CN106416192B

CN106416192B - Configure the method and apparatus of universal embedded integrated circuit card

Info

Publication number: CN106416192B
Application number: CN201580004712.3A
Authority: CN
Inventors: 高林毅; 龙水平
Original assignee: Huawei Technologies Co Ltd
Current assignee: Honor Device Co Ltd
Priority date: 2015-01-14
Filing date: 2015-01-14
Publication date: 2019-08-27
Anticipated expiration: 2035-01-14
Also published as: WO2016112506A1; CN106416192A

Abstract

The embodiment of the present invention proposes a kind of method for configuring eUICC, comprising: the eUICC receives the first message that PM is sent, and the first message includes the ID for updating profile and PD；The update profile is mounted in the PD by the eUICC, and the first profile profile in the PD is updated to the 2nd profile, wherein the first profile is configuration profile；The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute by the eUICC.In the embodiment of the present invention, when the existing profile with configuration attribute with what is downloaded there is the profile of operation attribute to belong to the same operator in eUICC, eUICC, which can be obtained via PM from PPer, to be updated profile and the first profile with configuration attribute is updated to the 2nd profile, and the 2nd profile has operation attribute.In such manner, it is possible to Internet resources when saving downloading profile.Also, the network insertion resource of operator can be saved simultaneously.For example, operator is without distributing the parameter in the network insertions credentials such as new IMSI and Ki again for the 2nd profile.

Description

Configure the method and apparatus of universal embedded integrated circuit card

Technical field

The present embodiments relate to the communications fields, and more particularly, to a kind of universal embedded integrated circuit of configuration The method and apparatus of card.

Background technique

Existing client identification module (Subscriber Identity Module, SIM) card or Universal Integrated Circuit Card (Universal Integrated Circuit Card, UICC) is usually by Mobile Network Operator (Mobile Network Operator, MNO) it concentrates and is ordered to card vendor, so just will be under signing information needed for access to mobile network before factory Be downloaded in card, user buy be inserted directly into terminal (Terminal) after SIM card or UICC can access to mobile network.Wherein, Signing information may include (the International Mobile of international mobile subscriber identity necessary to access to mobile network Subscriber Identification Number, IMSI), authentication key (Key identifier, Ki), Encryption Algorithm Deng.

And traditional UICC card is embedded into embedded UICC card formed in terminal by the modes such as encapsulating or welding (embedded UICC, eUICC) is inconvenient to plug, so also cannot arbitrarily replace as traditional UICC card.

EUICC is not necessarily purchased by MNO, it is also possible to after being purchased by terminal manufacturer that eUICC is integrated in the terminal It sells.So whom is not aware that before eUICC factory can be used by, used where, it is possible to and not comprising can be normal The profile (profile) of access to mobile network, and only one can be linked into the profile of remote management platform.Namely It says, eUICC may be only comprising being linked into signing management-Security routing unit (Subscription Manager-Secure Routing, SM-SR) attribute be configure (Provisioning) attribute configuration profile (Provisioning Profile, PP), without include can normal access to mobile network attribute be operation (Operational) attribute operation profile (Operational Profile, OP).After eUICC is embedded into terminal, need to pass through signing using remote management technologies Management-data preparation unit (Subscription Manager-Data Preparing, SM-DP) and SM-SR will have The profile of Operational attribute is downloaded in eUICC, and eUICC can be accessed using the profile of downloading later Mobile network.

But if necessary to having in the profile and eUICC with Operational attribute of downloading The profile of Provisioning attribute belongs to the same operator, then, it will lead to net by the way of the prior art The waste of network access-in resource.

Summary of the invention

The embodiment of the invention provides a kind of method and apparatus for configuring universal embedded integrated circuit card, can save fortune Seek network insertion resource when quotient downloads profile.

In a first aspect, providing a kind of method for configuring universal embedded integrated circuit card eUICC, comprising:

The eUICC receives the first message that profile manager PM is sent, and the first message includes updating profile and wheel The mark ID of wide domain PD；

The update profile is mounted in the PD by the eUICC, more by the first profile profile in the PD It is newly the 2nd profile, wherein the first profile is configuration profile；

The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute by the eUICC.

With reference to first aspect, in the first possible implementation of the first aspect, the update profile includes first The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute, packet by instruction, the eUICC It includes:

The attribute modification of 2nd profile is to run attribute or match according to first instruction by the eUICC Set attribute and operation attribute.

With reference to first aspect, in the second possible implementation of the first aspect, in the eUICC by described second Before the attribute modification of profile is operation attribute or configuration attribute and operation attribute, further includes: the eUICC receives institute State the second instruction of PM or Mobile Network Operator MNO；

The attribute modification of 2nd profile is to run attribute or configuration attribute and operation attribute by the eUICC, Include: the eUICC according to second instruction, is operation attribute or configuration by the attribute modification of the 2nd profile Attribute and operation attribute.

With reference to first aspect or any possible implementation of above-mentioned first aspect, in the third of first aspect In possible implementation, the update profile is mounted in the PD by the eUICC, comprising:

The eUICC judges whether the size of the free memory of the PD installs the update profile enough；

It, will be described if the eUICC determines that the size of the free memory of the PD installs the update profile enough Profile is updated to be mounted in the PD；

If the eUICC determines that the size of the free memory of the PD does not install the update profile enough, described EUICC is that the PD distributes new memory space, and the update profile is mounted in the new memory space or institute It states in free memory and the new memory space.

With reference to first aspect or any possible implementation of above-mentioned first aspect, at the 4th kind of first aspect In possible implementation, further includes:

The eUICC is sent to the terminal at place refreshes (REFRESH) proactive command, so that the terminal is to described EUICC is restarted；

The eUICC uses the 2nd profile access to mobile network operator MNO.

With reference to first aspect or any possible implementation of above-mentioned first aspect, at the 5th kind of first aspect In possible implementation, before the first message that the eUICC receives that PM is sent, further includes:

The eUICC receives the request message that the PM is sent；

The eUICC sends the second response message according to the request message, Xiang Suoshu PM, wherein second response disappears Breath includes the information of the first profile.

With reference to first aspect or any possible implementation of above-mentioned first aspect, at the 6th kind of first aspect In possible implementation, before the first message that the eUICC receives that PM is sent, further includes:

The eUICC receives the profile downloading request message that terminal is sent, the profile downloading request message packet Include the ID of Mobile Network Operator MNO；

When the eUICC determines that the MNO is MNO belonging to the first profile, the eUICC is according to Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

With reference to first aspect or any possible implementation of above-mentioned first aspect, at the 7th kind of first aspect In possible implementation, the information of the first profile includes:

Where the ID and the first profile of MNO belonging to ID, the first profile of first profile The PD ID.

With reference to first aspect or any possible implementation of above-mentioned first aspect, at the 8th kind of first aspect In possible implementation, the information of the first profile further includes following at least one:

The attribute of first profile, downloading the first profile profile configurator ID and described first The size of the free memory of PD where profile.

Second aspect provides a kind of method for configuring universal embedded integrated circuit card eUICC, comprising:

Profile manager PM receives the first message that profile configurator is sent, and the first message includes updating profile, institute State the ID of the profile domain PD in the mark ID and eUICC of eUICC；

The PM is according to the ID of the eUICC, and Xiang Suoshu eUICC transmission second message, the second message includes described The ID of profile and the PD is updated, so that the update profile is mounted in the PD by the eUICC, it will be in the PD First profile profile be updated to the 2nd profile, and by the attribute modification of the 2nd profile be operation attribute or Person's configuration attribute and operation attribute, wherein the first profile is configuration profile；

The PM receives the second response message that the eUICC is sent；

The PM sends the first response message to the profile configurator.

In conjunction with second aspect, in the first possible implementation of the second aspect, further includes:

The PM sends the first instruction to the eUICC, so that the eUICC is according to first instruction by described the The attribute modification of two profile is operation attribute or configuration attribute and operation attribute.

In conjunction with the possible implementation of the first of second aspect or second aspect, second in second aspect may Implementation in, the PM receive profile configurator send first message before, further includes:

The PM receives the first request message that Mobile Network Operator MNO is sent, and first request message includes institute State the ID of the ID and the MNO of eUICC；

The PM obtains the information of the first profile according to first request message；

The PM sends third response message to the MNO, and the third response message includes the first profile Information.

In conjunction with second of possible implementation of second aspect, in the third possible implementation of second aspect In, the PM obtains the information of the first profile according to first request message, comprising:

The PM sends the second request according to the ID of the eUICC in first request message, Xiang Suoshu eUICC and disappears Breath；

The PM receives the 4th response message that the eUICC is sent, and the 4th response message includes described first The information of profile.

In conjunction with second of possible implementation of second aspect, in the 4th kind of possible implementation of second aspect In, the information of the first profile is stored in the eUICC information aggregate EIS in the PM,

The PM obtains the information of the first profile according to first request message, comprising:

The PM obtains the information of the first profile from the EIS.

In conjunction with any possible implementation of second aspect, in the 5th kind of possible implementation of second aspect In, the PM sends third response message to the MNO, comprising:

When the PM determines that the MNO is MNO belonging to the first profile, Xiang Suoshu MNO sends third response Message.

In conjunction with the possible implementation of the first of second aspect or second aspect, in the 6th kind of possibility of second aspect Implementation in, the PM receive profile configurator send first message before, further includes:

The PM receives the third request message that the eUICC is sent, and the third request message includes the eUICC The information of ID and the first profile；

The third request message is sent to Mobile Network Operator MNO belonging to the first profile by the PM.

In conjunction with the 6th kind of possible implementation of second aspect, in the 7th kind of possible implementation of second aspect In, the information of the first profile includes downloading the ID of the profile configurator of the first profile；

The third request message is sent to MNO belonging to the first profile by the PM, comprising:

The third request message is sent to the profile configurator by the PM, so that the profile configurator is by institute It states third request message and is forwarded to the MNO.

In conjunction with any possible implementation of second aspect, in the 8th kind of possible implementation of second aspect In, the information of the first profile includes:

In conjunction with any possible implementation of second aspect, in the 9th kind of possible implementation of second aspect In, the information of the first profile further includes following at least one:

In conjunction with any possible implementation of second aspect or second aspect, in the tenth kind of possibility of second aspect Implementation in, the 2nd profile also has configuration attribute.

The third aspect provides a kind of method for configuring universal embedded integrated circuit card eUICC, comprising:

The equipment of Mobile Network Operator MNO receives the first message that profile manager PM is sent, the first message packet Include the information of the first profile profile in the eUICC, wherein the information of the first profile includes described first The ID of profile domain PD where the mark ID and the first profile of profile；

The equipment of the MNO determines the ID for updating profile and updates ownership signing according to the information of the first profile The signing information of first profile described in server HSS；

The equipment of the MNO sends second message to profile configurator, wherein the second message includes the eUICC ID, the ID and the PM for updating the ID of profile, the PD ID so that the profile configurator passes through PM general The update profile is downloaded in the PD of the eUICC, further such that the update profile is mounted on by the eUICC In the PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

The equipment of the MNO receives the first response message that the profile configurator is sent.

In conjunction with the third aspect, in the first possible implementation of the third aspect, institute is received in the equipment of the MNO After the first response message for stating the transmission of profile configurator, further includes:

The MNO sends the second instruction to the eUICC, so that the eUICC will be described according to second instruction The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute.

In conjunction with the possible implementation of the first of the third aspect or the third aspect, second in the third aspect may Implementation in, the MNO equipment receive PM send first message before, further includes:

The equipment of the MNO receives the subscription request of user, and the subscription request includes the ID of the eUICC；

The equipment of the MNO sends request message according to the subscription request, Xiang Suoshu PM；

The first message is the second response message corresponding with the request message.

In conjunction with second of possible implementation of the third aspect, in the third possible implementation of the third aspect In, the subscription request further includes the ID of the PM.

In conjunction with the possible implementation of the first of the third aspect or the third aspect, in the 4th kind of possibility of the third aspect Implementation in, the MNO receives the first message that PM is sent, comprising:

The equipment of the MNO receives the first message that the PM is sent from the profile configurator.

In conjunction with any possible implementation of the third aspect or the above-mentioned third aspect, at the 5th kind of the third aspect In possible implementation, the first message further includes the ID of the ID and the eUICC of the PM.

In conjunction with any possible implementation of the third aspect or the above-mentioned third aspect, at the 6th kind of the third aspect In possible implementation, the second message further includes the information of key, so that the profile configurator is using described close Key protects the transmission for updating profile.

In conjunction with any possible implementation of the third aspect or the above-mentioned third aspect, at the 7th kind of the third aspect In possible implementation, the information of the first profile further includes the free memory of the PD where the first profile Size, the second message further includes the size of the free memory of the PD where the first profile, so that institute The size for stating the free memory of PD of the profile configurator where determining the first profile installs the update enough When profile, the update profile is downloaded in the PD of the eUICC by the PM.

In conjunction with any possible implementation of the third aspect or the above-mentioned third aspect, at the 8th kind of the third aspect In possible implementation, the information of the first profile further includes following at least one:

The ID of MNO belonging to first profile, the attribute of the first profile, downloading described first The size of the free memory of PD where the ID of the profile configurator of profile and the first profile.

Fourth aspect provides a kind of universal embedded integrated circuit card eUICC, comprising:

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes updating profile With the mark ID of profile domain PD；

Processing unit, for the update profile to be mounted in the PD, by the first profile in the PD Profile is updated to the 2nd profile, wherein the first profile is configuration profile；

The processing unit is also used to the attribute modification of the 2nd profile be operation attribute or configuration attribute With operation attribute.

In conjunction with fourth aspect, in the first possible implementation of the fourth aspect, the update profile includes first Instruction, the processing unit are specifically used for:

According to it is described first instruction, by the attribute modification of the 2nd profile be operation attribute or configuration attribute and Run attribute.

In conjunction with fourth aspect, in the second possible implementation of the fourth aspect, the receiving unit is also used to connect Receive the second instruction of the PM or Mobile Network Operator MNO；

The processing unit is specifically used for according to second instruction, is fortune by the attribute modification of the 2nd profile Row attribute or configuration attribute and operation attribute.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, in the third of fourth aspect In possible implementation, the processing unit is specifically used for:

Judge whether the size of the free memory of the PD installs the update profile enough；

If it is determined that the size of the free memory of the PD installs the update profile enough, the update profile is pacified In the PD；

If it is determined that the size of the free memory of the PD does not install the update profile enough, it is new for PD distribution Memory space, and the update profile is mounted on the new memory space or the free memory and described new Memory space in.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, at the 4th kind of fourth aspect Further include transmission unit in possible implementation, the transmission unit is also used to: sending and refresh actively to the terminal at place Formula order, so that the terminal restarts the eUICC；

The processing unit is also used to using the 2nd profile access to mobile network operator MNO.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, at the 5th kind of fourth aspect It further include transmission unit in possible implementation, the receiving unit is also used to receive the request message that the PM is sent；

The transmission unit is also used to according to the request message, and Xiang Suoshu PM sends the second response message, wherein described Second response message includes the information of the first profile.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, at the 6th kind of fourth aspect In possible implementation, the receiving unit is also used to receive the profile downloading request message of terminal transmission, wherein institute State the mark ID that profile downloading request message includes Mobile Network Operator MNO；

The transmission unit is also used to when determining the MNO is MNO belonging to the first profile, according to described Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, at the 7th kind of fourth aspect In possible implementation, the information of the first profile includes:

ID, the first profile of MNO belonging to mark ID, the first profile of first profile The ID of the profile domain PD at place.

