WO2017128286A1

WO2017128286A1 - Method for downloading subscription file, related device, and system

Info

Publication number: WO2017128286A1
Application number: PCT/CN2016/072718
Authority: WO
Inventors: 衣强; 龙水平; 高林毅; 于小博; 范姝男
Original assignee: 华为技术有限公司
Priority date: 2016-01-29
Filing date: 2016-01-29
Publication date: 2017-08-03
Also published as: CN107113320B; CN107113320A

Abstract

Provided in the present invention are a method for downloading a subscription file, a related device, and a system. The method comprises: an operator server receiving a first request message sent by a terminal device, wherein the first request message is used to make a request to the operator server for download of a subscription file; generating a first download password, and sending to a subscription management entity a second request message, wherein the second request message is used to instruct the subscription management entity to generate the subscription file requested by the terminal device for download, such that the terminal device downloads the subscription file from the subscription management entity, and the second request message carries the first download password, such that the terminal device obtains the first download password from the subscription management entity; or, alternatively, the operator server sending to the terminal device the first download password, wherein if the terminal device re-requests download of a subscription file belonging to the same subscription as the subscription file, the first download password is used by the operator server to verify the new request of the terminal device. The present invention realizes dynamic verification, enabling increased security in downloading of a subscription file.

Description

Method, device and system for downloading contract documents

Technical field

The present invention relates to the field of Internet of Things technologies, and in particular, to a method, a related device and a system for downloading a contract file.

Background technique

For consumer electronic terminals (such as vending machines, cameras, vehicle terminals, electric meters, etc.) that support the Embedded Universal Integrated Circuit Card (eUICC), online authentication of different operators' identity authentication applications is allowed. Thereby, the download of the contract file and the dynamic replacement of the contract file are realized.

In the existing mechanism, after the downloading of the subscription file is completed, the user can directly activate, deactivate, or delete the subscription file through the interactive interface of the terminal, that is, the user does not need to pass through the network side. After accidentally deleting the contract file, or repairing the eUICC of the terminal, or migrating the contract file to another terminal, or resetting the eUICC, you need to request the operator to re-download the contract file, but re-download it. During the process of signing a file, it is easy for an attacker to attack the operator by forging a re-download request, or illegally obtaining a contract file, which results in lower security when re-downloading.

Summary of the invention

The present invention provides a method, a related device and a system for downloading a subscription file, which can solve the problem of low security when re-downloading a subscription file in the existing mechanism in the prior art.

The first aspect provides a method for downloading a contract file, including:

Receiving, by the operator server, a first request message sent by the terminal device, where the first request message is used to request the operator server to download the subscription file;

The operator server generates a first download password;

The operator server sends a second request message to the subscription management entity, where the second request message is used to instruct the subscription management entity to generate a subscription file requested by the terminal device to download, so that the terminal device receives the subscription from the terminal device. The management entity downloads the contract document;

The second request message carries the first download password, so that the terminal device receives the sign The management entity obtains the first download password; or the operator server sends the first download password to the terminal device;

The first download password is used by the terminal server to authenticate the request of the terminal device when the terminal device requests the operator server to download the subscription file that belongs to the same contract with the subscription file.

After the operator server receives the first confirmation message sent by the subscription management entity, the operator server knows that the subscription file has been successfully downloaded, and saves the first download password, so that the terminal device requests the subscription file again. And authenticating the request of the terminal device, where the first confirmation message is a message that is sent by the subscription management entity after successfully sending the subscription file to the terminal device, where the first confirmation message is used to indicate The terminal device has successfully downloaded the subscription file.

In some possible designs, when the terminal device needs to re-download the subscription file for various reasons, the method further includes:

Receiving, by the operator server, a third request message sent by the terminal device, where the third request message carries a second download password, where the third request message is used to request downloading and signing the file from the subscription management entity Contract documents belonging to the same contract;

The operator server authenticates the third request message by using the first download password;

When the second download password is the same as or corresponds to the first download password, the authentication succeeds, and after the authentication succeeds, the operator server generates a third download password;

The operator server sends a fourth request message to the subscription management entity, where the fourth request message is used to instruct the subscription management entity to acquire a subscription file that the terminal device requests to download and belongs to the same contract with the subscription file, And causing the terminal device that sends the third request message to download, from the subscription management entity, a subscription file that belongs to the same contract with the subscription file;

The fourth request message carries the third download password, so that the terminal device obtains the third download password from the subscription management entity; or the operator server sends a terminal to send the third request message The device sends the third download password;

The third download password is used by the terminal server to authenticate the request of the terminal device when the terminal device requests the operator server to download the subscription file that belongs to the same contract with the subscription file. Each time the download request of the terminal device is used, the download password generated by the operator server is used for authentication, so that the download password is dynamically generated, and the download is requested. Dynamic authentication is sought to avoid the attacker's masquerading download request.

After the subscription file is downloaded to the terminal device, the operator server receives the second confirmation message sent by the subscription management entity, so that the subscription file that the terminal device requests to download and belongs to the same contract with the subscription file has been successfully downloaded. And the operator server saves the third download password and deletes the first download password, and the second confirmation message is that the subscription management entity successfully sends the subscription file that belongs to the same contract with the subscription file to The message sent by the terminal device optimizes the dynamic authentication mechanism by dynamically updating the download password, thereby improving the security of the download.

In some possible designs, the first download password or the third download password meets at least one of the following:

Valid for a preset duration, the number of valid uses is finite, the number of valid uses within the preset duration is finite, and the number of downloads containing the contracted file. By limiting the effective duration of the download password and the number of valid times that can be used, and counting the number of downloads of the signed file, the attacker can forge the re-download request or clone the download password to illegally obtain the subscription file, thereby improving the security of the contract file distribution.

The second aspect provides a method for downloading a contract file, the method comprising:

The terminal device sends a first request message to the operator server, where the first request message is used to request the operator server to download a subscription file, so that the operator server sends a second request message to the subscription management entity, The second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

Obtaining, by the terminal device, a first download password generated by the operator server and receiving the subscription file from the subscription management entity, where the first download password may be directly sent by the operator server to the The terminal device is forwarded to the terminal device by the contract management entity after being sent by the operator server to the subscription management entity;

The first download password is used by the terminal device to request authentication from the operator server when requesting to download a subscription file that belongs to the same contract as the subscription file.

In some possible designs, the method further includes:

Transmitting, by the terminal device, a third request message carrying a second download password to the operator server, where the third request message is used to request downloading from the operator server that the subscription file belongs to Signing documents of the same contract;

When the second download password is the same as or corresponds to the first download password, the operator server authenticates the third request message, and after the authentication is passed, the terminal device acquires the operator. a third download password generated by the server and a subscription file from the contract management entity that belongs to the same contract as the subscription file, and the third download password is used by the terminal device to request the download and the server again from the server. When the contract document belongs to the contract document of the same contract, the server is requested to perform authentication.

The first download password or the third download password is obtained by the terminal device from the operator server or the contract management entity.

In some possible designs, the method further includes:

The terminal device replaces the locally saved first download password with the third download password. By dynamically updating the download password and synchronizing with the network side, the dynamic authentication mechanism can be optimized to improve the security of the download.

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file. By limiting the effective duration of the download password and the number of valid times that can be used, and counting the number of downloads of the signed file, the attacker can forge the re-download request or clone the download password to illegally obtain the subscription file, thereby improving the security of the contract file distribution.

A third aspect provides a method of downloading a subscription file, the method comprising:

The subscription management entity receives a second request message sent by the operator server, where the second request message is used to indicate that the subscription management entity generates a subscription file that the terminal device requests to download, and the second request message is that the carrier server is After receiving the first request message sent by the terminal device, sending the first request message to the subscription management entity, where the first request message is used to request the carrier server to download the subscription file;

The second request message carries a first download password generated by the operator server;

The contract management entity generates the subscription file according to the second request message, and the signing Sending the file and the first download password to the terminal device, where the first download password is used by the terminal device to download to the operator server again the download file that belongs to the same contract as the subscription file, The carrier server is authenticated.

In some possible designs, the method further includes:

The subscription management entity receives a fourth request message that is sent by the operator server and carries a third download password, where the third download password is a download password generated after the operator server successfully authenticates the third request message. ;

The contract management entity acquires, according to the instruction of the fourth request message, a subscription file that is requested by the terminal device to be downloaded and belongs to the same contract, and the third download password and the subscription file belong to the same The signed contract file is sent to the terminal device;

The third download password is used by the terminal device to request authentication from the operator server when the terminal device requests to download the subscription file that belongs to the same contract as the subscription file. By dynamically updating the download password, dynamic request authentication of the terminal device is implemented, and the attacker's masquerading download request is avoided.

The solutions provided by the foregoing first to third aspects are mainly described as being generated by the operator server and authenticating the download password. The solutions provided in the following fourth to sixth aspects mainly describe that the downloading password is generated and authenticated by the contract management entity. .

The fourth aspect provides a method for downloading a contract file, including:

Receiving, by the subscription management entity, the first request message sent by the operator server, and generating, according to the first request message, a subscription file that the terminal device requests to download;

After receiving the second request message sent by the terminal device, the subscription management entity generates a first download password, where the second request message is used to request to download the subscription file; the subscription management entity The first download password and the subscription file are sent to the terminal device, and the first download password is used by the terminal device when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file, the signing The management entity authenticates the terminal device.

In some possible designs, the method further includes:

Receiving, by the subscription management entity, a third request message sent by the operator server, and acquiring, according to the third request message, a subscription file that belongs to the same contract with the subscription file;

Receiving, by the subscription management entity, a fourth request message sent by the terminal device, where the fourth request message carries a second download password;

The subscription management entity authenticates the fourth request message, and when the second download password is the same as or corresponds to the first download password, the authentication succeeds;

After the authentication succeeds, the subscription management entity generates a third download password, and sends the third download password and the subscription file that belongs to the same contract with the subscription file to the terminal device that issues the fourth request message. The third download password is used by the subscription management entity to authenticate the terminal device when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file. Dynamic authentication is achieved by dynamically generating download passwords to avoid attackers' masquerading download requests.

In some possible designs, the first download password may be saved by the contract management entity or the operator server, and the method further includes one of the following:

The subscription management entity saves the first download password;

Or the subscription management entity sends the first download password to the operator server for saving.

In some possible designs, the subscription management entity authenticates the fourth request message, including one of the following:

The subscription management entity authenticates the second download password in the fourth request message by using the locally saved first download password;

Or the third request message carries the first download password from the subscription management entity (in this case, the first download password generated by the subscription management entity is sent by the subscription management entity to the The carrier management server saves the second download password in the fourth request message by using the first download password carried in the third request message. By setting the save location of the download password, it is effective to ensure that the contract management entity can obtain the real-time use for The download password of the download request of the authentication terminal device avoids the problem that the terminal device cannot be authenticated, thereby causing the terminal device to download the subscription file.

In some possible designs, the method further includes one of the following:

The subscription management entity updates the locally saved first download password to the third download password;

Or the contract management entity sends the third download password to the operator server for saving, so that the operator server updates the locally saved first download password to the third download password. By dynamically updating the download password, the dynamic authentication mechanism can be optimized to improve the security of the download.

In some possible designs, the first download password or the second download password or the third download password meet at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file. By setting the validity period and effective usage times of the download password, the attack probability when downloading the contract file can be further reduced, and the security of the contract file distribution can be improved.

In some possible designs, the second request message carries a fourth download password, and the fourth download password is generated by the subscription management entity for the terminal device before the terminal device requests the subscription, the fourth The download password is used to authenticate whether the terminal device has the right to apply for signing;

The generating the first download password includes:

The subscription management entity verifies the fourth download password, and after the verification is passed, generates the first download password;

After the generating the first download password, the method further includes:

The subscription management entity replaces the saved fourth download password with the first download password;

Alternatively, the subscription management entity sends the first download password to the operator server, so that the operator server replaces the locally saved fourth download password with the first download password. The signing management entity sends the fourth download password to the terminal device before the terminal device requests the signing of the operator server, so as to avoid the possibility of forging the download request during the first downloading process, and providing protection for the first download of the terminal device. And through two-factor authentication (including carrier services) Whether the identity of the terminal device is authenticated and the fourth download password is authenticated, the security of the first download is improved. In addition, the download password is dynamically generated and updated to reduce the probability of being attacked.

The fifth aspect provides a method for downloading a contract file, including:

Receiving, by the operator server, a first download request message of the terminal device, where the first download request message is used to request the carrier server to download the subscription file;

The operator server sends a first request message to the subscription management entity, where the first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

Receiving, by the operator server, the first download password sent by the subscription management entity, and saving the first download password; the first download password is a second request sent by the subscription management entity to the terminal device a first download password generated after the message, wherein the second request message is used to request to download the subscription file;

The first download password is used to authenticate the re-request of the terminal device when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.

In some possible designs, the method further includes:

Receiving, by the operator server, a second download request message sent by the terminal device, where the second download request is used to request to download a subscription file that belongs to the same contract with the subscription file;

The operator server sends a third request message to the subscription management entity, where the third request message is used to instruct the subscription management entity to acquire a subscription file that belongs to the same contract with the subscription file;

Receiving, by the operator server, a third download password sent by the subscription management entity, and updating the locally saved first download password to the third download password; and subsequently downloading established by the subscription management entity and the terminal device In the session, the terminal device sends a fourth request message to the subscription management entity, and after the subscription management entity successfully authenticates the first download password in the fourth request message, the third download password is generated, that is, the third download password is the a download password generated by the subscription management entity after the fourth request message is successfully authenticated, and the third download password is used by the terminal device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again. The management entity authenticates the terminal device. Dynamically update the download password, synchronize with the contract management entity, and authenticate for subsequent contract management entities The latest download password is provided in real time when the terminal device downloads the request.

In some possible designs, the third request message carries the first download password, and the third request message is further used by the subscription management entity after receiving the fourth request message sent by the terminal device. The first download password carried in the third request message, and the fourth request message is authenticated. The first download password is carried by the third request message, so that the first download password for authenticating the download request of the terminal is provided in real time for the subscription management entity.

In some possible designs, before the operator server receives the first download password sent by the subscription management entity, the method further includes:

The operator server acquires a fourth download password from the subscription management entity, and sends the fourth download password to the terminal device. The fourth download password is allocated by the contract management entity.

The saving the first download password comprises:

The operator server replaces the fourth download password with the first download password. By sending the fourth download password to the terminal device before the terminal device requests the contract from the operator server, the possibility of forging the download request during the first downloading process is avoided, and the first download of the terminal device is guaranteed.

The sixth aspect provides a method for downloading a subscription file, including:

The terminal device sends a first download request to the operator server, where the first download request message is used to apply for a subscription to the operator server, and request to download a subscription file;

Sending, by the terminal device, a second request message to the subscription management entity, where the second request message is used to request the subscription management entity to download the subscription file;

Receiving, by the terminal device, a first download password and the subscription file from the subscription management entity, where the first download password is generated by a subscription management entity;

The first download password is used by the terminal device to request authentication from the subscription management entity when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.

In some possible designs, when the terminal device needs to re-download the subscription file for various reasons, the request is initiated to the operator server, and the method further includes:

The terminal device sends a second download request message to the operator server, where the second download request message is used to request the carrier server to download and belong to the same contract with the subscription file. Signing documents;

Transmitting, by the terminal device, a fourth request message carrying a second download password to the subscription management entity;

The terminal device receives a third download password sent by the subscription management entity and the subscription file that belongs to the same contract with the subscription file, and the third download password is used by the subscription management entity to use the first download password. And generating, after the fourth request message sent by the terminal device is authenticated;

When the terminal device requests the terminal server to download the subscription file that belongs to the same contract with the subscription file, the terminal device requests the subscription management entity to request authentication. By dynamically updating the download password, the dynamic authentication download mechanism is optimized to improve the security of the download.

In some possible designs, the method further includes:

In some possible designs, the first download password or the second download password or the third download password meets at least one of the following:

In some possible designs, the second request message carries a fourth download password from the subscription management entity, and the fourth download password is used by the subscription management entity to verify before generating the first download password. The second request message;

After the terminal device receives the first download password and the subscription file, the method further includes:

The terminal device replaces the saved fourth download password with the first download password. Avoid the possibility of forgery download requests during the first download, provide guarantee for the first download of the terminal device, and improve the first download by two-factor authentication (including whether the identity of the operator server to authenticate the terminal device is legal and the fourth download password is authenticated). safety.

The following seventh aspect and the eighth aspect provide the embodiment, which is mainly described by the operator server, when the subscription file requested by the terminal device is the subscription file that has been applied for, and the contract management entity is notified to prepare the contract file.

A method for downloading a subscription file in a seventh aspect, the method comprising:

Receiving, by the operator server, a first request message sent by the terminal device, where the first request message is used to request to download the subscription file;

Determining, by the operator server, that the subscription file requested to be downloaded by the first request message is a subscription file that has been requested for signing, according to the information about the subscribed information carried in the first request message, sending a second request to the subscription management entity. The message, the second request message is used to instruct the subscription management entity to acquire the subscription file.

In some possible designs, the information that has been applied for the subscription includes the user identifier corresponding to the applied for the subscription, or the subscription document identifier corresponding to the subscription document that has been applied for the contract, or the corresponding application for the subscription. Download the password. Through the user ID or file identification or download password, the contract file that the terminal device requests to download can be obtained quickly, accurately, and in a targeted manner, and the process and time for downloading the contract file are reduced.

In some possible designs, the first request message further carries an embedded universal integrated circuit card eUICC identifier of the terminal device;

After determining that the subscription file requested by the first request message is a subscription file that has been requested for subscription, the operator server needs to execute before sending the second request message to the subscription management entity:

Determining whether the eUICC identifier is the same as the eUICC identifier corresponding to the saved subscription;

1. When it is determined that the eUICC identifier is the same as the eUICC identifier corresponding to the saved application subscription, the operator server may carry different parameters in the second request message by using one of the following manners, so that the subscription management entity acquires the terminal. Signing documents requested by the device:

The second request message further carries the re-download indication information and the subscription file identifier, where the re-download indication information is used to indicate that the subscription management entity is associated with the subscribed file that has been distributed according to the subscription file identifier. Signing document;

The second request message further carries the first subscription file information corresponding to the signed contract file that has been applied for the contract, and the first subscription document information that has been applied for the contract includes the signed application has been signed. The root key information corresponding to the distributed subscription file, the first subscription file information is used by the subscription file management entity to generate the subscription file that the terminal device requests to download.

The content carried by the second request message enables the subscription management entity to provide the subscription file that the subscription has been distributed for the terminal device, and the contract cost of the operator server can be reduced without newly generating a new subscription contract file.

2. When it is determined that the eUICC identifier is different from the saved eUICC identifier corresponding to the saved subscription, the download request of the terminal device is regarded as a new subscription, so that the second request message may be carried in the second request message. Signing the file information, so that the contract file management entity uses the second contract file information to generate a subscription file that the terminal device requests to download.

The eighth aspect provides a method for downloading a contract file, including:

Receiving, by the subscription management entity, a second request message sent by the operator server, acquiring, according to the second request message, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, Determining, according to the first request message, a message sent after the first request message requests to download the subscribed subscription file, where the first request message carries information that has been requested to be signed;

The contract management entity sends the contracted file that has been applied for the contract to the terminal device.

In some possible designs, the information that has been applied for the subscription includes the user identifier corresponding to the applied for the subscription or the subscription file identifier corresponding to the signed subscription document that has been applied for the subscription or the download password corresponding to the applied for the subscription. . Through the user ID or file identification or download password, the contract file that the terminal device requests to download can be obtained quickly, accurately, and in a targeted manner, and the process and time for downloading the contract file are reduced.

In some possible designs, according to the content of the information carried by the second request message, the subscription management entity may obtain the subscription file that the terminal device requests to download by using one of the following:

1. When the second request message further carries the re-downloading indication information and the subscription file identifier, the subscription management entity is associated with the contracted file that has been subscribed to the already-applied contract according to the file identifier of the contracted file.

2. The second request message further carries the corresponding contract file that has been applied for the contracted distribution. When signing the file information, the contract management entity uses the first subscription file information to generate a subscription file that the terminal device requests to download.

3. When the second request message further carries the second subscription file information, the subscription management entity uses the second subscription file information to generate a subscription file that the terminal device requests to download.

In the above 1 or 2, by providing the terminal device with the signed contract file that has been applied for the contract, the contract cost of the operator server can be reduced without newly creating a new contract signing document.

A ninth aspect of the present invention provides an operator server having a function of implementing a method corresponding to the download subscription file provided by the above first aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the operator server includes:

a receiving module, configured to receive a first request message sent by the terminal device, where the first request message is used to request the operator server to download the subscription file;

a processing module, configured to generate a first download password;

a sending module, configured to send a second request message to the subscription management entity, where the second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download, so that the terminal device receives the subscription from the terminal device The management entity downloads the contract document;

The second request message carries the first download password, so that the terminal device obtains the first download password from the subscription management entity; or sends the first to the terminal device by using the sending module. Download password

The processing module performs authentication on the request of the terminal device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file.

In a possible design, the operator server includes:

Interconnected processors, memories, receivers, and transmitters;

The memory is used to store program code, and the processor is configured to invoke program code in the memory to perform the following operations:

Receiving, by the receiver, a first request message sent by the terminal device, where the first request message is used to request the operator server to download the subscription file;

Generating a first download password;

Transmitting, by the transmitter, a second request message to the subscription management entity, where the second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download, so that the terminal device receives the subscription from the terminal device The management entity downloads the contract document;

The second request message carries the first download password, so that the terminal device obtains the first download password from the subscription management entity; or sends the first to the terminal device by using the transmitter Download password

The first download password is used by the processor to authenticate the re-request of the terminal device when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.

A tenth aspect of the present invention provides a terminal device having a function of implementing a method corresponding to the download subscription file provided by the second aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the terminal device includes:

a sending module, configured to send a first request message to the operator server, where the first request message is used to request the carrier server to download a subscription file, so that the operator server sends a second request message to the subscription management entity. The second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

a receiving module, configured to acquire a first download password generated by the operator server and receive the subscription file from the subscription management entity;

The first download password is used by the terminal device to request authentication from the server by using the sending module when requesting to download a subscription file that belongs to the same contract as the subscription file.

In a possible design, the terminal device includes:

Interconnecting processors, memories, receivers, and transmitters;

Transmitting, by the transmitter, a first request message to an operator server, where the first request message is used to request the carrier server to download a subscription file, so that the operator server is directed to the subscription management The entity sends a second request message, where the second request message is used to instruct the signing management entity to generate a subscription file that the terminal device requests to download;

Acquiring, by the receiver, a first download password generated by the operator server and receiving the subscription file from the subscription management entity;

The first download password is used by the terminal device to request authentication from the server through the transmitter when requesting to download a subscription file that belongs to the same contract as the subscription file.

An eleventh aspect of the present invention provides a contract management entity having a function of implementing a method corresponding to the download subscription file provided by the above third aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the contract management entity includes:

a receiving module, configured to receive a second request message sent by the operator server, where the second request message is used to instruct the signing management entity to generate a subscription file that the terminal device requests to download, where the second request message is the operator After receiving the first request message sent by the terminal device, the server sends the first request message to the subscription management entity, where the first request message is used to request the carrier server to download the subscription file;

a processing module, configured to generate the subscription file according to the second request message received by the receiving module;

a sending module, configured to send the first download password and the subscription file generated by the processing module to the terminal device, where the first download password is used by the terminal device to the operator server again When requesting to download a subscription file that belongs to the same contract as the subscription file, the server is requested to perform authentication, that is, the operator server authenticates the re-request message of the terminal device.

In a possible design, the contract management entity includes:

Interconnecting processors, memories, receivers, and transmitters;

Receiving, by the receiver, a second request message sent by the operator server, where the second request message is used to instruct the signing management entity to generate a subscription file that the terminal device requests to download, where the second request message is the operator After receiving the first request message sent by the terminal device, the server sends the first request message to the subscription management entity, where the first request message is used to request the carrier server to download the subscription file;

Generating the subscription file according to the second request message received by the receiver;

Sending, by the transmitter, the first download password and the subscription file generated by the processor to the terminal device, the first download password being used by the terminal device to request download again and the signing When the file belongs to the same contracted contract file, the server is requested to authenticate.

A twelfth aspect of the present invention provides a contract management entity having a function of implementing a method corresponding to the download subscription file provided by the fourth aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the contract management entity includes:

a receiving module, configured to receive a first request message sent by the operator server, where the first request message is sent by the operator server to the subscription management entity after receiving the first download request message of the terminal device, where The first download request message is used to request the carrier server to download a subscription file;

a processing module, configured to generate, according to the first request message received by the receiving module, a subscription file that the terminal device requests to download;

After the receiving module receives the second request message sent by the terminal device, generating a first download password, where the second request message is used to request to download the subscription file;

a sending module, configured to send the first download password and the subscription file generated by the processing module to the terminal device, where the first download password is used by the terminal device to request download again and the signing When the file belongs to the same contracted contract file, the processing module authenticates the terminal device.

In a possible design, the contract management entity includes:

Interconnecting processors, memories, receivers, and transmitters;

Receiving, by the receiver, a first request message sent by an operator server;

Generating, according to the first request message received by the receiver, a subscription file that the terminal device requests to download;

After the receiver receives the second request message sent by the terminal device, generating a first download password, where the second request message is used to request to download the subscription file;

Transmitting, by the transmitter, the first download password and the subscription file generated by the processor to the terminal device, where the first download password is used by the terminal device to request download again and the signing When the file belongs to the same contracted contract file, the processor authenticates the terminal device.

A thirteenth aspect of the present invention provides an operator server having a function of implementing a method corresponding to the download subscription file provided by the fifth aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the operator server includes:

a receiving module, configured to receive a first download request message of the terminal device, where the first download request message is used to request to download the subscription file from the operator server;

a sending module, configured to send a first request message to the subscription management entity, where the first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

The receiving module is further configured to receive a first download password sent by the subscription management entity, where the first download password is a first download generated by the subscription management entity after receiving the second request message sent by the terminal device a password, the second request message is used to request to download the subscription file;

a processing module, configured to save the first download password received by the receiving module;

The first download password is used by the terminal device to authenticate the re-request of the terminal device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file.

In a possible design, the operator server includes:

Interconnecting processors, memories, receivers, and transmitters;

Receiving, by the receiver, a first download request message of the terminal device, where the first download request message is used to request the carrier server to download a subscription file;

Transmitting, by the transmitter, a first request message to the subscription management entity, where the first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

Receiving, by the receiver, a first download password sent by the subscription management entity, and saving the first download password;

A fourteenth aspect of the present invention provides a terminal device having a function of implementing a method corresponding to the download subscription file provided by the sixth aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the terminal device includes:

a sending module, configured to send a first download request to the operator server, where the first download request message is used to apply for a subscription to the operator server, and request to download a subscription file;

And sending a second request message to the subscription management entity, where the second request message is used to request the subscription management entity to download the subscription file;

a receiving module, configured to receive a first download password and the subscription file from the subscription management entity, where the first download password is generated by a subscription management entity;

The first download password is used by the sending module to request authentication from the subscription management entity when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.

In a possible design, the terminal device includes:

Interconnecting processors, memories, receivers, and transmitters;

Wherein the memory is used to store program code, and the processor is configured to call the memory Program code to do the following:

Transmitting, by the transmitter, a first download request to the operator server, where the first download request message is used to apply for a subscription to the operator server, and request to download a subscription file;

Receiving, by the receiver, a first download password and the subscription file from the subscription management entity, the first download password being generated by a subscription management entity;

The first download password is used by the transmitter to request authentication from the signing management entity when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.

A fifteenth aspect of the present invention provides an operator server having a function of implementing a method corresponding to the download subscription file provided by the seventh aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the operator server includes:

a receiving module, configured to receive a first request message sent by the terminal device, where the first request message is used to request to download a subscription file;

a processing module, configured to determine, according to the information about the subscribed subscription carried in the first request message, that the subscription file requested by the first request message is a subscription file that has been requested to be signed;

a sending module, configured to send a second request message to the subscription management entity, where the processing module determines that the subscription file requested to be downloaded by the first request message is a subscription file that has been subscribed for, and the second request message is used to indicate The contract management entity acquires the contract file.

In a possible design, the operator server includes:

Interconnecting processors, memories, receivers, and transmitters;

Receiving, by the receiver, a first request message sent by the terminal device, where the first request message is used to request to download a subscription file;

Determining the first request cancellation according to the information about the subscribed subscription carried in the first request message The signing document requested to be downloaded is the contracted document that has been applied for the contract;

Using the transmitter, when the processor determines that the subscription file requested by the first request message is a subscription file that has been requested for subscription, sending a second request message to the subscription management entity, where the second request message is used to indicate The contract management entity acquires the contract file.

A sixteenth aspect of the present invention provides a contract management entity having a function of implementing a method corresponding to the download subscription file provided by the above eighth aspect. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the contract management entity includes:

a receiving module, configured to receive a second request message sent by the operator server;

a processing module, configured to acquire, according to the second request message received by the receiving module, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, according to the Determining, by the first request message, that the first request message is a message sent after requesting to download a subscription file that has been applied for, and the first request message carries information that has been requested to be signed;

And a sending module, configured to send the subscription file generated by the processing module to the terminal device.

In a possible design, the contract management entity includes:

Interconnecting processors, memories, receivers, and transmitters;

Using the receiver, for receiving a second request message sent by an operator server;

Obtaining, by the second request message received by the receiver, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, according to the first request message. Determining that the first request message is a message sent after requesting to download a subscription file that has been applied for, and the first request message carries information that has been requested to be signed;

And transmitting, by the transmitter, the subscription file generated by the processor to the terminal device.

A seventeenth aspect of the present invention provides a communication system having a function of implementing the above method of downloading a contract file. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the functions described above, which may be software and/or hardware.

In a possible design, the communication system comprises:

An operator server as described in the ninth aspect;

a terminal device according to the tenth aspect;

A contract management entity as described in the eleventh aspect.

In a possible design, the communication system comprises:

An operator server as described in the thirteenth aspect;

a terminal device according to the fourteenth aspect;

A contract management entity as described in the twelfth aspect.

In a possible design, the communication system comprises:

An operator server as described in the fifteenth aspect;

A contract management entity as described in the sixteenth aspect.

Compared with the prior art, in the solution provided by the present invention, when the terminal device requests to download the subscription file for the first time, the operator server generates a first download password, so that when the terminal device requests to download the subscription file again, the carrier server pairs The first download password is authenticated to implement dynamic authentication, which avoids security problems caused by an attacker falsifying a heavy download request, and can improve security when downloading a contract file.

DRAWINGS

1 is a flowchart of a method for downloading a subscription file in an embodiment of the present invention;

2 is another flowchart of a method for downloading a subscription file in an embodiment of the present invention;

2-1 is another flowchart of a method for downloading a subscription file in an embodiment of the present invention;

3-1 is a schematic structural diagram of an operator server according to an embodiment of the present invention;

3-2 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

3-3 is a schematic structural diagram of a contract management entity according to an embodiment of the present invention;

3-4 is a schematic structural diagram of a communication system according to an embodiment of the present invention;

4 is another flowchart of a method for downloading a subscription file in an embodiment of the present invention;

FIG. 5 is another flowchart of a method for downloading a subscription file according to an embodiment of the present invention; FIG.

5-1 is another flowchart of a method for downloading a subscription file in an embodiment of the present invention;

6-1 is another schematic structural diagram of an operator server according to an embodiment of the present invention;

6-2 is another schematic structural diagram of a terminal device according to an embodiment of the present invention;

6-3 is another schematic structural diagram of a contract management entity according to an embodiment of the present invention;

6-4 is another schematic structural diagram of a communication system according to an embodiment of the present invention;

FIG. 7 is another flowchart of a method for downloading a subscription file according to an embodiment of the present invention;

8-1 is another schematic structural diagram of an operator server according to an embodiment of the present invention;

8-2 is another schematic structural diagram of a contract management entity according to an embodiment of the present invention;

8-3 is another schematic structural diagram of a communication system according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a physical apparatus for performing a method for downloading a subscription file according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments, based on All other embodiments obtained by those skilled in the art without creative efforts are within the scope of the present invention.

The terms "first", "second" and the like in the specification and claims of the present invention and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a particular order or order. It is to be understood that the data so used may be interchanged where appropriate so that the embodiments described herein can be implemented in a sequence other than what is illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or modules is not necessarily limited to Those steps or modules, but may include other steps or modules not explicitly listed or inherent to such processes, methods, products or devices, the division of the modules presented herein is merely a logical division. There may be additional divisions in the implementation of the actual application, for example, multiple modules may be combined or integrated into another system, or some features may be ignored, or not executed, and the displayed or discussed mutual coupling. The direct coupling or the communication connection may be through some interfaces, and the indirect coupling or communication connection between the modules may be electrical or the like, which is not limited herein. Also, the module described as a separate component The sub-module may or may not be physically separated, may not be a physical module, or may not be divided into multiple circuit modules, and some or all of the modules may be selected according to actual needs to implement the embodiment of the present invention. The purpose of the program.

The embodiments of the present invention provide a method, a related device, and a system for downloading a subscription file, which are used in the field of wireless communication technologies, and can solve the problem of low security when re-downloading a subscription file in the existing mechanism in the prior art. The details are described below.

The contract management entity (SM) in this document refers to the SM-DP (Subscription manager-Data Preparation), or SM refers to the SM-DP and the contracted document distribution entity (SM-SR, Subscription manager-Secure Routing). ), SM-DP is responsible for the generation and security protection of the contract documents, and SM-SR is responsible for the caching and secure distribution of the contracted files. The subscription file in this document is information for the terminal device to access the carrier network. The terminal device described herein refers to a terminal device that does not include an eUICC, and may also be a terminal device that includes an eUICC. After the terminal device obtains the downloaded subscription file, the terminal device further sends the subscription file to the eUICC. Therefore, the request message for downloading the subscription file in this document may be sent by the terminal device or sent by the eUICC through the terminal device.

It should be particularly noted that the terminal device according to the embodiment of the present invention may be a device that provides voice and/or data connectivity to a user, a handheld device with a wireless connection function, or other processing device connected to a wireless modem. . The wireless terminal can communicate with one or more core networks via a RAN Radio Access Network, which can be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal. For example, it may be a portable, pocket, handheld, computer built-in or in-vehicle mobile device that exchanges language and/or data with a wireless access network. For example, personal communication service (PCS, Personal Communication Service) telephone, cordless telephone, Session Initiation Protocol (SIP) telephone, Wireless Local Loop (WLL) station, Personal Digital Assistant (PDA, Personal Digital Assistant), etc. . A wireless terminal may also be called a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, or an access point. Remote Terminal, Access Terminal, User Terminal, Terminal Equipment, User Generation User Agent, User Device, or User Equipment.

In the process of requesting to download the subscription file, the operator server is vulnerable to the forgery of the download request or the illegal signing, resulting in excessive and unnecessary interaction between the operator server and the contract management entity, resulting in security when re-downloading. It is less sexual and also increases the network load. To solve the above technical problem, the embodiment of the present invention mainly provides the following two technical solutions:

Solution 1. The server downloads the request from the server authentication user.

a. The operator server generates re-download verification information for authentication when the user first requests to download the subscription file;

b, the operator server sends the re-download verification information directly to the terminal device, or sends the re-download verification information to the terminal device through the contract management entity;

c. when the terminal device requests to re-download the subscription file, send the re-download verification information to the operator server;

d. The operator server authenticates the re-download verification information. After the authentication is passed, the new re-download verification information required for the next request for downloading the subscription file is generated, and the contract management entity is requested to prepare the subscription for the terminal device to request the download. file;

e. The contract management entity sends the contract file and the newly generated re-download verification information to the terminal device.

It can be understood that, in the first solution, when the terminal device requests to download the subscription file, the operator server generates new re-download verification information, and each new re-download verification information generated is used for the terminal device next time. When requesting to download the subscription file, the operator server authenticates the request of the terminal device, thereby implementing dynamic authentication.

Solution 2: The contract management entity authenticates the user's re-download request.

a. The subscription management entity generates re-download verification information for authentication when the user first requests to download the subscription file;

b. The contract management entity sends the re-download verification information and the contract file to the terminal device;

c. When the terminal device requests the operator server to re-download the subscription file, the operator server requests the subscription management entity to prepare the subscription file that the terminal device requests to download;

d. The terminal device sends the re-download verification information to the subscription management entity, and the subscription management entity authenticates the re-download verification information. After the authentication is passed, the user is requested to download the subscription file for the next time. New re-download verification information required;

It can be understood that, in the second solution, when the terminal device requests to download the subscription file, the subscription management entity generates new re-download verification information, and each new re-download verification information generated is used for the terminal device next time. When requesting to download the subscription file, the contract management entity authenticates the request of the terminal device, thereby implementing dynamic authentication.

In the above two technical solutions, the re-downloading verification information may be a string of characters, numbers or two-dimensional code information including the authentication information, for example, may be in the form of a download password, as long as the role of the authentication is performed, the specific form of this document There is no limit in the middle. In addition, after receiving the re-download verification information and the subscription file, the terminal device saves the re-download verification information mainly in the following two cases:

a. If the terminal device does not include the eUICC, the re-download verification information may be saved in the terminal device, such as the memory stored in the terminal device, and the local file assistant (LPA, Local Profile Assistant) in the terminal device may call the memory storage re-download. verify message. The LPA is responsible for the interaction between the terminal device and the eUICC. The main functions include downloading the subscription file, downloading the service discovery of the subscription file, and providing the user interface (UI, User Interface).

b. If the terminal device includes the eUICC, the re-download verification information is saved in the eUICC. When the request message for downloading the subscription file is sent by the terminal device, the terminal device obtains the re-download verification information from the eUICC, or may also re-download the verification. The information is stored in the terminal device, such as in the memory of the terminal device, and subsequently called through the LPA.

Through the above two technical solutions, the operator server or the contract management entity can dynamically verify the request of the terminal, so as to prevent the attacker from using the forged eUICC identifier or the user identifier to attack the carrier server by using the re-download or migration subscription, or Illegal acquisition of contract documents, etc. occurred.

It should be noted that, in this document, the terminal device that requests to download the subscription file may be the terminal device that requests to download the subscription file for the first time, for example, the subscription file downloaded before the deletion, or the eUICC is restored after being damaged, or the eUICC is reset. The original terminal device needs to re-download the subscription file. The terminal device requesting to download the subscription file may also be a new terminal device. For example, when the user of the original terminal device replaces the terminal device, the subscription file needs to be downloaded again.

If the user of the original terminal device re-downloads the subscription file when using the new terminal device, if the original terminal device If the device can be used normally, the re-downloading verification information can be obtained directly from the old terminal device. If the original terminal device cannot be used normally, the new terminal device cannot obtain the re-downloading verification information from the original terminal device, and the new terminal device can request to obtain the pre-registration through the login mailbox. The re-downloading verification information is obtained on the operator server, or the re-downloading verification information is obtained through a short message or a voice call, which is not limited.

Referring to FIG. 1 , the following provides a method for downloading a subscription file from the perspective of dynamically verifying a download request of a terminal device from an operator server, where the method includes:

101. The terminal device sends a first request message to the operator server.

The first request message is used to apply for a subscription to the operator server and request to download the subscription file, and the user can access the local user interface (LUI, Local User Interface) of the LPA of the terminal device or scan the QR code. The carrier server then sends a first request message to the operator server through the LPA.

102. The operator server receives the first request message sent by the terminal device.

After receiving the first request message, the operator server registers the first request message. Optionally, after the first request message is registered, an event identifier (Event ID) may be generated, and the event ID is sent to the terminal device. The event ID may also be used when the terminal requests to download the subscription file that belongs to the same contract with the subscription file, and the operator server authenticates the download request of the terminal, which may replace the function of the first download password in step 103, without generating the next The first download password is described.

103. The operator server generates a first download password.

104. The operator server sends a second request message to the subscription management entity.

The second request message is used to instruct the subscription management entity to generate the subscription file that the terminal device requests to download, so that the terminal device downloads the subscription file from the subscription management entity. If the subscription management entity prepares the subscription file, the second request message is further used to instruct the contract management entity to associate the generated subscription file with the subscription of the terminal device.

The second request message carries the first download password generated by the operator server, and the first download password is used by the terminal device to request the carrier server to download again and belong to the same contract with the subscription file. When the contract file is signed, the operator server authenticates the request of the terminal device.

Optionally, the operator server sends the generated first download password to the terminal device by using the following two methods:

In the above step 104, when the operator server sends the second request message to the subscription management entity, the first download password may be carried in the second request message, so that the subscription management entity receives the request to download the terminal device. After the request message of the subscription file is described, in the following step 107, the subscription management entity may send the first download password and the subscription file to the terminal device, so that the terminal device obtains from the subscription management entity The first download password;

Alternatively, after the foregoing step 103, the operator server sends the first download password to the terminal device.

105. The subscription management entity receives the second request message sent by the operator server.

The second request message may carry information such as an eUICC identifier, a file type, a subscription file identifier, an Event ID, and an SM-SR ID. The eUICC identifier may be an electronic identifier (EID, Electronic Identity), and the subscription file identifier may be an integrated circuit card identifier (ICCID).

106. The subscription management entity generates, according to the second request message, a subscription file that the terminal device requests to download.

After the signing file is generated, the signing management entity also associates the signing file with the signing of the terminal device, for example, the binding file may be bound to the eUICC corresponding to the EID, thereby implementing the subscription management entity registering the terminal device. Download request.

107. The contract management entity sends the subscription file to the terminal device.

When the second request message carries the first download password, the subscription management entity may send the first download password in a session for sending a subscription file, or may create a new one after the subscription file is successfully sent. The session sends the first download password.

108. The terminal device acquires the first download password generated by the operator server and receives the subscription file from the subscription management entity.

The terminal device may save the first download password to the eUICC-free terminal device, or save the information in the eUICC of the terminal device when the terminal device includes the eUICC, and the similarities in the text are no longer used. Narration.

Optionally, the terminal device may obtain the first download password and the subscription file from the subscription management entity, or obtain the first download password from the operator server, and obtain the subscription file from the subscription management entity. Not limited.

The terminal device receives the first download password mainly including the following two situations:

a. receiving the first download password in the session receiving the subscription file;

b. After successfully receiving the subscription file, receive the first download password sent by the subscription management entity in the newly established session of the subscription management entity. The manner in which the terminal device receives the download password sent by the network side is similar to that of the terminal device, and will not be described again.

109. The operator server receives the first confirmation message sent by the subscription management entity, and the operator server saves the first download password.

The first confirmation message is a message that is sent by the subscription management entity after successfully sending the subscription file to the terminal device, where the first confirmation message is used to instruct the terminal device to successfully download the subscription file. .

In the embodiment of the present invention, when the terminal device requests to download the subscription file for the first time, the operator server generates the first download password, so that the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again, the operator server. The device re-requests the terminal device to implement dynamic authentication, which effectively prevents the attacker from forging the re-download request to attack the carrier server or illegally obtaining the subscription file, thereby improving security.

Optionally, in some embodiments of the invention, in actual application, the terminal device that downloads the subscription file for the first time may delete the downloaded subscription file for some reasons, or the eUICC of the terminal device is damaged, or the device is downloaded. The terminal device of the contracted file cannot be used continuously, so that the user of the original terminal device needs to re-download the subscription file to the new terminal device, or the user of the original terminal device needs to re-download the subscription file to the new terminal device. New eUICC, etc. In these cases, the user of the original terminal device needs to re-download the subscription file.

The process of re-downloading the contract file by the user is shown in Figure 2:

201. The terminal device sends a third request message to the operator server.

The third request message carries a second download password, and the third request message is used to request the carrier server to download a subscription file that belongs to the same contract as the subscription file.

Optionally, the third request message may further carry an EID, an ICCID, an IMEI, or an Event ID. If the terminal device is a device of a legal subscription user, the second download password sent by the terminal device is the first download password, or is a variant of the first download password, and the forged download password or pseudo-use can be avoided. The user's download request, etc. occurs. The LPA or eUICC of the terminal device may deform the first download password or the Event ID by using a preset algorithm, and then send it to the operator server. It can be understood that, when the terminal device requests to re-download the subscription file from the operator server, the downloaded download password may be a download password generated by the operator server, or may be a variant of the download password generated by the terminal device to the operator server. The obtained terminal device can implement the modification of the download password by means of hash coding, signature, etc., and the specific modification manner is not limited herein, and the similarities in the following texts are not described again.

202. The operator server receives a third request message sent by the terminal device.

In this step 202, the operator server may also generate a new event ID, and the new event ID may be used for the terminal to request to download the subscription file that belongs to the same contract with the subscription file, and the operator server authenticates the download request of the terminal. Instead of the third download password in step 203. Alternatively, the new Event ID may also be generated by the subscription management entity in step 205.

203. The operator server authenticates the third request message, and after the authentication succeeds, generates a third download password.

That is, the operator server authenticates the terminal device that requests the download and the contract file to belong to the same contracted contract file. The terminal device here may be the terminal device that requested the download of the contract file last time, or may be the new terminal that has signed the contract. The device can increase the flexibility of the download mechanism as long as it requests the same contract file.

The operator server authenticates the third request message, which is specifically configured to authenticate the second download password. When the second download password is the same as or corresponds to the first download password, the authentication succeeds. Wherein, when the second download password is a variant of the first download password, the second download password may be considered to correspond to the first download password, and the similarities in the text may be referred to herein.

The third download password is used by the terminal device to request the authentication, or the terminal server, to the terminal device, when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file. Request for certification.

204. The operator server sends a fourth request message to the subscription management entity.

The fourth request message is used to indicate that the subscription management entity acquires a subscription file that is downloaded by the terminal device and belongs to the same contract as the subscription file, so that the terminal device downloads from the subscription management entity and belongs to the subscription file. Signing documents of the same contract.

Optionally, the carrier server sends the generated third download password to the following two methods. Terminal equipment, specifically:

In the foregoing step 204, when the operator server sends the fourth request message to the subscription management entity, the third download password may be carried in the fourth request message, so that the subscription management entity receives the request to download and send the terminal device. After the subscription file belongs to the request message of the same contracted subscription file, in the following step 206, the subscription management entity may send the third download password and the subscription file that belongs to the same contract with the subscription file to the terminal device. .

Alternatively, after the foregoing step 203, the operator server sends the third download password to the terminal device that sends the third request message.

205. The subscription management entity receives a fourth request message that is sent by the operator server and carries a third download password, and obtains a subscription file that belongs to the same contract with the subscription file according to the fourth request message.

Optionally, when the third request message carries the eUICC identifier (for example, an EID), in step 204, before the operator server sends the fourth request message to the subscription management entity, the eUICC identifier needs to be determined. Whether the eUICC identifier corresponding to the saved subscription is the same, and when the eUICC identifier is determined to be the same as the eUICC identifier corresponding to the saved subscription, the subscription file management entity may obtain the subscription file by using one of the following manners: For the contract documents belonging to the same contract, refer to Figure 2-1, as follows:

1. 204-1, when the operator server carries the re-download indication information and the subscription file identifier of the contracted contracted file in the fourth request message, 205-1, the contract management entity according to the weight Downloading an indication of the indication information, using the subscription file identifier to associate with the contracted file that has been distributed.

2, 204-2, the operator server carries the first subscription file information of the subscription in the fourth request message, 205-2, the subscription management entity uses the first subscription file information to generate a terminal device to request to download a contract file, wherein the first contract file information includes information such as a root key of the contracted file that has been distributed.

In addition, when it is determined that the eUICC identifier is different from the saved eUICC identifier, the contract management entity needs to generate a new subscription for the terminal device, and performs the process according to the new application subscription file processing. The operator server may carry the second subscription file information in the fourth request message, so that the subscription management entity generates the terminal device request by using the second subscription file information. The downloaded subscription file, wherein the second subscription file information refers to information used to generate a new subscription, which may be a subscription type, a subscription file identifier, or a root key information of a subscription file, such as a new root key. Information or a new contract file identifier.

206. The subscription management entity sends the third download password and the subscription file that belongs to the same contract with the subscription file to the terminal device.

The subscription management entity may send the first download password in a session in which the subscription file is sent, or may send the first download password by creating a new session after the subscription file is successfully sent.

207. The terminal device acquires a third download password generated by the operator server, and receives a subscription file from the contract management entity that belongs to the same contract with the subscription file.

The terminal device requests the operator server to request authentication when the terminal device requests the terminal server to download the subscription file that belongs to the same contract with the subscription file. The terminal device may be the same terminal device as the terminal device that sends the third request message, or may be a different terminal device.

Optionally, after obtaining the third download password, the terminal device replaces the locally saved first download password with the third download password.

Optionally, the terminal device may obtain the third download password from the subscription management entity and the subscription file that belongs to the same contract with the subscription file, or obtain the third download password from the operator server, and obtain the same from the subscription management entity. The signing documents belong to the same contracting documents, which are not limited.

In the embodiment corresponding to FIG. 1 and FIG. 2 above, for the terminal device, each time the operator server generates the download password, the terminal device can be obtained from the operator server or the contract management entity. Specifically, after the carrier server generates the download password, it directly sends the download password to the terminal device; or when the operator server requests the subscription management entity to obtain the subscription file that the terminal device requests to download, the request message carries the download password, so that the subsequent subscription management entity In the session in which the subscription file is sent to the terminal device, the download password and the subscription file may be sent to the terminal device.

208. The subscription management entity sends a second confirmation message to the operator server.

The second confirmation message is used to indicate that the terminal device has successfully downloaded the subscription file that belongs to the same contract with the subscription file.

209. After receiving, by the operator server, the second confirmation message sent by the subscription management entity, And saving the third download password and deleting the first download password.

The second confirmation message is a message that is sent by the subscription management entity after successfully sending a subscription file that belongs to the same contract with the subscription file to the terminal device.

In the embodiment of the present invention, the second download password sent by the terminal device is authenticated, so that the terminal device after the authentication is passed can continue to download the subscription file, and generate a third download password for downloading the download request of the authentication terminal device. And through the dynamic update download password, optimize the dynamic authentication mechanism to improve the security of the download.

It can be understood that, on the basis of the embodiment corresponding to FIG. 2, the subsequent terminal may still request to download a subscription file that belongs to the same contract with the subscription file, that is, the operator server receives the third transmission sent by the terminal device. After downloading the password request message, the operator server generates a fourth download password. It can be seen that the fourth download password has the same function as the first download password and the third download password, and subsequently, with the download request of the terminal device, the operator server The fifth download password, the sixth download password, and the like may be generated, and the process of the terminal device requesting to download the subscription file that belongs to the same contract with the subscription file is similar to the embodiment corresponding to FIG. 2, and details are not described herein again.

Optionally, the first download password or the third download password or the download password generated by the operator server in the subsequent download process meets at least one of the following items:

Valid for a preset duration, the number of valid uses is finite, the number of valid uses within the preset duration is finite, and the number of downloads containing the contracted file. By setting the validity period of the download password and the number of valid times that can be used, and counting the number of downloads of the signed file, the attack probability when downloading the contract file can be further reduced, and the security of the contract file distribution can be improved.

Optionally, when the user needs to re-download the subscription file, the user may also send the event identifier generated by the operator server at the time of the last download to the operator server to implement dynamic authentication, so as to obtain the contract file that belongs to the same contract with the contract file. .

More importantly, because the contracted documents are in use, the contents of the subscription documents that the user first applied for changes may change due to changes in user requirements or upgrades of the contracted files, such as changes in certain parameters in the contracted documents. When the user re-downloads the contract file, the final contract file is different from the first download, but the changed contract file is still the same as the initial contract file, and the change characteristics of the contract file also apply to the figure in this article. 4 and FIG. 5 corresponding to the embodiment, the subsequent similarities will not be described again.

The method for downloading the subscription file in the present invention is described above. The following describes the carrier server, the terminal device, and the contract management entity that execute the above-mentioned download contract file.

1. The carrier server 30 is described with reference to FIG. 3-1. The carrier server 30 includes:

The receiving module 301 is configured to receive a first request message sent by the terminal device, where the first request message is used to request the carrier server 30 to download the subscription file.

The processing module 302 is configured to generate a first download password.

The sending module 303 is configured to send a second request message to the subscription management entity 50, where the second request message is used to instruct the subscription management entity 50 to generate a subscription file that the terminal device requests to download, so that the terminal device The contract management entity 50 downloads the contract file;

The second request message carries the first download password, so that the terminal device obtains the first download password from the subscription management entity; or sends the first message to the terminal device by using the sending module 303. a download password;

The first download password is used by the processing module 302 to authenticate the re-request of the terminal device when the terminal device requests the operator server 30 to download the subscription file that belongs to the same contract with the subscription file.

In the embodiment of the present invention, when the terminal device requests to download the subscription file for the first time, the processing module 302 generates the first download password, so that when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again, the processing module 302 The device re-requests the terminal device to implement dynamic authentication, which effectively prevents the attacker from forging the re-download request to attack the carrier server or illegally obtaining the subscription file, thereby improving security.

Optionally, the processing module 302 is further configured to:

Receiving, by the receiving module 301, the first confirmation message sent by the subscription management entity 50, saving the first download password, where the first confirmation message is that the subscription management entity successfully sends the subscription file to the The message sent after the terminal device is sent, the first confirmation message is used to indicate that the terminal device successfully downloads the subscription file.

Optionally, in some embodiments of the invention, when the terminal device needs to re-download the subscription file, the processing module 302 is further configured to:

Receiving, by the receiving module 301, a third request message sent by the terminal device, the third request The message carries a second download password, and the third request message is used to request the subscription management entity 50 to download a subscription file that belongs to the same contract as the subscription file;

The third request message is authenticated using the first download password;

When the second download password is the same as or corresponds to the first download password, the authentication succeeds, and after the authentication succeeds, the third download password is generated;

Sending, by the sending module 303, the fourth request message to the subscription management entity 50, where the fourth request message is used to instruct the subscription management entity 50 to obtain a subscription file that belongs to the same contract with the subscription file, so as to be sent The terminal device of the third request message downloads, from the subscription management entity 50, a subscription file that belongs to the same contract as the subscription file;

The fourth request message carries the third download password, so that the terminal device obtains the third download password from the subscription management entity; or sends the third request message by using the sending module 303. Transmitting, by the terminal device, the third download password;

The third download password is used to authenticate the request of the terminal device 40 when the terminal device 40 requests the carrier server 30 to download the subscription file that belongs to the same contract as the subscription file.

Optionally, the processing module 302 is further configured to:

Receiving, by the receiving module 301, the second confirmation message sent by the subscription management entity 50, saving the third download password and deleting the first download password, where the first confirmation message is successful for the subscription management entity Sending, by the terminal device, a subscription file that belongs to the same contract with the subscription file to the terminal device, and the second confirmation message is used to indicate that the terminal device successfully downloads the subscription file that belongs to the same contract with the subscription file.

Optionally, in order to reduce the probability of attacking the pseudo-download password or the pseudo-download request on the operator server, the time limit of downloading the password is set, and the first download password or the third download password meets at least one of the following items:

Valid for a preset duration, the number of valid uses is finite, the number of valid uses within the preset duration is finite, and the number of downloads containing the contracted file.

The terminal device 40 is described with reference to FIG. 3-2. The terminal device 40 includes:

The sending module 401 is configured to send a first request message to the operator server 30, where the first request message is used to request the carrier server 30 to download a subscription file, so that the operator server sends the subscription server to the subscription management entity 50. a second request message, the second request message is used to indicate the sign The management entity 50 generates a subscription file that the terminal device requests to download;

The receiving module 402 is configured to acquire a first download password generated by the operator server and receive the subscription file from the subscription management entity 50, where the first download password is generated by the operator server 30;

The first download password is used by the terminal device to request the operator server 30 to download a subscription file that belongs to the same contract with the subscription file, and then requests the server 30 through the sending module 401. Certification.

In the embodiment of the present invention, when the terminal device 40 requests to download the subscription file for the first time, the receiving module 401 obtains the first download password generated by the operator server 30, so that the terminal device 40 requests again to download the subscription file that belongs to the same contract with the subscription file. The first download password obtained at the time of the previous download can be used to request authentication from the operator server 30 to implement dynamic authentication, which effectively prevents the attacker from forging the re-download request to attack the operator server or illegally obtaining the subscription file, thereby improving security.

Optionally, the sending module 401 is further configured to:

Sending, to the operator server 30, a third request message carrying a second download password, where the third request message is used to request the carrier server 30 to download a subscription file that belongs to the same contract with the subscription file;

The receiving module 402 is further configured to: after the operator server 30 authenticates the third request message, acquire a third download password generated by the operator server, and receive an address from the subscription management entity. The contracted documents belong to the same contracted contract documents;

And the third download password is used by the sending module 401 to request authentication from the operator server 30 when the terminal device requests the carrier server 30 to download the subscription file that belongs to the same contract with the subscription file. .

The first download password or the third download password is acquired by the terminal device from the operator server 30 or the contract management entity 50.

In the embodiment of the present invention, when the terminal device 40 requests to download the subscription file again, the first download password obtained when the subscription file was last downloaded is used to request authentication from the operator server 30, and the third download generated by the operator server 30 is obtained. Password, that is, a new download password is dynamically generated during each download process, which can prevent an attacker from forging a re-download request to attack an operator server or illegally obtaining a contract message. Improve the security of the download.

Optionally, in some embodiments of the invention, the security of the dynamic authentication may be improved by dynamically updating the download password, and the secure downloading of the subscription file is provided. The terminal device 40 further includes:

The processing module 403 is configured to replace the locally saved first download password with the third download password obtained by the receiving module.

Optionally, in some embodiments of the invention, to reduce the probability of attacking the pseudo-download password or the pseudo-download request on the operator server, setting a time limit of downloading the password, the first download password or the third download password Meet at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.

3. The contract management entity 50 is described with reference to FIG. 3-3. The contract management entity 50 includes:

The receiving module 501 is configured to receive a second request message sent by the operator server 30, where the second request message is used to instruct the signing management entity 40 to generate a subscription file that the terminal device requests to download, where the second request message is The operator server 30 sends the first request message sent by the terminal device 40 to the subscription management entity 50, wherein the first request message is used to request the carrier server 30 to download the Signing documents;

The second request message carries a first download password generated by the operator server 30;

The processing module 502 is configured to generate the subscription file according to the second request message received by the receiving module 501;

a sending module 503, configured to send the first download password and the subscription file generated by the processing module 502 to the terminal device, where the first download password is used by the terminal device to perform the operation again When the merchant server 30 requests to download a subscription file that belongs to the same contract as the subscription file, it requests authentication from the operator server 30, and specifically requests the operator server 30 for authentication by transmitting a third request message.

In the embodiment of the present invention, when the terminal device 40 first requests to download the subscription file, the receiving module 501 receives the first download password generated by the operator server 300, and sends the first download password to the process of sending the subscription file. The terminal device 40 saves, so that when the terminal device requests to download the subscription file that belongs to the same contract as the subscription file again, the terminal server 40 can request the identification from the operator server 30. The certificate implements dynamic authentication, which effectively prevents the attacker from forging the re-download request to attack the carrier server or illegally obtaining the subscription file to improve security.

Optionally, in some embodiments of the invention, when the terminal device requests to download the subscription file again, the processing module 502 is further configured to:

Receiving, by the receiving module 501, a fourth request message that is sent by the operator server 30 and carrying a third download password, where the third download password is generated after the operator server successfully authenticates the third request message. Download password

Obtaining, according to the instruction of the fourth request message, a subscription file that is requested by the terminal device to be downloaded and belongs to the same contract, and the third download password is the same as the subscription file by the sending module 503. The signed contract file is sent to the terminal device that requests to download the contract file that belongs to the same contract with the contract file;

The third download password is used by the terminal device to request authentication from the operator server 30 when the terminal device requests to download the subscription file that belongs to the same contract as the subscription file.

The embodiment of the present invention further provides a communication system. Referring to FIG. 3-4, the communication system 1 includes:

The operator server 30 as shown in Figure 3-1;

Terminal device 40 as shown in Figure 3-2;

The contract management entity 50 is as shown in Figure 3-3.

It should be noted that, in the embodiments of the present invention (including the embodiments shown in FIG. 3-1, FIG. 3-2, and FIG. 3-3), the physical devices corresponding to all the receiving modules may be receivers, all of which are The physical device corresponding to the sending module may be a transmitter, and the physical device corresponding to all processing modules may be a processor. Each of the devices shown in FIG. 3-1, FIG. 3-2, and FIG. 3-3 may have a structure as shown in FIG. 9. When one of the devices has the structure shown in FIG. 9, the processing in FIG. , transmitter and receiver The foregoing processing module, the transmitting module, and the receiving module provided by the apparatus embodiment corresponding to the apparatus are the same or similar functions, and the memory storage processor in FIG. 9 needs to call the program code when the method of downloading the subscription file is executed.

Referring to FIG. 4, the following provides a method for downloading a subscription file from the perspective of the dynamic verification of the download request of the terminal management device by the subscription management entity. In this embodiment, the subscription management entity may download the self-generated download. The password is saved locally, and the subsequent request for the terminal device is authenticated, and can also be sent to the operator server for storage. When the terminal device that requests the download of the subscription file needs to be authenticated, the subscription management entity obtains the download password from the operator server. The storage location and storage method of the download password are not limited. Embodiments of the invention include:

601. The terminal device sends a first download request message to the operator server.

The first download request message is used to apply for a subscription to the operator server, and request to download a subscription file.

602. The operator server receives the first download request message of the terminal device, and sends a first request message to the subscription management entity.

The first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download.

603. The subscription management entity receives the first request message sent by the operator server, and generates, according to the first request message, a subscription file that the terminal device requests to download.

604. The terminal device sends a second request message to the subscription management entity.

The second request message is used to request the subscription management entity to download a subscription file.

605. After receiving the second request message sent by the terminal device, the subscription management entity generates a first download password.

Optionally, the subscription management entity may save the generated first download password locally, and directly use the first downloaded password pair saved locally when the subsequent terminal device requests to download the subscription file that belongs to the same contract with the subscription file. The download request of the terminal device is authenticated; the first download port may also be Sending to the operator server for saving, as described in step 608, when the subsequent terminal device requests again to download the subscription file that belongs to the same contract with the subscription file, the subscription management entity uses the first download password obtained from the operator server. For the authentication request of the terminal device, refer to the embodiment corresponding to FIG. 5 below. By setting the save location of the download password, the subscription management entity can obtain the download password of the download request for authenticating the terminal device in real time, so as to avoid the problem that the terminal device cannot download the subscription file.

Optionally, in the process that the terminal device requests to download the subscription file for the first time, before the subscription management entity sends the first download password to the operator server, the subscription management entity may allocate a fourth download password to the terminal device. And sending the fourth download password to the operator server for saving, the terminal device may acquire the fourth download password from the operator server by using a mail, a short message, or the like, where the fourth download password is used for the terminal Whether the device has the right to apply for contracting for certification. When the terminal device requests the subscription management entity to download the subscription file, the subscription management entity further needs to authenticate the fourth download password, and the terminal device may carry the fourth download password in the second request message to the subscription management. The entity requests authentication, and the subscription management entity verifies the fourth download password, and after the verification is passed, generates the first download password;

After generating the first download password, the subscription management entity replaces the saved fourth download password with the first download password;

Alternatively, the subscription management entity sends the first download password to the operator server, and the operator server replaces the locally saved fourth download password with the first download password. It can be seen that the subscription management entity sends a fourth download password to the terminal device before the terminal device requests the contract from the operator server, to avoid the possibility of forgery download request in the first download process, and provides protection for the first download of the terminal device, and Improve the security of the first download through two-factor authentication (including whether the operator server authenticates the identity of the terminal device and whether the fourth download password is authenticated).

606. The subscription management entity sends the first download password and the subscription file to the terminal device.

Similar to the embodiment corresponding to FIG. 1 and FIG. 2, in this embodiment, the first download password is saved in the terminal device that does not include the eUICC, or is saved in the eUICC of the terminal device, and the subscription file is saved in the end. The eUICC of the end device, the similarities are not repeated here.

607. The terminal device receives a first download password and the subscription file from the subscription management entity.

The first download password is used when the terminal device requests the operator server to download a subscription file that belongs to the same contract with the subscription file, and the terminal device requests authentication from the subscription management entity.

Optionally, after receiving the first download password and the subscription file, the terminal device replaces the saved fourth download password with the first download password.

608. The subscription management entity sends a first confirmation message carrying the first download password to the operator server.

The first confirmation message is used to indicate that the terminal device has successfully downloaded the subscription file, so that the operator saves the first download password; when the operator server saves the fourth download password, the operator server replaces the saved fourth download password. For the first download password.

In the embodiment of the present invention, when the terminal device requests to download the subscription file for the first time, the subscription management entity generates the first download password, so that the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again, the subscription management entity. The device re-requests the terminal device to implement dynamic authentication, which effectively prevents the attacker from forging the re-download request to attack the carrier server or illegally obtaining the subscription file, thereby improving security.

Optionally, in some embodiments of the present invention, in a practical application, the terminal device that has downloaded the subscription file needs to re-download the subscription file, and the subscription management entity can dynamically authenticate the download request of the terminal device to improve the downloading. Security, specific embodiment Referring to FIG. 5, an embodiment of the present invention includes:

701. The terminal device sends a second download request message to the operator server.

The second download request message is used to request, from the operator server, to download a subscription file that belongs to the same contract as the subscription file;

702. The operator server receives a second download request message sent by the terminal device.

703. The operator server sends a third request message to the subscription management entity.

The third request message is used to indicate that the subscription management entity acquires and belongs to the subscription file Signing documents of the same contract. Optionally, in step 703, the third request message may further carry the first download password from the subscription management entity, and provide the subscription to the subscription management entity, so that the subscription management entity receives the terminal device in step 706. After transmitting the fourth request message, the fourth request message is authenticated by using the first download password carried by the third request message. The authentication of the fourth request message by the contract management entity may also be understood as the authentication of the second download password in the fourth request message, and the details in the full text are not described herein.

704. The subscription management entity receives a third request message sent by the operator server, and acquires a subscription file that belongs to the same contract with the subscription file according to the third request message.

After the subscription management entity receives the third request message and prepares the subscription file that belongs to the same contract with the subscription file, the terminal device establishes with the subscription management entity to download the subscription document that belongs to the same contract with the subscription file. The session specifically includes the following steps 705-709.

705. The terminal device sends, to the subscription management entity, a fourth request message that carries a second download password.

It can be seen that the second download password sent by the terminal device is not necessarily accurate, and may be sent by the pseudo user. Even if the identity authentication of the operator server is passed, the downloaded download password is not necessarily sent to the embodiment corresponding to FIG. 3 above. The first download password of the terminal device. That is, only when the user who issues the second download password is a legitimate subscription user, the second download password is a variant of the first password or the first download password, thereby preventing the pseudo user from requesting to download the subscription file, or the forged download password or the like.

Optionally, when the second download request message carries the eUICC identifier (for example, an EID), in step 703, the operator server needs to determine the eUICC before sending the third request message to the subscription management entity. And determining whether the eUICC identifier corresponding to the saved subscription is the same. When determining that the eUICC identifier is the same as the eUICC identifier corresponding to the saved subscription, the subscription file management entity may obtain the subscription file by using one of the following: For the contract documents belonging to the same contract, refer to Figure 5-1, as follows:

1. 703-1, when the operator server carries the re-download indication information and the subscription file identifier of the contracted signed subscription file in the third request message, 704-1, the subscription management entity according to the weight The indication of the indication information is downloaded, and the subscription file associated with the contract is identified using the subscription file.

2. 703-2. The operator server carries the first signed contract in the third request message. Information, 704-2, the contract management entity uses the first subscription file information to generate a subscription file requested by the terminal device for downloading, wherein the first subscription file information includes the root of the signed subscription file that has been distributed Information such as keys.

In addition, when it is determined that the eUICC identifier is different from the saved eUICC identifier, the contract management entity needs to generate a new subscription for the terminal device, and performs the process according to the new application subscription file processing. The operator server may carry the second subscription file information in the third request message, so that the subscription management entity uses the second subscription file information to generate a subscription file that the terminal device requests to download, where the second subscription file The information refers to information used to generate a new subscription, which may be a subscription type, a contract file identifier, or a root key information of a subscription file, such as new root key information or a new subscription file identifier.

706. The subscription management entity receives a fourth request message sent by the terminal device, where the subscription management entity authenticates the fourth request message.

The fourth request message includes a first download password acquired by the terminal device during the last download signing process, or a variant of the obtained first download password, and the contract management entity authenticates the second download in the fourth request message. A variant of the password or the second download password.

In step 706, the subscription management entity authenticates the fourth request message, including one of the following:

Or, when the third request message in step 704 carries the first download password from the subscription management entity, the subscription management entity uses the first download password carried in the third request message, The second download password in the fourth request message is authenticated.

707. After the authentication is passed, the subscription management entity generates a third download password.

708. The subscription management entity sends the third download password and the subscription file that belongs to the same contract with the subscription file to the terminal device.

The third download password is used by the subscription management entity to the terminal when the terminal device requests the carrier server to download a subscription file that belongs to the same contract as the subscription file. The device's request is authenticated. Dynamic authentication is achieved by dynamically generating download passwords to avoid attackers' masquerading download requests.

Optionally, the subscription management entity may save the generated third download password locally, that is, update the previously saved first download password to the third download password, and the subsequent terminal device requests the download again to be the same as the subscription file. When signing the contracted file, the download request of the terminal device is directly authenticated by using the third download password saved locally; the third download password may also be sent to the operator server for saving, and the operator server receives the subscription management. After the third download password sent by the entity, the first download password saved locally is updated to the third download password, and when the subsequent terminal device requests to download the subscription file that belongs to the same contract with the subscription file, The operator server transmits the third download password to the contract management entity, and the contract management entity authenticates the download request of the terminal device using the third download password obtained from the operator server. Improve the dynamic authentication mechanism by dynamically updating the download password and improve the security of the download.

It should be noted that the processing manner of the download password generated by the subsequent subscription management entity is similar to that of the first download password or the third download password described above, and is not described herein again.

709. The terminal device receives a third download password from the subscription management entity and the subscription file that belongs to the same contract with the subscription file.

The third download password is used by the terminal device to request authentication from the contract management entity when requesting to download the subscription file that belongs to the same contract with the contract file again to the operator server.

After receiving the third download password and the subscription file belongs to the same contracted subscription file, the terminal device replaces the locally saved first download password with the third download password. By dynamically updating the download password and synchronizing with the network side, the dynamic authentication mechanism can be optimized to improve the security of the download. Optionally, after step 709, the method further includes the step 710, after the operator server receives the second confirmation message sent by the subscription management entity, saving the third download password and deleting the first download password. . The third download password saved by the operator server is the same as the first download password in the embodiment, and may be provided to the subscription management entity to authenticate the download request of the terminal, and details are not described herein.

In the embodiment of the present invention, the first download password sent by the terminal device is authenticated, so that the terminal device after the authentication is passed can continue to download the subscription file, and generate the authentication terminal device for downloading. The third download password of the download request, and the dynamic password update mechanism to optimize the dynamic authentication mechanism and improve the security of the download.

Optionally, in the embodiment corresponding to FIG. 4 and FIG. 5, the first download password or the second download password or the third download password or the download password generated by the operator server in the subsequent download process are both Meet at least one of the following:

The embodiment corresponding to the foregoing FIG. 4 and FIG. 5 illustrates a method for downloading a subscription file in the present invention. The following describes the operator server, the terminal device, and the contract management entity that execute the method for downloading the subscription file.

1. The contract management entity 80 is described with reference to FIG. 6-1. The contract management entity 80 includes:

The receiving module 801 is configured to receive a first request message sent by the operator server 90, where the first request message is sent by the operator server 90 to the subscription management entity after receiving the first download request message of the terminal device 100. 80 is sent, wherein the first download request message is used to request the carrier server 90 to download a subscription file;

The processing module 802 is configured to generate, according to the first request message received by the receiving module 801, a subscription file that the terminal device requests to download;

After the receiving module 801 receives the second request message sent by the terminal device, generating a first download password, where the second request message is used to request to download the subscription file;

The sending module 803 is configured to send the first download password and the subscription file generated by the processing module 802 to the terminal device, where the first download password is used by the terminal device to request download again and the signing When the file belongs to the same contracted contract file, the processing module 802 authenticates the request of the terminal device.

In the embodiment of the present invention, when the terminal device requests to download the subscription file for the first time, the processing module 802 generates the first download password, so that when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again, the processing module 802 Authenticate the re-request of the terminal device to achieve Dynamic authentication effectively prevents attackers from forging heavy download requests to attack carrier servers or illegally obtaining subscription files to improve security.

Optionally, in some embodiments of the invention, when the terminal device requests to download the subscription file again, the processing module 802 is further configured to:

Receiving, by the receiving module 801, a third request message sent by the operator server 90;

Obtaining, according to the third request message, a contract file that belongs to the same contract as the contract file;

Receiving, by the receiving module 801, a fourth request message sent by the terminal device, where the fourth request message carries a second download password;

And authenticating the fourth request message, when the second download password is the same as or corresponding to the first download password, the authentication is successful;

After the authentication is passed, the third download password is generated, and the third download password and the subscription file that belongs to the same contract with the subscription file are sent by the sending module 803 to the terminal device that issues the fourth request message. The third download password is used by the processing module 802 to authenticate the terminal device when the terminal device requests to download the subscription file that belongs to the same contract as the subscription file.

Optionally, in some embodiments of the invention, to improve the security of downloading the subscription file, the method may be implemented by dynamically authenticating the download request of the terminal device, and the processing module 802 authenticates the fourth request message, including one of the following: :

And authenticating the second download password in the fourth request message by using the locally saved first download password;

Or the third request message carries the first download password from the subscription management entity, and uses the first download password carried in the third request message to the first of the fourth request messages. Second, download the password for authentication.

Optionally, the processing module 802 is further configured to perform one of the following steps:

Saving the first download password;

Alternatively, the first download password is sent to the operator server 90 for saving by the sending module 803.

In order to improve the security of downloading the contract file, you can dynamically update the download password required for authentication. The processing module 802 is further configured to perform one of the following steps:

Updating the locally saved first download password to the third download password;

Or, the third download password is sent to the operator server 90 by the sending module 803, so that the operator server 90 updates the locally saved first download password to the third download password.

Optionally, the first download password or the third download password meets at least one of the following:

Optionally, in some embodiments of the present invention, in order to prevent the pseudo user from being authenticated by the operator server, the terminal device may provide a download password to the terminal device before the terminal device applies for signing, so as to perform authentication when the terminal device applies for signing, The second request message carries a fourth download password.

The processing module 802 is specifically configured to:

Verifying the fourth download password, and after the verification is passed, generating the first download password;

The processing module 802 is further configured to:

Replacing the saved fourth download password with the first download password;

Or sending, by the sending module 803, the first download password to the operator server 90, so that the operator server 90 replaces the locally saved fourth download password with the first download password. .

2. The operator server 90 is described with reference to FIG. 6-2. The carrier server 90 includes:

The receiving module 901 is configured to receive a first download request message of the terminal device, where the first download request message is used to request the carrier server to download the subscription file.

The sending module 902 is configured to send a first request message to the subscription management entity 80, where the first request message is used to instruct the subscription management entity 80 to generate a subscription file that the terminal device requests to download;

The receiving module 901 is further configured to receive a first download password sent by the subscription management entity 80, where the first download password is generated after the subscription management entity 90 receives the second request message sent by the terminal device 100. a first download password, wherein the second request message is used to request to download the subscription file;

The processing module 903 is configured to save the first download port received by the receiving module 901 make;

In the embodiment of the present invention, when the terminal device requests to download the subscription file for the first time, the processing module 903 receives the first download password generated by the subscription management entity 80 through the receiving module 901, and saves, so that the terminal device requests the download and the subscription file again. When the subscription file belongs to the same contract, the subscription management entity 80 can be provided with the first download password for authenticating the download request of the terminal device, and the contract management entity 80 can reduce the password when the download password is not saved, thereby implementing the backup download password. Guarantee the feasibility of dynamic authentication.

Optionally, when the terminal device initiates a process of re-downloading the subscription file, the receiving module 901 is further configured to:

Receiving, by the terminal device, a second download request message, where the second download request is used to request to download a subscription file that belongs to the same contract with the subscription file;

The sending module 902 is further configured to: send a third request message to the subscription management entity, where the third request message is used to instruct the subscription management entity 80 to obtain a subscription file that belongs to the same contract with the subscription file;

The processing module 903 is further configured to: receive, by the receiving module 901, a third download password sent by the subscription management entity, and update the locally saved first download password to the third download password; The third download password is a download password generated by the subscription management entity after the authentication succeeded to the fourth request message terminal device, and the third download password is used by the terminal device to request the download again to belong to the same contract with the subscription file. When the contract file is signed, the contract management entity 80 authenticates the request of the terminal device.

Optionally, the operator server 90 may further provide the download password to the subscription management entity 80 in the process of re-downloading the subscription file, where the first download password may be carried in the third request message. The third request message is further used by the subscription management entity, after receiving the fourth request message sent by the terminal device, using the first download password carried in the third request message, and performing the fourth request message Certification.

Optionally, the receiving module 901 is further configured to: before receiving the first download password sent by the subscription management entity, in order to avoid the possibility of forging a download request in the first downloading process:

Obtaining a fourth download password from the contract management entity 80, where the fourth download password is allocated by the contract management entity;

The processing module 903 is further configured to send the fourth download password to the terminal device by using the sending module 902;

The fourth download password is replaced with the first download password, so that the download password is dynamically updated, and the security of downloading the subscription file is improved.

The terminal device 100 is described with reference to FIG. 6-3. The terminal device 100 includes:

The sending module 1001 is configured to send a second request message to the subscription management entity 80, where the second request message is used to request the subscription management entity 80 to download the subscription file.

The receiving module 1002 is configured to receive a first download password and the subscription file from the subscription management entity 80, where the first download password is generated by the subscription management entity 80.

The first download password is used by the sending module 1001 to request authentication from the subscription management entity 80 when the terminal device 100 requests to download a subscription file that belongs to the same contract as the subscription file.

In the embodiment of the present invention, in the process that the terminal device 100 first requests to download the subscription file, the receiving module 1002 obtains the first download password generated by the subscription management entity 80, and the terminal device 100 again requests to download the subscription file that belongs to the same contract with the subscription file. The first download password is used to request authentication from the subscription management entity. After the authentication is passed, the subscription file can be downloaded to implement dynamic authentication, which effectively prevents the attacker from forging the re-download request and attacking the operator server or illegally obtaining the subscription file, thereby improving security. Sex.

Optionally, in some embodiments of the present invention, when the terminal device 100 needs to re-download the subscription file, the sending module 1001 may send a second download request message to the operator server 90, where the second download request message is used. Requesting, from the operator server 90, to download a contract file that belongs to the same contract as the contract file;

Sending, to the subscription management entity 80, a fourth request message carrying a second download password;

Receiving, by the receiving module 1002, a third download password sent by the subscription management entity 80 and The contracting management entity 80 sends the subscription file that belongs to the same contract with the subscription file, and the third download password is that the subscription management entity 80 authenticates the fourth request message sent by the terminal device 100. Generated

The third download password is used by the sending module 1001 to request authentication from the sending management module 80 when the terminal device requests the carrier server 90 to download the subscription file that belongs to the same contract with the subscription file. .

In the embodiment of the present invention, when the terminal device 100 requests to download the subscription file again, the first download password obtained when the subscription file is downloaded for the first time is used to request the authentication from the subscription management entity 80, and the third download password generated by the subscription management entity is obtained. That is, a new download password is dynamically generated during each download process, which can prevent an attacker from forging a download request to attack an operator server or illegally obtaining a subscription file, thereby improving the security of the download.

Optionally, the terminal device 100 further includes:

The processing module 1003 is configured to replace the locally saved first password with the third download password, and dynamically update the download password to synchronize with the network side to improve the security of downloading the subscription file.

The first download password or the second download password meets at least one of the following items:

Optionally, in some embodiments of the present invention, in order to avoid the possibility of forging a download request in the first downloading process, the terminal device 100 needs to request identity authentication from the network side when the first request for the subscription, and may be in the second request message. Carrying a fourth download password, the fourth download password is generated by the subscription management entity 80 for the terminal device 100 before the terminal device 100 requests the subscription, and the fourth download password is used by the subscription management entity 80. Before the generating the first download password, verifying the fourth download password, that is, the fourth download password is used to authenticate whether the terminal device 100 has the right to apply for signing;

After the receiving module 1002 receives the first download password and the subscription file, the processing module 1003 is further configured to:

Replacing the saved fourth download password with the first download password can improve the security of the first subscription and the first download and download of the subscription file.

The embodiment of the present invention further provides a communication system. Referring to FIG. 6-4, the communication system 2 includes:

The operator server 90 as shown in Figure 6-2;

Figure 6-3 of the terminal device 100;

The contract management entity 80 as described in Figure 6-1.

It should be noted that, in the embodiments of the present invention (including the embodiments shown in FIG. 6-1, FIG. 6-2, and FIG. 6-3), the physical devices corresponding to all the receiving modules may be receivers, all The physical device corresponding to the sending module may be a transmitter, and the physical device corresponding to all processing modules may be a processor. Each of the devices shown in FIG. 6-1, FIG. 6-2, and FIG. 6-3 may have a structure as shown in FIG. 9. When one of the devices has the structure as shown in FIG. 9, the processing in FIG. The transmitter, the transmitter and the receiver implement the same or similar functions of the processing module, the transmitting module and the receiving module provided by the device embodiment corresponding to the device, and the memory storage processor in FIG. 9 needs to be called when executing the method for downloading the subscription file. Program code.

Referring to FIG. 7, an embodiment of the present invention further provides a method for downloading a subscription file, and the embodiment includes:

1101. The terminal device sends a first request message to the operator server.

The first request message carries information that has been requested to be signed. Optionally, the information that has been applied for the subscription includes the user identifier corresponding to the applied for the subscription or the subscription file identifier corresponding to the signed subscription document that has been applied for the subscription, or the download password corresponding to the applied for the subscription, by using the user. The identification or subscription file identification or download password can be informed that the request is a request message for applying for a contracted contract file, and provides a flexible download mechanism for the user.

1102. The operator server receives the first request message sent by the terminal device.

1103. The operator server determines, according to the information about the subscription that is carried in the first request message, that the subscription file that is requested to be downloaded by the first request message is a subscription file that has been requested to be signed.

1104. The operator server sends a second request message to the subscription management entity.

The second request message is used to instruct the subscription management entity to acquire the subscription file.

1105. The subscription management entity receives the second request message sent by the operator server, and acquires the subscription file that the terminal device requests to download according to the second request message.

1106. The contract management entity sends the subscription file to the terminal device.

1107. The terminal device receives the subscription file from the subscription management entity.

In the embodiment of the present invention, each time the terminal device requests to download the subscription file, the operator server determines, according to the information that has been applied for the subscription, that the subscription file requested by the terminal device is the contracted file that has been applied for the contract, and is obtained by the contract management entity. The signing document that has been applied for signing provides the user with a flexible mechanism for downloading the signing document.

Optionally, when the first request message further carries the eUICC identifier, in step 1103, after determining that the subscription file requested to be downloaded by the first request message is the subscription file that has been applied for the contract, sending the first to the subscription management entity. Before the second request message, the operator server further needs to determine whether the eUICC identifier is the same as the eUICC identifier corresponding to the saved subscription.

1. When it is determined that the eUICC identifier is the same as the eUICC identifier corresponding to the saved application subscription, the operator server may carry different parameters in the second request message by using one of the following manners, so that the subscription management entity acquires the terminal. The contract documents requested by the device are as follows:

The operator server carries, in the second request message, the re-downloading indication information and the subscription file identifier of the contracted file that has been applied for the contract, so that in step 1104, the contract management entity according to the re-downloading instruction An indication of the information, using the contract file identifier to be associated with the signed document that has been applied for the contracted distribution.

The operator server carries, in the second request message, the first subscription file information corresponding to the subscription file that has been applied for the contract, so that the contract file management entity uses the first subscription file in step 1104. The information generating terminal device requests the downloaded subscription file, wherein the first subscription file information includes information such as a root key of the signed subscription file that has been distributed.

In the above two manners, by providing the terminal device with the signed contract file that has been applied for the contract, the contract cost of the operator server can be reduced without newly creating a new contract signing file.

2. When it is determined that the eUICC identifier is different from the eUICC identifier corresponding to the saved application subscription, the contract management entity needs to generate a new subscription for the terminal device, and performs the process according to the new application contract document processing. The operator server may carry the second subscription file information in the second request message, so that the subscription management entity generates the terminal device by using the second subscription file information. The contract file for which the download is requested. The second subscription file information may be a subscription type, a subscription file identifier, or a root key information required to generate a new subscription file, and may be, for example, a new root key information or a new subscription file identifier.

The embodiment corresponding to FIG. 7 described above describes a method for downloading a subscription file in the present invention. The following describes the operator server and the contract management entity that execute the method for downloading the subscription file.

1. Referring to FIG. 8-1, the operator server 120 includes:

The receiving module 1201 is configured to receive a first request message sent by the terminal device, where the first request message is used to request to download a subscription file;

The processing module 1202 is configured to determine, according to the information about the subscribed subscription that is carried in the first request message that is received by the receiving module 1201, that the subscription file that is requested to be downloaded by the first request message is a subscription file that has been requested to be signed; Optionally, the information that has been applied for the subscription includes the user identifier corresponding to the applied for the subscription or the subscription file identifier corresponding to the signed subscription document that has been applied for the subscription, or the download password corresponding to the applied for the subscription.

The sending module 1203 is configured to send a second request message to the subscription management entity, where the processing module 1202 determines that the subscription file requested by the first request message is a subscription file that has been subscribed for, and the second request message is used by the And instructing the contract management entity to acquire the contract file.

In the embodiment of the present invention, each time the terminal device requests to download the subscription file, the processing module 1202 determines, according to the information that has been applied for the subscription, that the subscription file requested by the terminal device is the contracted file that has been applied for the contract, and is obtained by the contract management entity. The signing document that has been applied for signing provides the user with a flexible mechanism for downloading the signing document.

Optionally, in some embodiments of the present invention, if the first request message further carries an eUICC identifier, the processing module 1202 determines that the subscription file requested to be downloaded by the first request message is a subscription file that has been applied for a contract. And determining whether the eUICC identifier is the same as the eUICC identifier corresponding to the saved subscription.

When the eUICC identifier is determined to be the same as the eUICC identifier corresponding to the saved application subscription, the second request message carries the re-download indication information and the subscription file identifier, where the weight is The download indication information is used to indicate that the subscription management entity is associated with the contracted file that has been requested to be contracted according to the subscription file identifier.

Or, when it is determined that the eUICC identifier is the same as the saved eUICC identifier corresponding to the saved application subscription, the second request message carries the first subscription file information corresponding to the subscription file that has been applied for the contracted distribution. The first subscription file information includes the root key information corresponding to the subscription file that has been applied for the contract, and the first subscription file information is used by the subscription file management entity to generate the location that the terminal device requests to download. Document the contract.

When the eUICC identifier is determined to be different from the saved eUICC identifier, the second request message carries the second subscription file information, where the second subscription file information is used for the subscription file. The management entity generates the subscription file requested by the terminal device to download.

2. Referring to FIG. 8-2, the subscription management entity 130 includes:

The receiving module 1301 is configured to receive a second request message sent by the operator server.

The processing module 1302 is configured to acquire, according to the second request message received by the receiving module 1301, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, Determining, according to the first request message, that the first request message is a message that is sent after requesting to download a subscription file that has been applied for, and the first request message carries information that has been requested for signing; The information about the subscription includes the user identifier corresponding to the applied for the subscription or the subscription file identifier corresponding to the signed subscription document that has been applied for the subscription, or the download password corresponding to the applied for the subscription.

The sending module 1303 is configured to send the subscription file generated by the processing module 1302 to the terminal device.

In the embodiment of the present invention, each time the terminal device requests to download the subscription file, the processing module 1302 obtains the subscription file requested by the terminal device to download, according to the information that has been applied for, and provides the user with a flexible mechanism for downloading the subscription file.

Optionally, for the request to download the signed file that has been applied for the contract, the contract management entity 130 obtains the contracted file in the following two situations:

If the second request message further carries the re-download indication information and the subscription file identifier, The processing module 1302 is associated with the file file that has been applied for the contracted distribution according to the file identifier of the contract file.

If the second request message further carries the first subscription file information that has been requested to be signed, the processing module 1302 uses the first subscription file information to generate a subscription file that the terminal device requests to download.

Optionally, for requesting to download the new contracted contract file, the contract management entity 130 obtains the contract file as follows:

If the second request message further carries the second subscription file information, the processing module 1302 uses the second subscription file information to generate a subscription file that the terminal device requests to download.

The embodiment of the present invention further provides a communication system. Referring to FIG. 8-3, the communication system 3 includes:

The operator server 120 as shown in Figure 8-1;

The contract management entity 130 is as described in Figure 8-2.

Optionally, the communication system 3 further includes a terminal device.

It should be noted that all the physical devices corresponding to the receiving modules in the embodiments of the present invention (including the embodiments shown in FIG. 8-1 and FIG. 8-2) may be receivers, and physical devices corresponding to all transmitting modules. It can be a transmitter, and the physical device corresponding to all processing modules can be a processor. Each of the devices shown in FIG. 8-1, FIG. 8-2, and FIG. 8-3 may have a structure as shown in FIG. 9, and when one of the devices has the structure as shown in FIG. 9, the processing in FIG. The transmitter, the transmitter and the receiver implement the same or similar functions of the processing module, the transmitting module and the receiving module provided by the device embodiment corresponding to the device, and the memory storage processor in FIG. 9 needs to be called when executing the method for downloading the subscription file. Program code.

The present invention also provides a computer storage medium storing a program, the program including some or all of the steps of the above-mentioned operator server or subscription management entity or terminal device performing the above-mentioned method of downloading a subscription file.

For example, the architecture of the operator server herein includes a processor, a receiver, and a transmitter configured to support an operator server to perform the corresponding functions in the above methods. The receiver and the transmitter are configured to support communication between the subscription management entity and the terminal device to the contract management entity Or the terminal device transmits the information or instructions involved in the above method. The carrier server may also include a memory for coupling with the processor that holds program code and data necessary for the operator server.

The structure of the contract management entity herein includes a processor, a receiver, and a transmitter configured to support a contract management entity to perform the corresponding functions in the above methods. The receiver and the transmitter are configured to support communication between the operator server and the terminal device, and send information or instructions involved in the foregoing method to the operator server or the terminal device. The subscription management entity may also include a memory for coupling with the processor that retains the program code and data necessary for the contract management entity.

The structure of the terminal device herein includes a processor, a receiver, and a transmitter, and the processor is configured to support the terminal device to perform a corresponding function in the above method. The receiver and the transmitter may be a transceiver having a transceiving function for supporting communication between the contract management entity and the terminal device, and between the operator server and the terminal device, to the contract management entity or signing the contract. The management entity sends the information involved in the above method. The terminal device may also include a memory for coupling with the processor, which stores program code and data necessary for the terminal device.

In the above embodiments, the descriptions of the various embodiments are different, and the details that are not detailed in a certain embodiment can be referred to the related descriptions of other embodiments.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated as The components displayed by the unit may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

The method, the related device and the system for downloading the contract file provided by the present invention are described in detail. The principle and the embodiment of the present invention are described in the specific examples. The description of the above embodiment is only for helping. The method of the present invention and its core idea are understood; at the same time, for those skilled in the art, according to the idea of the present invention, there are changes in the specific embodiments and application scopes. It should be understood that the invention is limited.

Claims

A method for downloading a subscription file, the method comprising:

Receiving, by the operator server, a first request message sent by the terminal device, where the first request message is used to request the operator server to download the subscription file;

The operator server generates a first download password;

The operator server sends a second request message to the subscription management entity, where the second request message is used to instruct the subscription management entity to generate a subscription file requested by the terminal device to download, so that the terminal device receives the subscription from the terminal device. The management entity downloads the contract document;

The second request message carries the first download password, so that the terminal device obtains the first download password from the subscription management entity; or the operator server sends the first to the terminal device Download password

The first download password is used by the terminal server to authenticate the request of the terminal device when the terminal device requests the operator server to download the subscription file that belongs to the same contract with the subscription file.
The method of claim 1 further comprising:

And the first confirmation password is sent by the operator server after receiving the first confirmation message, where the first confirmation message is a message sent by the subscription management entity after successfully sending the subscription file to the terminal device. The first confirmation message is used to indicate that the terminal device has successfully downloaded the subscription file.
The method according to claim 1 or 2, wherein the method further comprises:

Receiving, by the operator server, a third request message sent by the terminal device, where the third request message carries a second download password, where the third request message is used to request downloading and signing the file from the subscription management entity Contract documents belonging to the same contract;

The operator server authenticates the third request message by using the first download password;

When the second download password is the same as or corresponds to the first download password, the authentication succeeds, and after the authentication succeeds, the operator server generates a third download password;

The operator server sends a fourth request message to the subscription management entity, where the fourth request message is used to instruct the subscription management entity to acquire a subscription file that belongs to the same contract with the subscription file, so that the first The terminal device of the three request message is downloaded and described from the subscription management entity The contract documents belong to the same contracted contract documents;

The fourth request message carries the third download password, so that the terminal device obtains the third download password from the subscription management entity; or the operator server sends a terminal to send the third request message The device sends the third download password;

The third download password is used by the terminal server to authenticate the request of the terminal device when the terminal device requests the operator server to download the subscription file that belongs to the same contract with the subscription file.
The method of claim 3, wherein the method further comprises:

Receiving, by the operator server, a second confirmation message sent by the subscription management entity, the operator server saves the third download password and deletes the first download password, where the second confirmation message is the subscription The management entity successfully sends a message sent by the subscription file that belongs to the same contract with the subscription file to the terminal device.
The method according to claim 3 or 4, wherein the first download password or the third download password meets at least one of the following:

Valid for a preset duration, the number of valid uses is finite, the number of valid uses within the preset duration is finite, and the number of downloads containing the contracted file.
A method for downloading a contract file, characterized in that the method comprises:

The terminal device sends a first request message to the operator server, where the first request message is used to request the operator server to download a subscription file, so that the operator server sends a second request message to the subscription management entity, The second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

Obtaining, by the terminal device, a first download password generated by the operator server and receiving the subscription file from the subscription management entity;

The first download password is used by the terminal device to request authentication from the operator server when requesting to download a subscription file that belongs to the same contract as the subscription file.
The method of claim 6 wherein the method further comprises:

The terminal device sends a third request message carrying a second download password to the operator server, where the third request message is used to request the carrier server to download a subscription file that belongs to the same contract with the subscription file;

When the second download password is the same as or corresponds to the first download password, the operator server authenticates the third request message, and after the authentication is passed, the terminal device acquires the operator. a third download password generated by the server and a subscription file from the contract management entity that belongs to the same contract as the subscription file, and the third download password is used by the terminal device to request download from the operator server again. When the contract file belongs to the same contracted contract file, the server is requested to perform authentication.
The method according to claim 7, wherein the first download password or the third download password is acquired by the terminal device from the operator server or a contract management entity.
The method according to claim 7 or 8, wherein the method further comprises:

The terminal device replaces the locally saved first download password with the third download password.
The method according to any one of claims 7 to 9, wherein the first download password or the third download password meets at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
A method for downloading a subscription file, the method comprising:

The subscription management entity receives a second request message sent by the operator server, where the second request message is used to indicate that the subscription management entity generates a subscription file that the terminal device requests to download, and the second request message is that the carrier server is After receiving the first request message sent by the terminal device, sending the first request message to the subscription management entity, where the first request message is used to request the carrier server to download the subscription file;

The second request message carries a first download password generated by the operator server;

The contract management entity generates the subscription file according to the second request message, and sends the subscription file and the first download password to the terminal device, where the first download password is used by the terminal device again. When the operator server is requested to download a subscription file that belongs to the same contract as the subscription file, the operator server is requested to perform authentication.
The method of claim 11 wherein the method further comprises:

The subscription management entity receives a fourth request message that is sent by the operator server and carries a third download password, where the third download password is a download password generated after the operator server successfully authenticates the third request message. ;

The subscription management entity acquires, according to the instruction of the fourth request message, a subscription file that the terminal device requests to download that belongs to the same contract as the subscription file, and the third download password and the same contract with the subscription file The contract file is sent to the terminal device requesting to download a contract file that belongs to the same contract as the contract file;

The third download password is used by the terminal device to request authentication from the operator server when the terminal device requests to download the subscription file that belongs to the same contract as the subscription file.
The method of claim 12, wherein the first download password or the third download password meets at least one of:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
A method for downloading a contract file, comprising:

The subscription management entity receives the first request message sent by the operator server, and generates a subscription file that the terminal device requests to download according to the first request message, where the first request message is the first time that the operator server receives the terminal device. After the download request message is sent to the subscription management entity, the first download request message is used to request the carrier server to download the subscription file;

After receiving the second request message sent by the terminal device, the subscription management entity generates a first download password, where the second request message is used to request to download the subscription file; the subscription management entity sends the first download The password and the subscription file are sent to the terminal device, and the first download password is used by the subscription management entity to the subscription device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file again. The terminal device requests authentication.
The method of claim 14, wherein the method further comprises:

Receiving, by the subscription management entity, a third request message sent by the operator server, and acquiring, according to the third request message, a subscription file that belongs to the same contract with the subscription file;

Receiving, by the subscription management entity, a fourth request message sent by the terminal device, where the fourth request message carries a second download password;

The subscription management entity authenticates the fourth request message, and when the second download password is the same as or corresponds to the first download password, the authentication succeeds;

After the authentication succeeds, the subscription management entity generates a third download password, and sends the third download password and the subscription file that belongs to the same contract with the subscription file to the fourth request. And the third download password is used by the subscription management entity to authenticate the terminal device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file.
The method according to claim 15, wherein the subscription management entity authenticates the fourth request message, including one of the following:

The subscription management entity authenticates the second download password in the fourth request message by using the locally saved first download password;

Or the third request message carries the first download password from the subscription management entity, and the subscription management entity uses the first download password carried in the third request message to the fourth The second download password in the request message is authenticated.
The method according to claim 15 or 16, wherein the method further comprises one of the following:

The subscription management entity updates the locally saved first download password to the third download password;

Or the contract management entity sends the third download password to the operator server, so that the operator server updates the locally saved first download password to the third download password.
The method according to any one of claims 15 to 17, wherein the first download password or the third download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
The method according to claim 14, wherein the second request message carries a fourth download password, and the fourth download password is that the subscription management entity is the terminal device before the terminal device requests to sign a contract. generate;

The generating the first download password includes:

The subscription management entity verifies the fourth download password, and after the verification is passed, generates the first download password;

After the generating the first download password, the method further includes:

The subscription management entity replaces the saved fourth download password with the first download password;

Alternatively, the subscription management entity sends the first download password to the operator server, so that the operator server replaces the locally saved fourth download password with the first download password.
A method for downloading a contract file, comprising:

Receiving, by the operator server, a first download request message of the terminal device, where the first download request message is used to request the carrier server to download the subscription file;

The operator server sends a first request message to the subscription management entity, where the first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

Receiving, by the operator server, the first download password sent by the subscription management entity, and saving the first download password; the first download password is a second request sent by the subscription management entity to the terminal device a first download password generated after the message, the second request message being used to request to download the subscription file;

The first download password is used to authenticate the re-request of the terminal device when the terminal device requests the operator server to download a subscription file that belongs to the same contract as the subscription file. .
The method of claim 20, wherein the method further comprises:

Receiving, by the operator server, a second download request message sent by the terminal device, where the second download request is used to request to download a subscription file that belongs to the same contract with the subscription file;

The operator server sends a third request message to the subscription management entity, where the third request message is used to instruct the subscription management entity to acquire a subscription file that belongs to the same contract with the subscription file;

Receiving, by the operator server, a third download password sent by the subscription management entity, and updating the locally saved first download password to the third download password; the third download password being the subscription management entity a download password generated after the fourth request message sent by the terminal device is successfully authenticated, and the third download password is used by the terminal device when requesting to download a subscription file that belongs to the same contract with the subscription file again. The contract management entity authenticates the request of the terminal device.
The method according to claim 21, wherein the third request message carries the first download password from the subscription management entity, and the third request message is further used by the subscription management entity to receive After the fourth request message sent by the terminal device, using the third request And the first download password carried by the message, and the fourth request message is authenticated.
The method according to claim 20, wherein before the operator server receives the first download password sent by the subscription management entity, the method further includes:

The operator server acquires a fourth download password from the subscription management entity, and sends the fourth download password to the terminal device;

The saving the first download password comprises:

The operator server replaces the fourth download password with the first download password.
A method for downloading a contract file, comprising:

The terminal device sends a first download request to the operator server, where the first download request message is used to apply for a subscription to the operator server, and request to download a subscription file;

Sending, by the terminal device, a second request message to the subscription management entity, where the second request message is used to request the subscription management entity to download the subscription file;

Receiving, by the terminal device, a first download password and the subscription file from the subscription management entity, where the first download password is generated by a subscription management entity;

The first download password is used by the terminal device to request authentication from the subscription management entity when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.
The method of claim 24, wherein the method further comprises:

The terminal device sends a second download request message to the operator server, where the second download request message is used to request the carrier server to download a subscription file that belongs to the same contract with the subscription file;

Transmitting, by the terminal device, a fourth request message carrying a second download password to the subscription management entity;

Receiving, by the terminal device, a third download password sent by the subscription management entity and the subscription file that belongs to the same subscription as the subscription file, where the third download password is sent by the subscription management entity to the terminal device. The fourth request message is generated after the authentication is passed;

When the terminal device requests the terminal server to download the subscription file that belongs to the same contract with the subscription file, the terminal device requests the subscription management entity to request authentication.
The method of claim 25, wherein the method further comprises:

The terminal device replaces the locally saved first download password with the third download password.
The method according to claim 25 or 26, wherein the first download password or the second download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
The method according to claim 24, wherein said second request message carries a fourth download password from said subscription management entity, said fourth download password being used by said subscription management entity to generate said Verifying the second request message before downloading the password;

After the terminal device receives the first download password and the subscription file, the method further includes:

The terminal device replaces the saved fourth download password with the first download password.
A method for downloading a subscription file, the method comprising:

Receiving, by the operator server, a first request message sent by the terminal device, where the first request message is used to request to download the subscription file;

Determining, by the operator server, that the subscription file requested to be downloaded by the first request message is a subscription file that has been requested for signing, according to the information about the subscribed information carried in the first request message, sending a second request to the subscription management entity. The message, the second request message is used to instruct the subscription management entity to acquire the subscription file.
The method according to claim 29, wherein the information that has been applied for the contract includes the user identifier corresponding to the applied for the contract, or the contracted document identifier of the contracted document that has been applied for the contracted contract, or the signed application corresponding to the contracted document. Download password.
The method according to claim 30, wherein the first request message further carries an embedded universal integrated circuit card eUICC identifier of the terminal device;

After determining that the first request message requests the downloaded subscription file to be the contracted file that has been applied for, the method further includes:

When the eUICC identifier is determined to be the same as the eUICC identifier corresponding to the saved application subscription, the second request message further includes re-download indication information and the subscription file identifier, where the re-download indication information is used to indicate The contract management entity is associated with the contracted document that has been applied for the contracted contract according to the contract file identifier.
The method according to claim 30, wherein the first request message further carries an eUICC identifier of the terminal device;

After determining that the first request message requests the downloaded subscription file to be the contracted file that has been applied for, the method further includes:

When the eUICC identifier is determined to be the same as the saved eUICC identifier corresponding to the saved application subscription, the second request message further carries the first subscription file information corresponding to the subscription file that has been applied for the contracted distribution, The first subscription file information includes the root key information of the subscription file that has been applied for the subscription, and the first subscription file information is used by the subscription file management entity to generate the subscription file that the terminal device requests to download.
The method according to any one of claims 29 to 32, wherein the first request message further carries an eUICC identifier of the terminal device;

After determining that the first request message requests the downloaded subscription file to be the contracted file that has been applied for, the method further includes:

When the eUICC identifier is determined to be different from the saved eUICC identifier, the second request message further carries the second subscription file information, where the second subscription file information is used for the subscription file management. The entity generates the subscription file that the terminal device requests to download.
A method for downloading a contract file, characterized in that it comprises:

Receiving, by the subscription management entity, a second request message sent by the operator server, acquiring, according to the second request message, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, Determining, according to the first request message, that the first request message is a message that is sent after requesting to download a subscription file that has been applied for, and the first request message carries information that has been requested to be signed;

The subscription management entity sends the subscription file to the terminal device.
The method according to claim 34, wherein the information that has been applied for the contract includes the user identifier corresponding to the applied for the contract, or the contract document identifier corresponding to the contracted document that has been applied for the contract, or the signed application The corresponding download password.
The method according to claim 35, wherein the second request message further carries re-download indication information and the subscription file identifier, and the subscription management entity is configured according to the second request The message acquisition terminal requests the downloaded subscription file, including:

The contract management entity is associated with the signed document that has been applied for the contract according to the file identifier of the contract file.
The method according to claim 36, wherein the second request message further carries the first subscription file information corresponding to the subscription file that has been applied for the contracted distribution, and the subscription management entity according to the second request The message acquisition terminal requests the downloaded subscription file, including:

The contract management entity uses the first subscription file information to generate a subscription file that the terminal device requests to download.
The method according to claim 36 or 37, wherein the second request message further carries the second subscription file information, and the subscription management entity acquires the subscription file requested by the terminal device for downloading according to the second request message. include:

The contract management entity uses the second subscription file information to generate a subscription file that the terminal device requests to download.
An operator server, wherein the operator server comprises:

a receiving module, configured to receive a first request message sent by the terminal device, where the first request message is used to request the operator server to download the subscription file;

a processing module, configured to generate a first download password;

a sending module, configured to send a second request message to the subscription management entity, where the second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download, so that the terminal device receives the subscription from the terminal device The management entity downloads the contract document;

The second request message carries the first download password, so that the terminal device obtains the first download password from the subscription management entity; or sends the first to the terminal device by using the sending module. Download password

When the first download password is used by the terminal device to download the subscription file that belongs to the same contract with the subscription file, the processing module authenticates the re-request of the terminal device.
The operator server according to claim 39, wherein the processing module is further configured to:

Receiving, by the receiving module, the first confirmation message sent by the subscription management entity, and saving the location a first downloading password, where the first confirmation message is a message that is sent by the subscription management entity after successfully sending the subscription file to the terminal device, where the first confirmation message is used to indicate that the terminal device successfully downloads The contracted document.
The operator server according to claim 39 or 40, wherein the processing module is further configured to:

Receiving, by the receiving module, a third request message sent by the terminal device, where the third request message carries a second download password, where the third request message is used to request the subscription management entity to download and sign the file Contract documents belonging to the same contract;

The third request message is authenticated using the first download password;

When the second download password is the same as or corresponds to the first download password, the authentication succeeds, and after the authentication succeeds, the third download password is generated;

Transmitting, by the sending module, a fourth request message to the subscription management entity, where the fourth request message is used to instruct the subscription management entity to acquire a subscription file that belongs to the same contract with the subscription file, so that the first The terminal device of the three request message downloads, from the contract management entity, a contract file that belongs to the same contract with the contract file;

The fourth request message carries the third download password, so that the terminal device obtains the third download password from the subscription management entity; or sends the third request message to the terminal by using the sending module. The device sends the third download password;

When the terminal device requests the terminal server to download the subscription file that belongs to the same contract with the subscription file, the processing module authenticates the request of the terminal device.
The operator server according to claim 41, wherein the processing module is further configured to:

Receiving, by the receiving module, the second confirmation message sent by the subscription management entity, saving the third download password and deleting the first download password, where the first confirmation message is that the subscription management entity successfully The subscription file belongs to a message sent by the same contracted subscription file to the terminal device, and the second confirmation message is used to indicate that the terminal device successfully downloads the subscription file that belongs to the same contract with the subscription file.
An operator server according to claim 41 or 42, wherein said first The download password or the third download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, the number of valid uses within the preset duration is finite, and the number of downloads containing the contracted file.
A terminal device, the terminal device includes:

a sending module, configured to send a first request message to the operator server, where the first request message is used to request the carrier server to download a subscription file, so that the operator server sends a second request message to the subscription management entity. The second request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

a receiving module, configured to acquire a first download password generated by the operator server, and receive the subscription file from the subscription management entity;

The first download password is used by the terminal device to request authentication from the server by using the sending module when requesting to download a subscription file that belongs to the same contract as the subscription file.
The terminal device according to claim 44, wherein the sending module is further configured to:

Sending, by the operator server, a third request message carrying a second download password, where the third request message is used to request, from the operator server, to download a subscription file that belongs to the same contract with the subscription file;

The receiving module is further configured to: when the second download password is the same as or corresponding to the first download password, the operator server authenticates the third request message, and after the authentication is passed, obtains a third download password generated by the operator server and a subscription file received from the contract management entity that belongs to the same contract as the contract file;

And the third download password is used by the sending module to request authentication from the operator server when the terminal device requests the operator server to download the subscription file that belongs to the same contract with the subscription file.
The terminal device according to claim 45, wherein the first download password or the third download password is acquired by the terminal device from the operator server or a contract management entity.
The terminal device according to claim 45 or 46, wherein the terminal device further comprises:

And a processing module, configured to replace the locally saved first download password with the third download password acquired by the receiving module.
The terminal device according to claim 46 or 47, wherein the first download password or the third download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
A contract management entity, characterized in that the contract management entity comprises:

a receiving module, configured to receive a second request message sent by the operator server, where the second request message is used to instruct the signing management entity to generate a subscription file that the terminal device requests to download, where the second request message is the operator After receiving the first request message sent by the terminal device, the server sends the first request message to the subscription management entity, where the first request message is used to request the carrier server to download the subscription file;

The second request message carries a first download password generated by the operator server;

a processing module, configured to generate the subscription file according to the second request message received by the receiving module;

a sending module, configured to send the first download password and the subscription file generated by the processing module to the terminal device, where the first download password is used by the terminal device to the operator server again When requesting to download a contract file that belongs to the same contract as the contract file, request authentication from the operator server.
The contract management entity according to claim 49, wherein the processing module is further configured to:

And receiving, by the receiving module, a fourth request message that is sent by the operator server and that carries a third download password, where the third download password is a download password that is generated after the operator server successfully authenticates the third request message. ;

Acquiring, according to the instruction of the fourth request message, a subscription file that is requested by the terminal device to be downloaded and belongs to the same contract, and the third download password is signed by the sending module and belongs to the same contract with the subscription file. The contract file is sent to the terminal device requesting to download a contract file that belongs to the same contract as the contract file;

The third download password is used by the terminal device to request the download again to be the same as the subscription file. When signing the contracted file, the terminal device requests authentication from the operator server.
The subscription management entity according to claim 50, wherein said first download password or said third download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
A contract management entity, characterized in that the contract management entity comprises:

a receiving module, configured to receive a first request message sent by the operator server, where the first request message is sent by the operator server to the subscription management entity after receiving the first download request message of the terminal device, where The first download request message is used to request the carrier server to download a subscription file;

a processing module, configured to generate, according to the first request message received by the receiving module, a subscription file that the terminal device requests to download;

After the receiving module receives the second request message sent by the terminal device, generating a first download password, where the second request message is used to request to download the subscription file;

a sending module, configured to send the first download password and the subscription file generated by the processing module to the terminal device, where the first download password is used by the terminal device to request download again and the signing When the file belongs to the same contracted contract file, the processing module authenticates the request of the terminal device.
The subscription management entity according to claim 52, wherein the processing module is further configured to:

Receiving, by the receiving module, a third request message sent by the operator server;

Obtaining, according to the third request message, a contract file that belongs to the same contract as the contract file;

Receiving, by the receiving module, a fourth request message sent by the terminal device, where the fourth request message carries a second download password;

And authenticating the fourth request message, when the second download password is the same as or corresponding to the first download password, the authentication is successful;

After the authentication succeeds, the third download password is generated, and the third download password and the subscription file that belongs to the same contract with the subscription file are sent by the sending module to the terminal device that issues the fourth request message. The third download password is used to request downloading again at the terminal device When the contract file belongs to the same contracted contract file, the processing module authenticates the terminal device.
The subscription management entity according to claim 53, wherein the processing module authenticates the fourth request message, including one of the following:

And authenticating the second download password in the fourth request message by using the locally saved first download password;

Or the third request message carries the first download password from the subscription management entity, and uses the first download password carried in the third request message to the first of the fourth request messages. Second, download the password for authentication.
The contract management entity according to claim 53 or 54, wherein the processing module is further configured to perform one of the following steps:

Updating the locally saved first download password to the third download password;

Or sending, by the sending module, the third download password to the operator server, so that the operator server updates the locally saved first download password to the third download password.
The subscription management entity according to any one of claims 53 to 55, wherein the first download password or the third download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
The subscription management entity according to claim 52, wherein the second request message carries a fourth download password, and the fourth download password is the contract management entity before the terminal device requests to sign the contract. Terminal device generation;

The processing module is specifically configured to:

Verifying the fourth download password, and after the verification is passed, generating the first download password;

The processing module is further configured to:

Replacing the saved fourth download password with the first download password;

Or sending, by the sending module, the first download password to the operator server, so that the operator server replaces the locally saved fourth download password with the first download password.
An operator server, wherein the operator server comprises:

a receiving module, configured to receive a first download request message of the terminal device, where the first download request message is used to request to download the subscription file from the operator server;

a sending module, configured to send a first request message to the subscription management entity, where the first request message is used to instruct the subscription management entity to generate a subscription file that the terminal device requests to download;

The receiving module is further configured to receive a first download password sent by the subscription management entity, where the first download password is a first download generated by the subscription management entity after receiving the second request message sent by the terminal device a password, the second request message is used to request to download the subscription file;

a processing module, configured to save the first download password received by the receiving module;

The first download password is used by the terminal management device to authenticate the terminal device when the terminal device requests to download the subscription file that belongs to the same contract with the subscription file.
The operator server according to claim 58, wherein the receiving module is further configured to:

Receiving, by the terminal device, a second download request message, where the second download request is used to request to download a subscription file that belongs to the same contract with the subscription file;

The sending module is further configured to: send a third request message to the subscription management entity, where the third request message is used to instruct the subscription management entity to acquire a subscription file that belongs to the same contract with the subscription file;

The processing module is further configured to: receive, by the receiving module, a third download password sent by the subscription management entity, and update the locally saved first download password to the third download password; The download password is a download password generated after the authentication of the fourth request message sent by the subscription management entity to the terminal device is successful, and the third download password is used to request that the download and the subscription file belong to the same contract at the terminal device again. When signing the file, the contract management entity authenticates the request of the terminal device.
The operator server according to claim 59, wherein the third request message carries the first download password, and the third request message is further used by the subscription management entity to receive the terminal device to send After the fourth request message, the fourth request message is authenticated by using the first download password carried by the third request message.
The operator server according to claim 59, wherein the receiving module is further configured to: before receiving the first download password sent by the subscription management entity:

Obtaining a fourth download password from the contract management entity, where the fourth download password is allocated by the contract management entity;

The processing module is further configured to send the fourth download password to the terminal device by using the sending module;

The fourth download password is replaced with the first download password.
A terminal device, the terminal device includes:

a sending module, configured to send a first download request to the operator server, where the first download request message is used to apply for a subscription to the operator server, and request to download a subscription file;

Sending, by the subscription management entity, a second request message, where the second request message is used to request the subscription management entity to download a subscription file;

a receiving module, configured to receive a first download password and the subscription file from the subscription management entity, where the first download password is generated by a subscription management entity;

The first download password is used by the sending module to request authentication from the subscription management entity when the terminal device requests to download a subscription file that belongs to the same contract as the subscription file.
The terminal device according to claim 62, wherein the sending module is further configured to send a second download request message to the operator server, where the second download request message is used to request the operator server Downloading a contract document that belongs to the same contract as the contract document;

Sending, to the subscription management entity, a fourth request message carrying a second download password;

The receiving module is further configured to receive a third download password sent by the subscription management entity and the subscription file that belongs to the same contract with the subscription file, where the third download password is the subscription management entity Four request messages are generated after the authentication is passed;

And the third download password is used by the sending module to request authentication from the signing management entity when the terminal device requests the carrier server to download the subscription file that belongs to the same contract with the subscription file.
The terminal device according to claim 63, wherein the terminal device further comprises:

And a processing module, configured to replace the locally saved first download password with the third download password.
The terminal device according to claim 63 or 64, wherein said first download The password or the second download password satisfies at least one of the following:

Valid for a preset duration, the number of valid uses is finite, within the preset duration, the number of valid uses is finite, and the number of downloads containing the contracted file.
The terminal device according to claim 62, wherein the second request message carries a fourth download password from the subscription management entity, and the fourth download password is used by the subscription management entity to generate the Verifying the second request message before the first download password;

After the receiving module receives the first download password and the subscription file, the processing module is further configured to:

The saved fourth download password is replaced with the first download password.
An operator server, wherein the operator server comprises:

a receiving module, configured to receive a first request message sent by the terminal device, where the first request message is used to request to download a subscription file;

a processing module, configured to determine, according to the information about the subscribed subscription that is carried in the first request message that is received by the receiving module, that the subscription file that is requested to be downloaded by the first request message is a subscription file that has been requested to be signed;

a sending module, configured to send a second request message to the subscription management entity, where the processing module determines that the subscription file requested to be downloaded by the first request message is a subscription file that has been subscribed for, and the second request message is used to indicate The contract management entity acquires the contract file.
The operator server according to claim 67, wherein the information that has been applied for the contract includes the user identifier corresponding to the applied for the contract or the contract file identifier corresponding to the contracted document that has been applied for the contract, or the The download password corresponding to the application for the contract.
The operator server according to claim 68, wherein the first request message further carries an embedded universal integrated circuit card eUICC identifier of the terminal device;

The processing module is further configured to: after determining that the subscription file requested by the first request message is a contracted file that has been requested to be signed,

And when the eUICC identifier is the same as the eUICC identifier corresponding to the saved application subscription, the second request message carries the re-download indication information and the subscription file identifier, where the re-download indication information is used to indicate The contract management entity is associated with the contracting file identifier according to the Has signed up to sign the contracted documents that have been distributed.
The operator server according to claim 68, wherein the first request message further carries an eUICC identifier of the terminal device;

The processing module is further configured to: after determining that the subscription file requested by the first request message is a contracted file that has been requested to be signed,

When it is determined that the eUICC identifier is the same as the saved eUICC identifier corresponding to the saved subscription, the second request message carries the first subscription file information corresponding to the subscribed distributed subscription file, The first subscription file information includes the root key information corresponding to the subscribed signed subscription file, and the first subscription file information is used by the subscription file management entity to generate the subscription file that the terminal device requests to download.
The operator server according to any one of claims 68 to 70, wherein the first request message further carries an eUICC identifier of the terminal device, and the processing module determines that the first request message requests downloading After the signing document is the signing document that has been applied for the contract, it is also used to:

When the eUICC identifier is determined to be different from the saved eUICC identifier, the second request message carries the second subscription file information, where the second subscription file information is used for the subscription file. The management entity generates the subscription file requested by the terminal device to download.
A contract management entity, characterized in that the contract management entity comprises:

a receiving module, configured to receive a second request message sent by the operator server;

a processing module, configured to acquire, according to the second request message received by the receiving module, a subscription file that the terminal device requests to download, where the second request message is that the operator server receives the first request message, according to the Determining, by the first request message, that the first request message is a message sent after requesting to download a subscription file that has been applied for, and the first request message carries information that has been requested to be signed;

And a sending module, configured to send the subscription file generated by the processing module to the terminal device.
The contract management entity according to claim 72, wherein the information that has been applied for the contract includes the user identifier corresponding to the applied for the contract or the contract file identifier corresponding to the contracted document that has been applied for the contracted contract or the The download password corresponding to the application for the contract.
A contract management entity according to claim 73, wherein said second request The message further carries the re-download indication information and the subscription file identifier, where the processing module is specifically configured to:

The file identifier according to the contract file is associated with the signed document that has been applied for the contract.
The contract management entity according to claim 73, wherein the second request message further carries the first subscription file information that has been requested to be signed, and the processing module is specifically configured to:

And using the first subscription file information to generate a subscription file that the terminal device requests to download.
The subscription management entity according to claim 74 or 75, wherein the second request message further carries the second subscription file information, and the processing module is specifically configured to:

And using the second subscription file information to generate a subscription file that the terminal device requests to download.
A communication system, characterized in that the communication system comprises:

An operator server according to any of claims 39-43;

A terminal device according to any of claims 44-48;

A contract management entity according to any of claims 49-51.
A communication system, characterized in that the communication system comprises:

An operator server according to any of claims 58-61;

A terminal device according to any of claims 62-66;

A contract management entity according to any of claims 52-57.
An operator server, wherein the operator server comprises:

Interconnected processors, memories, receivers, and transmitters;

Wherein the memory is for storing program code, the processor is for calling program code in the memory to perform the method according to any one of claims 1 to 5, or performing any one of claims 20 to 23. The method of any of the preceding claims, or the method of any one of claims 29 to 33.
A terminal device, the terminal device includes:

Interconnected processors, memories, receivers, and transmitters;

Wherein the memory is for storing program code, the processor is for calling program code in the memory to perform the method according to any one of claims 6 to 10, or performing any one of claims 24 to 28 The method described in the item.
A contract management entity, characterized in that the contract management entity comprises:

Interconnected processors, memories, receivers, and transmitters;

Wherein the memory is for storing program code, the processor is for calling program code in the memory to perform the method according to any one of claims 11 to 13, or performing any one of claims 14 to 19 The method of any of the preceding claims, or the method of any one of claims 34 to 38.