CN115955667B

CN115955667B - Code number changing method and device based on eUICC and readable storage medium

Info

Publication number: CN115955667B
Application number: CN202211637577.4A
Authority: CN
Inventors: 韩玲; 安岗; 叶晓煜
Original assignee: China United Network Communications Group Co Ltd
Current assignee: China United Network Communications Group Co Ltd
Priority date: 2022-12-16
Filing date: 2022-12-16
Publication date: 2024-04-09
Anticipated expiration: 2042-12-16
Also published as: CN115955667A

Abstract

The invention provides a code number changing method and device based on an eUICC and a readable storage medium, wherein the method comprises the following steps: receiving a code number switching command sent by an initiator; transmitting a code number disabling command to the second SM-DP; receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, and setting a second PLMA and/or updating a second POL2 operation according to the code number disabling command response; transmitting a code number activation command to the first SM-DP; receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, and setting the first PLMA and/or updating the first POL2 operation according to the code number activation command response; and initiating a process of activating a first Profile corresponding to the first ICCID to an ISD-R in the eUICC. The method, the device and the readable storage medium can improve the success rate of the existing eUICC code number changing application landing.

Description

Code number changing method and device based on eUICC and readable storage medium

Technical Field

The invention relates to the technical field of euiccs, in particular to a code number changing method and device based on an eUICC and a readable storage medium.

Background

eUICC (Embedded Universal Integrated Circuit Card ) has become one of the important components of the 5G mobile communication system as a new authentication tool for accessing terminals to the operator network and as a security carrier for carrying various applications and data. Remote management of eUICC means breaking through traditional UICC (Universal Integrated Circuit Card ) linear flow management managed by operators, which may lead to operator migration, and the unprecedented complexity and flexibility of user relationship management of the operator has a significant impact on the existing security mechanism. The technical characteristics of the eUICC enable the internet of things application to be developed flexibly, typical application scenarios are as setting roaming numbers of the internet of vehicles application, and when vehicles roam to a new area, internet of vehicles service providers can apply for remote changing numbers in the vehicle machine to local numbers according to requirements, and the like.

Currently, multiple operators support eUICC worldwide, covering multiple countries and regions, wherein related services have been developed in China; however, in actual testing and application, because the eUICC technology involves multiple platform interactions, including a terminal system, a remote configuration management platform, and an operator system in each region, compared with a traditional SIM (Subscriber Identity Module, user identity module) card, services provided by eUICC service, such as on-line real-time on-line, off-line real-time on-line off-line, off-line, and the like, problems of multiple problems, slow positioning, and the like, may occur in an actual landing application of a standard eUICC technology process, and particularly, for the most common application requirement of code number change, the problems may occur in an actual landing, which may result in poor user experience and increased operation and maintenance difficulty.

Disclosure of Invention

The technical problem to be solved by the invention is to provide a code number changing method and device based on an eUICC and a readable storage medium aiming at the defects in the prior art, so as to improve the landing success rate of the eUICC code number changing application.

In a first aspect, the present invention provides a method for changing a code number based on an eUICC, which is applied to a secure routing network element SM-SR of a subscription management platform, and the method includes:

receiving a code number switching command sent by an initiator, wherein the code number switching command is used for requesting to change a second code number of a second integrated circuit card identification code ICCID in the eUICC into a first code number of a first ICCID;

sending a code number disabling command to the second subscription management platform data preparation SM-DP, so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID;

receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, and performing an operation of setting a second configuration file lifecycle management authorization PLMA and/or updating a second policy rule POL2 according to the code number disabling command response;

transmitting a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID;

Receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, and performing an operation of setting a first PLMA and/or updating a first POL2 according to the code number activation command response;

and initiating a process of activating a first Profile corresponding to the first ICCID to a root security domain ISD-R in the eUICC so as to replace a second code number of a second ICCID in the eUICC with a first code number of the first ICCID.

Further, after the receiving the code number switching command sent by the initiator, the method comprises the following steps of

The method further comprises the steps of:

judging whether a preset first initial condition is met according to the code number switching command, wherein the first initial condition comprises any one or more of the following:

the eUICC belongs to the SM-SR management;

a first Profile corresponding to the first ICCID is already loaded onto the eUICC;

the first Profile is in a disabled state;

and if the code number switching command does not meet the preset first initial condition, sending a command execution failure response to the initiator.

Further, the preparing the SM-DP to send the code number disabling command to the second subscription management platform data specifically includes:

checking whether a preset second initial condition is met, wherein the second initial condition comprises the following steps: a second Profile corresponding to the second ICCID is owned by a second operator that grants a second PLMA, and an initiator obtains the second PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a second POL2 of the second Profile allows this code number activation operation;

And if the preset second initial condition is not met, sending a code number disabling command to the second SM-DP.

Further, if the preset second initial condition is not satisfied, sending a code number disabling command to the second SM-DP, which specifically includes:

if the preset second initial condition is not met, sending a code number disabling command carrying an EUICC Identifier (EID), a second ICCID and an initiator identifier to the second SM-DP through an ES3 interface, so that the second SM-DP forwards the code number disabling command carrying the EID, the second ICCID and the initiator identifier to the second operator through an ES2 interface, and the second operator judges whether the code number disabling command is acceptable according to the EID, the second ICCID and the initiator identifier;

the receiving the code number disabling command response forwarded by the second SM-DP and sent by the second operator specifically includes:

and receiving the code number disabling command response forwarded by the second SM-DP, which is sent by the second operator when the code number disabling command is judged to be acceptable.

