CN109788468A

CN109788468A - A kind of configuration switching method of embedded smart card, device and system

Info

Publication number: CN109788468A
Application number: CN201711105220.0A
Authority: CN
Inventors: 吴传喜
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2017-11-10
Filing date: 2017-11-10
Publication date: 2019-05-21

Abstract

The invention discloses a kind of configuration switching methods of embedded smart card, device and system.This method, comprising: long-range signing management platform receives the request of operator's allocation activation, to activate the embedded mark smart card eUICC of target to be currently at targeted carrier's configuration of deactivation status；Long-range signing management platform determines the mark of targeted carrier's configuration according to IMSI, ICCID and operator's config set of target eUICC；Long-range signing management platform sends activation instruction according to mark, to target eUICC.Realize operator's config set of IMSI, ICCID and target eUICC, determine the mark of targeted carrier's configuration, operator to be downloaded and installed on target eUICC before one configures in the enterprising line activating of target eUICC, to simplify the process that the configuration of eUICC switches, and then improve the efficiency of the configuration switching of eUICC.

Description

Configuration switching method, device and system of embedded smart card

Technical Field

The present invention relates to communication technologies, and in particular, to a configuration switching method, apparatus, and system for an embedded smart card.

Background

Along with popularization of the internet of things technology, more and more terminals become internet of things terminals, that is, more and more circuit boards of the terminals or direct packages such as communication modules are directly welded with smart card chips, for example, an embedded smart card (eUICC) embedded in an automobile, a smart meter and monitoring equipment can become the internet of things terminal. The eUICC can be an authentication tool for accessing to an operator network and a secure carrier for carrying various application programs (APP, hereinafter referred to as application) and data as a terminal of the internet of things.

In the application scenario of the internet of things, since the smart card usually exists in the terminal of the internet of things or is welded in the terminal, the issuing place and the using place of the smart card are difficult to determine when the terminal of the internet of things is produced. On the other hand, the eUICC applied to the services of the internet of things has not only a new UICC card form or a form of user terminal equipment, but also includes an overall system established for supporting such a new form of equipment, wherein activation, deactivation management, user relationship management, remote management, service management and security management of the eUICC may all be indispensable functions in the system. In this application scenario, a service of activating an internet of things smart card when the internet of things smart card is used and replacing an operation configuration document after the activation is considered, where the operation configuration document is a set of files and data related to a certain mobile operator in the eUICC, generally, in an internet of things environment, one eUICC card may have configuration documents of multiple operators, and each operator configuration document corresponds to a unique user identification number. In the prior art, dynamic management of configuration files, such as downloading, deleting, and replacing, may be implemented by Over-the-Air technology (OTA for short).

However, since the eUICC card has a limited space and a limited configuration file is locally stored, when an operator switches, the configuration file needs to be downloaded again, so that after a user deletes data of an operator on the eUICC, when the user wants to use the data of the operator again, all related data need to be redistributed according to the newly used user, thereby causing a complicated flow of configuration switching of the embedded smart card, and further causing a low efficiency of configuration switching of the embedded smart card.

Disclosure of Invention

In order to solve the technical problem, the invention provides a configuration switching method, a device and a system of an embedded smart card, which are used for solving the problem of low configuration switching efficiency of the embedded smart card.

In order to achieve the purpose of the invention, the invention provides a configuration switching method of a cloud embedded smart card, which comprises the following steps:

the method comprises the steps that a remote subscription management platform receives an operator configuration activation request to activate target operator configuration of a target embedded intelligent card eUICC which is in a deactivated state at present, wherein the operator configuration activation request carries an International Mobile Subscriber Identity (IMSI) corresponding to the target eUICC and an identity Integrated Circuit Card (ICCID) of the target eUICC;

the remote subscription management platform determines an identifier of the target operator configuration according to the IMSI, the ICCID and an operator configuration set of a target eUICC, wherein the operator configuration set of the target eUICC comprises operator configurations of a deactivation state and an activation state of the target eUICC stored in the remote subscription management platform;

and the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier, wherein the activation instruction comprises an instruction for activating the configuration operation of the target operator.

Further, before the remote subscription management platform determines the identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, the method further includes:

the remote signing management platform determines whether switching is allowed between the operator configuration in the current activation state and the target operator configuration according to a policy rule;

if not, the remote signing management platform terminates the process and informs the relevant operator;

if so, executing the remote subscription management platform to determine the configured identifier of the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

Further, after the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier, the method further includes:

and the remote subscription management platform receives an operator configuration switching operation result sent by the target eUICC.

Further, after the remote subscription management platform receives the operator configuration switching operation result sent by the target eUICC, the method further includes:

and when the operator configuration switching operation result is successful switching, the remote subscription management platform updates the information set field of the target eUICC so as to update the state configured by the target operator to activated and update the state information configured by the operator in the activated state to deactivated.

Further, when the operator configuration handover operation result is that the handover is successful, the remote subscription management platform updates the information set field of the target eUICC so as to update the state configured by the target operator to activated, and after updating the state configured by the operator that is originally in the activated state to deactivated, the method further includes:

and the remote subscription management platform sends operator configuration switching operation result information to the operator to which the target operator configuration belongs and the operator to which the operator configuration originally in the activated state belongs, wherein the operator configuration switching operation result information at least comprises the IMSI and the ICCID.

the remote subscription management platform receives an operator configuration deactivation request sent by the operator, wherein the operator configuration deactivation request carries the IMSI and the ICCID of the target eUICC;

the remote subscription management platform determines a configuration identifier configured by the target operator according to the IMSI, the ICCID and an operator configuration set of the target eUICC;

and the remote subscription management platform sends a deactivation instruction to the target eUICC according to the configuration identifier, wherein the deactivation instruction comprises an operation of instructing the target eUICC to deactivate the configuration of the target operator.

Further, before the remote subscription management platform determines the configuration identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, the method further includes:

the remote subscription management platform determines whether to allow the target operator configuration to be deactivated according to a policy rule;

if not, the remote signing management platform terminates the process and sends an error notice to the operator;

if so, executing the remote subscription management platform to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

Further, after the remote subscription management platform sends a deactivation instruction to the target eUICC according to the configuration identifier, the method further includes:

and the remote subscription management platform receives an operator configuration deactivation operation result sent by the target eUICC.

Further, after the remote subscription management platform receives the target operator configuration deactivation operation result sent by the target eUICC, the method further includes:

and when the operator configuration deactivation operation result is successful deactivation, the remote subscription management platform updates the target eUICC information set field so as to update the state information configured by the target operator to deactivation.

Further, when the operator configuration deactivation operation result is that the deactivation is successful, the remote subscription management platform updates the target eUICC information set field, so that after the status information configured by the target operator is updated to be deactivated, the method further includes:

and the remote subscription management platform sends an operator configuration deactivation operation result message to an operator to which the target operator configuration belongs, wherein the operator configuration deactivation operation result message at least comprises the IMSI and the ICCID.

and performing bidirectional verification between the remote subscription management platform and the target eUICC.

The invention also provides a configuration switching method of the embedded smart card, which comprises the following steps:

the target eUICC receives an activation instruction sent by a remote subscription management platform, wherein the activation instruction comprises an instruction for activating the configuration operation of the target operator;

and the target eUICC activates the configuration of the target operator according to the activation instruction.

Further, after the target eUICC receives the activation instruction sent by the remote subscription management platform, the method further includes:

and the target eUICC acquires the encrypted target operator configuration with a preset coding format from a cloud server.

Further, after the target eUICC activates the target operator configuration according to the activation instruction, the method further includes:

the target eUICC encodes and encrypts the currently activated operator configuration to obtain the encoded and encrypted operator configuration;

and the target eUICC stores the coded and encrypted operator configuration to the cloud server.

and the target eUICC stores the target operator configuration in a cloud server.

Further, the target eUICC stores the target operator configuration in the cloud server, including:

the target eUICC encodes and encrypts the target operator configuration to obtain an encoded and encrypted operator configuration;

and the target eUICC sends the encoded and encrypted target operator configuration to the cloud server so as to store the target operator configuration in the cloud server.

the target eUICC sends a reading instruction to the cloud server, wherein the reading instruction comprises an instruction for reading the operator configuration which is currently in the deactivation state, and the deactivation operator configuration comprises the operator configuration which is stored in the cloud server and is activated and is currently in the deactivation state before the target eUICC;

the target eUICC and the cloud server perform mutual verification operation;

when the target eUICC and the cloud server pass mutual verification operation, the target eUICC receives the operator configuration which is sent by the cloud server and is in the current deactivation state.

the target eUICC determines whether the activated target operator configuration can be connected to a target operator;

and if the target eUICC cannot be connected to the target operator, the target eUICC acquires the currently activated operator configuration from the cloud server and activates the currently activated operator configuration.

Further, before the target eUICC stores the target operator configuration in the cloud server, the method further includes:

the target eUICC receives a deactivation instruction sent by the remote subscription management platform, wherein the deactivation instruction comprises an operation of instructing the target eUICC to deactivate the target operator configuration.

and the target eUICC carries out installation after decrypting and encoding the encrypted target operator configuration with the preset encoding format through a configuration information decoder.

the target eUICC determines whether switching is allowed between the operator configuration in the current activation state and the target operator configuration according to a policy rule;

when determining that switching is allowed between the operator configuration currently in the activated state and the target operator configuration, deactivating the currently activated operator configuration by the target eUICC, and activating the target operator configuration.

Further, when it is determined that handover is allowed between the currently activated operator configuration and the target operator configuration, deactivating the currently activated operator configuration by the target eUICC, and after activating the target operator configuration, the method further includes:

the target eUICC sends a successful opening message to the terminal, wherein the successful opening message comprises that the terminal accesses an operator network associated with the target operator configuration by using the IMSI, and the terminal comprises equipment provided with the target eUICC;

and the target eUICC sends an operator configuration switching operation result to the remote subscription management platform.

and performing bidirectional verification between the target eUICC and the remote subscription management platform.

Further, after the target eUICC receives the deactivation instruction sent by the remote subscription management platform, the method further includes:

the target eUICC determines whether to allow the target operator configuration to be deactivated according to policy rules;

if not, the target eUICC terminates the flow and informs the remote signing management platform;

if so, the target eUICC determines to execute the operation of the deactivated target operator configuration, and activates the operator configuration in the deactivated state currently.

and the target eUICC sends an operator configuration deactivation operation result to the remote subscription management platform.

Further, the activating the operator configuration currently in the deactivated state includes:

the target eUICC decrypts, adds codes and installs the operator configuration in the current deactivation state to be activated

The invention also provides a remote signing management platform device, which comprises:

a receiving module, configured to receive an operator configuration activation request to activate a target operator configuration of a target embedded smart card eUICC in a deactivated state at present, where the operator configuration activation request carries an international mobile subscriber identity IMSI corresponding to the target eUICC and an identity integrated circuit card identity ICCID of the target eUICC;

a processing module, configured to determine, according to the IMSI, the ICCID, and an operator configuration set of a target eUICC, an identifier of the target operator configuration, where the operator configuration set of the target eUICC includes operator configurations of a deactivated state and an activated state of the target eUICC stored in the remote subscription management platform;

a sending module, configured to send an activation instruction to the target eUICC according to the identifier, where the activation instruction includes an instruction to activate the target operator configuration operation.

Further, the processing module is further configured to determine, according to a policy rule, whether to allow handover between the operator configuration currently in the active state and the target operator configuration; if not, the process is terminated, and a relevant operator is informed; and if so, executing the operator configuration set according to the IMSI, the ICCID and the target eUICC, and determining the configured identifier of the target operator.

Further, the receiving module is also used for

And receiving an operator configuration switching operation result sent by the target eUICC.

Further, the processing module is further configured to, when the operator configuration handover operation result is that the handover is successful, update the information set field of the target eUICC so as to update the state configured by the target operator to activated, and update the state information configured by the operator that is originally in the activated state to deactivated.

Further, the sending module is further configured to send an operator configuration switching operation result message to the target operator, where the operator configuration switching operation result message includes at least the IMSI and the ICCID, and the operator configuration switching operation result message is configured by the target operator and an operator configured by an operator in an original activated state.

Further, the receiving module is further configured to receive an operator configuration deactivation request sent by the operator, where the operator configuration deactivation request carries the IMSI and the ICCID of the target eUICC;

the processing module is further configured to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID, and an operator configuration set of the target eUICC;

the sending module is further configured to send a deactivation indication to the target eUICC according to the configuration identifier, where the deactivation indication includes an indication that the target eUICC performs an operation of deactivating the target operator configuration.

Further, the processing module is further configured to determine whether to allow the target operator configuration to be deactivated according to policy rules; if not, the remote subscription management platform terminates the process, and if an error notification is sent to the operator, the remote subscription management platform is executed to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

Further, the receiving module is further configured to receive an operator configuration deactivation operation result sent by the target eUICC.

Further, the receiving module is further configured to update the target eUICC information set field when the operator configuration deactivation operation result is that deactivation is successful, so that the state information configured by the target operator is updated to be deactivated.

Further, the sending module is further configured to send an operator configuration deactivation operation result message to an operator to which the target operator configuration belongs, where the operator configuration deactivation operation result message at least includes the IMSI and the ICCID.

Further, the processing module is further configured to perform bidirectional authentication with the target eUICC.

The invention also provides a target embedded type intelligent card eUICC device, which comprises:

a receiving module, configured to receive an activation instruction sent by a remote subscription management platform, where the activation instruction includes an instruction to activate the target operator configuration operation;

and the processing module is used for activating the configuration of the target operator according to the activation instruction.

Further, the receiving module is further configured to obtain the encrypted target operator configuration with the preset encoding format from a cloud server.

Further, the processing module is further configured to encode and encrypt the currently activated operator configuration, and obtain an encoded and encrypted operator configuration; and storing the coded and encrypted operator configuration to the cloud server.

Further, the processing module is further configured to store the target operator configuration in a cloud server.

Further, the processing module is further configured to encode and encrypt the target operator configuration, and obtain an operator configuration after encoding and encryption;

the sending module is configured to send the encoded and encrypted target operator configuration to the cloud server, so as to store the target operator configuration in the cloud server.

Further, the sending module is further configured to send a reading instruction to the cloud server, where the reading instruction includes an instruction to read the operator configuration currently in the deactivated state, and the deactivated operator configuration includes an operator configuration stored in the cloud server and activated in the deactivated state before the target eUICC;

the processing module is further used for performing mutual authentication operation with the cloud server;

the receiving module is further configured to receive, by the target eUICC, the operator configuration in the current deactivated state sent by the cloud server when the target eUICC and the cloud server pass mutual authentication operation.

Further, the processing module is further configured to determine whether the activated target operator configuration can be connected to a target operator;

the receiving module is further configured to, if the target eUICC cannot connect to the target operator, obtain the currently activated operator configuration from the cloud server, and activate the currently activated operator configuration.

Further, the receiving module is configured to receive a deactivation indication sent by the remote subscription management platform, where the deactivation indication includes an instruction of instructing the target eUICC to perform an operation of deactivating provisioning of the target operator.

Further, the processing module is further configured to decrypt and encode the encrypted target operator configuration with the preset encoding format through a configuration information decoder, and then install the target operator configuration.

Further, the processing module is further configured to determine, according to a policy rule, whether to allow handover between the operator configuration currently in the active state and the target operator configuration; when determining that switching is allowed between the operator configuration currently in the activated state and the target operator configuration, deactivating the currently activated operator configuration by the target eUICC, and activating the target operator configuration.

Further, the sending module is further configured to send a successful provisioning message to the terminal, where the successful provisioning message includes that the terminal accesses an operator network associated with the target operator configuration by using the IMSI, and the terminal includes a device provided with the target eUICC; and sending an operator configuration switching operation result to the remote subscription management platform.

Further, the processing module is further configured to perform bidirectional authentication with the remote subscription management platform.

Further, the processing module is further configured to determine whether to allow the target operator configuration to be deactivated according to policy rules; if not, the flow is terminated, and the remote signing management platform is informed; and if so, determining to execute the deactivated operation of the target operator configuration and activating the operator configuration in the current deactivated state.

Further, the sending module is further configured to send an operator configuration deactivation operation result to the remote subscription management platform by the target eUICC.

Further, the processing module is further configured to decrypt, add a code, and install, by the target eUICC, the operator configuration currently in the deactivated state to be activated.

The invention also provides a configuration switching system of the embedded smart card, which comprises: the remote subscription management platform device according to any one of the above items, and the target embedded smart card eUICC device according to any one of the above items.

The invention provides a method, a device and a system for switching configuration of an embedded smart card.A remote contract signing management platform receives an operator configuration activation request for activating target operator configuration of a target embedded standard smart card eUICC in a deactivated state at present, wherein the operator configuration activation request carries an International Mobile Subscriber Identity (IMSI) corresponding to the target eUICC and an identity Integrated Circuit Card Identity (ICCID) of the target eUICC; the remote subscription management platform determines an identifier of the target operator configuration according to the IMSI, the ICCID and an operator configuration set of a target eUICC, wherein the operator configuration set of the target eUICC comprises operator configurations of a deactivation state and an activation state of the target eUICC stored in the remote subscription management platform; and the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier, wherein the activation instruction comprises an instruction for activating the configuration operation of the target operator. The method and the device realize the IMSI, the ICCID and the operator configuration set of the target eUICC, and determine the identifier configured by the target operator, so that an operator which is downloaded and installed on the target eUICC before is configured on the target eUICC to be activated, the configuration switching process of the eUICC is simplified, and the configuration switching efficiency of the eUICC is improved.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

Drawings

The accompanying drawings are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the example serve to explain the principles of the invention and not to limit the invention.

FIG. 1 is a flowchart illustrating an embodiment of a configuration switching method for an embedded smart card according to the present invention;

FIG. 2 is a flowchart illustrating a configuration switching method for an embedded smart card according to a second embodiment of the present invention;

FIG. 3 is an interaction diagram of a configuration switching method of an embedded smart card according to three embodiments of the present invention

FIG. 4 is an interaction diagram of a configuration switching method for an embedded smart card according to a fourth embodiment of the present invention;

fig. 5 is a schematic structural diagram of a remote subscription management platform device according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of an eUICC device of a target embedded smart card according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a target embedded smart card eUICC apparatus according to a second embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that the embodiments and features of the embodiments in the present application may be arbitrarily combined with each other without conflict.

The steps illustrated in the flow charts of the figures may be performed in a computer system such as a set of computer-executable instructions. Also, while a logical order is shown in the flow diagrams, in some cases, the steps shown or described may be performed in an order different than here.

The configuration switching method of the embedded intelligent card provided by the embodiment of the invention can be particularly applied to the configuration switching of the embedded intelligent card. The configuration switching method of the embedded smart card provided in this embodiment may be executed by a configuration switching device of the embedded smart card, and the configuration switching device of the embedded smart card may be integrated in a physical machine or separately configured, where the configuration switching device of the embedded smart card may be implemented in a software and/or hardware manner. The following describes in detail a configuration switching method and apparatus for an embedded smart card provided in this embodiment.

It should be noted that, with the popularization of the cloud computing technology, more and more enterprises and platforms sign and move services to the cloud environment, and the deployment of the enterprise and platform services on the cloud is larger and more popular by utilizing the advantages of the cloud environment resources, such as high issuing speed and low resource cost. In the embodiment of the present invention, the deactivated operator configuration in the target eUICC is stored in the cloud server, and the target eUICC can obtain the deactivated operator configuration from the cloud server, so as to perform an activation operation.

FIG. 1 is a flowchart illustrating an embodiment of a configuration switching method for an embedded smart card according to the present invention; as shown in fig. 1, an execution subject of this embodiment may be a remote subscription management platform, and the configuration switching method for an embedded smart card provided by the present invention includes:

step 101, a remote subscription management platform receives an operator configuration activation request to activate a target operator configuration of a target embedded smart card eUICC in a current deactivation state.

It should be noted that the present embodiment is used to activate an operator profile that has been downloaded and installed onto the target eUICC. The step can be initiated by a user or a home operator configured by an operator to be activated, wherein the client can be a paying party, a legal responsible person or an entity, the target eUICC is an UICC which is not easy to contact or replace, cannot be deleted or replaced in the terminal, and can safely change the subscription; the operator configuration includes a collection of file structures, data, and applications deployed or present on the eUICC.

In this embodiment, the operator configuration activation request carries an International Mobile Subscriber Identity (IMSI) corresponding to the target eUICC and an Integrated Circuit Card Identity (ICCID) of the target eUICC, where the ICCID may be stored in a unique Number of UICC hardware on the UICC and is engraved on the hardware. The ICCID may conform to the E.118 definition of ITU-T. The IMSI can be a unique identifier issued by a mobile operator and owned by a Subscriber Identity Module (SIM) application that supports device access to networks and use of services.

Specifically, the eUICC needs to be activated before first use, and the remote subscription management platform activates the operator configuration currently in a deactivated state on the eUICC, so that files and applications in the operator configuration can be selected through an interface between the terminal and the eUICC. The operator configuration activation request refers to a request for the eUICC to acquire and store a target operator configuration, where the target operator configuration is used to provide the first communication service for the device. Specifically, the activation process needs to be completed by setting the communication device to be activated with the eUICC by using an International Mobile subscriber identity Number (IMSI) corresponding to the eUICC to be activated.

And step 102, the remote subscription management platform determines the configured identifier of the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

In this embodiment, the operator configuration set of the target eUICC includes operator configurations of a deactivated state and an activated state of the target eUICC stored in the remote subscription management platform;

and 103, the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier.

The activation indication in this embodiment comprises an indication to activate the target operator configuration operation. Specifically, the remote subscription management platform indicates that the eUICC that carries the target operator configuration and the eUICC that carries the operator configuration associated with the target operator configuration can execute the activation procedure. Wherein activating the target operator configuration comprises: its files and/or applications are selected through the eUICC-terminal interface.

Optionally, the remote subscription management platform indicates that the UICC carrying the target operator configuration and the UICC carrying the operator configuration associated with the target operator configuration may perform the activation procedure.

In this embodiment, an operator configuration activation request is received through a remote subscription management platform to activate a target operator configuration of a target embedded smart card eUICC in a deactivated state at present, where the operator configuration activation request carries an international mobile subscriber identity IMSI corresponding to the target eUICC and an identity integrated circuit card identity ICCID of the target eUICC; the remote subscription management platform determines an identifier of the target operator configuration according to the IMSI, the ICCID and an operator configuration set of a target eUICC, wherein the operator configuration set of the target eUICC comprises operator configurations of a deactivation state and an activation state of the target eUICC stored in the remote subscription management platform; and the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier, wherein the activation instruction comprises an instruction for activating the configuration operation of the target operator. The method and the device realize the IMSI, the ICCID and the operator configuration set of the target eUICC, and determine the identifier configured by the target operator, so that an operator which is downloaded and installed on the target eUICC before is configured on the target eUICC to be activated, the configuration switching process of the eUICC is simplified, and the configuration switching efficiency of the eUICC is improved.

Further, on the basis of the foregoing embodiment, before the remote subscription management platform determines, according to the IMSI, the ICCID, and an operator configuration set of a target eUICC, an identifier configured by the target operator, the method further includes:

if yes, the remote subscription management platform determines the identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, that is, step 102.

Specifically, the policy rule setting refers to setting, by the MNO and the remote subscription management platform, an execution condition of a specific command or a relevant operation of configuration management. Policy rules are actions and conditions that define policy enforcement.

Policy enforcement refers to the remote subscription management platform and the eUICC OS evaluating the enforcement conditions of the policy rules and the decision to enforce the policy rules based on the evaluation commands.

The policy control refers to effective management of the policy rules of the remote subscription management platform, or verifying whether the policy rules of the MNO are executed correctly.

For example, a policy rule may include at least the following three cases:

first case, SIM Lock

The user currently signs up with operator a (MNO a) and the bound SIM card cannot be transferred within six months, but the user forgets to sign up with MNO a and tries to sign up with operator B (MNO B) during SIM card binding, MNO B queries whether it is allowed to install its configuration Profile into eUICC card, but PCF defined by MNO a Profile prohibits its installation of MNO bpprofile, MNO B obtains that eUICC card is still locked information due to signing up with MNO a due to SIM card locking defined in PCF. Thereby determining that no handover is allowed between the operator configuration currently in the active state and the target operator configuration.

Second case, there is a cooperative agreement between operators

The SIM card of the user is not locked, the terminal is owned by the user, the operator configuration Profile activated on the eUICC card comes from an operator A (MNO A), the user wants to transfer the network to an operator B (MNO B), and sends a network transfer request to the MNO B, and due to the fact that a cooperation agreement is signed between the MNO A and the MNO B, the operator configuration MNO AProfile in the current activation state and the target operator configuration MNO B Profile are determined to allow switching. The PCF principle and the execution mechanism are used for realizing that after network switching is realized, the activated operator Profile in the user eUICC card belongs to the MNO B, the user can use MNO B network service, and meanwhile, the PCF actuator in the user embedded SIM card eUICC executes the PCF principle of the MNO B.

Third case, no cooperation agreement exists between operators

The method comprises the steps that the currently activated operator configuration Profile in a user eUICC card belongs to an MNO A, a user SIM card is not locked, a terminal is owned by the user, the user wants to transfer a network to an operator C (MNO C), and sends a network transfer request to the MNO C, and the MNO C does not obtain authorization to install MNO CPRofile in the user eUICC card because a cooperation agreement is not signed between the MNO A and the MNO C, and then the fact that switching is not allowed between the operator configuration in the current activation state and the target operator configuration is determined.

Further, on the basis of the foregoing embodiment, after the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier, the method further includes:

Specifically, the operator configuration switching operation result may include information of whether the target eUICC switches the operator configuration currently in the active state to the target operator configuration successfully.

Further, on the basis of the foregoing embodiment, after the remote subscription management platform receives an operator configuration switching operation result sent by the target eUICC, the method further includes:

Preferably, on the basis of the foregoing embodiment, when the operator configuration handover operation result is that the handover is successful, the remote subscription management platform updates the information set field of the target eUICC so as to update the state configured by the target operator to activated, and after updating the state configured by the operator that is originally in the activated state to deactivated, the method further includes:

The above flow of the present embodiment needs to have the following conditions before being executed:

A. currently, a target operator is configured on a target eUICC and is in a deactivated state, and another operator is configured on the eUICC and is currently in an activated state;

B. the subscription related to the target operator configuration has been activated in the operator network;

C. the IMSI of the target eUICC, the ID of the remote subscription management platform responsible for managing the target operator configuration, and the elccid configured by the target operator are known to the operator.

Optionally, on the basis of the foregoing embodiment, before the determining, by the remote subscription management platform, an identifier configured by the target operator according to the IMSI, the ICCID, and an operator configuration set of the target eUICC, the method further includes:

Specifically, the remote subscription management platform indicates to carry the eUICC configured by the target operator and the eUICC configured by the operator associated with the target operator, executes a deactivation procedure of the target operator configuration and the operator configuration associated with the target operator configuration, and activates other operator configurations on the eUICC in a deactivated state.

The deactivation in this embodiment means that, according to an operator or a user request, the remote subscription management platform deactivates the operator configuration currently in an activated state on the eUICC, so that files and applications in the operator configuration may not be selected through an interface between the terminal and the eUICC.

Further, on the basis of the foregoing embodiment, before the determining, by the remote subscription management platform, the configuration identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, the method further includes:

It should be noted that the policy rules are similar to the above policy rules, and are not described again here.

Further, on the basis of the foregoing embodiment, after the remote subscription management platform sends a deactivation instruction to the target eUICC according to the configuration identifier, the method further includes:

Specifically, the operator configuration deactivation operation result includes information on whether the target eUICC successfully deactivates the target operator configuration.

Further, on the basis of the foregoing embodiment, after the remote subscription management platform receives the operator configuration deactivation operation result sent by the target eUICC, the method further includes:

Further, on the basis of the foregoing embodiment, when the operator configuration deactivation operation result is that deactivation is successful, the remote subscription management platform updates the target eUICC information set field, so that after the status information configured by the target operator is updated to be deactivated, the method further includes:

FIG. 2 is a flowchart illustrating a configuration switching method for an embedded smart card according to a second embodiment of the present invention; as shown in fig. 2, an execution subject of this embodiment may be a target eUICC, and the method for switching configuration of an embedded smart card provided in the present invention includes:

step 201, the target eUICC receives an activation instruction sent by the remote subscription management platform.

In this embodiment, the activation instruction includes an instruction to activate the target operator configuration operation.

Step 202, the target eUICC activates the target operator configuration according to the activation instruction.

For example, the target eUICC deactivates a currently activated operator configuration, and activates the target operator configuration.

In this embodiment, a target eUICC receives an activation instruction sent by a remote subscription management platform, where the activation instruction includes an instruction to activate the target operator configuration operation; and the target eUICC activates the configuration of the target operator according to the activation instruction. . The target eUICC is enabled to activate the target operator configuration, the configuration switching process of the eUICC is simplified, and the configuration switching efficiency of the eUICC is improved.

On the basis of the foregoing embodiment, after the target eUICC receives the activation instruction sent by the remote subscription management platform, the method further includes:

Further, on the basis of the foregoing embodiment, after the target eUICC activates the target operator configuration according to the activation instruction, the method further includes:

It should be noted that the currently activated operator profile refers to an operator profile that is activated on the target eUICC when the currently activated operator profile is ready to be activated but the target operator profile is not yet activated.

Specifically, the currently activated operator configuration is coded and encrypted in a preset format by using a configuration information encoder, and the coded and encrypted operator configuration is sent to a cloud server, wherein the preset format is coded and can be ASN.1, Unicode and UTF-8.

and the target eUICC stores the target operator configuration in the cloud server.

Specifically, the target eUICC sends an instruction for storing the configuration information of the target operator to the cloud server; then, the target eUICC receives verification information sent by the cloud server, and then the target eUICC sends a confirmation to the cloud server; and after the cloud server passes the verification, the target operator configuration code and the encryption are sent to the cloud server.

Further, in the foregoing embodiment, the storing, by the target eUICC, the target operator configuration in the cloud server includes:

and the target eUICC sends the coded and encrypted operator configuration to the cloud server.

For example, a target operator configuration currently used is generated into a coded configuration according to a preset coding format through a coder, and the coded configuration is encrypted through a preset encryption algorithm to obtain the coded and encrypted operator configuration.

In this embodiment, by storing the deactivated target operator configuration in the cloud server, the process of acquiring the target operator configuration can be simplified when the target operator configuration is activated next time.

Further, in the above embodiment, after the target eUICC receives the activation instruction sent by the remote subscription management platform, the method further includes:

the target eUICC and the cloud server perform mutual verification operation;

Specifically, the target eUICC sends a reading instruction to the cloud server; then, the target eUICC receives verification information sent by the cloud server, and the target eUICC sends a confirmation to the cloud server at the same time; and then, the target eUICC receives confirmation information of the cloud server, and meanwhile, the target eUICC receives the operator configuration which is sent by the cloud server and is currently in the deactivated state, and stores the operator configuration in the eUICC of the corresponding terminal for waiting for activation.

Optionally, in the above embodiment, after the target eUICC activates the target operator configuration according to the activation instruction, the method further includes:

determining whether the activated target operator configuration can be connected to a target operator;

and if the target operator can not be connected, acquiring the currently activated operator configuration from the cloud server, and activating the currently activated operator configuration.

Specifically, whether the target operator configuration information can be connected to the target operator after being activated is judged, if the target operator configuration information cannot be connected to the target operator, the original operator configuration, namely the currently activated operator configuration, is obtained from the cloud server, the currently activated operator configuration is configured by using a configuration information decoder, and the currently activated operator configuration is activated after being decoded and decrypted according to a preset encoding format.

Further, on the basis of the foregoing embodiment, after the target eUICC receives the activation instruction sent by the remote subscription management platform, the method further includes:

For example, a configuration information decoder is used to configure a target operator, such as configuration information and configuration data, and generate and install operator configuration information according to a preset encoding format;

Further, on the basis of the foregoing embodiment, before the target eUICC stores the target operator configuration in the cloud server, the method further includes:

and the target eUICC receives a deactivation instruction sent by the remote subscription management platform.

In this embodiment, the deactivation indication includes an instruction to instruct the target eUICC to perform an operation of deactivating the target operator configuration.

Further, in the foregoing embodiment, the activating the operator configuration currently in the deactivated state includes:

and the target eUICC decrypts, adds codes and installs the operator configuration in the current deactivation state so as to be activated.

Specifically, for the operator configuration currently in the deactivated state, which is stored in the eUICC and awaiting activation, before activation, the operator configuration currently in the deactivated state needs to be decrypted by a decoder and decoded according to a preset encoding format to generate an installable operator configuration.

Further, in the above embodiment, when it is determined that handover is allowed between the currently activated operator profile and the target operator profile, the target eUICC deactivates the currently activated operator profile, and after activating the target operator profile, the method further includes:

further, in the above embodiment, after the target eUICC activates the target operator configuration according to the activation instruction, the method further includes:

Further, in the above embodiment, before the receiving, by the target eUICC, the activation instruction sent by the remote subscription management platform, the method further includes:

Further, in the above embodiment, after the target eUICC receives the deactivation instruction sent by the remote subscription management platform, the method further includes:

and if so, the target eUICC executes the deactivated operation of the target operator configuration and activates the operator configuration in the current deactivated state.

The policy rules in this embodiment are similar to those in the above embodiments, and are not described herein again.

Further, in the above embodiment, after the target eUICC performs an operation of deactivating the target operator configuration and activates the operator configuration currently in a deactivated state, the method further includes:

FIG. 3 is an interaction diagram of a configuration switching method of an embedded smart card according to a third embodiment of the present invention; as shown in fig. 3, the applicable scenarios of the embodiment of the present invention are as follows: the method for switching the configuration of the embedded intelligent card comprises the following steps of:

step 301, the operator sends an operator configuration activation request to the remote subscription management platform.

In this embodiment, the operator configuration activation request includes a request for activating a target operator configuration of a target embedded smart card eUICC that is currently in a deactivated state.

It should be noted that the execution subject triggering the remote subscription management platform to receive the configuration activation request sent by the operator may be: using a terminal provided with an eUICC, or an operator configuration to be activated, namely configuring an affiliated operator by a target operator.

Step 302, the remote subscription management platform determines whether the operator configuration in the current activation state and the target operator configuration are allowed to be switched according to the policy rule.

Specifically, if not, step 303 is executed, that is, the remote subscription management platform terminates the process and notifies the relevant operator;

if yes, go to step 304, that is, the remote subscription management platform determines the identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC.

Step 303, the remote subscription management platform terminates the process and informs the relevant operators;

and step 304, the remote subscription management platform determines the configured identifier of the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

And 305, performing bidirectional verification between the remote subscription management platform and the target eUICC.

And step 306, the remote subscription management platform sends an activation instruction to the target eUICC according to the identifier.

Step 307, the target eUICC determines whether to allow switching between the operator configuration currently in the activated state and the target operator configuration according to the policy rule.

Specifically, step 308 is executed, that is, the eUICC sends an error notification to the remote subscription management platform, and meanwhile, the process is terminated;

if so, executing step 309, that is, the target eUICC deactivates the currently activated operator configuration, and activates the target operator configuration;

and step 308, the target eUICC sends an error notice to the remote subscription management platform.

In this embodiment, the eUICC terminates the handover procedure while the target eUICC sends an error notification to the remote subscription management platform.

Step 309, the target eUICC deactivates the currently activated operator configuration, and activates the target operator configuration.

Step 310, the target eUICC obtains the encrypted target operator configuration with the preset encoding format from the cloud server.

And 311, the target eUICC decrypts and codes the encrypted target operator configuration with the preset coding format through the configuration information decoder, and then installs the target eUICC.

And step 312, the target eUICC encodes and encrypts the currently activated operator configuration to obtain the encoded and encrypted operator configuration.

Step 313, the target eUICC stores the encoded and encrypted operator configuration to the cloud server.

Specifically, the target eUICC encodes and encrypts the currently activated operator configuration to obtain an encoded and encrypted operator configuration; then, the target eUICC stores the encoded and encrypted operator configuration to the cloud server.

Further, the target eUICC sends an opening success message to the terminal.

Specifically, the provisioning success message includes that the terminal accesses an operator network associated with the target operator configuration by using the IMSI, and the terminal includes a device provided with the target eUICC;

and step 314, the target eUICC sends the operator configuration switching operation result to the remote subscription management platform.

Step 315, the remote subscription management platform sends an operator configuration deactivation operation result message to the operator to which the target operator configuration belongs.

In this embodiment, the operator configuration deactivation operation result message at least includes the IMSI and the ICCID.

It should be noted that, after step 309, the method may further include:

FIG. 4 is an interaction diagram of a configuration switching method for an embedded smart card according to a fourth embodiment of the present invention; as shown in fig. 4, the applicable scenarios of the embodiment of the present invention are as follows: deactivating the target operator configuration of which the current state is the activated state on the target eUICC, wherein the configuration switching method of the embedded smart card provided by the invention comprises the following steps:

step 401, the remote subscription management platform receives an operator configuration deactivation request sent by an operator.

In this embodiment, the operator configuration deactivation request carries the IMSI and the ICCID of the target eUICC.

Step 402, the remote subscription management platform determines whether to allow the target operator configuration to be deactivated according to policy rules.

Specifically, if not, step 403 is executed, the remote subscription management platform terminates the process, and notifies the relevant operator;

if yes, executing step 404, and the remote subscription management platform determining a configuration identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC.

Step 403, the remote subscription management platform terminates the process and sends an error notification to the operator;

step 404, the remote subscription management platform determines a configuration identifier configured by the target operator according to the IMSI, the ICCID, and the operator configuration set of the target eUICC.

And step 405, performing bidirectional verification between the target eUICC and the remote subscription management platform.

And step 406, the remote subscription management platform sends a deactivation instruction to the target eUICC according to the configuration identifier.

Step 407, the target eUICC determines whether to allow the target operator configuration to be deactivated according to the policy rule.

If not, executing step 408, that is, the target eUICC terminates the process and informs the remote subscription management platform that the target operator configuration cannot be deactivated;

if yes, step 409 is executed, that is, the target eUICC executes the operation of deactivating the target operator configuration, and activates the operator configuration currently in a deactivated state.

Step 408, the target eUICC informs the remote subscription management platform that the target operator configuration cannot be deactivated.

In step 409, the target eUICC determines to execute the operation that the target operator configuration is deactivated, and activates the operator configuration currently in a deactivated state.

And step 410, the target eUICC encodes and encrypts the target operator configuration to obtain the encoded and encrypted operator configuration.

Step 411, the target eUICC sends the encoded and encrypted target operator configuration to the cloud server.

Specifically, the target eUICC stores the target operator configuration in the cloud server.

And step 412, the target eUICC sends a reading instruction to the cloud server.

In this embodiment, the instruction to read includes an instruction to read the operator configuration currently in the deactivated state, where the deactivated operator configuration includes an operator configuration stored in the cloud server and activated in the deactivated state before the target eUICC;

step 413, the target eUICC and the cloud server perform mutual authentication operation;

step 414, when the target eUICC and the cloud server pass the mutual authentication operation, the target eUICC receives the operator configuration which is currently in the deactivated state and sent by the cloud server.

Step 415, the target eUICC decrypts, adds a code, and installs the operator configuration currently in the deactivated state to be activated.

Further, the target eUICC sends an opening success message to the terminal.

And step 416, the target eUICC sends an operator configuration switching operation result to the remote subscription management platform.

Step 417, the remote subscription management platform sends an operator configuration deactivation operation result message to the operator to which the target operator configuration belongs.

Fig. 5 is a schematic structural diagram of a remote subscription management platform device according to an embodiment of the present invention; as shown in fig. 5, the remote subscription management platform apparatus provided by the present invention includes: a receiving module 51, a processing module 52 and a transmitting module 53. Wherein,

a receiving module 51, configured to receive an operator configuration activation request to activate a target operator configuration of a target embedded smart card eUICC in a deactivated state, where the operator configuration activation request carries an international mobile subscriber identity IMSI corresponding to the target eUICC and an identity integrated circuit card identity ICCID of the target eUICC;

a processing module 52, configured to determine, according to the IMSI, the ICCID, and an operator configuration set of a target eUICC, an identifier of the target operator configuration, where the operator configuration set of the target eUICC includes operator configurations of a deactivated state and an activated state of the target eUICC stored in the remote subscription management platform;

a sending module 53, configured to send an activation instruction to the target eUICC according to the identifier, where the activation instruction includes an instruction to activate the target operator configuration operation.

Further, on the basis of the foregoing embodiment, the processing module 52 is further configured to determine, according to a policy rule, whether to allow handover between the operator configuration currently in the active state and the target operator configuration; if not, the process is terminated, and a relevant operator is informed; and if so, executing the operator configuration set according to the IMSI, the ICCID and the target eUICC, and determining the configured identifier of the target operator.

Further, on the basis of the foregoing embodiment, the receiving module 51 is further configured to receive an operator configuration switching operation result sent by the target eUICC.

Further, on the basis of the foregoing embodiment, the processing module 52 is further configured to update the information set field of the target eUICC when the operator configuration handover operation result is that the handover is successful, so that the state configured by the target operator is updated to be activated, and the state information configured by the operator that is originally in the activated state is updated to be deactivated.

Further, on the basis of the foregoing embodiment, the sending module 53 is further configured to send an operator configuration handover operation result message to the target operator, where the operator configuration handover operation result message includes at least the IMSI and the ICCID, and the operator configuration handover operation result message is configured by the target operator and an operator configured by an operator originally in an active state.

Further, on the basis of the foregoing embodiment, the receiving module 51 is further configured to receive an operator configuration deactivation request sent by the operator, where the operator configuration deactivation request carries the IMSI and the ICCID of the target eUICC;

the processing module 52 is further configured to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID, and an operator configuration set of the target eUICC;

the sending module 53 is further configured to send a deactivation indication to the target eUICC according to the configuration identifier, where the deactivation indication includes an indication that the target eUICC performs an operation of deactivating the target operator configuration.

Further, on the basis of the foregoing embodiment, the processing module 52 is further configured to determine whether to allow the target operator configuration to be deactivated according to a policy rule; if not, the remote subscription management platform terminates the process, and if an error notification is sent to the operator, the remote subscription management platform is executed to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

Further, on the basis of the foregoing embodiment, the receiving module 51 is further configured to receive an operator configuration deactivation operation result sent by the target eUICC.

Further, on the basis of the foregoing embodiment, the receiving module 51 is further configured to update the field of the target eUICC information set when the operator configuration deactivation operation result is that deactivation is successful, so that the state information configured by the target operator is updated to be deactivation.

Further, on the basis of the foregoing embodiment, the sending module 51 is further configured to send an operator configuration deactivation operation result message to an operator to which the target operator configuration belongs, where the operator configuration deactivation operation result message includes at least the IMSI and the ICCID.

Further, on the basis of the above embodiment, the processing module 52 is further configured to perform bidirectional authentication with the target eUICC.

In this embodiment, the IMSI, the ICCID, and the operator configuration set of the target eUICC are realized, and the identifier configured by the target operator is determined, so that an operator that has been downloaded and installed on the target eUICC before is configured on the target eUICC for activation, thereby simplifying the configuration switching process of the eUICC, and further improving the configuration switching efficiency of the eUICC.

FIG. 6 is a schematic structural diagram of an eUICC device of a target embedded smart card according to an embodiment of the present invention; as shown in fig. 6, the target embedded smart card eUICC apparatus provided in the present invention includes: a receiving module 61 and a processing module 62. Wherein,

a receiving module 61, configured to receive an activation instruction sent by a remote subscription management platform, where the activation instruction includes an instruction to activate the target operator configuration operation;

and a processing module 62, configured to activate the target operator configuration according to the activation indication.

In this embodiment, a target eUICC receives an activation instruction sent by a remote subscription management platform, where the activation instruction includes an instruction to activate the target operator configuration operation; and the target eUICC activates the configuration of the target operator according to the activation instruction. The configuration of the target operator is activated, the configuration switching process of the eUICC is simplified, and the configuration switching efficiency of the eUICC is improved.

FIG. 7 is a schematic structural diagram of a second embodiment of a target embedded smart card eUICC device according to the present invention; as shown in fig. 7, the target embedded smart card eUICC apparatus provided in the present invention, based on the foregoing embodiment, may further include: a sending module 63;

further, on the basis of the foregoing embodiment, the receiving module 61 is further configured to obtain the target operator configuration which is encrypted and has a preset encoding format from a cloud server.

Further, on the basis of the above embodiment, the processing module 62 is further configured to decrypt and encode the encrypted target operator configuration with the preset encoding format through the configuration information decoder, and then install the target operator configuration.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to encode and encrypt the currently activated operator configuration, so as to obtain an encoded and encrypted operator configuration; and storing the coded and encrypted operator configuration to the cloud server.

Further, on the basis of the above embodiment, the processing module 62 is further configured to determine whether the activated target operator configuration can be connected to a target operator; and if the target operator can not be connected, acquiring the currently activated operator configuration from the cloud server, and activating the currently activated operator configuration.

Further, on the basis of the foregoing embodiment, the receiving module 61 is further configured to receive a deactivation indication sent by the remote subscription management platform, where the deactivation indication includes an instruction that the target eUICC performs an operation of deactivating the target operator configuration.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to store the target operator configuration in the cloud server.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to encode and encrypt the target operator configuration, and obtain an operator configuration after encoding and encrypting;

the sending module 63 is further configured to send the encoded and encrypted target operator configuration to the cloud server, so as to store the target operator configuration in the cloud server.

Further, on the basis of the foregoing embodiment, the sending module 63 is further configured to send a reading instruction to the cloud server, where the reading instruction includes an instruction to read the operator configuration currently in the deactivated state, and the deactivated operator configuration includes an operator configuration stored in the cloud server and activated in the deactivated state before the target eUICC;

the processing module 62 is further configured to perform mutual authentication operation with the cloud server;

the receiving module 61 is further configured to receive, when the target eUICC and the cloud server pass mutual authentication operations, the operator configuration that is currently in a deactivated state and is sent by the cloud server.

Further, on the basis of the foregoing embodiment, the sending module 63 is further configured to send a successful provisioning message to the terminal, where the successful provisioning message includes that the terminal accesses an operator network associated with the target operator configuration by using the IMSI, and the terminal includes a device provided with the target eUICC; and sending an operator configuration switching operation result to the remote subscription management platform.

Further, on the basis of the above embodiment, the method is further configured to perform bidirectional authentication with the remote subscription management platform.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to determine whether to allow the target operator configuration to be deactivated according to a policy rule; if not, the flow is terminated, and the remote signing management platform is informed; and if so, determining to execute the deactivated operation of the target operator configuration and activating the operator configuration in the current deactivated state.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to determine, according to a policy rule, whether to allow handover between the operator configuration currently in the active state and the target operator configuration; when determining that switching is allowed between the operator configuration currently in the activated state and the target operator configuration, deactivating the currently activated operator configuration by the target eUICC, and activating the target operator configuration.

Further, on the basis of the foregoing embodiment, the sending module 63 is further configured to send an operator configuration deactivation operation result to the remote subscription management platform by the target eUICC.

Further, on the basis of the foregoing embodiment, the processing module 62 is further configured to decrypt, add a code, and install, by the target eUICC, the operator configuration currently in the deactivated state to be activated.

The invention also provides a configuration switching system of the embedded smart card, which comprises: the remote subscription management platform device and the target embedded smart card eUICC device are described above.

Although the embodiments of the present invention have been described above, the above description is only for the convenience of understanding the present invention, and is not intended to limit the present invention. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

Claims

1. A configuration switching method of an embedded smart card comprises the following steps:

2. The method of claim 1, wherein before the remote subscription management platform determining the identity of the target operator configuration from the IMSI, the ICCID, and a set of operator configurations for the target eUICC, further comprising:

3. The method of claim 2, wherein after the remote subscription management platform sends an activation indication to the target eUICC according to the identifier, the method further comprises:

4. The method of claim 3, wherein after receiving the operator configuration switching operation result sent by the target eUICC, the remote subscription management platform further comprises:

5. The method according to claim 4, wherein when the operator configuration handover operation result is a handover success, the remote subscription management platform updates an information set field of the target eUICC so as to update the state configured by the target operator to activated, and updates the state configured by the operator that is originally in the activated state to deactivated, further comprising:

6. The method according to any one of claims 1 to 5, wherein after the remote subscription management platform sends an activation indication to the target eUICC according to the identifier, the method further comprises:

7. The method of claim 6, wherein before the remote subscription management platform determining the configuration identifier of the target operator configuration according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, the method further comprises:

8. The method of claim 7, wherein after the remote subscription management platform sends a deactivation indication to the target eUICC according to the configuration identifier, the method further comprises:

9. The method of claim 8, wherein after the remote subscription management platform receives the target operator configuration deactivation operation result sent by the target eUICC, the method further comprises:

10. The method of claim 9, wherein when the operator configuration deactivation operation results in successful deactivation, the remote subscription management platform updates the target eUICC information set field, so that after the status information configured by the target operator is updated to deactivation, the method further comprises:

11. The method of any of claims 1-10, wherein before determining the configuration identifier of the target operator configuration by the remote subscription management platform according to the IMSI, the ICCID, and the operator configuration set of the target eUICC, the method further comprises:

12. A configuration switching method of an embedded smart card comprises the following steps:

13. The method of claim 12, wherein after the target eUICC receives the activation indication sent by the remote subscription management platform, the method further comprises:

14. The method of claim 12 or 13, wherein after the target eUICC activates the target operator configuration according to the activation indication, the method further comprises:

15. The method of claim 14, wherein after the target eUICC activates the target operator configuration according to the activation indication, the method further comprises:

16. The method of claim 15, wherein the target eUICC stores the target operator configuration at the cloud server, comprising:

17. The method according to any of claims 12-16, wherein after the target eUICC receives the activation indication sent by the remote subscription management platform, the method further comprises:

the target eUICC and the cloud server perform mutual verification operation;

18. The method of any of claims 12-17, wherein after the target eUICC activates the target operator configuration according to the activation indication, the method further comprises:

19. The method of any one of claims 15-18, wherein the target eUICC stores the target operator configuration before the cloud server, further comprising:

20. The method of claim 19, wherein after the target eUICC receives the activation indication sent by the remote subscription management platform, the method further comprises:

21. The method of claims 12-20, wherein after the target eUICC receives the activation indication sent by the remote subscription management platform, the method further comprises:

22. The method of any of claims 12-21, wherein upon determining that a handover is allowed between the currently active operator profile and the target operator profile, the target eUICC deactivates the currently active operator profile and activates the target operator profile, further comprising:

23. The method of claim 22, wherein after the target eUICC receives the activation indication sent by the remote subscription management platform, the method further comprises:

24. The method of claim 23, wherein after the target eUICC receives the deactivation indication sent by the remote subscription management platform, the method further comprises:

25. The method of claim 24, wherein after the target eUICC activates the target operator configuration according to the activation indication, the method further comprises:

26. The method of claim 25, wherein activating the operator configuration currently in a deactivated state comprises:

27. A remote subscription management platform apparatus, comprising:

28. The apparatus of claim 27, wherein the processing module is further configured to determine whether to allow handover between the currently active operator configuration and the target operator configuration according to policy rules; if not, the process is terminated, and a relevant operator is informed; and if so, executing the operator configuration set according to the IMSI, the ICCID and the target eUICC, and determining the configured identifier of the target operator.

29. The apparatus of claim 28, wherein the receiving module is further configured to receive an operator configuration handover operation result sent by the target eUICC.

30. The apparatus of claim 29, wherein the processing module is further configured to, when the operator configuration handover operation result is that handover is successful, update an information set field of the target eUICC so as to update a status configured by the target operator to activated, and update status information configured by an operator that is originally in an activated status to deactivated.

31. The apparatus of claim 30, wherein the sending module is further configured to send an operator configured handover result message to the target operator, the operator configured handover result message including at least the IMSI and the ICCID, and an operator configured by an original activated operator.

32. The apparatus according to any of claims 27-31, wherein the receiving module is further configured to receive a carrier configuration deactivation request sent by the carrier, where the IMSI and the ICCID of the target eUICC are carried in the carrier configuration deactivation request;

33. The apparatus of claim 32, wherein the processing module is further configured to determine whether to allow the target operator configuration to be deactivated according to policy rules; if not, the remote subscription management platform terminates the process, and if an error notification is sent to the operator, the remote subscription management platform is executed to determine a configuration identifier configured by the target operator according to the IMSI, the ICCID and the operator configuration set of the target eUICC.

34. The apparatus of claim 33, wherein the receiving module is further configured to receive an operator configuration deactivation operation result sent by the target eUICC.

35. The apparatus of claim 34, wherein the receiving module is further configured to update the target eUICC information set field to update the status information configured by the target operator to be deactivated when the operator configuration deactivation operation results in successful deactivation.

36. The apparatus of claim 35, wherein the sending module is further configured to send an operator configuration deactivation operation result message to an operator to which the target operator configuration belongs, and wherein the operator configuration deactivation operation result message at least includes the IMSI and the ICCID.

37. The apparatus of any one of claims 27-36, wherein the processing module is further configured to perform bidirectional authentication with the target eUICC.

38. A target embedded smart card eUICC device, comprising:

39. The apparatus of claim 38, wherein the receiving module is further configured to obtain the target carrier configuration encrypted with a preset encoding format from a cloud server.

40. The apparatus according to claim 38 or 39, wherein the processing module is further configured to encode and encrypt the currently activated operator configuration, to obtain an encoded and encrypted operator configuration; and storing the coded and encrypted operator configuration to the cloud server.

41. The apparatus of claim 40, wherein the processing module is further configured to store the target carrier configuration at a cloud server.

42. The method of claim 41, wherein the processing module is further configured to encode and encrypt the target operator configuration, and obtain an encoded and encrypted operator configuration;

43. The apparatus of any one of claims 38-42, wherein the sending module is further configured to send a read instruction to the cloud server, the read instruction including an instruction to read the currently deactivated carrier configuration, the deactivated carrier configuration including a carrier configuration stored at the cloud server that has been activated before the target eUICC and is now in a deactivated state;

44. The apparatus of any of claims 38-43, wherein the processing module is further configured to determine whether the activated target operator configuration can be connected to a target operator;

45. The apparatus of any one of claims 39-44, wherein the means for receiving is configured to receive a deactivation indication sent by the remote subscription management platform, and wherein the deactivation indication comprises an instruction to the target eUICC to perform an operation of deactivating the target operator.

46. The apparatus according to any of claims 38-45, wherein the processing module is further configured to decrypt and encode the encrypted target carrier configuration with a predetermined encoding format by a configuration information decoder, and then install the encrypted target carrier configuration.

47. The apparatus according to any of claims 38-46, wherein the processing module is further configured to determine whether a handover is allowed between the currently active operator configuration and the target operator configuration according to policy rules; when determining that switching is allowed between the operator configuration currently in the activated state and the target operator configuration, deactivating the currently activated operator configuration by the target eUICC, and activating the target operator configuration.

48. The apparatus according to any of claims 38-47, wherein the sending module is further configured to send a provisioning success message to the terminal, where the provisioning success message includes that the terminal accesses an operator network associated with the target operator configuration using the IMSI, and the terminal includes a device provided with the target eUICC; and sending an operator configuration switching operation result to the remote subscription management platform.

49. The apparatus of claim 48, wherein the processing module is further configured to perform bi-directional authentication with the remote subscription management platform.

50. The apparatus of claim 49, wherein the processing module is further configured to determine whether to allow the target operator configuration to be deactivated according to policy rules; if not, the flow is terminated, and the remote signing management platform is informed; and if so, determining to execute the deactivated operation of the target operator configuration and activating the operator configuration in the current deactivated state.

51. The apparatus of claim 50, wherein the sending module is further configured to send a result of an operator configuration deactivation operation to the remote subscription management platform by the target eUICC.

52. The apparatus of claim 51, wherein the processing module is further configured to decrypt, code, and install, by the target eUICC, the currently deactivated carrier configuration to be activated.

53. A configuration switching system for an embedded smart card, comprising: a remote subscription management platform assembly as recited in any of claims 27-37, and a target embedded smart card eUICC assembly as recited in any of claims 38-52.