CN104717646A - Mobile network access method, mobile network access device and mobile network access system - Google Patents

Mobile network access method, mobile network access device and mobile network access system Download PDF

Info

Publication number
CN104717646A
CN104717646A CN201310676311.5A CN201310676311A CN104717646A CN 104717646 A CN104717646 A CN 104717646A CN 201310676311 A CN201310676311 A CN 201310676311A CN 104717646 A CN104717646 A CN 104717646A
Authority
CN
China
Prior art keywords
interim
imsi
key
sim card
mobile terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201310676311.5A
Other languages
Chinese (zh)
Other versions
CN104717646B (en
Inventor
李伟强
李冀
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201310676311.5A priority Critical patent/CN104717646B/en
Publication of CN104717646A publication Critical patent/CN104717646A/en
Application granted granted Critical
Publication of CN104717646B publication Critical patent/CN104717646B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/08—Access restriction or access information delivery, e.g. discovery data delivery

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephone Function (AREA)

Abstract

The invention discloses a mobile network access method, a mobile network access device and a mobile network access system. The method comprises the following steps: an SIM card of a mobile terminal receives a mobile terminal number input by a user; the SIM card sends the mobile terminal number to a service platform, which then generates a temporary IMSI and a temporary Ki key corresponding to the mobile terminal number; the SIM card receives the temporary IMSI and the temporary Ki key returned by the service platform, the temporary IMSI and the temporary Ki key are stored in the SIM card, and the SIM card is accessed to a mobile network through the temporary IMSI and the temporary Ki key. According to the embodiment of the invention, the SIM card sends the mobile terminal number to the service platform, the service platform authenticates the mobile terminal number, and the service platform generates the temporary IMSI and the temporary Ki key of the mobile terminal number after success of authentication, so that the SIM card can be accessed to the mobile network based on the temporary IMSI and the temporary Ki key, a user is enabled to be accessed to the mobile network with the use of any SIM card, and the user experience is improved.

