A method performed by a system including a terminal and a profile providing server, the method comprising: transmitting, by the terminal, to a profile providing server, a first message including a universal integrated circuit card, UICC, challenge; transmitting, by the profile providing server, to the terminal, a second message including a profile providing server challenge and a first signature associated with the profile providing server which is computed for the UICC challenge and the profile providing server challenge using a private key of the profile providing server; verifying, by the terminal, the first signature associated with the profile providing server; in case that the first signature associated with the profile providing server is successfully verified, transmitting, by the terminal, to the profile providing server, a third message including a second signature of a UICC of the terminal and profile mapping information, wherein the second signature of the UICC is computed based on data including the profile providing server challenge and the profile mapping information; retrieving, by the profile providing server, a profile for the terminal based on the profile mapping information; transmitting, by the profile providing server, to the terminal, a fourth message including profile metadata of a profile verified based on the profile mapping information and a third signature of the profile providing server, the metadata including an integrated circuit card ID, ICCID, and an operator name; displaying the profile metadata on a display unit of the terminal; determining, by the terminal, whether a user's input indicating the user's consent to download the profile from the profile providing server is obtained; in case that the user's input is obtained, transmitting, by the terminal, to the profile providing server, a fifth message for requesting a profile package including the profile; binding, by the profile providing server, the profile to the terminal in response to the fifth message such that the profile bound cannot be used by another terminal; transmitting, by the profile providing server, to the terminal, a sixth message including an encrypted profile package including the profile bound; and decrypting, by the terminal, the encrypted profile package and installing the decrypted profile package. transmitting, by the terminal, to a profile providing server, a first message including a universal integrated circuit card, UICC, challenge; transmitting, by the profile providing server, to the terminal, a second message including a profile providing server challenge and a first signature associated with the profile providing server which is computed for the UICC challenge and the profile providing server challenge using a private key of the profile providing server; verifying, by the terminal, the first signature associated with the profile providing server; in case that the first signature associated with the profile providing server is successfully verified, transmitting, by the terminal, to the profile providing server, a third message including a second signature of a UICC of the terminal and profile mapping information, wherein the second signature of the UICC is computed based on data including the profile providing server challenge and the profile mapping information; retrieving, by the profile providing server, a profile for the terminal based on the profile mapping information; transmitting, by the profile providing server, to the terminal, a fourth message including profile metadata of a profile verified based on the profile mapping information and a third signature of the profile providing server, the metadata including an integrated circuit card ID, ICCID, and an operator name; displaying the profile metadata on a display unit of the terminal; determining, by the terminal, whether a user's input indicating the user's consent to download the profile from the profile providing server is obtained; in case that the user's input is obtained, transmitting, by the terminal, to the profile providing server, a fifth message for requesting a profile package including the profile; binding, by the profile providing server, the profile to the terminal in response to the fifth message such that the profile bound cannot be used by another terminal; transmitting, by the profile providing server, to the terminal, a sixth message including an encrypted profile package including the profile bound; and decrypting, by the terminal, the encrypted profile package and installing the decrypted profile package.