Further, the sending the code number activation command to the first SM-DP specifically includes:

checking whether a preset third initial condition is met, wherein the third initial condition comprises the following steps: a first Profile corresponding to the first ICCID is owned by a first operator granted to a first PLMA, and an initiator obtains the first PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a first POL2 of the first Profile allows this code number activation operation;

And if the preset third initial condition is not met, sending a code number activation command to the first SM-DP.

Further, if the preset third initial condition is not satisfied, sending a code number activation command to the first SM-DP, which specifically includes:

if the preset third initial condition is not met, sending a code number activation command carrying an EID, a first ICCID and an initiator identifier to the first SM-DP through an ES3 interface, so that the first SM-DP forwards the code number activation command carrying the EID, the first ICCID and the initiator identifier to the first operator through an ES2 interface, and the first operator judges whether the code number activation command is acceptable according to the EID, the first ICCID and the initiator identifier;

the receiving the code number activation command response forwarded by the first SM-DP and sent by the first operator specifically includes:

and receiving the code number disabling command response forwarded by the first SM-DP, which is sent by the first operator when the code number activating command is judged to be acceptable.

Further, after the process of activating the first Profile corresponding to the first ICCID is initiated to the root security domain ISD-R in the eUICC, the method further includes:

And if the second POL2 of the second Profile indicates that the second POL2 is disabled, sending a deleting command to the second SM-DP, so that the second SM-DP forwards the deleting command to a second operator, and the second operator deletes the second Profile.

receiving response information returned by the ISD-R;

updating the eUICC information set EIS of the eUICC according to the response information;

and feeding back an execution result of the code number switching command to the initiator.

Further, the sponsor is a machine-to-machine service provider M2M SP or other operator.

In a second aspect, the present invention provides an eUICC-based code number changing device, which is set in a secure routing network element SM-SR of a subscription management platform, and the device includes:

the code number switching command receiving module is used for receiving a code number switching command sent by an initiator, wherein the code number switching command is used for requesting to replace a second code number of a second integrated circuit card identification code ICCID in the eUICC with a first code number of a first ICCID;

the code number disabling command sending module is connected with the code number switching command receiving module and is used for sending a code number disabling command to the second subscription relation management platform data preparation SM-DP so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID;

The forbidden command response receiving module is connected with the code number forbidden command sending module and is used for receiving the code number forbidden command response forwarded by the second SM-DP and sent by the second operator, and setting a second configuration file life cycle management authorization PLMA and/or updating a second policy rule POL2 according to the code number forbidden command response;

the code number activation command sending module is connected with the code number switching command receiving module and is used for sending a code number activation command to the first SM-DP so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID;

the activation command response receiving module is connected with the code number activation command sending module and is used for receiving the code number activation command response forwarded by the first SM-DP and sent by the first operator, and performing the operation of setting the first PLMA and/or updating the first POL2 according to the code number activation command response;

the code number changing module is connected with the disabling command response receiving module and the activating command response receiving module and is used for initiating a process of activating a first Profile corresponding to the first ICCID to a root security domain ISD-R in the eUICC so as to change a second code number of a second ICCID in the eUICC into a first code number of the first ICCID.

In a third aspect, the present invention provides an eUICC-based code number changing apparatus, including a memory and a processor, where the memory stores a computer program, and the processor is configured to run the computer program to implement the eUICC-based code number changing method described in the first aspect.

In a fourth aspect, the present invention provides a computer readable storage medium, where a computer program is stored, where the computer program, when executed by a processor, implements the method for changing a code number based on eUICC according to the first aspect.

The invention provides a code number changing method, a device and a readable storage medium based on an eUICC, which are characterized in that firstly, a code number switching command sent by an initiator is received, and the code number switching command is used for requesting to change a second code number of a second ICCID in the eUICC into a first code number of a first ICCID; then, sending a code number disabling command to a second SM-DP, so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID; after receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, performing an operation of setting a second PLMA and/or updating a second POL2 according to the code number disabling command response; transmitting a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID; after receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, performing an operation of setting a first PLMA and/or updating a first POL2 according to the code number activation command response; and finally, initiating a process of activating a first Profile corresponding to the first ICCID to the ISD-R in the eUICC so as to change the second code number of the second ICCID in the eUICC into the first code number of the first ICCID. The invention starts from the actual technical standard landing, can improve the landing success rate of the eUICC code number changing application, and solves the problems of more problems, slow positioning and the like of the existing eUICC code number changing application landing.

Drawings

Fig. 1 is a flowchart of a code number changing method based on eUICC in embodiment 1 of the present invention;

fig. 2 is an interaction schematic diagram of a code number changing method based on an eUICC according to an embodiment of the present invention;

fig. 3 is a schematic structural diagram of an eUICC-based code number changing device according to embodiment 2 of the present invention;

fig. 4 is a schematic structural diagram of an eUICC-based code number changing device according to embodiment 3 of the present invention.

Detailed Description

In order to make the technical scheme of the present invention better understood by those skilled in the art, the following detailed description of the embodiments of the present invention will be given with reference to the accompanying drawings.

It is to be understood that the specific embodiments and figures described herein are merely illustrative of the invention, and are not limiting of the invention.

It is to be understood that the various embodiments of the invention and the features of the embodiments may be combined with each other without conflict.