Description

The cut-in method of a kind of mobile network, equipment and system
Technical field
The present invention relates to communication technical field, particularly relate to the cut-in method of a kind of mobile network, equipment and system.
Background technology
At present, mobile terminal has mobile terminal number and IMSI(International Mobile SubscriberIdentification Number, international mobile subscriber identity), mobile terminal number and IMSI one_to_one corresponding.The IMSI of mobile terminal for identifying the identity of mobile terminal, and is stored in SIM(Subscriber IdentityModule, client identification module) in card, and realize access authentication by the Ki key in SIM card.
In prior art, can at HLR(Home Location Register, attaching position register) in the corresponding relation of memory mobile terminal number and IMSI, and user is for the related service of mobile terminal number, all need by IMSI access to mobile network corresponding to this mobile terminal number, i.e. IMSI and the Ki key access to mobile network of mobile terminal by storing in SIM card.But, because IMSI and the Ki key stored in SIM card cannot change, thus cause user cannot use arbitrary SIM card access to mobile network.
Summary of the invention
The embodiment of the present invention provides the cut-in method of a kind of mobile network, equipment and system, to make user that arbitrary SIM card can be used to be linked into mobile network, thus improves user's use sense and is subject to.
In order to achieve the above object, the embodiment of the present invention provides the cut-in method of a kind of mobile network, said method comprising the steps of: the client identification module SIM card of mobile terminal receives the mobile terminal number of user's input; Described mobile terminal number is sent to business platform by described SIM card, generates interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key by described business platform; Described SIM card receives the described interim IMSI and described interim Ki key that described business platform returns, and in described SIM card, store described interim IMSI and described interim Ki key; Described SIM card is by described interim IMSI and described interim Ki key access to mobile network.
Described SIM card is by the process of described interim IMSI and described interim Ki key access to mobile network, specifically comprise: effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI by described SIM card, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network.
Described SIM card is by after described interim IMSI and described interim Ki key access to mobile network, described method also comprises: described SIM card is when receiving the notice of the interim IMSI of cancellation of user's input, described mobile terminal number and described interim IMSI are sent to described business platform, nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key by described business platform; Described SIM card receives the described interim IMSI that described business platform returns and is canceled successful notice, and in described SIM card, delete described interim IMSI and described interim Ki key; Described SIM card is by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
Described SIM card is specifically comprised by the intrinsic IMSI of described SIM card and the process of intrinsic Ki key access to mobile network: effective IMSI of described SIM card is switched to described intrinsic IMSI from described interim IMSI by described SIM card, and effective Ki key of described SIM card is switched to described intrinsic Ki key from described interim Ki key, and by described intrinsic IMSI and described intrinsic Ki key access to mobile network.
The embodiment of the present invention provides the cut-in method of a kind of mobile network, said method comprising the steps of: business platform receives the mobile terminal number from the client identification module SIM card of mobile terminal; Described business platform carries out authentication to described mobile terminal number, and in authentication by afterwards, generates interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key; Described interim IMSI and described interim Ki key are sent to described SIM card by described business platform, in described SIM card, described interim IMSI and described interim Ki key is stored by described SIM card, and by described interim IMSI and described interim Ki key access to mobile network.
After described business platform generates interim IMSI corresponding to described mobile terminal number and interim Ki key, described method also comprises: described business platform, by the corresponding relation between the described mobile terminal number that records in HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, is updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, described interim Ki key.
After described business platform generates interim IMSI corresponding to described mobile terminal number and interim Ki key, described method also comprises: described business platform is after receiving from the described mobile terminal number of described SIM card and described interim IMSI, authentication is carried out to described mobile terminal number, and in authentication by afterwards, nullify described interim IMSI corresponding to described mobile terminal number and described interim Ki key; Described interim IMSI is canceled successful message notice to described SIM card by described business platform, in described SIM card, described interim IMSI and described interim Ki key is deleted by described SIM card, and by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
After described business platform nullifies interim IMSI corresponding to mobile terminal number and interim Ki key, described method also comprises: described business platform, by the corresponding relation between the described mobile terminal number that records in HLR and the described interim IMSI of described SIM card, described interim Ki key, is updated to the corresponding relation between the described intrinsic IMSI of described mobile terminal number and described SIM card, described intrinsic Ki key.
The embodiment of the present invention provides a kind of client identification module SIM card of mobile terminal, this SIM card comprises: STK authentication application module, for receiving the mobile terminal number of user's input, and described mobile terminal number is sent to business platform, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key by described business platform; And, receive described interim IMSI and described interim Ki key that described business platform returns; Write card module, for storing described interim IMSI and described interim Ki key in described SIM card; Access module, for passing through described interim IMSI and described interim Ki key access to mobile network.
Described access module, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network.
Described STK authentication application module, also for when receiving the notice of the interim IMSI of cancellation of user's input, described mobile terminal number and described interim IMSI are sent to described business platform, nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key by described business platform; And, receive the described interim IMSI that described business platform returns and be canceled successful notice; Describedly write card module, also for deleting described interim IMSI and interim Ki key on the sim card; Described access module, also for passing through intrinsic IMSI and intrinsic Ki key access to mobile network.