In conjunction with any possible implementation of fourth aspect or above-mentioned fourth aspect, at the 8th kind of fourth aspect In possible implementation, the information of the first profile further includes following at least one:

5th aspect, provides a kind of equipment for configuring universal embedded integrated circuit card eUICC, the equipment is Profile manager PM, comprising:

Receiving unit, for receiving the first message of profile configurator transmission, the first message includes updating profile, institute State the ID of the profile domain PD in the mark ID and eUICC of eUICC；

Transmission unit sends second message, the second message packet for the ID according to the eUICC, Xiang Suoshu eUICC The ID for updating profile and the PD is included, so that the update profile is mounted in the PD by the eUICC, by institute The first profile profile stated in PD is updated to the 2nd profile, is that operation belongs to by the attribute modification of the 2nd profile Property or configuration attribute and operation attribute, wherein the first profile be configuration profile；

The receiving unit is also used to receive the second response message that the eUICC is sent；

The transmission unit is also used to send the first response message to the profile configurator.

In conjunction with the 5th aspect, in the first possible implementation of the 5th aspect, the transmission unit is also used to:

The first instruction is sent to the eUICC, so that the eUICC is instructed according to described first by described second The attribute modification of profile is operation attribute or configuration attribute and operation attribute.

In conjunction with the first possible implementation of the 5th aspect or the 5th aspect, second at the 5th aspect may Implementation in, further include processing unit:

The receiving unit is also used to receive the first request message of Mobile Network Operator MNO transmission, and described first asks Seeking message includes the ID of the mark ID and the MNO of the eUICC；

The processing unit, for obtaining the information of the first profile according to first request message；

The transmission unit, is also used to send third response message to the MNO, and the third response message includes described The information of first profile.

In conjunction with second of possible implementation of the 5th aspect, in the third possible implementation of the 5th aspect In, the processing unit is specifically used for:

The second request message is sent according to the ID of the eUICC in first request message, Xiang Suoshu eUICC；

The 4th response message that the eUICC is sent is received, the 4th response message includes the first profile Information.

In conjunction with second of possible implementation of the 5th aspect, in the 4th kind of possible implementation of the 5th aspect In, the information of the first profile is stored in the eUICC information aggregate EIS in the PM,

The processing unit, is specifically used for: the information of the first profile is obtained from the EIS.

In conjunction with any possible implementation of the 5th aspect, in the 5th kind of possible implementation of the 5th aspect In, the transmission unit is specifically used for:

When determining the MNO is MNO belonging to the first profile, Xiang Suoshu MNO sends third response message.

In conjunction with the first possible implementation of the 5th aspect or the 5th aspect, in the 6th kind of possibility of the 5th aspect Implementation in, the receiving unit is also used to receive the third request message that the eUICC is sent, the third request Message includes the information of the ID and the first profile of the eUICC；

The transmission unit is also used to the third request message being sent to movement belonging to the first profile Network operator MNO.

In conjunction with the 6th kind of possible implementation of the 5th aspect, in the 7th kind of possible implementation of the 5th aspect In, the information of the first profile includes downloading the ID of the profile configurator of the first profile；

The transmission unit, is specifically used for:

The third request message is sent to the profile configurator, so that the profile configurator is by the third Request message is forwarded to the MNO.

In conjunction with any possible implementation of the 5th aspect, in the 8th kind of possible implementation of the 5th aspect In, the information of the first profile includes:

Where the ID and the first profile of MNO belonging to ID, the first profile of first profile Profile domain PD ID.

In conjunction with any possible implementation of the 5th aspect, in the 9th kind of possible implementation of the 5th aspect In, the information of the first profile further includes following at least one:

In conjunction with any possible implementation of the 5th aspect or the 5th aspect, in the tenth kind of possibility of the 5th aspect Implementation in, the 2nd profile also has configuration attribute.

6th aspect, provides a kind of equipment for configuring universal embedded integrated circuit card eUICC, and the equipment is movement The equipment of network operator MNO, comprising:

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes the eUICC In first profile profile information, wherein the information of the first profile includes the first profile Identify the ID of the profile domain PD where ID and the first profile；

Processing unit determines the ID for updating profile and updates ownership signing for the information according to the first profile The signing information of first profile described in server HSS；

Transmission unit, for sending second message to profile configurator, wherein the second message includes the eUICC ID, the ID and the PM for updating the ID of profile, the PD ID so that the profile configurator passes through PM general The update profile is downloaded in the PD of the eUICC, further such that the update profile is mounted on by the eUICC In the PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

The receiving unit is also used to receive the first response message that the profile configurator is sent.

In conjunction with the 6th aspect, the 6th aspect the first possible implementation in, the transmission unit, be also used to The eUICC sends the second instruction, so that the eUICC is instructed according to described second by the attribute of the 2nd profile It is revised as operation attribute or configuration attribute and operation attribute.

In conjunction with the first possible implementation of the 6th aspect or the 6th aspect, second at the 6th aspect may Implementation in, the receiving unit is also used to receive the subscription request of user, and the subscription request includes the eUICC ID；

The transmission unit is also used to according to the subscription request, and Xiang Suoshu PM sends request message；

In conjunction with second of possible implementation of the 6th aspect, in the third possible implementation of the 6th aspect In, the subscription request further includes the ID of the PM.

In conjunction with the first possible implementation of the 6th aspect or the 6th aspect, in the 4th kind of possibility of the 6th aspect Implementation in, the receiving unit is specifically used for:

The first message that the PM is sent is received from the profile configurator.

In conjunction with any possible implementation of the 6th aspect or the 6th aspect, in the 5th kind of possibility of the 6th aspect Implementation in, the first message further includes the ID of the ID and the eUICC of the PM.

In conjunction with any possible implementation of the 6th aspect or the 6th aspect, in the 6th kind of possibility of the 6th aspect Implementation in, the second message further includes the information of key so that the profile configurator using the key protect Protect the transmission for updating profile.

In conjunction with any possible implementation of the 6th aspect or the 6th aspect, in the 7th kind of possibility of the 6th aspect Implementation in, the information of the first profile further includes the big of the free memory of the PD where the first profile Small, the second message further includes the size of the free memory of the PD where the first profile, so that the wheel The size of the free memory of PD of the wide configurator where determining the first profile installs the update profile enough When, the update profile is downloaded in the PD of the eUICC by the PM.

In conjunction with any possible implementation of the 6th aspect or the 6th aspect, in the 8th kind of possibility of the 6th aspect Implementation in, the information of the first profile further includes following at least one:

7th aspect, provides a kind of universal embedded integrated circuit card eUICC, comprising:

Receiver, for receive profile manager PM transmission first message, the first message include update profile and The mark ID of profile domain PD；

Processor, for the update profile being mounted on described according to the received first message of the receiver In PD, the first profile profile in the PD is updated to the 2nd profile, wherein the first profile be with Set profile；It is also used to the attribute modification of the 2nd profile be operation attribute or configuration attribute and operation attribute.

In conjunction with the 7th aspect, in the first possible implementation of the 7th aspect, the update profile includes first Instruction, the processor are specifically used for:

In conjunction with the 7th aspect, in second of possible implementation of the 7th aspect, the receiver is also used to receive The second instruction of the PM or Mobile Network Operator MNO；

The processor is specifically used for according to second instruction, is operation by the attribute modification of the 2nd profile Attribute or configuration attribute and operation attribute.

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, in the third of the 7th aspect In possible implementation, the processor is specifically used for:

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, at the 4th kind of the 7th aspect In possible implementation, the transmitter is used for: being sent to the terminal at place and is refreshed proactive command, so that the terminal The eUICC is restarted；

The processor is also used to using the 2nd profile access to mobile network operator MNO.

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, at the 5th kind of the 7th aspect In possible implementation, the receiver is also used to receive the request message that the PM is sent；

The transmitter, for according to the request message, Xiang Suoshu PM to send the second response message, wherein described second Response message includes the information of the first profile.

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, at the 6th kind of the 7th aspect In possible implementation, the receiver is also used to receive the profile downloading request message of terminal transmission, wherein described Profile downloading request message includes the mark ID of Mobile Network Operator MNO；

The transmitter is also used to when determining the MNO is MNO belonging to the first profile, according to described Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, at the 7th kind of the 7th aspect In possible implementation, the information of the first profile includes:

In conjunction with any possible implementation of the 7th aspect or above-mentioned 7th aspect, at the 8th kind of the 7th aspect In possible implementation, the information of the first profile further includes following at least one:

Eighth aspect, provides a kind of equipment for configuring universal embedded integrated circuit card eUICC, and the equipment is Profile manager PM, comprising:

Receiver, for receiving the first message of profile configurator transmission, the first message includes updating profile, described The ID of profile domain PD in the mark ID and eUICC of eUICC；

Transmitter sends second message for the ID according to the eUICC, Xiang Suoshu eUICC, and the second message includes The ID for updating profile and the PD, so that the update profile is mounted in the PD by the eUICC, it will be described First profile profile in PD is updated to the 2nd profile, is operation attribute by the attribute modification of the 2nd profile Or configuration attribute and operation attribute, wherein the first profile be configuration profile；

The receiver is also used to receive the second response message that the eUICC is sent；

The transmitter is also used to send the first response message to the profile configurator.

In conjunction with eighth aspect, in the first possible implementation of eighth aspect, the transmitter is also used to:

In conjunction with the possible implementation of the first of eighth aspect or eighth aspect, second in eighth aspect may Implementation in, further include processor:

The receiver is also used to receive the first request message of Mobile Network Operator MNO transmission, first request Message includes the ID of the mark ID and the MNO of the eUICC；

The processor, for obtaining the information of the first profile according to first request message；

The transmitter, is also used to send third response message to the MNO, and the third response message includes described the The information of one profile.

In conjunction with second of possible implementation of eighth aspect, in the third possible implementation of eighth aspect In, the processor is specifically used for:

In conjunction with second of possible implementation of eighth aspect, in the 4th kind of possible implementation of eighth aspect In, the information of the first profile is stored in the eUICC information aggregate EIS in the PM,

The processor, is specifically used for: the information of the first profile is obtained from the EIS.

In conjunction with any possible implementation of eighth aspect, in the 5th kind of possible implementation of eighth aspect In, the transmitter is specifically used for:

In conjunction with the possible implementation of the first of eighth aspect or eighth aspect, in the 6th kind of possibility of eighth aspect Implementation in, the receiver is also used to receive the third request message that the eUICC is sent, and the third request disappears The information of ID and first profile of the breath including the eUICC；

The transmitter is also used to the third request message being sent to mobile network belonging to the first profile Network operator MNO.

In conjunction with the 6th kind of possible implementation of eighth aspect, in the 7th kind of possible implementation of eighth aspect In, the information of the first profile includes downloading the ID of the profile configurator of the first profile；

The transmitter, is specifically used for:

In conjunction with any possible implementation of eighth aspect, in the 8th kind of possible implementation of eighth aspect In, the information of the first profile includes:

In conjunction with any possible implementation of eighth aspect, in the 9th kind of possible implementation of eighth aspect In, the information of the first profile further includes following at least one:

In conjunction with any possible implementation of eighth aspect or eighth aspect, in the tenth kind of possibility of eighth aspect Implementation in, the 2nd profile also has configuration attribute.

9th aspect, provides a kind of equipment for configuring universal embedded integrated circuit card eUICC, and the equipment is movement The equipment of network operator MNO, comprising:

Receiver, for receiving the first message of profile manager PM transmission, the first message includes in the eUICC First profile profile information, wherein the information of the first profile includes the mark of the first profile Know the ID of the profile domain PD where ID and the first profile；

Processor determines the ID for updating profile and updates ownership signing clothes for the information according to the first profile The signing information of first profile described in business device HSS；

Transmitter, for sending second message to profile configurator, wherein the second message includes the eUICC The ID of the ID and the PM of ID, the ID for updating profile, the PD, so that the profile configurator passes through the PM for institute It states update profile to be downloaded in the PD of the eUICC, further such that the update profile is mounted on institute by the eUICC It states in PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

The receiver is also used to receive the first response message that the profile configurator is sent.

In conjunction with the 9th aspect, in the first possible implementation of the 9th aspect, the transmitter is also used to institute It states eUICC and sends the second instruction, so that the eUICC repairs the attribute of the 2nd profile according to second instruction It is changed to operation attribute or configuration attribute and operation attribute.

In conjunction with the first possible implementation of the 9th aspect or the 9th aspect, second at the 9th aspect may Implementation in, the receiver is also used to receive the subscription request of user, and the subscription request includes the eUICC ID；

The transmitter is also used to according to the subscription request, and Xiang Suoshu PM sends request message；

In conjunction with second of possible implementation of the 9th aspect, in the third possible implementation of the 9th aspect In, the subscription request further includes the ID of the PM.

In conjunction with the first possible implementation of the 9th aspect or the 9th aspect, in the 4th kind of possibility of the 9th aspect Implementation in, the receiver is specifically used for:

In conjunction with any possible implementation of the 9th aspect or the 9th aspect, in the 5th kind of possibility of the 9th aspect Implementation in, the first message further includes the ID of the ID and the eUICC of the PM.

In conjunction with any possible implementation of the 9th aspect or the 9th aspect, in the 6th kind of possibility of the 9th aspect Implementation in, the second message further includes the information of key so that the profile configurator using the key protect Protect the transmission for updating profile.

In conjunction with any possible implementation of the 9th aspect or the 9th aspect, in the 7th kind of possibility of the 9th aspect Implementation in, the information of the first profile further includes the big of the free memory of the PD where the first profile Small, the second message further includes the size of the free memory of the PD where the first profile, so that the wheel The size of the free memory of PD of the wide configurator where determining the first profile installs the update profile enough When, the update profile is downloaded in the PD of the eUICC by the PM.

In conjunction with any possible implementation of the 9th aspect or the 9th aspect, in the 8th kind of possibility of the 9th aspect Implementation in, the information of the first profile further includes following at least one:

Tenth aspect provides a kind of method for configuring eUICC, comprising: profile configurator PPer receives the equipment hair of MNO The request message sent, wherein the request message includes the PD in ID, the eUICC of the ID of the eUICC, update profile ID and PM ID, wherein the first profile in the PD in the eUICC is configuration profile；

The PPer determines the update profile according to the ID for updating profile；

The PPer is according to the ID of the PM, and Xiang Suoshu PM transmission first message, the first message includes the update The ID of profile, the ID of the eUICC and the PD in the eUICC so that the PM update profile is sent to it is described EUICC, and the first profile in the PD is updated to second according to the update profile by the eUICC profile.Wherein, the 2nd profile has operation attribute；

The PPer receives the first response message that the PM is sent；

The PPer sends the second response message to the equipment of the MNO.

Tenth on the one hand, provides a kind of equipment for configuring eUICC, and the equipment is PPer, comprising:

Receiving unit, the request message that the equipment for receiving Mobile Network Operator MNO is sent, wherein the request Message includes the ID of the ID and PM of the ID of the eUICC, the ID for updating profile, PD in the eUICC.Wherein, the eUICC In PD in the first profile be configuration profile；

Processing unit, for determining the update profile according to the ID for updating profile；

Transmission unit sends first message for the ID according to the PM, Xiang Suoshu PM, and the first message includes described Update profile, the eUICC ID and the PD in the eUICC ID so that the update profile is sent to institute by the PM EUICC is stated, and the first profile in the PD is updated to second according to the update profile by the eUICC Profile, wherein the 2nd profile has operation attribute；

Receiving unit is also used to receive the first response message that the PM is sent；

Transmission unit is also used to send the second response message to the equipment of the MNO.

12nd aspect, provides a kind of equipment for configuring eUICC, and the equipment is PPer, comprising:

Receiver, the request message that the equipment for receiving Mobile Network Operator MNO is sent, wherein the request disappears The ID of the ID and PM of ID of the breath including the eUICC, the ID for updating profile, PD in the eUICC.Wherein, in the eUICC PD in the first profile be configuration profile；

Processor, for determining the update profile according to the ID for updating profile；

Transmitter, for the ID according to the PM, Xiang Suoshu PM sends first message, the first message include it is described more The ID of new profile, the ID of the eUICC and the PD in the eUICC, so that described in the updates profile is sent to by the PM EUICC, and the first profile in the PD is updated to second according to the update profile by the eUICC Profile, wherein the 2nd profile has operation attribute；

Receiver is also used to receive the first response message that the PM is sent；

Transmitter is also used to send the second response message to the equipment of the MNO.

In the embodiment of the present invention, when in eUICC the existing profile with configuration attribute with to be downloaded have operation When the profile of attribute belongs to the same operator, eUICC, which can be obtained via PM from PPer, to be updated profile and will have configuration First profile of attribute is updated to the 2nd profile, and the 2nd profile has operation attribute.In such manner, it is possible to save Download Internet resources when profile.Also, the network insertion resource of operator can be saved simultaneously.For example, operator is not necessarily to The parameter in the network insertions credentials such as new IMSI and Ki is distributed again for the 2nd profile.

Detailed description of the invention

In order to illustrate the technical solution of the embodiments of the present invention more clearly, below will be in embodiment or description of the prior art Required attached drawing is briefly described, it should be apparent that, the accompanying drawings in the following description is only some realities of the invention Example is applied, it for those of ordinary skill in the art, without any creative labor, can also be attached according to these Figure obtains other attached drawings.

Fig. 1 is the schematic diagram of the logical architecture of eUICC.

Fig. 2 is the interaction figure of the method for the configuration eUICC of one embodiment of the invention.

Fig. 3 is the interaction figure of the method for the configuration eUICC of another embodiment of the present invention.

Fig. 4 is the interaction figure of the method for the configuration eUICC of another embodiment of the present invention.

Fig. 5 is the flow chart of the method for the configuration eUICC of one embodiment of the invention.

Fig. 6 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.

Fig. 7 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.

Fig. 8 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.

Fig. 9 is the structural block diagram of the eUICC of one embodiment of the invention.

Figure 10 is the structural block diagram of the equipment for configuring eUICC of one embodiment of the invention.

Figure 11 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.

Figure 12 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.

Figure 13 is the structural block diagram of the eUICC of another embodiment of the present invention.

Figure 14 is the structural block diagram of the equipment for configuring eUICC of one embodiment of the invention.

Figure 15 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.

Figure 16 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.

Specific embodiment

Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation description, it is clear that described embodiments are some of the embodiments of the present invention, instead of all the embodiments.Based on this hair Embodiment in bright, those of ordinary skill in the art's every other reality obtained without creative labor Example is applied, shall fall within the protection scope of the present invention.

In the embodiment of the present invention, SM-SR is referred to as profile manager (Profile Manager, PM), for establishing To the secure communication channel of eUICC, and the profile on eUICC can be managed, such as profile transmission, activation, deactivate, Delete etc..And the description of subsequent embodiment of the present invention indicates SM-SR with PM.

In the embodiment of the present invention, SM-DP is referred to as profile configurator (Profile Provisioner, PPer), can The profile that can be downloaded on eUICC is generated with the information provided according to MNO, says that profile is downloaded in eUICC.And The description of subsequent embodiment of the present invention indicates SM-DP with PPer.

In the embodiment of the present invention, profile refers to file structure, data and the application being configured to or be stored in eUICC The set of program may include one or more network insertion applications and corresponding network insertion credential.For example, network connects Entering credential includes IMSI, Ki etc..Optionally, profile is referred to as user information collection, and this is not limited by the present invention.

In the embodiment of the present invention, profile can have configuration (Provisioning) attribute and/or operation (Operational) attribute.

Wherein, configuration profile can be understood as the profile that attribute is Provisioning attribute, and operation profile can be managed Solution is the profile that attribute is Operational attribute.Alternatively, it may also be said that configuration profile is to belong to Provisioning Property profile, operation profile be the profile with Operational attribute.

Configuration profile may include one or more network insertion applications and corresponding network insertion credential, main use The communication capacity of the management of eUICC and profile is carried out between offer eUICC and PM (as PM downloading newly Profile is activated, and is deactivated, and profile etc. is deleted).

Operation profile may include one or more network insertions application and corresponding network insertion credential, terminal and EUICC can use operation profile and access the permitted all-network of profile signing, function and existing UICC card class Seemingly.

It should be noted, however, that some profile can also have Provisioning attribute and Operational simultaneously Attribute.

So, it is appreciated that the profile with Provisioning attribute may be configuration profile, it is also possible to for simultaneously Profile with Provisioning attribute and Operational attribute.Profile with Operational attribute can It can be operation profile, it is also possible to be while there is the profile of Provisioning attribute and Operational attribute.

In addition, attribute is referred to as type or classification (type) in the embodiment of the present invention.For example, configuration profile can be with The profile for being Provisioning for classification, operation profile can be the profile that classification is Operational.The present invention Subsequent embodiment indicates attribute or type or classification with attribute.

In addition, terminal (Terminal) is referred to as system, subscriber unit, subscriber station, movement in the embodiment of the present invention It stands, mobile station, remote station, remote terminal, mobile device, user terminal, mobile terminal, wireless telecom equipment, user agent, use Family device or user equipment (User Equipment, UE).For example, terminal can be cellular phone, wireless phone, session initiation Agreement (Session Initiation Protocol, SIP) phone, wireless local loop (Wireless Local Loop, WLL it) stands, personal digital assistant (Personal Digital Assistant, PDA), hand-held with wireless communication function set It is standby, calculate equipment or be connected to other processing equipments of radio modem.This is not limited by the present invention.

Fig. 1 is the schematic diagram of the logical architecture of eUICC.EUICC 10 shown in Fig. 1 includes at least one profile domain (Profile Domain, PD) 101, and profile is stored in PD 101.EUICC10 further includes eUICC PM 102, is protected Have for some security keys with PM secure communication, and establishes the secure communication between PM.EUICC 10 further includes behaviour Make system (Operating System, OS) 103.

Wherein, the profile being stored in PD 101, which can be, belongs to MNO 20, and profile can be via PM 40 from PPer 30 obtain.

Fig. 2 is the interaction figure of the method for the configuration eUICC of one embodiment of the invention.It include eUICC 10, MNO in Fig. 2 20, PPer 30 and PM 40.

Wherein, PM 40 can be located at network side or PM 40 or be located at terminal, and this is not limited by the present invention.

Wherein, PPer 30 is located at network side.

Also, there is the first profile in eUICC 10, the first profile has Provisioning attribute, and should First profile is configuration profile, and MNO belonging to the first profile is MNO 20.

201, MNO 20 receive the subscription request of user.Wherein, which includes the mark (ID) of eUICC.

For example, user can provide the ID of eUICC to MNO 20 by the official website of MNO, to request MNO to the place eUICC Terminal downloads have access to the profile of carrier network.

For another example user can use the terminal where eUICC 10, specific message is sent to MNO 20, with request Terminal downloads where from MNO to eUICC have access to the profile of carrier network.

As an example, the ID for the eUICC that MNO 20 can be provided according to user determines the ID of PM.

Alternatively, user can also provide the ID of PM while providing the ID of eUICC as another example.That is, signing is asked Seek the ID that may also include PM.The PM is the PM for currently managing the eUICC.

Optionally, user can also provide the information such as the address of ID, PM of PM to MNO 20.

It is appreciated that the subscription request of user is proposed to MNO belonging to the first profile in the embodiment of the present invention. That is, the embodiment of the present invention, which is applied to user, wants the first profile deposited in the profile and eUICC that download category In the scene of the same operator.

202, MNO 20 send the first request message to PM 40.Wherein, first request message include eUICC ID and The ID of MNO 20.

Wherein, the ID of eUICC included in first request message is obtained from the subscription request in 201.

Specifically, in the embodiment of the present invention, information of first request message for the profile in request eUICC.

It is appreciated that the ID or MNO 20 that MNO 20 can obtain PM from subscription request can basis in 201 The ID of eUICC in subscription request determines the ID of PM.So, the PM 40 in 202 be with 201 in the acquired or PM that determines The corresponding PM of ID.

It is understood that in 202, MNO 20 generates the first request message according to subscription request, and by first request message It is sent to PM 40.And it includes being also possible to MNO 20 according to subscription request that the ID of PM 40, which can be described in subscription request, In eUICC ID determined by.

203, PM 40 send the second request message to eUICC 10.

Specifically, information of second request message for the profile in request eUICC.

Specifically, PM 40 can be communicated with the eUICC PM in eUICC 10.That is, PM 40 can be by Two request messages are sent to the eUICC PM in eUICC 10.

It should be noted that two-way authentication can be carried out between PM 40 and eUICC 10 before 203.Such as carry out two-way authentication The authentication method of symmetric key can be used, or can also be using based on Public Key Infrastructure (Public Key Infrastructure, PKI) authentication method, or this can not also be limited using other authentication methods, the present invention It is fixed.

Second response message is sent to PM 40 by 204, eUICC 10.Second response message includes described first The information of profile.

It specifically, can be from the PD in eUICC 10 after the eUICC PM in eUICC 10 receives the second request message The middle information for obtaining the first profile.

Wherein, the information of the first profile may include MNO belonging to the ID of the first profile, the first profile The ID of PD where ID, the first profile.

Optionally, the information of the first profile can also include at least one of the following: the attribute of the first profile, Download the size that can store space of the ID and the PD where the first profile of the PPer of the first profile.Its In, the first profile is previously to have downloaded from the PPer.

It is appreciated that, wherein the attribute of the first profile is Provisioning attribute, i.e. the first profile is configuration Profile.

It is understood that in 204, eUICC 10 generates the second response message according to the second request message, and by second sound Message is answered to be sent to PM 40.Wherein, the second response message includes the information of the first profile.

205, PM 40 judge whether MNO 20 is MNO belonging to the first profile.If PM 40 determines that MNO 20 is first MNO belonging to profile, then PM 40 sends the first response message to MNO 20.First response message includes first The information of profile.

Specifically, PM 40 includes the ID of MNO 20 in received first request message in 202, can be denoted as the here One ID.PM 40 includes the ID of MNO belonging to the first profile in received second response message in 204, can be remembered here For the 2nd ID.

So, in 205, PM 40 judges whether the first ID and the 2nd ID are identical.If they are the same, then PM 40 determines MNO 20 be MNO belonging to the first profile.

206, MNO 20, according to the ID and subscription request of the first profile in the information of the first profile, determine and update The ID of profile (update profile) simultaneously updates institute in home subscribed services device (Home Subscriber Server, HSS) State the signing information of the first profile.

It should be noted that updating profile (update profile) may include by a configuration profile in the embodiment of the present invention File structure, the set of data and application program needed for updating operation profile, generally do not include network insertion application and phase The network insertion credential answered.

Specifically, MNO 20 judges the first profile according to the information of subscription request and the first profile in 201 Whether can update.If MNO 20 determines that the first profile can update, further MNO 20 is according to the signing of user Request is determined updates profile using for which, that is, determines the ID for updating profile.And it is corresponding further to update the first profile in HSS Signing information.For example, MNO 20 can update the subscription data in HSS, wherein the subscription data updated can be open-minded Voice service, modification access point name (Access Point Name, APN) etc..

For example, may include signing code in subscription request.It can store ID, the signing code of Profile in MNO 20 And update the corresponding relationship of the ID of profile.So, MNO 20 can search the corresponding relationship, to determine and the first profile ID and signing code all it is corresponding update profile ID.

207, MNO 20 send third request message to PPer 30.The third request message includes ID, PM of eUICC10 40 ID, update profile ID and the PD where the first profile ID.

For example, can store the corresponding relationship between the ID for updating the ID and PPer of profile in MNO 20, then, MNO 20 Third request message can be sent to corresponding PPer according to the ID for updating profile.

In addition, can also include the information of key in the third request message, so that PPer 30 uses the cryptographic key protection Update the transmission of profile.For example, the ID of profile and the corresponding relationship of key can also be stored in MNO 20.In this way, MNO 20 The information of key can be determined according to the ID of the first profile.

Wherein, which can be MNO 20 and first profile is downloaded to the another of eUICC 10 from previously responsible What PPer was obtained.Specifically, it when the first profile is downloaded to eUICC 10, is assisted between another PPer and eUICC 10 Quotient has a key to protect the transmission of the first profile.Key when here, by one profile of the downloading is known as old Key.After the downloading for completing the first profile, which can save the old key；Or another PPer can also The old key is sent to MNO 20 and deletes the old key.

It should be noted that another PPer and PPer 30 can be the same PPer in the embodiment of the present invention, or can also be with For two different PPer, this is not limited by the present invention.

So, correspondingly, it is appreciated that the information of included key can be the letter of the old key in third request message Breath.

Optionally, if the information of the first profile in aforementioned second response message and the first response message includes described The size of the free memory of PD where first profile, then, which can also include described first The size of the free memory of PD where profile.

Optionally, which can also include the ID of the first profile.

208, PPer 30, according to the ID for updating profile in third request message, determine and update profile.

Specifically, PPer 30 can be first according to the ID for updating profile, the multiple update profiles stored from PPer 30 Middle selection update profile corresponding with the ID of profile is updated.

It should be noted that can be stored on PPer 30 and be generated according to the request of operator before the embodiment of the present invention Update profile.

For example, operator A have attribute be configuration attribute profile A, have operation attribute profile B and Profile C with operation attribute.So, update profile corresponding with operator A may include two.For example, can wrap It includes and updates profile from the first of profile A to profile B, and update wheel from the second of profile A to profile C It is wide.

209, PPer 30 send first message according to the ID of the PM in third request message, to PM 40.Wherein, this first Message include update profile, eUICC ID and the PD where the first profile ID.

Optionally, which may include the first instruction, first instruction be used to indicate eUICC 10 modify it is described The attribute of profile in PD.

Optionally, if third request message includes the big of the free memory of the PD where the first profile It is small, then PPer 30 can first determine the size of the update profile.And judge the available storage of the PD where the first profile Whether the size in space can accommodate the update profile.The available storage of PD where PPer 30 determines the first profile is empty Between size when can accommodate the update profile, which is sent to PM 40.For example, when PPer 30 determines first When the size of the free memory of PD where profile installs the update profile enough, first message is sent to PM 40.Further, first message may include instruction information, for indicating the PD's where PPer 30 determines the first profile The size of free memory can accommodate the update profile.