It is to be understood that only the portions relevant to the present invention are shown in the drawings for convenience of description, and the portions irrelevant to the present invention are not shown in the drawings.

It should be understood that each unit and module in the embodiments of the present invention may correspond to only one physical structure, may be formed by a plurality of physical structures, or may be integrated into one physical structure.

It will be appreciated that, without conflict, the functions and steps noted in the flowcharts and block diagrams of the present invention may occur out of the order noted in the figures.

It is to be understood that the flowcharts and block diagrams of the present invention illustrate the architecture, functionality, and operation of possible implementations of systems, apparatuses, devices, methods according to various embodiments of the present invention. Where each block in the flowchart or block diagrams may represent a unit, module, segment, code, or the like, which comprises executable instructions for implementing the specified functions. Moreover, each block or combination of blocks in the block diagrams and flowchart illustrations can be implemented by hardware-based systems that perform the specified functions, or by combinations of hardware and computer instructions.

It should be understood that the units and modules related in the embodiments of the present invention may be implemented by software, or may be implemented by hardware, for example, the units and modules may be located in a processor.

Example 1:

the present embodiment provides a code number changing method based on eUICC, which is applied to SM-SR (Subscription Manager-Secure Routing, subscription management platform Secure Routing network element), as shown in fig. 1, and the method includes:

Step S101: and receiving a code number switching command sent by the initiator, wherein the code number switching command is used for requesting to replace a second code number of a second ICCID (Integrate circuit card identity, integrated circuit card identification code) in the eUICC with a first code number of the first ICCID.

It should be noted that, in order to solve the problem in the actual application of the eUICC technology, the invention proposes a technical scheme based on the eUICC technical standard aiming at the most common application requirement of the eUICC technology, namely code number change, and aims to solve the actual problem of technology landing, reduce the later commercial maintenance difficulty, promote the user experience and facilitate product popularization.

In this embodiment, the initiator is an M2M SP (Machine to Machine Service Provider, machine-to-machine service provider) or other MNO (Mobile Network Operator ), the initiator is directly connected to the SM-SR, interacts through the ES4 interface, and the eUICC has downloaded and installed a corresponding code number configuration document, specifically, the M2M SP or other MNO sends a code number switching command ChangeProfile (eid, ICCID 1) to the SM-SR to request to replace the code number 2 identified by ICCID2 with the code number 1 identified by ICCID1, and the SM-SR receives the code number switching command sent by the M2M SP or other operator through the ES4 interface.

In this embodiment, the definition of the ChangeProfile command is as follows:

function name: changeProfile

The initiator: operators or M2M-SPs

The party to be regulated: SM-SR

Description of: this command allows the initiator to request the called party to switch Profile1 in the target eUICC to Profile2.Profile1 is owned by operator 1 and Profile2 is owned by operator 2.

Specifically, the input data of the ChangeProfile command may be as shown in table 1, and the output data may be as shown in table 2.

Table 1: input data of ChangeProfile command

Table 2: output data of ChangeProfile command

Specifically, the ChangeProfile command message may return:

(1) "Function execution status" is "Executed-success" indicates that the command has completed successfully and that a new profile has been enabled on the eUICC.

(2) "Function execution status" is "Expired" indicating that the command is executed beyond the expiration date;

(3) "Function execution status" is "Failed" indicates that the command Failed to execute, and the special status codes are as in Table 3, except that the standard defines a general status code.

Table 3: special status code of ChangeProfile command

Optionally, after the receiving the code number switching command sent by the initiator, the method further includes:

the eUICC belongs to the SM-SR management;

the first Profile is in a disabled state;

In this embodiment, after receiving the code number switching command, the SM-SR may determine whether a preset first initial condition is satisfied according to the code number switching command, where the first initial condition preferably includes the following three items: the eUICC belongs to the SM-SR management; a first Profile corresponding to the first ICCID is already loaded onto the eUICC; the first Profile is in a disabled state; if the code number switching command does not meet the preset first initial condition, sending a command execution failure response to the initiator, namely if the eUICC does not belong to self management, or a first Profile corresponding to the first ICCID is not loaded on the eUICC, or the first Profile is not in a disabled state, sending the command execution failure response to the initiator by the SM-SR, wherein the command execution failure response can carry a corresponding general or special status code.

Step S102: and sending a code number disabling command to a second SM-DP (Subscription Manager Data Preparation, subscription management platform data preparation) so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID.

Step S103: and receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, and performing setting a second PLMA (Profile Lifecycle Management Authorisation, profile lifecycle management authority) and/or updating a second policy rule POL2 operation according to the code number disabling command response.

In this embodiment, the SM-SR and the operator are connected through the SM-DP, where the SM-SR interacts with the SM-DP authorized by the operator through the ES3 interface, and the SM-DP interacts with the operator through the ES2 interface.

Specifically, after receiving the code number switching command, the SM-SR may check whether a second initial condition set in advance is satisfied, where the second initial condition includes: a second Profile corresponding to the second ICCID is owned by a second operator that grants a second PLMA, and an initiator obtains the second PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a second POL2 of the second Profile allows this code number activation operation; if the preset second initial condition is not met, a code number disabling command is sent to the second SM-DP, and if the preset second initial condition is met, the step is directly skipped.

Optionally, if the preset second initial condition is not met, sending a code number disabling command to the second SM-DP, which specifically includes:

In this embodiment, if the second initial condition is met, the SM-SR sends a code number disabling command ES3. Profilediblerequest (eid, icid 2, initiator-id) to the second SM-DP through the ES3 interface, after receiving the code number disabling command, the second SM-DP forwards the code number disabling command ES2. Profilediblerequest (eid, icid 2, initiator-id) to the second operator through the ES2 interface, and after receiving the code number disabling command, the second operator confirms whether the command is acceptable, and the specific checking rule is not limited in this scheme according to the specific service and management requirements of the operator, such as checking the user contract, expense condition, and the like. If the second operator passes the command, the code number disable command response ProfileDisableRequest response (PLMA, POL 2) is fed back to the second SM-DP, carrying the update PLMA and/or POL2 command. The second SM-DP forwards a code number disable command response ProfileDisableRequest response (PLMA, POL 2) to the SM-SR, which sets the PLMA and/or updates POL2 operations based on the received command. It should be noted that if the second operator determines that the command is not acceptable, a code number disabling command response including a rejection message is fed back to the second SM-DP; the second SM-DP forwards the failure response to the SM-SR, which returns a response indicating failure to the initiator after receiving it, indicating that the procedure should be ended.

It should be noted that PLMA is an authorization that the operator grants to the sender to allow profile lifecycle management. POL refers to policy rules, POL1 is located in the configuration file, and POL2 policy rules are associated with the configuration file and stored in the related EIS (eUICC Information Set, eUICC info set) of the SM-SR.

In this embodiment, the definition of the ES3.ProfileDisableRequest command is as follows:

function name: profileDisabaleRequest

The initiator: SM-SR

The party to be regulated: SM-DP

Description of: the present command requests a code number disabling acknowledgement from the initiating party to the called party.

Specifically, the input data of the ES3.ProfileDisableRequest command may be as shown in Table 4, and the output data may be as shown in Table 5.

Table 4: input data of the ProfileDisableRequest command

Table 5: output data of the ProfileDisableRequest command

Specifically, the ES3.ProfileDisableRequest command message may return:

(1) "Function execution status" is "specified-success" indicating that the command has completed successfully, returning POL2 and/or PLMA to be updated;

(3) "Function execution status" is "Failed" indicating that the command Failed to execute, other status codes are as in Table 6, except that the standard defines a common status code;

Table 6: special State code for ProfileDisableRequest command

In this embodiment, the definition of the ES2.ProfileDisableRequest command is as follows:

the initiator: SM-DP

The party to be regulated: operators (operators)

Specifically, the input data of the ES2.ProfileDisableRequest command may be as shown in Table 7, and the output data may be as shown in Table 8.

Table 7: input data of the ProfileDisableRequest command

Table 8: output data of the ES2.ProfileDisableRequest command

Specifically, the ES2.ProfileDisableRequest command message may return:

(3) "Function execution status" is "Failed" indicates that the command Failed to execute, and the other status codes are as shown in Table 9, except that the standard defines a general status code;

table 9: special State code for ProfileDisableRequest command

In this embodiment, after the SM-SR performs the operations of setting PLMA and/or updating POL2, the SM-SR may send the update result es3.handlerules update notification (eid, iccid2, PLMA, POL 2) to the second SM-DP according to the setting and update result, and the second SM-DP may forward the update result es2.handlerules update notification (eid, iccid2, PLMA, POL 2) to the second operator again, and the SM-SR may feed back the update result es4.handlerules update notification (eid, iccid2, PLMA, POL 2) to the originator according to the condition that the originator is authorized.

In this embodiment, the definition of the ES3.HandleRulesUpdateNotification command is as follows:

function name: handlerlesUpdateNotification

The initiator: SM-SR

The receiving side: SM-DP

Specifically, the input data of the ES3.HandleRulesUpdateNotification command may be as shown in Table 10.

Table 10: input data of ES3.HandlerlesUpdateNotification Command

In this embodiment, the definition of the ES2.HandleRulesUpdateNotification command is as follows:

function name: handlerlesUpdateNotification

The initiator: SM-DP

The party to be regulated: operators (operators)

Specifically, the input data of the ES2.HandleRulesUpdateNotification command may be as shown in Table 11.

Table 11: input data of ES2.HandlerlesUpdateNotification Command

In this embodiment, the definition of the ES4.HandlereUpdateNotification command is as follows:

function name: handlerlesUpdateNotification

The initiator: SM-SR

The receiving side: M2M-SP or operator

Specifically, the input data of the ES4.HandleRulesUpdateNotification command may be as shown in Table 12.

Table 12: ES4.input data of HandlerlesUpdateNotification Command

Step S104: transmitting a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID;

Step S105: and receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, and performing operations of setting the first PLMA and/or updating the first POL2 according to the code number activation command response.

In this embodiment, after receiving the code number switching command, the SM-SR may check whether a third initial condition set in advance is satisfied, where the third initial condition includes: a first Profile corresponding to the first ICCID is owned by a first operator granted to a first PLMA, and an initiator obtains the first PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a first POL2 of the first Profile allows this code number activation operation; if the preset third initial condition is not met, a code number activation command is sent to the first SM-DP, and if the preset third initial condition is met, the step is directly skipped.