Described access module, specifically for effective IMSI of described SIM card is switched to described intrinsic IMSI from described interim IMSI, and effective Ki key of described SIM card is switched to described intrinsic Ki key from described interim Ki key, and by described intrinsic IMSI and described intrinsic Ki key access to mobile network.
The embodiment of the present invention provides a kind of business platform, and described business platform specifically comprises: subscription authentication module, for receiving the mobile terminal number of the client identification module SIM card from mobile terminal, and carries out authentication to described mobile terminal number; User identity management module, for after authentication is passed through, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI and described interim Ki key are sent to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is stored by described SIM card, and by described interim IMSI and described interim Ki key access to mobile network.
Also comprise: HLR update module, for the corresponding relation between the described mobile terminal number that will record in HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, interim Ki key.
Described subscription authentication module, also for after receiving from the described mobile terminal number of described SIM card and described interim IMSI, carries out authentication to described mobile terminal number; Described user identity management module, also for after authentication is passed through, nullify described interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI is canceled successful message notice to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is deleted by SIM card, and by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
Also comprise: HLR update module, for the corresponding relation between the described mobile terminal number that will record in HLR and the described interim IMSI of described SIM card, described interim Ki key, be updated to the corresponding relation between the described intrinsic IMSI of described mobile terminal number and described SIM card, described intrinsic Ki key.
The embodiment of the present invention provides the connecting system of a kind of mobile network, and the connecting system of described mobile network specifically comprises client identification module SIM card and the business platform of mobile terminal; Wherein:
Described SIM card, for receiving the mobile terminal number of user's input, described mobile terminal number is sent to business platform, and receive the interim international mobile subscriber identity IMSI and interim Ki key that described business platform returns, and in described SIM card, store described interim IMSI and described interim Ki key; And, by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, for receiving the mobile terminal number from SIM card, authentication is carried out to described mobile terminal number, and after authentication is passed through, generate interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI and described interim Ki key are sent to described SIM card.
Described SIM card, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, specifically for the corresponding relation between the mobile terminal number that will record in attaching position register HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, described interim Ki key.
Compared with prior art, the embodiment of the present invention at least has the following advantages: in the embodiment of the present invention, SIM card is by sending to business platform by mobile terminal number, by business platform, authentication is carried out to mobile terminal number, and in authentication by afterwards, generate the interim IMSI of this mobile terminal number and interim Ki key, thus enable SIM card based on this interim IMSI and interim Ki key access to mobile network, and make user that arbitrary SIM card can be used to be linked into mobile network, and user's use sense can be improved be subject to.
Accompanying drawing explanation
In order to be illustrated more clearly in technical scheme of the present invention, below the accompanying drawing used required in describing embodiment is briefly described, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
Fig. 1 is the cut-in method schematic flow sheet of a kind of mobile network that the embodiment of the present invention one provides;
Fig. 2 is the cut-in method schematic flow sheet of a kind of mobile network that the embodiment of the present invention two provides;
Fig. 3 is the structural representation of a kind of SIM card that the embodiment of the present invention three provides;
Fig. 4 is the structural representation of a kind of business platform that the embodiment of the present invention four provides;
Fig. 5 is the cut-in method schematic flow sheet of a kind of mobile network that the embodiment of the present invention five provides;
Fig. 6 is the cut-in method schematic flow sheet of a kind of mobile network that the embodiment of the present invention six provides.
Embodiment
Below in conjunction with the accompanying drawing in the present invention, be clearly and completely described the technical scheme in the present invention, obviously, described embodiment is only a part of embodiment of the present invention, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making the every other embodiment obtained under creative work prerequisite, belong to the scope of protection of the invention.
Embodiment one
The embodiment of the present invention one provides the cut-in method of a kind of mobile network, and the method is the register flow path of interim IMSI, and as shown in Figure 1, the cut-in method of this mobile network can comprise the following steps:
Step 101, the SIM card of mobile terminal receives the mobile terminal number of user's input.
In a particular application, the SIM card of mobile terminal can also receive the service password of user's input.
Step 102, mobile terminal number is sent to business platform by the SIM card of mobile terminal.
In a particular application, service password can also be sent to business platform by the SIM card of mobile terminal.
In the embodiment of the present invention, the SIM card of mobile terminal is before sending to business platform by mobile terminal number and service password, the SIM card of mobile terminal can also be encrypted mobile terminal number and service password, and the mobile terminal number after encryption and service password are sent to business platform.
Step 103, business platform is after receiving the mobile terminal number from the SIM card of mobile terminal, authentication is carried out to this mobile terminal number, and passes through afterwards in the authentication of this mobile terminal number, generate interim IMSI corresponding to this mobile terminal number and interim Ki key by business platform.
Wherein, business platform is after receiving the mobile terminal number from the SIM card of mobile terminal, know that the SIM card current request of mobile terminal uses interim IMSI access to mobile network, therefore, business platform directly carries out authentication to this mobile terminal number, and pass through afterwards in the authentication of this mobile terminal number, generate interim IMSI corresponding to this mobile terminal number and interim Ki key by business platform.