Optionally, as an example, it if PPer 30 is the PPer for being previously downloaded the first profile, and is saved in PPer30 It has been friends in the past key, then PPer 30 can update the transmission of profile using old cryptographic key protection.I.e., it is possible to more using the old key pair New profile is encrypted.

Optionally, as another example, if PPer 30 is to be previously downloaded in the PPer and PPer 30 of the first profile not having Have and saves old key, alternatively, if PPer 30 is not and is previously downloaded the PPer of the first profile, PPer 30 can Negotiate a new key with elder generation and eUICC 10, and using the transmission of the new key conservation and renewal profile.I.e., it is possible to new using this Key pair updates profile and is encrypted.

Optionally, as another example, if PPer 30 is to be previously downloaded in the PPer and PPer 30 of the first profile not having Have and saves old key, alternatively, if PPer 30 is not and is previously downloaded the PPer of the first profile, and third request disappears It include the information of key in breath, then, PPer 30 can update the biography of profile using the cryptographic key protection in third request message It is defeated.It is encrypted i.e., it is possible to update profile using the old key pair.

It is understood that update profile included by first message is encrypted update profile in 209.

Optionally, the size of the free memory of the PD where PPer 30 determines the first profile cannot accommodate more When new profile, PPer 30 can send error message to MNO 20.

The ID of 210, PM 40 eUICC included by first message sends second message to eUICC 10.This Two message include the ID of the PD where the update profile and the first profile.Wherein, which is connect by 209 The encrypted update profile received.

Optionally, if first message includes instruction information, where indicating that PPer 30 determines the first profile The size of the free memory of PD can accommodate the update profile.So, which also may include the instruction information.

211, eUICC 10, according to second message, will update profile and be mounted in the PD, by first in the PD Profile is updated to the 2nd profile.Wherein, the first profile is configuration profile.

Optionally, after eUICC 10 receives second message, can first judge with corresponding to the ID of the PD in second message PD free memory size.

Specifically, 211 may include:

EUICC 10 judges whether the size of the free memory of the PD installs the update profile enough；

If eUICC 10 determines that the size of the free memory of the PD installs the update profile enough, by described in more New profile is mounted in the PD；

If eUICC 10 determines that the size of the free memory of the PD does not install the update profile, eUICC enough 10 distribute new memory space for the PD, and the update profile is mounted on the new memory space or described is used In memory space and the new memory space.

For example, 211 can include: it is described that the eUICC 10 judges whether the size of the free memory of the PD is greater than Update the size of profile；

When the eUICC 10 determines the size of the free memory of the PD greater than the size for updating profile, The update profile is mounted in the PD；

When the eUICC 10 determines the size of the free memory of the PD less than the size for updating profile, The eUICC 10 expands the free memory of the PD, and the update profile is mounted in the PD after the expansion.

It is mounted in new memory space it is appreciated that eUICC 10 can will update profile；Alternatively, eUICC 10 can be with The a part for updating profile is mounted in original free memory, the another part for updating profile is mounted on new deposit It stores up in space, this is not limited by the present invention.

Optionally, as another embodiment, if the first message generated of PPer 30 includes instruction information, accordingly Ground also includes instruction information in second message, then, PPer 30 known to eUICC 10 has determined that the available of the PD is deposited The size in storage space is large enough to hold the update profile, then, in 211, eUICC 10 does not execute the free memory of PD The judgement of size will update profile and be mounted in PD.

Alternatively, 211 update profile it is also understood that eUICC 10 utilizes to install, the profile in the PD is realized Upgrading the first original profile is specifically upgraded into the 2nd profile.

In this way, the profile in the PD includes the first profile after it will update profile and be mounted in the PD With the update profile of installation, it is understood that be update profile that the 2nd profile includes the first profile and installation.

The attribute modification of 2nd profile for operation attribute or configuration attribute and is run attribute by 212, eUICC 10.

Optionally, if updating profile includes the first instruction, in 212, eUICC 10 can be according to first instruction Modify the attribute of the 2nd profile.

Specifically, eUICC 10 can be according to the first instruction, the attribute modification by profile in the PD Operational attribute.That is, before the update, the profile in the PD is the first profile, attribute Provisioning Attribute.After update, the profile in the PD is the 2nd profile, and is Operational attribute by its attribute modification.

Alternatively, specifically, eUICC 10 can be according to the first instruction, the attribute modification by profile in the PD Operational attribute and Provisioning attribute.That is, before the update, the profile in the PD is the first profile, Attribute is Provisioning attribute.After update, the profile in the PD is the 2nd profile, and its attribute is existed Increase Operational attribute on the basis of Provisioning attribute.That is, the 2nd profile both had Operational attribute, it may have Provisioning attribute.

It is understood that can have a file or data object or field to indicate the profile's in the PD in the PD Attribute.Before 211, which can be Provisioning.So, eUICC 10 can be instructed according to first by the field Operational is revised as by Provisioning.Alternatively, eUICC10 can be according to the first instruction in the field Increase Operational on the basis of Provisioning.

That is, the 2nd profile can only have Operational attribute in the embodiment of the present invention；Alternatively, the Two profile can have Operational attribute and Provisioning attribute simultaneously.

It should be noted that eUICC 10, can be at loading (install) after receiving second message in the embodiment of the present invention When updating profile, it is performed simultaneously installation and updates profile and modify the process of attribute.That is, 211 and 212 can in the embodiment of the present invention To be performed simultaneously.Or it can be appreciated that eUICC 10 is performed simultaneously the instruction of modification during executing and installing.That is, such as It includes the first instruction that fruit, which updates in profile, then the execution of 211 installation includes executing the first instruction, that is, it include 212.

Certainly, it 212 can also be executed again after 211.That is, instructed if updated in profile including first, 211 The execution of installation does not include executing the first instruction, but executed by 212.

The third response message is simultaneously sent to PM 40 by 213, eUICC 10 generation third response messages.

It is understood that the third response message is response message corresponding with the second message in 210.

4th response message is simultaneously sent to PPer 30 by 214, PM 40 the 4th response messages of generation.

It is understood that the 4th response message is response message corresponding with the first message in 209.

5th response message is simultaneously sent to MNO 20 by 215, PPer 30 the 5th response messages of generation.

It is understood that the 5th response message is response message corresponding with the third request message in 207.

Optionally, if the update profile in aforementioned 209 first message does not include the first instruction, that is to say, that 215 Before, if eUICC 10 is not carried out 212.So, after 215, MNO 20 can send the second instruction to eUICC 10, with Make eUICC 10 according to the attribute of the 2nd profile of the second instruction modification.

Specifically, over the air (Over The Air, OTA) mechanism can be used in MNO 20, sends the second instruction To eUICC 10.

Further, eUICC 10 can be held again after 215 and after the second instruction for receiving the transmission of MNO 20 Row 212.

Optionally, the second instruction can be sent to PM 40 by MNO 20, then is forwarded to second instruction by PM 40 eUICC 10.That is, 212 can be after eUICC 10 receives the second instruction that MNO 20 or PM 40 are sent and execute again 's.

Specifically, eUICC 10 can according to second instruction by the attribute modification of the 2nd profile be operation attribute or Configuration attribute and operation attribute.Specifically, the eUICC 10 is according to the process of the attribute of the 2nd profile of the second instruction modification, It is similar with the process of attribute according to the 2nd profile of the first instruction modification, it may refer in aforementioned 212 about the first instruction Description, to avoid repeating, which is not described herein again.

It is understood that 212 can be performed simultaneously with 211 in the embodiment of the present invention, alternatively, 212 can execute after 211, Alternatively, 212 can be after 215.That is, the size of serial number cannot function as the restriction to execution sequence.

Further, can also include: after 212

216, eUICC 10 can also send refreshing (REFRESH) proactive command to the terminal at place, so that terminal pair EUICC is restarted.

Wherein, the mode of REFRESH proactive command can be UICC reset (REFRESH command with mode“UICC Reset”)。

In this way, after restarting, eUICC 10 can access MNO 20 using the 2nd profile.

In this way, in the embodiment of the present invention, when the existing profile with configuration attribute in eUICC and the tool to be downloaded When having the profile of operation attribute to belong to the same operator, eUICC, which can be obtained via PM from PPer, to be updated profile and will have There is the first profile of configuration attribute to be updated to the 2nd profile, and the 2nd profile has operation attribute.In this way, energy Enough Internet resources saved when downloading profile.Also, the network insertion resource of operator can be saved simultaneously.For example, operation Quotient is without distributing the parameter in the network insertions credentials such as new IMSI and Ki again for the 2nd profile.

It should be noted that the MNO 20 in the embodiment of the present invention can refer to the server etc. where operator, alternatively, can be The equipment of MNO, this is not limited by the present invention.

Fig. 3 is the interaction figure of the method for the configuration eUICC of another embodiment of the present invention.In Fig. 3 include eUICC 10, MNO 20, PPer 30 and PM 40.

Wherein, PM 40 can be located at network side or PM 40 or be located at terminal, and this is not limited by the present invention. Wherein, PPer 30 is located at network side.Also, there is the first profile in eUICC 10, the first profile has Provisioning attribute, and the first profile is configuration profile, and MNO belonging to the first profile is MNO 20.

Also, in embodiments of the present invention, the eUICC information aggregate in PM 40 (eUICC Information Set, EIS the information of the first profile in eUICC 10 is stored in).

Method shown in Fig. 3 may include 201 to 202,

203 ', PM 40 obtains the information of the first profile according to the first request message from EIS.

Wherein, the information of the first profile may include: the ID of the first profile, described first The ID of PD where the ID of MNO belonging to profile, the first profile.

It is appreciated that, wherein the attribute of the first profile is Provisioning attribute.

205 to 216,

The information of updated profile is sent to PM 40 by 217, eUICC 10.

It is appreciated that here, updated profile i.e. the 2nd profile.The information of updated profile can be with The size of the free memory of PD where the attribute of ID, the 2nd profile including the 2nd profile, the 2nd profile Deng.Here, the attribute of the 2nd profile is operation attribute, alternatively, the attribute of the 2nd profile is that operation attribute and configuration belong to Property.

218, PM 40 update EIS.

Specifically, information of the PM 40 according to the updated profile received, the eUICC 10 that will be saved in EIS In the first profile information update be the 2nd profile information.

It should be noted that 201 to 202,205 to 216 in Fig. 3 may refer to have same sequence number in the embodiment of earlier figures 2 The step of describe, to avoid repeating, which is not described herein again.

In this way, preserving the information of existing profile in eUICC in the EIS of PM in the embodiment of the present invention.Work as eUICC In the existing profile with configuration attribute with to be downloaded have operation attribute profile belong to the same operator When, eUICC, which can be obtained via PM from PPer, to be updated profile and the first profile is updated to the 2nd profile, and this second Profile has operation attribute.In such manner, it is possible to Internet resources when saving downloading profile.Also, fortune can be saved simultaneously Seek the network insertion resource of quotient.For example, operator is without distributing the network insertions such as new IMSI and Ki again for the 2nd profile Parameter in credential.

Fig. 4 is the interaction figure of the method for the configuration eUICC of another embodiment of the present invention.In Fig. 4 include eUICC 10, MNO 20, PPer 30 and PM 40.

Method shown in Fig. 4 may include:

401, eUICC 10 receive the profile downloading request message that terminal is sent.The profile downloading request message packet Include the ID of MNO.

In addition, the profile downloading request message may also include signing code name etc..

It is understood that user can select a MNO and corresponding signing at the terminal before 401.For example, terminal On can there is application program to provide a selection interface.Alternatively, for example, user can log in specific webpage by terminal Select MNO and signing.Alternatively, there is an application program that can show selection circle in the human-computer interaction interface of terminal in eUICC 10 Face.

For example, signing code name can be the ID etc. of the selected set meal of user, this is not limited by the present invention.

For example, selected MNO is MNO 20 to user on the terminal.So, in the profile downloading request in 401 MNO ID be MNO 20 ID.

Also, terminal can generate profile downloading request message according to the user's choice.

It is understood that the installation of eUICC 10 (or insertion) is on the terminal.EUICC 10 can obtain user on the terminal Selection, that is to say, that eUICC 10 can obtain profile downloading request message.

402, eUICC 10 generate the 4th request message according to profile downloading request message.And eUICC10 is to PM 40 send the 4th request message.Wherein, the 4th request message includes the information of the ID of eUICC 10, the first profile.

Optionally, the 4th request message may include signing code name.

It is appreciated that, wherein eUICC 10 obtains the letter of the first profile therein according to profile downloading request message The 4th request message is generated after breath.

Specifically, when eUICC 10 determine user selection MNO and eUICC 10 in the first profile belong to it is same When operator, the 4th request message is generated.

For example, it is assumed that the ID that the profile in 401 downloads the MNO in request is the first ID.In a PD of eUICC10 There is the first profile, eUICC 10 can obtain the ID of MNO belonging to the first profile, it is assumed that the first profile The ID of affiliated MNO is the 2nd ID.If the first ID is identical as the 2nd ID, illustrate user selection MNO and eUICC 10 in The first profile belong to the same operator.

4th request message is sent to MNO 20 by 403, PM 40.

Optionally, the 4th request message can be sent to MNO according to the ID of the MNO in the 4th request message by PM 40 20。

Alternatively, optionally, if the information of the first profile includes the ID of PPer, PM 40 can be according to the PPer ID, the 4th request message is sent to PPer 30, the 4th request message is then sent to MNO 20 by PPer 30 again.

206 to 216.

It should be noted that 206 to 216 in Fig. 4 may refer in the embodiments of earlier figures 2 there is the step of same sequence number to retouch It states, to avoid repeating, which is not described herein again.

Wherein, in 206, MNO 20 can according to the information of the first profile included in the 4th request message and Signing code name, determines the ID for updating profile.

It should be noted that in the embodiment of Fig. 2 or Fig. 3, third request message, first message and second message in 206 to 216 Included content can be related with content included by the first response message in 205.Correspondingly, implementation shown in Fig. 4 In example, content included by third request message, first message and second message can be asked with the 4th in 403 in 206 to 216 Ask content included by message related.That is, in the embodiment shown in fig. 4, for involved in step 206 to 216 And the first response message can be replaced the 4th request message in the embodiment of Fig. 4.

In this way, in the embodiment of the present invention, when the existing profile with configuration attribute in eUICC and the tool to be downloaded When having the profile of operation attribute to belong to the same operator, user can send profile downloading to eUICC by terminal Request message, further eUICC, which can be obtained via PM from PPer, to be updated profile and the first profile is updated to second Profile, and the 2nd profile has operation attribute.In such manner, it is possible to Internet resources when saving downloading profile.And And while the network insertion resource of operator can be saved.For example, operator for the 2nd profile without distributing newly again Parameter in the network insertions credential such as IMSI and Ki.

Fig. 5 is the flow chart of the method for the configuration eUICC of one embodiment of the invention.Method shown in fig. 5 includes:

501, eUICC receive the first message that PM is sent, and the first message includes the ID for updating profile and PD.

502, eUICC are mounted on profile is updated in the PD, and the first profile in the PD is updated to second Profile, wherein the first profile is configuration profile (Provisioning Profile, PP).

The attribute modification of 2nd profile for operation attribute or configuration attribute and is run attribute by 503, eUICC.

It is understood that eUICC will update profile and be mounted in the PD according to the ID of PD in 502.Also, it is original in the PD The profile of storage is the first profile.

In the embodiment of the present invention, first message namely earlier figures 2 in 501 into the embodiment of Fig. 4 210 in second disappear Breath.Specifically, 501 may refer to earlier figures 2 into the embodiment of Fig. 4 210 description, to avoid repeating, which is not described herein again.

In 501, updating profile, to can be PM received from PPer, and updates profile to can be PPer encrypted more New profile.

Optionally, as an example, it if the PPer is the PPer for being previously downloaded the first profile, and is saved in the PPer It has been friends in the past key, then the PPer can update the transmission of profile using old cryptographic key protection.I.e., it is possible to be updated using the old key pair Profile is encrypted.

Optionally, as another example, if the PPer is not have in the PPer and the PPer for be previously downloaded the first profile Old key is saved, alternatively, if the PPer is not and is previously downloaded the PPer of the first profile, which can be first Negotiate a new key with eUICC, and using the transmission of the new key conservation and renewal profile.I.e., it is possible to using the new key pair Profile is updated to be encrypted.

Optionally, as another example, if the PPer is not have in the PPer and the PPer for be previously downloaded the first profile Old key is saved, alternatively, if the PPer is not and is previously downloaded the PPer of the first profile, and the PPer connects from MNO The information of key is received, then, which can update the transmission of profile using the cryptographic key protection received from MNO.That is, can It is encrypted with updating profile using the key pair.

Specifically, the description as described in the key may refer to earlier figures 2 into the embodiment of Fig. 4 207 in about key Description, to avoid repeating, which is not described herein again.

In 501, it can be the eUICC PM in eUICC and receive the first message that PM is sent.

In the embodiment of the present invention, 502 may refer to earlier figures 2 into the embodiment of Fig. 4 211 description.

Wherein, as an example, in 502, the eUICC may determine that the free memory of the PD size whether The update profile is installed enough；

If the eUICC determines that the size of the free memory of the PD does not install the update profile enough, described EUICC is that the PD distributes new memory space, and by the update profile be mounted on the new memory space or it is described can With in memory space and the new memory space.

In the embodiment of the present invention, 503 may refer to earlier figures 2 into the embodiment of Fig. 4 212 description.

Optionally, as one embodiment, updating profile may include the first instruction, then, 503 can include:

It is understood that can have attribute of the field to indicate the profile in the PD in the PD.It, should before 502 Field can be Provisioning.So, which can be revised as by eUICC according to the first instruction by Provisioning Operational.Alternatively, eUICC can increase on the basis of field Provisioning according to the first instruction Operational。

Alternatively, optionally, as another embodiment, before 503, eUICC can send the first response message to PM. Further, 503 can include:

EUICC also can receive the second instruction of PM or MNO；

The attribute modification of 2nd profile is that operation attribute or configuration belong to according to second instruction by eUICC Property and operation attribute.

Specifically, the description as described in the second instruction after may refer to earlier figures 2 into the embodiment of Fig. 4 215, to avoid It repeats, which is not described herein again.

It optionally, can also include: that the eUICC is led to the transmission refreshing of the terminal at place after method shown in Fig. 5 Dynamic formula order, so that the terminal restarts the eUICC；The eUICC accesses MNO using the 2nd profile. Specifically, may refer to earlier figures 2 into the embodiment of Fig. 4 216 description, to avoid repeating, which is not described herein again.

In addition, can also include: before 501

The eUICC receives the request message that PM is sent；

Request message in the embodiment of the present invention namely 203 in the embodiment of earlier figures 2 in the second request message, this hair Therefore the second response message in bright embodiment namely the second response message in the embodiment 204 of earlier figures 2 may refer to The description of 203-204 in the embodiment of earlier figures 2, to avoid repeating, which is not described herein again.

Alternatively, can also include: before 501

The eUICC receives the profile downloading request message that terminal is sent, wherein the profile downloading request disappears Breath includes the mark ID of Mobile Network Operator MNO；

Profile downloading request message in the embodiment of the present invention namely the profile in the embodiment 401 of earlier figures 4 Downloading request message, the second message in the embodiment of the present invention namely the 4th request message in the embodiment 402 of earlier figures 4, Therefore, it may refer to the description of 401-402 in the embodiment of earlier figures 4, to avoid repeating, which is not described herein again.

In the embodiment of the present invention, the information of the first profile may include: the ID of the first profile, described The ID of PD where the ID of MNO belonging to first profile, the first profile.

Optionally, the information of the first profile can also comprise at least one of the following: the first profile's Attribute, downloading the first profile profile configurator ID and the PD where the first profile available storage it is empty Between size.

Fig. 6 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.Method shown in fig. 6 includes:

601, PM receive the first message that profile configurator is sent, and the first message includes updating profile, the eUICC Mark ID and the PD in the eUICC ID.

The ID of 602, the PM according to the eUICC, Xiang Suoshu eUICC transmission second message, the second message include The ID for updating profile and the PD, so that the update profile is mounted in the PD by the eUICC, it will be described First profile profile in PD is updated to the 2nd profile, and is that operation belongs to by the attribute modification of the 2nd profile Property or configuration attribute and operation attribute, wherein the first profile be configuration profile.

603, second response message for receiving the eUICC and sending.

604, the PM send the first response message to the profile configurator.

In the embodiment of the present invention, when in eUICC the existing profile with configuration attribute with to be downloaded have operation When the profile of attribute belongs to the same operator, PM from the received update profile of PPer and can will be sent to eUICC, with Make eUICC that the first profile with configuration attribute is updated to the 2nd profile, and there is the 2nd profile operation to belong to Property.In such manner, it is possible to Internet resources when saving downloading profile.Also, the network insertion money of operator can be saved simultaneously Source.For example, operator is without distributing the parameter in the network insertions credentials such as new IMSI and Ki again for the 2nd profile.

It is understood that the 2nd profile can only have Operational attribute；Alternatively, the 2nd profile can be simultaneously With Operational attribute and Provisioning attribute.

In the embodiment of the present invention, first message, that is, earlier figures 2 in 601 into the embodiment of Fig. 4 209 in first disappear Breath；Second message, that is, earlier figures 2 in 602 into the embodiment of Fig. 4 210 in second message；The second response message in 603 I.e. earlier figures 2 into the embodiment of Fig. 4 213 in third response message；The first response message, that is, earlier figures 2 in 604 are to Fig. 4 Embodiment in the 4th response message in 214.Therefore, it 601 earlier figures 2 be may refer to 209 retouches into the embodiment of Fig. 4 State, 602 may refer to earlier figures 2 into the embodiment of Fig. 4 210 description, 603 may refer to the embodiment of earlier figures 2 to Fig. 4 In 213 description, 604 may refer to earlier figures 2 into the embodiment of Fig. 4 214 description, it is no longer superfluous here to avoid repeating It states.

It optionally, can also include: the PM to the first instruction of eUICC transmission, so that described after 603 The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute according to first instruction by eUICC.

Optionally, as one embodiment, before 601, may include:

The PM receives the first request message that MNO is sent, and first request message includes ID and the institute of the eUICC State the ID of MNO；

The first request in 202 in the embodiment of the first request message, that is, earlier figures 2 or Fig. 3 in the embodiment of the present invention disappears Breath, third response message, that is, earlier figures 2 in the embodiment of the present invention or 205 in the embodiment of Fig. 3 in the first response message.Cause This, can respectively referring in previous embodiment 202 and 205 description, to avoid repeating, which is not described herein again.

Wherein, the PM sends third response message to the MNO, comprising: when the PM determines that the MNO is described When MNO belonging to the first profile stored in eUICC, Xiang Suoshu MNO sends third response message.It may refer to Fig. 2 or figure 205 description in 3.

Optionally, as one embodiment, the PM obtains the first profile's according to first request message Information may include:

The second request message in 203 in the embodiment of the second request message, that is, earlier figures 2 in the present embodiment, this implementation The second response message in 204 in the embodiment of four response messages, that is, earlier figures 2 in example.Therefore, it may refer to aforementioned reality In example 203 to 204 description is applied, to avoid repeating, which is not described herein again.

Optionally, as another embodiment, the PM obtains the first profile according to first request message Information, may include: the information that the PM obtains the first profile from the EIS.It is understood that described first The information of profile is stored in the eUICC information aggregate EIS in the PM.It specifically may refer to the embodiment of earlier figures 3 In 203 ' description, to avoid repeating, which is not described herein again.

Optionally, as another embodiment, before 601, may include:

The third request message is sent to MNO belonging to the first profile by the PM.

The 4th request message in third request message, that is, earlier figures 4 embodiment 402 in the embodiment of the present invention, because This, may refer in the embodiment of earlier figures 4 402 description, and to avoid repeating, which is not described herein again.

Wherein, if the information of the first profile in the 4th request message includes downloading the wheel of the first profile The ID of wide configurator, then, which can be sent to the profile configurator by PM, so as to profile configuration The third request message is forwarded to the MNO by device.

Fig. 7 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.Method shown in Fig. 7 includes:

701, MNO equipment receives the first message that PM is sent, and the first message includes first in the eUICC The information of profile, wherein the information of the first profile includes the mark ID and described first of the first profile The ID of profile domain PD where profile.

The equipment of 702, the MNO determine the ID for updating profile and update ownership according to the information of the first profile The signing information of first profile described in subscribed services device HSS.

The equipment of 703, the MNO send second message to profile configurator, wherein the second message includes described The ID of the ID and the PM of the ID of eUICC, the ID for updating profile, the PD, so that the profile configurator passes through institute It states PM the update profile is downloaded in the PD of the eUICC, further such that the eUICC is by the update profile It is mounted in the PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile.

704, the equipment of the MNO receives the first response message that the profile configurator is sent.

In the embodiment of the present invention, when in eUICC the existing profile with configuration attribute with to be downloaded have operation When the profile of attribute belongs to the same operator, MNO can be true according to the information of the first profile with configuration attribute Surely the ID of profile is updated, and indicates that PPer is that eUICC downloads the update profile, so that the first profile is updated to the by eUICC Two profile, and the 2nd profile has operation attribute.In such manner, it is possible to Internet resources when saving downloading profile.And And while the network insertion resource of operator can be saved.For example, operator for the 2nd profile without distributing newly again Parameter in the network insertions credential such as IMSI and Ki.

Optionally, in the embodiment of the present invention, 701 equipment that can be MNO receive the first message that PM is sent from PPer.? That is, it is possible to be that first message is sent to PPer, the equipment that first message is forwarded to MNO again by PPer by PM.

Optionally, which may also include the ID of MNO.

Optionally, first message can also include the ID of PPer.

Optionally, as one embodiment, in the embodiment of the present invention, the first message in 701 can be earlier figures 2 or figure The first response message in 205 in 3 embodiment, then, before 701, further includes:

Wherein, the first message is the second response message corresponding with the request message.

Wherein, subscription request may include the ID of PM, and the description as described in subscription request may refer to Fig. 2 or Fig. 3 201 in embodiment.

Specifically, in 702, the equipment of MNO can determine according to the information and subscription request of the first profile and update wheel Wide ID.

So, in the present embodiment, request message is in the embodiment of Fig. 2 or Fig. 3 202 the first request message, phase Ying Di, the first response message that the first message in the embodiment of the present invention is in the embodiment of Fig. 2 or Fig. 3 205.It therefore, 701 can With referring to fig. 2 or in the embodiment of Fig. 3 205 description, to avoid repeating, which is not described herein again.

Optionally, as another embodiment, first message in 701 can be the in the embodiment 403 of earlier figures 4 Four request messages.First message may include signing code name, and specifically, in 702, the equipment of MNO can be according to the first profi1e Information and signing code name, determine update profile ID.Therefore, 701 may refer in the embodiment of Fig. 4 403 description, to keep away Exempt to repeat, which is not described herein again.

Optionally, the first message in 701 can also be including the ID of the ID and eUICC of PM.

In the embodiment of the present invention, 702 may refer to earlier figures 2 into the embodiment of Fig. 4 206 description, to avoid repeating, Which is not described herein again.

In the embodiment of the present invention, second message, that is, earlier figures 2 in 703 into the embodiment of Fig. 4 207 in third request Message；The first response message, that is, earlier figures 2 in 704 into the embodiment of Fig. 4 215 in the 5th response message.Therefore, 703 May refer to earlier figures 2 into the embodiment of Fig. 4 207 description, 704 may refer to earlier figures 2 into the embodiment of Fig. 4 214 Description, to avoid repeating, which is not described herein again.

Wherein, second message can also include the information of key, in order to which the profile configurator is protected using the key Protect the transmission for updating profile.

Optionally, after 704, can also include: MNO equipment to the eUICC send second instruction so that institute It is operation attribute or configuration attribute and fortune by the attribute modification of the 2nd profile that eUICC, which is stated, according to second instruction Row attribute.

Specifically, the description of the second instruction after may refer to earlier figures 2 into the embodiment of Fig. 4 215, to avoid weight Multiple, which is not described herein again.

Optionally, the information of the first profile further includes the free memory of the PD where the first profile Size, the second message further includes the size of the free memory of the PD where the first profile, so as to the wheel The size of the free memory of PD of the wide configurator where determining the first profile installs the update profile enough When, the update profile is downloaded in the PD of the eUICC by the PM.

In the embodiment of the present invention, the information of the first profile can also be comprised at least one of the following:

Optionally, in the embodiment of the present invention, the equipment of MNO can be the server of MNO.

Fig. 8 is the flow chart of the method for the configuration eUICC of another embodiment of the present invention.Method shown in Fig. 8 includes:

The request message that the equipment that 801, profile configurator PPer receive MNO is sent, wherein the request message includes institute State the ID of the ID and PM of the ID of eUICC, the ID for updating profile, PD in the eUICC.Wherein, in the PD in the eUICC First profile is configuration profile.

802, the PPer determine the update profile according to the ID for updating profile.

803, the PPer are according to the ID of the PM, and Xiang Suoshu PM transmission first message, the first message includes described Update profile, the eUICC ID and the PD in the eUICC ID so that the update profile is sent to institute by the PM EUICC is stated, and the first profile in the PD is updated to second according to the update profile by the eUICC profile.Wherein, the 2nd profile has operation attribute.

804, the PPer receive the first response message that the PM is sent.

805, the PPer send the second response message to the equipment of the MNO.

In the embodiment of the present invention, when in eUICC the existing profile with configuration attribute with to be downloaded have operation When the profile of attribute belongs to the same operator, PPer can be determined according to the ID for the update profile that MNO is sent updates wheel Exterior feature, and the update profile is sent to eUICC via PM, so that the first profile with configuration attribute is updated to by eUICC 2nd profile, and the 2nd profile has operation attribute.In such manner, it is possible to Internet resources when saving downloading profile. Also, the network insertion resource of operator can be saved simultaneously.For example, operator is without new for the 2nd profile distribution again IMSI and the network insertions credential such as Ki in parameter.

In the embodiment of the present invention, request message, that is, earlier figures 2 in 801 into the embodiment of Fig. 4 207 in third request Message, therefore, 801 may refer to earlier figures 2 into the embodiment of Fig. 4 207 description, to avoid repeating, which is not described herein again.

Optionally, which may include the information of key, in this way, the PPer can use the cryptographic key protection The transmission of the update profile.That is, the update profile in first message can be encrypted update profile.

In the embodiment of the present invention, 802 may refer to earlier figures 2 into the embodiment of Fig. 4 208 description, to avoid repeating, Which is not described herein again.

Optionally, as one embodiment, if the size of the free memory in request message including the PD, that , 803 can include: the size of the free memory of the PD where the PPer determines the first profile can accommodate When the update profile, the PPer sends first message to the PM.

Wherein, which may include instruction, be used to indicate the attribute of the profile in eUICC modification PD.

First message of the first message, that is, earlier figures 2 in 803 into the embodiment 209 of Fig. 4 in the embodiment of the present invention； Fourth response message of the first response message, that is, earlier figures 2 into the embodiment 214 of Fig. 4 in 804；The second response in 805 Fiveth response message of the message, that is, earlier figures 2 into the embodiment 215 of Fig. 4.Therefore, 803 earlier figures 2 be may refer to Fig. 4's 209 description in embodiment, 804 may refer to earlier figures 2 into the embodiment of Fig. 4 214 description, 805 may refer to it is aforementioned 215 description in the embodiment of Fig. 2 to Fig. 4, to avoid repeating, which is not described herein again.

It is understood that being pre-stored with the update profile in the PPer.

Fig. 9 is the structural block diagram of the eUICC of one embodiment of the invention.EUICC 10 shown in Fig. 9 includes receiving unit 110, processing unit 120 and transmission unit 130.

Receiving unit 110, for receiving the first message of profile manager PM transmission, the first message includes updating wheel Wide and profile domain PD mark ID；

Processing unit 120, for the update profile to be mounted in the PD, by the first profile in the PD Profile is updated to the 2nd profile, wherein the first profile is configuration profile；

Processing unit 120, be also used to by the attribute modification of the 2nd profile for operation attribute or configuration attribute and Run attribute.

Optionally, as one embodiment, the update profile includes the first instruction, and the processing unit 120 is specific to use In: it is that operation attribute or configuration attribute and operation belong to by the attribute modification of the 2nd profile according to first instruction Property.

Optionally, as another embodiment,

Receiving unit 110 is also used to receive the second instruction of the PM or Mobile Network Operator MNO；

Processing unit 120 is specifically used for according to second instruction, is fortune by the attribute modification of the 2nd profile Row attribute or configuration attribute and operation attribute.

Optionally, as another embodiment, processing unit 120 is specifically used for:

If it is determined that the size of the free memory of the PD does not install the update profile enough, it is new for PD distribution Memory space, and the update profile is mounted on the new memory space or the free memory and described new In memory space.

Optionally, as another embodiment, transmission unit 130 is used for: being sent to the terminal at place and is refreshed active life It enables, so that the terminal restarts the eUICC；

Processing unit 120 is also used to using the 2nd profile access to mobile network operator MNO.

Optionally, as another embodiment,

Receiving unit 110 is also used to receive the request message that the PM is sent；

Transmission unit 130, for according to the request message, Xiang Suoshu PM to send the second response message, wherein described the Two response messages include the information of the first profile.

Optionally, as another embodiment,

Receiving unit 110 is also used to receive the profile downloading request message of terminal transmission, wherein the profile Downloading request message includes the mark ID of Mobile Network Operator MNO；

Transmission unit 130 is also used to when determining the MNO is MNO belonging to the first profile, according to described Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

Optionally, as another embodiment, the information of the first profile includes: the mark of the first profile Know the ID of the profile domain PD where ID, the first profile of MNO belonging to ID, the first profile.

Optionally, as another embodiment, the information of the first profile further includes following at least one: described Where the attribute of first profile, the ID and the first profile of the profile configurator of downloading the first profile The size of the free memory of PD.

EUICC 10 shown in Fig. 9 can show the process realized in embodiment of the method above-mentioned by eUICC, to avoid weight Multiple, which is not described herein again.

Figure 10 is the structural block diagram of the equipment for configuring eUICC of one embodiment of the invention.Equipment shown in Fig. 10 For PM 40, including receiving unit 410, processing unit 420 and transmission unit 430.

Receiving unit 410, for receiving the first message of profile configurator transmission, the first message includes updating wheel The ID of profile domain PD in the mark ID and eUICC of wide, the described eUICC；

Transmission unit 430 sends second message for the ID according to the eUICC, Xiang Suoshu eUICC, and described second disappears Breath includes the ID for updating profile and the PD, so that the update profile is mounted in the PD by the eUICC, with First profile profile in the PD is updated to the 2nd profile, is fortune by the attribute modification of the 2nd profile Row attribute or configuration attribute and operation attribute, wherein the first profile is configuration profile.

Receiving unit 410 is also used to receive the second response message that the eUICC is sent.

Transmission unit 430 is also used to send the first response message to the profile configurator.

Optionally, as one embodiment, transmission unit 430 is also used to: Xiang Suoshu eUICC sends the first instruction, so that It is operation attribute or configuration attribute by the attribute modification of the 2nd profile that the eUICC, which is obtained, according to first instruction With operation attribute.

Optionally, as another embodiment, receiving unit 410 is also used to receive Mobile Network Operator MNO transmission First request message, first request message include the ID of the mark ID and the MNO of the eUICC；

Processing unit 420, for obtaining the information of the first profile according to first request message；

Transmission unit 430, is also used to send third response message to the MNO, and the third response message includes described The information of first profile.

Optionally, as another embodiment, processing unit 420 is specifically used for: according in first request message The ID of the eUICC, Xiang Suoshu eUICC send the second request message；Receive the 4th response message that the eUICC is sent, institute State the information that the 4th response message includes the first profile.

Optionally, as another embodiment, the information of the first profile is stored in the letter of the eUICC in the PM It ceases in set EIS.Processing unit 420, is specifically used for: the information of the first profile is obtained from the EIS.

Optionally, as another embodiment, transmission unit 430 is specifically used for: when determine the MNO be described first When MNO belonging to profile, Xiang Suoshu MNO sends third response message.

Optionally, as another embodiment, receiving unit 410 is also used to receive the third request that the eUICC is sent Message, the third request message include the information of the mark ID and the first profile of the eUICC.Transmission unit 430, also For the third request message to be sent to Mobile Network Operator MNO belonging to the first profile.

Optionally, as another embodiment, the information of the first profile includes downloading the first profile Profile configurator ID.Transmission unit 430, is specifically used for: the third request message is sent to the profile configurator, So that the third request message is forwarded to the MNO by the profile configurator.

Optionally, as another embodiment, the information of the first profile includes downloading the first profile Profile configurator ID；Transmission unit 430, is specifically used for: the third request message is sent to the profile configurator, So that the third request message is forwarded to the MNO by the profile configurator.

Optionally, as another embodiment, the information of the first profile includes: the first profile The ID of the ID and the profile domain PD where the first profile of MNO belonging to ID, the first profile.

Optionally, as another embodiment, the 2nd profile also has configuration attribute.

PM 40 shown in Fig. 10 can show the process realized in embodiment of the method above-mentioned by PM, to avoid repeating, this In repeat no more.

Figure 11 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.Shown in Figure 11 Equipment is the equipment of MNO 20, including receiving unit 230, processing unit 240 and transmission unit 250.

Receiving unit 230, for receiving the first message of profile manager PM transmission, the first message includes described The information of first profile profile in eUICC, wherein the information of the first profile includes described first The ID of profile domain PD where the mark ID and the first profile of profile；

Processing unit 240 determines the ID for updating profile and updates ownership for the information according to the first profile The signing information of first profile described in subscribed services device HSS；

Transmission unit 250, for sending second message to profile configurator, wherein the second message includes described The ID of the ID and the PM of the ID of eUICC, the ID for updating profile, the PD, so that the profile configurator passes through institute It states PM the update profile is downloaded in the PD of the eUICC, further such that the eUICC is by the update profile It is mounted in the PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

Receiving unit 230 is also used to receive the first response message that the profile configurator is sent.

Optionally, as one embodiment, transmission unit 250 is also used to send the second instruction to the eUICC, so that Obtain the attribute of the eUICC the 2nd profile according to second instruction modification.

Optionally, as another embodiment, receiving unit 230 is also used to receive the subscription request of user, the signing Request includes the ID of the eUICC；

Transmission unit 250 is also used to according to the subscription request, and Xiang Suoshu PM sends request message；

Optionally, as another embodiment, the subscription request further includes the ID of the PM.

Optionally, as another embodiment, receiving unit 230 is specifically used for: described in profile configurator reception The first message that PM is sent.

Optionally, as another embodiment, the first message further includes the ID of the ID and the eUICC of the PM.

Optionally, as another embodiment, the second message further includes the information of key, so that the profile is matched Device is set using the transmission for updating profile described in the cryptographic key protection.

Optionally, as another embodiment, where the information of the first profile further includes the first profile The size of the free memory of PD, the second message further include that the available storage of the PD where the first profile is empty Between size, so as to the size of the free memory of PD of the profile configurator where determining the first profile When the update profile is installed enough, the update profile is downloaded in the PD of the eUICC by the PM.

Optionally, as another embodiment, the information of the first profile further includes following at least one: described The profile configuration of the ID of MNO belonging to first profile, the attribute of the first profile, downloading the first profile The size of the free memory of PD where the ID of device and the first profile.

Optionally, as another embodiment, the equipment of the MNO is the server of the MNO.

The equipment of MNO 20 shown in Figure 11 can show the process realized in embodiment of the method above-mentioned by MNO, to keep away Exempt to repeat, which is not described herein again.

Figure 12 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.Shown in Figure 12 Equipment is PPer 30, including receiving unit 310, processing unit 320 and transmission unit 330.

Receiving unit 310, the request message that the equipment for receiving Mobile Network Operator MNO is sent, wherein described to ask The ID of the ID and PM of the ID for asking message to include the ID of the eUICC, update profile, the PD in the eUICC.Wherein, described The first profile in PD in eUICC is configuration profile.

Processing unit 320, for determining the update profile according to the ID for updating profile.

Transmission unit 330 sends first message for the ID according to the PM, Xiang Suoshu PM, and the first message includes It is described update profile, the eUICC ID and the PD in the eUICC ID so that the PM sends the update profile The extremely eUICC, and the first profile in the PD is updated to second according to the update profile by the eUICC profile.Wherein, the 2nd profile has operation attribute.

Receiving unit 310 is also used to receive the first response message that the PM is sent.

Transmission unit 330 is also used to send the second response message to the MNO.

Optionally, as one embodiment, which may include the information of key, in this way, processing unit 320, the transmission of the cryptographic key protection update profile can be used.That is, the update profile in first message can be to add Update profile after close.

Optionally, as another embodiment, if the size of the free memory in request message including the PD, So, transmission unit 330 is specifically used for: the size of the free memory of the PD where determining the first profile can When accommodating the update profile, Xiang Suoshu PM sends first message.

It is understood that PPer 30 can also include storage unit, for storing the update profile.Specifically, it can store The request of with good grounds operator update profile generated.

For example, operator A have attribute be configuration attribute profile A, have operation attribute profile B and Profile C with operation attribute.So, update profile corresponding with operator A may include two.For example, storage is single Member, which can store from the first of profile A to profile B, updates profile, and from the of profile A to profile C Two update profile.

PPer 30 shown in Figure 12 can show the process realized in embodiment of the method above-mentioned by PPer, to avoid weight Multiple, which is not described herein again.

Figure 13 is the structural block diagram of the eUICC of another embodiment of the present invention.EUICC 10 shown in Figure 13 includes: to receive Device 1101, processor 1201, transmitter 1301 and memory 1401.

Receiver 1101, for receiving the first message of profile manager PM transmission, the first message includes updating wheel Wide and profile domain PD mark ID；

Processor 1201, for according to the received first message of receiver 1101, the update profile to be mounted on In the PD, the first profile profile in the PD is updated to the 2nd profile, wherein the first profile To configure profile；It is also used to the attribute modification of the 2nd profile be operation attribute or configuration attribute and operation attribute.

Various components in eUICC 10 are coupled by bus system 1501, and wherein bus system 1501, which is removed, includes It further include power bus, control bus and status signal bus in addition except data/address bus.But for the sake of clear explanation, scheming Various buses are all designated as bus system 1501 in 13.

The method that the embodiments of the present invention disclose can be applied in processor 1201, or real by processor 1201 It is existing.Processor 1201 may be a kind of IC chip, the processing capacity with signal.During realization, the above method Each step can be completed by the instruction of the integrated logic circuit of the hardware in processor 1201 or software form.Above-mentioned Processor 1201 can be general processor, digital signal processor (Digital Signal Processor, DSP), dedicated Integrated circuit (Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field Programmable Gate Array, FPGA) either other programmable logic device, discrete gate or transistor logic, Discrete hardware components.It may be implemented or execute disclosed each method, step and the logic diagram in the embodiment of the present invention.It is general Processor can be microprocessor or the processor is also possible to any conventional processor etc..In conjunction with institute of the embodiment of the present invention The step of disclosed method, can be embodied directly in hardware decoding processor and execute completion, or with the hardware in decoding processor And software module combination executes completion.Software module can be located at random access memory, and flash memory, read-only memory may be programmed read-only In the storage medium of this fields such as memory or electrically erasable programmable memory, register maturation.The storage medium is located at The step of memory 1401, processor 1201 reads the information in memory 1401, completes the above method in conjunction with its hardware.

It is appreciated that the memory 1401 in the embodiment of the present invention can be volatile memory or non-volatile memories Device, or may include both volatile and non-volatile memories.Wherein, nonvolatile memory can be read-only memory (Read-Only Memory, ROM), programmable read only memory (Programmable ROM, PROM), erasable programmable are only Read memory (Erasable PROM, EPROM), electrically erasable programmable read-only memory (Electrically EPROM, ) or flash memory EEPROM.Volatile memory can be random access memory (Random Access Memory, RAM), use Make External Cache.By exemplary but be not restricted explanation, the RAM of many forms is available, such as static random-access Memory (Static RAM, SRAM), dynamic random access memory (Dynamic RAM, DRAM), synchronous dynamic random-access Memory (Synchronous DRAM, SDRAM), double data speed synchronous dynamic RAM (Double Data Rate SDRAM, DDR SDRAM), it is enhanced Synchronous Dynamic Random Access Memory (Enhanced SDRAM, ESDRAM), same Step connection dynamic random access memory (Synchlink DRAM, SLDRAM) and direct rambus random access memory (Direct Rambus RAM, DR RAM).The memory 1401 of system and method described herein is intended to include but is not limited to this A little and any other suitable type memory.

It is understood that embodiments described herein can with hardware, software, firmware, middleware, microcode or its Combination is to realize.For hardware realization, processor 1201 be may be implemented in one or more specific integrated circuits (Application Specific Integrated Circuits, ASIC), digital signal processor (Digital Signal Processing, DSP), digital signal processing appts (DSP Device, DSPD), programmable logic device (Programmable Logic Device, PLD), field programmable gate array (Field-Programmable Gate Array, FPGA), general place It manages in device, controller, microcontroller, microprocessor, other electronic units for executing herein described function or combinations thereof.

When realizing embodiment in software, firmware, middleware, or microcode, program code or code segment, they can be stored In the machine readable media of such as storage unit.Code segment can indicate process, function, subprogram, program, routine, subroutine, Module, software package, any combination of class or instruction, data structure or program statement.Code segment can be by transmitting and/or connecing Collection of letters breath, data, independent variable, parameter or memory content contribution are bonded to another code segment or hardware circuit.Can be used includes depositing Reservoir shared, message transmission, token passing, network transmission etc. are suitble to mode arbitrarily to transmit, forward or send information, become certainly Amount, parameter, data etc..

For software implementations, it can be realized herein by executing the module (such as process, function etc.) of function described herein The technology.Software code is storable in memory cell and is executed by processor.Memory cell can handled Portion realizes in device or outside the processor, and memory cell can be via the known various means in this field with logical in the latter case Letter mode is coupled to processor.

Optionally, as one embodiment, the update profile includes the first instruction, and processor 1201 is specifically used for: root It is operation attribute or configuration attribute and operation attribute by the attribute modification of the 2nd profile according to first instruction.

Optionally, as another embodiment,

Receiver 1101 is also used to receive the second instruction of the PM or Mobile Network Operator MNO；

Processor 1201 is specifically used for according to second instruction, is operation by the attribute modification of the 2nd profile Attribute or configuration attribute and operation attribute.

Optionally, as another embodiment, processor 1201 is specifically used for:

If it is determined that the size of the free memory of the PD does not install the update profile enough, it is new for PD distribution Memory space, and the update profile is mounted in the new memory space or the free memory and described In new memory space.

Optionally, as another embodiment, transmitter 1301 is used for: being sent to the terminal at place and is refreshed active life It enables, so that the terminal restarts the eUICC；

Processor 1201 is also used to using the 2nd profile access to mobile network operator MNO.

Optionally, as another embodiment,

Receiver 1101 is also used to receive the request message that the PM is sent；

Transmitter 1301, for according to the request message, Xiang Suoshu PM to send the second response message, wherein described second Response message includes the information of the first profile.

Optionally, as another embodiment,

Receiver 1101 is also used to receive the profile downloading request message of terminal transmission, wherein under the profile Carry the mark ID that request message includes Mobile Network Operator MNO；

Transmitter 1301 is also used to when determining the MNO is MNO belonging to the first profile, according to described Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

EUICC 10 shown in Figure 13 can show the process realized in embodiment of the method above-mentioned by eUICC, to avoid It repeats, which is not described herein again.

Figure 14 is the structural block diagram of the equipment for configuring eUICC of one embodiment of the invention.Equipment shown in Figure 14 For PM 40, including receiver 4101, processor 4201, transmitter 4301 and memory 4401.

Receiver 4101, for receive profile configurator transmission first message, the first message include update profile, The ID of profile domain PD in the mark ID and eUICC of the eUICC；

Transmitter 4301 sends second message, the second message for the ID according to the eUICC, Xiang Suoshu eUICC Including the ID for updating profile and the PD, so that the update profile is mounted in the PD by the eUICC, it will First profile profile in the PD is updated to the 2nd profile, is operation by the attribute modification of the 2nd profile Attribute or configuration attribute and operation attribute, wherein the first profile is configuration profile.

Receiver 4101 is also used to receive the second response message that the eUICC is sent.

Transmitter 4301 is also used to send the first response message to the profile configurator.

Various components in PM 40 are coupled by bus system 4501, and it includes number that wherein bus system 4501, which is removed, It further include power bus, control bus and status signal bus in addition except bus.But for the sake of clear explanation, in Figure 14 It is middle that various buses are all designated as bus system 4501.

The method that the embodiments of the present invention disclose can be applied in processor 4201, or real by processor 4201 It is existing.Processor 4201 may be a kind of IC chip, the processing capacity with signal.During realization, the above method Each step can be completed by the instruction of the integrated logic circuit of the hardware in processor 4201 or software form.Above-mentioned Processor 4201 can be general processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or crystal Pipe logical device, discrete hardware components.It may be implemented or execute the disclosed each method in the embodiment of the present invention, step and patrol Collect block diagram.General processor can be microprocessor or the processor is also possible to any conventional processor etc..In conjunction with this The step of method disclosed in inventive embodiments, can be embodied directly in hardware decoding processor and execute completion, or at decoding Hardware and software module combination in reason device execute completion.Software module can be located at random access memory, flash memory, read-only storage In the storage medium of this fields such as device, programmable read only memory or electrically erasable programmable memory, register maturation.It should Storage medium is located at memory 4401, and processor 4201 reads the information in memory 4401, completes above-mentioned side in conjunction with its hardware The step of method.

It is appreciated that the memory 4401 in the embodiment of the present invention can be volatile memory or non-volatile memories Device, or may include both volatile and non-volatile memories.Wherein, nonvolatile memory can be ROM, PROM, EPROM, EEPROM or flash memory.Volatile memory can be RAM, be used as External Cache.By exemplary but be not The RAM of restricted explanation, many forms is available, such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM and DR RAM.The memory 4401 of system and method described herein is intended to include but is not limited to these and any other suitable type Memory.

It is understood that embodiments described herein can with hardware, software, firmware, middleware, microcode or its Combination is to realize.For hardware realization, processor 4201 may be implemented one or more ASIC, DSP, DSPD, PLD, FPGA, General processor, controller, microcontroller, microprocessor, other electronic units for executing herein described function or its In combination.

Optionally, as one embodiment, transmitter 4301 is also used to: Xiang Suoshu eUICC sends the first instruction, so that The eUICC according to it is described first instruction by the attribute modification of the 2nd profile be operation attribute or configuration attribute and Run attribute.

Optionally, as another embodiment, receiver 4101 is also used to receive Mobile Network Operator MNO transmission First request message, first request message include the ID of the mark ID and the MNO of the eUICC；

Processor 4201 is also used to obtain the information of the first profile according to first request message；

Transmitter 4301, is also used to send third response message to the MNO, and the third response message includes described the The information of one profile.

Optionally, as another embodiment, processor 4201 is specifically used for: according in first request message The ID of the eUICC, Xiang Suoshu eUICC send the second request message；Receive the 4th response message that the eUICC is sent, institute State the information that the 4th response message includes the first profile.

Optionally, as another embodiment, the information of the first profile is stored in the letter of the eUICC in the PM It ceases in set EIS.Processor 4201, is specifically used for: the information of the first profile is obtained from the EIS.

Optionally, as another embodiment, transmitter 4301 is specifically used for: when determine the MNO be described first When MNO belonging to profile, Xiang Suoshu MNO sends third response message.

Optionally, as another embodiment, receiver 4101 is also used to receive the third request that the eUICC is sent Message, the third request message include the information of the mark ID and the first profile of the eUICC.Transmitter 4301, is also used In the third request message is sent to Mobile Network Operator MNO belonging to the first profile.

Optionally, as another embodiment, the information of the first profile includes downloading the first profile Profile configurator ID.Transmitter 4301, is specifically used for: the third request message is sent to the profile configurator, So that the third request message is forwarded to the MNO by the profile configurator.

Optionally, as another embodiment, the information of the first profile includes downloading the first profile Profile configurator ID；Transmitter 4301, is specifically used for: the third request message is sent to the profile configurator, So that the third request message is forwarded to the MNO by the profile configurator.

PM 40 shown in Figure 14 can show the process realized in embodiment of the method above-mentioned by PM, to avoid repeating, this In repeat no more.

Figure 15 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.It is shown in figure 15 Equipment is MNO 20, including receiver 2301, processor 2401, transmitter 2501 and memory 2601.

Receiver 2301, for receiving the first message of profile manager PM transmission, the first message includes described The information of first profile profile in eUICC, wherein the information of the first profile includes described first The ID of profile domain PD where the mark ID and the first profile of profile；

Processor 2401 determines the ID for updating profile and updates ownership label for the information according to the first profile The about signing information of the first profile described in server HSS；

Transmitter 2501, for sending second message to profile configurator, wherein the second message includes described The ID of the ID and the PM of the ID of eUICC, the ID for updating profile, the PD, so that the profile configurator passes through institute It states PM the update profile is downloaded in the PD of the eUICC, further such that the eUICC is by the update profile It is mounted in the PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

Receiver 2301 is also used to receive the first response message that the profile configurator is sent.

Various components in MNO 20 are coupled by bus system 2701, and it includes number that wherein bus system 2701, which is removed, It further include power bus, control bus and status signal bus in addition except bus.But for the sake of clear explanation, in Figure 15 It is middle that various buses are all designated as bus system 2701.

The method that the embodiments of the present invention disclose can be applied in processor 2401, or real by processor 2401 It is existing.Processor 2401 may be a kind of IC chip, the processing capacity with signal.During realization, the above method Each step can be completed by the instruction of the integrated logic circuit of the hardware in processor 2401 or software form.Above-mentioned Processor 2401 can be general processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or crystal Pipe logical device, discrete hardware components.It may be implemented or execute the disclosed each method in the embodiment of the present invention, step and patrol Collect block diagram.General processor can be microprocessor or the processor is also possible to any conventional processor etc..In conjunction with this The step of method disclosed in inventive embodiments, can be embodied directly in hardware decoding processor and execute completion, or at decoding Hardware and software module combination in reason device execute completion.Software module can be located at random access memory, flash memory, read-only storage In the storage medium of this fields such as device, programmable read only memory or electrically erasable programmable memory, register maturation.It should Storage medium is located at memory 2601, and processor 2401 reads the information in memory 2601, completes above-mentioned side in conjunction with its hardware The step of method.

It is appreciated that the memory 2601 in the embodiment of the present invention can be volatile memory or non-volatile memories Device, or may include both volatile and non-volatile memories.Wherein, nonvolatile memory can be ROM, PROM, EPROM, EEPROM or flash memory.Volatile memory can be RAM, be used as External Cache.By exemplary but be not The RAM of restricted explanation, many forms is available, such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM and DR RAM.The memory 2601 of system and method described herein is intended to include but is not limited to these and any other suitable type Memory.

It is understood that embodiments described herein can with hardware, software, firmware, middleware, microcode or its Combination is to realize.For hardware realization, processor 2401 may be implemented one or more ASIC, DSP, DSPD, PLD, FPGA, General processor, controller, microcontroller, microprocessor, other electronic units for executing herein described function or its In combination.

Optionally, as one embodiment, transmitter 2501 is also used to send the second instruction to the eUICC, so that The attribute of the eUICC the 2nd profile according to second instruction modification.

Optionally, as another embodiment,

Receiver 2301, is also used to receive the subscription request of user, and the subscription request includes the ID of the eUICC；

Transmitter 2501 is also used to according to the subscription request, and Xiang Suoshu PM sends request message；

Optionally, as another embodiment, receiver 2301 is specifically used for: described in profile configurator reception The first message that PM is sent.

MNO 20 shown in figure 15 can show the process realized in embodiment of the method above-mentioned by MNO, to avoid repeating, Which is not described herein again.

Figure 16 is the structural block diagram of the equipment for configuring eUICC of another embodiment of the present invention.Shown in Figure 16 Equipment is PPer 30, including receiver 3101, processor 3201, transmitter 3301 and memory 3401.

Receiver 3101, the request message that the equipment for receiving Mobile Network Operator MNO is sent, wherein described to ask The ID of the ID and PM of the ID for asking message to include the ID of the eUICC, update profile, the PD in the eUICC.Wherein, described The first profile in PD in eUICC is configuration profile.

Processor 3201, for determining the update profile according to the ID for updating profile.

Transmitter 3301 sends first message for the ID according to the PM, Xiang Suoshu PM, and the first message includes institute State update profile, the eUICC ID and the PD in the eUICC ID so that the update profile is sent to by the PM The eUICC, and the first profile in the PD is updated to second according to the update profile by the eUICC profile.Wherein, the 2nd profile has operation attribute.

Receiver 3101 is also used to receive the first response message that the PM is sent.

Transmitter 3301 is also used to send the second response message to the equipment of the MNO.

Various components in PPer 30 are coupled by bus system 3501, and wherein bus system 3501, which is removed, includes It further include power bus, control bus and status signal bus in addition except data/address bus.But for the sake of clear explanation, scheming Various buses are all designated as bus system 3501 in 16.

The method that the embodiments of the present invention disclose can be applied in processor 3201, or real by processor 3201 It is existing.Processor 3201 may be a kind of IC chip, the processing capacity with signal.During realization, the above method Each step can be completed by the instruction of the integrated logic circuit of the hardware in processor 3201 or software form.Above-mentioned Processor 3201 can be general processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or crystal Pipe logical device, discrete hardware components.It may be implemented or execute the disclosed each method in the embodiment of the present invention, step and patrol Collect block diagram.General processor can be microprocessor or the processor is also possible to any conventional processor etc..In conjunction with this The step of method disclosed in inventive embodiments, can be embodied directly in hardware decoding processor and execute completion, or at decoding Hardware and software module combination in reason device execute completion.Software module can be located at random access memory, flash memory, read-only storage In the storage medium of this fields such as device, programmable read only memory or electrically erasable programmable memory, register maturation.It should Storage medium is located at memory 3401, and processor 3201 reads the information in memory 3401, completes above-mentioned side in conjunction with its hardware The step of method.

It is appreciated that the memory 3401 in the embodiment of the present invention can be volatile memory or non-volatile memories Device, or may include both volatile and non-volatile memories.Wherein, nonvolatile memory can be ROM, PROM, EPROM, EEPROM or flash memory.Volatile memory can be RAM, be used as External Cache.By exemplary but be not The RAM of restricted explanation, many forms is available, such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM and DR RAM.The memory 3401 of system and method described herein is intended to include but is not limited to these and any other suitable type Memory.

It is understood that embodiments described herein can with hardware, software, firmware, middleware, microcode or its Combination is to realize.For hardware realization, processor 3201 may be implemented one or more ASIC, DSP, DSPD, PLD, FPGA, General processor, controller, microcontroller, microprocessor, other electronic units for executing herein described function or its In combination.

Optionally, as one embodiment, which may include the information of key, in this way, processor 3201, the transmission of the cryptographic key protection update profile can be used.That is, the update profile in first message can be to add Update profile after close.

Optionally, as another embodiment, if the size of the free memory in request message including the PD, So, transmitter 3301 is specifically used for: the size of the free memory of the PD where determining the first profile can be held Receive the update profile when, Xiang Suoshu PM send first message.

It is understood that memory 3401 is for storing the update profile.Specifically, it can store asking for good grounds operator Seek update profile generated.

For example, operator A have attribute be configuration attribute profile A, have operation attribute profile B and Profile C with operation attribute.So, update profile corresponding with operator A may include two.For example, memory 3401 can store the first update profile from profile A to profile B, and from profile A to profile C's Second updates profile.

PPer 30 shown in Figure 16 can show the process realized in embodiment of the method above-mentioned by PPer, to avoid weight Multiple, which is not described herein again.

Those of ordinary skill in the art may be aware that list described in conjunction with the examples disclosed in the embodiments of the present disclosure Member and algorithm steps can be realized with the combination of electronic hardware or computer software and electronic hardware.These functions are actually It is implemented in hardware or software, the specific application and design constraint depending on technical solution.Professional technician Each specific application can be used different methods to achieve the described function, but this realization is it is not considered that exceed The scope of the present invention.

It is apparent to those skilled in the art that for convenience and simplicity of description, the system of foregoing description, The specific work process of device and unit, can refer to corresponding processes in the foregoing method embodiment, and details are not described herein.

In several embodiments provided herein, it should be understood that disclosed systems, devices and methods, it can be with It realizes by another way.For example, the apparatus embodiments described above are merely exemplary, for example, the unit It divides, only a kind of logical function partition, there may be another division manner in actual implementation, such as multiple units or components It can be combined or can be integrated into another system, or some features can be ignored or not executed.Another point, it is shown or The mutual coupling, direct-coupling or communication connection discussed can be through some interfaces, the indirect coupling of device or unit It closes or communicates to connect, can be electrical property, mechanical or other forms.

The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple In network unit.It can select some or all of unit therein according to the actual needs to realize the mesh of this embodiment scheme 's.

It, can also be in addition, the functional units in various embodiments of the present invention may be integrated into one processing unit It is that each unit physically exists alone, can also be integrated in one unit with two or more units.

It, can be with if the function is realized in the form of SFU software functional unit and when sold or used as an independent product It is stored in a computer readable storage medium.Based on this understanding, technical solution of the present invention is substantially in other words The part of the part that contributes to existing technology or the technical solution can be embodied in the form of software products, the meter Calculation machine software product is stored in a storage medium, including some instructions are used so that a computer equipment (can be a People's computer, server or network equipment etc.) it performs all or part of the steps of the method described in the various embodiments of the present invention. And storage medium above-mentioned includes: that USB flash disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), arbitrary access are deposited The various media that can store program code such as reservoir (Random Access Memory, RAM), magnetic or disk.

The above description is merely a specific embodiment, but scope of protection of the present invention is not limited thereto, any Those familiar with the art in the technical scope disclosed by the present invention, can easily think of the change or the replacement, and should all contain Lid is within protection scope of the present invention.Therefore, protection scope of the present invention should be subject to the protection scope in claims.

Claims

1. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

The eUICC receives the first message that profile manager PM is sent, and the first message includes updating profile and profile domain The mark ID of PD；

The update profile is mounted in the PD by the eUICC, and the first profile profile in the PD is updated to 2nd profile, wherein the first profile is configuration profile；

2. the eUICC will the method according to claim 1, wherein the update profile includes the first instruction The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute, comprising:

The attribute modification of 2nd profile is that operation attribute or configuration belong to according to first instruction by the eUICC Property and operation attribute.

3. the method according to claim 1, wherein the attribute of the 2nd profile is repaired in the eUICC It is changed to before operation attribute or configuration attribute and operation attribute, further includes:

The eUICC receives the second instruction of the PM or Mobile Network Operator MNO；

The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute, packet by the eUICC It includes:

The attribute modification of 2nd profile is that operation attribute or configuration belong to according to second instruction by the eUICC Property and operation attribute.

4. method according to any one of claims 1 to 3, which is characterized in that the eUICC installs the update profile In the PD, comprising:

If the eUICC determines that the size of the free memory of the PD installs the update profile enough, by the update Profile is mounted in the PD；

If the eUICC determines that the size of the free memory of the PD does not install the update profile, the eUICC enough It distributes new memory space for the PD, and the update profile is mounted in the new memory space or described is used In memory space and the new memory space.

5. method according to any one of claims 1 to 3, which is characterized in that further include:

The eUICC is sent to the terminal at place refreshes proactive command, so that the terminal restarts the eUICC；

The eUICC uses the 2nd profile access to mobile network operator MNO.

6. method according to any one of claims 1 to 3, which is characterized in that receive first that PM is sent in the eUICC Before message, further includes:

The eUICC receives the request message that the PM is sent；

The eUICC is according to the request message, and Xiang Suoshu PM sends the second response message, wherein the second response message packet Include the information of the first profile.

7. method according to any one of claims 1 to 3, which is characterized in that receive first that PM is sent in the eUICC Before message, further includes:

The eUICC receives the profile downloading request message that terminal is sent, and the profile downloading request message includes moving The ID of dynamic network operator MNO；

8. according to the method described in claim 6, it is characterized in that, the information of the first profile includes:

The ID of MNO belonging to ID, the first profile of first profile and the institute where the first profile State the ID of PD.

9. the method according to the description of claim 7 is characterized in that the information of the first profile includes:

10. method according to claim 8 or claim 9, which is characterized in that the information of the first profile further includes following It is at least one:

11. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

Profile manager PM receives the first message that profile configurator is sent, and the first message includes updating profile, described The ID of profile domain PD in the mark ID and eUICC of eUICC；

The PM is according to the ID of the eUICC, and Xiang Suoshu eUICC transmission second message, the second message includes the update The ID of profile and the PD, so that the update profile is mounted in the PD by the eUICC, by the PD One profile profile is updated to the 2nd profile, and is to run attribute or match by the attribute modification of the 2nd profile Set attribute and operation attribute, wherein the first profile is configuration profile；

The PM receives the second response message that the eUICC is sent；

The PM sends the first response message to the profile configurator.

12. according to the method for claim 11, which is characterized in that further include:

The PM sends the first instruction to the eUICC, so that the eUICC is instructed according to described first by described second The attribute modification of profile is operation attribute or configuration attribute and operation attribute.

13. according to the method for claim 11, which is characterized in that receive the transmission of profile configurator in the PM first disappears Before breath, further includes:

The PM receives the first request message that Mobile Network Operator MNO is sent, and first request message includes described The ID of the ID of eUICC and the MNO；

The PM sends third response message to the MNO, and the third response message includes the letter of the first profile Breath.

14. according to the method for claim 13, which is characterized in that the PM is according to first request message acquisition The information of first profile, comprising:

ID of the PM according to the eUICC in first request message, Xiang Suoshu eUICC the second request message of transmission；

The PM receives the 4th response message that the eUICC is sent, and the 4th response message includes the first profile Information.

15. according to the method for claim 13, which is characterized in that the information of the first profile is stored in the PM In eUICC information aggregate EIS in,

The PM obtains the information of the first profile from the EIS.

16. 3 to 15 described in any item methods according to claim 1, which is characterized in that the PM sends third to the MNO Response message, comprising:

When the PM determines that the MNO is MNO belonging to the first profile, Xiang Suoshu MNO sends third response and disappears Breath.

17. method according to claim 11 or 12, which is characterized in that receive that profile configurator is sent in the PM Before one message, further includes:

The PM receives the third request message that the eUICC is sent, the third request message include the eUICC ID and The information of first profile；

18. according to the method for claim 16, which is characterized in that the information of the first profile includes described in downloading The ID of the profile configurator of first profile；

The third request message is sent to the profile configurator by the PM, so that the profile configurator is by described Three request messages are forwarded to the MNO.

19. 3 to 15,18 described in any item methods according to claim 1, which is characterized in that the information of the first profile Include:

20. according to the method for claim 19, which is characterized in that the information of the first profile further include with down toward Few one kind:

21. method described in any one of 1 to 15,18,20 according to claim 1, which is characterized in that the 2nd profile Also there is configuration attribute.

22. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

The equipment of Mobile Network Operator MNO receives the first message that profile manager PM is sent, and the first message includes institute State the information of the first profile profile in eUICC, wherein the information of the first profile includes described first The ID of profile domain PD where the mark ID and the first profile of profile；

The equipment of the MNO determines the ID for updating profile and updates home subscribed services according to the information of the first profile The signing information of first profile described in device HSS；

The equipment of the MNO to profile configurator send second message, wherein the second message include the eUICC ID, The ID of the ID and the PM of the ID for updating profile, the PD, so that the profile configurator will be described by the PM It updates profile to be downloaded in the PD of the eUICC, further such that described in the updates profile is mounted on by the eUICC In PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

23. according to the method for claim 22, which is characterized in that receive the profile configurator in the equipment of the MNO After the first response message sent, further includes:

The equipment of the MNO sends the second instruction to the eUICC, so that the eUICC is instructed according to described second by institute The attribute modification of the 2nd profile is stated as operation attribute or configuration attribute and operation attribute.

24. according to the method for claim 22, which is characterized in that receive PM transmission in the equipment of the MNO first disappears Before breath, further includes:

25. according to the method for claim 24, which is characterized in that the subscription request further includes the ID of the PM.

26. according to the method for claim 22, which is characterized in that the equipment of the MNO receives the first message that PM is sent, Include:

27. according to the described in any item methods of claim 22 to 26, which is characterized in that the first message further includes the PM ID and the eUICC ID.

28. according to the described in any item methods of claim 22 to 26, which is characterized in that the second message further includes key Information, so that the profile configurator is using the transmission for updating profile described in the cryptographic key protection.

29. according to the described in any item methods of claim 22 to 26, which is characterized in that the information of the first profile further includes The size of the free memory of PD where first profile, the second message further include the first profile The size of the free memory of the PD at place, so that the profile configurator is where determining the first profile When the size of the free memory of PD installs the update profile enough, the update profile is downloaded to by institute by the PM It states in the PD of eUICC.

30. according to the described in any item methods of claim 22 to 26, which is characterized in that the information of the first profile is also It comprises at least one of the following:

The ID of MNO belonging to first profile, the attribute of the first profile, downloading the first profile The size of the free memory of PD where the ID of profile configurator and the first profile.

31. a kind of universal embedded integrated circuit card eUICC characterized by comprising

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes updating profile and wheel The mark ID of wide domain PD；

Processing unit, for the update profile to be mounted in the PD, more by the first profile profile in the PD It is newly the 2nd profile, wherein the first profile is configuration profile；

The processing unit is also used to the attribute modification of the 2nd profile be operation attribute or configuration attribute and fortune Row attribute.

32. eUICC according to claim 31, which is characterized in that the update profile includes the first instruction, the processing Unit is specifically used for:

It is operation attribute or configuration attribute and operation by the attribute modification of the 2nd profile according to first instruction Attribute.

33. eUICC according to claim 31, which is characterized in that

The receiving unit is also used to receive the second instruction of the PM or Mobile Network Operator MNO；

The processing unit is specifically used for according to second instruction, is that operation belongs to by the attribute modification of the 2nd profile Property or configuration attribute and operation attribute.

34. according to the described in any item eUICC of claim 31 to 33, which is characterized in that the processing unit is specifically used for:

If it is determined that the size of the free memory of the PD installs the update profile enough, the update profile is mounted on In the PD；

If it is determined that the size of the free memory of the PD does not install the update profile enough, deposited for PD distribution is new It stores up space, and the update profile is mounted on the new memory space or the free memory and described new is deposited It stores up in space.

35. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The transmission unit, is also used to: sending to the terminal at place and refreshes proactive command, so that the terminal is to described EUICC is restarted；

36. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The receiving unit is also used to receive the request message that the PM is sent；

37. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The receiving unit is also used to receive the profile downloading request message of terminal transmission, the profile downloading request Message includes the mark ID of Mobile Network Operator MNO；

38. eUICC according to claim 36, which is characterized in that the information of the first profile includes:

Where ID, the first profile of MNO belonging to mark ID, the first profile of first profile Profile domain PD ID.

39. the eUICC according to claim 37, which is characterized in that the information of the first profile includes:

40. the eUICC according to claim 38 or 39, which is characterized in that the information of the first profile further include with Lower at least one:

41. a kind of equipment for configuring universal embedded integrated circuit card eUICC, which is characterized in that the equipment is profile Manager PM, comprising:

Receiving unit, for receiving the first message of profile configurator transmission, the first message includes updating profile, described The ID of profile domain PD in the mark ID and eUICC of eUICC；

Transmission unit sends second message for the ID according to the eUICC, Xiang Suoshu eUICC, and the second message includes institute The ID for updating profile and the PD is stated, so that the update profile is mounted in the PD by the eUICC, by the PD In first profile profile be updated to the 2nd profile, by the attribute modification of the 2nd profile be operation attribute or Person's configuration attribute and operation attribute, wherein the first profile is configuration profile；

42. equipment according to claim 41, which is characterized in that the transmission unit is also used to:

The first instruction is sent to the eUICC, so that the eUICC is instructed according to described first by the 2nd profile Attribute modification be operation attribute or configuration attribute and operation attribute.

43. equipment according to claim 41, which is characterized in that further include processing unit:

The receiving unit, is also used to receive the first request message of Mobile Network Operator MNO transmission, and first request disappears The ID of mark ID and the MNO of the breath including the eUICC；

The transmission unit is also used to send third response message to the MNO, and the third response message includes described first The information of profile.

44. equipment according to claim 43, which is characterized in that the processing unit is specifically used for:

The 4th response message that the eUICC is sent is received, the 4th response message includes the letter of the first profile Breath.

45. equipment according to claim 43, which is characterized in that the information of the first profile is stored in the PM In eUICC information aggregate EIS in,

46. according to the described in any item equipment of claim 43 to 45, which is characterized in that the transmission unit is specifically used for:

47. the equipment according to claim 41 or 42, it is characterised in that:

The receiving unit is also used to receive the third request message that the eUICC is sent, and the third request message includes institute State the information of the ID and the first profile of eUICC；

The transmission unit is also used to the third request message being sent to mobile network belonging to the first profile Operator MNO.

48. equipment according to claim 47, which is characterized in that the information of the first profile includes described in downloading The ID of the profile configurator of first profile；

The transmission unit, is specifically used for:

The third request message is sent to the profile configurator, so that the profile configurator requests the third Message is forwarded to the MNO.

49. according to claim 43 to 45,48 described in any item equipment, which is characterized in that the information of the first profile Include:

The ID and the wheel where the first profile of MNO belonging to ID, the first profile of first profile The ID of wide domain PD.

50. equipment according to claim 49, which is characterized in that the information of the first profile further include with down toward Few one kind:

51. the equipment according to any one of claim 41 to 45,48,50, which is characterized in that the 2nd profile Also there is configuration attribute.

52. a kind of equipment for configuring universal embedded integrated circuit card eUICC, which is characterized in that the equipment is mobile network The equipment of operator MNO, comprising:

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes in the eUICC The information of first profile profile, wherein the information of the first profile includes the mark of the first profile The ID of profile domain PD where ID and the first profile；

Processing unit determines the ID for updating profile and updates home subscribed services for the information according to the first profile The signing information of first profile described in device HSS；

Transmission unit, for profile configurator send second message, wherein the second message include the eUICC ID, The ID of the ID and the PM of the ID for updating profile, the PD, so that the profile configurator will be described by the PM It updates profile to be downloaded in the PD of the eUICC, further such that described in the updates profile is mounted on by the eUICC In PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

53. equipment according to claim 52, which is characterized in that the transmission unit is also used to send to the eUICC Second instruction, so that the attribute modification of the 2nd profile is operation attribute according to second instruction by the eUICC Or configuration attribute and operation attribute.

54. equipment according to claim 52, it is characterised in that:

The receiving unit, is also used to receive the subscription request of user, and the subscription request includes the ID of the eUICC；

55. equipment according to claim 54, which is characterized in that the subscription request further includes the ID of the PM.

56. equipment according to claim 52, which is characterized in that the receiving unit is specifically used for:

57. according to the described in any item equipment of claim 52 to 56, which is characterized in that the first message further includes the PM ID and the eUICC ID.

58. according to the described in any item equipment of claim 52 to 56, which is characterized in that the second message further includes key Information, so that the profile configurator is using the transmission for updating profile described in the cryptographic key protection.

59. according to the described in any item equipment of claim 52 to 56, which is characterized in that the information of the first profile further includes The size of the free memory of PD where first profile, the second message further include the first profile The size of the free memory of the PD at place, so that the profile configurator is where determining the first profile When the size of the free memory of PD installs the update profile enough, the update profile is downloaded to by institute by the PM It states in the PD of eUICC.

60. according to the described in any item equipment of claim 52 to 56, which is characterized in that the information of the first profile is also It comprises at least one of the following: