WO2017120745A1

WO2017120745A1 - Method, device, and system for processing profile

Info

Publication number: WO2017120745A1
Application number: PCT/CN2016/070617
Authority: WO
Inventors: 高林毅
Original assignee: 华为技术有限公司
Priority date: 2016-01-11
Filing date: 2016-01-11
Publication date: 2017-07-20
Also published as: CN108476400A; CN108476400B

Abstract

The embodiments of the present invention provide a method, a device, and a system for processing a profile. The method for processing a profile in the present invention comprises: acquiring tag information, the tag information comprising tag data; sending a profile download request to a signed management device, the profile download request at least comprising the tag data; and receiving a first profile sent by the signed management device, the first profile being generated by the signed management device according to one selected from at least one second profile associated with the tag data. By means of associating the tag data with a plurality of profiles, and performing safety protection on the tag data, the embodiments of the present application not only achieve the reuse of the tag data and the reduction of the cost, but also can prevent replay attacks and improve the safety degree.

Description

Profile processing method, device and system

Technical field

The embodiments of the present invention relate to communication technologies, and in particular, to a method, an apparatus, and a system for processing a profile.

Background technique

The existing Subscriber Identity Module (SIM) card or the Universal Integrated Circuit Card (UICC) card is generally centralized by the Mobile Network Operator (MNO). The card merchant subscribes, so the subscription information required to access the mobile operator's network, including the International Mobile Subscriber Identification Number (IMSI) necessary for accessing the mobile operator's network, is already available before leaving the factory. Ki, the encryption algorithm parameters, etc. are downloaded to the card, and the user can access the network by inserting the SIM card or the UICC card and inserting it into the terminal. For the embedded universal integrated circuit (EDUICC), it is not necessarily purchased by the operator, or it may be purchased by the terminal manufacturer and integrated into the terminal for sale. Therefore, before the eUICC leaves the factory, it is not known who will be used. Where it is used, the eUICC may not contain data that can be accessed to the mobile network. When the eUICC is embedded in the terminal, the remote management technology can be used, through the contract management-data. The Subscription Manager (Data Preparation+, SM-DP+ for short) downloads the profile to the eUICC, and then the eUICC can use the profile to access the network. The local profile assistant (LPA) and the eUICC are included in the terminal. The local profile download (LPD) and the local user interface (LUI) are included in the LPA. The LPD is responsible for downloading. The profile, that is, the LPD downloads the profile from the SM-DP+ to the LPD through a Hypertext Transfer Protocol Server (HTTPS) secure connection, and then sends the downloaded profile to the eUICC. The LUI provides interaction logic and interface with the user. The user can manage the profile through the LUI, such as downloading a new profile, activating a profile, activating a profile, and deleting a profile.

The current method for downloading profiles from SM-DP+ comes from the Global System for Mobile Communications Assembly (GSMA). The eUICC specification for consumer electronics, including the profile download process, uses an activation code to download the profile. However, each time you download a profile, you need to use an activation code. Once the profile is bound, it cannot be reused, and the terminal manufacturer must apply for a large amount of activation code for testing, maintenance, and maintenance. The cost is high, and it is inconvenient to use and manage. .

In addition, when a user manages a profile, it is necessary to verify the identity of the user, such as a password or a fingerprint, and only the authenticated user can manage the profile. In the existing specification, when the user passes the identity authentication, the profile in the eUICC can be viewed and managed indiscriminately, and the profiles of different users cannot be distinguished, and the security is very low.

Summary of the invention

The embodiment of the invention provides a method, a device and a system for processing a profile, so as to realize the reuse of the profile and the tag data, reduce the cost, and prevent the replay attack and improve the security.

In a first aspect, an embodiment of the present invention provides a method for processing a profile, including:

Obtaining tag information, the tag information including tag data and/or tag identifiers;

Sending a profile download request to the subscription management device, where the profile download request includes at least the tag data;

Receiving a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.

The processing method of the profile described above not only realizes the reuse of profile and tag data, but also reduces the cost by associating one tag data with multiple profiles.

In conjunction with the first aspect, in a first possible implementation manner of the first aspect, before the sending the profile download request to the subscription management device, the method further includes:

Receiving the first information of the embedded universal integrated circuit card eUICC, and transmitting the first information to the subscription management device, where the first information includes at least the challenge information of the eUICC;

Receiving second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

And performing security protection on the challenge information of the subscription management device and the tag data, where the security protection may include a hash operation or an encryption operation, where the encryption operation may include using a pair The method of encrypting or public-private key encryption is applicable to any encryption method that can protect the marked data.

Transmitting the third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least the security-protected tag data and the tag identifier;

Receiving fourth information of the eUICC, where the fourth information includes at least the signature information;

Sending a profile download request to the subscription management device, including:

Sending a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.

The processing method of the above profile can prevent the attacking of the tag data and improve the security.

In conjunction with the first aspect or the first possible implementation manner of the first aspect, in the second possible implementation manner of the first aspect, before the obtaining the marking information, the method further includes:

Sending a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type;

Receiving and displaying profile information corresponding to the profile type sent by the eUICC.

With reference to the first aspect, any one of the first to the second possible implementation manners of the first aspect, in a third possible implementation manner of the first aspect, the using the challenge information of the subscription management device Secure the tag data, including:

The challenge information of the subscription management device and the tag data are hashed.

With reference to the first aspect, any one of the first to the third possible implementation manners of the first aspect, in a fourth possible implementation manner of the first aspect, the profile download request further includes specific indication information, The specific indication information is used to indicate that the profile that the subscription management device needs to download is a specific type profile. The specific type profile in the present invention may be applied to any profile that needs to be reused, including a test applied to a scenario such as testing and maintenance. Profile.

The processing method of the above profile may be used to indicate that the profile that the SM-DP+ needs to download is a specific type profile by using specific indication information. For example, if the specific indication information indicates that the profile to be downloaded is the test profile, the download process of the test profile is executed according to the specific indication information SM-DP+.

With reference to the first aspect, any one of the first to fourth possible implementations of the first aspect, in a fifth possible implementation manner of the first aspect, the receiving, by the subscription management device, After a profile, it also includes:

Sending a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management device obtains the first deletion notification according to the profile. The profile identifies a first profile corresponding to at least one of the eUICC identifiers, and restores the first profile to a second profile.

With the fifth possible implementation of the first aspect, in a sixth possible implementation manner of the foregoing aspect, before the sending the profile first deletion notification to the subscription management device, the method further includes:

The processing of the profile can be performed only by receiving and displaying the profile information corresponding to the profile type, so that the subsequent step only processes the profile corresponding to the profile information, and protects other types of profiles to improve security.

