CN115334087A

CN115334087A - Control method suitable for eUICC cloud LPA service

Info

Publication number: CN115334087A
Application number: CN202210971253.8A
Authority: CN
Inventors: 赵刚; 耿炎; 闫楠
Original assignee: Xinan Weizhong Shanghai Microelectronics Technology Co ltd
Current assignee: Xinan Weizhong Shanghai Microelectronics Technology Co ltd
Priority date: 2022-06-21
Filing date: 2022-06-21
Publication date: 2022-11-11

Abstract

The application relates to a control method suitable for an eUICC cloud LPA service, the LPA function processing is placed in a cloud end and used as a uniform service inlet, and equipment equipped with an eUICC can realize the management of the eUICC only by accessing the cloud end LPA, so that the control of the eUICC cloud end LPA is realized. The Internet of things equipment is deployed in an LPAc mode, so that the code amount of an equipment end can be reduced, and the requirement of the equipment on a storage space is lowered; the LPA platformization can be simple and applicable to different manufacturers and different equipment environments, so that the product can be more standardized, and repeated development is reduced; the task deployment function of the LPAc enables a user to be helped to record multiple pieces of credentials and records in the platform, so that the history record viewing and maintenance are more convenient.

Description

Control method suitable for eUICC cloud LPA service

Technical Field

The disclosure relates to the technical field of eUICC (universal integrated circuit card) internet of things, in particular to a control method, a device and a control system suitable for an eUICC cloud LPA service.

Background

GSMA (GSM Association) organizes the Consumer eUICC (Embedded Universal Integrated Circuit Card) scheme defined in the SGP22 standard, which can support the management of multiple profiles (Combination of a file structure, data and applications to be provided on, or present on, an eUICC ]) (Profile enable, profile disable, profile delete, profile over the air, etc.), all of which are controlled by LPA (Local Profile Association). The LPA is an application program, which can perform corresponding operations by converting management instructions collected from the UI end and over-the-air instructions received from the network into ISO7816 instruction streams recognizable by the eUICC.

From the SGP22 standard perspective, LPAs are divided into two categories, LPAd and LPAe, depending on the implementation. The LPAd means that an LPA program is installed in a device, and the LPA in the device transmits an ISO7816 instruction to the eUICC through a device interface (such as AT command and Android API); the LPAe means that the LPA program is installed in the eUICC, and the inside of the eUICC processes various management instructions.

The LPAd is a mode adopted by most conventional Consumer eUICC schemes, needs each equipment provider to develop and configure its own LPAd according to its own different equipment operating environments, and needs to complete various data processing conversions, for example, when the eUICC needs to trigger a Profile downloading process, the LPAd needs to process http requests, asn.1 data parsing, data judgment, APDU assembly, APDU parsing and the like, and these operations are too complex for the equipment provider; meanwhile, from the viewpoint of the operating environment and the storage space of the device, part of the devices cannot complete the integration of the program.

The LPAe is generally realized inside the eUICC in a manner that a Card manufacturer develops COS (Card OS) or Java Applet, which avoids integration of LPA by equipment manufacturers, but due to the limitation of a smart Card protocol, the LPAe needs to use Card Application Toolkit when realizing functions, which is an SIM Card interactive menu, is not friendly enough when interacting data with the outside, and has a certain dependency relationship with an operator data short message service.

Disclosure of Invention

In order to solve the above problems, the present application provides a control method, an apparatus, and a control system suitable for an cloud LPA service of an eUICC, where LPA function processing is placed in a cloud to serve as a uniform service entry, and a device equipped with the eUICC only needs to access the cloud LPA to realize the management of the eUICC, and we call this cloud LPA scheme to be LPAc.

On one hand, the application provides a control method applicable to an eUICC cloud LPA service, which comprises the following steps:

s100, obtaining an eSIM downloading credential from SM-DP +, synchronizing to a cloud end LPA service, and deploying a task on the cloud end LPA service according to the eSIM downloading credential;

s200, an access request for downloading Profile data is sent to the cloud LPA service through eUICC equipment;

s300, the cloud LPA service receives the access request, initiates a Profile data downloading request to the SM-DP + according to the access request, obtains Profile data and returns the Profile data to the eUICC equipment;

s400, the eUICC equipment receives the Profile data and performs data processing, and feeds back a processing result to the cloud end LPA service.

As an optional implementation of the present application, optionally, in step S100, acquiring an eSIM download credential from an SM-DP + and synchronizing to a cloud LPA service, and deploying a task on the cloud LPA service according to the eSIM download credential includes:

s101, obtaining an eSIM downloading credential from the SM-DP + order downloading task, wherein the eSIM downloading credential comprises a target SM-DP + address and an activation code;

s102, performing task deployment on the cloud end LPA service according to the eSIM downloading credential;

s103, an identification EID of the eUICC equipment is appointed on the cloud LPA service, and a task to be downloaded of the eUICC equipment is created and obtained.

As an optional embodiment of the present application, optionally, in step S200, the initiating, by the eUICC device, an access request for downloading Profile data to the cloud LPA service includes:

s201, presetting an LPAc access program, and configuring the LPAc access program on the eUICC equipment;

s202, according to a preset access rule, an access request for downloading Profile data is initiated to the cloud LPA service through the LPAC access program;

s203, simultaneously uploading the identifier EID of the eUICC equipment to the cloud end LPA service.

As an optional implementation of the present application, optionally, in step S300, the receiving, by the cloud LPA service, the access request, and initiating a Profile data download request to the SM-DP + according to the access request, obtaining Profile data and returning the Profile data to the eUICC device includes:

s301, the cloud LPA service receives an access request of the eUICC equipment, and inquires and judges whether a task to be downloaded of the eUICC equipment exists according to the identification EID;

s302, if a task to be downloaded of the eUICC equipment exists, the cloud LPA service finds a corresponding task to be downloaded according to an identification EID of the eUICC equipment, takes out the eSIM downloading credential in the task to be downloaded, and initiates a Profile data downloading request to a target SM-DP + according to the target SM-DP + address and an activation code of the eSIM downloading credential;

s303, if the access request does not exist, continuing to wait for the access request.

As an optional implementation of the present application, optionally, in step S300, the cloud LPA service receives the access request, and initiates a Profile data download request to the SM-DP + according to the access request, obtains Profile data, and returns the Profile data to the eUICC device, further including:

s310, the target SM-DP + receives a downloading request of the cloud end LPA service and verifies the downloading request;

s320, verifying to be qualified, inquiring and matching to obtain Profile data required by the eUICC equipment according to the eSIM downloading credential;

s330, according to a preset data coding rule, the Profile data is coded, asn.1 data are obtained and sent to the cloud LPA service.

As an optional implementation of the present application, optionally, in step S300, the cloud LPA service receives the access request, and initiates a Profile data download request to the SM-DP + according to the access request, so as to obtain Profile data and return the Profile data to the eUICC device, further including:

s311, the cloud LPA service receives the Asn.1 data issued by the target SM-DP +;

s321, resolving the Asn.1 data into APDU instruction stream according to GSMA specification;

and S331, sending the APDU instruction stream to the eUICC equipment according to a preset communication protocol.

As an optional implementation of the present application, optionally, in step S400, the eUICC device receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service, including:

s401, the eUICC equipment receives an APDU instruction stream sent by the cloud LPA service;

s402, according to the SGP22 data processing mode, internally processing the APDU instruction stream, and returning response data of the eUICC equipment;

and S403, sending the response data to the cloud LPA service according to a preset communication protocol.

As an optional implementation of the present application, optionally, in step S400, the eUICC device receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service, further including:

s410, the cloud LPA service receives and judges whether the eUICC equipment completes a downloading task or not according to the response data;

s420, if the eUICC equipment finishes the downloading task, changing the task cycle to be finished through the cloud LPA service, and ending the process;

s430, if the eUICC device does not finish the downloading task, forwarding the response data to the target SM-DP + according to the GSMA specification, and executing the step S310 circularly.

In another aspect of the present application, an apparatus for implementing the control method applicable to the eUICC cloud LPA service in any one of claims 1 to 8 is provided, including:

the task deployment function module is used for acquiring an eSIM (subscriber identity module) download credential from the SM-DP +, synchronizing the eSIM download credential to a cloud end LPA (line port access) service, and deploying a task on the cloud end LPA service according to the eSIM download credential;

the access function module is used for initiating an access request for downloading Profile data to the cloud LPA service through the eUICC equipment;

the data downloading function module is used for receiving the access request through the cloud end LPA service, initiating a Profile data downloading request to the SM-DP + according to the access request, obtaining Profile data and returning the Profile data to the eUICC equipment;

and the data processing function module is used for receiving the Profile data through the eUICC equipment, performing data processing and feeding back a processing result to the cloud end LPA service.

In another aspect of the present application, a control system is further provided, including:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to execute the executable instructions to implement the control method applicable to the eUICC cloud LPA service in any one of claims 1 to 8.

The invention has the technical effects that:

according to the method, the eSIM downloading credential is obtained from SM-DP +, and is synchronized to cloud LPA service, and a task is deployed on the cloud LPA service according to the eSIM downloading credential; initiating an access request for downloading Profile data to the cloud LPA service through eUICC equipment; the cloud end LPA service receives the access request, initiates a Profile data downloading request to the SM-DP + according to the access request, obtains Profile data and returns the Profile data to the eUICC equipment; and the eUICC equipment receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service. The device with the eUICC can be managed by only accessing the cloud LPA to realize the cloud LPA control of the eUICC as a unified service entrance by placing the LPA functional processing at the cloud.

The Internet of things equipment is deployed in an LPAc mode, so that the code amount of the equipment end can be reduced, and the requirement of the equipment on storage space is lowered; the LPA platform can be simple and applicable to different manufacturers and different equipment environments, so that the product is more standardized, and repeated development is reduced; the task deployment function of the LPAC enables a user to be helped to record multiple certificates and records in a platform, and therefore historical records can be checked and maintained more conveniently.

Other features and aspects of the present disclosure will become apparent from the following detailed description of exemplary embodiments, which proceeds with reference to the accompanying drawings.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate exemplary embodiments, features, and aspects of the disclosure and, together with the description, serve to explain the principles of the disclosure.

FIG. 1 is a schematic diagram of an application system of the present invention;

fig. 2 is a schematic implementation flow diagram of a control method applicable to the cloud LPA service of the eUICC in embodiment 1 of the present invention.

Detailed Description

Various exemplary embodiments, features and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. In the drawings, like reference numbers indicate functionally identical or similar elements. While the various aspects of the embodiments are presented in drawings, the drawings are not necessarily drawn to scale unless specifically indicated.

The word "exemplary" is used exclusively herein to mean "serving as an example, embodiment, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments.

Furthermore, in the following detailed description, numerous specific details are set forth in order to provide a better understanding of the present disclosure. It will be understood by those skilled in the art that the present disclosure may be practiced without some of these specific details. In some instances, methods, means, elements and circuits that are well known to those skilled in the art have not been described in detail so as not to obscure the subject matter of the present disclosure.

Example 1

In this embodiment, the Cloud LPA service is LPAc, that is, the LPA program is arranged in the Cloud. And through LPAc, the equipment supporting the eUICC downloads data from an SM-DP + operator, and the eUICC cloud control of the equipment of the Internet of things is realized.

As shown in fig. 1, the present invention independently deploys the LPAd originally placed in the Device into a server LPAc, i.e., a cloud LPA service, and communicates through http or TCP protocol; after receiving a request of equipment, the LPAc searches a corresponding task in a task management module at the first time; the data conversion and analysis after the task is found are completed by the data conversion board, the functions of the part are completely performed according to the working flow of the LPAd, the data obtained from the SM-DP + is processed and then responded to the eUICC terminal equipment, and the whole downloading process can be completed through multiple rounds of interaction.

Wherein, above-mentioned LPAC device includes task management function plate, data conversion function plate, equipment interface plate:

a. the task management function board comprises the functions of task deployment, task life cycle management, task query and the like, and through the functions, a user can perform task deployment and task query on a platform and can switch tasks to different life cycle states at different execution stages;

b. the data conversion function plate comprises Asn.1 data analysis, segmented Bound Profile Package (SBPP) data segmentation and ES8+ assembly. The LPAc firstly resolves Asn.1 data of the data requested to be downloaded from the SM-DP + and sends the data to the eUICC equipment in a segmentation mode according to SBPP data specified by SGP22, and the data collected from the eUICC equipment end is forwarded to the SM-DP + after being spliced into Asn.1 format by ES8+ format specified by SGP 22;

c. the device interface board provides an Http or TCP interface to interact with the device, through which the device can access the LPAc.

As shown in fig. 2, in one aspect, the present application provides a control method for an eUICC cloud LPA service, which includes the following steps:

s200, an access request for downloading Profile data is sent to the cloud LPA service through the eUICC equipment;

s300, the cloud end LPA service receives the access request, initiates a Profile data downloading request to the SM-DP + according to the access request, obtains Profile data and returns the Profile data to the eUICC equipment;

The implementation and technical principles of steps S100-S400 will be described in detail below.

In this embodiment, a user first needs to order a download task on the SM-DP + (Subscription Manager Data Preparation) platform of the operator; deploying the unique eUICC identification EID to which the task belongs and the download credential required by the task implementation on an SM-DP + platform through a synchronous interface; and waiting for the eUICC equipment to trigger the uploading of the request task. Specifically, the user purchases an eSIM code number from an SM-DP + operator through various approaches, and obtains a download credential, where the download credential generally includes key data such as a target SM-DP + address (server URL) and an activation code, and the data is used to match a target SM-DP + according to an identifier EID of the eUICC device, and perform security verification.

The user can perform task deployment on the obtained download credential on the LPAc, the unique identifier EID of the eUICC needs to be appointed during the deployment, and after the task is established, the eSIM equipment has a task to be downloaded on the LPAc.

s202, according to a preset access rule, an access request for downloading Profile data is initiated to the cloud end LPA service through the LPAC access program;

The user uses a set program on the eUICC terminal equipment to access an LPAc inquiry interface, and when inquiring, the user uploads an eUICC unique identifier EID in the equipment as a parameter, and even if the LPAc has no task, the user can automatically request at regular time. Therefore, the preset access rule may be accessed by the user according to the access program, or may be accessed by automatic timing, and the embodiment is not limited. The method is used for initiating access on the eUICC terminal equipment, namely starting to request the downloading of the Profile data. The LPAc will start the download process upon request.

When the program of the eUICC terminal device accesses the LPAc query interface, the LPAc will query whether there is a task to be downloaded of the eUICC terminal device currently after receiving the EID from the eUICC terminal device:

1) If the task to be downloaded does not exist, continuing to wait for an access request from the eUICC terminal equipment;

2) If the task exists, finding a corresponding task to be downloaded according to the identification EID of the eUICC equipment, taking out the eSIM downloading credential in the task to be downloaded, and initiating a Profile data downloading request to a target SM-DP + according to the target SM-DP + address and the activation code of the eSIM downloading credential. Specifically, the LPAc finds the corresponding download task according to the EID, takes out the download credential, including the target SM-DP + address and the activation code, and initiates a download request for applying the Profile to download data to the target SM-DP + according to the indication.

And the target operator SM-DP + verifies the downloading request, verifies the activation code and other security certifications, and sends the Profile related data required by the eUICC equipment after the verification is qualified.

In the present place, in order to facilitate the LPAc to parse the obtained Profile Data into an APDU instruction stream according to the GSMA specification, the obtained Profile Data is stored into a Json format according to the Data format of the GSMA specification, the Data fields of the device are all combined by using asn.1 codes, and after coding, the obtained asn.1 Data is obtained and sent to the cloud LPA service.

and S331, sending the APDU command stream to the eUICC equipment according to a preset communication protocol.

The LPAc may obtain a field in Json, analyze the obtained asn.1 data into an APDU instruction stream according to the GSMA specification (the specific conversion mode refers to the SGP22 specification, which is not described in detail herein), and transmit the APDU instruction stream to the eUICC Device through a protocol between the LPAc and the Device.

As an optional implementation of the present application, optionally, in step S400, the receiving, by the eUICC device, the Profile data and performing data processing, and feeding back a processing result to the cloud LPA service includes:

s401, the eUICC equipment receives an APDU instruction stream sent by the cloud end LPA service;

After receiving the command, the program at the end of the eUICC equipment directly sends the instruction stream to the eUICC equipment one by one; the eUICC equipment processes an APDU instruction stream from the LPAc, internal processing is carried out (data processing refers to the SGP 22), response data of the eUICC are returned after the processing is finished, and the obtained response data are transmitted to the LPAc through a protocol between the LPAc and the Device by a program at the equipment end and used for the LPAc to judge whether the downloading of the eUICC equipment is finished.

s420, if the eUICC equipment finishes the downloading task, changing the task period to be finished through the cloud end LPA service, and ending the process;

The LPAc judges an execution result according to the response data:

if a successful reply is received, the task identification is completed, and the downloading is completed;

if receiving the failure reply, carrying out failure identification according to different replies, and unfinishing downloading; at this time, the response data needs to be returned to the target SM-DP + operator for further data interaction. Specifically, the LPAc will continue to assemble the data obtained from the eUICC device into asn.1 format, and forward the data to the target SM-DP + operator according to the interface and parameter format specified by GSMA.

And the target SM-DP + can continuously carry out verification and issue the Profile related data required by the eUICC equipment according to the response data. The subsequent obtained data is encoded, sent to the LPAc, processed by the LPAc, and sent to the eUICC device, which specifically refers to the above step S310 and the following description, and is not described herein again.

Therefore, the Internet of things equipment is deployed in an LPAc mode, the code amount of the equipment end can be reduced, and the requirement of the equipment on the storage space is lowered; the LPA platformization can be simple and applicable to different manufacturers and different equipment environments, so that the product can be more standardized, and repeated development is reduced; the task deployment function of the LPAC enables a user to be helped to record multiple certificates and records in a platform, and therefore historical records can be checked and maintained more conveniently.

It should be noted that, although the access method and the data codec method are described as examples, those skilled in the art will understand that the disclosure should not be limited thereto. In fact, the user can flexibly set the data processing mode according to the actual application scene as long as the technical function of the application can be realized according to the technical method.

Example 2

Based on the implementation principle of embodiment 1, in another aspect of the present application, a device for implementing the control method applicable to the cloud LPA service of the eUICC in embodiment 1 is provided, where the device includes:

and the data processing function module is used for receiving the Profile data through the eUICC equipment, performing data processing, and feeding back a processing result to the cloud end LPA service.

It should be apparent to those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware related to instructions of a computer program, and the program can be stored in a computer readable storage medium, and when executed, the program can include the processes of the embodiments of the control methods described above. The modules or steps of the present invention described above can be implemented by a general purpose computing device, they can be centralized in a single computing device or distributed over a network of multiple computing devices, and they can alternatively be implemented by program code executable by a computing device, so that they can be stored in a storage device and executed by a computing device, or they can be separately fabricated into various integrated circuit modules, or multiple modules or steps in them can be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.

It will be understood by those skilled in the art that all or part of the processes of the methods of the above embodiments may be implemented by hardware related to instructions of a computer program, and the program may be stored in a computer readable storage medium, and when executed, may include the processes of the embodiments of the control methods as described above. The storage medium may be a magnetic disk, an optical disk, a Read-only memory (ROM), a Random Access Memory (RAM), a flash memory (FlashMemory), a hard disk (hard disk drive, abbreviated as HDD) or a Solid State Drive (SSD), etc.; the storage medium may also comprise a combination of memories of the kind described above.

Example 3

Still further, in another aspect of the present application, a control system is further provided, including:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to execute the executable instructions to implement the control method applicable to the cloud LPA service of the eUICC in embodiment 1.

Here, it should be noted that the number of processors may be one or more. Meanwhile, in the control system of the embodiment of the present disclosure, an input device and an output device may be further included. The processor, the memory, the input device, and the output device may be connected through a bus, or may be connected through another manner, which is not specifically limited herein.

The memory, as a computer-readable storage medium, may be used to store software programs, computer-executable programs, and various modules, such as: the embodiment of the disclosure provides a program or a module corresponding to a control method applicable to an eUICC cloud LPA service. The processor executes various functional applications of the control system and data processing by running software programs or modules stored in the memory.

The input device may be used to receive an input number or signal. Wherein the signal may be a key signal generated in connection with user settings and function control of the device/terminal/server. The output device may include a display device such as a display screen.

Having described embodiments of the present disclosure, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terminology used herein was chosen in order to best explain the principles of the embodiments, the practical application, or technical improvements to the technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A control method suitable for an eUICC cloud LPA service is characterized by comprising the following steps:

s400, the eUICC equipment receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service.

2. The method of claim 1, wherein in step S100, an eSIM download credential is obtained from SM-DP + and synchronized to a cloud LPA service, and a task is deployed on the cloud LPA service according to the eSIM download credential includes:

s102, performing task deployment on the cloud LPA service according to the eSIM downloading credential;

3. The method of claim 2, wherein in step S200, the initiating, by the eUICC device, an access request to download Profile data to the cloud LPA service comprises:

4. The method of claim 3, wherein in step S300, the cloud LPA service receives the access request, and initiates a Profile data download request to the SM-DP + according to the access request, obtains Profile data, and returns the Profile data to the eUICC device, and the method includes:

5. The method according to claim 4, wherein in step S300, the cloud LPA service receives the access request, and initiates a Profile data download request to the SM-DP + according to the access request, obtains Profile data, and returns the Profile data to the eUICC device, further comprising:

s320, verifying to be qualified, inquiring and matching to obtain Profile data required by the eUICC equipment according to the eSIM download credential;

6. The method of claim 5, wherein in step S300, the cloud LPA service receives the access request, and initiates a Profile data download request to the SM-DP + according to the access request, obtains Profile data, and returns the Profile data to the eUICC device, further comprising:

7. The method of claim 6, wherein in step S400, the eUICC device receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service, and the method includes:

8. The method of claim 7, wherein in step S400, the eUICC device receives the Profile data and performs data processing, and feeds back a processing result to the cloud LPA service, further comprising:

s430, if the eUICC equipment does not finish the downloading task, forwarding the response data to the target SM-DP + according to the GSMA specification, and circularly executing the step S310.

9. An apparatus for implementing the control method applicable to the eUICC cloud LPA service of any one of claims 1 to 8, wherein the apparatus comprises:

the task deployment function module is used for acquiring an eSIM download credential from the SM-DP +, synchronizing the eSIM download credential to a cloud LPA service, and deploying a task on the cloud LPA service according to the eSIM download credential;

the access module is used for initiating an access request for downloading Profile data to the cloud LPA service through the eUICC equipment;

10. A control system, comprising:

a processor;

a memory for storing processor-executable instructions;