such as “have,” “may have,” “include,” or “may include” indicate the presence of a corresponding characteristic (eg, a numerical value, function, operation, or component such as a part). and does not exclude the presence of additional features. In this disclosure, expressions such as “A or B,” “at least one of A and/and B,” or “one or more of A or/and B” may include all possible combinations of the items listed together. . For example, "A or B," "at least one of A and B," or "at least one of A or B" means (1) includes at least one A, (2) includes at least one B; Or (3) it may refer to all cases including both at least one A and at least one B.

As used in the present disclosure, expressions such as “first,” “second,” “first,” or “second,” may modify various elements, regardless of order and/or importance, and refer to one element. It is used only to distinguish it from other components, and does not limit the components.

A component (eg, a first component) is "coupled with/to (operatively or communicatively)" to another component (eg, a second component) When referring to "connected to", it should be understood that the certain element may be directly connected to the other element or may be connected through another element (eg, a third element). On the other hand, when it is said that a component (eg, a first component) is "directly connected" or "directly connected" to another component (eg, a second component), the component and the It may be understood that other components (eg, a third component) do not exist between other components.

The expression "configured to (or configured to)" as used in this disclosure depends on the context, for example, "suitable for," "having the capacity to" ," "designed to," "adapted to," "made to," or "capable of." The term “configured (or configured to)” may not necessarily mean only “specifically designed to” hardware. Instead, in some contexts, the expression “a device configured to” may mean that the device is “capable of” with other devices or components. For example, the phrases "a processor configured (or configured to perform) A, B, and C," a module configured (or configured to perform A, B, and C)," refers to a dedicated processor (e.g., : embedded processor) or a generic-purpose processor (eg, CPU or application processor) capable of performing corresponding operations by executing one or more software programs stored in a memory device.

The “subscriber authentication module” used in the present disclosure is an iUICC (integrated UICC) or iSIM (integrated SIM), which is distinguished from the existing removable UICC, and is formed integrally with a processor inserted into the user terminal. For example, the subscriber authentication module is integrated on a system-on-chip of the user terminal.

Embodiments of the present disclosure may be supported by standard documents disclosed in at least one of the IEEE 802.xx system, the 3GPP system, the 3GPP LTE/NR system, and the 3GPP2 system, which are radio access systems. That is, obvious steps or parts not described in the embodiments of the present invention may be described with reference to the above documents.

All terms disclosed can be explained by the above standard document. For example, this specification describes the 3GPP LTE standard documents of 3GPP TS 36.211, 3GPP TS 36.213, 3GPP TS 36.321, 3GPP TS 36.322, 3GPP TS 36.323, 3GPP TS 36.331, 3GPP TS 23.203, 3GPP TS 23.401, 3GPP TS 24.301, and or 3GPP NR standard documents (eg, 3GPP TS 38.331, 3GPP TS 23.501, 3GPP TS 23.502).

The prior documents described above in the present disclosure are incorporated herein as a specification in their entirety.

The user terminal includes a chipset having at least one chip that operates the functions of the user terminal. For example, in general, a user terminal has three user terminal chips, that is, a transceiver IC that performs physical wireless communication, and a baseband processor BB (or equivalent modem) that performs a function for data transmission through wireless communication at the protocol level. , and an application processor AP on which an operating system and application software (eg, an application) are executed. As a further user terminal chip, a transceiver IC for other radio channels may be provided, in particular for short-range radio channels such as near field communication (NFC) or Bluetooth. In chipsets, especially application processors (APs), firmware, ie special software that realizes the basic functions of the chipset, is implemented. The firmware comprises, for example, an operating system of an application processor and possibly an operating system of a further processor with an operating system, hardware-related software, for example software of a transceiver IC and baseband processor BB, and in some cases a programming interface (API). may include

In a mobile radio network of a network operator, to use a mobile radio capable user terminal such as a smart phone, a mobile phone, the user terminal includes a subscriber identification module with a subscriber profile or summary profile. The profile manages the configuration of the user terminal and the connection of the user terminal in the mobile network. A profile is formed by a structured data set that enables the establishment, operation and clearing of a connection of a user terminal in a mobile network and includes, for example, a cryptographic authentication key Ki and an international mobile subscriber identification IMSI.

