CN109168156B - Method, system, medium, computer program product and server for implementing virtual SIM card - Google Patents

Method, system, medium, computer program product and server for implementing virtual SIM card Download PDF

Info

Publication number
CN109168156B
CN109168156B CN201811294546.7A CN201811294546A CN109168156B CN 109168156 B CN109168156 B CN 109168156B CN 201811294546 A CN201811294546 A CN 201811294546A CN 109168156 B CN109168156 B CN 109168156B
Authority
CN
China
Prior art keywords
sim card
virtual sim
authentication
server
msisdn
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201811294546.7A
Other languages
Chinese (zh)
Other versions
CN109168156A (en
Inventor
薛淼
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN201811294546.7A priority Critical patent/CN109168156B/en
Publication of CN109168156A publication Critical patent/CN109168156A/en
Application granted granted Critical
Publication of CN109168156B publication Critical patent/CN109168156B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/20—Transfer of user or subscriber data
    • H04W8/205—Transfer to or from user equipment or user record carrier
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/183—Processing at user equipment or user record carrier

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Power Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephone Function (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The embodiment of the invention discloses a method for realizing a virtual SIM card and a server, which can authenticate a network for providing service data for MSISDN of the virtual SIM card by using an intelligent contract algorithm, thereby ensuring the credible storage and the traceability of circulation of the data of the virtual SIM card. The method comprises the following steps: the proxy server receives an authentication calculation request sent by the mobile terminal; sending an authentication parameter request to the intelligent contract server according to the authentication calculation request; the intelligent contract server acquires an authentication key from the block chain account book according to the authentication parameter request; generating an access authentication parameter for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication secret key, and sending the access authentication parameter to the proxy server; the access authentication parameters comprise RES and a second sequence number SQN 2; the proxy server updates the SQN1 into the SQN2 and stores the SQN2 in a database, and transmits RES to the mobile terminal. The embodiment of the invention is applied to a communication system.

Description

Method, system, medium, computer program product and server for implementing virtual SIM card
Technical Field
The embodiment of the invention relates to the technical field of communication, in particular to a virtual SIM card realization method and a server.
Background
The SIM (Subscriber Identity Module) card is used as a unique Identity confirmation device for accessing the mobile communication network, and is used to indicate the legal Identity of the user to the network. The SIM card stores identification data, a key/encryption algorithm related to authentication, STK (Satellite Tool Kit) application data, and an SIM-handset interaction protocol. In the LTE (Long Term Evolution) phase, a USIM (Universal Subscriber Identity Module) card is commonly used by a mobile terminal to simultaneously access a 2G/3G/LTE network and an IMS (IP Multimedia Subsystem) network. When the USIM card is used for authentication to access the IMS, the mobile terminal cannot directly access the IMS network by using an SIM mode due to the limitation of an intelligent terminal operating system. When an operator opens voice and short message capabilities based on the IMS in an SDK (Software Development Kit) manner, how to flexibly acquire a mobile number and safely access to the operator IMS network becomes a major problem facing the opening of telecommunication capabilities of the operator.
In order to facilitate internet applications to use SIM card data and mobile number, virtual SIM technology has emerged. The virtual SIM technology omits an SIM card physical entity and stores SIM data in a cloud. However, authentication keys and the like in SIM card data are important assets for the operator, which is sensitive data. On one hand, the SIM card data use has strict safety management flow, the integrity and the safety of the key data are strictly protected, and the serious consequence of card copying is prevented; on the other hand, the records of the SIM card data used by the mobile terminal and the binding records are difficult to trace and audit.
Disclosure of Invention
Embodiments of the present invention provide a method and a server for implementing a virtual SIM card, which can authenticate a network providing service data for an MSISDN of the virtual SIM card by using an intelligent contract algorithm, thereby ensuring trusted storage and traceability of flow of data of the virtual SIM card.
In order to achieve the purpose, the invention adopts the following technical scheme:
in a first aspect, a method for implementing a virtual SIM card is provided, where the method includes: the proxy server receives an authentication calculation request sent by the mobile terminal, wherein the authentication calculation request carries the MSISDN, the authentication AUTH and the random number RAND of the virtual SIM card; the proxy server sends an authentication parameter request to the intelligent contract server according to the authentication calculation request, wherein the authentication parameter request carries MSISDN, AUTH, RAND and a first sequence number SQN1 of the virtual SIM card; the intelligent contract server acquires an authentication key from the block chain account book according to the authentication parameter request; the block chain account book stores MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card; the intelligent contract server uses a preset algorithm to generate access authentication parameters for using the virtual SIM card according to the authentication parameter request and the authentication secret key, and sends the access authentication parameters to the proxy server; the access authentication parameters comprise RES and a second sequence number SQN 2; and the proxy server updates the SQN1 into an SQN2 and stores the SQN2 in a database, and sends the RES to the mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the proxy server, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES.
In the method, a proxy server firstly receives an authentication calculation request sent by a mobile terminal, and then sends an authentication parameter request to an intelligent contract server according to the authentication calculation request; the intelligent contract server acquires an authentication key from the block chain account book according to the authentication parameter request; then, generating access authentication parameters for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication secret key, and sending the access authentication parameters to the proxy server; the access authentication parameters comprise RES and a second sequence number SQN 2; and the proxy server updates the SQN1 into an SQN2 and stores the SQN2 in a database, and sends the RES to the mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the proxy server, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES. The invention can authenticate the network providing service data for the MSISDN of the virtual SIM card by using the intelligent contract algorithm, thereby ensuring the credible storage and the traceability of circulation of the data of the virtual SIM card.
Optionally, the proxy server receives an authentication calculation request sent by the mobile terminal, and before the receiving, the method further includes: the method comprises the steps that an intelligent contract server receives a request for acquiring a virtual SIM card to-be-signed data list sent by a mobile terminal through an application server, wherein the virtual SIM card to-be-signed data list comprises an MSISDN list and a signing service list; the intelligent contract server calls a virtual SIM card to-be-signed data list of a block chain account book according to the virtual SIM card to-be-signed data list request, and sends the virtual SIM card to the mobile terminal through the application server; the mobile terminal determines the subscription data of the virtual SIM card according to the data list to be signed of the virtual SIM card, wherein the subscription data of the virtual SIM card comprises the MSISDN of the virtual SIM card and the subscription service corresponding to the MSISDN of the virtual SIM card; the intelligent contract server receives the subscription data of the virtual SIM card sent by the mobile terminal through the application server; and the intelligent contract server stores the signing data to the block chain account book.
Optionally, the intelligent contract server receives a request for acquiring a to-be-signed data list of the virtual SIM card sent by the mobile terminal through the application server, and the method further includes: the intelligent contract server receives at least one virtual SIM card data sent by an SIM card sending client, wherein the at least one virtual SIM card data comprises an MSISDN (Mobile station identifier) of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card, an account opening state and a signing service; and the intelligent contract server adds at least one virtual SIM card data into a data list to be signed of the virtual SIM card, stores the data list to a block chain account book and synchronizes the data list to a block chain state database.
Optionally, the proxy server receives an authentication calculation request sent by the mobile terminal, and before the receiving, the method further includes: a telecommunication network side server receives a registration request sent by a mobile terminal through a proxy server, wherein the registration request carries the MSISDN of a virtual SIM card; the telecommunication network side server generates an authentication vector according to the registration request and sends the authentication vector to the mobile terminal through the proxy server, wherein the authentication vector comprises AUTH and RAND.
Optionally, the intelligent contract server stores the subscription data in a block chain ledger book, and then further includes: and the intelligent contract server synchronizes the signing data to the block chain state database.
In a second aspect, an intelligent contract server is provided, comprising:
and the receiving unit is used for receiving an authentication parameter request sent by the proxy server, wherein the authentication parameter request carries the MSISDN, AUTH, RAND and the first sequence number SQN1 of the virtual SIM card.
The authentication unit is used for acquiring an authentication key from the block chain account book according to the authentication parameter request received by the receiving unit; the block chain account book stores the MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card.
The authentication unit is also used for generating access authentication parameters for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication key received by the receiving unit; the access authentication parameter comprises RES and a second sequence number SQN 2.
And the sending unit is used for sending the RES and the SQN2 generated by the authentication unit to the proxy server.
Optionally, the receiving unit is configured to receive a request for obtaining a to-be-signed data list of the virtual SIM card, where the to-be-signed data list of the virtual SIM card includes an MSISDN list and a subscription service list, and the request is sent by the mobile terminal through the application server.
And the signing unit is used for calling the virtual SIM card data list to be signed of the block chain account book according to the virtual SIM card data list to be signed received by the receiving unit.
And the sending unit is used for sending the virtual SIM card to-be-signed data list called by the signing unit to the mobile terminal through the application server.
And the receiving unit is further configured to receive subscription data of the virtual SIM card sent by the mobile terminal through the application server, where the subscription data includes an MSISDN of the virtual SIM card and a subscription service corresponding to the MSISDN of the virtual SIM card.
And the signing unit is used for storing the signing data received by the receiving unit into the block chain account book.
Optionally, the receiving unit is configured to receive at least one piece of virtual SIM card data sent by the SIM card sending client, where the at least one piece of virtual SIM card data includes a subscription service, an MSISDN of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card, and an account opening status corresponding to the MSISDN of the at least one virtual SIM card.
And the uplink unit is used for adding the at least one piece of virtual SIM card data received by the receiving unit into a virtual SIM card to-be-signed data list, storing the virtual SIM card to the block chain account book and synchronizing the virtual SIM card data to the block chain state database.
Optionally, the signing unit is further configured to synchronize the signing data to the block chain state database.
It can be understood that, the intelligent contract server provided above is used to execute the method corresponding to the first aspect provided above, and therefore, the beneficial effects that can be achieved by the intelligent contract server may refer to the beneficial effects of the method corresponding to the first aspect above and the beneficial effects of the corresponding scheme in the following detailed implementation, which are not described herein again.
In a third aspect, a proxy server is provided, which includes:
and the receiving unit is used for receiving an authentication calculation request sent by the mobile terminal, wherein the authentication calculation request carries the MSISDN, the authentication AUTH and the random number RAND of the virtual SIM card.
And the sending unit is used for sending an authentication parameter request to the intelligent contract server according to the authentication calculation request received by the receiving unit, wherein the authentication parameter request carries the MSISDN, AUTH and RAND of the virtual SIM card and the first sequence number SQN 1.
And the receiving unit is further used for receiving the RES and the second sequence number SQN2 sent by the intelligent contract server.
The processing unit is used for updating the SQN1 into the SQN2 received by the receiving unit and storing the SQN2 in a database;
and the sending unit is used for sending the RES received by the receiving unit to the mobile terminal so that the mobile terminal sends the RES to the server on the telecommunication network side through the sending unit, and the server on the telecommunication network side performs access authentication on the MSISDN of the virtual SIM card according to the RES.
It can be understood that, the proxy server provided above is configured to execute the method corresponding to the first aspect provided above, and therefore, the beneficial effects that can be achieved by the proxy server may refer to the beneficial effects of the method corresponding to the first aspect above and the corresponding scheme in the following detailed implementation, which are not described herein again.
In a fourth aspect, there is provided a communication system comprising the intelligent contract server of the second aspect and the proxy server of the third aspect.
It can be understood that, the communication system provided above is configured to execute the method corresponding to the first aspect provided above, and therefore, the beneficial effects that can be achieved by the communication system may refer to the beneficial effects of the method corresponding to the first aspect above and the corresponding scheme in the following detailed description, which are not described herein again.
In a fifth aspect, an intelligent contract server is provided, which comprises a processor and a memory, wherein the memory is coupled to the processor, the memory is used for storing necessary program instructions and data of the intelligent contract server, and the processor is used for executing the program instructions stored in the memory, so that the intelligent contract server executes the method of the first aspect.
A sixth aspect provides a computer storage medium having computer program code stored therein, which, when run on the intelligent contract server of the fifth aspect, causes the intelligent contract server of the fifth aspect to perform the method of the first aspect described above.
In a seventh aspect, there is provided a computer program product storing computer software instructions for execution by the intelligent contract server of the fifth aspect, the computer software instructions comprising a program for performing the method of the first aspect.
In an eighth aspect, there is provided a proxy server comprising a processor and a memory, the memory being configured to couple to the processor, the memory being configured to store program instructions and data necessary for the proxy server, and the processor being configured to execute the program instructions stored in the memory so that the proxy server performs the method of the first aspect.
In a ninth aspect, there is provided a computer storage medium having computer program code stored therein, which when run on the proxy server of the eighth aspect, causes the proxy server of the eighth aspect to perform the method of the first aspect described above.
In a tenth aspect, there is provided a computer program product storing computer software instructions for execution by a proxy server as in the eighth aspect, the computer software instructions comprising a program for performing a method as in the first aspect.
Drawings
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic structural diagram of a communication system according to an embodiment of the present invention;
fig. 2 is a schematic flowchart of a method for implementing a virtual SIM card according to an embodiment of the present invention;
fig. 3 is a schematic structural diagram of an intelligent contract server according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a proxy server according to an embodiment of the present invention;
FIG. 5 is a schematic structural diagram of another intelligent contract server provided by an embodiment of the present invention;
FIG. 6 is a schematic diagram of another intelligent contract server according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of another proxy server according to an embodiment of the present invention;
fig. 8 is a schematic structural diagram of another proxy server according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It should be noted that, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "e.g.," an embodiment of the present invention is not necessarily to be construed as preferred or advantageous over other embodiments or designs. Rather, use of the word "exemplary" or "such as" is intended to present concepts related in a concrete fashion.
It should be noted that, in the embodiments of the present invention, "of", "corresponding" and "corresponding" may be sometimes used in combination, and it should be noted that, when the difference is not emphasized, the intended meaning is consistent.
For the convenience of clearly describing the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, the words "first", "second", and the like are used for distinguishing the same items or similar items with basically the same functions and actions, and those skilled in the art can understand that the words "first", "second", and the like are not limited in number or execution order.
In order to facilitate internet applications to use SIM card data and mobile number, virtual SIM technology has emerged. The virtual SIM technology omits an SIM card physical entity and stores SIM data in a cloud. However, authentication keys and the like in SIM card data are important assets for the operator, which is sensitive data. On one hand, the SIM card data use has strict safety management flow, the integrity and the safety of the key data are strictly protected, and the serious consequence of card copying is prevented; on the other hand, the Internet APP uses the records and binding records of the SIM card data to be difficult to trace and audit.
Blockchains are a distributed ledger technique that implements a trust mechanism in an untrusted environment. Ledgers in blockchains may be stored at multiple nodes and synchronized using P2P technology. And confirming the record written into the account book by the multiple nodes by adopting a consensus mechanism. Meanwhile, by means of an intelligent contract constructed on the block chain, direct access of application ledger data is isolated, and privacy and integrity of the ledger data are protected. The block chains are classified into public, alliance, and private chains according to the range of allowed access users. The public chain allows anyone to access and use the ledger and the bookkeeping, the alliance chain only allows specific individuals and business entities to access and use the ledger, and the private chain is only maintained and used by the internal nodes of the enterprise.
Based on the above technical background and the problems existing in the prior art, referring to fig. 1, an embodiment of the present invention provides a communication system TX. The communication system TX comprises a mobile terminal 10, a proxy server 20, an application server 30, a smart contract server 40, a telecommunication network side server 50 and a SIM card issuing client 60. The proxy server 20 may be an integrated software module on the mobile terminal 10, may be a server separately deployed on the network side, or may integrate the proxy server 20 and the application server 30.
Referring to fig. 2, an embodiment of the present invention provides a method for implementing a virtual SIM card, where the method specifically includes:
201. the proxy server receives an authentication calculation request sent by the mobile terminal, wherein the authentication calculation request carries the MSISDN, the authentication AUTH and the random number RAND of the virtual SIM card.
202. And the proxy server sends an authentication parameter request to the intelligent contract server according to the authentication calculation request, wherein the authentication parameter request carries the MSISDN, AUTH and RAND of the virtual SIM card and the first sequence number SQN 1.
203. The intelligent contract server acquires an authentication key from the block chain account book according to the authentication parameter request; the block chain account book stores the MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card.
204. The intelligent contract server uses a preset algorithm to generate access authentication parameters for using the virtual SIM card according to the authentication parameter request and the authentication secret key, and sends the access authentication parameters to the proxy server; the access authentication parameter comprises RES and a second sequence number SQN 2.
205. And the proxy server updates the SQN1 into an SQN2 and stores the SQN2 in a database, and sends the RES to the mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the proxy server, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES.
In addition, before step 201, the method further comprises:
101. the intelligent contract server receives a request for acquiring a virtual SIM card to-be-signed data list sent by the mobile terminal through the application server, wherein the virtual SIM card to-be-signed data list comprises an MSISDN list and a signing service list.
102. And the intelligent contract server calls the virtual SIM card to-be-signed data list of the block chain account book according to the virtual SIM card to-be-signed data list request, and sends the virtual SIM card to the mobile terminal through the application server.
103. The mobile terminal determines the subscription data of the virtual SIM card according to the data list to be signed of the virtual SIM card, wherein the subscription data of the virtual SIM card comprises the MSISDN of the virtual SIM card and the subscription service corresponding to the MSISDN of the virtual SIM card.
104. And the intelligent contract server receives the subscription data of the virtual SIM card sent by the mobile terminal through the application server.
It should be noted that the subscription data of the virtual SIM card may further include, but is not limited to, the following data: 1. User information of the mobile terminal, such as an account and the like; 2. and attribution information of the MSISDN of the virtual SIM card, such as a signed attribution mobile terminal enterprise, an enterprise ID and the like. The subscription service corresponding to the MSISDN of the virtual SIM card may include, for example, a subscription voice service, an online authentication status, a charging discount, and the like. In addition, the proxy server may organize the virtual SIM card data in a specific format, such as JSON or XML format.
105. And the intelligent contract server stores the signing data to the block chain account book.
In addition, after step 105, the method further comprises:
106. and the intelligent contract server synchronizes the signing data to the block chain state database.
Exemplary, the implementation code of the steps 101 to 106 is as follows:
Figure BDA0001850826720000091
Figure BDA0001850826720000101
in addition, before step 101, the method further includes:
s11, the smart contract server receives at least one virtual SIM card data sent by the SIM card issuing client, wherein the at least one virtual SIM card data includes a subscription service, an MSISDN of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card, and an account opening status corresponding to the MSISDN of the at least one virtual SIM card.
It should be noted that the virtual SIM card data may include, but is not limited to: identification data of the at least one virtual SIM card. The identification data includes but is not limited to data such as IMSI, ICCID, etc.; an account open state (also referred to as a card state), the card state for step S11 and step S12 is not enabled.
Illustratively, the SIM card issuing client may be an operator entity business hall or an operator online business hall.
And S12, the intelligent contract server adds at least one virtual SIM card data into the virtual SIM card data list to be signed, stores the virtual SIM card data into the blockchain account book and synchronizes the virtual SIM card data to the blockchain state database.