In a particular application, business platform can also receive the service password of the SIM card from mobile terminal, and is mobile terminal number after encryption and service password from the service password of SIM card and mobile terminal number.Based on this, business platform also needs the mobile terminal number after to encryption and service password to be decrypted process, and carry out authentication process according to from the service password of SIM card and mobile terminal number, after authentication is passed through, business platform generates interim IMSI corresponding to mobile terminal number and interim Ki key.
In the embodiment of the present invention, after business platform generates interim IMSI corresponding to mobile terminal number and interim Ki key, business platform also needs, by the corresponding relation between the mobile terminal number that records in HLR and the intrinsic IMSI of SIM card, intrinsic Ki key, to be updated to the corresponding relation between the interim IMSI of mobile terminal number and SIM card, interim Ki key.Wherein, the intrinsic IMSI of SIM card and intrinsic Ki key are SIM card IMSI and the Ki key pre-configured when dispatching from the factory.
Step 104, interim IMSI and interim Ki key are sent to SIM card by business platform.
In the embodiment of the present invention, before interim IMSI and interim Ki key are sent to the SIM card of mobile terminal by business platform, business platform can also be encrypted interim IMSI and interim Ki key, and the interim IMSI after encryption and interim Ki key are sent to the SIM card of mobile terminal.
Step 105, the SIM card of mobile terminal receives the interim IMSI and interim Ki key that business platform returns, and in this SIM card, store interim IMSI and interim Ki key.Wherein, the SIM card of mobile terminal stores the SIM card intrinsic IMSI pre-configured when dispatching from the factory and intrinsic Ki key, on this basis, SIM card, after receiving the interim IMSI and interim Ki key that business platform returns, can store interim IMSI and interim Ki key in the interim IMSI/Ki key storage district of this SIM card.
In a particular application, the interim IMSI that returns of business platform and interim Ki key can also be the interim IMSI after encryption and interim Ki key.Based on this, the SIM card of mobile terminal also needs the interim IMSI after to encryption and interim Ki key to be decrypted process, and after decryption processing completes, in the interim IMSI/Ki key storage district of this SIM card, stores interim IMSI and interim Ki key.
Step 106, the SIM card of mobile terminal by interim IMSI and interim Ki key access to mobile network, and notifies the interim IMSI of the current use of user's SIM card and interim Ki key access to mobile network.
In embodiments of the present invention, SIM card is by the process of interim IMSI and interim Ki key access to mobile network, specifically include but not limited to: effective IMSI of SIM card is switched to interim IMSI from intrinsic IMSI by SIM card, and effective Ki key of SIM card is switched to interim Ki key from intrinsic Ki key, afterwards, the SIM card of mobile terminal can pass through interim IMSI and interim Ki key access to mobile network.
In sum, in the embodiment of the present invention, SIM card is by sending to business platform by mobile terminal number, by business platform, authentication is carried out to mobile terminal number, and in authentication by afterwards, generate the interim IMSI of this mobile terminal number and interim Ki key, thus enable SIM card based on this interim IMSI and interim Ki key access to mobile network, and make user that arbitrary SIM card can be used to be linked into mobile network, and user's use sense can be improved be subject to.Further, aforesaid way provides and irreplaceablely carries mobile terminal number function, and it is transformed based on existing mobile network's system, protect the investment of operator to mobile network, and Consumer's Experience is better.Aforesaid way is encrypted the interim IMSI dynamically issued and interim Ki key by the encryption technology of mobile network, ensures the fail safe of system.
Embodiment two
The embodiment of the present invention two provides the cut-in method of a kind of mobile network, and the method is the logout flow path of interim IMSI, and as shown in Figure 2, the cut-in method of this mobile network can comprise the following steps:
Step 201, the SIM card of mobile terminal receives the notice of the interim IMSI of cancellation of user's input.
Wherein, the SIM card of mobile terminal provides the function of nullifying interim IMSI, in the function of user based on the interim IMSI of this cancellation, when the notice of interim IMSI is nullified in SIM card input to mobile terminal, input is also needed the mobile terminal number that the interim IMSI of cancellation is corresponding by user, the mobile terminal number that the interim IMSI nullified by the needs of the SIM card reception user input of mobile terminal is corresponding.
In a particular application, user can also input the service password needing the interim IMSI of cancellation corresponding, is received the service password that the interim IMSI of the needs cancellation of user's input is corresponding by the SIM card of mobile terminal.
Step 202, mobile terminal number and the corresponding interim IMSI of this mobile terminal number, when receiving the notice of the interim IMSI of cancellation of user's input, are sent to business platform by the SIM card of mobile terminal.
In a particular application, service password can also be sent to business platform by the SIM card of mobile terminal.
In the embodiment of the present invention, the SIM card of mobile terminal is before sending to business platform by mobile terminal number, service password, the corresponding interim IMSI of mobile terminal number, SIM card can also be encrypted mobile terminal number, service password, the corresponding interim IMSI of mobile terminal number, and the mobile terminal number after encryption, service password, the corresponding interim IMSI of mobile terminal number are sent to business platform.
Step 203, business platform is after receiving from the mobile terminal number of the SIM card of mobile terminal and interim IMSI, authentication is carried out to mobile terminal number, and pass through afterwards in the authentication of this mobile terminal number, nullify interim IMSI corresponding to mobile terminal number and interim Ki key by business platform.
Wherein, business platform is after receiving from the mobile terminal number of the SIM card of mobile terminal and interim IMSI, know that the SIM card current request of mobile terminal nullifies interim IMSI, therefore, business platform directly carries out authentication to this mobile terminal number, and pass through afterwards in the authentication of this mobile terminal number, directly nullify interim IMSI corresponding to mobile terminal number and interim Ki key by business platform.
In a particular application, business platform can also receive the service password of the SIM card from mobile terminal, and is service password, mobile terminal number and the interim IMSI after encryption from the service password of SIM card, mobile terminal number and interim IMSI.Based on this, business platform also needs the service password after to encryption, mobile terminal number and interim IMSI to be decrypted process, and carries out authentication process according to from the service password of SIM card and mobile terminal number.Further, in authentication by afterwards, business platform can nullify interim IMSI corresponding to mobile terminal number and interim Ki key.
In the embodiment of the present invention, after business platform nullifies interim IMSI corresponding to mobile terminal number and interim Ki key, business platform also needs, by the corresponding relation between the mobile terminal number that records in HLR and the interim IMSI of SIM card, interim Ki key, to be updated to the corresponding relation between the intrinsic IMSI of mobile terminal number and SIM card, intrinsic Ki key.Wherein, the intrinsic IMSI of SIM card and intrinsic Ki key are SIM card IMSI and the Ki key pre-configured when dispatching from the factory.
Step 204, interim IMSI is canceled successful message notice to SIM card by business platform.
Step 205, the interim IMSI that the SIM card reception business platform of mobile terminal returns is canceled successful notice, and deletes interim IMSI and interim Ki key on the sim card.Wherein, SIM card can delete interim IMSI and interim Ki key in the interim IMSI/Ki key storage district of this SIM card.
Step 206, the SIM card of mobile terminal passes through the intrinsic IMSI of this SIM card and intrinsic Ki key access to mobile network, and notifies that the interim IMSI of user is canceled successfully.
In embodiments of the present invention, SIM card is by the intrinsic IMSI of SIM card and the process of intrinsic Ki key access to mobile network, specifically include but not limited to: effective IMSI of SIM card is switched to intrinsic IMSI from interim IMSI by SIM card, and effective Ki key of SIM card is switched to intrinsic Ki key from interim Ki key, and by intrinsic IMSI and intrinsic Ki key access to mobile network.
Embodiment three
Based on the inventive concept same with said method, additionally provide a kind of client identification module SIM card of mobile terminal in the embodiment of the present invention three, as shown in Figure 3, this SIM card specifically comprises:
STK authentication application module 11, for receiving the mobile terminal number of user's input, and described mobile terminal number is sent to business platform, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key by described business platform afterwards; Further, STK authentication application module 11 receives the described interim IMSI and described interim Ki key that described business platform returns; Write card module 12, for storing described interim IMSI and described interim Ki key in described SIM card; Access module 13, for passing through described interim IMSI and described interim Ki key access to mobile network.
Wherein, described access module 13, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network.
In the embodiment of the present invention, described STK authentication application module 11, also for when receiving the notice of the interim IMSI of cancellation of user's input, described mobile terminal number and described interim IMSI are sent to described business platform, nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key by described business platform; And the described interim IMSI that reception business platform returns is canceled successful notice; Describedly write card module 12, also for deleting described interim IMSI and interim Ki key on the sim card; Described access module 13, also for passing through intrinsic IMSI and intrinsic Ki key access to mobile network.
Described access module 13, specifically for effective IMSI of SIM card is switched to described intrinsic IMSI from described interim IMSI, and effective Ki key of described SIM card is switched to described intrinsic Ki key from described interim Ki key, and by described intrinsic IMSI and described intrinsic Ki key access to mobile network.
In the embodiment of the present invention, in this SIM card, encrypting module can also be comprised, and this encrypting module is specifically for ensureing the fail safe of information mutual between SIM card and business platform, does not repeat them here.
Wherein, the modules of apparatus of the present invention can be integrated in one, and also can be separated deployment.Above-mentioned module can merge into a module, also can split into multiple submodule further.
Embodiment four
Based on the inventive concept same with said method, additionally provide a kind of business platform in the embodiment of the present invention four, as shown in Figure 4, described business platform specifically comprises:
Subscription authentication module 21, for receiving the mobile terminal number of the client identification module SIM card from mobile terminal, and carries out authentication to described mobile terminal number; User identity management module 22, for after authentication is passed through, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key, and described interim IMSI and described interim Ki key are sent to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is stored afterwards by described SIM card, and by described interim IMSI and described interim Ki key access to mobile network.
This business platform also comprises: HLR update module 23, for the corresponding relation between the mobile terminal number that will record in HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, interim Ki key.
In the embodiment of the present invention, described subscription authentication module 21, also for after receiving from the described mobile terminal number of SIM card and described interim IMSI, carries out authentication to described mobile terminal number; Described user identity management module 22, also for after authentication is passed through, nullify described interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI is canceled successful message notice to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is deleted by SIM card, and by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
HLR update module 23, also for the corresponding relation between the described mobile terminal number that will record in HLR and the described interim IMSI of described SIM card, described interim Ki key, be updated to the corresponding relation between the described intrinsic IMSI of described mobile terminal number and described SIM card, described intrinsic Ki key.
Wherein, the modules of apparatus of the present invention can be integrated in one, and also can be separated deployment.Above-mentioned module can merge into a module, also can split into multiple submodule further.
Embodiment five
The embodiment of the present invention five provides the cut-in method of a kind of mobile network, and the method is the register flow path of interim IMSI, and as shown in Figure 5, the cut-in method of this mobile network can comprise the following steps:
The STK authentication application module (providing STK menu to input mobile terminal number and service password for user) of the SIM card of mobile terminal receives mobile terminal number and the service password of user's input.
Mobile terminal number and service password are sent to the encrypting module of SIM card by STK authentication application module, are encrypted mobile terminal number and service password by encrypting module.
Mobile terminal number and service password after STK authentication application module reception encryption.
Mobile terminal number after encryption and service password are sent to the subscription authentication module of business platform by STK authentication application module, carry out authentication by subscription authentication module to mobile terminal number.
Pass through afterwards in the authentication of this mobile terminal number, the user identity management module of subscription authentication module application business platform is that mobile terminal number distributes interim IMSI and interim Ki key.
User identity management module is that mobile terminal number distributes interim IMSI and interim Ki key, by interim IMSI and interim Ki key notification to subscription authentication module, the corresponding relation between the mobile terminal number recorded in HLR and the intrinsic IMSI of SIM card, intrinsic Ki key is updated to the corresponding relation between the interim IMSI of mobile terminal number and SIM card, interim Ki key by notice HLR update module.
Subscription authentication module is encrypted interim IMSI and interim Ki key, and returns the interim IMSI after encryption and interim Ki key to STK authentication application module.
Interim IMSI after encryption and interim Ki key are sent to encrypting module by STK authentication application module, are decrypted process by encrypting module to interim IMSI and interim Ki key.
The interim IMSI of STK authentication application module receiving and deciphering process and interim Ki key.
What interim IMSI and interim Ki key were sent to SIM card by STK authentication application module writes card module, stores interim IMSI and interim Ki key on the sim card by writing card module.
Further, interim IMSI and interim Ki key are sent to the access module of SIM card by STK authentication application module, use interim IMSI and interim Ki key access to mobile network by access module.
Further, STK authentication application module notifies that user's SIM card succeeds in registration in a mobile network with interim IMSI and interim Ki key, the interim IMSI of current use and interim Ki key access to mobile network.
Embodiment six
The embodiment of the present invention six provides the cut-in method of a kind of mobile network, and the method is the logout flow path of interim IMSI, and as shown in Figure 6, the cut-in method of this mobile network can comprise the following steps:
The STK authentication application module (providing STK menu to input mobile terminal number and service password for user) of the SIM card of mobile terminal receives mobile terminal number and the service password of user's input.
Interim IMSI corresponding to mobile terminal number, service password and mobile terminal number is sent to the encrypting module of SIM card by STK authentication application module, and the interim IMSI corresponding to mobile terminal number, service password and mobile terminal number by encrypting module is encrypted.
The interim IMSI that mobile terminal number, service password and mobile terminal number after the encryption that STK authentication application module reception encrypting module returns are corresponding.
Interim IMSI corresponding to mobile terminal number after encryption, service password and mobile terminal number is sent to the subscription authentication module of business platform by STK authentication application module, request subscription authentication module nullifies this interim IMSI, and carries out authentication by subscription authentication module to mobile terminal number.
Pass through afterwards in the authentication of mobile terminal number, the user identity management module of subscription authentication module application business platform nullifies interim IMSI corresponding to this mobile terminal number and interim Ki key.
User identity management module nullifies interim IMSI corresponding to mobile terminal number and interim Ki key, interim IMSI is canceled successful message notice subscription authentication module, the mobile terminal number recorded in HLR and the interim IMSI of SIM card, the corresponding relation of interim Ki key are updated to the intrinsic IMSI of mobile terminal number and SIM card, the corresponding relation of intrinsic Ki key by notice HLR update module.
Interim IMSI, after receiving interim IMSI and being canceled successful information, is canceled successful message notice to STK authentication application module by subscription authentication module.
STK authentication application module notice is write card module and is deleted interim IMSI and interim Ki key on the sim card, deletes interim IMSI and interim Ki key on the sim card by writing card module.
Further, interim IMSI and the deleted information of interim Ki key are sent to access module by STK authentication application module, use intrinsic IMSI and intrinsic Ki key access to mobile network by access module.
Further, STK authentication application module notifies that the interim IMSI of user is canceled successfully.
Embodiment seven
Based on the inventive concept same with said method, additionally provide the connecting system of a kind of mobile network in the embodiment of the present invention seven, the connecting system of described mobile network specifically comprises client identification module SIM card and the business platform of mobile terminal; Wherein:
Described SIM card, for receiving the mobile terminal number of user's input, described mobile terminal number is sent to business platform, and receive the interim international mobile subscriber identity IMSI and interim Ki key that described business platform returns, and in described SIM card, store described interim IMSI and described interim Ki key; And, by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, for receiving the mobile terminal number from SIM card, authentication is carried out to described mobile terminal number, and after authentication is passed through, generate interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI and described interim Ki key are sent to described SIM card.
Described SIM card, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, specifically for the corresponding relation between the mobile terminal number that will record in attaching position register HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, described interim Ki key.
Through the above description of the embodiments, those skilled in the art can be well understood to the mode that the present invention can add required general hardware platform by software and realize, and can certainly pass through hardware, but in a lot of situation, the former is better execution mode.Based on such understanding, technical scheme of the present invention can embody with the form of software product the part that prior art contributes in essence in other words, this computer software product is stored in a storage medium, comprising some instructions in order to make a computer equipment (can be personal computer, server, or the network equipment etc.) perform method described in each embodiment of the present invention.
It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the module in accompanying drawing or flow process might not be that enforcement the present invention is necessary.
It will be appreciated by those skilled in the art that the module in the device in embodiment can carry out being distributed in the device of embodiment according to embodiment description, also can carry out respective change and be arranged in the one or more devices being different from the present embodiment.The module of above-described embodiment can merge into a module, also can split into multiple submodule further.
The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.
Be only several specific embodiment of the present invention above, but the present invention is not limited thereto, the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.

Claims (18)

1. a mobile network's cut-in method, is characterized in that, said method comprising the steps of:
The client identification module SIM card of mobile terminal receives the mobile terminal number of user's input;
Described mobile terminal number is sent to business platform by described SIM card, generates interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key by described business platform;
Described SIM card receives the described interim IMSI and described interim Ki key that described business platform returns, and in described SIM card, store described interim IMSI and described interim Ki key;
Described SIM card is by described interim IMSI and described interim Ki key access to mobile network.
2. the method for claim 1, is characterized in that, described SIM card, by the process of described interim IMSI and described interim Ki key access to mobile network, specifically comprises:
Effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI by described SIM card, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network.
3. the method for claim 1, is characterized in that, described SIM card is by after described interim IMSI and described interim Ki key access to mobile network, and described method also comprises:
Described SIM card is when receiving the notice of the interim IMSI of cancellation of user's input, described mobile terminal number and described interim IMSI are sent to described business platform, nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key by described business platform;
Described SIM card receives the described interim IMSI that described business platform returns and is canceled successful notice, and in described SIM card, delete described interim IMSI and described interim Ki key;
Described SIM card is by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
4. method as claimed in claim 3, it is characterized in that, the intrinsic IMSI of described SIM card by described SIM card and the process of intrinsic Ki key access to mobile network, specifically comprise:
Effective IMSI of described SIM card is switched to described intrinsic IMSI from described interim IMSI by described SIM card, and effective Ki key of described SIM card is switched to described intrinsic Ki key from described interim Ki key, and by described intrinsic IMSI and described intrinsic Ki key access to mobile network.
5. a mobile network's cut-in method, is characterized in that, said method comprising the steps of:
Business platform receives the mobile terminal number from the client identification module SIM card of mobile terminal;
Described business platform carries out authentication to described mobile terminal number, and in authentication by afterwards, generates interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key;
Described interim IMSI and described interim Ki key are sent to described SIM card by described business platform, in described SIM card, described interim IMSI and described interim Ki key is stored by described SIM card, and by described interim IMSI and described interim Ki key access to mobile network.
6. method as claimed in claim 5, it is characterized in that, after described business platform generates interim IMSI corresponding to described mobile terminal number and interim Ki key, described method also comprises:
Described business platform, by the corresponding relation between the described mobile terminal number that records in attaching position register HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, is updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, described interim Ki key.
7. method as claimed in claim 5, it is characterized in that, after described business platform generates interim IMSI corresponding to described mobile terminal number and interim Ki key, described method also comprises:
Described business platform is after receiving from the described mobile terminal number of described SIM card and described interim IMSI, authentication is carried out to described mobile terminal number, and in authentication by afterwards, nullify described interim IMSI corresponding to described mobile terminal number and described interim Ki key;
Described interim IMSI is canceled successful message notice to described SIM card by described business platform, in described SIM card, described interim IMSI and described interim Ki key is deleted by described SIM card, and by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
8. method as claimed in claim 7, it is characterized in that, after described business platform nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key, described method also comprises:
Described business platform, by the corresponding relation between the described mobile terminal number that records in HLR and the described interim IMSI of described SIM card, described interim Ki key, is updated to the corresponding relation between the described intrinsic IMSI of described mobile terminal number and described SIM card, described intrinsic Ki key.
9. a client identification module SIM card for mobile terminal, is characterized in that, this SIM card comprises:
STK authentication application module, for receiving the mobile terminal number of user's input, and described mobile terminal number is sent to business platform, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key by described business platform; And, receive described interim IMSI and described interim Ki key that described business platform returns;
Write card module, for storing described interim IMSI and described interim Ki key in described SIM card;
Access module, for passing through described interim IMSI and described interim Ki key access to mobile network.
10. SIM card as claimed in claim 9, is characterized in that,
Described access module, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network.
11. SIM card as claimed in claim 9, is characterized in that,
Described STK authentication application module, also for when receiving the notice of the interim IMSI of cancellation of user's input, described mobile terminal number and described interim IMSI are sent to described business platform, nullifies described interim IMSI corresponding to described mobile terminal number and described interim Ki key by described business platform; And, receive the described interim IMSI that described business platform returns and be canceled successful notice;
Describedly write card module, also for deleting described interim IMSI and interim Ki key on the sim card;
Described access module, also for passing through intrinsic IMSI and intrinsic Ki key access to mobile network.
12. SIM card as claimed in claim 11, is characterized in that,
Described access module, specifically for effective IMSI of described SIM card is switched to described intrinsic IMSI from described interim IMSI, and effective Ki key of described SIM card is switched to described intrinsic Ki key from described interim Ki key, and by described intrinsic IMSI and described intrinsic Ki key access to mobile network.
13. 1 kinds of business platforms, is characterized in that, described business platform specifically comprises:
Subscription authentication module, for receiving the mobile terminal number of the client identification module SIM card from mobile terminal, and carries out authentication to described mobile terminal number;
User identity management module, for after authentication is passed through, generate interim international mobile subscriber identity IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI and described interim Ki key are sent to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is stored by described SIM card, and by described interim IMSI and described interim Ki key access to mobile network.
14. business platforms as claimed in claim 13, is characterized in that, also comprise:
Attaching position register HLR update module, for the corresponding relation between the described mobile terminal number that will record in HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, interim Ki key.
15. business platforms as claimed in claim 13, is characterized in that,
Described subscription authentication module, also for after receiving from the described mobile terminal number of described SIM card and described interim IMSI, carries out authentication to described mobile terminal number;
Described user identity management module, also for after authentication is passed through, nullify described interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI is canceled successful message notice to described SIM card, in described SIM card, described interim IMSI and described interim Ki key is deleted by SIM card, and by the intrinsic IMSI of described SIM card and intrinsic Ki key access to mobile network.
16. business platforms as claimed in claim 15, is characterized in that, also comprise:
HLR update module, for the corresponding relation between the described mobile terminal number that will record in HLR and the described interim IMSI of described SIM card, described interim Ki key, be updated to the corresponding relation between the described intrinsic IMSI of described mobile terminal number and described SIM card, described intrinsic Ki key.
The connecting system of 17. 1 kinds of mobile networks, is characterized in that, the connecting system of described mobile network specifically comprises client identification module SIM card and the business platform of mobile terminal; Wherein:
Described SIM card, for receiving the mobile terminal number of user's input, described mobile terminal number is sent to business platform, and receive the interim international mobile subscriber identity IMSI and interim Ki key that described business platform returns, and in described SIM card, store described interim IMSI and described interim Ki key; And, by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, for receiving the mobile terminal number from SIM card, authentication is carried out to described mobile terminal number, and after authentication is passed through, generate interim IMSI corresponding to described mobile terminal number and interim Ki key, described interim IMSI and described interim Ki key are sent to described SIM card.
18. systems as claimed in claim 17, is characterized in that,
Described SIM card, specifically for effective IMSI of described SIM card is switched to described interim IMSI from intrinsic IMSI, and effective Ki key of described SIM card is switched to described interim Ki key from intrinsic Ki key, and by described interim IMSI and described interim Ki key access to mobile network;
Described business platform, specifically for the corresponding relation between the mobile terminal number that will record in attaching position register HLR and the intrinsic IMSI of described SIM card, intrinsic Ki key, be updated to the corresponding relation between the described interim IMSI of described mobile terminal number and described SIM card, described interim Ki key.
CN201310676311.5A 2013-12-11 2013-12-11 A kind of cut-in method of mobile network, equipment and system Active CN104717646B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310676311.5A CN104717646B (en) 2013-12-11 2013-12-11 A kind of cut-in method of mobile network, equipment and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310676311.5A CN104717646B (en) 2013-12-11 2013-12-11 A kind of cut-in method of mobile network, equipment and system

Publications (2)

Publication Number Publication Date
CN104717646A true CN104717646A (en) 2015-06-17
CN104717646B CN104717646B (en) 2019-01-01

Family

ID=53416506

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310676311.5A Active CN104717646B (en) 2013-12-11 2013-12-11 A kind of cut-in method of mobile network, equipment and system

Country Status (1)

Country Link
CN (1) CN104717646B (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106707978A (en) * 2015-11-13 2017-05-24 北京奇虎科技有限公司 Method of transferring intelligent household control right through address book and the address book
CN109429226A (en) * 2017-09-05 2019-03-05 中国移动通信有限公司研究院 A kind of generation method, subscriber card, terminal and the network equipment of casual user's voucher

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1444414A (en) * 2002-03-12 2003-09-24 斯伦贝谢神码(北京)信息技术有限公司 User identification module card, method for activating user identification module card in sky and its system
CN102111268A (en) * 2009-12-28 2011-06-29 北京安码科技有限公司 Two-way authentication method of global system for mobile communications (GSM) network
CN102523578A (en) * 2011-12-09 2012-06-27 北京握奇数据系统有限公司 Over-the-air card writing method, apparatus and system
WO2013124194A1 (en) * 2012-02-24 2013-08-29 Alcatel Lucent Smart card initial personnalization

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1444414A (en) * 2002-03-12 2003-09-24 斯伦贝谢神码(北京)信息技术有限公司 User identification module card, method for activating user identification module card in sky and its system
CN102111268A (en) * 2009-12-28 2011-06-29 北京安码科技有限公司 Two-way authentication method of global system for mobile communications (GSM) network
CN102523578A (en) * 2011-12-09 2012-06-27 北京握奇数据系统有限公司 Over-the-air card writing method, apparatus and system
WO2013124194A1 (en) * 2012-02-24 2013-08-29 Alcatel Lucent Smart card initial personnalization

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106707978A (en) * 2015-11-13 2017-05-24 北京奇虎科技有限公司 Method of transferring intelligent household control right through address book and the address book
CN109429226A (en) * 2017-09-05 2019-03-05 中国移动通信有限公司研究院 A kind of generation method, subscriber card, terminal and the network equipment of casual user's voucher
CN109429226B (en) * 2017-09-05 2021-08-06 中国移动通信有限公司研究院 Temporary user certificate generation method, user card, terminal and network equipment

Also Published As

Publication number Publication date
CN104717646B (en) 2019-01-01

Similar Documents

Publication Publication Date Title
CN102917338B (en) Method for achieving SIM (subscriber identity module) card function on terminal, terminal and UICC (universal integrated circuit card)
CN105812332A (en) Data protection method
CN103249045A (en) Identification method, device and system
CN105227786A (en) A kind of means of communication based on virtual-number and device
CN104519480B (en) Communication control unit, authentication device, central controller and communication system
CN102883315A (en) Wireless fidelity (WiFi) authentication method and system, and terminal
CN105101183B (en) The method and system that privacy content on mobile terminal is protected
CN102761870B (en) Terminal authentication and service authentication method, system and terminal
CN106487518A (en) A kind of real-name authentication system and method for express delivery industry
CN204360381U (en) mobile device
CN105007577A (en) Virtual SIM card parameter management method, mobile terminal and server
CN102420836A (en) Sign-on method and sign-on management system for service information system
CN102867157B (en) Mobile terminal and data guard method
CN105813072A (en) Terminal authentication method, system and cloud server
CN104580170A (en) Data reading method and device
CN104955029A (en) Address book protection method, address book protection device and communication system
CN104717646A (en) Mobile network access method, mobile network access device and mobile network access system
CN102149079B (en) Method, device and system for obtaining user identity identifier
CN102404363B (en) A kind of access method and device
CN107509180A (en) A kind of method, storage device and the mobile terminal of automatic Encrypted short message
CN108123917A (en) A kind of newer method and apparatus of the Service Ticket of internet-of-things terminal
CN104270737B (en) The guard method of IMSI and device
CN104284327B (en) Replace the mthods, systems and devices of subscriber card
CN106161467A (en) Water utilities data access method and device
CN105654294A (en) Safety authentication method, apparatus and mobile terminal thereof

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant