JP7639532B2 - PROFILE ACQUISITION PROGRAM, ELECTRONIC INFORMATION STORAGE MEDIUM, AND PROFILE ACQUISITION METHOD - Google Patents

Description

The present invention relates to the technical field of electronic information storage media capable of storing multiple profiles.

Conventionally, SIM cards (hereinafter sometimes referred to as UICC) used in mobile phones were written with only the data of one telecommunications carrier and were used for the communication services of that carrier. Therefore, when a user wanted to change the telecommunications carrier, it was necessary to obtain a new UICC (Universal Integrated Circuit Card). In recent years, a new SIM card called eUICC (Embedded Universal Integrated Circuit Card) has been specified by an industry group and is gradually becoming more widespread. The biggest difference between eUICC and UICC is that it can be equipped with multiple pieces of data called profiles that correspond to the conventional UICC functions. These profiles can be added or deleted by the user via the wireless communication function of the mobile phone. By selecting one of the multiple profiles in the mobile phone, the user can easily use the communication services of multiple telecommunications carriers. Such a profile includes a service table that indicates the functions provided by the UICC, such as that disclosed in Patent Document 1. In addition, Non-Patent Documents 2 and 3 disclose that the LPA (Local Profile Assistant) function in the device downloads a profile from SM (Subscription Manager)-DP (Data Preparation)+ via SM (Subscription Manager)-DS (Discovery Service) and stores it in the eUICC.

Patent No. 5149516

GSM Association Official Document SGP.21-RSP Architecture Version 2.1 27 February 2017 GSM Association Official Document SGP.22-RSP Technical Specification Version 2.2 01 September 2017

The eUICC can add profiles using its wireless communication functions, but such addition is equivalent to a new contract for a conventional UICC. Therefore, identity verification is required when adding a profile to an eUICC, which could reduce the convenience of the eUICC, which allows users to easily use the communication services of multiple telecommunications carriers by adding and selecting profiles.

The present invention has been made in consideration of the above points, and aims to provide a profile acquisition program, electronic information storage medium, and profile acquisition method that can maintain the authentication level while reducing the burden of user identity verification placed on the telecommunications carrier when adding a profile.

In order to solve the above problem, the invention described in claim 1 provides a communication system including an authentication server that performs identity verification of a user who uses a communication service based on the user's identity verification data and the user's ID photo data, a management server that verifies the certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the system including an authentication means that performs local authentication using authentication information received from the user, and a computer that can obtain identification information of an electronic information storage medium from an electronic information storage medium mounted on the communication terminal, the computer being configured to perform local authentication using authentication information received from the user, and the electronic information storage medium. The device functions as a first transmission means for transmitting the identification information of the storage medium, the user's identity verification data, and the result of the local authentication to the management server, a reception means for receiving an identity verification request transmitted from the authentication server via the management server, an acquisition means for acquiring the user's appearance photographed by a camera using a predetermined application as the ID photo data in response to the identity verification request, a second transmission means for transmitting the ID photo data acquired by the acquisition means to the authentication server via the management server, and a control means for acquiring the profile generated by the management server in response to a notification of success in the identity verification of the user by the authentication server, and storing the profile in the electronic information storage medium.

The invention described in claim 2 is characterized in that, in the profile acquisition program described in claim 1, the program further includes a determination means for determining whether or not the certificate of the authentication server is stored in the communication terminal, and the first transmission means transmits the identification information of the electronic information storage medium, the user's personal identification data, and the result of the local authentication to the management server when the determination means determines that the certificate of the authentication server is not stored.

The invention described in claim 3 is characterized in that in the profile acquisition program described in claim 1 or 2, the certificate of the authentication server is generated by the authentication server based on the identification information of the electronic information storage medium.

The invention described in claim 4 is characterized in that in the profile acquisition program described in any one of claims 1 to 3, the profile is generated in response to a notification of success in the identity verification by the authentication server and successful verification of the result of the local authentication.

The invention described in claim 5 is a communication system including an authentication server that performs identity verification of a user who uses a communication service based on the user's identity verification data and the user's ID photo data, a management server that verifies the certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification by the authentication server, and a communication terminal used by the user to use the communication service, and an electronic information storage medium mounted on the communication terminal, the electronic information storage medium comprising an authentication means that performs local authentication using authentication information received from the user, and identification information of the electronic information storage medium, the user The device is characterized by comprising a first transmission means for transmitting the personal identification data and the result of the local authentication to the management server, a reception means for receiving the personal identification request transmitted from the authentication server via the management server, an acquisition means for acquiring the user's appearance photographed by a camera using a predetermined application as the ID photo data in response to the personal identification request, a second transmission means for transmitting the ID photo data acquired by the acquisition means to the authentication server via the management server, and a control means for acquiring the profile generated by the management server in response to a notification of success of the personal identification by the authentication server and storing it in a non-volatile memory.

The invention described in claim 6 is a profile acquisition method executed by a computer capable of acquiring identification information of an electronic information storage medium from an electronic information storage medium mounted on a communication terminal in a communication system including an authentication server that performs identity verification of a user who uses a communication service based on the user's identity verification data and the user's ID photo data, a management server that verifies the certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification by the authentication server, and a communication terminal used by the user to use the communication service, the method comprising: a step of transmitting the identification information of the electronic information storage medium, the user's identity verification data, and the result of the local authentication to the management server; a step of receiving an identity verification request transmitted from the authentication server via the management server; a step of acquiring the user's appearance photographed by a camera using a predetermined application as the identification photo data in response to the identity verification request; a step of transmitting the acquired identification photo data to the authentication server via the management server; and a step of acquiring the profile generated by the management server in response to a notification of success of the identity verification by the authentication server and storing the profile in the electronic information storage medium.

According to the present invention, it is possible to maintain the authentication level while reducing the burden of user identity verification placed on the telecommunications carrier when adding a profile.

FIG. 1 is a diagram illustrating an example of a schematic configuration of a communication system S. FIG. 2 is a diagram illustrating an example of a schematic configuration of a communication terminal 4. FIG. 13 is a diagram showing an outline of the operation when a profile is acquired for the first time. FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the first time. FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the first time. FIG. 13 is a diagram showing an outline of an operation when a profile is acquired for the second or subsequent time. 11 is a sequence diagram showing details of an operation when a profile is acquired for the second or subsequent time. FIG. 11 is a sequence diagram showing details of an operation when a profile is acquired for the second or subsequent time. FIG.

The following describes in detail an embodiment of the present invention with reference to the drawings.

[1. Overview of communication system S]
First, referring to FIG. 1, a schematic configuration of a communication system S according to an embodiment of the present invention will be described. FIG. 1 is a diagram showing a schematic configuration example of the communication system S. As shown in FIG. 1, the communication system S includes a management server 1, an authentication server 2, a relay server 3, and a communication terminal 4. Here, in the communication system S, the management server 1 is provided for each communication carrier that provides a communication service, for example, and in this embodiment, one of the management servers 1 will be described as an example. The management server 1, the authentication server 2, and the relay server 3 are capable of communicating with each other via a network NW. The network NW is, for example, the Internet or a wireless communication network of a communication carrier (for example, a 3G, 4G, or 5G network). The communication terminal 4 is capable of accessing and communicating with the management server 1 and the relay server 3 via the network NW.

The management server 1 is a server equipped with SM-DP+, which generates a profile required for the user of the communication terminal 4 to use the communication service, and manages the profile by linking it to an EID (eUICCID: an individual identifier of the eUICC, which is an example of identification information of the electronic information storage medium of the present invention). The management server 1 also verifies the certificate of the authentication server 2. The authentication server 2 is a server that verifies the identity of the user who uses the communication service based on the identity verification data (identification document data) of the user and the user's ID photo data. The eKYC (electronic Know Your Customer) technology is used for the identity verification of the user. The relay server 3 is a server equipped with SM-DS, has a list of connection destinations to SM-DP+, and obtains the profile generated by the management server 1 in response to a request from the LPA function of the communication terminal 4, and provides it to the LPA function of the communication terminal 4 (i.e., a server that relays the LPA function and SM-DP+). The relay server 3 also obtains the certificate of the authentication server 2 in response to a request from the LPA function of the communication terminal 4, and provides it to the LPA function of the communication terminal 4.

Fig. 2 is a diagram showing an example of the general configuration of the communication terminal 4. The communication terminal 4 is, for example, a mobile terminal such as a mobile phone or a smartphone, and is equipped with an IC module 5. As shown in Fig. 2, the communication terminal 4 further includes an I/F unit 41, a communication unit 42, a memory unit 43, a display and operation unit 44, an authentication information reception unit 45, a camera 46, and a control unit 47.

The IC module 5 is an example of an electronic information storage medium of the present invention, and is mounted on an embedded board (i.e., formed integrally with the communication terminal 4) as an eUICC so that it cannot be easily removed or replaced from the communication terminal 4. The IC module 5 is composed of tamper-resistant hardware, and includes a CPU (Central Processing Unit) 51, a RAM (Random Access Memory) 52, a ROM (Read Only Memory) 53, a NVM (Nonvolatile Memory) 54 which is a nonvolatile memory, and an I/F unit 55. The I/F unit 55 serves as an interface with the control unit 47. This interface is an SPI, ^I2C , or ISO7816 interface. The ROM 53 or the NVM 54 stores (preserves) the EID of the IC module 5. The NVM 54 is capable of storing the profiles of each of a plurality of communication carriers. The profile describes, for example, an International Mobile Subscriber Identity (IMSI) unique to a user who uses a communication service, a communication method related to the communication service, an authentication method related to the communication service, key data used for authentication, etc. The profile can be added or deleted from the NVM 54 of the IC module 5.

The I/F unit 41 serves as an interface with the IC module 5. The communication unit 42 is a communication device for connecting to the network NW, and communicates with an external server (the management server 1 or the relay server 3) according to, for example, TCP (Transmission Control Protocol)/IP (Internet protocol) and TLS (Transport Layer Security) protocols. The storage unit 43 is composed of a non-volatile memory and stores an OS (operating system) and applications (including the profile acquisition program of the present invention). The applications include an application for eKYC (an example of a predetermined application). The application for eKYC is programmed to obtain the user's ID photo data, and has an anti-spoofing function such as liveness judgment to confirm that the image showing the user's appearance is not a still image prepared in advance. The application for eKYC is provided by, for example, a telecommunications carrier. In addition, the storage unit 43 stores the user's identity verification data. Examples of identity verification data include data copied from a driver's license (driver's license with the user's address written on it), a driving history certificate, a passport, a My Number card, or a residence card. Furthermore, the certificate of the authentication server 2 is stored later in the storage unit 43. The display and operation unit 44 includes, for example, a touch panel having an input function for inputting instructions from the user and a display function for displaying various information.

The authentication information receiving unit 45 receives authentication information (local authentication data) from the user to be used for local authentication performed in the communication terminal 4. For example, the authentication information receiving unit 45 receives a password entered by the user on a touch panel as authentication information. Alternatively, the authentication information receiving unit 45 may be composed of a fingerprint sensor and receive a fingerprint detected from the pad of the user's finger by the fingerprint sensor as authentication information. Note that the authentication information receiving unit 45 may also include a sensor that detects biometric information other than fingerprints (palm prints, blood vessel vein patterns, etc.). The camera 46 captures a subject within the angle of view according to instructions from the user.

The control unit 47 is an example of a computer, and is composed of, for example, a CPU, RAM, and ROM, and has a wireless communication function, an LPA function, and a contract application function. These functions are realized by executing an application, and include the functions of the authentication means, the determination means, the first transmission means, the second transmission means, the receiving means, the acquisition means, and the control means of the present invention. The LPA function includes an LPD (Local Profile Download) function that acquires (downloads) a profile from the SM-DS and stores (stores) it in the IC module 5 (including a function of querying the SM-DS when searching for a profile on the network NW), an LUI (Local User Interface) function that presents a user interface for performing operations on the profile in the IC module 5 (list display, selection, deletion, etc.), an authentication function that performs local authentication using authentication information accepted by the authentication information acceptance unit 45, and an acquisition function that acquires the user's appearance photographed by the camera 46 as identification photo data using an application for eKYC in response to a request for personal identification. Here, the identification photo data includes, for example, data of an image that represents the user's appearance (particularly, the face) and in which the user is moving. The user's movement is the movement of the user facing at least one of the up, down, left and right directions in response to a message from the eKYC application. The ID photo data may include an image of the user holding an identification document such as a driver's license, along with the user's appearance (particularly the face). Furthermore, the LPA function according to this embodiment includes a function for acquiring the certificate of the authentication server 2 and storing it in the memory unit 43. It is preferable that a secure channel protocol be used between the LPA function, the SM-DS and the SM-DP+.

The contract application function includes a determination function for determining whether or not the certificate of the authentication server 2 is stored in the communication terminal 4 when applying for a contract (usage contract) for a communication service in response to an instruction from a user, a first transmission function for transmitting "information necessary for the contract" according to the determination result by the determination function to the management server 1, and a second transmission function for transmitting the ID photo data acquired by the LPA function to the management server 1. Here, "information necessary for the contract" according to the determination result means that the information included in the information necessary for the contract differs depending on the determination result. In other words, the information necessary for the contract when it is determined that the certificate of the authentication server 2 is stored includes the EID of the IC module 5, the certificate of the authentication server 2, and the result of local authentication by the authentication function (authentication successful or authentication failed), etc. The information necessary for the contract when it is determined that the certificate of the authentication server 2 is not stored includes the EID of the IC module 5, the user's identity verification data, and the result of local authentication by the authentication function.

2. Operation of communication system S
Next, the operation of the communication system S according to this embodiment will be described separately for the operation when a profile is acquired for the first time and the operation when a profile is acquired for the second or subsequent time.

(2-1. Operation when a profile is acquired for the first time)
First, the operation when a profile is acquired for the first time will be described with reference to Fig. 3 to Fig. 5. Note that in the operation when a profile is acquired for the first time, it is assumed that the certificate of the authentication server 2 is not stored in the communication terminal 4. Fig. 3 is a diagram showing an overview of the operation when a profile is acquired for the first time, and Figs. 4 and 5 are sequence diagrams showing the details of the operation when a profile is acquired for the first time.

In FIG. 4, when the communication terminal 4 determines by the LPA function that authentication information (local authentication data) has not been registered, for example, at startup (step S1), it requests the user to register authentication information (registration request) (step S2). Such a registration request is made, for example, by displaying it on the display/operation unit 44. In response to this, the authentication information input by the user (step S3) is accepted by the authentication information acceptance unit 45 and registered (stored in the memory unit 43) by the LPA function (step S4).

Then, in response to a contract application instruction from the user, the communication terminal 4 accesses the management server 1 of the communication carrier and transmits a contract application ("1. Contract Application" shown in FIG. 3) to use the communication service by using the contract application function (step S5). Here, the access from the communication terminal 4 to the management server 1 may be via a wireless LAN (e.g., Wi-Fi (registered trademark)) and the Internet, or via the wireless communication network of the communication carrier in accordance with a preprofile (PreProfile: a profile used only for contract applications) provided in advance by the communication carrier. The contract application is composed of message data in a specified data format, for example.

Next, when the management server 1 receives the contract application from the communication terminal 4, it transmits a transmission request for information required for the contract ("2. Transmission request" shown in FIG. 3) to the communication terminal 4 (step S6). The transmission request is composed of message data in a predetermined data format, for example. Next, when the communication terminal 4 receives the transmission request from the management server 1, it requests the user to input authentication information for local authentication ("3. Input request" shown in FIG. 3) (step S7). When the authentication information input by the user in response to this ("4. Authentication information" shown in FIG. 3) is accepted by the authentication information acceptance unit 45 (step S8), the communication terminal 4 performs local authentication ("5. Local authentication" shown in FIG. 3) by the LPA function using the accepted authentication information and the authentication information registered in step S4 (step S9). If the authentication information matches in the local authentication (or if the degree of match is equal to or greater than a threshold), the authentication is determined to be successful. Note that the local authentication may be performed before the contract application is sent.

Next, the communication terminal 4 uses the contract application function to determine whether the certificate of the authentication server 2 is stored (preserved) in the communication terminal 4 ("6. Certificate preservation determination" in FIG. 3). In the operation shown in FIG. 3, the certificate of the authentication server 2 is not stored, so the communication terminal 4 determines that the certificate of the authentication server 2 is not stored (step S10) and obtains the user's identity verification data from the storage unit 43 (step S11).

Then, the communications terminal 4 transmits the contract application information (including the personal information entered by the user), the EID of the IC module 5, the identity verification data acquired in step S11, the result of the local authentication in step S9 (e.g., authentication success), and the data acquisition key as information required for the contract ("7. Information required for the contract" in FIG. 3) to the management server 1 by the contract application function (for example, using HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely) (step S12). This allows the user to apply for a contract to use a communications service with the communications carrier via the communications terminal 4.

The EID of the IC module 5 may be stored in advance in the storage unit 43, or may be obtained from the IC module 5 when the information required for the contract is transmitted. The data acquisition key transmitted in step S12 is a key required for the user to acquire a profile or a certificate of the authentication server 2, and is generated from, for example, personal identification data unique to the user or the EID (for example, generated by hashing). The management server 1 may check whether the result of the local authentication transmitted in step S12 has been tampered with.

Next, when the management server 1 receives the information required for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of local authentication" shown in FIG. 3) (step S13). If the management server 1 determines that the result of the local authentication is successful (i.e., the verification of the result of the local authentication is successful), it transmits an identity verification request including the EID, identity verification data, and data acquisition key included in the information required for the contract ("9. Identity Verification Request" shown in FIG. 3) to the authentication server 2 (step S14). The identity verification request is composed of message data in a predetermined data format, for example. Here, in order to transmit data safely, the EID may be encrypted with the public key of the authentication server 2 and transmitted to the authentication server 2. If the verification determines that the result of the local authentication is unsuccessful, the EID, identity verification data, and data acquisition key are not transmitted to the authentication server 2.

Next, when the authentication server 2 receives the identity verification request from the management server 1, it transmits an identity verification request ("10. Identity verification request" shown in FIG. 3) to the management server 1 to verify the identity of the user (step S15). Here, the authentication server 2 may transmit the identity verification request to the management server 1 only if it determines that the certificate of the authentication server 2 has not already been registered in association with the data acquisition key received from the management server 1. Next, when the management server 1 receives the identity verification request from the authentication server 2, it transmits the identity verification request ("11. Identity verification request" shown in FIG. 3) to the communication terminal 4 (step S16). The identity verification request is composed of message data in a specified data format, for example.

Next, when the communication terminal 4 receives an identity verification request from the management server 1 (i.e., receives an identity verification request sent from the authentication server 2 via the management server 1), it launches an eKYC application in response to the identity verification request and requests a photograph of the user's appearance ("12. Identity verification request" shown in FIG. 3) (step S17). Such a request is made, for example, by displaying a message indicating the procedure for photographing by the camera 46 on the display/operation unit 44. Then, the user's appearance photographed by the camera 46 is acquired as ID photo data ("13. ID photo data" shown in FIG. 3) by the LPA function (step S18). Next, in response to a transmission instruction from the user, the communication terminal 4 transmits the ID photo data acquired in step S18 ("14. ID photo data" shown in FIG. 3) to the management server 1 by the contract application function (step S19). That is, the ID photo data is transmitted from the communication terminal 4 to the authentication server 2 via the management server 1.

Next, when the management server 1 receives the ID photo data from the communication terminal 4, it transmits the ID photo data ("15. ID photo data" shown in FIG. 3) to the authentication server 2 (step S20). Next, when the authentication server 2 receives the ID photo data from the management server 1, it performs identity verification of the user and generates a certificate for the authentication server 2 based on the EID received from the management server 1 ("16. Perform identity verification, generate certificate" shown in FIG. 3) (step S22). Here, the identity verification of the user is performed based on the user's identity verification data and ID photo data according to a known eKYC algorithm. The certificate for the authentication server 2 is created, for example, by signing the EID with the private key of the authentication server 2. Next, the authentication server 2 registers the certificate generated in step S22 in association with the data acquisition key received from the management server 1 (step S23). It is preferable that the ID photo data is stored in the authentication server 2 in association with the data acquisition key. Next, the authentication server 2 sends a notification of successful identity verification ("17. Notification of successful identity verification" shown in Figure 3) to the management server 1 (step S24).

Next, when the management server 1 receives a notification of successful identity verification from the authentication server 2, it generates a profile required for the user who applied for the contract to use the communication service in response to the notification of successful identity verification ("18. Profile generation" shown in Figure 3) (step S25). That is, a profile is generated in response to the successful verification in step S13 and the notification of successful identity verification by the authentication server 2. Next, the management server 1 associates the profile generated in step S25 with the SID and data acquisition key received from the communication terminal 4 and registers them in the SM-DP+ (step S26). As a result, a profile registration notification is sent to the communication terminal 4.

Next, in Fig. 5, the communication terminal 4 accesses the relay server 3, and since it does not hold the certificate of the authentication server 2, it transmits a request to transmit the certificate of the authentication server 2 and the profile ("19. Transmission request" shown in Fig. 3) to the relay server 3 (SM-DS) by the LPA function (step S27). This transmission request includes the data acquisition key.

Next, when the relay server 3 receives a transmission request from the communication terminal 4, it transmits a transmission request for the authentication server 2's certificate ("20. Transmission request" shown in FIG. 3) to the authentication server 2 by SM-DS (step S28). This transmission request includes the above-mentioned data acquisition key. Next, when the authentication server 2 receives a transmission request from the relay server 3, it transmits the certificate ("21. Certificate" shown in FIG. 3) registered in association with the data acquisition key included in the transmission request to the relay server 3 (step S29). Here, in order to transmit data securely, it is preferable that the authentication server 2's certificate is encrypted with the public key of the relay server 3 and transmitted to the relay server 3.

Next, the relay server 3 transmits a profile transmission request ("22. Transmission request" shown in FIG. 3) to the management server 1 by SM-DS (step S30). Next, when the management server 1 receives the transmission request from the relay server 3, it transmits the profile ("23. Profile" shown in FIG. 3) registered in association with the data acquisition key included in the transmission request to the relay server 3 by SM-DP+ (step S31). Next, when the relay server 3 receives the certificate from the authentication server 2 and the profile from the management server 1, it transmits the certificate and profile of the authentication server 2 ("24. Certificate and profile" shown in FIG. 3) to the communication terminal 4 (LPA function) (step S32).

Next, when the communication terminal 4 receives (obtains) the certificate and profile of the authentication server 2 from the relay server 3, it stores the certificate of the authentication server 2 in the memory unit 43 ("25. Save certificate" in FIG. 3) (step S33), and transmits the profile ("26. Profile" in FIG. 3) to the IC module 5 via the I/F unit 41 (step S34) to store it in the NVM 54 (step S35). In other words, the profile is downloaded to the IC module 5. The IC module 5 then enables the communication service by selecting the profile.

(2-2. Operation when acquiring a profile for the second or subsequent time)
Next, the operation when acquiring a profile for the second or later time will be described with reference to Fig. 6 to Fig. 8. Note that in the operation when acquiring a profile for the second or later time, a contract is applied for with a communications carrier different from the communications carrier applied for in the operation when the profile was acquired for the first time. Also, in the operation when acquiring a profile for the second or later time, the authentication information stored in the operation when the profile was acquired for the first time and the certificate of the authentication server 2 are used. Fig. 6 is a diagram showing an overview of the operation when acquiring a profile for the second or later time, and Figs. 7 and 8 are sequence diagrams showing the details of the operation when acquiring a profile for the second or later time.

In Fig. 7, the communication terminal 4, in response to a contract application instruction from the user, accesses the management server 1 of a communication carrier (different from the communication carrier with which the contract application was made in the operation when the profile was first acquired) and transmits a contract application ("1. Contract application" shown in Fig. 6) to use a communication service (step S41). Next, when the management server 1 receives the contract application from the communication terminal 4, it transmits a transmission request for information required for the contract ("2. Transmission request" shown in Fig. 6) to the communication terminal 4 (step S42).

Next, when the communication terminal 4 receives the transmission request from the management server 1, it requests the user to input authentication information for local authentication ("3. Input request" in FIG. 6) (step S43). When the authentication information input by the user in response ("4. Authentication information" in FIG. 6) is accepted by the authentication information acceptance unit 45 (step S44), the communication terminal 4 performs local authentication ("5. Local authentication" in FIG. 6) by the LPA function using the accepted authentication information and the authentication information that has already been registered (step S45).

Next, if the result of the local authentication in step S45 is successful, the communications terminal 4 uses the contract application function to determine whether or not the certificate of the authentication server 2 is stored (stored) in the communications terminal 4 ("6. Certificate storage determination" in Figure 6). In the operation shown in Figure 6, the certificate of the authentication server 2 is stored, so the communications terminal 4 determines that the certificate of the authentication server 2 is stored (step S46) and obtains the certificate of the authentication server 2 from the memory unit 43 (step S47). Note that if the result of the local authentication is unsuccessful, the certificate of the authentication server 2 is not obtained and output of the certificate is prohibited.

Next, the communication terminal 4 transmits the contract application information, the EID of the IC module 5, the certificate acquired in step S47, the result of the local authentication in step S45 (authentication successful), and the data acquisition key as information required for the contract ("7. Information required for the contract" shown in Figure 6) to the management server 1 using the contract application function (step S48).

Next, when the management server 1 receives the information required for the contract from the communication terminal 4, it verifies the result of the local authentication included in the information ("8. Verification of the result of local authentication" shown in FIG. 6) (step S49). Next, the management server 1 verifies the certificate of the authentication server 2 included in the information ("9. Verification of the certificate" shown in FIG. 6) (step S50). For example, the management server 1 verifies the signature on the certificate of the authentication server 2 with the public key of the authentication server 2. This makes it possible to confirm that the EID included in the information required for the contract has been verified by another telecommunications carrier (the telecommunications carrier to which the contract was applied in the operation when the profile was first acquired). Note that, in order to guarantee the public key of the authentication server 2, it is preferable that the certification authority signs the public key of the authentication server 2 and that the signature is verified before the public key is used.

Next, if the management server 1 determines that the verification result in step S49 is successful and also determines that the verification result in step S50 is successful, it generates a profile required for the user who applied for the contract to use the communication service ("10. Profile generation" shown in FIG. 6) (step S51). That is, a profile is generated according to the successful verification in steps S49 and S50. Next, the management server 1 associates the profile generated in step S51 with the data acquisition key received from the communication terminal 4 and registers them in the SM-DP+ (step S52). As a result, a profile registration notification is sent to the communication terminal 4.

Next, in Fig. 8, the communication terminal 4 accesses the relay server 3, and since it holds the certificate of the authentication server 2, it transmits a request to transmit only the profile ("11. Transmission request" shown in Fig. 6) to the relay server 3 (SM-DS) by the LPA function (step S53). This transmission request includes the data acquisition key.

Next, when the relay server 3 receives a transmission request from the communication terminal 4, it transmits a profile transmission request ("12. Transmission request" shown in FIG. 6) to the management server 1 by SM-DS (step S54). This transmission request includes the data acquisition key. Next, when the management server 1 receives a transmission request from the relay server 3, it transmits the profile ("13. Profile" shown in FIG. 6) registered in association with the data acquisition key included in the transmission request to the relay server 3 by SM-DP+ (step S55). Next, when the relay server 3 receives the profile from the management server 1, it transmits the profile ("14. Profile" shown in FIG. 6) to the communication terminal 4 (LPA function) (step S56).

Next, when the communication terminal 4 receives the profile from the relay server 3, it transmits the profile ("15. Profile" shown in FIG. 6) to the IC module 5 via the I/F unit 41 (step S57) and stores it (step S58). The IC module 5 then selects the profile to enable the communication service.

As described above, according to the above embodiment, the communication terminal 4 performs local authentication using authentication information received from the user, determines whether the certificate of the authentication server 2 is stored in the communication terminal 4, and if it is determined that the certificate of the authentication server 2 is not stored, transmits at least the EID of the IC module 5, the user's identity verification data, and the result of the local authentication to the management server 1. The communication terminal 4 is configured to acquire the profile generated by the management server 1 in response to a successful identity verification notification based on the user's identity verification data and ID photo data by the authentication server 2, and store it in the IC module 5, so that the authentication level can be maintained while reducing the burden of identity verification of the user received from the telecommunications carrier when adding a profile. That is, according to the above embodiment, the certificate generated based on the identity verification performed by the authentication server 2 to provide the profile of the telecommunications carrier to the user at the time of the first service contract between the user and the telecommunications carrier is used at the time of the second or subsequent service contract between the user and another telecommunications carrier, so that the profile of the other telecommunications carrier can be provided to the user, so that the authentication level can be maintained while reducing the burden of identity verification of the user received from the telecommunications carrier.

In the above embodiment, the LPA function and contract application function are configured to be possessed by the control unit 47, but they may be configured to be possessed by the IC module 5 instead of the control unit 47. Also, although an IC module 5 built into the communication terminal 4 has been described as an example of an electronic information storage medium of the present invention, the present invention may also be applied to an IC card that is detachable from the communication terminal 4.

REFERENCE SIGNS LIST 1 Management server 2 Authentication server 3 Relay server 4 Communication terminal 5 IC module 41 I/F unit 42 Communication unit 43 Storage unit 44 Display and operation unit 45 Authentication information reception unit 46 Camera 47 Control unit

Claims (6)

In a communication system including an authentication server that performs identity verification of a user who uses a communication service based on the user's identity verification data and the user's ID photo data, an administration server that verifies a certificate of the authentication server and that generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, a computer capable of acquiring identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal,
an authentication means for performing local authentication using authentication information received from the user;
a first transmission means for transmitting identification information of the electronic information storage medium, personal identification data of the user, and a result of the local authentication to the management server;
a receiving means for receiving an identity verification request transmitted from the authentication server via the management server;
an acquisition means for acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data;
a second transmission means for transmitting the ID photograph data acquired by the acquisition means to the authentication server via the management server;
A profile acquisition program characterized by functioning as a control means for acquiring the profile generated by the management server in response to a successful notification of the user's identity verification by the authentication server and storing the profile in the electronic information storage medium. a determination unit that determines whether a certificate of the authentication server is stored in the communication terminal;
The profile acquisition program according to claim 1, characterized in that the first transmission means transmits identification information of the electronic information storage medium, the user's identity verification data, and the result of the local authentication to the management server when the determination means determines that the certificate of the authentication server is not stored. The profile acquisition program according to claim 1 or 2, characterized in that the certificate of the authentication server is generated by the authentication server based on the identification information of the electronic information storage medium. The profile acquisition program according to any one of claims 1 to 3, characterized in that the profile is generated in response to a notification of success in the identity verification by the authentication server and in response to successful verification of the result of the local authentication. An electronic information storage medium mounted on a communication terminal in a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the electronic information storage medium comprising:
an authentication means for performing local authentication using authentication information received from the user;
a first transmission means for transmitting identification information of the electronic information storage medium, personal identification data of the user, and a result of the local authentication to the management server;
a receiving means for receiving an identity verification request transmitted from the authentication server via the management server;
an acquisition means for acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data;
a second transmission means for transmitting the ID photograph data acquired by the acquisition means to the authentication server via the management server;
a control means for acquiring the profile generated by the management server in response to a notification of success of the identity verification by the authentication server and storing the profile in a non-volatile memory;
An electronic information storage medium comprising: A profile acquisition method for a communication system including an authentication server that performs identity verification of a user who uses a communication service based on identity verification data of the user and ID photo data of the user, an administration server that verifies a certificate of the authentication server and that generates a profile required for the user to use the communication service in response to a successful identity verification notification from the authentication server, and a communication terminal used by the user to use the communication service, the method being executed by a computer capable of acquiring identification information of an electronic information storage medium from the electronic information storage medium mounted on the communication terminal, the method comprising:
performing local authentication using authentication information received from the user;
transmitting identification information of the electronic information storage medium, identity verification data of the user, and a result of the local authentication to the management server;
receiving, via the management server, an identity verification request transmitted from the authentication server;
acquiring, in response to the request for identity verification, a photograph of the user's appearance taken by a camera using a predetermined application as the identification photograph data;
transmitting the acquired ID photo data to the authentication server via the management server;
acquiring the profile generated by the management server in response to a successful notification of the identity verification by the authentication server and storing the profile in the electronic information storage medium;
A profile acquisition method comprising:

Images