Illustratively, the partial implementation code for steps S11 and S12 is as follows:
Figure BDA0001850826720000111
Figure BDA0001850826720000121
before step 201, the method further comprises:
s21, the telecommunication network side server receives the registration request sent by the mobile terminal through the proxy server, wherein the registration request carries the MSISDN of the virtual SIM card.
S22, the telecommunication network side server generates an authentication vector according to the registration request and sends the authentication vector to the mobile terminal through the proxy server, wherein the authentication vector comprises AUTH and RAND.
In the method, a proxy server firstly receives an authentication calculation request sent by a mobile terminal, and then sends an authentication parameter request to an intelligent contract server according to the authentication calculation request; the intelligent contract server acquires an authentication key from the block chain account book according to the authentication parameter request; then, generating access authentication parameters for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication secret key, and sending the access authentication parameters to the proxy server; the access authentication parameters comprise RES and a second sequence number SQN 2; and the proxy server updates the SQN1 into an SQN2 and stores the SQN2 in a database, and sends the RES to the mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the proxy server, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES. The embodiment of the invention can authenticate the network which provides the service data for the MSISDN of the virtual SIM card by using the intelligent contract algorithm, thereby ensuring the credible storage and the traceability of circulation of the data of the virtual SIM card.
Referring to fig. 3, an embodiment of the present invention provides an intelligent contract server 40, the intelligent contract server 40 including:
the receiving unit 301 is configured to receive an authentication parameter request sent by the proxy server, where the authentication parameter request carries an MSISDN, AUTH, RAND, and a first sequence number SQN1 of the virtual SIM card.
An authentication unit 302, configured to obtain an authentication key from the block chain ledger according to the authentication parameter request received by the receiving unit 301; the block chain account book stores the MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card.
The authentication unit 302 is further configured to generate an access authentication parameter for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication key received by the receiving unit 301; the access authentication parameter comprises RES and a second sequence number SQN 2.
A sending unit 303, configured to send the RES and the SQN2 generated by the authentication unit 302 to the proxy server.
In an exemplary scheme, the receiving unit 301 is configured to receive a request, sent by the mobile terminal through the application server, for obtaining a to-be-signed data list of the virtual SIM card, where the to-be-signed data list of the virtual SIM card includes an MSISDN list and a subscription service list.
The signing unit 304 is configured to call the virtual SIM card to-be-signed data list of the blockchain ledger according to the virtual SIM card to-be-signed data list request received by the receiving unit 301.
A sending unit 303, configured to send the virtual SIM card to-be-signed data list called by the signing unit 304 to the mobile terminal through the application server.
The receiving unit 301 is further configured to receive subscription data of the virtual SIM card sent by the mobile terminal through the application server, where the subscription data includes an MSISDN of the virtual SIM card and a subscription service corresponding to the MSISDN of the virtual SIM card.
The signing unit 304 is configured to store the signing data received by the receiving unit 301 into the blockchain ledger.
In an exemplary scheme, the receiving unit 301 is configured to receive at least one virtual SIM card data sent by the SIM card sending client, where the at least one virtual SIM card data includes a subscription service, an MSISDN of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card, and an account opening status corresponding to the MSISDN of the at least one virtual SIM card.
The uplink unit 305 is configured to add the at least one virtual SIM card data received by the receiving unit 301 into the virtual SIM card to-be-signed data list, store the data in the blockchain directory, and synchronize the data to the blockchain state database.
In an exemplary scenario, the subscription unit 304 is further configured to synchronize subscription data to the blockchain state database.
Since the intelligent contract server in the embodiment of the present invention may be applied to implement the corresponding method in the above method embodiment, the technical effect that can be obtained by the intelligent contract server may refer to the corresponding method in the above method embodiment, and the embodiment of the present invention is not described herein again.
Referring to fig. 4, an embodiment of the present invention provides a proxy server 20, where the proxy server 20 includes:
the receiving unit 401 is configured to receive an authentication calculation request sent by the mobile terminal, where the authentication calculation request carries an MSISDN, an authentication AUTH, and a random number RAND of the virtual SIM card.
A sending unit 402, configured to send an authentication request to the smart contract server according to the authentication calculation request received by the receiving unit 401, where the authentication request carries the MSISDN, AUTH, RAND of the virtual SIM card, and the first sequence number SQN 1.
The receiving unit 401 is further configured to receive the RES and the second sequence number SQN2 sent by the intelligent contract server.
And the processing unit 403 is configured to update the SQN1 to the SQN2 received by the receiving unit 401, and store the updated SQN2 in the database.
A sending unit 402, configured to send the RES received by the receiving unit 401 to the mobile terminal, so that the mobile terminal sends the RES to the server on the telecommunication network side through the sending unit 402, so that the server on the telecommunication network side performs access authentication on the MSISDN of the virtual SIM card according to the RES.
Since the proxy server in the embodiment of the present invention may be applied to implement the method corresponding to the embodiment of the method described above, the technical effect obtained by the proxy server may also refer to the method corresponding to the embodiment of the method described above, and the embodiment of the present invention is not described herein again.
Referring to fig. 1, an embodiment of the present invention provides a communication system TX, including: such as the intelligent contract server 40 and the proxy server 20 described above.
Since the communication system in the embodiment of the present invention may be applied to implement the method embodiment, the technical effect obtained by the communication system may also refer to the method embodiment, and the embodiment of the present invention is not described herein again.
Fig. 5 shows a possible structural diagram of the intelligent contract server 40 involved in the above-described exemplary embodiment, in the case of integrated units. The intelligent contract server 40 includes: a processing module 501, a communication module 502 and a storage module 503. The processing module 501 is used for controlling and managing the actions of the intelligent contract server 40, for example, the processing module 501 is used for supporting the intelligent contract server 40 to execute the processes 203-205, 101-106, S11 and S12 in FIG. 2. The communication module 502 is used to support the communication of the intelligent contract server 40 with other entities. The storage module 503 is used for storing program codes and data of the intelligent contract server 40.
The processing module 501 may be a processor or a controller, and may be, for example, a Central Processing Unit (CPU), a general-purpose processor, a Digital Signal Processor (DSP), an application-specific integrated circuit (ASIC), a Field Programmable Gate Array (FPGA) or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Which may implement or perform the various illustrative logical blocks, modules, and circuits described in connection with the disclosure. The processor may also be a combination of computing functions, e.g., comprising one or more microprocessors, DSPs, and microprocessors, among others. The communication module 502 may be a transceiver, a transceiving circuit or a communication interface, etc. The storage module 503 may be a memory.
When the processing module 501 is a processor as shown in fig. 6, the communication module 502 is a transceiver of fig. 6, and the storage module 503 is a memory of fig. 6, the intelligent contract server 40 according to the embodiment of the present application may be the intelligent contract server 40 as described below.
Referring to fig. 6, the intelligent contract server 40 includes: a processor 601, a transceiver 602, a memory 603, and a bus 604.
The processor 601, the transceiver 602, and the memory 603 are connected to each other through a bus 604; the bus 604 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.
The processor 601 may be a general-purpose Central Processing Unit (CPU), a microprocessor, an Application-Specific Integrated Circuit (ASIC), or one or more Integrated circuits for controlling the execution of programs in accordance with the present invention.
The Memory 603 may be a Read-Only Memory (ROM) or other type of static storage device that can store static information and instructions, a Random Access Memory (RAM) or other type of dynamic storage device that can store information and instructions, an Electrically Erasable Programmable Read-Only Memory (EEPROM), a Compact Disc Read-Only Memory (CD-ROM) or other optical Disc storage, optical Disc storage (including Compact Disc, laser Disc, optical Disc, digital versatile Disc, blu-ray Disc, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer, but is not limited to these. The memory may be self-contained and coupled to the processor via a bus. The memory may also be integral to the processor.
The memory 603 is used for storing application program codes for executing the scheme of the application, and the processor 601 controls the execution. The transceiver 602 is configured to receive content input by an external device, and the processor 601 is configured to execute application program codes stored in the memory 603, so as to implement the implementation method of the virtual SIM card described in the embodiment of the present application.
In the case of an integrated unit, fig. 7 shows a schematic diagram of a possible structure of the proxy server 20 involved in the above-described embodiment. The proxy server 20 includes: a processing module 701, a communication module 702 and a storage module 703. The processing module 701 is configured to control and manage the actions of the proxy server 20, for example, the processing module 701 is configured to support the proxy server 20 to execute the processes 201, 202, and 206 in fig. 2. The communication module 702 is used to support communication between the proxy server 20 and other entities. The storage module 703 is used to store program codes and data of the proxy server 20.
The processing module 701 may be a processor or a controller, such as a Central Processing Unit (CPU), a general-purpose processor, a Digital Signal Processor (DSP), an application-specific integrated circuit (ASIC), a Field Programmable Gate Array (FPGA) or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Which may implement or perform the various illustrative logical blocks, modules, and circuits described in connection with the disclosure. The processor may also be a combination of computing functions, e.g., comprising one or more microprocessors, DSPs, and microprocessors, among others. The communication module 702 may be a transceiver, a transceiver circuit or a communication interface, etc. The storage module 703 may be a memory.
When the processing module 701 is a processor as shown in fig. 8, the communication module 702 is a transceiver as shown in fig. 8, and the storage module 703 is a memory as shown in fig. 8, the proxy server 20 according to the embodiment of the present application may be the proxy server 20 as described below.
Referring to fig. 8, the proxy server 20 includes: a processor 801, a transceiver 802, a memory 803, and a bus 804.
The processor 801, the transceiver 802, and the memory 803 are connected to each other by a bus 804; the bus 804 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.
The processor 801 may be a general-purpose Central Processing Unit (CPU), a microprocessor, an Application-Specific Integrated Circuit (ASIC), or one or more Integrated circuits configured to control the execution of programs in accordance with the teachings of the present disclosure.
The Memory 803 may be a Read-Only Memory (ROM) or other type of static storage device that can store static information and instructions, a Random Access Memory (RAM) or other type of dynamic storage device that can store information and instructions, an Electrically Erasable Programmable Read-Only Memory (EEPROM), a Compact Disc Read-Only Memory (CD-ROM) or other optical Disc storage, optical Disc storage (including Compact Disc, laser Disc, optical Disc, digital versatile Disc, blu-ray Disc, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer, but is not limited to these. The memory may be self-contained and coupled to the processor via a bus. The memory may also be integral to the processor.
The memory 803 is used for storing application program codes for executing the scheme of the application, and the processor 801 controls the execution. The transceiver 802 is configured to receive content input by an external device, and the processor 801 is configured to execute application program codes stored in the memory 803, so as to implement the method for implementing a virtual SIM card described in the embodiments of the present application.
It should be understood that, in the various embodiments of the present application, the sequence numbers of the above-mentioned processes do not mean the execution sequence, and the execution sequence of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present application.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described apparatuses, devices and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the several embodiments provided in the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other ways. For example, the above-described device embodiments are merely illustrative, and for example, the division of the units is only one logical functional division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented using a software program, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. The procedures or functions described in accordance with the embodiments of the present application are all or partially generated upon loading and execution of computer program instructions on a computer. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website, computer, server, or data center to another website, computer, server, or data center via wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or can comprise one or more data storage devices, such as a server, a data center, etc., that can be integrated with the medium. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.
The embodiment of the present invention further provides a computer program product, where the computer program product may be directly loaded into the memory and contains software codes, and the computer program product can be loaded and executed by a computer to implement the implementation method of the virtual SIM card.
The above description is only for the specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (17)

1. A method for implementing a virtual SIM card is characterized by comprising the following steps:
the proxy server receives an authentication calculation request sent by the mobile terminal, wherein the authentication calculation request carries the MSISDN, the authentication AUTH and the random number RAND of the virtual SIM card;
the proxy server sends an authentication parameter request to an intelligent contract server according to the authentication calculation request, wherein the authentication parameter request carries the MSISDN, the AUTH, the RAND and a first sequence number SQN1 of the virtual SIM card;
the intelligent contract server acquires an authentication key from a block chain account book according to the authentication parameter request; the block chain account book stores MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card;
the intelligent contract server uses a preset algorithm to generate access authentication parameters for using the virtual SIM card according to the authentication parameter request and the authentication secret key, and sends the access authentication parameters to the proxy server; the access authentication parameters comprise an authentication response identifier RES and a second sequence number SQN 2;
and the proxy server updates the SQN1 into the SQN2 and stores the SQN2 in a database, and sends the RES to the mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the proxy server, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES.
2. The method for implementing a virtual SIM card according to claim 1, wherein the proxy server receives an authentication calculation request sent by a mobile terminal, and further comprises:
the intelligent contract server receives a request for acquiring a virtual SIM card to-be-signed data list sent by the mobile terminal through an application server, wherein the virtual SIM card to-be-signed data list comprises an MSISDN list and a signing service list;
the intelligent contract server calls the virtual SIM card to-be-signed data list of the block chain account book according to the virtual SIM card to-be-signed data list request, and sends the virtual SIM card to-be-signed data list to the mobile terminal through the application server;
the mobile terminal determines subscription data of a virtual SIM card according to the virtual SIM card data list to be signed, wherein the subscription data of the virtual SIM card comprises MSISDN of the virtual SIM card and subscription service corresponding to the MSISDN of the virtual SIM card;
the intelligent contract server receives the subscription data of the virtual SIM card sent by the mobile terminal through the application server;
and the intelligent contract server stores the signing data to a block chain account book.
3. The method for implementing the virtual SIM card according to claim 2, wherein the smart contract server receives a request for obtaining a to-be-signed data list of the virtual SIM card, which is sent by the mobile terminal through the application server, and before the request, the method further comprises:
the intelligent contract server receives at least one piece of virtual SIM card data sent by an SIM card issuing client, wherein the at least one piece of virtual SIM card data comprises a subscription service, an MSISDN of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card and an account opening state corresponding to the MSISDN of the at least one virtual SIM card;
and the intelligent contract server adds the at least one virtual SIM card data into a data list to be signed of the virtual SIM card, stores the data into the block chain account book and synchronizes the data into a block chain state database.
4. The method for implementing a virtual SIM card according to claim 1, wherein the proxy server receives an authentication calculation request sent by a mobile terminal, and further comprises:
the telecommunication network side server receives a registration request sent by the mobile terminal through a proxy server, wherein the registration request carries the MSISDN of the virtual SIM card;
and the telecommunication network side server generates an authentication vector according to the registration request and sends the authentication vector to the mobile terminal through the proxy server, wherein the authentication vector comprises the AUTH and the RAND.
5. The method for implementing the virtual SIM card according to claim 2, wherein the smart contract server stores the subscription data in a blockchain ledger, and then further comprises:
and the intelligent contract server synchronizes the signing data to a block chain state database.
6. An intelligent contract server, comprising:
a receiving unit, configured to receive an authentication parameter request sent by a proxy server, where the authentication parameter request carries an MSISDN, AUTH, RAND, and a first sequence number SQN1 of a virtual SIM card;
the authentication unit is used for acquiring an authentication key from a block chain account book according to the authentication parameter request received by the receiving unit; the block chain account book stores MSISDN of at least one virtual SIM card and an authentication key corresponding to the MSISDN of the at least one virtual SIM card;
the authentication unit is further configured to generate an access authentication parameter for using the virtual SIM card by using a preset algorithm according to the authentication parameter request and the authentication key received by the receiving unit; the access authentication parameters comprise an authentication response identifier RES and a second sequence number SQN 2;
and the sending unit is used for sending the RES and the SQN2 generated by the authentication unit to a proxy server.
7. The intelligent contract server of claim 6, comprising:
the receiving unit is used for receiving a request for acquiring a virtual SIM card to-be-signed data list sent by a mobile terminal through an application server, wherein the virtual SIM card to-be-signed data list comprises an MSISDN list and a signed service list;
the signing unit is used for calling the virtual SIM card to-be-signed data list of the block chain account book according to the virtual SIM card to-be-signed data list request received by the receiving unit;
the sending unit is used for sending the virtual SIM card to-be-signed data list called by the signing unit to the mobile terminal through the application server;
the receiving unit is further configured to receive subscription data of the virtual SIM card sent by the mobile terminal through the application server, where the subscription data includes an MSISDN of the virtual SIM card and a subscription service corresponding to the MSISDN of the virtual SIM card;
the signing unit is used for storing the signing data received by the receiving unit into a block chain account book.
8. The intelligent contract server of claim 7, comprising:
the receiving unit is configured to receive at least one piece of virtual SIM card data sent by an SIM card sending client, where the at least one piece of virtual SIM card data includes a subscription service, an MSISDN of the at least one virtual SIM card, an authentication key corresponding to the MSISDN of the at least one virtual SIM card, and an account opening status corresponding to the MSISDN of the at least one virtual SIM card;
and the uplink unit is used for adding the at least one virtual SIM card data received by the receiving unit into the virtual SIM card to-be-signed data list, storing the data into the block chain account book and synchronizing the data into a block chain state database.
9. The intelligent contract server of claim 7, comprising:
the signing unit is also used for synchronizing the signing data to a block chain state database.
10. A proxy server, comprising:
a receiving unit, configured to receive an authentication calculation request sent by a mobile terminal, where the authentication calculation request carries an MSISDN, an authentication AUTH, and a random number RAND of a virtual SIM card;
a sending unit, configured to send an authentication parameter request to an intelligent contract server according to the authentication calculation request received by the receiving unit, where the authentication parameter request carries the MSISDN, the AUTH, the RAND, and a first sequence number SQN1 of the virtual SIM card;
the receiving unit is further configured to receive the RES and the second sequence number SQN2 sent by the intelligent contract server;
the processing unit is used for updating the SQN1 into the SQN2 received by the receiving unit and storing the SQN2 in a database;
the sending unit is configured to send the RES received by the receiving unit to a mobile terminal, so that the mobile terminal sends the RES to a telecommunication network side server through the sending unit, and the telecommunication network side server performs access authentication on the MSISDN of the virtual SIM card according to the RES.
11. A communication system comprising an intelligent contract server according to claims 6-9 and a proxy server according to claim 10.
12. An intelligent contract server, characterized in that the structure of the intelligent contract server comprises a processor and a memory, the memory is used for coupling with the processor, the memory is used for storing program instructions and data necessary for the intelligent contract server, and the processor is used for executing the program instructions stored in the memory, so that the intelligent contract server executes the implementation method of the virtual SIM card according to any one of claims 1-5.
13. A computer storage medium, characterized in that a computer program is stored in the computer storage medium, which, when run on a smart contract server according to claim 12, causes the smart contract server to execute the implementation method of the virtual SIM card according to any one of claims 1 to 5.
14. A computer program product storing computer software instructions for execution by a smart contract server according to claim 12, the computer software instructions comprising a program for performing a method of implementing a virtual SIM card according to any one of claims 1 to 5.
15. A proxy server, characterized in that the structure of the proxy server comprises a processor and a memory, the memory is used for coupling with the processor, the memory is used for storing program instructions and data necessary for the proxy server, and the processor is used for executing the program instructions stored in the memory, so that the proxy server executes the implementation method of the virtual SIM card according to any one of claims 1-5.
16. A computer storage medium, in which a computer program is stored, which, when run on a proxy server according to claim 15, causes the proxy server to execute the method of implementing a virtual SIM card according to any one of claims 1 to 5.
17. A computer program product storing computer software instructions for execution by a proxy server according to claim 15, the computer software instructions comprising a program for performing a method for implementing a virtual SIM card according to any one of claims 1 to 5.
CN201811294546.7A 2018-11-01 2018-11-01 Method, system, medium, computer program product and server for implementing virtual SIM card Active CN109168156B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811294546.7A CN109168156B (en) 2018-11-01 2018-11-01 Method, system, medium, computer program product and server for implementing virtual SIM card

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811294546.7A CN109168156B (en) 2018-11-01 2018-11-01 Method, system, medium, computer program product and server for implementing virtual SIM card

Publications (2)

Publication Number Publication Date
CN109168156A CN109168156A (en) 2019-01-08
CN109168156B true CN109168156B (en) 2021-06-29

Family

ID=64876603

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811294546.7A Active CN109168156B (en) 2018-11-01 2018-11-01 Method, system, medium, computer program product and server for implementing virtual SIM card

Country Status (1)

Country Link
CN (1) CN109168156B (en)

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109857722A (en) * 2019-01-10 2019-06-07 厦门必乐领主科技有限公司 A kind of data base array driving and dynamic index technology based on block chain
CN109905474B (en) * 2019-02-26 2022-04-15 上海南潮信息科技有限公司 Data security sharing method and device based on block chain
CN110351346A (en) * 2019-06-21 2019-10-18 华为技术有限公司 A kind of eSIM changes chucking method and relevant device
CN112866981B (en) * 2019-11-08 2022-04-22 华为技术有限公司 Method and device for managing subscription data
CN111132165B (en) * 2019-12-30 2022-06-10 全链通有限公司 5G communication card-free access method, equipment and storage medium based on block chain
CN111565388B (en) * 2020-04-02 2023-09-19 维沃移动通信有限公司 Network registration method and electronic equipment
CN111510917B (en) * 2020-04-10 2023-03-14 中国联合网络通信集团有限公司 Network access method and device for virtual USIM
CN112637855B (en) * 2020-12-15 2022-11-29 中国联合网络通信集团有限公司 Machine-card binding method based on block chain and server
WO2024036645A1 (en) * 2022-08-19 2024-02-22 华为技术有限公司 Method and apparatus for obtaining key
CN115550918A (en) * 2022-10-31 2022-12-30 中国联合网络通信集团有限公司 Security data updating method, USIM, terminal, device and medium
CN115550902B (en) * 2022-10-31 2024-03-19 中国联合网络通信集团有限公司 Security data updating method, USIM, terminal, equipment and medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103297970A (en) * 2013-05-24 2013-09-11 北京创毅讯联科技股份有限公司 Authentication method of mobile terminal, authentication terminal, mobile terminal and authentication system
CN105871855A (en) * 2016-04-11 2016-08-17 杨鹏 Method and system for generating, storing and identifying identification code of electronic equipment
WO2018175666A1 (en) * 2017-03-21 2018-09-27 Dappsters, LLC Blockchain systems and methods
CN108702622A (en) * 2017-11-30 2018-10-23 深圳前海达闼云端智能科技有限公司 Mobile network's access authentication method, device, storage medium and block chain node

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103297970A (en) * 2013-05-24 2013-09-11 北京创毅讯联科技股份有限公司 Authentication method of mobile terminal, authentication terminal, mobile terminal and authentication system
CN105871855A (en) * 2016-04-11 2016-08-17 杨鹏 Method and system for generating, storing and identifying identification code of electronic equipment
WO2018175666A1 (en) * 2017-03-21 2018-09-27 Dappsters, LLC Blockchain systems and methods
CN108702622A (en) * 2017-11-30 2018-10-23 深圳前海达闼云端智能科技有限公司 Mobile network's access authentication method, device, storage medium and block chain node

Also Published As

Publication number Publication date
CN109168156A (en) 2019-01-08

Similar Documents

Publication Publication Date Title
CN109168156B (en) Method, system, medium, computer program product and server for implementing virtual SIM card
US11610019B2 (en) Information management method, apparatus, and information management system
EP3800909B1 (en) Remote management method, and device
CN109756447B (en) Security authentication method and related equipment
JP2017050875A (en) Mobile apparatus supporting plural access control clients, and corresponding methods
EP3171566B1 (en) Method, device and system for security domain management
US10764746B1 (en) Electronic subscriber identity module (eSIM) transfer from inactive device
US9819679B1 (en) Hardware assisted provenance proof of named data networking associated to device data, addresses, services, and servers
US11564094B1 (en) Secondary device authentication proxied from authenticated primary device
US11265702B1 (en) Securing private wireless gateways
US10757089B1 (en) Mobile phone client application authentication through media access gateway (MAG)
US20210021601A1 (en) Access delegation using offline token
CA2828258C (en) Smart plug or cradle
US11146948B1 (en) Electronic subscriber identity module (eSIM) transfer via activation code
US10868808B1 (en) Server application access authentication based on SIM
US11570620B2 (en) Network profile anti-spoofing on wireless gateways
US11231920B2 (en) Electronic device management
US11777742B2 (en) Network device authentication
KR20210011577A (en) Apparatus and Method for Personal authentication using Sim Toolkit and Applet
Ferdous et al. Portable personal identity provider in mobile phones
US11146944B1 (en) Mobile phone peer-to-peer electronic subscriber identity module (eSIM) transfer
US11425567B2 (en) Hyperledger authorization into a radio access network (RAN)
US11076296B1 (en) Subscriber identity module (SIM) application authentication
CN115438353A (en) User data management method and related equipment
US9445266B2 (en) Smart plug or cradle

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant