WO2018209986A1

WO2018209986A1 - Method and device for downloading euicc subscription data

Info

Publication number: WO2018209986A1
Application number: PCT/CN2018/071950
Authority: WO
Inventors: 吴传喜
Original assignee: 中兴通讯股份有限公司
Priority date: 2017-05-19
Filing date: 2018-01-09
Publication date: 2018-11-22
Also published as: CN108966208A

Abstract

The present disclosure provides a method and a device for downloading eUICC subscription data. Said method comprises: receiving, after finishing subscription data reparation on a network service platform, a download request of an operator; triggered by the download request, determining whether the eUICC satisfies a condition for downloading subscription data; if the download condition is satisfied, sending to a discovery server (DS) a request for instructing the installation of an issuer security information domain (ISD-P), the ISD-P corresponding to the subscription data. The present disclosure solves the technical problem of great potential security risks in ISD-P management in the related art.

Description

Method and device for downloading eUICC subscription data

Cross-reference to related applications

The present application claims priority to Chinese Patent Application No. 201710362982.2 filed on May 19, 2017, the entire disclosure of which is hereby incorporated by reference.

Technical field

The present disclosure relates to the field of communications, and in particular, to a method and an apparatus for downloading eUICC subscription data.

Background technique

The Internet of Things is called the third wave of the world information industry after the computer and the Internet. It represents the development direction of the next generation of information technology. The United States, the European Union, China and other countries have introduced the development plan of the Internet of Things, and the related technology and industry prospective layout. . With the popularization of the Internet of Things technology, more and more traditional products such as automobiles, smart watches, and monitoring devices are embedded in an embedded Universal Integrated Circuit Card (eUICC, which will be referred to as eUICC for short), that is, the smart card chip is directly soldered. On the terminal's circuit board or directly packaged as a communication module, it becomes an IoT terminal.

As an authentication tool for IoT terminals to access carrier networks, and as a security carrier for carrying various applications (APP, hereinafter referred to as applications) and data, eUICC has become a key core technology for the development of the Internet of Things. eUICC applied to the Internet of Things business is not only a new UICC card form or user terminal device form, but also an overall system established to support this new form of device, in which eUICC activation, deactivation management, user relationship Management, remote management, business management, and security management are all likely to be essential features in the system. So how to ensure data security is the core issue of eUICC card. In the traditional mode, the SIM card manufacturer is responsible for the production of operator data and writes the data directly to the SIM card on the production line. The security focus of this model is the security of the production process and the card hardware itself. For the production process, the GSMA has developed the SAS standard to certify the manufacturer; for the card hardware, the operator generally requires the SIM card to meet the security level of the CC certification standard EAL4+.

In addition, the telecommunications smart card in the current mobile network adopts a network management area (provincial, prefecture) method according to the place of issue, the place of use, and the use of the card. However, in the application scenario of the Internet of Things, since the smart card is usually present in the Internet of Things terminal or soldered in the terminal, the place of its issuance and the place of use are difficult to determine when the IoT terminal is produced. In this application scenario, you need to consider services such as activation, activation, and replacement of operational configurations when the IoT smart card is used for the first time. Therefore, the new requirements of the IoT service for smart card management have been greatly changed due to the eUICC usage process and the traditional UICC card usage process. Traditional UICC cards need to be produced, selected, customized, distributed, activated, used, terminated, etc. before release. Therefore, the core idea of eUICC is to separate the production of card hardware eUICC from the production of operator data: eUICC is pre-installed in the terminal device, which does not contain carrier data; after the user starts using the device, it passes the public network. The profile data is downloaded and installed in the eUICC by writing in the air. Due to the need to transmit over the public network, eUICC's security concerns are more important than the manufacturing process and eUICC security. The more important is the security of the data download process, although various technical means are defined for the exclusion of the relevant standards. Security threats, but according to the current situation, there are still many problems.

In the related art of the present disclosure, a certificate security domain, an issuer security domain root (ISD-R), and an issuer security domain profile (ISS-P) are established on the e_UICC card. A multi-level security domain, in which multiple ISD-Ps can exist; multiple ISD-P domains are isolated from each other, and each ISD-P includes a carrier file system, a network access application, a supplementary security domain, and a policy control rule. Personalized data. When an ISD-P is contracted with an operator MNO (Mobile Network Operator), ISD-P, MNO, and SM-DP+ establish their correspondence. At this stage, there are great security risks in the management of ISD-P.

In view of the above problems in the related art, no effective solution has been found yet.

Summary of the invention

The embodiment of the present disclosure provides a method and an apparatus for downloading eUICC subscription data, so as to at least solve the technical problem that the management of the ISD-P in the related art has a large security risk.

According to an embodiment of the present disclosure, a method for downloading eUICC subscription data is provided, including: receiving a download request of an operator after the network service platform completes subscription data preparation; and determining, by the download request, that the Whether the eUICC meets the download condition of the subscription data; if the download condition is met, the request for instructing to install the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data .

Optionally, the subscription data preparation is completed by the network service platform: generating, according to the operator's instruction, the following information to be scheduled to generate subscription information in the subscription data: the number of subscription data, the subscription data requirement, and the available international mobile subscriber identity ( The International Mobile Subscriber Identification (IMSI) scope is stored; the subscription data is stored in the network service platform.

Optionally, determining whether the eUICC meets the downloading condition of the subscription data comprises: the network service platform performs bidirectional authentication with the registered discovery server DS; after the authentication is passed, the receiving the DS is sent according to the ID number of the user equipment card. And eUICC card preset information; confirming, according to the eUICC card preset information, whether the eUICC meets a download condition for downloading the subscription data.

Optionally, after the request for instructing to install the ISD-P is sent to the discovery server DS, the method further includes: receiving confirmation information of the DS, wherein the confirmation information is used to indicate that the DS agrees to install the ISD. -P request and establish an empty ISD-P; establish a shared channel for transporting the key through the key negotiation process with the empty ISD-P, and select a corresponding to the download request from the preset subscription data The contract data is sent to eUICC.

Optionally, after the shared ISD-P establishes a shared channel for transporting a key by using a key negotiation process, the method further includes: using the key negotiated with the ISD-P to subscribe to the subscription data. The personal subscription data in the encryption is encrypted.

Optionally, after encrypting the subscription information in the subscription data by using a key negotiated with the ISD-P, the method further includes: establishing a secure transmission channel to the DS request; The channel transmits the encrypted personal subscription data to the ISD-P on the eUICC.

Optionally, after the encrypted personal subscription data is sent to the ISD-P on the eUICC through the secure transmission channel, the method further includes: receiving an installation result of the ISD-P feedback, where The installation result is generated by the ISD-P decrypting and installing the personal subscription data using the key.

Optionally, after receiving the installation result of the ISD-P feedback, the method further includes: sending the installation result to the DS, and instructing the DS to update the database, and installing the completed ISD The subscription data corresponding to -P is set to an inactive state.

Optionally, after the sending result is sent to the DS, the method further includes: receiving a request for applying for opening the subscription data; and activating the subscription data according to a preset policy of the DS.

Optionally, after the sending result is sent to the DS, the method further includes deleting the subscription data when the operator determines that the subscription data is no longer enabled.

Optionally, the following entities are configured with digital certificates of the same root: the network service platform, the DS, the eUICC, and the manufacturer of the eUICC.

Optionally, the digital certificate supports an undo mechanism.

Optionally, the child node of the root key of the digital certificate includes: a private key of the eUICC manufacturer, a private key of the network service platform, a private key of the DS, and a grandchild node of the root key Including: the private key of the eUICC.

Optionally, any two entities are: the communication mechanism between the network service platform, the DS, the eUICC, and the server of the operator includes: performing two-way authentication of the identity and confirming that the identity is correct before performing communication .

Optionally, the communication mechanism further includes: the requesting party authenticates the requested party, the requesting party checks the public key certificate of the requested party; and the requesting party checks the public key certificate of the requested party; The requesting party includes at least one of the following: the network service platform, the DS, the eUICC, the server of the operator; the requested party includes at least one of the following: the network service platform, the DS, The eUICC, the server of the operator.

Optionally, the communication mechanism further includes: after the communication parties negotiate a set of the minimum public secret tools, perform end-to-end authentication.

Optionally, the end-to-end authentication uses a forward security mechanism.

Optionally, the subscription data corresponds to an AES random key, and the AES random key is used to encrypt the subscription data.

Optionally, the method further includes: before the downloading the subscription data, negotiating with the eUICC to generate a first session key for encrypting the AES random key, when downloading the subscription data, The eUICC negotiation generates a second session key for encrypting the subscription data.

Optionally, the network service platform includes: an enhanced user management data preparation SM-DP+.

According to another embodiment of the present disclosure, a device for downloading eUICC subscription data is provided, which is applied to a network service platform, and includes: a receiving module, configured to receive an operator download after the network service platform completes subscription data preparation. a requesting, determining, configured to determine, according to the triggering of the download request, whether the eUICC meets a download condition of the subscription data; and the indicating module, configured to send to the discovery server DS, if the download condition is met A request to install an issuer security information domain ISD-P, wherein the ISD-P corresponds to the subscription data.

According to still another embodiment of the present disclosure, a storage medium is also provided. The storage medium is arranged to store program code for performing the following steps when executed by the processor:

After the network service platform completes the subscription data preparation, receiving the download request of the operator;

Determining, by the trigger of the download request, whether the eUICC meets a download condition of the subscription data;

In case the download condition is met, a request for instructing installation of the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data.

According to still another embodiment of the present disclosure, there is also provided an apparatus comprising a processor and a memory storing the processor-executable instructions that, when executed by the processor, perform the method as described above.

Through the disclosure, after the network service platform completes the subscription data preparation, the download request of the operator is received; under the trigger of the download request, it is determined whether the eUICC meets the download condition of the subscription data; and if the download condition is met, the discovery server DS Sending a request for instructing to install the issuer security information domain ISD-P, wherein the ISD-P corresponds to the subscription data, and the management of the ISD-P in the related technology is solved by providing security management of the issuer security information domain. There are technical problems with large security risks, which improves the security of the system.

DRAWINGS

The drawings described herein are provided to provide a further understanding of the present disclosure, which is a part of the present disclosure, and the description of the present disclosure and the description thereof are not intended to limit the disclosure. In the drawing:

FIG. 1 is a schematic diagram of a network architecture according to an embodiment of the present disclosure;

2 is a flowchart of a method of downloading eUICC subscription data according to an embodiment of the present disclosure;

3 is a structural block diagram of an apparatus for downloading eUICC subscription data according to an embodiment of the present disclosure;

4 is a schematic diagram of process management of an eUICC issuer security information domain according to an embodiment of the present disclosure;

5 is a flowchart of an eUICC issuer security information domain management process according to an embodiment of the present disclosure;

6 is a schematic diagram of a certificate link in an embodiment of the present disclosure.

detailed description

The present disclosure will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second", and the like in the specification and claims of the present disclosure are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

Example 1

The embodiment of the present application can be run on the network architecture shown in FIG. 1. FIG. 1 is a schematic diagram of a network architecture according to an embodiment of the present disclosure. The network architecture describes a technical system including a management platform, a terminal, an eUICC, and related supporting facilities, and participates in the network architecture. The various roles of the system, including:

Profile: The set of card data and card applications required by the operator to provide services to the user, which can be installed on the eUICC by over-the-air download as needed.

eUICC (embedded UICC): The hardware carrier of the profile. Compared with the traditional UICC card, the software/hardware structure is more complicated and can dynamically load carrier data. Multiple profiles belonging to different operators can be loaded (stored) on the same eUICC at the same time, but only one can be in use (active state) at the same time.

SM-DP+: A network service platform responsible for producing, storing, and providing profiles. SM-DP+ requires the necessary software/hardware capabilities to ensure the security of the profile.

Terminal: An entity that needs to access a mobile network. The eUICC is preset in the terminal, and the terminal is also responsible for downloading the profile from the SM-DP+ and writing it to the eUICC. The terminal is operated by the user.

Discovery Server DS: Assists the terminal in addressing the SM-DP+.

Certificate Issuer CA: A standard PKI certificate authority that issues trusted digital certificates to parties within the system.

In this embodiment, a method for downloading eUICC subscription data running in the network architecture is provided. FIG. 2 is a flowchart of a method for downloading eUICC subscription data according to an embodiment of the present disclosure. As shown in FIG. 2, the process includes The following steps:

Step S202, after the network service platform completes the subscription data preparation, receiving the download request of the operator;

Step S204, under the trigger of the download request, determine whether the eUICC meets the download condition of the subscription data;

Step S206, if the download condition is met, a request for instructing to install the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data.

After the completion of the subscription data preparation by the network service platform, the network service platform receives the download request of the operator; under the trigger of the download request, determines whether the eUICC meets the download condition of the subscription data; and if the download condition is met, the discovery server DS Sending a request for instructing to install the issuer security information domain ISD-P, wherein the ISD-P corresponds to the subscription data, and the management of the ISD-P in the related technology is solved by providing security management of the issuer security information domain. There are technical problems with large security risks, which improves the security of the system.

Optionally, the execution entity of the foregoing step may be a network service platform, and the network service platform includes: SIM Manager-Data Preparation+ (SM-DP+ for short), but is not limited thereto.

In an optional implementation manner of the present embodiment, the subscription data preparation is completed by the network service platform: generating the subscription information in the subscription data by using the following information to be scheduled according to the instruction of the operator: the number of subscription data, the subscription data requirement The available IMSI range; the subscription data is stored in the network service platform.

In an optional implementation manner according to this embodiment, determining whether the eUICC meets the downloading condition of the subscription data includes:

S11. The network service platform performs two-way authentication with the registered discovery server DS.

S12. After the authentication is passed, the preset information of the eUICC card sent by the DS according to the ID number of the user equipment card is received;

S13. Confirm whether the eUICC meets the download condition of downloading the subscription data according to the eUICC card preset information.

Optionally, after the request for the installation of the ISD-P is sent to the discovery server DS, the solution of the embodiment may further include the following steps:

S21: Receive confirmation information of the DS, where the confirmation information is used to identify that the DS agrees to install the ISD-P request and establish an empty ISD-P;

S22. Establish a shared channel for transmitting a key by using an empty ISD-P through a key agreement process, and select, from the preset subscription data, the subscription data corresponding to the download request to send to the eUICC.

S23: Encrypt the personal subscription data in the subscription data by using a key negotiated with the ISD-P.

S24. Apply to the DS to establish a secure transmission channel.

S25. Send the encrypted personal subscription data to the ISD-P on the eUICC through the secure transmission channel.

S26. Receive an installation result of the ISD-P feedback, where the installation result is generated by decrypting and installing the personal subscription data by using the ISD-P key.

S27: Send the installation result to the DS, and instruct the DS to update the database, and set the subscription data corresponding to the installed ISD-P to an inactive state.

At this point, confirm that the contract data is installed and can be activated and other processing operations according to the needs of the operator or user.

Optionally, after the installation result is sent to the DS, the method further includes:

S31. Receive a request for applying for opening the contract data.

S32. Activate subscription data according to a preset policy of the DS.

S41: Delete the subscription data when the operator determines that the subscription data is no longer enabled.

In this embodiment, the following entities are all configured with digital certificates of the same root: network service platform, DS, eUICC, and manufacturer of eUICC. The digital certificate supports the revocation mechanism.

In this embodiment, the digital certificate conforms to the tree structure of the binary tree, and the child nodes of the root key include: a private key of the eUICC manufacturer, a private key of the network service platform, a private key of the DS, and a grandchild node of the root key includes: The private key of the eUICC, the private key of the eUICC is a child of the private key of the eUICC manufacturer.

In this embodiment, any two entities below: the communication mechanism between the network service platform, the DS, the eUICC, and the server of the operator include: performing two-way authentication of the identity and confirming that the identity is correct before performing communication.

Optionally, the communication mechanism further includes: the requesting party authenticates the requested party, the requesting party checks the public key certificate of the requested party; and the requesting party checks the public key certificate of the requested party; wherein the requesting party includes the following At least one of: a network service platform, a DS, an eUICC, an operator's server; the requested party includes at least one of the following: a network service platform, a DS, an eUICC, and an operator's server. The communication mechanism also includes: the communication parties perform end-to-end authentication after negotiating a set of the minimum public secret tools. End-to-end authentication uses forward security mechanisms.

The optional implementation manner of this embodiment further includes: before the downloading the subscription data, negotiating with the eUICC to generate a first session key for encrypting the AES random key, when downloading the subscription data, The eUICC negotiation generates a second session key for encrypting the subscription data.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, portions of the technical solutions of the present disclosure that contribute substantially or to the prior art may be embodied in the form of a software product stored in a storage medium (eg, ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present disclosure.

Example 2

In this embodiment, a device for downloading the eUICC subscription data is provided, and the device is used to implement the foregoing embodiments and preferred embodiments, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

3 is a structural block diagram of an apparatus for downloading eUICC subscription data according to an embodiment of the present disclosure, which is applied to a network service platform, which may be an enhanced user management data preparation SM-DP+, as shown in FIG. include:

The receiving module 30 is configured to receive a download request of the operator after the network service platform completes the subscription data preparation;

The determining module 32 is configured to determine, according to a trigger of the download request, whether the eUICC meets the download condition of the subscription data;

The indication module 34 is configured to send a request for instructing to install the issuer security information domain ISD-P to the discovery server DS, wherein the ISD-P corresponds to the subscription data, if the download condition is met.

Optionally, the receiving module completes the subscription data preparation by using the network service platform in the following manner: according to the instruction of the operator, generating the subscription information in the subscription data by the following information to be scheduled: the number of the contracted data, the contract data request, and the available international mobile user identification Code IMSI range; store the subscription data in the network service platform.

Optionally, the determining, by the determining module, whether the eUICC meets the downloading condition of the subscription data includes: performing bidirectional authentication with the registered discovery server DS; and after receiving the authentication, receiving the eUICC card preset information sent by the DS according to the ID number of the user equipment card. According to the eUICC card preset information, it is confirmed whether the eUICC meets the download condition of downloading the subscription data.

Optionally, the apparatus of this embodiment further includes: a second receiving module, configured to: after the indication module sends a request for instructing to install the ISD-P to the discovery server DS, receive the confirmation information of the DS, where the confirmation information is used for Characterizing that the DS agrees to install the ISD-P request and establishes an empty ISD-P; the transmitting module is configured to establish a shared channel for transporting the key through the key negotiation process with the empty ISD-P, and from the preset subscription data The subscription data corresponding to the download request is selected and sent to the eUICC.

Optionally, the apparatus in this embodiment further includes: an encryption module, configured to use the secret negotiated with the ISD-P after the transport module and the empty ISD-P establish a shared channel for transporting the key through a key negotiation process. The key encrypts the personal subscription data in the subscription data.

Optionally, the apparatus of this embodiment further includes: an application module, configured to: after the encryption module uses the key negotiated with the ISD-P to encrypt the subscription information in the subscription data, apply to the DS to establish a secure transmission channel; and send the module. And for transmitting the encrypted personal subscription data to the ISD-P on the eUICC through the secure transmission channel.

Optionally, the apparatus of this embodiment further includes: a second receiving module, configured to: after the sending module sends the encrypted personal subscription data to the ISD-P on the eUICC through the secure transmission channel, receive the installation of the ISD-P feedback As a result, the installation result is generated by the ISD-P using the key to decrypt and install the personal subscription data.

Optionally, the apparatus of this embodiment further includes: a second indication module, configured to send the installation result to the DS after receiving the installation result of the ISD-P feedback, and instruct the DS to update the database, and the installation is completed. The subscription data corresponding to the ISD-P is set to an inactive state.

Optionally, the apparatus of this embodiment further includes: a third receiving module, configured to: after sending the installation result to the DS, receive a request for applying for opening subscription data; and an activation module, configured to activate according to a preset policy of the DS Signing data.

Optionally, the apparatus of this embodiment further includes: after the installation result is sent to the DS, the deleting module is configured to delete the subscription data when the operator determines that the subscription data is no longer enabled.

In this embodiment, the child node of the root key of the digital certificate includes: a private key of the eUICC manufacturer, a private key of the network service platform, a private key of the DS, and a grandchild node of the root key includes: a private key of the eUICC.

In this embodiment, the communication mechanism further includes: the requesting party authenticates the requested party, the requesting party checks the public key certificate of the requested party; and the requesting party checks the public key certificate of the requested party; wherein, the requesting party The server includes at least one of the following: a network service platform, a DS, an eUICC, and an operator's server; the requested party includes at least one of the following: a network service platform, a DS, an eUICC, and an operator's server.

Optionally, the communication mechanism further includes: after the communication parties negotiate a set of the minimum public secret tools, perform end-to-end authentication, and the end-to-end authentication adopts a forward security mechanism.

In this embodiment, the subscription data corresponds to an AES random key, and the AES random key is used to encrypt the subscription data.

In the apparatus of this embodiment, before downloading the subscription data, the first session key for encrypting the AES random key is generated in negotiation with the eUICC, and when the subscription data is downloaded, the eUICC is negotiated to generate the encryption for the subscription data. The second session key.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are in any combination. The forms are located in different processors.

Example 3

This embodiment is an optional embodiment of the present disclosure, and is used to describe the present application in detail with reference to specific examples:

The eUICC card of this embodiment is a smart card with an operating system, and internally includes a certificate security domain, a publisher security root domain, and a plurality of issuer security information domains. The certificate security domain stores the private key, the related certificate, the root public key of the CI, and the key group used for certificate replacement, and the security level is high; the issuer security root domain is responsible for executing the platform management instruction sent by the discovery server DS. The issuer security information domain represents a contract data of the operator, including the file system, network access application, control authorization security domain, supplementary security domain, policy rules, and carrier security domain.

4 is a schematic diagram of process management of an eUICC issuer security information domain according to an embodiment of the present disclosure. The method corresponding to the eUICC card control method includes the following steps:

102. After the SM-DP+ completes the subscription data preparation (SM-DP+, according to the operator's instructions, the predetermined number of subscription data, the contract data request, and the available IMSI range description information are required to generate the key, certificate, and the like in the subscription data. In the information part, the subscription data is stored in the SM-DP+, and after receiving the download request from the operator, if the download condition is met (SM-DP+ and the registered discovery server DS perform two-way authentication, after the authentication is passed, the server is found. The DS extracts the UICC card preset information (EIS, eUICC Information Set, eUICC card information set) according to the ID number of the user equipment card, and sends it to the SM-DP+ to confirm whether the eUICC is suitable for downloading the subscription data. DP+ sends a signature to the discovery server DS to install a new ISD-P request.

104. The ISD-R in the server DS and the eUICC is found to start the authentication process. If the authentication is passed, an empty ISD-P is established, and the confirmation information is returned to the SM-DP+.

106. The SM-DP+ establishes a share with the newly established ISD-P through a key agreement process to transmit a key, and selects a qualified preparation from the newly generated subscription data to send to the eUICC.

108. The SM-DP+ encrypts the personal subscription data using the key negotiated with the ISD-P.

110. Before transmitting the foregoing contract data, the SM-DP+ first applies to the discovery server DS to establish a secure transport channel, and sends the encrypted personal subscription data to the ISD-P on the eUICC through the secure transport channel.

112. After receiving the data, the ISD-P decrypts and installs the data using the key described above, and returns the installation result and status to the SM-DP+.

114. The SM-DP+ sends the installation result and status of the ISD-P to the discovery server DS, and the server DS updates the database, stores the new subscription data in the eUICC subscription data set (EIS), and sets the new one. The contract data (newly installed ISD-P) is inactive.

Optionally, after receiving the new subscription data from the user (or the operator), the operator sends a new subscription data activation request to the discovery server DS, and the discovery server DS confirms whether the rule information in the new subscription data set is allowed to be switched. If allowed, sign a registration activation request to the ISD-R of the eUICC, the eUICC continues to confirm the local execution rules; if there is a conflict, the ISD-R stops the process and informs the discovery server DS; if there is no conflict, the ISD-R The contract data is switched, and the handover result is sent to the discovery server DS, and the server DS is notified to notify the operator of the handover result.

Optionally, the operator deactivates the original subscription data through the discovery server DS, and the process also uses the confirmation of the two rule information before performing the operation. (deactivation process)

Optionally, if the operator determines that the subscription data is no longer enabled and will be completely deleted, the deletion of the subscription data in the eUICC card may be performed. (Delete the process to write another sovereign)

Optionally, the components in the system, the SM-DP+, the discovery server DS, the card manufacturer, and the eUICC, need to be configured with the same digital certificate for signature authentication and key agreement, and the digital certificate needs to support the revocation mechanism.

Corresponding to the eUICC issuer security information domain process management diagram, FIG. 5 is a flowchart of the eUICC issuer security information domain management process of the embodiment of the present disclosure.

6 is a schematic diagram of a certificate link according to an embodiment of the present disclosure; illustrating a relationship between certificates at various levels.

Optionally, the communication between the SM-DP+, the discovery server DS, the eUICC, and any two entities of the operator first performs mutual authentication of the identity, and then confirms that the identity is correct, and then the communication is performed. The premise of the authentication is that the two parties have the same root certificate. The authentication steps are as follows.

The requesting party authenticates the requested party, and the requesting party checks the public key certificate of the requested party; the requesting party checks the public key certificate of the requested party; optionally, the requesting party may be the SM-DP+, the discovery server DS , eUICC, operator; the requested party can be SM-DP+, discovery server DS, eUICC, carrier;

Optionally, the following steps are performed before the communication between the SM-DP+, the discovery server DS, the eUICC, and any two entities of the operator;

The communication parties negotiate a set of minimum public secret tools, and then perform end-to-end authentication. The end-to-end authentication uses forward security mechanism Forward Secrecy.

Optionally, when generating the profile, an AES random key is generated at the same time, and the profile encryption is encrypted by using the random key; before downloading, the SM-DP+ and the eUICC first negotiate to generate a session key, and the session key is only used for encryption. The above-mentioned random key, when downloading the profile, the SM-DP+ negotiates with the eUICC to generate a session key, and uses the session key to encrypt the profile to ensure the security of the profile data.

Through the embodiment of the present disclosure, a more secure way is adopted to solve the problems existing in the prior art, and an eUICC management method is provided, that is, the security management of the issuer security information domain is provided, thereby improving the system. safety.

Example 4

Embodiments of the present disclosure also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1, after the network service platform completes the subscription data preparation, receiving the download request of the operator;

S2, under the trigger of the download request, determine whether the eUICC meets the download condition of the subscription data;

S3. If the download condition is met, a request for instructing to install the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data.

Optionally, in this embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

Optionally, in this embodiment, the processor, according to the stored program code in the storage medium, performs a download request of the operator after the network service platform completes the subscription data preparation;

Optionally, in this embodiment, the processor executes, according to the stored program code in the storage medium, whether the eUICC meets the download condition of the subscription data, triggered by the download request;

Optionally, in this embodiment, the processor executes, according to the stored program code in the storage medium, a request for instructing to install the issuer security information domain ISD-P to the discovery server DS, if the download condition is met, Among them, ISD-P corresponds to the contract data.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present disclosure described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. As such, the disclosure is not limited to any specific combination of hardware and software.

The above description is only a preferred embodiment of the present disclosure, and is not intended to limit the disclosure, and various changes and modifications may be made to the present disclosure. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and scope of the present disclosure are intended to be included within the scope of the present disclosure.

Industrial applicability

The method and device for downloading eUICC subscription data according to an embodiment of the present disclosure, after the network service platform completes the subscription data preparation, receives the download request of the operator; and, under the trigger of the download request, determines whether the eUICC meets the download condition of the subscription data; When the download condition is met, a request for instructing installation of the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data. The downloading method and device solve the technical problem that the management of the ISD-P has a large security risk in the related technology by providing security management of the issuer security information domain, thereby improving the security of the system.

Claims

A method for downloading eUICC subscription data, including:

After the network service platform completes the subscription data preparation, receiving the download request of the operator;

Determining, by the trigger of the download request, whether the eUICC meets a download condition of the subscription data;

In case the download condition is met, a request for instructing installation of the issuer security information domain ISD-P is sent to the discovery server DS, wherein the ISD-P corresponds to the subscription data.
The method of claim 1, wherein the subscription data preparation is completed by the network service platform in the following manner:

According to the operator's instruction, the following information to be scheduled is generated into the subscription information in the subscription data: the number of contract data, the contract data request, and the range of available international mobile subscriber identity IMSI;

The subscription data is stored in the network service platform.
The method of claim 1, wherein determining whether the eUICC meets the downloading conditions of the subscription data comprises:

The network service platform performs two-way authentication with the registered discovery server DS;

After the authentication is passed, receiving the eUICC card preset information sent by the DS according to the ID number of the user equipment card;

Determining, according to the eUICC card preset information, whether the eUICC meets a download condition for downloading the subscription data.
The method of claim 1, wherein after transmitting a request to the discovery server DS to indicate installation of the ISD-P, the method further comprises:

Receiving confirmation information of the DS, wherein the confirmation information is used to represent that the DS agrees to install the ISD-P request and establish an empty ISD-P;

Establishing a shared channel for transmitting a key with the empty ISD-P through a key agreement process, and selecting subscription data corresponding to the download request from the preset subscription data to send to the eUICC.
The method according to claim 4, wherein after the shared channel for transmitting the key is established by the key ISD-P through the key agreement process, the method further includes:

The personal subscription data in the subscription data is encrypted using a key negotiated with the ISD-P.
The method of claim 5, wherein after encrypting the subscription information in the subscription data using a key negotiated with the ISD-P, the method further comprises:

Establishing a secure transmission channel with the DS application;

The encrypted personal subscription data is transmitted to the ISD-P on the eUICC through the secure transport channel.
The method of claim 6, wherein after the encrypted personal subscription data is sent to the ISD-P on the eUICC through the secure transport channel, the method further comprises:

Receiving an installation result of the ISD-P feedback, wherein the installation result is generated by the ISD-P decrypting and installing the personal subscription data using the key.
The method of claim 7, wherein after receiving the installation result of the ISD-P feedback, the method further comprises:

Sending the installation result to the DS, and instructing the DS to update the database, and setting the subscription data corresponding to the installed ISD-P to an inactive state.
The method of claim 8, wherein after the transmitting the result of the installation to the DS, the method further comprises:

Receiving a request for applying for opening the contract data;

The subscription data is activated according to a preset policy of the DS.
The method of claim 8, wherein after the transmitting the result of the installation to the DS, the method further comprises:

When the operator determines that the subscription data is no longer enabled, the subscription data is deleted.
The method of claim 1, wherein the following entities each configure a digital certificate of the same root: the network service platform, the DS, the eUICC, a manufacturer of the eUICC.
The method of claim 11 wherein said digital certificate supports an undo mechanism.
The method according to claim 11, wherein the child node of the root key of the digital certificate comprises: a private key of the eUICC manufacturer, a private key of the network service platform, a private key of the DS, The grandchild node of the root key includes: a private key of the eUICC.
The method according to claim 1, wherein any two entities: the communication mechanism between the network service platform, the DS, the eUICC, and the server of the operator comprises: performing mutual authentication of the identity and Confirm the identity is correct before communicating.
The method of claim 14, wherein the communication mechanism further comprises:

The requesting party authenticates the requested party, and the requesting party checks the public key certificate of the requested party; the requesting party checks the public key certificate of the requested party; wherein the requesting party includes at least one of the following: the network a service platform, the DS, the eUICC, and a server of the operator; the requested party includes at least one of the following: the network service platform, the DS, the eUICC, and a server of the operator.
The method of claim 14, wherein the communication mechanism further comprises:

After the communication parties negotiate a set of the smallest public secret tools, they end-to-end authentication.
The method of claim 14 wherein said end-to-end authentication employs a forward security mechanism.
The method of claim 1, wherein the subscription data corresponds to an AES random key, and the AES random key is used to encrypt the subscription data.
The method of claim 18, wherein the method further comprises:

Before downloading the subscription data, the first session key used to encrypt the AES random key is generated in association with the eUICC, and when the subscription data is downloaded, the eUICC is negotiated to generate the subscription for the subscription. The second session key to which the data is encrypted.
The method according to any one of claims 1 to 19, wherein the network service platform comprises: an enhanced user management data preparation SM-DP+.
A download device for eUICC subscription data, applied to a network service platform, comprising:

a receiving module, configured to receive a download request of the operator after the network service platform completes the subscription data preparation;

a determining module, configured to determine, according to the triggering of the download request, whether the eUICC meets a download condition of the subscription data;

The indication module is configured to, when the download condition is met, send a request to the discovery server DS to indicate installation of the issuer security information domain ISD-P, wherein the ISD-P corresponds to the subscription data.
A storage medium storing a program, wherein the program is executed by a processor to perform the method of any one of claims 1 to 19.
An apparatus comprising a processor and a memory storing the processor-executable instructions, when the instructions are executed by the processor, performing the method of any one of claims 1 to 19.