Optionally, if the preset third initial condition is not met, sending a code number activation command to the first SM-DP, including:

In this embodiment, if the third initial condition is met, the SM-SR sends a code number activation command es3.profileenablerequest (eid, icid 1, initiator-id) to the first SM-DP through the ES3 interface, and after the first SM-DP receives the code number activation command, the first SM-DP forwards the code number activation command es2.profileenablerequest (eid, icid 1, initiator-id) to the first operator through the ES2 interface, and after the first operator receives the code number activation command, the first operator confirms whether the command is acceptable, and specific checking details are not limited in this scheme, such as confirming the authorization condition of the Initiator, the number service protocol, and the like. If the first operator passes the command, the code number activation command response ProfileEnableRequest response (PLMA, POL 2) is fed back to the first SM-DP, carrying an update PLMA and/or POL2 command. The first SM-DP forwards a code number activation command response ProfileEnableRequest response (PLMA, POL 2) to the SM-SR, which performs a set PLMA and/or update POL2 operation according to the received command. It should be noted that, if the first operator determines that the command is not acceptable, a code number activation command response including a reject message is fed back to the first SM-DP; the first SM-DP forwards the failure response to the SM-SR, which returns a response indicating failure to the initiator after receiving the response, indicating that the procedure should be ended.

It should be noted that, from the practical point of the technical standard, the operator system performs real-time auditing and authorization, so that the problems of failure or error in changing caused by insufficient or wrong policy rules and/or authorization in the prior art can be solved, and the requirements of practical application can be further satisfied compared with the technical standard.

In this embodiment, the definition of the ES3.ProfileEnableRequest command is as follows:

function name: profileEnableRequest

The initiator: SM-SR

The party to be regulated: SM-DP

Description of: the present command is acknowledged by the initiating party requesting a code number activation from the called party.

Specifically, the input data of the ES3.ProfileEnableRequest command may be as shown in Table 13.

Table 13: input data of ProfileEnableRequest command

Specifically, the ES3.ProfileEnableRequest command message may return:

(1) An updatrules command, carrying update POL2 and/or set PLMA commands;

(3) "Function execution status" is "Failed" indicates that the command Failed to execute, and the other status codes are as in table 14, except that the standard defines a common status code.

Table 14: special State code of ProfileEnableRequest command

In this embodiment, the definition of the ES2.ProfileEnableRequest command is as follows:

function name: profileEnableRequest

The initiator: SM-SR

The party to be regulated: operators (operators)

Specifically, the input data of the ES2.ProfileEnableRequest command may be as shown in Table 15, with no output data.

Table 15: input data of the ProfileEnableRequest command

Specifically, the ES2.ProfileEnableRequest command message may return:

(1) An updatrules command, carrying update POL2 and/or set PLMA commands;

(3) "Function execution status" is "Failed" indicates that the command Failed to execute, and the other status codes are as in table 16, except that the standard defines a common status code.

Table 16: special State code of ProfileEnableRequest command

In this embodiment, after the SM-SR performs the operations of setting PLMA and/or updating POL2, the SM-SR may send the update result es3.handlerules update notification (eid, iccid1, PLMA, POL 2) to the first SM-DP according to the setting and update result, and the first SM-DP may forward the update result es2.handlerules update notification (eid, iccid1, PLMA, POL 2) to the first operator again, and the SM-SR may feed back the update result es4.handlerules update notification (eid, iccid1, PLMA, POL 2) to the originator according to the condition that the originator is authorized.

Step S106: and initiating a process of activating a first Profile corresponding to the first ICCID to an ISD-R (Issuer Security Domain Root, root security domain) in the eUICC so as to replace a second code number of a second ICCID in the eUICC with a first code number of the first ICCID.

In this embodiment, the SM-SR confirms that the code number of the first ICCID identifier belongs to the first operator according to the feedback results of the first operator and the second operator, and the initiator has obtained the authorization of the "EnableProfile" operation through the PLMA, and both POL2 of the code numbers of the first ICCID and the second ICCID identifier allow the present code number replacement operation, and the SM-SR sends a message including the "es5.store DATA" command for enabling the first Profile to the ISD-R, and initiates the flow of activating the first Profile.

Besides the ISD-R, the eUICC includes ECASD (eUICC Controlling Authority Security Domain, control security domain of the eUICC), ISD-P (Issuer Security Domain Profile, profile security domain), MNO-SD (Mobile Network Operator Security Domain, operation Shang An universe), and the like.

Optionally, after the process of activating the first Profile corresponding to the first ICCID is initiated to the root security domain ISD-R in the eUICC, the method further includes:

In this embodiment, after the code number is switched, if the second POL2 of the second Profile indicates that the second Profile should be deleted when it is disabled, the SM-SR continues to initiate the deletion operation, and returns a response message indicating the execution result according to the execution condition.

receiving response information returned by the ISD-R;

In this embodiment, after the above procedure is successfully executed, the SM-SR updates the EIS according to the executed sequence and the eUICC response, and feeds back a ChangeProfile result to the initiator, indicating that the second code number of the second ICCID identifier has been replaced with the first code number of the first ICCID identifier, and the second code number has been disabled (and deleted). In addition, the first operator may also be fed back that the first Profile has been enabled, and the second operator may be fed back that the second Profile has been disabled and whether it has been successfully deleted.

Specifically, referring to fig. 2, an interaction schematic diagram of an eUICC-based code number changing method provided by the embodiment of the present invention is shown, it needs to be explained that, before the process is started, a corresponding code number configuration document is downloaded and installed on the eUICC, the process is started by a third party initiator, the initiator is an authorized M2M-SP or other operators (other MNOs), the SM-SR and the operators are connected through an SM-DP, wherein the SM-SR interacts with the SM-DP authorized by the operators through an ES3 interface, the SM-DP interacts with the MNO through an ES2 interface, and the process does not limit a possible transmission protocol between the SM-SR and the eUICC, in this embodiment, the interaction schematic diagram of the eUICC-based code number changing method includes the following steps:

step S01: the initiator sends a code number switching command ChangeProfile (eid, ICCID 1) to the SM-SR via the ES4 interface for requesting to replace the code number 2 identified by ICCID2 with the code number 1 identified by ICCID 1.

Step S02: the SM-SR checks the initial conditions to see if the command is acceptable. If the initial condition is not satisfied, the SM-SR should return a failure message to end the process. Initial conditions primary check confirmation:

a) Whether the SM-SR is responsible for managing the eUICC.

b) Whether the target Profile identified by its ICCID has been loaded onto the eUICC.

c) Whether the target profile is in a disabled state.

d) The target Profile is owned by the operator that granted the PLMA, and whether the PLMA authorization obtained by the initiator allows it to perform this code number activation operation on the eUICC.

e) POL2 of the target profile allows this code number activation operation.

f) The currently enabled Profile is owned by the operator that granted the PLMA, and the PLMA authorization obtained by the initiator allows it to perform this code number activation operation on the eUICC.

g) Whether POL2 of the currently enabled profile allows this code number activation operation.

Wherein, if the initial conditions to be verified are all satisfied, the flow should be continued at step S22; if any one of a, b and c is not satisfied, the SM-SR should return a response indicating failure, indicating that the process should end; if conditions d and/or e are not met, the flow goes to step S03 to continue; if only conditions f and/or g are not met, the flow proceeds to step S13.

Step S03: the SM-SR sends a code number disable command ES3.ProfileDisableRequest (eid, iccid2, initiator-id) to SM-DP2 over the ES3 interface.

Step S04: SM-DP2 forwards code number disable command es2.profilediailerequest (eid, iccid2, initiator-id) to operator 2 via ES2 interface.

Step S05: after receiving the code number disabling command, the operator 2 confirms whether the command is acceptable, and the specific checking rule is not limited in this scheme according to the specific service and management requirements of the operator, such as checking user contracts, cost conditions, and the like.

Step S06: if operator 2 passes the command, it feeds back to SM-DP2 the code number disable command response ProfileDisableRequest response (PLMA, POL 2), carrying the update PLMA and/or POL2 command.

It should be noted that if the operator 2 determines that the command is not acceptable, a code number disabling command response including a rejection message is fed back to the SM-DP 2; the SM-DP2 forwards the failure response to the SM-SR, and the SM-SR returns a response indicating failure to the initiator after receiving the response, and indicates that the flow should be ended.

Step S07: SM-DP2 forwards the code number disable command response ProfileDisableRequest response (plma, pol 2) to SM-SR.

Step S08: the SM-SR performs a set PLMA and/or update POL2 operation according to the received command.

Step S09: based on the setup and update results, the SM-SR sends an update result es3.handlerules update notification (eid, iccid2, plma, pol 2) to SM-DP 2.

Step S10: SM-DP2 forwards the update result es2.handlerules update notification (eid, iccid2, plia, pol 2) to operator 2.

Step S11: the SM-SR feeds back the update result es4.handlerules update notification (eid, iccid2, plma, pol 2) to the initiator according to the setting and update result and the condition that the initiator is authorized.

Step S12: the operator 2 can also update POL1 at the same time according to its traffic and management rules, this flow being optional.

Step S13: the SM-SR sends a code number activation command ES3.ProfileEnableRequest (eid, iccid1, initiator-id) to SM-DP1 over the ES3 interface.

Step S14: SM-DP1 forwards the code number activation command ES2.Profileenablerequest (eid, iccid1, initiator-id) to operator 1 via the ES2 interface.

Step S15: after receiving the code number activation command, the operator 1 confirms whether the command is acceptable, and the specific checking rule is not limited in this scheme, such as confirming the authorization condition of the initiator, the number service protocol, and the like.

Step S16: if operator 1 passes the command, it feeds back the code number activation command response ProfileEnableRequest response (PLMA, POL 2) to SM-DP1, carrying the update PLMA and/or POL2 command.

It should be noted that if the operator 1 determines that the command is not acceptable, a code number activation command response including a rejection message is fed back to the SM-DP 1; the SM-DP1 forwards the failure response to the SM-SR, and the SM-SR returns a response indicating failure to the initiator after receiving the response, and indicates that the flow should be ended.

Step S17: SM-DP1 forwards the code number activate command response ProfileEnableRequest response (plma, pol 2) to SM-SR.

Step S18: the SM-SR performs a set PLMA and/or update POL2 operation according to the received message.

Step S19: based on the setup and update results, the SM-SR sends an update result ES3.HandlereilevUpdateNotification (eid, iccid1, plma, pol 2) to SM-DP 1.

Step S20: SM-DP1 forwards the update result es2.handlerules update notification (eid, iccid1, plia, pol 2) to operator 1.

Step S21: the SM-SR feeds back the update result es4.handlerules update notification (eid, iccid1, plia, pol 2) to the initiator according to the setting and update result and the condition that the initiator is authorized.

Step S22: the SM-SR sends a message to the ISD-R containing an "es5.store DATA" command to enable Profile1, initiating a procedure to activate Profile 1.

Specifically, the SM-SR confirms that the code number identified by ICCID1 belongs to operator 1 according to the feedback results of operator 1 and operator 2, and the initiator has obtained the authorization of the "EnableProfile" operation through PLMA, and both POL2 of the code numbers identified by ICCID1 and ICCID2 allow the present code number replacement operation, and the SM-SR sends a message containing the "es5.Store DATA" command for enabling Profile1 to ISD-R, initiating the flow of activating Profile 1.

Besides ISD-R, the eUICC also includes ECASD, ISD-P, MNO-SD, etc.

Optionally, after the code number is switched, if POL2 of Profile2 indicates that the Profile should be deleted when it is disabled, the SM-SR continues to initiate the deletion operation, and returns a response message indicating the execution result according to the execution condition.

Optionally, after the above procedure is successfully executed, the SM-SR updates the EIS according to the executed sequence and the eUICC response, and feeds back a ChangeProfile result to the initiator, indicating that the code number 2 identified by ICCID2 has been replaced with the code number 1 identified by ICCID1, and that the code number 2 has been disabled (and deleted). In addition, the method can also feed back to the operator 1 through the SM-DP1 that the Profile1 is enabled, feed back to the operator 2 through the SM-DP2 that the Profile2 is disabled and whether the deletion is successful or not.

It should be noted that if any of the above procedures fails, a failure message may be returned to the initiator through SM-SR, and the card inner code number may be rolled back to profile2 if necessary.

The code number changing method based on the eUICC provided by the embodiment of the invention firstly receives a code number switching command sent by an initiator, wherein the code number switching command is used for requesting to change a second code number of a second ICCID in the eUICC to a first code number of a first ICCID; then, sending a code number disabling command to a second SM-DP, so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID; after receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, performing an operation of setting a second PLMA and/or updating a second POL2 according to the code number disabling command response; transmitting a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID; after receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, performing an operation of setting a first PLMA and/or updating a first POL2 according to the code number activation command response; and finally, initiating a process of activating a first Profile corresponding to the first ICCID to the ISD-R in the eUICC so as to change the second code number of the second ICCID in the eUICC into the first code number of the first ICCID. The invention starts from the actual technical standard landing, can improve the landing success rate of the eUICC code number changing application, and solves the problems of more problems, slow positioning and the like of the existing eUICC code number changing application landing.

Example 2:

as shown in fig. 3, the present embodiment provides an eUICC-based code number changing apparatus, which is configured to be disposed in a secure routing network element SM-SR of a subscription management platform, and configured to perform the foregoing eUICC-based code number changing method, where the apparatus includes:

a code number switching command receiving module 11, configured to receive a code number switching command sent by an initiator, where the code number switching command is used to request that a second code number of a second integrated circuit card identification code ICCID in the eUICC be replaced with a first code number of a first ICCID;

the code number disabling command sending module 12 is connected with the code number switching command receiving module 11, and is configured to prepare SM-DP sending code number disabling command to the second subscription management platform data, so that the second SM-DP forwards the code number disabling command to the second operator corresponding to the second ICCID;

a forbidden command response receiving module 13, connected to the code number forbidden command sending module 12, configured to receive a code number forbidden command response forwarded by the second SM-DP and sent by the second operator, and perform an operation of setting a second configuration file lifecycle management authorization PLMA and/or updating a second policy rule POL2 according to the code number forbidden command response;

The code number activation command sending module 14 is connected with the code number switching command receiving module 11, and is configured to send a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID;

an activation command response receiving module 15, connected to the code number activation command sending module 14, configured to receive the code number activation command response forwarded by the first SM-DP and sent by the first operator, and perform an operation of setting the first PLMA and/or updating the first POL2 according to the code number activation command response;

the code number changing module 16 is connected to the disabling command response receiving module 13 and the activating command response receiving module 15, and is configured to initiate a process of activating the first Profile corresponding to the first ICCID to the root security domain ISD-R in the eUICC, so as to change the second code number of the second ICCID in the eUICC to the first code number of the first ICCID.

Optionally, the apparatus further comprises:

the first judging module is used for judging whether a preset first initial condition is met according to the code number switching command, and the first initial condition comprises any one or more of the following:

The eUICC belongs to the SM-SR management;

the first Profile is in a disabled state;

and the first response sending module is used for sending a command execution failure response to the initiator if the code number switching command does not meet a preset first initial condition.

Optionally, the code number disabling command sending module 12 specifically includes:

a code number disabling checking unit, configured to check whether a second initial condition set in advance is satisfied, where the second initial condition includes: a second Profile corresponding to the second ICCID is owned by a second operator that grants a second PLMA, and an initiator obtains the second PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a second POL2 of the second Profile allows this code number activation operation;

and the code number disabling command sending unit is used for sending a code number disabling command to the second SM-DP if the preset second initial condition is not met.

Optionally, the code number disabling command sending unit is specifically configured to:

The disable command response receiving module 13 includes:

and the forbidden command response receiving unit is used for receiving the code number forbidden command response forwarded by the second SM-DP, which is sent by the second operator when the code number forbidden command is judged to be acceptable.

Optionally, the code number activation command sending module 14 specifically includes:

a code number activation checking unit, configured to check whether a third preset initial condition is satisfied, where the third initial condition includes: a first Profile corresponding to the first ICCID is owned by a first operator granted to a first PLMA, and an initiator obtains the first PLMA authorization to allow the initiator to perform a present code number activation operation on the eUICC; and a first POL2 of the first Profile allows this code number activation operation;

and the code number activation command sending unit is used for sending the code number activation command to the first SM-DP if the preset third initial condition is not met.

Optionally, the code number activation command sending unit is specifically configured to:

The activation command response receiving module 15 includes:

and the activation command response receiving unit is used for receiving the code number disabling command response forwarded by the first SM-DP and sent by the first operator when the code number activating command is judged to be acceptable.

Optionally, the apparatus further comprises:

and the deleting command sending module is used for sending a deleting command to the second SM-DP if the second POL2 of the second Profile indicates that the second POL2 is disabled, so that the second SM-DP forwards the deleting command to a second operator and the second operator deletes the second Profile.

Optionally, the apparatus further comprises:

the response information receiving module is used for receiving response information returned by the ISD-R;

the EIS updating module is used for updating the EIS of the eUICC information set of the eUICC according to the response information;

and the execution result feedback module is used for feeding back the execution result of the code number switching command to the initiator.

Optionally, the sponsor is a machine-to-machine service provider M2M SP or other operator.

Example 3:

referring to fig. 4, the present embodiment provides an eUICC-based code number changing apparatus, which includes a memory 21 and a processor 22, wherein a computer program is stored in the memory 21, and the processor 22 is configured to execute the computer program to perform the eUICC-based code number changing method in embodiment 1.

The memory 21 is connected to the processor 22, the memory 21 may be a flash memory, a read-only memory, or other memories, and the processor 22 may be a central processing unit or a single chip microcomputer.

Example 4:

the present embodiment provides a computer-readable storage medium having a computer program stored thereon, which when executed by a processor, implements the eUICC-based code number change method in embodiment 1 described above.

Computer-readable storage media include volatile or nonvolatile, removable or non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, computer program modules or other data. Computer-readable storage media includes, but is not limited to, RAM (Random Access Memory ), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read Only Memory, charged erasable programmable Read-Only Memory), flash Memory or other Memory technology, CD-ROM (Compact Disc Read-Only Memory), digital Versatile Disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a computer.

The apparatus and readable storage medium for changing a code number based on an eUICC provided in embodiments 2 to 4 first receive a code number switching command sent by an initiator, where the code number switching command is used to request that a second code number of a second ICCID in the eUICC be changed to a first code number of a first ICCID; then, sending a code number disabling command to a second SM-DP, so that the second SM-DP forwards the code number disabling command to a second operator corresponding to the second ICCID; after receiving a code number disabling command response forwarded by the second SM-DP and sent by the second operator, performing an operation of setting a second PLMA and/or updating a second POL2 according to the code number disabling command response; transmitting a code number activation command to a first SM-DP, so that the first SM-DP forwards the code number activation command to a first operator corresponding to the first ICCID; after receiving a code number activation command response forwarded by the first SM-DP and sent by the first operator, performing an operation of setting a first PLMA and/or updating a first POL2 according to the code number activation command response; and finally, initiating a process of activating a first Profile corresponding to the first ICCID to the ISD-R in the eUICC so as to change the second code number of the second ICCID in the eUICC into the first code number of the first ICCID. The invention starts from the actual technical standard landing, can improve the landing success rate of the eUICC code number changing application, and solves the problems of more problems, slow positioning and the like of the existing eUICC code number changing application landing.

It is to be understood that the above embodiments are merely illustrative of the application of the principles of the present invention, but not in limitation thereof. Various modifications and improvements may be made by those skilled in the art without departing from the spirit and substance of the invention, and are also considered to be within the scope of the invention.

Claims

1. The code number changing method based on the embedded universal integrated circuit card eUICC is characterized by being applied to a subscription relationship management platform security routing network element SM-SR, and comprises the following steps:

2. The method of claim 1, wherein after receiving the code number switch command sent by the initiator, the method further comprises:

the eUICC belongs to the SM-SR management;

the first Profile is in a disabled state;

3. The method according to claim 1, wherein the preparing SM-DP for sending the code number disabling command to the second subscription management platform data specifically includes:

4. The method of claim 3, wherein if the preset second initial condition is not met, sending a code number disabling command to the second SM-DP specifically includes:

5. The method according to claim 1, wherein the sending the code number activation command to the first SM-DP specifically comprises:

6. The method of claim 5, wherein if the preset third initial condition is not met, sending a code number activation command to the first SM-DP, specifically includes:

7. The method of claim 1, wherein after the initiating a procedure to activate a first Profile corresponding to the first ICCID to a root security domain ISD-R in the eUICC, the method further comprises:

8. The method of claim 7, wherein after the initiating a procedure to activate a first Profile corresponding to the first ICCID to a root security domain ISD-R in the eUICC, the method further comprises:

receiving response information returned by the ISD-R;

9. The method of claim 8, wherein the initiator is a machine-to-machine service provider M2M SP or other operator.

10. The utility model provides a code number change device based on eUICC, its characterized in that sets up in signing relationship management platform safe routing network element SM-SR, said device includes:

11. The eUICC-based code number altering apparatus, comprising a memory having a computer program stored therein and a processor configured to run the computer program to implement the eUICC-based code number altering method of any one of claims 1-9.

12. A computer readable storage medium, wherein a computer program is stored on the computer readable storage medium, which when executed by a processor, implements the eUICC-based code number change method of any one of claims 1-9.