AU2018342367B2

AU2018342367B2 - Method of connecting profile content management platform, terminal and server

Info

Publication number: AU2018342367B2
Application number: AU2018342367A
Authority: AU
Inventors: Xiaobo YU
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2017-09-27
Filing date: 2018-08-13
Publication date: 2021-10-21
Anticipated expiration: 2038-08-13
Also published as: WO2019062356A1; AU2018342367A1; CN109560953A; CN109560953B

Abstract

Provided in an embodiment of the present invention are a method of connecting a profile content management platform (PCMP), a terminal and a server. The method comprises: a management server receives a first message transmitted by a terminal, wherein the first message comprises information not configured with a PCMP address; obtaining the PCMP address; and transmitting a second message to the terminal, wherein the second message comprises the first message and the first message comprises the PCMP address, such that the terminal updates the PCMP address according to the second message and connects to the PCMP according to the PCMP address. The solution of the embodiment of the present invention provides a mechanism in which, upon determining that a PCMP address is not set in a profile, a terminal transmits a first message to a management server, the management server transmits the PCMP address to the terminal, and the terminal completes connection to the PCMP according to the PCMP address, thereby obtaining subsequent profile update content, ensuring communication security, and improving user experience.

Description

METHOD OF CONNECTING PROFILE CONTENT MANAGEMENT PLATFORM, TERMINAL, AND SERVER

[0001] This application claims priority to Chinese Patent Application No.

201710890762.7, filed with the Chinese Patent Office on September 27, 2017 and

entitled "METHOD FOR CONNECTING TO PROFILE CONTENT

MANAGEMENT PLATFORM, TERMINAL, AND SERVER", which is incorporated

herein by reference in its entirety.

TECHNICAL FIELD

[0002] The present invention relates to the communications field, and in particular,

to a method for connecting to a profile content management platform (profile content

management platform, PCMP), a terminal, and a management server.

BACKGROUND

[0003] An embedded universal integrated circuit card (embedded universal

integrated circuit card, eUICC) in a terminal contacts a PCMP by using a local profile

assistant (local profile assistant, LPA), to obtain profile (profile) update content and

facilitate subsequent use of profile update content for the terminal.

[0004] There are two manners of triggering the eUICC to obtain the profile update

content: 1. After a profile is activated (enable), the eUICC automatically contacts the

PCMP to obtain the profile update content. 2. The eUICC contacts the PCMP by using

a remote profile management (Remote Profile Management, RPM) command, to

request to obtain the profile update content. Herein, the RPM command carries a contact

PCMP (Contact PCMP) identifier. After recognizing the RPM command, the eUICC

obtains a PCMP address in the activated profile, and connects to the PCMP by using the LPA, to obtain the profile update content.

[0005] After the eUICC receives the RPM command, if the eUICC determines that the profile is not activated or that no PCMP address is set in the activated profile, the

eUICC terminates the RPM command, and reports an error to the management server.

In this case, the eUICC cannot connect to the PCMP, and cannot obtain the profile

update content in time. Consequently, communication security or user experience is

affected.

[0006] A reference herein to a patent document or any other matter identified as prior art, is not to be taken as an admission that the document or other matter was known

or that the information it contains was part of the common general knowledge as at the

priority date of any of the claims.

SUMMARY

[0007] Embodiments of the present invention may provide a method for connecting

to a PCMP, a terminal, and a server. After receiving notification information sent by an

eUICC in a terminal, the management server sends, to the eUICC, a message including

an ICCID and a PCMP address, so that the eUICC connects to a PCMP to obtain profile

update content, thereby ensuring communication security and improving user

experience.

[0008] According to an aspect of the present invention, there is provided a method

for connecting to a profile content management platform PCMP, wherein the method

comprises: receiving, by a management server, a first message sent by a terminal,

wherein the first message comprises information that a PCMP address is not configured;

obtaining, by the management server, the PCMP address based on the first message;

and sending, by the management server, a second message to the terminal, wherein the

second message comprises first information, and the first information comprises the

PCMP address, so that the terminal updates a PCMP address based on the second

message and connects to a PCMP based on the PCMP address.

[0009] According to another aspect of the present invention, there is provided a method for connecting to a profile content management platform PCMP, wherein the method comprises: sending, by a terminal, a first message to a management server, wherein the first message comprises information that a profile content management platform PCMP address is not configured; receiving, by the terminal, a second message sent by the management server, wherein the second message comprises first information, and the first information comprises the PCMP address; and updating, by the terminal, a PCMP address based on the second message, and connecting to a PCMP based on the PCMP address.

[0010] According to yet another aspect of the present invention, there is provided a method for connecting to a profile content management platform PCMP, wherein the method comprises: sending, by an embedded universal integrated circuit card eUICC to a management server, information that a profile content management platform PCMP address is not configured; receiving, by the eUICC, first information sent by the management server, wherein the first information comprises the PCMP address; and connecting, by the eUICC, to a PCMP based on the PCMP address.

[0011] According to a further aspect of the present invention, there is provided a method for connecting to a profile content management platform PCMP, wherein the method comprises: receiving, by a terminal, first information sent by a management server, wherein the first information comprises a first PCMP address and a contact PCMP identifier; when no PCMP address is configured in a target profile, writing, by the terminal, the first PCMP address into the target profile; or when the target profile comprises a second PCMP address, and the first PCMP address is inconsistent with the second PCMP address, updating, by the terminal, the second PCMP address in the target profile based on the first PCMP address; and connecting, by the terminal, to the PCMP based on the contact PCMP identifier and the first PCMP address.

[0012] According to one example of the present invention, there is provided a management server, wherein the management server comprises: a receiving unit, configured to receive a first message sent by a terminal, wherein the first message comprises information that a profile content management platform PCMP address is not configured; a processing unit, configured to obtain, by the management server, the

PCMP address based on the first message; and a sending unit, configured to send a second message to the terminal, wherein the second message comprises first information, and the first information comprises the PCMP address, so that the terminal updates a PCMP address based on the second message and connects to a PCMP based on the PCMP address.

[0013] According to another example of the present invention, there is provided a terminal, wherein the terminal comprises: a sending unit, configured to send a first message to a management server, wherein the first message comprises information that a profile content management platform PCMP address is not configured; a receiving unit, configured to receive a second message sent by the management server, wherein the second message comprises first information, and the first information comprises the PCMP address; and a processing unit, configured to: update a PCMP address based on the second message, and connect to a PCMP based on the PCMP address.

[0014] According to a further example of the present invention, there is provided an embedded universal integrated circuit card eUICC, wherein the eUICC comprises: a sending unit, configured to send, to a management server, information that a profile content management platform PCMP address is not configured; a receiving unit, configured to receive first information sent by the management server, wherein the first information comprises the PCMP address; and a processing unit, configured to connect to a PCMP based on the PCMP address.

[0015] According to another example of the present invention, there is provided a terminal, wherein the terminal comprises: a receiving unit, configured to receive first information sent by a management server, wherein the first information comprises a first PCMP address and a contact PCMP identifier; and a processing unit, configured to: when no PCMP address is configured in a target profile, write thefirst PCMP address into the target profile; or when the target profile comprises a second PCMP address, and the first PCMP address is inconsistent with the second PCMP address, update the second PCMP address in the target profile based on the PCMP address, wherein the processing unit is further configured to connect to the PCMP based on the contact PCMP identifier and the first PCMP address.

[0016] According to yet another aspect of the present invention, there is provided a management server, wherein the management server comprises: a receiver, configured

to receive a first message sent by a terminal, wherein the first message comprises

information that a profile content management platform PCMP address is not

configured; a processor, configured to obtain, by the management server, the PCMP

address based on the first message; and a transmitter, configured to send a second

message to the terminal, wherein the second message comprises first information, and

the first information comprises the PCMP address, so that the terminal updates a PCMP

address based on the second message and connects to a PCMP based on the PCMP

address.

[0017] According to a further aspect of the present invention, there is provided a

terminal, wherein the terminal comprises: a transmitter, configured to send a first

message to a management server, wherein the first message comprises information that

a profile content management platform PCMP address is not configured; a receiver,

configured to receive a second message sent by the management server, wherein the

PCMP address; and a processor, configured to: update a PCMP address based on the

second message, and connect to a PCMP based on the PCMP address.

[0018] According to another aspect of the present invention, there is provided an

embedded universal integrated circuit card eUICC, wherein the eUICC comprises: a

transmitter, configured to send, to a management server, information that a profile

content management platform PCMP address is not configured; a receiver, configured

to receive first information sent by the management server, wherein the first information

comprises the PCMP address; and a processor, configured to connect to a PCMP based

on the PCMP address.

[0019] According to yet another aspect of the present invention, there is provided a

terminal, wherein the terminal comprises: a receiver, configured to receive first

information sent by a management server, wherein the first information comprises a

first PCMP address and a contact PCMP identifier; and a processor, configured to: when

no PCMP address is configured in a target profile, write the first PCMP address into the target profile; or when the target profile comprises a second PCMP address, and the first PCMP address is inconsistent with the second PCMP address, update the second PCMP address in the target profile based on the first PCMP address, wherein the processor is further configured to connect to the PCMP based on the contact PCMP identifier and the first PCMP address.

[0016] According to a first example, a method for connecting to a profile content management platform PCMP is provided. The method includes: receiving, by a management server, a first message sent by a terminal, where the first message includes information that a profile content management platform PCMP address is not configured; obtaining, by the management server, the PCMP address based on the first message; and sending, by the management server, a second message to the terminal, where the second message includes first information, and the first information includes the PCMP address, so that the terminal updates a PCMP address based on the second message and connects to a PCMP based on the PCMP address.

[0017] According to the method for connecting to a PCMP in this embodiment of the present invention, after receiving the first message sent by the terminal, the management server sends, to the terminal, the message including the PCMP address, so that the terminal connects to the PCMP to obtain profile update content, thereby improving communication security and user experience.

[0018] With reference to the first example, in a first possible implementation of the first example, the obtaining, by the management server, the PCMP address based on the first message includes: sending, by the management server, a third message to a mobile network operator MNO server, where the third message is used to request to update the PCMP address, and the third message includes the information that the PCMP address is not configured; and receiving, by the management server, a fourth message sent by the MNO, where the fourth message includes a message whose type is an update metadata request, and the message whose type is the update metadata request includes the PCMP address.

[0023] The management server receives the first message sent by the terminal, and obtains the PCMP address from the MNO based on the first message, to complete a

subsequent connection between the terminal and the PCMP.

[0024] With reference to the first example, in a second possible implementation of

the first example, the obtaining, by the management server, the PCMP address based

on the first message includes:

receiving, by the management server, a fifth message sent by a mobile

network operator MNO server, where the fifth message includes the information that

the PCMP address is not configured and a message whose type is an update metadata

request, and the message whose type is the update metadata request includes the PCMP

address.

[0025] Before receiving the first message sent by the terminal, the management

server obtains, from the MNO in advance, the PCMP address, a trigger condition for

generating an RPM package, and the information that the PCMP address is not

configured. In this way, after receiving the information that the PCMP address is not

configured, the management server sends the PCMP address to the terminal, to

complete the subsequent connection between the terminal and the PCMP.

[0026] In a possible implementation, the obtaining, by the management server, the PCMP address based on the first message includes:

generating, by the management server, a remote profile management RPM

package based on the first message and the fifth message, where the RPM package

includes a message whose type is an update metadata request, and the message whose

type is the update metadata request includes the PCMP address.

[0027] With reference to the first example or either of the foregoing possible

implementations of the first example, in a third possible implementation of the first

example, the first information further includes an integrated circuit card identifier

ICCID, and the ICCID is used by the terminal to find a target profile and obtain a remote

profile management RPM command, to execute the RPM command and complete the

connection between the terminal and the PCMP.

[0028] With reference to the first example or any one of the foregoing possible

implementations of the first example, in a fourth possible implementation of the first

example, after the receiving, by a management server, a first message sent by a terminal,

the method may further include:

sending, by the management server, a sixth message to the terminal, where

the sixth message includes delay indication information, and the delay indication

information is used to indicate a delay; and the method further includes:

when the delay expires, receiving, by the management server, a seventh

message sent by the terminal, where the seventh message includes a session identifier,

the seventh message is used to request to download a first package, and thefirst package

includes the RPM package or a profile (profile) package.

[0029] In this technical solution, the terminal may obtain an RPM package updated

by the PCMP or a profile package while a same session is maintained for the terminal

and the management server.

[0030] With reference to the fourth possible implementation of the first example, in

a fifth possible implementation of the first example, after the receiving, by the

management server, a seventh message sent by the terminal, the method may further

include:

when the management server does not support an error processing

mechanism, sending, by the management server to the terminal, information that no

RPM package is downloaded; or

when the management server does not generate the RPM package, sending,

by the management server, pending information to the terminal, where the pending

information is used to indicate that the RPM package has not been generated.

[0031] In this technical solution, the management server may send a processing

result to the terminal in time, and end the session, thereby saving a network resource.

[0032] With reference to the first example or any one of the foregoing possible

implementations of the first example, in a sixth possible implementation of the first

example, after the sending, by the management server, a second message to the terminal,

the method may further include: receiving, by the management server, an eighth message sent by the terminal, where the eighth message includes first result information and second result information, the first result information includes contact PCMP response information, the contact PCMP response information includes the PCMP address, the second result information includes update PCMP address response information, the first result information is used to notify the management server that the eUICC completes a contact

PCMP operation, and the second result information is used to notify the management

server that the PCMP address is updated, to notify the management server that the

contact PCMP operation is completed and the PCMP address is updated.

[0033] With reference to the first example or any one of the second possible

implementation to the sixth possible implementation of the first example, in a seventh

possible implementation of the first example, the method may further include:

receiving, by the management server, a ninth message sent by an MNO,

where the ninth message is used to revoke the RPM command.

[0034] According to a second example, a method for connecting to a profile content

management platform PCMP is provided. The method may include:

sending, by a terminal, a first message to a management server, where the

first message includes information that a profile content management platform PCMP

address is not configured;

receiving, by the terminal, a second message sent by the management server,

where the second message includes first information, and the first information includes

the PCMP address; and

updating, by the terminal, a PCMP address based on the second message,

and connecting to a PCMP based on the PCMP address.