The iUICC concept proposes to provide an external non-volatile memory to the chipset, which is generally external to the secure processor but in which the memory contents within the chipset are stored, the memory contents of which are encrypted, secure, for example for use by the secure processor. stored in a way The secure processor is functionally configured to be the same as or similar to the SIM card operating system, or has an operating system corresponding thereto. For example, the secure processor operating system is basically configured according to telecommunications standards such as ETSI TS 102 221 or 3GPP TS 31.102, whereby a file system is provided to the secure processor and authentication measures are provided.

The term "user terminal" used in this disclosure is a mobile station (MS), user equipment (UE, User Equipment), wireless terminal, access terminal (AT), terminal, subscriber unit (Subscriber Unit), subscriber station (SS, Subscriber Station) ), wireless device, wireless communication device, wireless transmit/receive unit (WTRU), mobile node, mobile or other terms. Various embodiments of the terminal include a cellular phone, a smart phone having a wireless communication function, a personal portable user terminal (PDA) having a wireless communication function, a wireless modem, a portable computer having a wireless communication function, and a digital camera having a wireless communication function. Includes shooting devices, gaming devices with wireless communication functions, music storage and playback home appliances with wireless communication functions, Internet home appliances with wireless Internet access and browsing, as well as portable units or user terminals incorporating combinations of such functions. can do.

The profile on the iUICC includes unique data and key information of the network operator server, and a network operator server or a third-party operator delegated by the network operator server can create and manage the profile.

The files that can be stored in iUICC (Master File (MF), Dedicated File (DF), Application Dedicated File (ADF), Elementary File) and Credentials that can be stored in iUICC are collectively defined as a Profile.

The user terminal may access the mobile communication network and perform user authentication using the iUICC profile. The profile may be divided into a Provisioning Profile, an Operational Profile, and a User Profile. The provisioning profile refers to a file providing network access information for accessing a mobile communication network in order to support MNO opening when iUICC is not opened with a mobile communication network operator server (MNO). That is, when the terminal having the iUICC is not opened with the MNO, the provisioning profile may provide the mobile communication network to load the operation profile. At this time, the connected mobile communication network may be a network of an unspecified MNO or a network of a predetermined MNO. iUICC may include one or multiple provisioning profiles. The operation profile refers to a file providing MNO network access information in order to access the opened MNO network and receive services after the iUICC is opened with the MNO. The iUICC may include one or more operation profiles, and when a provisioning profile does not exist in the iUICC, the operation profile may serve as a provisioning profile. The user profile refers to a file provided as a storage space for user information such as SMS, MMS, and phone book. The user profile may exist independently or may be included in the operation profile.

1 is a conceptual diagram of a user terminal 100 according to an embodiment.

Referring to FIG. 1 , the user terminal 100 includes a communication chipset 110 . The communication chipset 110 includes a processor 112 , a storage 114 , and an iUICC 120 . That is, the iUICC 120 may be embedded in the communication chipset 110 . The communication chipset 110 may be configured to communicate and process a voice signal and a data signal of the user terminal 100 . The storage 114 stores instructions for controlling the operation of the communication chipset 110 . The processor 112 may be configured to perform overall processing of the communication chipset 110 and control the operation of the iUICC 120 when the instruction is executed. The iUICC 120 is configured to store information for authenticating a subscriber in a communication service. The iUICC 120 includes a processor 122 and storage 124 . The processor 122 may be configured to initialize the iUICC 120 and control the storage 124 . In one embodiment, the processor 112 of the communication chipset 110 may retrieve information from the storage 124 of the iUICC 120 . The processor 112 of the communication chipset 110 may instruct the processor 122 of the iUICC 120 to initialize the iUICC 120 .

2 is a flowchart illustrating initialization of the iUICC 120 according to an embodiment. Referring to FIG. 2 , the user terminal 100 may initialize the iUICC 120 through interworking with the network operator server 200 .

In the present disclosure, the state in which the iUICC 120 is initialized may include the following states. First, initialization may mean an initial state in which the iUICC 120 is physically manufactured. Accordingly, the initialized state may be a state in which all or some profiles existing in the iUICC 120 are deleted. In an embodiment, returning an International Mobile Subscriber Identity (IMSI) value granted according to a service subscription to a virtual IMSI (Pseudo IMSI) value may be referred to as initialization.

In addition, initializing the credentials added to the physically manufactured initial state may be referred to as initialization. The credential may mean a Profile Installer Credential and a Profile Management Credential. In detail, the profile installation credential may mean data required to decrypt and install a profile downloaded from an external entity. The profile management credential may refer to data enabling secure communication with an external entity to manage profiles on the iUICC 120 . Initialization may mean initializing basic credentials such as profile installation credentials and profile management credentials.

In one embodiment, the initialization state may be a state before the iUICC 120 is provisioned. Provisioning may refer to a procedure in which the iUICC 120 of the user terminal 100 subscribes (opens) a service of a network operator server. The user terminal 100 transmits authentication information including personal information and/or terminal identification information (iUICC information) by the user to an authentication server (not shown) of the network operator server 200, and the authentication server ) by passing the registration information to authentication. Here, the terminal identification information may include at least one of an IC Card ID (ICCID) and/or a security key value. The IMSI is a unique 15-digit identification number assigned to a terminal when subscribing to the Global System for Mobile Communication (GSM) service, and the identification number consists of a mobile country code, a mobile network code, a mobile subscriber identification number, and a national mobile subscriber identification number. The ICCID is a unique number of the SIM provided to the terminal, and the security key is information used for authentication with the terminal and the mobile communication system.

When the user terminal 100 is provisioned to the network operator server 200 , the iUICC 120 may download and install a plurality of profiles, such as a provisioning profile, an operating profile, and a user profile.

Referring to FIG. 2 , the user terminal 100 transmits an event (cancellation event) for service cancellation to the network operator server 200 (S10). The event for service cancellation may be transmitted to the network operator server 200 through an application of the network operator server 200 installed in the user terminal 100 . Alternatively, the event for service cancellation may be delivered to the network operator server 200 through a voice call using the user terminal 100 . In addition, the event for service cancellation may be delivered to the network operator server 200 through the agent of the network operator server 200 . In one embodiment, even if the revocation event is transmitted to the network operator server 200, the information of the iUICC 120 is not changed. For example, the existing IMSI of the iUICC 120 is not changed.

In response to receiving the cancellation event, the network operator server 200 cancels the service of the existing user (S20). Accordingly, the CTN (Cellular Telephone Number), which is the mobile subscriber identification number of the existing operator, is canceled. In addition, the network operator server 200 immediately registers in the internal database (not shown) that the iUICC 120 used by the corresponding subscriber is initialized on the system. Since the information that the corresponding SIM is initialized cannot be received after cancellation, the system treats the SIM as initialized while canceling the subscriber. In an embodiment, the network operator server 200 may register whether to cancel the service of the iUICC 120 by using the ICCID of the iUICC 120 as identification information. For example, the cancellation request including the ICCID and customer number of the corresponding customer is transmitted to the network operator server 200 through the agent. The network operator server 200 checks the customer information and transmits a command to delete the corresponding subscriber information or change the status to the canceled status to the related equipment. When a response is received from all related equipment, the cancellation is completed.

The user terminal 100 of which the service is canceled transmits an authentication request message to the network operator server 200 (S30). The user terminal 100 may transmit an attach request to the network operator server 200 when the power of the canceled user terminal 100 is turned off and then turned on again. Alternatively, the user terminal 100 may periodically transmit an attach request to the network operator server 200 to access the network. In an embodiment, the attach request may be an access request message in which the user terminal 100 requests access to the network operator server 200 .

In an embodiment, the user terminal 100 may transmit an attach request to a mobility management entity (MME) of the network operator server 200 . For example, the processor 112 of the user terminal 100 may transmit an attach request.

The MME may be a network node of the EPS network that performs mobility management (MM) and session management (SM) functions. Attach request is EPS attach type, EPS mobile identity, UE network capability, ESM message container, Old P-TMSI signature, Additional GUTI, Last visited registered TAI, DRX parameter, Old location area identification, Additional update type, Voice domain preference and UE's It can include usage setting, etc. The EPS attach type indicates the purpose of the authentication request procedure. Depending on the value, it may indicate EPS attach, a combination of EPS and IMSI (attach to EPS and non-EPS service), or EPS emergency access (emergency bearer service). EPS mobile identity may include GUTI, IMSI, or IMEI. If there is no valid GUTI, include the IMW. The ESM message container enables piggyback transmission of ESM messages in EMM messages.

In an embodiment, the MME receives the attach request and receives authentication information (Authentication Vector) for identifying the corresponding subscriber from the HSS, and uses it to authenticate the subscriber. The authentication information may be included in the attach request.

In more detail, in general, if the service is not terminated, the MME receives the attach request and transmits an attach accept message to the user terminal 100 , and until the attach accept message is transmitted to the user terminal 100 , the MME sends the user It is possible to obtain an ID of the terminal 100, authenticate a subscriber, set NAS security, register a location, and go through a procedure of establishing an EPS session. Although these procedures vary depending on the initial connection type, ID acquisition and EPS session establishment can be performed in any connection type. For example, it depends on whether the user terminal 100 uses IMSI or GUTI as an ID, which MME requests network access, and whether the MME can obtain previous user access information (UE Context) from the network.

In an embodiment, the MME may authenticate the subscriber using the GUTI, IMSI, or IMEI and key value included in the attach request.

Since the service is in a canceled state, the MME recognizes that the iUICC 120 of the user terminal 200 is not subscribed in the subscriber authentication step (authentication), and the MME rejects the access including the EMM cause value. An (attach reject) message is transmitted to the user terminal 100 (S40). EMM cause values are disclosed in FIGS. 9.9.3.9.1 and 9.9.3.9.1 of 3GPP TS 24.301. In an embodiment, the MME transmits to the user terminal 100 an attach reject message including a value corresponding to one of the EMM cause values disclosed in FIGS. 9.9.3.9.1 and 9.9.3.9.1 of 3GPP TS 24.301. .

When subscriber authentication fails, the EMM cause value transmitted from the network operator server 200 to the user terminal 100 may be selected by the network operator server 200 . Referring to FIG. 3 in an embodiment, the MME may transmit an access rejection message including an EMM cause value (EPS services and non-EPS services not allowed) of #8 to the user terminal 100 . In this case, the cause of the ESM message container contents included in the EMM cause may be defined as a code that initializes the USIM (or iUICC). As an example, an ESM message container information element may be defined as shown in FIG. 9.9.3.15.1 and Table 9.9.3.15.1 of 3GPP TS 24.301. In the present disclosure, the cause of the ESM message container content included in the EMM cause of #8 is defined as a code that initializes the USIM (or iUICC), but it can be transmitted to the user terminal 100 by including the initialization code in another reject cause. For example, it can be used as a cause to initialize USIM by newly defining esm cause under EMM cause #2.

In response to receiving the attach reject message, the user terminal 100 initializes the iUICC 120 based on the EMM cause value of the attach reject message ( S50 ). The meaning of initializing the iUICC 120 has been described above. In an embodiment, the processor 112 of the user terminal 100 is configured to transmit a command for initializing the iUICC 120 to the processor 122 of the iUICC 120 based on the EMM cause value of the attach reject message. . Such an operation may be performed according to instructions stored in the storage 114 of the user terminal 100 .

Since the iUICC 120 of the user terminal 100 is initialized, it is possible to reuse the user terminal 100 when the user of the user terminal 100 is changed.

The user terminal 100 transmits an event for service opening to the network operator server 200 (S60). The event for service opening may be transmitted to the network operator server 200 through an application of the network operator server 200 installed in the user terminal 100 . Alternatively, the event for service opening may be delivered to the network operator server 200 through a voice call using the user terminal 100 . In addition, the event for service opening may be delivered to the network operator server 200 through the agent of the network operator server 200 .

In response to receiving the opening event, the network operator server 200 opens a new user's service (S70). In this case, the network operator server 200 may check whether the iUICC 120 of the user terminal 100 is in an initialized state through the ICCID of the iUICC 120 . The network operator server 200 may open a new user's service in response to checking whether the iUICC 120 of the user terminal 100 is in an initialized state.

The apparatus and method described above may be implemented as a hardware component, a software component, and/or a combination of the hardware component and the software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA), It may be implemented using one or more general purpose or special purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that may include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

The software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or device, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave. The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The described embodiments of the present disclosure may also be practiced in distributed computing environments where certain tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote memory storage devices.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to a person skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floppy disks. -magneto-optical media, and specially configured to store and carry out program instructions such as ROM, RAM, flash memory, etc.

Hardware devices are included. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

A computing device may operate in a networked environment using logical connections to one or more remote computers, such as remote computer(s), via wired and/or wireless communications. The remote computer(s) may be workstations, server computers, routers, personal computers, portable computers, microprocessor-based entertainment devices, peer devices, or other common network nodes, generally comprising the components described for the computing device. includes many or all of The logical connections shown include wired/wireless connections to a local area network (LAN) 652 and/or a larger network, eg, a wide area network (WAN) 654 . Such LAN and WAN networking environments are common in offices and companies, and facilitate enterprise-wide computer networks, such as intranets, all of which can be connected to a worldwide computer network, for example, the Internet.

As described above, although the embodiments have been described with reference to the limited drawings, those skilled in the art may apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order than the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

100: user terminal 110: communication chipset
112: processor 114: storage
120: iUICC 122: Processor
124: storage

Claims (12)

In a user terminal comprising a communication chipset,
The communication chipset includes a processor, a storage and a subscriber authentication module, wherein the storage stores instructions,
The instruction indicates that when executed by the processor of the communication chipset, the processor of the communication chipset
Sends an access request message to the network operator server,
receiving an access rejection message from the network operator server;
In response to receiving the access rejection message, the user terminal is an instruction for sending a subscriber authentication module initialization instruction for causing the processor of the subscriber authentication module to initialize the subscriber authentication module to the subscriber authentication module. According to claim 1,
The subscriber authentication module initialization instruction is an instruction to return the IMSI stored in the storage of the subscriber authentication module to a virtual IMSI (pseudo IMSI), the user terminal. According to claim 1,
The access rejection message includes a cause value indicating that the user terminal cannot access the network of the network operator server, the user terminal. According to claim 1,
The processor of the subscriber authentication module returns the IMSI stored in the storage of the subscriber authentication module to a virtual IMSI in response to receiving the subscriber authentication module initialization instruction. A method of initializing a subscriber authentication module embedded in a communication chipset, the method comprising:
transmitting, by the communication chipset, an access request message to a network operator server;
receiving, by the communication chipset, a connection rejection message from the network operator server;
in response to receiving the access rejection message, transmitting, by the communication chipset, a subscriber authentication module initialization instruction to the subscriber authentication module, causing the processor of the subscriber authentication module to initialize the subscriber authentication module; and
In response to receiving the subscriber authentication module initialization instruction, the method of initializing the subscriber authentication module, comprising the step of the processor of the subscriber authentication module initializing the subscriber authentication module. 6. The method of claim 5,
Prior to the step of the communication chipset transmitting a connection request message to the network operator server,
The method of initializing the subscriber authentication module further comprising the step of transmitting, by the communication chipset, an event stating that the service of the network operator server is canceled to the network operator server. 6. The method of claim 5,
The method of initializing the subscriber authentication module includes returning an IMSI stored in a storage of the subscriber authentication module to a pseudo IMSI (pseudo IMSI). 6. The method of claim 5,
The method of initializing a subscriber authentication module, wherein the access rejection message includes a cause value indicating that the user terminal cannot access the network of the network operator server. 9. The method of claim 8,
The access rejection message includes an EMM cause value defined in 3GPP TS 24.301, a method of initializing a subscriber authentication module. 9. The method of claim 8,
The method of initializing a subscriber authentication module, wherein the cause value includes a value indicating an initialization request of the iUICC included in the EMM cause defined in 3GPP TS 24.301. A method of initializing a subscriber authentication module embedded in a communication chipset, the method comprising:
receiving, by a network operator server, a service cancellation event of a user terminal including the communication chipset from the communication chipset;
registering, by the network operator server, that the subscriber authentication module has been initialized in an internal database in response to receiving the cancellation event;
receiving, by the network operator server, a message from the communication chipset requesting that the user terminal access the network of the network operator server;
The network operator server compares information included in the access request message with information on a subscriber authentication module registered in the server of the network operator server to confirm that the communication chipset cannot access the network of the network operator server step; and
and transmitting, by the network operator server, a network connection rejection message including a cause value indicating that the subscriber authentication module needs to be initialized to the communication chipset. 12. The method of claim 11,
The method of initializing the subscriber authentication module, wherein the network access rejection message includes a value indicating an initialization request of the iUICC included in the EMM cause defined in 3GPP TS 24.301.

Images