[0035] According to the method for connecting to a PCMP in this embodiment of

the present invention, the terminal sends the first message to the management server, to

obtain the message including the PCMP address; completes connecting to the PCMP

based on the PCMP address; and subsequently obtains profile update content, thereby

improving communication security and user experience.

[0036] With reference to the second example, in a first possible implementation of the second example, the PCMP address is obtained from a mobile network operator MNO after the management server receives the first message sent by the terminal.

[0037] In this solution, after the terminal sends, to the management server, the information that the PCMP address is not configured, the management server obtains the PCMP address from the MNO based on the first message, and sends the PCMP address to the terminal, so that the terminal can obtain the PCMP address in time and establish a connection to the PCMP.

[0038] With reference to the second example, in a second possible implementation of the second example, the PCMP address is saved as a fifth message by the management server before the management server receives the first message sent by the terminal, the fifth message includes the information that the PCMP address is not configured and a message whose type is an update metadata request, and the message whose type is the update metadata request includes the PCMP address.

[0039] Before the first information is sent to the management server, the MNO sends, to the management server, the PCMP address and the information that the PCMP address is not configured. When receiving the first message sent by the terminal, the management server sends the PCMP address to the terminal, so that the terminal obtains the PCMP address in time and establishes the connection to the PCMP.

[0040] With reference the second example or either of the foregoing possible implementations of the second example, in a third possible implementation of the second example, the first information further includes an integrated circuit card identifier ICCID, and the method may further include: finding, by the terminal, a target profile based on the ICCID, and obtaining a remote profile management RPM command, to execute the RPM command and complete the connection between the terminal and the PCMP.

[0041] With reference to the second example or any one of the foregoing possible implementations of the second example, in a fourth possible implementation of the second example, before the sending, by a terminal, a first message to a management server, the method may further include: finding, by the terminal, the target profile based on the integrated circuit card identifier ICCID in the remote profile management RPM command, determining that the target profile is not activated, and caching the RPM command, so that the terminal subsequently executes the RPM command based on the received PCMP address, completes the connection between the terminal and the PCMP, and subsequently obtains the profile.

[0042] With reference to the second example or any one of the foregoing possible implementations of the second example, in a fifth possible implementation of the

second example, after the sending, by a terminal, a first message to a management

server, the method may further include:

receiving, by the terminal, a sixth message sent by the management server,

where the sixth message includes delay indication information, and the delay indication

information is used to indicate a delay; and the method further includes:

when the delay expires, sending, by the terminal, a seventh message to the

management server, where the seventh message includes a session identifier, the

seventh message is used to request to download a first package, and the first package

includes the RPM package or a profile (profile) package.

[0043] In this technical solution, the terminal may obtain an RPM package updated

and the management server.

[0044] With reference to the fifth possible implementation of the second example,

in a sixth possible implementation of the second example, after the terminal sends the

fifth message to the management server, the method may further include:

when the management server does not support an error processing

mechanism, receiving, by the terminal, information that no RPM package is

downloaded and that is sent by the management server; or

if the management server does not generate the RPM package, receiving, by

the terminal, pending information sent by the management server, where the pending

information is used to indicate that the RPM package has not been generated.

[0045] In this technical solution, the management server may send a processing

[0046] With reference to the second example or any one of the foregoing possible

implementations of the second example, in a seventh possible implementation of the

second example, after the management server sends the second message to the terminal,

the method may further include:

sending, by the terminal, an eighth message to the management server,

where the eighth message includes first result information and second result

information, the first result information includes contact PCMP response information,

the contact PCMP response information includes the PCMP address, the second result

information includes update PCMP address response information, the first result

information is used to notify the management server that an eUICC completes a contact

contact PCMP operation is completed and the PCMP address is updated.

[0047] According to a third example, a method for connecting to a profile content

management platform PCMP is provided. The method may include:

sending, by an embedded universal integrated circuit card eUICC to a

management server, information that a profile content management platform PCMP

address is not configured;

receiving, by the eUICC, first information sent by the management server,

where the first information includes the PCMP address; and

connecting, by the eUICC, to a PCMP based on the PCMP address.

[0048] According to the method for connecting to a PCMP in this embodiment of the present invention, the eUICC sends the first message to the management server, to

obtain the message including the PCMP address; completes connecting to the PCMP

improving communication security and user experience.

[0049] With reference to the third example, in a first possible implementation of the

third example, the PCMP address is obtained from a mobile network operator MNO

after the management server receives the first message sent by the eUICC.

[0050] In this solution, after the eUICC sends, to the management server, the information that the PCMP address is not configured, the management server obtains the PCMP address from the MNO based on the first message, and sends the PCMP address to the eUICC, to implement a connection between the eUICC and the PCMP.

[0051] With reference to the third example, in a second possible implementation of the third example, the PCMP address is saved as a fifth message by the management

server before the management server receives the first information sent by the eUICC,

the fifth message includes the information that the PCMP address is not configured and

a message whose type is an update metadata request, and the message whose type is the

update metadata request includes the PCMP address.

[0052] Before the first information is sent to the management server, the MNO

sends, to the management server, the PCMP address and the information that the PCMP

address is not configured. When receiving the first message sent by the eUICC, the

management server sends the PCMP address to the terminal, so that the terminal obtains

the PCMP address in time and establishes the connection to the PCMP.

[0053] With reference the third example or either of the foregoing possible

implementations of the third example, in a third possible implementation of the third

ICCID, and the method may further include:

finding, by the eUICC, a target profile based on the ICCID, and obtaining a

remote profile management RPM command, to execute the RPM command and

complete the connection between the eUICC and the PCMP.

[0054] With reference to the third example or any one of the foregoing possible

implementations of the third example, in a fourth possible implementation of the third

example, before the sending, by an eUICC to a management server, information that a

PCMP address is not configured, the method may further include:

finding, by the eUICC, the target profile based on the integrated circuit card

identifier ICCID in the remote profile management RPM command, determining that

the target profile is not activated, and caching the RPM command, so that the eUICC

subsequently executes the RPM command based on the received PCMP address,

completes the connection between the eUICC and the PCMP, and subsequently obtains profile update content.

[0055] With reference to the third example or any one of the foregoing possible implementations of the third example, in a fifth possible implementation of the third

example, after the eUICC receives second information sent by the management server,

the method may further include:

sending, by the eUICC, first result information and second result

information to the management server, where the first result information includes

contact PCMP response information, the contact PCMP response information includes

the PCMP address, the second result information includes update PCMP address

response information, the first result information is used to notify the management

server that the eUICC completes a contact PCMP operation, and the second result

information is used to notify the management server that the eUICC completes updating

the PCMP address.

[0056] According to a fourth example, a method for connecting to a profile content

management platform PCMP is provided. The method may include:

receiving, by a management server, a remote profile management RPM

command sent by a mobile network operator MNO, where the RPM command includes

a profile content management platform PCMP address; and

sending, by the management server, first information to the terminal, where

the first information includes a PCMP address and a contact PCMP identifier, so that

the terminal connects to a PCMP based on the contact PCMP identifier and the PCMP

address.

[0057] In this solution, the management server receives an RPM command that

includes the PCMP address and that is sent by the MNO, and sends, to the terminal, the

information including the PCMP address, so that the terminal connects to the PCMP

based on the PCMP address to obtain profile update content, thereby improving

communication security and user experience.

[0058] In a possible implementation, the method may further include:

receiving, by the management server, first result information and second

result information sent by the terminal, where the first result information includes contact PCMP response information, the contact PCMP response information includes the PCMP address, the second result information includes update PCMP address response information or add PCMP address response information, the update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated, the first result information is used to notify the management server that an eUICC in the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address.

[0059] According to a fifth example, a method for connecting to a profile content

management platform PCMP is provided. The method may include:

receiving, by a terminal, first information sent by a management server,

where the first information includes a profile content management platform PCMP

address and a contact PCMP identifier;

when no PCMP address is configured in a target profile, writing, by the

terminal, the PCMP address into the target profile; or when the target profile includes a

PCMP address, and the PCMP address included in the target profile is inconsistent with

the PCMP address in the first information, updating, by the terminal, the PCMP address

in the target profile based on the PCMP address; and

connecting, by the terminal, to the PCMP based on the contact PCMP

identifier and the PCMP address.

[0060] In this solution, an eUICC in the terminal connects to the PCMP based on

the PCMP address to obtain profile update content, thereby improving communication

security and user experience.

[0061] In a possible implementation, the first information further includes an

integrated circuit card identifier ICCID, and the method further includes:

finding, by the terminal, the target profile based on the ICCID, and

determining whether the PCMP address is configured in the target profile, to determine

whether the terminal can connect to the PCMP and obtain profile update content.

[0062] In a possible implementation, the method may further include: sending, by the terminal, first result information and second result information to the management server, where the first result information includes contact PCMP response information, the contact PCMP response information includes the PCMP address, the second result information includes update PCMP address response information or add PCMP address response information, the update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated, the first result information is used to notify the management server that an eUICC in the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address.

[0063] According to a sixth example, a method for connecting to a profile content management platform PCMP is provided. The method includes: receiving, by an embedded universal integrated circuit card eUICC, first information sent by a management server, where the first information includes a profile content management platform PCMP address and a contact PCMP identifier; when no PCMP address is configured in a target profile, writing, by the eUICC, the PCMP address into the target profile; or when the target profile includes a PCMP address, and the PCMP address included in the target profile is inconsistent with the PCMP address in the first information, updating, by the eUICC, the PCMP address in the target profile based on the PCMP address; and connecting, by the eUICC, to a PCMP based on the PCMP address.

[0064] In this solution, the eUICC in the terminal connects to the PCMP based on the contact PCMP identifier and the PCMP address to obtain profile update content, thereby improving communication security and user experience.

[0065] In a possible implementation, the first information further includes an integrated circuit card identifier ICCID, and the method may further include: finding, by the eUICC, the target profile based on the ICCID, and determining whether the PCMP address is configured in the target profile, to determine whether the terminal can connect to the PCMP and obtain profile update content.

[0066] In a possible implementation, the method may further include: sending, by the eUICC, first result information and second result

the PCMP address, the second result information includes update PCMP address

response information or add PCMP address response information, the update PCMP

address response information is information that the PCMP address is successfully

updated or information that the PCMP address does not need to be updated, the first

result information is used to notify the management server that the eUICC in the

terminal completes a contact PCMP operation, and the second result information is used

to notify the management server that the eUICC in the terminal completes adding or

updating the PCMP address.

[0067] According to a seventh example, a management server is provided. The

management server has a function of implementing the management server in the

method according to the first example or the fourth example. The function may be

implemented by hardware, or may be implemented by hardware by executing

corresponding software. The hardware or the software includes one or more modules

corresponding to the foregoing function.

[0068] According to an eighth example, a terminal is provided. The terminal has a

function of implementing the terminal in the method according to the second example

or the fifth example. The function may be implemented by hardware, or may be

implemented by hardware by executing corresponding software. The hardware or the

software includes one or more modules corresponding to the foregoing function.

[0069] According to a ninth example, an eUICC is provided. The eUICC has a

function of implementing the eUICC in the method according to the third example or

the sixth example. The function may be implemented by hardware, or may be

software includes one or more modules corresponding to the foregoing function.

[0070] According to a tenth example, a management server is provided. The

management server includes a transmitter, a receiver, and a processor. The transmitter, the receiver, and the processor may be configured to support the management server in performing corresponding functions in the method according to the first example or the fourth example.

[0071] According to an eleventh example, a terminal is provided. The terminal includes a transmitter, a receiver, and a processor. The transmitter, the receiver, and the

processor may be configured to support the terminal in performing corresponding

functions in the method according to the second example or thefifth example.

[0072] According to a twelfth example, an eUICC is provided. The eUICC includes a transmitter, a receiver, and a processor. The transmitter, the receiver, and the processor

may be configured to support the eUICC in performing corresponding functions in the

method according to the third example or the sixth example.

[0073] According to a thirteenth example, a system is provided. The system includes the management server according to the seventh example and the terminal

according to the eighth example; or the system includes the management server

according to the tenth example and the terminal according to the eleventh example.

[0074] According to a fourteenth example, a computer readable storage medium is

provided. The computer readable storage medium saves a computer program. When the

computer program is executed by a processor, the method according to any one or more

of the first exampletothethirdexample is implemented. Alternatively, when the

computer program is executed by the processor, the method according to any one or

more of the fourth example to the sixth example is implemented.

[0075] According to a fifteenth example, a computer program product including an instruction is provided. When the instruction is run on a computer, the computer is

enabled to perform the method according to any one or more of the first example to the

third example. Alternatively, when the instruction is run on the computer, the computer

is enabled to perform the method according to any one or more of the fourth example

to the sixth example.

[0076] According to the method for connecting to a PCMP, the terminal, and the

server provided in the embodiments of the present invention, the terminal sends, to the

management server, the first message indicating that the PCMP address is not configured, receives the PCMP address sent by the management server, completes connecting to the PCMP based on the PCMP address, and subsequently obtains profile update content, thereby ensuring communication security and improve user experience.

BRIEF DESCRIPTION OF DRAWINGS

[0077] FIG. 1 is a schematic structural diagram of a system according to an

embodiment of the present invention;

[0078] FIG. 2 is a flowchart of a method for connecting to a PCMP according to an

embodiment of the present invention;

[0079] FIG. 3 is a flowchart of another method for connecting to a PCMP according

to an embodiment of the present invention;

[0080] FIG. 4 is a flowchart of a method for connecting to a PCMP according to an

embodiment of the present invention;

[0081] FIG. 5(a)-i and FIG. 5(a)-2 are a flowchart of another method for

connecting to a PCMP according to an embodiment of the present invention;

[0082] FIG. 5(b)-i and FIG. 5(b)-2 are a flowchart of another method for

connecting to a PCMP according to an embodiment of the present invention;

[0083] FIG. 5(c)-1, FIG. 5(c)-2, and FIG. 5(c)-3 are a flowchart of another method

for connecting to a PCMP according to an embodiment of the present invention;

[0084] FIG. 6 is a schematic structural diagram of a terminal according to an

embodiment of the present invention;

[0085] FIG. 7 is a schematic structural diagram of a management server according

to an embodiment of the present invention;

[0086] FIG. 8 is a schematic structural diagram of an eUICC according to an

embodiment of the present invention;

[0087] FIG. 9 is a schematic structural diagram of a terminal according to an

embodiment of the present invention;

[0088] FIG. 10 is a schematic structural diagram of a management server according

to an embodiment of the present invention;

[0089] FIG. 11 is a schematic structural diagram of an eUICC according to an

embodiment of the present invention;

[0090] FIG. 12 is a flowchart of a method for connecting to a PCMP according to an embodiment of the present invention; and

[0091] FIG. 13-1 to FIG. 13-4 are a flowchart of another method for connecting to a PCMP according to an embodiment of the present invention.

DESCRIPTION OF EMBODIMENTS

[0092] The embodiments of the present invention provide a method for connecting to a PCMP, a terminal, and a server. After receiving notification information sent by an

eUICC in a terminal, a management server sends, to the eUICC, a message including a

PCMP address, so that the eUICC connects to a PCMP to obtain profile update content,

thereby improving communication security and user experience.

[0093] FIG. 1 is a schematic structural diagram of a system according to an

embodiment of the present invention. As shown in FIG. 1, the system may include a

terminal 110, a management server 120, and a PCMP or a dedicated profile content

management platform (dedicated profile content management platform, DPCMP) 130.

[0094] The terminal 110 includes an eUICC 111 and an LPA 112. The LPA 112 is

responsible for interaction of the eUICC within the terminal 110. For example, when

the eUICC sends notification information to the management server, the eUICC sends

the notification information to the LPA, and then the LPA sends the notification

information to the management server. The notification information may be information

such as information that a profile is not activated or information that a PCMP address

is not set in an activated profile.

[0095] The management server 120 is configured to: after receiving the notification

information that is sent by the eUICC 111 by using the LPA 112, obtain a PCMP address,

and send the PCMP address to the eUICC 111 by using the LPA 112, to complete a

subsequent connection between the eUICC 111 and the PCMP and obtain profile update

content.

[0096] The management server 120 may be further responsible for managing a remote profile. In other words, the management server 120 may receive a remote

management request of an operator, and sends the remote management request to the

eUICC 111 to which a profile belonging to the operator is downloaded. The eUICC

executes the remote request, to implement remote management. The remote

management request may include activation, deactivation, deletion, checking a status

of the eUICC 111, and the like.

[0097] In this embodiment of the present invention, the management server 120 may be a subscription manager-data preparation (subscription manager-data

preparation, SM-DP+) server or another server.

[0098] The system may further include a subscription manager-discovery server

(subscription manager-discovery service, SM-DS) 140. The SM-DS 140 may provide

a mechanism to enable the management server 120 to communicate with the LPA 112.

[0099] Generally, the eUICC 111 sets a default address of the SM-DP+ server, and the eUICC 111 may also set a default SM-DS server. The eUICC 111 connects to the

SM-DS by using the LPA based on the default SM-DS address, to obtain an event

identifier (event ID). This is equivalent to the following: The SM-DS notifies the

eUICC 111 of an eUICC identifier EID, and then the eUICC 111 determines that the

EID is the EID of the eUICC 111. In this case, the eUICC obtains the event identifier

and an address of the management server 120 from the SM-DS, and then connects to

the management server 120, to obtain an event.

[0100] The system may further include a mobile network operator (mobile network

operator, MNO) server 150. When no PCMP address is set in the activated profile, the

MNO 150 is configured to provide the management server 120 with a PCMP address

that corresponds to the profile and that can be obtained from the PCMP, so that the

eUICC 111 subsequently connects to the PCMP based on the PCMP address, obtains

profile update content, and completes downloading the profile in time, thereby

improving user experience.

[0101] The system may further include an eUICC manufacturer (eUICC

manufacturer, EUM) server and a certificate issuer (certificate issuer, CI). The EUM is an eUICC manufacturer, and is an organization for generating and selling an eUICC card. The CI is used to issue certificates for other entities such as a management server and an SM-DS.

[0102] The management server 120 may communicate with the MNO server 160 by using an ES2+ interface. The management server 120 may communicate with the

LPA 112 by using an ES9+ interface. The LPA 112 may communicate with the eUICC

111 by using interfaces such as ES10a, ESOb, and ESOc. The management server 120

may communicate with the eUICC 111 by using an ES8+ interface. The management

server 120 may communicate with the SM-DS 140 by using an ES12 interface. The

SM-DS 140 may communicate with the LPA 112 by using an ES Iinterface. For details,

refer to standard GSMA SGP.22.

[0103] The technical solutions of the embodiments of the present invention are

described in detail in the following with reference to the accompanying drawings. It

should be noted that in the embodiments of the present invention, "first", "second",

"third", "fourth", "fifth", "sixth", "seventh", "eighth", and "ninth" are merely intended

to distinguish messages, and are not intended to limit the messages.

[0104] In addition, an RPM package (RpmPackage) mentioned in the following

embodiments may include at least one RPM command (RpmCommand). Each RPM

command (RpmCommand) may include information such as an RPM type (RpmType),

an ICCID, and a profile owner identifier (profileOwnerOid). One RPM package

(RpmPackage) may include a plurality of RPM commands (RpmCommand).

[0105] The RPM type may include activation (enable), non-activation (disable), deletion (delete), list profile information (listProfilelnfo), an update metadata request

(updataMetadataRequest), and a contact PCMP (contactPCMP). Herein, profileOwnerOid may be understood as an operator identifier. The ICCID is used to

indicate a profile for an RpmPackage operation. In all the embodiments of the present

invention, a message whose type is an update metadata request may refer to an RPM

command whose type is an update metadata request.

[0106] The following is described by using an example in which the management

server is an SM-DP+ server.

[0107] FIG. 2 is a flowchart of a method for connecting to a PCMP according to an

embodiment of the present invention. As shown in FIG. 2, the method for connecting

to a PCMP may include the following steps.

[0108] S201. A terminal sends a first message to an SM-DP+ server.

[0109] After receiving an RPM command, the terminal finds, based on an ICCID

included in the RPM command, whether a target profile is activated. If the target profile

is activated and no PCMP address is configured in the activated target profile, the

terminal caches (cache) the RPM command, and sends the first message to the SM-DP+

server. The first message may be referred to as a notification message. The first message

includes information that a PCMP address is not configured

(PCMPAddrNotConfigured).

[0110] In this embodiment of the present invention, the first message may be a processing notification (HandleNotification) message.

[0111] S202. The SM-DP+ server obtains the PCMP address based on the first

message.

[0112] Optionally, in an embodiment of the present invention, after the SM-DP+

server receives the first message sent by the terminal, the SM-DP+ server sends

download process processing information (HandleDownloadProgresslnfo) to an MNO,

where the download progress processing information includes the information that the

PCMP address is not configured (PCMPAddrNotConfigured); and obtains remote

profile management order (RpmOrder) information from the MNO, where the

RpmOrder information includes an EID and a message whose type is an update

metadata request, and the message whose type is the update metadata request includes

the PCMP address.

[0113] Optionally, in another embodiment of the present invention, before the SM

DP+ server receives the first message sent by the terminal, an MNO registers remote

profile management order (RpmOrder) information with the SM-DP+ server. The RPM

information includes the PCMP address and the information that the PCMP address is

not configured (PCMPAddrNotConfigured). The SM-DP+ server saves the RpmOrder

information. The SM-DP+ server may obtain the PCMP address when receiving the first message sent by the terminal.

[0114] S203. The SM-DP+ server sends a second message to the terminal.

[0115] The SM-DP+ server obtains, based on the first message, the message whose

type is the update metadata request (updateMetadataRequest), where the message

whose type is the update metadata request includes the PCMP address; and sends the

second message to the terminal. The second message may include first information. The

first information includes the PCMP address.

[0116] Optionally, the second message may include a session identifier

(TransactionID), an SM-DP+ server verification certificate (CERT.DPauth.ECDSA),

and an ICCID. The SM-DP+ server verification certificate is used by the terminal to

determine a trust relationship with the SM-DP+ server. The ICCID is used by the

terminal to find the target profile, and obtain the cached RPM command.

[0117] In this embodiment of the present invention, the first information may be an

RPM package (RpmPackage). The RPM package includes the ICCID and the PCMP

address.

[0118] In an instance of the present invention, the second message further includes

a session identifier (TransactionID), to-be-signed data of the SM-DP+ server

(smdpSigned), and a signature value of the to-be-signed data of the SM-DP+ server

(smdpSignature). Herein, smdpSigned includes TransactionlD and RpmPackage, and

smdpSignature is obtained through calculation by the SM-DP+ server based on

smdpSigned and eUICCSignature.

[0119] S204. The terminal updates a PCMP address based on the second message, and connects to a PCMP based on the PCMP address.

[0120] The terminal receives the second message sent by the SM-DP+ server,

verifies the SM-DP+ server verification certificate (CERT.DPauth.ECDSA) in the

second message, obtains a public key of the SM-DP+ server verification certificate,

verifies smdpSignature and smdpSigned by using the public key, obtains the ICCID and

the PCMP address, and connects to the PCMP based on the PCMP address, to obtain

profile update content.

[0121] According to the method for connecting to a PCMP provided in this embodiment of the present invention, the SM-DP+ server sends the PCMP address to the terminal based on the information that the PCMP address is not configured and that is sent by the terminal, to implement a connection between the terminal and the PCMP.

In addition, profile update content is also obtained in time, thereby improving user

experience.

[0122] Optionally, as shown in FIG. 2, after the SM-DP+ server receives the first message sent by the terminal, the method may further include the following steps.

[0123] S205. The SM-DP+ server sends a third message to the MNO.

[0124] The third message is used to request to update the PCMP address. The third

message includes the information that the PCMP address is not configured.

[0125] S206. The SM-DP+ server receives a fourth message sent by the MNO.

[0126] The fourth message includes the message whose type is the update metadata

request. The message whose type is the update metadata request includes the PCMP

address.

[0127] The SM-DP+ server generates the RPM package based on the received

fourth message. The RPM package includes the ICCID and the PCMP address. The

SM-DP+ server generates smdpSigned. Herein, smdpSigned includes TransactionlD

and the RPM package. In addition, the SM-DP+ server calculates smdpSignature, and

sends SM-DP+ server verification certificate (CERT.DPauth.ECDSA), TransactionID,

smdpSigned, and smdpSignature to the terminal.

[0128] In an embodiment of the present invention, the RPM package generated by

the SM-DP+ server may include two pieces of RPM command (RpmCommand)

information. One piece of RPM command information includes the message whose

type is the update metadata request. The message whose type is the update metadata

request includes the PCMP address. The other piece of RPM command includes contact

PCMP (contactPCMP) information.

[0129] Optionally, in this embodiment of the present invention, as shown in FIG. 2,

after the SM-DP+ server sends the second message to the terminal, the method may

further include the following step.

[0130] S207. The terminal sends an eighth message to the SM-DP+ server.

[0131] The eighth message includes first result information and second result information. The first result information includes contact PCMP response information.

The response information includes the PCMP address. The second result information

includes update PCMP address response information. The first result information is

used to notify the SM-DP+ server that an eUICC completes a contact PCMP operation,

and the second result information is used to notify the SM-DP+ server that the PCMP

address is updated.

[0132] In an embodiment of the present invention, the eighth message includes RPM package result (RpmPackageResult) information. The RpmPackageResult

information includes two pieces of RPM command result (RpmCommandResult)

information. A first piece of RpmCommandResult information includes contact PCMP

response (contactPCMPresponse) information, and a second piece of

RpmCommandResult information includes update PCMP address result information.

[0133] In another embodiment of the present invention, the first result information

in the eighth message may be RPM package result (RpmPackageResult) information.

The RpmPackageResult information includes RPM command result

(RpmCommandResult) information. The RpmCommandResult information includes

contact PCMP response (contactPCMPresponse) information. The second result

information in a fifth message may be another piece of RPM package result

(RpmPackageResult) information. The RpmPackageResult information includes RPM

command result (RpmCommandResult) information. The RpmCommandResult

information includes update PCMP address result information.

[0134] Optionally, in this embodiment of the present invention, after the SM-DP+

server receives the first message sent by the terminal, the method may further include

the following steps.

[0135] S208. The SM-DP+ server sends a sixth message to the terminal.

[0136] The sixth message includes delay indication information. The delay

indication information is used to indicate a delay.

[0137] S209. When the delay expires, the terminal sends a seventh message to the

SM-DP+ server.

[0138] The seventh message is used to request to download a first package. The first package may be an RPM package, or may be a profile (profile) package. In this

solution of this embodiment of the present invention, the terminal may obtain an RPM

package updated by the PCMP or a profile package while a same session is maintained

for the terminal and the management server.

[0139] S210. The SM-DP+ server sends, to the terminal, pending information or information that no RPM package is downloaded.

[0140] After receiving the seventh message, the SM-DP+ server determines whether the SM-DP+ server supports an error processing mechanism. If the error

processing mechanism is not supported, the SM-DP+ server sends, to the terminal, the

information that no RPM package is downloaded.

[0141] If the SM-DP+ server determines that the error processing mechanism is

supported, the SM-DP+ server further determines whether the RPM package is

generated; and if the SM-DP+ server has not generated the RPM package, sends the

pending (pending) information to the terminal, where the pending information is used

to indicate that the RPM package has not been generated.

[0142] In this solution of this embodiment of the present invention, the management

server may send a processing result to the terminal in time, and end the session, thereby

saving a network resource.

[0143] In this embodiment of the present invention, S208, S209, and S210 may be

a loop (loop) process.

[0144] Optionally, in another embodiment of the present invention, as shown in FIG.

3, a difference between this embodiment and the embodiment shown in FIG. 2 is as

follows: When the PCMP address and the information that the PCMP address is not

configured are preconfigured in the SM-DP+ server, that is, before the terminal sends

the first message to the SM-DP+ server, the method includes the following step:

[0145] S211. The SM-DP+ server receives a fifth message sent by the MNO.

[0146] The fifth message may be remote profile management order (RpmOrder)

information registered with the SM-DP+ server by the MNO. The fifth message may

include the information that the PCMP address is not configured

(PCMPAddrNotConfigured) and the message whose type is the update metadata request.

The message whose type is the update metadata request includes the PCMP address.

The SM-DP+ server receives the remote profile management order (RpmOrder)

information sent by the MNO, and saves the remote profile management order

(RpmOrder) information.

[0147] After receiving the first message sent by the terminal, the SM-DP+ server obtains the PCMP address in the fifth message, and sends the second message to the

terminal based on the received first message and the obtained fifth message. The second

message includes the PCMP address. After receiving the PCMP address, the terminal

connects to the PCMP, and obtains the target profile. In other words, in this embodiment

of the present invention, after S211 is performed, after the SM-DP+ server receives

notification information sent by the terminal, and the notification information includes

the information that the PCMP address is not configured, the SM-DP+ server directly

sends, to the terminal, the second message including the PCMP address, and no longer

performs processes of S205 and S206 in FIG. 2.

[0148] In addition, other steps in FIG. 3 are the same as other steps in FIG. 2. For

brief description, details are not described herein again.

[0149] Optionally, in an embodiment, as shown in FIG. 3, the method may further

include the following step.

[0150] S212. The SM-DP+ server receives a ninth message sent by the MNO.

[0151] The ninth message includes the information that the PCMP address is not

configured. The ninth message is used to revoke the RPM command.

[0152] In this embodiment of the present invention, the terminal includes an eUICC

and an LPA. The terminal adds a local proxy (local proxy) to the LPA, to correspond to

an external PCMP or a DPCMP, and another server such as a management server: an

SM-DP+ server.

[0153] The following is described with reference to FIG. 4, FIG. 5(a)-i and FIG.

5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)-3.

[0154] FIG. 4 is a flowchart of a method for connecting to a PCMP according to an

embodiment of the present invention. As shown in FIG. 4, the method may include the following steps.

[0155] S301. An eUICC sends, to an SM-DP+ server, information that a PCMP address is not configured.

[0156] S302. The SM-DP+ server obtains the PCMP address based on the information that the PCMP address is not configured.

[0157] S303. The SM-DP+ server sends first information to the eUICC.

[0158] S304. The eUICC connects to a PCMP based on the PCMP address.

[0159] In S301, after receiving an RPM command, the eUICC determines, based on an ICCID included in the RPM command, whether a target profile is activated. If

the profile is activated and a PCMP address is not set in the activated profile, the eUICC

sends, to the SM-DP+ server by using an LPA, the information that the PCMP address

is not configured.

[0160] A specific process is shown in FIG. 5(a)-i and FIG. 5(a)-2 or FIG. 5(b)-i

and FIG. 5(b)-2.

[0161] S501. The eUICC sends an application protocol data unit (Application

Protocol Data Unit, APDU) response (response APDU) message to the LPA, where the

message includes an RPM package result (RpmPackageResult) of the activated profile,

and RpmPackageResult includes the information that the PCMP address is not

configured.

[0162] S502. The LPA sends a processing notification (HandleNotification)

message to the SM-DP+ server, where the HandleNotification message includes

RpmPackageResult.

[0163] Optionally, in S503, the SM-DP+ server sends a response message to the

LPA.

[0164] The response message is a response message for the processing notification

(HandleNotification) message. A (Retrieve-after) header field in the response message

carries delay indication information. The delay indication information is used to

indicate a delay.

[0165] S504. When the delay expires, the LPA sends, to the SM-DP+ server, a

message for downloading a first package.

[0166] The message for downloading the first package may include a session identifier (TransactionlD or SessionID).

[0167] Optionally, the message for downloading the first package may further

include a signature value of to-be-signed data of the SM-DP+ server (smdpSignatureO).

The message for downloading the first package may also include a signature value of

to-be-signed data of the eUICC (eUICCSignatureO) and a random number

(euiccChallenge). Herein, eUICCSignature0 is generated by the eUICC by signing the

generated random number and smdpSignature0. Herein, euiccChallenge and

smdpSignature0 may be used as euiccSigned0 to be sent to the SM-DP+ server by using

the LPA. The LPA obtains a signature value 1 of the to-be-signed data of the eUICC

(eUICCSignaturel) and euiccSignedO from the eUICC, uses eUICCSignaturel and

euiccSignedO as the information for downloading the first package, and sends the

information to the SM-DP+ server.

[0168] In this embodiment of the present invention, the first package may be an

RPM package, or may be a profile (profile) package.

[0169] In this embodiment of the present invention, the terminal may obtain an

RPM package updated by the PCMP or a profile package while a same session is

maintained for the terminal and the management server.

[0170] Optionally, in S505, the SM-DP+ server sends, to the LPA, pending information or information that downloading an RPM package is not supported.

[0171] If the SM-DP+ server does not use an error processing mechanism, the SM

DP+ server sends, to the LPA, the information that downloading the RPM package is

not supported. In this case, if the SM-DP+ server has not completed S508, the SM-DP+

server sends the pending information to the LPA. In this solution of this embodiment of

the present invention, the management server may send a processing result to the

terminal in time, and end the session, thereby saving a network resource.

[0172] In S302, optionally, in an embodiment of the present invention, the

following is shown in FIG. 5(a)-i and FIG. 5(a)-2.

[0173] S506. The SM-DP+ server sends download process processing information

(HandleDownloadProgressnfo) to the MNO, where HandleDownloadProgresslnfo may include an EID and an RPM package result, the RPM package result includes the information that the PCMP address is not configured, and

HandleDownloadProgressnfo is used to request an RPM command for updating a

PCMP.

[0174] S507. The SM-DP+ server receives remote profile management order

(RpmOrder) information sent by the MNO, where the information includes the EID and

a message whose type is an update metadata request (updateMetadataRequest), and the

message whose type is the update metadata request includes the PCMP address.

[0175] S508. The SM-DP+ server generates an RPM package (RpmPackagel).

[0176] The RPM package includes the ICCID and the PCMP address. The ICCID

is used by the eUICC to obtain the target profile.

[0177] S509. The SM-DP+ server generates the to-be-signed data of the SM-DP+

server, and calculates the signature value of the to-be-signed data of the SM-DP+ server.

[0178] The SM-DP+ server generates to-be-signed data of the SM-DP+ server

(smdpSignedl), where smdpSignedl includes TranscationlD and RpmPackagel; and

calculates a signature value of the to-be-signed data of the SM-DP+ server

(smdpSignaturel) based on smdpSignedl and eUICCSignature.

[0179] Then, the management server performs S303 in FIG. 4.

[0180] Optionally, in another embodiment of the present invention, the following is shown in FIG. 5.

[0181] S506'. The SM-DP+ server receives remote profile management order

(RpmOrder) information sent by the MNO.

[0182] Before the SM-DP+ server receives the information that the PCMP address

is not configured and that is sent by the eUICC by using the LPA, or before the eUICC

receives the RPM command (command) sent by the SM-DP+ server to the eUICC by

using the LPA, the MNO registers the remote profile management order (RpmOrder)

information with the SM-DP+ server, where the RpmOrder information includes the

information that the PCMP address is not configured and information of a message

whose type is an update metadata request (UpdataMetataRequest), and the message

whose type is the update metadata request includes the PCMP address. The SM-DP+ server receives the remote profile management order (RpmOrder) information sent by the MNO, and saves the remote profile management order (RpmOrder) information for use in S507'.

[0183] S507'. The SM-DP+ server generates an RPM package (RpmPackagel).

[0184] When the SM-DP+ server receives the information that the PCMP address

is not configured and that is sent by the eUICC by using the LPA, the SM-DP+ server

compares the ICCID in the HandleNotification message in S503 with the ICCID in the

remote profile management order (RpmOrder) information. When the ICCID in the

HandleNotification message is consistent with the ICCID in the remote profile

management order (RpmOrder) information, the SM-DP+ server generates a new RPM

package, where the RPM package includes the message whose type is the update

the PCMP address. Optionally, the RPM package may further include the ICCID.

[0185] S508'. The SM-DP+ server generates to-be-signed data of the SM-DP+

server, and calculates a signature value of the to-be-signed data of the SM-DP+ server.

[0186] The SM-DP+ server generates the to-be-signed data of the SM-DP+ server

(smdpSignedl), where smdpSigned includes TranscationlD and RpmPackage; and

calculates the signature value of the to-be-signed data of the SM-DP+ server

(smdpSignaturel) based on smdpSigned and eUICCSignature.

[0187] Then, in S303, the SM-DP+ server sends the first information to the eUICC

by using the LPA, where the first information includes the PCMP address.

[0188] Optionally, the first information may further include the ICCID that is used

by the eUICC to subsequently find the target profile and obtain the cached RPM

command, to connect to the PCMP and obtain profile update content.

[0189] In this embodiment of the present invention, the first information may be

RpmPackagel, and RmpPackagel includes the ICCID and the PCMP address.

[0190] A process in which the SM-DP+ server sends second information to the

eUICC by using the LPA is shown in S510 and S511 shown in FIG. 5(a)-i, FIG. 5(a)

2, FIG. 5(b)-i, and FIG. 5(b)-2.

[0191] S510. The SM-DP+ server sends TransactionID, an SM-DP+ server verification certificate, smdpSignaturel, and smdpSignedl to the LPA.

[0192] Herein, smdpSignedl includes RpmPackagel, and RpmPackagel includes the PCMP address and the ICCID.

[0193] S511. The LPA sends a load RPM package (LoadRpmPackage) to the eUICC.

[0194] Herein, LoadRpmPackage includes TransactionID, the SM-DP+ server verification certificate, smdpSignaturel, and smdpSignedl.

[0195] A specific process in S304 is shown in FIG. 5(a)-i, FIG. 5(a)-2, FIG. 5(b) 1, and FIG. 5(b)-2.

[0196] S512. The eUICC verifies the SM-DP+ server verification certificate,

smdpSignaturel, and smdpSignedl.

[0197] The eUICC verifies the SM-DP+ server verification certificate. After the

verification succeeds, the eUICC obtains a public key of the SM-DP+ server

verification certificate, verifies smdpSignaturel and smdpSignedl by using the public

key of the SM-DP+ server verification certificate, and obtains the PCMP address and

the ICCID after the verification succeeds.

[0198] S513. The eUICC finds the target profile, and updates the PCMP address.

[0199] The eUICC finds the target profile based on the ICCID, and updates the

PCMP address based on the PCMP address.

[0200] S514. The eUICC obtains the cached RPM command, and obtains the PCMP

address.

[0201] The eUICC receives the RPM command that is sent by the SM-DP+ server

by using the LPA. The eUICC finds, based on the ICCID in the RPM command, that

the target profile is in an active state but no PCMP address is configured in the activated

profile. In this case, the eUICC caches the RPM command for use in S514.

[0202] S515. The eUICC connects to the PCMP based on the PCMP address.

[0203] The eUICC connects to the PCMP, and then obtains profile update content,

thereby improving communication security and user experience.

[0204] Optionally, in an embodiment of the present invention, as shown in FIG.

5(b)-i and FIG. 5(b)-2, the method further includes: receiving, by the SM-DP+ server, a revoke RPM command (RemoveRpmOrder) sent by the MNO, to revoke the RPM command. In this embodiment of the present invention, as shown in FIG. 5(c)-1, FIG.

5(c)-2, and FIG. 5(c)-3, before the eUICC sends, to the SM-DP+ server by using the

LPA, the information that PCMP address information is not configured, the method may

further include the following steps.

[0205] S516. The SM-DP+ server receives an RPM command (RpmOrder) sent by the MNO.

[0206] Herein, RpmOrder includes the eUICC identifier EID, RpmScript, matchinglD, and an address of an SM-DS. Herein, RpmScript includes contact PCMP

(contactPCMP) information, and matchingD is equivalent to an identifier of a

contactPCMP event.

[0207] S517. The SM-DP+ server generates an RPM package (RpmPackage2).

[0208] Herein, RpmPackage2 includes contactPCMP and the EID. It should be

noted herein that RpmPackage2 also includes the ICCID.

[0209] S518. The SM-DP+ server sends a register event (RegisterEvent) to the SM

DS. The register event includes the EID, an address of the SM-DP+ server, and an event

identifier (EventID).

[0210] S519. The SM-DS saves an event record (Record).

[0211] The event record includes the EID, the address of the SM-DP+ server, and EventID.

[0212] S520. The LPA queries an event of the SM-DS.

[0213] The LPA actively queries the event in the SM-DS. If the event belongs to a

corresponding event of the eUICC, the LPA obtains the event from the SM-DS.

[0214] S521. Bidirectional authentication is performed between the eUICC and the SM-DS.

[0215] S522. The SM-DS sends EventlD and an address of the SM-DP+ server to

the LPA.

[0216] In a bidirectional authentication process, the SM-DS searches for a matching

DS event by using EID information obtained from the eUICC, and the LPA receives

EventlD and the address of the SM-DP+ server that are sent by the SM-DS and that are in a successfully matching event record.

[0217] S523. Bidirectional authentication is performed between the eUICC and the SM-DP+ server.

[0218] S524. The SM-DP+ server obtains a to-be-processed RPM package.

[0219] S525. The SM-DP+ server generates to-be-signed data of the SM-DP+

[0220] The to-be-signed data of the SM-DP+ server (smdpSigned2) generated by the SM-DP+ server includes TransactionlD and RpmPackage2. The signature value of

the to-be-signed data of the SM-DP+ server (smdpSignature2) generated by the SM

DP+ server is calculated based on smdpSigned2 and eUICCSignature.

[0221] S526. The SM-DP+ server sends TransactionID, the SM-DP+ server

verification certificate, smdpSignature2, and smdpSigned2 to the LPA.

[0222] Herein, smdpSigned2 includes RpmPackage2, and RpmPackage2 includes

the PCMP address and the ICCID.

[0223] S527. The LPA sends a load RPM package (LoadRpmPackage) to the

eUICC.

[0224] Herein, LoadRpmPackage includes TransactionID, the SM-DP+ server

verification certificate, smdpSignature2, and smdpSigned2.

[0225] S528. The eUICC verifies the SM-DP+ server verification certificate, the to-be-signed data of the SM-DP+ server, and the signature value of the to-be-signed

data of the SM-DP+ server.

[0226] The eUICC verifies the SM-DP+ server verification certificate. After the

verification succeeds, the eUICC obtains the public key of the SM-DP+ server

the ICCID after the verification succeeds.

[0227] S529. The eUICC finds the target profile, determines that no PCMP address

is configured in the target profile, and caches the RPM command.

[0228] In this embodiment of the present invention, the eUICC finds the target

profile based on the ICCID, and determines that the target profile is in an active state but no PCMP address is configured in the activated target profile. The eUICC caches the RPM command, to facilitate subsequently executing the RPM command after the

PCMP address is obtained.

[0229] In another embodiment of the present invention, the eUICC finds the target profile based on the ICCID, and determines that the target profile is in an active state

but no PCMP address is configured in the activated target profile. The eUICC deletes

an RPM command of a contact PCMP (contactPCMP) type. If the eUICC deletes the

RPM command of contact PCMP type, in S508 shown in FIG. 5(a)-i and FIG. 5(a)-2

and S507' shown in FIG. 5(b)-i and FIG. 5(b)-2, the RPM package generated by the

SM-DP+ server may include two RPM commands (RpmCommand). One RPM

command includes an RPM command whose type is an update metadata request, where

the RPM command whose type is the update metadata request includes the PCMP

address. The other RPM command includes contact PCMP (contactPCMP) information.

[0230] Then, the eUICC sends, to the SM-DP+ server by using the LPA, the information that the PCMP address is not configured, that is, performs S301 in FIG. 4,

501 and S502 in FIG. 5(a)-i, FIG. 5(a)-2, FIG. 5(b)-i, and FIG. 5(b)-2.

[0231] FIG. 2 to FIG. 5(c)-3 describe the method for connecting to a PCMP

according to the embodiments of the present invention. With reference to FIG. 6 to FIG.

11, the following describes a terminal, an eUICC, and a management server that are

provided in the embodiments of the present invention.

[0232] FIG. 6 is a schematic structural diagram of a management server according

to an embodiment of the present invention. As shown in FIG. 6, the management server

may include a receiving unit 610, a processing unit 620, and a sending unit 630.

[0233] The receiving unit 610 is configured to receive a first message sent by a

terminal. The first message includes information that a profile content management

platform PCMP address is not configured.

[0234] The processing unit 620 is used by the management server to obtain the

PCMP address.

[0235] The sending unit 630 is configured to send a second message to the terminal,

where the second message includes first information, and the first information includes the PCMP address, so that the terminal updates a PCMP address based on the second message and connects to a PCMP based on the PCMP address.

[0236] According to the management server provided in this embodiment of the

present invention, the receiving unit receives the information that the PCMP address is

not configured and that is sent by the terminal, and sends, to the terminal, a message

including the PCMP address, so that the terminal connects to the PCMP based on the

PCMP address and obtains a profile, thereby improving communication security and

user experience.

[0237] Optionally, in an embodiment of the present invention, that the processing

unit 620 obtains the PCMP address includes the following:

[0238] The processing unit 620 controls the sending unit 630 to send a third

message to a mobile network operator MNO server. The third message is used to request

to update the PCMP address, and the third message includes the information that the

PCMP address is not configured.

[0239] The processing unit 620 controls the receiving unit 610 to receive a fourth

message sent by the MNO. The fourth message includes a message whose type is an

update metadata request. The message whose type is the update metadata request

includes the PCMP address. In this way, the terminal connects to the PCMP based on

the PCMP address and completes obtaining the profile.

[0240] Optionally, in another embodiment of the present invention, the

management server further includes a storage unit 640, and that the processing unit 620

obtains the PCMP address includes the following:

[0241] The processing unit 620 controls the receiving unit 610 to receive a fifth

message sent by a mobile network operator MNO server. The storage unit 640 saves

the fifth message. The fifth message includes the information that the PCMP address is

not configured and a message whose type is an update metadata request. The message

whose type is the update metadata request includes the PCMP address.

[0242] Before receiving the first message sent by the terminal, the management

server obtains, from the MNO in advance, the PCMP address, an error-reporting trigger

condition, and the information that the PCMP address is not configured. In this way, after receiving the information that the PCMP address is not configured, the management server sends the PCMP address to the terminal, to complete a subsequent connection between the terminal and the PCMP.

[0243] In this embodiment of the present invention, that the processing unit 620 obtains the PCMP address includes the following:

[0244] The processing unit 620 generates a remote profile management RPM package based on the first message and thefifth message. The RPM package includes

the message whose type is the update metadata request. The message whose type is the

update metadata request includes the PCMP address.

[0245] Optionally, in this embodiment of the present invention, the first information

further includes an integrated circuit card identifier ICCID. The ICCID is used by the

terminal to find a target profile and obtain a remote profile management RPM command.

[0246] Optionally, in this embodiment of the present invention,

[0247] The sending unit 630 is further configured to send a sixth message to the

terminal. The sixth message includes delay indication information. The delay indication

information is used to indicate a delay. A method further includes the following:

[0248] When the delay expires, the receiving unit 610 receives a seventh message

sent by the terminal. The seventh message includes a session identifier. The seventh

message is used to request to download a first package. The first package includes the

RPM package.

[0249] Optionally, in this embodiment of the present invention, if the management

server does not support an error processing mechanism, the sending unit sends, to the

terminal, information that no RPM package is downloaded. If the management server

does not generate the RPM package, the sending unit sends pending information to the

terminal. The pending information is used to indicate that the RPM package has not

been generated.

[0250] Optionally, in this embodiment of the present invention, the receiving unit

610 is further configured to receive an eighth message sent by the terminal. The eighth

message includes first result information and second result information. The first result

information includes contact PCMP response information. The contact PCMP response information includes the PCMP address. The second result information includes update

PCMP address response information. The first result information is used to notify the

management server that an eUICC completes a contact PCMP operation, and the second

result information is used to notify the management server that the PCMP address is

updated.

[0251] Optionally, in this embodiment of the present invention, the receiving unit 610 is further configured to receive a ninth message sent by the MNO. The ninth

message is used to revoke the RPM command.

[0252] Functions of the function units of the management server may be

implemented by using the steps performed by the management server in the

embodiments shown in FIG. 2, FIG. 3, FIG. 4, FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)

1 and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)-3. Therefore, a specific working process

of the management server provided in this embodiment of the present invention is not

described herein again.

[0253] In addition, the management server shown in FIG. 6 may further include a

storage unit 640, configured to save an operation instruction and data. For example, the

storage unit 640 saves PCMP address information.

[0254] FIG. 7 is a schematic structural diagram of a terminal according to an

embodiment of the present invention. As shown in FIG. 7, the terminal may include a

sending unit 710, a receiving unit 720, and a processing unit 730.

[0255] The sending unit 710 is configured to send a first message to a management

server. The first message includes information that a profile content management

platform PCMP address is not configured.

[0256] The receiving unit 720 is configured to receive a second message sent by

the management server. The second message includes first information. The first

information includes the PCMP address.

[0257] The processing unit 730 is configured to: update a PCMP address based on

the second message, and connect to a PCMP based on the PCMP address.

[0258] According to a method for connecting to a PCMP in this embodiment of the

present invention, the terminal sends the first message to the management server, to obtain the message including the PCMP address; completes connecting to the PCMP based on the PCMP address; and subsequently obtains a profile, thereby improving communication security and user experience.

[0259] Optionally, in an embodiment of the present invention, the PCMP address is obtained by the management server from a mobile operator network MNO.

[0260] In this embodiment, after the terminal sends, to the management server, the information that the PCMP address is not configured, the management server obtains

the PCMP address from the MNO based on the first message, and sends the PCMP

address to the terminal, to implement a connection between the terminal and the PCMP.

[0261] Optionally, in an embodiment of the present invention, the PCMP address is

saved as a third message by the management server. The first message includes the

information that the PCMP address is not configured and a message whose type is an

update metadata request. The message whose type is the update metadata request

includes the PCMP address.

[0262] In this embodiment, before the first information is sent to the management

server, the MNO sends, to the management server in advance, the PCMP address and

the information that the PCMP address is not configured. When receiving the first

message sent by the terminal, the management server sends the PCMP address to the

terminal, to implement the connection between the terminal and the PCMP.

[0263] Optionally, in an embodiment of the present invention, 33. The terminal

according to any one of claims 30 to 32, where the first information further includes an

integrated circuit card identifier ICCID.

[0264] The processing unit 730 is further configured to: find a target profile based

on the ICCID, and obtain a remote profile management RPM command, to execute the

RPM command and complete the connection between the terminal and the PCMP.

[0265] Optionally, in an embodiment of the present invention, the processing unit

730 is further configured to: find the target profile based on the integrated circuit card

identifier ICCID in the remote profile management RPM command, determine that the

target profile is not activated, and cache the RPM command.

[0266] Optionally, in an embodiment of the present invention, the receiving unit

720 is further configured to receive a fourth message sent by the management server.

The fourth message includes delay indication information. The delay indication

information is used to indicate a delay.

[0267] When the delay expires, the sending unit 710 sends a fifth message to the management server. The fifth message includes a session identifier. The fifth message

is used to request to download a first package. The first package includes the RPM

package.

[0268] Optionally, in an embodiment of the present invention, if the management server does not support an error processing mechanism, the receiving unit receives

information that no RPM package is downloaded and that is sent by the management

server. If the management server does not generate the RPM package, the receiving unit

receives pending information sent by the management server. The pending information

is used to indicate that the RPM package has not been generated.

[0269] Optionally, in an embodiment of the present invention, the sending unit 710

is further configured to send a sixth message to the management server. The sixth

information includes contact PCMP response information. The response information

includes the PCMP address. The second result information includes update PCMP

address response information. The first result information is used to notify the

updated.

[0270] Functions of the function units of the terminal may be implemented by using

the steps performed by the terminal in the embodiments shown in FIG. 2, FIG. 3, FIG.

4, FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG.

5(c)-3. Therefore, a specific working process of the terminal provided in this

embodiment of the present invention is not described herein again.

[0271] In addition, the terminal shown in FIG. 7 may further include a storage unit

740, configured to save an operation instruction and data. For example, the storage unit

740 caches an RPM command.

[0272] FIG. 8 is a schematic structural diagram of an embedded universal integrated circuit card eUICC according to an embodiment of the present invention. The eUICC

may include a sending unit 810, a receiving unit 820, and a processing unit 830.

[0273] The sending unit 810 is configured to send, to a management server, information that a profile content management platform PCMP address is not

configured.

[0274] The receiving unit 820 is configured to receive first information sent by the management server. The first information includes the PCMP address.

[0275] The processing unit 830 is configured to connect to a PCMP based on the

PCMP address.

[0276] According to a method for connecting to a PCMP in this embodiment of the

present invention, the eUICC sends the first message to the management server, to

obtain the message including the PCMP address; connects to the PCMP based on the

PCMP address; and subsequently obtains profile, thereby improving communication

security and user experience.

[0277] Optionally, in an embodiment of the present invention, the PCMP address is

obtained by the management server from a mobile operator network MNO.

[0278] In this embodiment, after the eUICC sends, to the management server, the

information that the PCMP address is not configured, the management server obtains

the PCMP address from the MNO based on the first message, and sends the PCMP

address to the eUICC, to implement a connection between the eUICC and the PCMP.

[0279] Optionally, in another embodiment of the present invention, the PCMP

address is saved as third information by the management server. The third information

includes the information that the PCMP address is not configured and a message whose

type is an update metadata request. The message whose type is the update metadata

request includes the PCMP address.

[0280] In this embodiment of the present invention, before the first information is

sent to the management server, the MNO sends, to the management server in advance,

the PCMP address and the information that the PCMP address is not configured. When

receiving the first message sent by the eUICC, the management server sends the PCMP address to the terminal, to implement the connection between the eUICC and the PCMP.

[0281] Optionally, in this embodiment of the present invention, the first information further includes an integrated circuit card identifier ICCID.

[0282] The processing unit 830 is further configured to: find a target profile based on the ICCID, and obtain a remote profile management RPM command, to execute the

RPM command and complete the connection between the eUICC and the PCMP.

[0283] Optionally, in this embodiment of the present invention,

[0284] The processing unit 830 is further configured to: find the target profile based on the integrated circuit card identifier ICCID in the remote profile management RPM

command, determine that the target profile is not activated, and cache the RPM

command.

[0285] Optionally, in this embodiment of the present invention, the sending unit 810 is further configured to send first result information and second result information

to the management server. The first result information includes contact PCMP response

information. The response information includes the PCMP address. The second result

information includes update PCMP address response information. The first result

information is used to notify the management server that the eUICC completes a contact

server that the eUICC completes updating the PCMP address.

[0286] Functions of the function units of the eUICC may be implemented by using

the steps performed by the eUICC in the embodiments shown in FIG. 2, FIG. 3, FIG.

5(c)-3. Therefore, a specific working process of the eUICC provided in this

embodiment of the present invention is not described herein again.

[0287] In addition, the eUICC shown in FIG. 8 may further include a storage unit

840, configured to save an operation instruction and data. For example, the storage unit

840 caches an RPM command.

[0288] FIG. 9 is a schematic structural diagram of a management server according

to an embodiment of the present invention. As shown in FIG. 9, the management server

may include a receiver 910, a processor 920, a transmitter 930, and a memory 940. The receiver 910, the processor 920, the transmitter 930, and the memory 940 are connected to each other by using a communications bus 950, to complete communication with each other. The memory 940 is configured to save an instruction and data, for example,

PCMP address information.

[0289] The receiver 910 is configured to receive a first message sent by a terminal.

The first message includes information that a profile content management platform

PCMP address is not configured.

[0290] The processor 920 is used by the management server to obtain the PCMP address.

[0291] The transmitter 930 is configured to send a second message to the terminal,

the PCMP address, so that the terminal updates the PCMP address based on the second

message and connects to a PCMP based on the PCMP address.

[0292] According to the management server provided in this embodiment of the

present invention, the receiver receives the information that the PCMP address is not

configured and that is sent by the terminal, and sends, to the terminal, a message

user experience.

[0293] Optionally, in an embodiment of the present invention, that the processor

920 obtains the PCMP address includes the following:

[0294] The processing 920 controls the transmitter 930 to send a third message to a mobile network operator MNO server. The third message is used to request to update

the PCMP address, and the third message includes the information that the PCMP

address is not configured.

[0295] The processor 920 controls the receiver 910 to receive a fourth message sent

by the MNO. The fourth message includes a message whose type is an update metadata

address. In this way, the terminal connects to the PCMP based on the PCMP address

and completes obtaining the profile.

[0296] Optionally, in another embodiment of the present invention, that the processor 920 obtains the PCMP address includes the following:

[0297] The processor 920 controls the receiver 910 to receive a fifth message sent

by the mobile network operator MNO server. The memory 940 saves the fifth message.

The fifth message includes the information that the PCMP address is not configured

and a message whose type is an update metadata request. The message whose type is

the update metadata request includes the PCMP address.

[0298] Before receiving the first message sent by the terminal, the management server obtains, from the MNO in advance, the PCMP address, an error-reporting trigger

condition, and the information that the PCMP address is not configured. In this way,

after receiving the information that the PCMP address is not configured, the

management server sends the PCMP address to the terminal, to complete a subsequent

connection between the terminal and the PCMP.

[0299] In this embodiment of the present invention, that the processor 920 obtains

the PCMP address includes the following:

[0300] The processor 920 generates a remote profile management RPM package based on the first message and the fifth message. The RPM package includes the

message whose type is the update metadata request. The message whose type is the

update metadata request includes the PCMP address.

[0301] Optionally, in this embodiment of the present invention, the first information

[0302] Optionally, in this embodiment of the present invention,

[0303] The transmitter 930 is further configured to send a sixth message to the

information is used to indicate a delay. The method further includes the following:

[0304] When the delay expires, the receiver 910 receives a seventh message sent

by the terminal. The seventh message includes a session identifier. The seventh message

is used to request to download a first package. The first package may include the RPM

package.

[0305] Optionally, in this embodiment of the present invention, if the management server does not support an error processing mechanism, the transmitter sends, to the

does not generate the RPM package, the transmitter sends pending information to the

been generated.

[0306] Optionally, in this embodiment of the present invention, the receiver 910 is

further configured to receive an eighth message sent by the terminal. The eighth

includes the PCMP address. The second result information includes update PCMP

updated.

[0307] Optionally, in this embodiment of the present invention, the receiver 910 is

further configured to receive a ninth message sent by the MNO. The ninth message is

used to revoke the RPM command.

[0308] Functions of the functionalities of the management server may be implemented by using the steps performed by the management server in the

described herein again.

[0309] FIG. 10 is a schematic structural diagram of a terminal according to an

embodiment of the present invention. As shown in FIG. 10, the terminal may include a

transmitter 1010, a receiver 1020, a processor 1030, and a memory 1040. The memory

1040 is configured to save an operation instruction and data. For example, the memory

1040 caches an RPM command.

[0310] The transmitter 1010 is configured to send a first message to a management server. The first message includes information that a profile content management platform PCMP address is not configured.

[0311] The receiver 1020 is configured to receive a second message sent by the management server. The second message includes first information. The first

information includes the PCMP address.

[0312] The processor 1030 is configured to: update the PCMP address based on the second message, and connect to a PCMP based on the PCMP address.

[0313] According to a method for connecting to a PCMP in this embodiment of the present invention, the terminal sends the first message to the management server, to

obtain the message including the PCMP address; completes connecting to the PCMP

based on the PCMP address; and subsequently obtains a profile, thereby improving

communication security and user experience.

[0314] Optionally, in an embodiment of the present invention, the PCMP address is

obtained by the management server from a mobile operator network MNO.

[0315] In this embodiment, after the terminal sends, to the management server, the

the PCMP address from the MNO based on the first message, and sends the PCMP

[0316] Optionally, in an embodiment of the present invention, the PCMP address is

update metadata request. The message whose type is the update metadata request

includes the PCMP address.

[0317] In this embodiment, before sending the first information to the management

terminal, to implement the connection between the terminal and the PCMP.

[0318] Optionally, in an embodiment of the present invention, 33. The terminal

according to any one of claims 30 to 32, where the first information further includes an integrated circuit card identifier ICCID.

[0319] The processor 1030 is further configured to: find a target profile based on the ICCID, and obtain a remote profile management RPM command, to execute the RPM command and complete the connection between the terminal and the PCMP.

[0320] Optionally, in an embodiment of the present invention, the processor 1030 is further configured to: find the target profile based on the integrated circuit card identifier ICCID in the remote profile management RPM command, determine that the target profile is not activated, and cache the RPM command.

[0321] Optionally, in an embodiment of the present invention, the receiver 1020 is further configured to receive a fourth message sent by the management server. The fourth message includes delay indication information. The delay indication information is used to indicate a delay.

[0322] When the delay expires, the transmitter 1010 sends a fifth message to the management server. The fifth message includes a session identifier. The fifth message is used to request to download a first package. The first package may include the RPM package.

[0323] Optionally, in an embodiment of the present invention, if the management server does not support an error processing mechanism, the receiver receives information that no RPM package is downloaded and that is sent by the management server. If the management server does not generate the RPM package, the receiver receives pending information sent by the management server. The pending information is used to indicate that the RPM package has not been generated.

[0324] Optionally, in an embodiment of the present invention, the transmitter 1010 is further configured to send a sixth message to the management server. The sixth message includes first result information and second result information. The first result information includes contact PCMP response information. The response information includes the PCMP address. The second result information includes update PCMP address response information. The first result information is used to notify the management server that an eUICC completes a contact PCMP operation, and the second result information is used to notify the management server that the PCMP address is updated.

[0325] Functions of the functionalities of the terminal may be implemented by using the steps performed by the terminal in the embodiments shown in FIG. 2, FIG. 3, FIG. 4, FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)-3. Therefore, a specific working process of the terminal provided in this embodiment of the present invention is not described herein again.

[0326] FIG. 11 is a schematic structural diagram of an embedded universal integrated circuit card eUICC according to an embodiment of the present invention. The eUICC may include a transmitter 1110, a receiver 1120, a processor 1130, and a memory 1140. The memory 1140 is configured to save an operation instruction and data. For example, the memory 1140 caches an RPM command.

[0327] The transmitter 1110 is configured to send, to a management server, information that a profile content management platform PCMP address is not configured.

[0328] The receiver 1120 is configured to receive first information sent by the management server. The first information includes the PCMP address.

[0329] The processor 1130 is configured to connect to a PCMP based on the PCMP address.

[0330] According to a method for connecting to a PCMP in this embodiment of the present invention, the eUICC sends the first message to the management server, to obtain the message including the PCMP address; connects to the PCMP based on the PCMP address; and subsequently obtains profile, thereby improving communication security and user experience.

[0331] Optionally, in an embodiment of the present invention, the PCMP address is obtained by the management server from a mobile operator network MNO.

[0332] In this embodiment, after the eUICC sends, to the management server, the information that the PCMP address is not configured, the management server obtains the PCMP address from the MNO based on the first message, and sends the PCMP address to the eUICC, to implement a connection between the eUICC and the PCMP.

[0333] Optionally, in another embodiment of the present invention, the PCMP address is saved as third information by the management server. The third information includes the information that the PCMP address is not configured and a message whose type is an update metadata request. The message whose type is the update metadata request includes the PCMP address.

[0334] In this embodiment of the present invention, before the first information is sent to the management server, the MNO sends, to the management server in advance, the PCMP address and the information that the PCMP address is not configured. When receiving the first message sent by the eUICC, the management server sends the PCMP address to the terminal, to implement the connection between the eUICC and the PCMP.

[0335] Optionally, in this embodiment of the present invention, the first information further includes an integrated circuit card identifier ICCID.

[0336] The processor 1130 is further configured to: find a target profile based on the ICCID, and obtain a remote profile management RPM command, to execute the RPM command and complete the connection between the eUICC and the PCMP.

[0337] Optionally, in this embodiment of the present invention,

[0338] The processor 1130 is further configured to: find the target profile based on the integrated circuit card identifier ICCID in the remote profile management RPM command, determine that the target profile is not activated, and cache the RPM command.

[0339] Optionally, in this embodiment of the present invention, the transmitter 1110 is further configured to send first result information and second result information to the management server. The first result information includes contact PCMP response information. The response information includes the PCMP address. The second result information includes update PCMP address response information. The first result information is used to notify the management server that the eUICC completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC completes updating the PCMP address.

[0340] Functions of the functionalities of the eUICC may be implemented by using the steps performed by the eUICC in the embodiments shown in FIG. 2, FIG. 3, FIG. 4, FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG.

5(c)-3. Therefore, a specific working process of the eUICC provided in this

embodiment of the present invention is not described herein again.

[0341] FIG. 12 is a flowchart of another method for connecting to a PCMP

according to an embodiment of the present invention. In this embodiment, an example

in which a management server is an SM-DP+ server is still used. As shown in FIG. 12,

the method for connecting to a PCMP may include the following steps.

[0342] S1201. The SM-DP+ server receives a remote profile management RPM

command (RpmOrder) sent by a mobile network operator MNO.

[0343] In an embodiment of the present invention, the remote profile management

RPM command (RpmOrder) may include two RPM commands (RpmCommand). One

RpmCommand may include a message whose type is an update metadata request

(UpdateMetadataRequest). The message whose type is the update metadata request

includes a PCMP address. An RPM type of the other RpmCommand is contact PCMP

(contactPCMP).

[0344] S1202. The SM-DP+ server sends first information to a terminal.

[0345] The first information includes a PCMP address and a contact PCMP

identifier. In this embodiment of the present invention, the contact PCMP identifier is

an RPM command (RpmCommand) of the contact PCMP type.

[0346] Optionally, the first information may further include an ICCID, an SM-DP+

server verification certificate (CERT.DPauth.ECDSA), a session identifier

(TransactionID), to-be-signed data of the SM-DP+ server (smdpSigned), and a

signature value of the to-be-signed data of the SM-DP+ server (smdpSignature).

[0347] The ICCID is used by the terminal to find a target profile based on the ICCID.

Herein, smdpSigned is generated by the SM-DP+ server based on TransactionlD and

the RPM package (RpmPackage). The RPM package includes the PCMP address and

the ICCID. Herein, smdpSignature is obtained through calculation by the SM-DP+

server based on smdpSigned and eUICCSignature, and eUICCSignature is generated

by the eUICC in the terminal during bidirectional authentication between the eUICC

and the SM-DP+ server.

[0348] In this embodiment of the present invention, the first information may be an

RPM command.

[0349] S1203. The terminal connects to a PCMP based on the contact PCMP identifier and the PCMP address in the first information.

[0350] Optionally, in this embodiment of the present invention, when the terminal receives the first information sent by the SM-DP+ server, the terminal may first verify

the SM-DP+ server verification certificate (CERT.DPauth.ECDSA), smdpSignaturel,

and smdpSignedl in the first information. After the verification succeeds, the terminal

finds the target profile based on the ICCID, and determines whether a PCMP address is

configured in the target profile.

[0351] When no PCMP address is configured in the target profile, the terminal

writes the PCMP address in the first information into the target profile, so that the

terminal connects to the PCMP based on the added PCMP address to obtain profile

update content.

[0352] Optionally, in this embodiment of the present invention, when the target profile includes one PCMP address, the terminal determines whether the PCMP address

in the target profile and the PCMP address in the first information are same PCMP

addresses. When the PCMP address in the target profile and the PCMP address in the

first information are the same PCMP addresses, the terminal connects to the PMCP

based on the original PCMP address to obtain the profile update content.

[0353] When the PCMP address in the target profile is different from the PCMP

address in the first information, the terminal updates the PCMP address in the target

profile based on the PCMP address in the first information, executes a contact PCMP

instruction based on the updated PCMP address, and connects to the PCMP, to obtain

the profile update content.

[0354] Optionally, in this embodiment of the present invention, the method may

further include the following step.

[0355] S1204. The terminal sends first result information and second result

information to the SM-DP+ server.

[0356] The first result information includes contact PCMP response information.

The contact PCMP response information includes the PCMP address. The second result information includes update PCMP address response information or add PCMP address response information. The update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated. The first result information is used to notify the management server that an eUICC in the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address. The message that the PCMP address is successfully updated may be a message that the PCMP address is successfully added or a message that the PCMP address is successfully replaced.

[0357] In this embodiment of the present invention, the first result information and

the second result information may be included in response (Response) information that

is of the first information and that is sent by the terminal to the SM-DP+ server. The

response information may include RPM package result (RpmPackageResult)

information. The RPM package result information may include two pieces of RPM

command result (RpmCommandResult) information. The two pieces of RPM command

result information include the first result information and the second result information.

The first result information includes the contact PCMP response information, and the

second result information includes the update PCMP address response information or

the add PCMP address response information, to notify the SM-DP+ server that the

terminal completes a contact PCMP operation and updating the PCMP address, or

contacting the PCMP and adding the PCMP address. The update PCMP address

response information is the information that the PCMP address is successfully updated

or the information that the PCMP address does not need to be updated.

[0358] FIG. 13-1 to FIG. 13-4 are a flowchart of another method for connecting to a PCMP according to an embodiment of the present invention. In this embodiment, an

example in which a management server is an SM-DP+ server is still used for description.

[0359] It should be noted that a difference between S516 to S529 in FIG. 5(c)-i to

FIG. 5(c)-3 and the method process provided in this embodiment is that RPM

commands that are sent by an MNO and received by the SM-DP+ server include two

RPM commands (RpmCommand). One RpmCommand includes a message whose type is an update metadata request (UpdateMetadataRequest). The message whose type is the update metadata request includes a PCMP address. The other RpmCommand includes contact PCMP (ContactPCMP) information. The SM-DP+ server generates an

RPM package based on the RPM command, and sends the RPM package to an eUICC

in a terminal. After receiving the RPM package sent by the SM-DP by using an LPA in

the terminal, the eUICC performs corresponding parsing to obtain a PCMP address in

the RPM package, and connects to a PCMP based on the PCMP address, to obtain

profile update content.

[0360] As shown in FIG. 13-1 to FIG. 13-4, the method may include the following

steps.

[0361] S1301. The SM-DP+ server receives an RPM command (RpmOrder) sent

by the MNO.

[0362] Herein, RpmOrder includes an eUICC identifier EID, RpmScript, matchingD, and an address of an SM-DS. Herein, RpmScript includes an RPM

command of a contact PCMP (contactPCMP) type and an RPM command whose type

is an update metadata request (UpdateMetadataRequest). The RPM command whose

type is the update metadata request includes a PCMP address. Herein, matchinglD is

equivalent to an identifier of a contactPCMP event.

[0363] S1302. The SM-DP+ server generates an RPM package (RpmPackage).

[0364] Herein, RpmPackage includes an Rpm type of contactPCMP. It should be

noted herein that RpmPackage also includes an ICCID.

[0365] S1303. The SM-DP+ server sends a register event (RegisterEvent) to the

SM-DS. The register event includes the EID, an address of the SM-DP+ server, and an

event identifier (EventID).

[0366] S1304. The SM-DS saves an event record (Record).

[0367] The event record includes the EID, the address of the SM-DP+ server, and

EventlD.

[0368] S1305. The LPA queries an event of the SM-DS.

[0369] The LPA actively queries the event in the SM-DS.If the event belongs to a

corresponding event of the eUICC, the LPA obtains the event from the SM-DS.

[03701 S1306. Bidirectional authentication is performed between the eUICC and the SM-DS.

[0371] S1307. The SM-DS sends EventlD and the address of the SM-DP+ server to the LPA.

[0372] In a bidirectional authentication process, the SM-DS searches for a matching DS event by using EID information obtained from the eUICC, and the LPA receives EventlD and the address of the SM-DP+ server that are sent by the SM-DS and that are in a successfully matching event record.

[03731 S1308. Bidirectional authentication is performed between the eUICC and the SM-DP+ server.

[0374] S1309. The SM-DP+ server obtains a to-be-processed RPM package.

[0375] S1310. The SM-DP+ server generates to-be-signed data of the SM-DP+ server, and calculates a signature value of the to-be-signed data of the SM-DP+ server.

[0376] The to-be-signed data of the SM-DP+ server (smdpSigned) generated by the SM-DP+ server includes TransactionlD and RpmPackage. The signature value of the to-be-signed data of the SM-DP+ server (smdpSignature) generated by the SM-DP+ server is calculated based on smdpSigned and eUICCSignature.

[0377] S1311. The SM-DP+ server sends TransactionID, an SM-DP+ server verification certificate, the signature value of the to-be-signed data of the SM-DP+ server (smdpSignature), and the to-be-signed data of the SM-DP+ server (smdpSigned).

[0378] Herein, smdpSigned includes RpmPackage, and RpmPackage includes a PCMP address and an ICCID.

[0379] S1312. The LPA sends a load RPM package (LoadRpmPackage) to the eUICC.

[0380] Herein, LoadRpmPackage includes TransactionID, the SM-DP+ server verification certificate, smdpSignature, and smdpSigned.

[0381] S1313. The eUICC verifies the SM-DP+ server verification certificate, the to-be-signed data of the SM-DP+ server, and the signature value of the to-be-signed data of the SM-DP+ server.

[0382] The eUICC verifies the SM-DP+ server verification certificate. After the verification succeeds, the eUICC obtains a public key of the SM-DP+ server verification certificate, verifies smdpSignature and smdpSigned by using the public key of the SM-DP+ server verification certificate, and obtains the PCMP address and the

ICCID after the verification succeeds.

[0383] S1314. The eUICC finds a target profile, and determines whether a PCMP

address is configured in the target profile.

[0384] The eUICC finds the target profile based on the ICCID, and determines

whether the target profile includes information about the PCMP address.

[0385] S1315. When no PCMP address is configured in the target profile, the eUICC writes the obtained PCMP address into the target profile, and connects to a

PCMP based on the PCMP address, to obtain profile update content.

[0386] S1316. When the PCMP address is configured in the target profile, the eUICC determines whether the PCMP address configured in the target profile is

consistent with the PCMP address obtained by the eUICC.

[03871 S1317. When the PCMP address in the target profile is inconsistent with the

PCMP address obtained by the eUICC, the eUICC updates the PCMP address in the

target profile based on the obtained PCMP address, and connects to the PCMP based

on the updated PCMP address, to obtain the profile update content.

[0388] When the PCMP address in the target profile is consistent with the PCMP

address obtained by the eUICC, the eUICC connects to the PCMP based on the PCMP

address in the target profile to obtain the profile update content.

[0389] S1318. The eUICC sends an APDU response message to the LPA.

[0390] The APDU response message may include RPM package result

(RpmPackageResult) information. The RPM package result information may include

two pieces of RPM command result (RpmCommandResult) information. The two

pieces of RPM command result information include first result information and second

result information. The first result information includes contact PCMP response

information, and the second result information includes update PCMP address response

information or add PCMP address response information, to notify the SM-DP+ server

that the terminal completes a contact PCMP operation and updating the PCMP address, or contacting the PCMP and adding the PCMP address. The update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated.

[0391] S1319. The LPA sends an APDU response message to the SM-DP+ server.

[0392] The present invention further provides a management server. As shown in

FIG. 6, the management server may include a receiving unit 610, a processing unit 620,

a sending unit 630, and a storage unit 640. The storage unit 640 is configured to save

data.

[0393] The receiving unit 610 is configured to receive a remote profile management

RPM command sent by a mobile network operator MNO. The RPM command includes

a profile content management platform PCMP address.

[0394] The sending unit 630 is configured to send first information to the terminal.

address.

[0395] In this solution, the management server receives the RPM command that

based on the PCMP address to obtain profile update content, thereby improving

communication security and user experience.

[0396] Optionally, in an embodiment of the present invention, the receiving unit

610 is further configured to receive a second message sent by the terminal. The second

information includes contact PCMP response information. The contact PCMP response

information includes the PCMP address. The second result information includes update

PCMP address response information or add PCMP address response information. The

update PCMP address response information is information that the PCMP address is

successfully updated or information that the PCMP address does not need to be updated.

The first result information is used to notify the management server that an eUICC in

the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address.

[0397] An embodiment of the present invention further provides a terminal. As

shown in FIG. 7, the terminal may include a sending unit 710, a receiving unit 720, a

processing unit 730, and a storage unit 740. The storage unit 740 is configured to save

an instruction and data.

[0398] The receiving unit 720 is configured to receive first information sent by a management server. The first information includes a profile content management

platform PCMP address and a contact PCMP identifier.

[0399] The processing unit 730 is configured to write the PCMP address into a

target profile, or the processing unit 730 updates a PCMP address in the target profile

based on the PCMP address.

[0400] The processing unit 730 is further configured to connect to a PCMP based

on the contact PCMP identifier and the PCMP address.

[0401] In this solution, an eUICC in the terminal connects to the PCMP based on

security and user experience.

[0402] Optionally, in this embodiment of the present invention, the first information

further includes an integrated circuit card identifier ICCID.

[0403] The processing unit 730 finds the target profile based on the ICCID; and

determines whether the PCMP address is configured in the target profile, to determine

whether the terminal can connect to the PCMP and obtain profile update content.

[0404] Optionally, in this embodiment of the present invention, that the processing

unit 730 writes the PCMP address into the target profile includes the following:

[0405] If no PCMP address is configured in the target profile, the processing unit

730 writes the PCMP address in the first information into the target profile, so that the

terminal connects to the PCMP based on the added PCMP address to obtain the profile

update content.

[0406] Optionally, in another embodiment of the present invention, that the

processing unit 730 updates the PCMP address in the target profile based on the PCMP address includes the following:

[04071 If the target profile includes one PCMP address, the processing unit 730 determines whether the PCMP address included in the target profile is consistent with the PCMP address in the first information.

[0408] If the PCMP address in the target profile is inconsistent with the PCMP address in the first information, the processing unit 730 updates the PCMP address in the target profile based on the PCM address in thefirst information.

[0409] Optionally, in another embodiment of the present invention, the sending unit 710 sends a second message to the management server. The second message includes first result information and second result information. The first result information includes contact PCMP response information. The contact PCMP response information includes the PCMP address. The second result information includes update PCMP address response information or add PCMP address response information. The update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated. The first result information is used to notify the management server that an eUICC in the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address.

[0410] An embodiment of the present invention provides an eUICC. As shown in FIG. 8, the eUICC may include a sending unit 810, a receiving unit 820, a processing unit 830, and a storage unit 840. The storage unit 840 is configured to save data.

[0411] The receiving unit 820 is configured to receive a first message sent by a management server. The first message includes first information. The first information includes a profile content management platform PCMP address and a contact PCMP identifier.

[0412] The processing unit 830 is configured to write the PCMP address into a target profile, or the eUICC updates a PCMP address in the target profile based on the PCMP address.

[0413] The processing unit 830 is further configured to connect to a PCMP based on the contact PCMP identifier and the PCMP address.

[0414] In this solution, the eUICC in a terminal connects to the PCMP based on the PCMP address to obtain profile update content, thereby improving communication

security and user experience.

[0415] Optionally, in an embodiment of the present invention, the first information

further includes an integrated circuit card identifier ICCID.

[0416] The processing unit 830 finds the target profile based on the ICCID; determines whether the PCMP address is configured in the target profile, to determine

whether the terminal can connect to the PCMP; and obtains the profile update content.

[0417] Optionally, in an embodiment of the present invention, that the processing

unit 830 writes the PCMP address into the target profile includes the following:

[0418] If no PCMP address is configured in the target profile, the eUICC writes the

PCMP address in the first information into the target profile, so that the terminal

connects to the PCMP based on the added PCMP address to obtain the profile update

content.

[0419] Optionally, in an embodiment of the present invention, that the processing unit 830 updates the PCMP address in the target profile based on the PCMP address

includes the following:

[0420] If the target profile includes one PCMP address, the processing unit 830

determines whether the PCMP address included in the target profile is consistent with

the PCMP address in the first information.

[0421] If the PCMP address in the target profile is inconsistent with the PCMP

address in the first information, the processing unit 830 updates the PCMP address in

the target profile based on the PCM address in thefirst information.

[0422] Optionally, in an embodiment of the present invention, the sending unit 810

is configured to send first result information and second result information to the

management server. The first result information includes contact PCMP response

information. The contact PCMP response information includes the PCMP address. The

second result information includes update PCMP address response information or add

PCMP address response information. The update PCMP address response information is information that the PCMP address is successfully updated or information that the

PCMP address does not need to be updated. The first result information is used to notify

the management server that the eUICC in the terminal completes a contact PCMP

operation, and the second result information is used to notify the management server

that the eUICC in the terminal completes adding or updating the PCMP address.

[0423] The present invention further provides a management server. As shown in FIG. 9, the management server may include a receiver 910, a processor 920, a

transmitter 930, and a memory 940. The memory 940 is configured to save data.

[0424] The receiver 910 is configured to receive a remote profile management RPM

command sent by a mobile network operator MNO. The RPM command includes a

profile content management platform PCMP address.

[0425] The transmitter 930 is configured to send first information to the terminal.

address.

[0426] In this solution, the management server receives the RPM command that

based on the PCMP address to obtain profile update content, thereby improving

communication security and user experience.

[0427] Optionally, in an embodiment of the present invention, the receiver 910 is

further configured to receive a second message sent by the terminal. The second

PCMP address response information or add PCMP address response information. The

[0428] An embodiment of the present invention further provides a terminal. As

shown in FIG. 10, the terminal may include a transmitter 1010, a receiver 1020, a

processor 1030, and a memory 1040. The memory 1040 is configured to save an

instruction and data.

[0429] The receiver 1020 is configured to receive first information sent by a management server. The first information includes a profile content management

platform PCMP address and a contact PCMP identifier.

[0430] The processor 1030 is configured to write the PCMP address into a target

profile, or the processor 1030 updates a PCMP address in the target profile based on the

PCMP address.

[0431] The processor 1030 is further configured to connect to a PCMP based on the

PCMP address.

[0432] In this solution, the eUICC in the terminal connects to the PCMP based on

the contact PCMP identifier and the PCMP address to obtain profile update content,

thereby improving communication security and user experience.

[0433] Optionally, in this embodiment of the present invention, the first information

further includes an integrated circuit card identifier ICCID.

[0434] The processor 1030 finds the target profile based on the ICCID; and

whether the terminal can connect to the PCMP and obtain profile update content.

[0435] Optionally, in this embodiment of the present invention, that the processor

1030 writes the PCMP address into the target profile includes the following:

[0436] If no PCMP address is configured in the target profile, the processor 1030

update content.

[0437] Optionally, in another embodiment of the present invention, that the

processor 1030 updates the PCMP address in the target profile based on the PCMP address includes the following:

[04381 If the target profile includes one PCMP address, the processor 1030 determines whether the PCMP address included in the target profile is consistent with the PCMP address in the first information.

[0439] If the PCMP address in the target profile is inconsistent with the PCMP address in the first information, the processor 1030 updates the PCMP address in the target profile based on the PCM address in thefirst information.

[0440] Optionally, in another embodiment of the present invention, the transmitter 1010 sends a second message to the management server. The second message includes first result information and second result information. The first result information includes contact PCMP response information. The contact PCMP response information includes the PCMP address. The second result information includes update PCMP address response information or add PCMP address response information. The update PCMP address response information is information that the PCMP address is successfully updated or information that the PCMP address does not need to be updated. The first result information is used to notify the management server that an eUICC in the terminal completes a contact PCMP operation, and the second result information is used to notify the management server that the eUICC in the terminal completes adding or updating the PCMP address.

[0441] An embodiment of the present invention provides an eUICC. As shown in FIG. 11, the eUICC may include a transmitter 1110, a receiver 1120, a processor 1130, and a memory 1140. The memory 1140 is configured to save data.

[0442] The receiver 1120 is configured to receive a first message sent by a management server. The first message includes first information. The first information includes a profile content management platform PCMP address and a contact PCMP identifier.

[0443] The processor 1130 is configured to write the PCMP address into a target profile, or the eUICC updates a PCMP address in the target profile based on the PCMP address.

[0444] The processor 1130 is further configured to connect to a PCMP based on the contact PCMP identifier and the PCMP address.

[0445] In this solution, the eUICC in a terminal connects to the PCMP based on the PCMP address to obtain profile update content, thereby improving communication

security and user experience.

[0446] Optionally, in an embodiment of the present invention, the first information

further includes an integrated circuit card identifier ICCID.

[0447] The processor 1130 finds the target profile based on the ICCID; and determines whether the PCMP address is configured in the target profile, to determine

whether the terminal can connect to the PCMP and obtain profile update content.

[0448] Optionally, in an embodiment of the present invention, that the processor

1130 writes the PCMP address into the target profile includes the following:

[0449] If no PCMP address is configured in the target profile, the eUICC writes the

content.

[0450] Optionally, in an embodiment of the present invention, that the processor

1130 updates the PCMP address in the target profile based on the PCMP address

includes the following:

[0451] If the target profile includes one PCMP address, the processor 1130

the PCMP address in the first information.

[0452] If the PCMP address in the target profile is inconsistent with the PCMP

address in the first information, the processor 1130 updates the PCMP address in the

target profile based on the PCM address in thefirst information.

[0453] Optionally, in an embodiment of the present invention, the transmitter 1110

management server. The first result information includes contact PCMP response

the management server that the eUICC in the terminal completes a contact PCMP

that the eUICC in the terminal completes adding or updating the PCMP address.

[0454] An embodiment of the present invention further provides a system. The system includes the management server shown in FIG. 9 and the terminal shown in FIG.

11. The management server has a function of performing the methods/steps performed

by the management server in FIG. 2, FIG. 3, FIG. 4, FIG. 5(a)-i and FIG. 5(a)-2, FIG.

5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)-3; and the terminal has a function

of performing the methods/steps performed by the terminal in FIG. 2, FIG. 3, FIG. 4,

FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)

3. Alternatively, the management server has a function of performing the methods/steps

performed by the management server in FIG. 12 and FIG. 13-1 to FIG. 13-4, and the

terminal has a function of performing the methods/steps performed by the terminal in

FIG. 12 and FIG. 13-1 to FIG. 13-4.

[0455] An embodiment of the present invention further provides a computer

readable storage medium. The computer readable storage medium saves a computer

program. When the computer program is executed by a processor, the methods in FIG.

2, FIG. 3, FIG. 4, FIG. 5(a)-i and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG.

5(c)-i to FIG. 5(c)-3 are performed. Alternatively, the computer readable storage

medium saves a computer program. When the computer program is executed by the

processor, the methods in FIG. 12 and FIG. 13-1 to FIG. 13-4 are performed.

[0456] An embodiment of the present invention further provides a computer

program product that includes an instruction. When the instruction runs on a computer,

the computer is enabled to perform the methods in FIG. 2, FIG. 3, FIG. 4, FIG. 5(a)-I

and FIG. 5(a)-2, FIG. 5(b)-i and FIG. 5(b)-2, and FIG. 5(c)-i to FIG. 5(c)-3.

Alternatively, when the instruction runs on a computer, the computer is enabled to

perform the methods in FIG. 12 and FIG. 13-1 to FIG. 13-4.

[0457] In the foregoing embodiments of the present invention, the processor may run or execute a software program and/or module saved in the memory, and invoke data saved in the memory, to implement various example logical blocks, modules, and circuits described with reference to the content disclosed in this application. The processor may be a central processing unit (Central Processing Unit, CPU), a general purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA), or another programmable logical device, a transistor logical device, a hardware component, or a combination thereof. The processor may alternatively be a combination for implementing a computing function, for example, a combination including one or more microprocessors, or a combination of a DSP and a microprocessor. Optionally, the processor may include one or more processing units.

[0458] The memory may be configured to save a software program and module. The processor runs the software program and module saved in the memory, to execute various functional applications of a mobile phone and process data. The memory may mainly include a program storage area and a data storage area. The program storage area may save an operating system, an application program (such as a sound play function or an image play function) required by at least one function, and the like. The data storage area may save data (such as audio data, image data, or a phonebook) created based on use of the mobile phone, and the like. In addition, the memory may include a volatile memory such as a random access memory (random access memory, RAM), a nonvolatile random access memory (Nonvolatile Random Access Memory, NVRAM), a phase change random access memory (Phase Change RAM, PRAM), or a magneto resistive random access memory (Magnetoresistive RAM, MRAM); or may include a nonvolatile memory such as at least one magnetic disk storage device, a read-only memory (read-only memory, ROM), an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a flash memory device such as a NOR flash memory (NOR flash memory) or a NAND flash memory (NAND flash memory), or a semiconductor device such as a solid state disk (Solid State Disk, SSD).

[0459] All or some of the foregoing embodiments of the present invention may be implemented by means of software, hardware, firmware, or any combination thereof.

When software is used to implement the embodiments, the embodiments may be

implemented completely or partially in a form of a computer program product. The

computer program product includes one or more computer instructions. When the

computer program instructions are loaded and executed on the computer, the procedure

or functions according to the embodiments of the present invention are all or partially

generated. The computer may be a general-purpose computer, a dedicated computer, a

computer network, or another programmable apparatus. The computer instructions may

be saved in a computer-readable storage medium or may be transmitted from a

computer-readable storage medium to another computer-readable storage medium. For

example, the computer instructions may be transmitted from a website, computer, server,

or data center to another website, computer, server, or data center in a wired (for

example, a coaxial cable, an optical fiber, or a digital subscriber line (digital subscriber

line, DSL)) or wireless (for example, infrared, radio, and microwave) manner. The

computer-readable storage medium may be any usable medium accessible by a

computer, or a data storage device integrating one or more usable media, such as a

server or a data center. The usable medium may be a magnetic medium (for example, a

floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, a DVD),

a semiconductor medium (for example, a solid-state drive), or the like.

[0460] The foregoing descriptions are merely example implementations of the

present invention, but are not intended to limit the protection scope of the present

invention. Any variation or replacement readily figured out by a person skilled in the

art within the technical scope disclosed in the present invention shall fall within the

protection scope of the present invention. Therefore, the protection scope of the present

invention shall be subject to the protection scope of the claims.

[0461] Where any or all of the terms "comprise", "comprises", "comprised" or "comprising" are used in this specification (including the claims) they are to be

interpreted as specifying the presence of the stated features, integers, steps or

components, but not precluding the presence of one or more other features, integers, steps or components.

Claims

The claims defining the invention are as follows:

1. A method for connecting to a profile content management platform PCMP, wherein the method comprises: receiving, by a management server, a first message sent by a terminal, wherein the first message comprises information that a PCMP address is not configured; obtaining, by the management server, the PCMP address based on the first message; and sending, by the management server, a second message to the terminal, wherein the second message comprises first information, and the first information comprises the PCMP address, so that the terminal updates a PCMP address based on the second message and connects to a PCMP based on the PCMP address.

2. The method according to claim 1, wherein the obtaining, by the management server, the PCMP address based on the first message comprises: sending, by the management server, a third message to a mobile network operator MNO server, wherein the third message comprises the information that the PCMP address is not configured; and receiving, by the management server, a fourth message sent by the MNO, wherein the fourth message comprises the PCMP address.

3. The method according to claim 1, wherein the obtaining, by the management server, the PCMP address based on the first message comprises: receiving, by the management server, a fifth message sent by a mobile network operator MNO server, wherein the fifth message comprises the PCMP address and the information that the PCMP address is not configured; and saving, by the management server, the fifth message.

4. The method according to claim 3, wherein the obtaining, by the management server, the PCMP address based on the first message comprises: generating, by the management server, a remote profile management RPM package based on the first message and the fifth message, wherein the RPM package comprises the PCMP address.

5. The method according to any one of claims 1 to 4, wherein the first information further comprises an integrated circuit card identifier ICCID, and the ICCID is used by the terminal to find a target profile and obtain a remote profile management RPM command.

6. The method according to claim 4, wherein after the receiving, by a management server, a first message sent by a terminal, the method further comprises: sending, by the management server, a sixth message to the terminal, wherein the sixth message comprises delay indication information, and the delay indication information is used to indicate a delay; and the method further comprises: when the delay expires, receiving, by the management server, a seventh message sent by the terminal, wherein the seventh message comprises a session identifier, the seventh message is used to request to download a first package, and the first package comprises the RPM package.

7. The method according to claim 6, wherein after the receiving, by the management server, a seventh message sent by the terminal, the method further comprises: when the management server does not support an error processing mechanism, sending, by the management server to the terminal, information that no RPM package is downloaded; or when the management server does not generate the RPM package, sending, by the management server, pending information to the terminal, wherein the pending information is used to indicate that the RPM package has not been generated.

8. A method for connecting to a profile content management platform PCMP, wherein the method comprises: sending, by a terminal, a first message to a management server, wherein the first message comprises information that a profile content management platform PCMP address is not configured; receiving, by the terminal, a second message sent by the management server, wherein the second message comprises first information, and the first information comprises the PCMP address; and updating, by the terminal, a PCMP address based on the second message, and connecting to a PCMP based on the PCMP address.

9. The method according to claim 8, wherein the PCMP address is obtained from a mobile network operator MNO after the management server receives the first message sent by the terminal.

10. The method according to claim 8, wherein the PCMP address is saved as a fifth message by the management server before the management server receives the first message sent by the terminal, and the fifth message comprises the PCMP address and the information that the PCMP address is not configured.

11. The method according to any one of claims 8 to 10, wherein the first information further comprises an integrated circuit card identifier ICCID, and the method further comprises: finding, by the terminal, a target profile based on the ICCID, and obtaining a remote profile management RPM command.

12. The method according to claim 11, wherein before the sending, by a terminal, a first message to a management server, the method further comprises: finding, by the terminal, the target profile based on the integrated circuit card identifier ICCID in the remote profile management RPM command, determining that the target profile is not activated, and caching the RPM command.

13. The method according to any one of claims 8 to 12, wherein after the sending, by a terminal, a first message to a management server, the method further comprises: receiving, by the terminal, a sixth message sent by the management server, wherein the sixth message comprises delay indication information, and the delay indication information is used to indicate a delay; and the method further comprises: when the delay expires, sending, by the terminal, a seventh message to the management server, wherein the seventh message comprises a session identifier, the seventh message is used to request to download a first package, and the first package comprises a remote profile management RPM package.

14. A method for connecting to a profile content management platform PCMP, wherein the method comprises: sending, by an embedded universal integrated circuit card eUICC to a management server, information that a profile content management platform PCMP address is not configured; receiving, by the eUICC, first information sent by the management server, wherein the first information comprises the PCMP address; and connecting, by the eUICC, to a PCMP based on the PCMP address.

15. The method according to claim 14, wherein the PCMP address is obtained from a mobile network operator MNO after the management server receives a first message sent by the eUICC.

16. The method according to claim 14, wherein the PCMP address is saved as a fifth message by the management server before the management server receives a first message sent by the eUICC, and the fifth message comprises the PCMP address and the information that the PCMP address is not configured.

17. A method for connecting to a profile content management platform PCMP, wherein the method comprises: receiving, by a terminal, first information sent by a management server, wherein the first information comprises a first PCMP address and a contact PCMP identifier; when no PCMP address is configured in a target profile, writing, by the terminal, the first PCMP address into the target profile; or when the target profile comprises a second PCMP address, and the first PCMP address is inconsistent with the second PCMP address, updating, by the terminal, the second PCMP address in the target profile based on the first PCMP address; and connecting, by the terminal, to the PCMP based on the contact PCMP identifier and the first PCMP address.

18. The method according to claim 17, wherein the first information further comprises an integrated circuit card identifier ICCID, and the method further comprises: finding, by the terminal, a target profile based on the ICCID, and determining whether a PCMP address is configured in the target profile.

19. A management server, wherein the management server comprises: a receiver, configured to receive a first message sent by a terminal, wherein the first message comprises information that a profile content management platform PCMP address is not configured; a processor, configured to obtain, by the management server, the PCMP address based on the first message; and a transmitter, configured to send a second message to the terminal, wherein the second message comprises first information, and the first information comprises the PCMP address, so that the terminal updates a PCMP address based on the second message and connects to a PCMP based on the PCMP address.

20. A terminal, wherein the terminal comprises: a transmitter, configured to send a first message to a management server, wherein the first message comprises information that a profile content management platform PCMP address is not configured; a receiver, configured to receive a second message sent by the management server, wherein the second message comprises first information, and the first information comprises the PCMP address; and a processor, configured to: update a PCMP address based on the second message, and connect to a PCMP based on the PCMP address.

21. An embedded universal integrated circuit card eUICC, wherein the eUICC comprises: a transmitter, configured to send, to a management server, information that a profile content management platform PCMP address is not configured; a receiver, configured to receive first information sent by the management server, wherein the first information comprises the PCMP address; and a processor, configured to connect to a PCMP based on the PCMP address.

22. A terminal, wherein the terminal comprises: a receiver, configured to receive first information sent by a management server, wherein the first information comprises a first PCMP address and a contact PCMP identifier; and a processor, configured to: when no PCMP address is configured in a target profile, write the first PCMP address into the target profile; or when the target profile comprises a second PCMP address, and the first PCMP address is inconsistent with the second PCMP address, update the second PCMP address in the target profile based on the first PCMP address, wherein the processor is further configured to connect to the PCMP based on the contact PCMP identifier and the first PCMP address.

23. A computer readable storage medium, wherein the computer readable storage medium saves a computer program, and the computer program is executed by a processor to implement the methods according to any one or more of claims 1 to 18.

120 160

Management server ES2+ MNO ES12 140 130 SM-DS PCMP/DPCMP ES9+ ESop ES8+ ES20 ES6 ESci ES11

LPA CI LDS LPD LUR LUI ESeu User 1/19

112

ESci ES10a ES10b ES10d ES10c

EUM ESeum eUICC

Terminal 111

FIG. 1