With reference to the sixth possible implementation manner of the first aspect, in a seventh possible implementation manner of the first aspect, after the receiving and displaying the profile information that is sent by the eUICC and corresponding to the profile type, :

Obtaining a profile deletion instruction input by the user;

Deleting a corresponding specific type profile in the eUICC according to the profile deletion instruction.

In conjunction with the fifth possible implementation of the first aspect, in the eighth possible implementation manner of the foregoing aspect, before the sending the profile first deletion notification to the subscription management device, the method further includes:

Receiving a profile second deletion notification sent by the eUICC, where the profile second deletion notification is that the eUICC detects that a specific type profile is stored after receiving the eUICC challenge instruction or the profile activation instruction, and deletes the specific type profile. After sending it.

With reference to the first aspect, any one of the first to the eighth possible implementation manners of the first aspect, in the ninth possible implementation manner of the first aspect, the receiving, by the subscription management device, After a profile, it also includes:

The mobile network operator MNO is notified that the profile download is completed.

In a second aspect, an embodiment of the present invention provides a method for processing a profile, including:

Receiving a profile download request sent by the terminal device, where the profile download request includes at least Describe the tag data obtained by the terminal device;

Selecting one of the at least one second profile associated with the tag data to generate a first profile;

Sending the first profile to the terminal device.

With reference to the second aspect, in a first possible implementation manner of the second aspect, before the receiving the profile download request sent by the terminal device, the method further includes:

Obtaining first information sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC;

Sending, to the terminal device, second information, where the second information includes at least challenge information of the subscription management device;

The profile download request sent by the receiving terminal device includes:

Receiving a profile download request sent by the terminal device, where the profile download request includes the tag data, the tag identifier, and the eUICC after the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Generated signature information;

The selecting one of the at least one second profile associated with the tag data to generate the first profile comprises:

Obtaining corresponding tag data according to the tag identifier, verifying the security-protected tag data according to the tag data, and selecting one of the at least one second profile associated with the tag data after the verification is passed First profile.

With reference to the first possible implementation manner of the second aspect, in a second possible implementation manner of the second aspect, the acquiring, according to the marking identifier, acquiring corresponding marking data, and performing the security protection according to the marking data After the tag data is verified, including:

Obtaining tag data corresponding to the tag identifier, and performing security protection processing on the tag data by using challenge information, where the security protection may be a hash operation or an encryption operation, where the encryption operation may include using symmetric encryption or a public-private key The encryption method is applicable to any encryption method that can protect the tag data.

The processed tag data is compared with the tag data after the security protection, and if they are the same, the verification is passed.

In conjunction with the first or second possible implementation of the second aspect, in a third possible implementation of the second aspect, the at least one second profile associated with the tag data after the verification is passed Select one to generate the first profile, including:

Obtaining at least one second profile associated with the tag data corresponding to the tag identifier, and selecting one of the second profiles;

And adding the fifth information to the selected second profile to generate the first profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

With reference to the second aspect, any one of the first to the third possible implementation manners of the second aspect, in a fourth possible implementation manner of the second aspect, before the acquiring the first information sent by the terminal device ,Also includes:

Generating at least one second profile and one tag information according to a subscription request of the mobile network operator MNO, the tag information including the tag data and the tag identifier;

Associating the at least one second profile with the tag data;

A subscription response is returned to the MNO, the subscription response including the tag information.

With reference to the second aspect, the possible implementation of the first to the third aspect of the second aspect, in a fifth possible implementation manner of the second aspect, before the acquiring the first information sent by the terminal device ,Also includes:

Acquiring a tag information according to the subscription request of the mobile network operator MNO, the tag information including the tag data and the tag identifier, and generating at least one second profile;

Associating the at least one second profile with the tag data;

An order response is returned to the MNO.

With reference to the second aspect, any one of the first to fifth possible implementation manners of the second aspect, in a sixth possible implementation manner of the second aspect, After a profile, it also includes:

Receiving a profile first deletion notification sent by the terminal device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier;

Obtaining, according to the profile first deletion notification, a first profile corresponding to at least one of the profile identifier or the eUICC identifier;

Restoring the first profile to a second profile.

With the sixth possible implementation of the second aspect, in the seventh possible implementation of the second aspect, after the recovering the first profile to the second profile, the method further includes:

An encryption key is generated, and the second profile is decrypted and then re-encrypted using the encryption key.

With the sixth or the seventh possible implementation of the second aspect, in the eighth possible implementation of the second aspect, the recovering the first profile to the second profile includes:

And deleting the fifth information in the first profile to generate the second profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

In a third aspect, an embodiment of the present invention provides a terminal device, including:

An obtaining module, configured to obtain tag information, where the tag information includes tag data and/or tag identifiers;

a sending module, configured to send a profile download request to the subscription management device, where the profile download request includes at least the tag data;

a receiving module, configured to receive a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.

With reference to the third aspect, in a first possible implementation manner of the third aspect, the method further includes: a security protection module;

The receiving module is further configured to receive first information of the embedded universal integrated circuit card eUICC;

The sending module is further configured to send the first information to the subscription management device, where the first information includes at least the challenge information of the eUICC;

The receiving module is further configured to receive second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

The security protection module is configured to perform security protection on the tag data by using challenge information of the subscription management device;

The sending module is further configured to send the third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least the security-protected tag data and the tag Identification

The receiving module is further configured to receive fourth information of the eUICC, where the fourth information includes at least the signature information;

The sending module is specifically configured to send a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.

With the third aspect or the first possible implementation manner of the third aspect, in a second possible implementation manner of the third aspect, the sending module is further configured to send a profile information acquisition message to the eUICC, where The profile information acquisition message includes a profile type.

The receiving module is further configured to receive and display profile information corresponding to the profile type sent by the eUICC.

With reference to the third aspect, the first implementation of the first to the second aspect of the third aspect, in a third possible implementation manner of the third aspect, the security protection module is specifically used for The challenge information of the contract management device and the tag data are hashed.

With reference to the third aspect, any one of the first to the third possible implementation manners of the third aspect, in the fourth possible implementation manner of the third aspect, the profile download request further includes specific indication information, The specific indication information is used to indicate that the profile that the subscription management device needs to download is a specific type profile.

With reference to the third aspect, any one of the first to the fourth aspect of the third aspect, in a fifth possible implementation manner of the third aspect, the sending module is further configured to The subscription management device sends a profile first deletion notification, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management device acquires the profile identifier according to the profile first deletion notification. Or the first profile corresponding to the at least one information in the eUICC identifier, and restore the first profile to the second profile.

With the fifth possible implementation of the third aspect, in a sixth possible implementation manner of the third aspect, the sending module is further configured to send a profile information acquisition message to the eUICC, where the profile information is obtained. The message includes a profile type;

In conjunction with the sixth possible implementation of the third aspect, in a seventh possible implementation manner of the third aspect, the method further includes: deleting a module;

The obtaining module is further configured to acquire a profile deletion instruction input by the user;

The deleting module is configured to delete the corresponding one in the eUICC according to the profile deletion instruction A specific type of profile.

With reference to the fifth possible implementation manner of the third aspect, in an eighth possible implementation manner of the third aspect, the receiving module is further configured to receive a second deletion notification of the profile sent by the eUICC, the profile The second deletion notification is sent after the eUICC detects that a specific type profile is stored and deletes the specific type profile after receiving the eUICC challenge instruction or the profile activation instruction.

With reference to the third aspect, any one of the first to the eighth possible implementation manners of the third aspect, in the ninth possible implementation manner of the third aspect, the sending module is further configured to use the mobile network The operator MNO informs that the profile download is complete.

In a fourth aspect, an embodiment of the present invention provides a subscription management device, including:

a receiving module, configured to receive a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device;

a selection module, configured to select one of the at least one second profile associated with the tag data to generate a first profile;

And a sending module, configured to send the first profile to the terminal device.

With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the method further includes: acquiring a module;

The selection module includes: a verification unit and a profile generation unit;

The acquiring module is configured to acquire first information sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC;

The sending module is further configured to send second information to the terminal device, where the second information includes at least challenge information of the subscription management device;

The receiving module is specifically configured to receive a profile download request sent by the terminal device, where the profile download request includes a mark that the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Data, a tag identifier, and signature information generated by the eUICC;

The verification unit is configured to obtain corresponding tag data according to the tag identifier, and verify the security-protected tag data according to the tag data;

The profile generating unit is configured to select one of the at least one second profile associated with the tag data to generate a first profile after the verification is passed.

With reference to the first possible implementation manner of the fourth aspect, in a second possible implementation manner of the fourth aspect, the verification unit is configured to acquire the tag data corresponding to the tag identifier, and use the challenge information pair. The tag data is subjected to security protection processing; the processed tag data is compared with the security-protected tag data, and if they are the same, the verification is passed.

With reference to the first or second possible implementation manner of the fourth aspect, in a third possible implementation manner of the fourth aspect, the profile generating unit is configured to obtain, corresponding to the tag identifier, Marking at least one second profile associated with the data, and selecting one of the second profiles; adding the fifth information to the selected second profile to generate the first profile, the fifth information including at least initializing secure channel information and a configuration profile Security domain command.

With reference to the fourth aspect, the possible implementation manner of any one of the first to the third aspect, the fourth possible implementation manner of the fourth aspect, further includes: the first generating module and the first association Module

The first generating module is configured to generate at least one second profile and one tag information according to a subscription request of the mobile network operator MNO, where the tag information includes the tag data and the tag identifier;

The first association module is configured to associate the at least one second profile with the tag data;

The sending module is further configured to return an order response to the MNO, where the order response includes the tag information.

With reference to the fourth aspect, the first to the third possible implementation manner of the fourth aspect, in a fifth possible implementation manner of the fourth aspect, the method further includes: the second generating module and the second association Module

a second generating module, configured to acquire, according to a subscription request of the mobile network operator MNO, a tag information, where the tag information includes the tag data and the tag identifier, and generate at least one second profile;

a second association module, configured to associate the at least one second profile with the tag data;

The sending module is further configured to return an order response to the MNO.

With reference to the fourth aspect, any one of the first to the fifth possible implementation manners of the fourth aspect, the sixth possible implementation manner of the fourth aspect, further includes: a recovery module;

The receiving module is further configured to receive a first deletion notification of the profile sent by the terminal device, The profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier; and acquiring, according to the profile first deletion notification, a first profile corresponding to at least one of the profile identifier or the eUICC identifier;

The recovery module is configured to restore the first profile to a second profile.

In conjunction with the sixth possible implementation of the fourth aspect, in a seventh possible implementation manner of the fourth aspect, the method further includes:

And an encryption module, configured to generate an encryption key, and decrypt the second profile and use the encryption key to re-encrypt.

With reference to the sixth or seventh possible implementation of the fourth aspect, in the eighth possible implementation manner of the fourth aspect, the recovery module is specifically configured to: use the fifth information in the first profile The generating the second profile is removed, and the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

In a fifth aspect, an embodiment of the present invention provides a terminal device, including:

a processor, configured to acquire tag information, where the tag information includes tag data and/or tag identifiers;

a sender, configured to send a profile download request to the subscription management device, where the profile download request includes at least the tag data;

a receiver, configured to receive a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.

With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the processor is further configured to obtain first information of an embedded universal integrated circuit card eUICC;

The transmitter is further configured to send the first information to a subscription management device, where the first information includes at least challenge information of the eUICC;

The receiver is further configured to receive second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

The processor is further configured to perform security protection on the tag data by using challenge information of the subscription management device;

The processor is further configured to control to transmit third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least security protection Marking data and the mark identifier; acquiring fourth information of the eUICC, the fourth information including at least the signature information;

The transmitter is specifically configured to send a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.

With reference to the fifth aspect, or the first possible implementation manner of the fifth aspect, in a second possible implementation manner of the fifth aspect, the processor is further configured to control to send a profile information acquisition message to the eUICC, The profile information acquisition message includes a profile type, and acquires and controls display of profile information corresponding to the profile type sent by the eUICC.

With reference to the fifth aspect, any one of the first to the second possible implementation manners of the fifth aspect, in a third possible implementation manner of the fifth aspect, the processor is specifically configured to The challenge information of the contract management device and the tag data are hashed.

With reference to the fifth aspect, any one of the first to the third possible implementation manners of the fifth aspect, in a fourth possible implementation manner of the fifth aspect, the profile download request further includes specific indication information, The specific indication information is used to indicate that the profile that the subscription management device needs to download is a specific type profile.

With reference to the fifth aspect, any one of the first to fourth possible implementation manners of the fifth aspect, in a fifth possible implementation manner of the fifth aspect, the transmitter is further configured to The subscription management device sends a profile first deletion notification, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management device acquires the profile identifier according to the profile first deletion notification. Or the first profile corresponding to the at least one information in the eUICC identifier, and restore the first profile to the second profile.

With reference to the fifth possible implementation manner of the fifth aspect, in a sixth possible implementation manner of the fifth aspect, the processor is further configured to control to send a profile information acquisition message to the eUICC, where the profile information is Obtaining a message includes a profile type; acquiring and controlling to display profile information corresponding to the profile type sent by the eUICC.

With reference to the sixth possible implementation manner of the fifth aspect, in a seventh possible implementation manner of the fifth aspect, the processor is further configured to acquire a profile deletion instruction input by a user; and delete according to the profile deletion instruction A specific type profile corresponding to the eUICC.

In conjunction with the fifth possible implementation of the fifth aspect, the eighth possible implementation in the fifth aspect In the current mode, the processor is further configured to acquire a profile second deletion notification sent by the eUICC, where the profile second deletion notification is that the eUICC detects the storage after receiving the eUICC challenge command or the profile activation command. There is a specific type profile and is sent after deleting the specific type profile.

With reference to the fifth aspect, any one of the first to the eighth possible implementation manners of the fifth aspect, in the ninth possible implementation manner of the fifth aspect, the transmitter is further used for the mobile network The operator MNO informs that the profile download is complete.

In a sixth aspect, an embodiment of the present invention provides a subscription management device, including:

a receiver, configured to receive a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device;

a processor, configured to select one of the at least one second profile associated with the tag data to generate a first profile;

And a transmitter, configured to send the first profile to the terminal device.

With reference to the sixth aspect, in a first possible implementation manner of the sixth aspect, the receiver is further configured to acquire first information that is sent by the terminal device, where the first information includes at least an embedded universal integrated circuit card eUICC Challenge information;

The transmitter is further configured to send second information to the terminal device, where the second information includes at least challenge information of the subscription management device;

The receiver is specifically configured to receive a profile download request sent by the terminal device, where the profile download request includes a mark that the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Data, a tag identifier, and signature information generated by the eUICC;

The processor is further configured to obtain corresponding tag data according to the tag identifier, verify the security-protected tag data according to the tag data, and at least one associated with the tag data after the verification is passed Select one of the second profiles to generate the first profile.

With reference to the first possible implementation manner of the sixth aspect, in a second possible implementation manner of the sixth aspect, the processor is configured to obtain the tag data corresponding to the tag identifier, and use the challenge information pair. The tag data is subjected to security protection processing; the processed tag data is compared with the security-protected tag data, and if they are the same, the verification is passed.

Combining the first or second possible implementation of the sixth aspect, the third in the sixth aspect In a possible implementation, the processor is specifically configured to acquire at least one second profile associated with the tag data corresponding to the tag identifier, and select one of the second profiles; add the selected second profile The fifth information generates the first profile, and the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

With reference to the sixth aspect, the first to the third possible implementation manner of the sixth aspect, in a fourth possible implementation manner of the sixth aspect, the processor is further used according to the mobile network operator MNO The order request generates at least one second profile and a tag information, the tag information including the tag data and the tag identifier; associating the at least one second profile with the tag data;

The transmitter is further configured to return an order response to the MNO, where the order response includes the tag information.

With reference to the sixth aspect, the first to the third possible implementation manner of the sixth aspect, in a fifth possible implementation manner of the sixth aspect, the processor is further used according to the mobile network operator MNO The order request acquires a tag information, the tag information including the tag data and the tag identifier, and generates at least one second profile; associating the at least one second profile with the tag data;

The transmitter is further configured to return an order response to the MNO.

With reference to the sixth aspect, the first to fifth possible implementation manners of the sixth aspect, in a sixth possible implementation manner of the sixth aspect, the receiver is further configured to receive the sending by the terminal device a first deletion notification, the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier; and the first deletion notification according to the profile acquires at least one of the profile identifier or the eUICC identifier. First profile;

The processor is further configured to restore the first profile to a second profile.

With reference to the sixth possible implementation manner of the sixth aspect, in a seventh possible implementation manner of the sixth aspect, the processor is further configured to generate an encryption key, and use the second profile after decrypting The encryption key is re-encrypted.

With reference to the sixth or the seventh possible implementation manner of the sixth aspect, in an eighth possible implementation manner of the sixth aspect, the processor is configured to use the fifth information in the first profile The generating the second profile is removed, and the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

The seventh aspect of the present invention provides a communication device, including: a terminal device, a subscription management device, and an embedded universal integrated circuit card eUICC; wherein the terminal device adopts the third aspect, the first aspect of the third aspect to The device of any one of the first to eighth aspects of the fourth aspect, the device of any one of the first to the eighth aspects of the fourth aspect.

The eighth aspect of the present invention provides a communication device, including: a terminal device, a subscription management device, and an embedded universal integrated circuit card eUICC; wherein the terminal device adopts the fifth aspect, the first aspect of the fifth aspect to The device according to any one of the possible implementations of the ninth aspect, wherein the subscription management device is the device according to any one of the first to eighth aspects of the sixth aspect.

The processing method, device and system of the profile of the embodiment of the present invention, through the association of a tag data with multiple profiles, and the security protection of the tag data, not only realize the reuse of the tag data, reduce the cost, but also prevent the replay attack. Increased security.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

1 is a flow chart of an embodiment of a processing method of a profile of the present invention;

2 is a schematic structural diagram of a communication system;

3 is a flow chart of another embodiment of a processing method of a profile of the present invention;

4 is a flow chart of still another embodiment of a processing method of a profile of the present invention;

FIG. 5 is a flowchart of a fourth embodiment of a processing method of a profile according to the present invention; FIG.

6 is a flowchart of a fifth embodiment of a processing method of a profile according to the present invention;

7 is a schematic structural diagram of an embodiment of a terminal device according to the present invention;

8 is a schematic structural diagram of another embodiment of a terminal device according to the present invention;

9 is a schematic structural diagram of still another embodiment of a terminal device according to the present invention;

10 is a schematic structural diagram of an embodiment of a subscription management device according to the present invention;

11 is a schematic structural diagram of another embodiment of a subscription management device according to the present invention;

12 is a schematic structural diagram of still another embodiment of a subscription management device according to the present invention;

FIG. 13 is a schematic structural diagram of a fourth embodiment of a subscription management device according to the present invention; FIG.

14 is a schematic structural diagram of a fifth embodiment of a subscription management device according to the present invention;

15 is a schematic structural diagram of a fourth embodiment of a terminal device according to the present invention;

16 is a schematic structural diagram of a sixth embodiment of a subscription management device according to the present invention;

Figure 17 is a block diagram showing the structure of an embodiment of a communication system of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

1 is a flowchart of an embodiment of a method for processing a profile of the present invention. As shown in FIG. 1 , a method for processing a profile of the present invention includes a method for downloading and deleting a profile, and the method is applicable to a communication system including a subscription management device. The terminal device and the eUICC, the profile in the present invention may be user subscription management information, which may be a set of file structure, data, a combination of applications, etc., when the carrier data is included, the profile may be used to access the operator's network for use. Services provided by the operator; the functions of the contract management device may include generating a profile, securing a profile, binding a profile to a specific eUICC, storing a profile, and downloading a profile. 2 is a schematic structural diagram of a communication system. As shown in FIG. 2, the terminal device has an LPA. Here, the eUICC can also be used as a component independent of the terminal device. Alternatively, the eUICC can also be used as a component of the terminal device. The LPA includes LPD and LUI, and the LPD is responsible for downloading the profile, that is, the LPD downloads the profile from the SM-DP+ to the LPD through the HTTPS secure connection, and then sends the downloaded profile to the eUICC. The LUI provides the interaction logic and interface with the user. The interaction interface can also be provided by other terminals associated with the terminal device. The user can manage the profile through the LUI, such as downloading a new profile, activating the profile, deactivating the profile, and deleting. Profile, etc. The subscription management device may be the SM-DP+ described above.

The method of this embodiment may include:

S101, SM-DP+ receive the subscription request sent by the MNO;

Since the eUICC is not necessarily purchased by the operator, it may also be purchased by the terminal manufacturer and integrated into the terminal for sale. Therefore, the terminal manufacturer usually orders the profile from the MNO. For example, if the terminal manufacturer's employee repairs the terminal device, Management, update, etc., need to use the test profile dedicated to testing, then these test profiles will be ordered from MNO. The MNO makes a profile order to the SM-DP+ according to the ordering request of the terminal manufacturer. The MNO may include the type or attribute of the profile to be ordered in the subscription request, and the present invention is uniformly represented by the type of the profile. For example, profile type=test, or profile attribute=test, to inform SM-DP+ that this subscription is a profile for testing, and the subscription request may also include the required number of profiles, profile identifiers, and the like.

S102: The SM-DP+ generates at least one profile and one tag information according to the ordering request of the MNO, where the tag information includes tag data and a tag identifier, and associates at least one profile with the tag data;

The SM-DP+ generates at least one profile and one tag information according to the subscription request of the MNO, and the tag data in the tag information is used to match the profile download request sent by the terminal device and at least one profile, and the tag identifier is an index of the tag data. The tag data and the tag identifier in the tag information may be, for example, a token and a token id. The token and the token id may be two strings respectively, or may be in a string, some fields identify a token id, and the remaining fields identify a token. A tag information is associated with at least one profile.

Optionally, the SM-DP+ can generate the tag information by itself as well as the tag information, and the tag information can be sent by the MNO in the order request.

S103, SM-DP+ return an order response to the MNO, and the order response includes the tag information.

The SM-DP+ sends a subscription response to the MNO. If the tag information is generated by the SM-DP+, the tag response needs to be included in the order response; if the tag information is generated by the MNO, the tag response may not include the tag information.

The MNO sends the tag information to the terminal manufacturer requesting the profile order, and the process by which the terminal manufacturer requests the eUICC to apply for the profile ends. The terminal manufacturer's employees can then use the above-mentioned tag information to download the profile and use the profile to operate the terminal device, including testing, repairing, managing, and using.

In this embodiment, the terminal manufacturer subscribes at least one profile from the SM-DP+ through the MNO, and the at least one profile is associated with one tag data, so that the terminal manufacturer can focus on the profile. Use, reduce costs.

After the profile is ordered, the user can input the information into the terminal device by using a keyboard, a touch, a scanning QR code, etc., and the terminal device recognizes the operation corresponding to the information, and starts a corresponding function, for example, the user inputs a personal identification password (Personal Identification) Number, abbreviation: PIN), the terminal device recognizes that the PIN is a preset instruction to enable the LPA, so the terminal device starts the LPA function, so that the terminal device enters a state of testing, maintenance, and the like. Optionally, the information input by the user in the foregoing manner may include two types, one type of information used to trigger the terminal device to start the LPA, such as the PIN, and the other information is other information such as the tag information after the LPA is activated.

In addition, when the LPA function is enabled, the terminal device enters a state of testing, maintenance, etc., and can be considered as an engineering mode or a test mode of the terminal device. Specifically, the LPA can be used as an application (application, abbreviation: APP) or a setting function of the terminal device. When the user starts the LPA, the terminal device prompts the user to input the verification information, and the user inputs the PIN code, and the LPA verifies the user. When the entered PIN code is a preset PIN code entering a specific mode instead of the PIN code set by the user, the specific mode can be entered, and the next action is performed in the specific mode. Alternatively, the user inputs a specific character string on the dialing interface of the terminal device, and then triggers the terminal device to automatically enter the specific mode of the LPA, and the like.

FIG. 3 is a flowchart of another embodiment of a processing method of a profile of the present invention. As shown in FIG. 3, the method of this embodiment is also applicable to the communication system shown in FIG. 2. After the process of ordering the profile, the method in this embodiment may include:

S201: The terminal device sends a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type.

The terminal device can obtain the profile information by sending the profile information to the eUICC, and carry the profile type in the message, so as to know whether the profile corresponding to the profile type already exists in the eUICC. For example, the terminal device sends GetProfileInfo information to the eUICC, wherein the criteria for setting the search include an indication that the profile type is a specific type.

S202: The terminal device receives and displays the profile information corresponding to the profile type sent by the eUICC.

The profile information may include a number of profile elements and a status. After receiving the feedback from the eUICC, the terminal device may display the profile information to the user. If the eUICC does not match the profile matching the profile type, the terminal device displays empty. This allows users to view the eUICC Whether the profile is the profile you need, if not, you can operate the terminal device to download or delete the profile.

In this embodiment, the terminal device can learn whether the eUICC has a qualified profile by using the information exchange with the eUICC, so that the following steps can be performed according to the storage situation of the profile, for example, if the profile in the eUICC is not the profile required by the user, The profile can be downloaded or deleted according to the user's operation.

4 is a flow chart of still another embodiment of a processing method of a profile of the present invention. As shown in FIG. 4, the method of this embodiment is also applicable to the communication system shown in FIG. 2. After the step s202 of the method embodiment shown in FIG. 3, the method of this embodiment may include:

S301. The terminal device acquires the tag information.

Similarly, the terminal device may obtain the tag information previously obtained by the user by using a keyboard input, a touch input, a scan QR code, and the like, and the tag information may include tag data such as a token, and may further include a tag identifier, such as a token id. .

S302: The terminal device receives the first information of the eUICC, where the first information includes at least the challenge information of the eUICC.

S303. The terminal device sends the first information to the SM-DP+.

S304. The terminal device receives the second information returned by the SM-DP+, where the second information includes at least the challenge information of the SM-DP+.

S305. The terminal device uses the challenge information of the SM-DP+ to secure the tag data.

The terminal device can hash the SM-DP+ challenge information and the tag data for security protection. Optionally, the terminal device may further encrypt the challenge information and the tag data of the SM-DP+ by using a symmetric key pre-agreed with the SM-DP+. In this way, even if the profile is downloaded, the token needs to be provided to the SM-DP+, and the token is protected to prevent the replay attack, thereby improving the security.

S306: The terminal device sends the third information to the eUICC, so that the eUICC generates the signature information by using the third information, where the third information includes at least the security-protected tag data and the tag identifier.

After the terminal device performs security protection on the tag data, the tag data and the tag identifier after the security protection can be sent to the eUICC, and the third information may further include information such as a confirmation code. The eUICC signs the received third information.

S307. The terminal device receives fourth information of the eUICC, where the fourth information includes at least signature information.

In addition to the signature information, the fourth information may also include some information related to the eUICC itself, such as a certificate of the eUICC, an eUICC capacity, and the like, where the eUICC certificate includes an eUICC identifier.

S308. The terminal device sends a profile download request to the SM-DP+, where the profile download request includes the tag data, the tag identifier, and the signature information after the security protection.

After the terminal device has the information such as the tag data, the tag identifier, and the signature information of the eUICC after the security protection, the terminal device can request the profile download from the SM-DP+.

Optionally, the profile download request further includes specific indication information, where the specific indication information is used to indicate that the profile that the SM-DP+ needs to download is a specific type profile. For example, if the specific indication information indicates that the profile to be downloaded is the test profile, the download process of the test profile is executed according to the specific indication information SM-DP+.

S309 and SM-DP+ obtain the corresponding tag data according to the tag identifier, and verify the tag data after the security protection according to the tag data;

After receiving the profile download request, the SM-DP+ needs to ensure that the security-protected tag data in the profile download request corresponds to the locally-queried tag data, and the SM-DP+ locally obtains the tag corresponding to the tag identifier in the profile download request. Data, using its own challenge information to securely protect the tag data, that is, performing the same hash operation on its own challenge information and the tag data, and then hashing the tag data with the same hash operation. The tag data after security protection is compared. If they are the same, the verification is confirmed. Optionally, if the security protection of the tag data is a symmetric key encryption method, the SM-DP+ may search for a corresponding symmetric key according to the tag identifier, and then decrypt the received encrypted tag data to obtain decryption. The subsequent token data (token) compares the decrypted token with the token corresponding to the token identifier, or SM-DP+ can also encrypt the token and challenge information corresponding to the token identifier using the symmetric key, and compare the encrypted result. Whether it is the same as the received encrypted tag data.

S310, SM-DP+ select one of the at least one second profile associated with the tag data to generate the first profile after the verification is passed;

According to the steps of the method embodiment shown in FIG. 1, the profile generated by the SM-DP+ according to the MNO subscription request is plaintext data that has not been secured, that is, an unprotected profile package (UPP), and then SM- DP+ generates an encryption key, encrypts and integrity protects the UPP, and forms a protected profile package (PPP). SM-DP+ associates at least one PPP with one tag data, and PPP is the second. Profile. When the SM-DP+ receives the profile download request, the tag data is obtained according to the tag identifier, and the corresponding at least one second profile is found according to the tag data, and the SM-DP+ selects a profile corresponding to the tag data, that is, the second profile. PPP). Optionally, the SM-DP+ can also directly obtain the tag data, and then find the corresponding at least one second profile according to the tag data, and the SM-DP+ selects a profile corresponding to the tag data, that is, the second profile (PPP). The SM-DP+ adds the fifth information to the first profile to generate the first profile. The fifth information includes at least the initialization security channel information and the configuration profile security domain command, where the profile security domain is a secure container for storing a profile, such as issuing security. The domain profile (issuer security domain-profile, ISD-P) or the Profile Domain command. The SM-DP+ generates an ISD-P command to obtain the metadata of the profile, and uses the SM-DP+ and eUICC to perform session key encryption to generate the ISD-P command and profile metadata, and then initialize the security channel information. InitialiseSecureChannel) is added to the selected profile to form a first profile (bound profile package (BPP)). At this time, the first profile is successfully bound to the eUICC, because except for the SM-DP+, only the eUICC can decrypt the first profile.

It should be noted that after the first profile is sent to the terminal device, the SM-DP+ stores the record as the record that the first profile has been downloaded, and updates the association relationship with the token, that is, the first profile and the token. Associated with the token being originally associated with the token by the second profile prior to generating the first profile. Therefore, among the multiple profiles corresponding to the token, some may be PPP, and some are already BPP. However, when the SM-DP+ receives the profile download request, only one of the second profiles (PPPs) corresponding to the token is selected. Generate a first profile (BPP).

In addition, SM-DP+ can also store the first profile as a flag that the profile has been downloaded.

S311. The terminal device receives the first profile sent by the SM-DP+.

S312, the terminal device sends the first profile to the eUICC;

At this point, the process of downloading the profile ends.

S313. The terminal device notifies the MNO that the profile download is completed.

The terminal device can notify the SM-DP+ first, and then the SM-DP+ notifies the MNO that the download is completed, so that the MNO performs related configuration.

In this embodiment, the association between the tag data and the plurality of profiles is performed, and the tag data is entered. Line security protection not only realizes the reuse of profile and tag data, reduces costs, but also prevents replay attacks and improves security.

FIG. 5 is a flowchart of a fourth embodiment of a processing method of a profile according to the present invention. As shown in FIG. 5, the method of this embodiment is also applicable to the communication system shown in FIG. 2. After the step s202 of the method embodiment shown in FIG. 3, the method of this embodiment may include:

S401. The terminal device acquires a profile deletion instruction input by the user.

The method in this embodiment is a process of deleting a profile after the terminal device downloads the profile. Similarly, in this embodiment, the user can also input information into the terminal device by using a keyboard, a touch, a scanning QR code, etc., the terminal device recognizes the operation corresponding to the information, and activates the corresponding function, so that the terminal device enters the test, Maintenance and other conditions.

After the steps of the method embodiment shown in FIG. 3, the terminal device can display the profile information to the user, so that the user can view whether the profile in the eUICC is a profile to be deleted, and if so, the terminal device can be operated to delete the profile. The user can enter the profile delete command by clicking the delete option.

S402. The terminal device deletes a specific type profile corresponding to the eUICC according to the profile deletion command.

The terminal device deletes the profile corresponding to the profile identifier in the eUICC. For example, the user's test work on the terminal device is completed. The previously downloaded test profile for testing is no longer used, so to delete it, the terminal device learns that the type of the profile to be deleted is the test profile according to the foregoing steps. It is deleted. Specifically, in the foregoing step, the terminal device obtains the profile that needs to be deleted from the eUICC, so that the profile identifier of the profile to be deleted is carried in the deletion instruction sent to the eUICC, and the corresponding profile is deleted by the eUICC.

S403. The terminal device sends a profile first deletion notification to the SM-DP+, where the first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier.

After the profile identifier of the profile to be deleted is obtained, the first profile corresponding to at least one of the profile identifier or the eUICC identifier is notified that the SM-DP+ has been deleted on the eUICC.

S404, the SM-DP+ obtains the first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the first deletion notification of the profile;

The SM-DP+ acquires a first profile corresponding to at least one of the profile identifier or the eUICC identifier.

S405, SM-DP+ restores the first profile to the second profile.

The SM-DP+ removes the fifth information in the first profile to generate a second profile, and the fifth information includes at least initializing the secure channel information and configuring the ISD-P command. For example, the SM-DP+ removes the initial security channel information (InitialiseSecureChannel) in front of the first profile, the session key encryption generated by the SM-DP+ and the eUICC, and the information such as CI, SM, PPK, etc., and the first profile (BPP) ) Revert to the second profile (PPP). The second profile thus restored can be re-added with the new fifth information to form a new first profile, thereby being reused.

S406 and SM-DP+ generate an encryption key, and decrypt the second profile and then re-encrypt the encryption key.

For the restored second profile, SM-DP+ can randomly generate a new encryption key for security, decrypt the second profile with the original key, and then re-encrypt it with a new encryption key.

In this embodiment, by restoring the first profile to be deleted to the second profile, the profile can be reused, the cost is reduced, and the security is improved by re-encrypting the second profile.

FIG. 6 is a flowchart of a fifth embodiment of a processing method of a profile according to the present invention. As shown in FIG. 6, the method of this embodiment is also applicable to the communication system shown in FIG. 2. The method of this embodiment may include:

S501: The terminal device receives a profile second deletion notification sent by the eUICC, where the second deletion notification is sent by the eUICC after detecting that the eUICC challenge command or the profile activation command is received, and the specific type profile is stored, and the specific type profile is deleted.

In this embodiment, the user does not actively delete the profile that is no longer used, and if other users need to replace the profile with their own profile after obtaining the terminal device, or the user needs to activate the profile, the eUICC is triggered to detect whether there is another. A profile of type exists. For example, the maintenance personnel use the test profile to maintain the terminal device. After the user of the terminal device retrieves the terminal device, download or use its own profile. At this time, the eUICC is triggered to detect whether the test profile of the previous test is not deleted. When the eUICC detects that a specific type profile is stored after receiving the eUICC challenge command or the profile activation command sent by the terminal device, it is deleted. The eUICC notifies the terminal device after deleting the specific type of profile.

S502: The terminal device sends a profile first deletion notification to the SM-DP+, where the first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier.

S503, the SM-DP+ obtains the first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the first deletion notification of the profile;

S504, SM-DP+ restore the first profile to the second profile;

S505 and SM-DP+ generate an encryption key, and decrypt the second profile and then re-encrypt the encryption key.

Steps s502 to s505 are similar to the implementation principles of steps s403 to s406 of the foregoing method embodiments, and are not described herein again.

FIG. 7 is a schematic structural diagram of an embodiment of a terminal device according to the present invention. As shown in FIG. 7, the device in this embodiment may include: an obtaining module 11, a sending module 12, and a receiving module 13, wherein the obtaining module 11 is configured to obtain Marking information, the tag information includes tag data and/or tag identifier; the sending module 12 is configured to send a profile download request to the subscription management device, the profile download request includes at least the tag data, and the receiving module 13 is configured to receive And the first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.

The device in this embodiment may be used to implement the technical solution of the foregoing method embodiment, and the implementation principle and the technical effect are similar, and details are not described herein again.

FIG. 8 is a schematic structural diagram of another embodiment of a terminal device according to the present invention. As shown in FIG. 8, the device in this embodiment may further include: a security protection module 14 on the basis of the device structure shown in FIG. The receiving module 13 is further configured to receive the first information of the embedded universal integrated circuit card eUICC; the sending module 12 is further configured to send the first information to the subscription management device, where the first information includes at least The information about the challenge of the eUICC; the receiving module 13 is further configured to receive the second information returned by the subscription management device, where the second information includes at least the challenge information of the subscription management device; the security protection module 14 The method for securely protecting the tag data by using the challenge information of the subscription management device; the sending module 12 is further configured to send the third information to the eUICC, so that the eUICC uses the third The information generates signature information, the third information includes at least the security-protected tag data and the tag identifier, and the receiving module 13 is further configured to receive the fourth information of the eUICC, where the fourth information includes at least The sending module 12 is specifically configured to send a profile download request to the subscription management device, The profile download request includes security-protected tag data, the tag identifier, and the signature information.

Further, the sending module 12 is further configured to send a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type, and the receiving module 13 is further configured to receive and display the Profile information corresponding to the profile type.

Further, the security protection module 14 is specifically configured to perform hash operation on the challenge information of the subscription management device and the tag data.

Further, the profile download request further includes specific indication information, where the specific indication information is used to indicate that the profile that the subscription management device needs to download is a specific type profile.

Further, the sending module 12 is further configured to send a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management The device acquires a first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the profile first deletion notification, and restores the first profile to a second profile.

FIG. 9 is a schematic structural diagram of still another embodiment of a terminal device according to the present invention. As shown in FIG. 9, the device in this embodiment may further include: a deletion module 15 on the basis of the device structure shown in FIG. The obtaining module 11 is further configured to acquire a profile deletion command input by the user, and the deleting module 15 is configured to delete a specific type profile corresponding to the eUICC according to the profile deletion instruction.

Further, the receiving module 13 is further configured to receive a second deletion notification sent by the eUICC, where the second deletion notification is that the eUICC detects the storage after receiving the eUICC challenge command or the profile activation command. There is a specific type profile and is sent after deleting the specific type profile.

Further, the sending module 12 is further configured to notify the mobile network operator MNO that the profile download is completed.

10 is a schematic structural diagram of an embodiment of a subscription management device according to the present invention. As shown in FIG. 10, the apparatus of this embodiment may include: a receiving module 21, a selecting module 22, and a sending module 23, where the receiving module 21 is configured to Receiving a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device, and the selecting module 22 is configured to select one of the at least one second profile associated with the tag data. a profile sending module 23, configured to send the first profile to the terminal device.

FIG. 11 is a schematic structural diagram of another embodiment of a subscription management device according to the present invention. As shown in FIG. 11, the device of the present embodiment further includes: an acquisition module 24, based on the device structure shown in FIG. And the selection module 22 includes a verification unit 221 and a profile generation unit 222. The obtaining module 24 is configured to acquire first information that is sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC, and the sending module 23 is further configured to send to the terminal device The second information, the second information includes at least the challenge information of the subscription management device, and the receiving module 21 is configured to receive a profile download request sent by the terminal device, where the profile download request includes the terminal device usage The tag information of the subscription management device, the tag data, the tag identifier, and the signature information generated by the eUICC. The verification unit 221 is configured to obtain corresponding tag data according to the tag identifier. And verifying the security-protected tag data according to the tag data; the profile generating unit 222, configured to: after the verification succeeds, select one of the at least one second profile associated with the tag data to generate a first Profile.

Further, the verification unit 221 is specifically configured to acquire the tag data corresponding to the tag identifier, and perform security protection processing on the tag data by using the challenge information; and the processed tag data and the security-protected tag. The data is compared, and if they are the same, the verification is passed.

Further, the selecting module 22 is configured to acquire at least one second profile associated with the tag data, and select one of the second profiles, and add the fifth information to the selected second profile to generate the first profile. The fifth information includes at least an initialization security channel information and a configuration profile security domain command.

FIG. 12 is a schematic structural diagram of still another embodiment of the subscription management device of the present invention. As shown in FIG. 12, the device of this embodiment is further configured to include: a first generation module, based on the device structure shown in FIG. 25 and a first association module 26. The first generating module 25 is configured to generate at least one second profile and one tag information according to a subscription request of the mobile network operator MNO, where the tag information includes the tag data, and the first association module 26 is configured to: Associate the at least one second profile with the tag data; the sending module 23 is further configured to return an order response to the MNO, the order response including the tag information.

FIG. 13 is a schematic structural diagram of a fourth embodiment of the subscription management device of the present invention. As shown in FIG. 13 , the device of the embodiment is further configured to include: second generation. Module 27 and second association module 28. a second generating module 27, configured to acquire, according to a subscription request of the mobile network operator MNO, a tag information, where the tag information includes the tag data, and generate at least one second profile; and a second association module 28, configured to The at least one second profile is associated with the tag data; the sending module 23 is further configured to return an order response to the MNO.

FIG. 14 is a schematic structural diagram of a fifth embodiment of the subscription management device of the present invention. As shown in FIG. 14, the device of the embodiment is based on the device structure shown in FIG. 10, and further includes: a recovery module 29 And encryption module 30. The receiving module 21 is further configured to receive a profile first deletion notification that is sent by the terminal device, where the profile first deletion notification includes a profile identifier or an eUICC identifier, and obtains the profile identifier according to the profile first deletion notification. Or the first profile corresponding to the eUICC identifier; the recovery module 28 is configured to restore the first profile to the second profile.

The encryption module 30 is configured to generate an encryption key, and decrypt the second profile and use the encryption key to re-encrypt.

Further, the recovery module 29 is specifically configured to: use the fifth information in the first profile The generating the second profile is removed, and the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

FIG. 15 is a schematic structural diagram of a fourth embodiment of a terminal device according to the present invention. As shown in FIG. 15, the device in this embodiment may include: a processor 41, a transmitter 42, a receiver 43, an input unit, and an output unit, where The processor 41 typically controls the overall operation of the terminal device, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. The processor 41 can execute instructions to perform all or part of the steps of the above method. Moreover, processor 41 may include one or more modules to facilitate interaction between processor 41 and other components. For example, processor 41 may include a multimedia module to facilitate interaction between the multimedia component and processor 41. Transmitter 42 and receiver 43 are configured to facilitate wired or wireless communication between the terminal device and other devices. The terminal device can access a wireless network based on a communication standard, such as Wireless-Fidelity (WiFi), 2G or 3G, or a combination thereof. In an exemplary embodiment, the transmitter 42 and the receiver 43 receive broadcast signals or broadcast associated information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the transmitter 42 and the receiver 43 further include a Near Field Communication (NFC) module to facilitate short range communication. For example, the NFC module can be based on Radio Frequency Identification (RFID) technology, Infrared Data Association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (Bluetooth, Abbreviation: BT) technology and other technologies to achieve. The input unit and the output unit receive digital or various character information, and may include input keys and function keys for setting various functions and controlling functions of the terminal device. More specifically, the input unit and the output unit may include a key for requesting movement. For example, a user can operate an input unit and an output unit to move a focus on a menu page or menu page. The keys for requesting movement may include a keyboard (arrow key or volume key), a spherical rocker, an optical joystick, a scroll wheel key, and the like. Further, the input unit and the output unit may include a determination key for executing the selected (focused) menu item. The input unit and the output unit may be constituted by one of a button type keyboard, a spherical rocker, an optical joystick, a scroll key, or the like, or a combination thereof.

In addition, the memory of the terminal device is configured to store various types of data to support operation at the terminal device. Examples of such data include instructions for any application or method operating on the terminal device, contact data, phone book data, messages, pictures, videos, and the like. The memory can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access Memory Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read Only Memory (Erasable Programmable Read Only Memory) , abbreviated as: EPROM), Programmable Red-Only Memory (PROM), Read-Only Memory (ROM), magnetic memory, flash memory, disk or optical disk.

The processor 41 is configured to acquire the tag information, where the tag information includes the tag data and/or the tag identifier, and the sender 42 is configured to send a profile download request to the subscription management device, where the profile download request includes at least the tag data; The receiver 43 is configured to receive a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.

Further, the tag information further includes a tag identifier; the processor 41 is further configured to acquire first information of the embedded universal integrated circuit card eUICC; the transmitter 42 is further configured to send the first information For the subscription management device, the first information includes at least the challenge information of the eUICC; the receiver 43 is further configured to receive the second information returned by the subscription management device, where the second information includes at least the subscription Managing the challenge information of the device; the processor 41 is further configured to: use the challenge information of the subscription management device to secure the tag data; the processor 41 is further configured to control to transmit the third information to the The eUICC is configured to enable the eUICC to generate signature information by using the third information, where the third information includes at least the security-protected tag data and the tag identifier; and acquiring the fourth information of the eUICC, the fourth The information includes at least the signature information. The sender 42 is specifically configured to send a profile download request to the subscription management device, where the profile download request includes a security-protected target. Data, the identification and the signature information flag.

Further, the processor 41 is further configured to control to transmit a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type, and obtain and control to display a profile corresponding to the profile type sent by the eUICC. information.

Further, the processor 41 is specifically configured to perform hash operation on the challenge information of the subscription management device and the tag data.

Further, the sender 42 is further configured to send a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management The device acquires a first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the profile first deletion notification, and restores the first profile to a second profile.

Further, the processor 41 is further configured to acquire a profile deletion instruction input by the user, and delete a specific type profile corresponding to the eUICC according to the profile deletion instruction.

Further, the processor 41 is further configured to acquire a profile second deletion notification sent by the eUICC, where the profile second deletion notification is that the eUICC detects the storage after receiving the eUICC challenge instruction or the profile activation instruction. There is a specific type profile and is sent after deleting the specific type profile.

Further, the sender 42 is further configured to notify the mobile network operator MNO that the profile download is completed.

FIG. 16 is a schematic structural diagram of a sixth embodiment of a subscription management device according to the present invention. As shown in FIG. 16, the device in this embodiment may include: a receiver 51, a processor 52, and a transmitter 53, wherein the processor 52 is usually Controls the overall operation of the subscription management device, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. Processor 52 can execute instructions to perform all or part of the steps of the above method. Moreover, processor 52 may include one or more modules to facilitate interaction between processor 52 and other components. For example, processor 52 may include a multimedia module to facilitate interaction between the multimedia component and processor 52. Transmitter 53 and receiver 51 are configured to facilitate wired or wireless communication between the subscription management device and other devices. The subscription management device can access a wireless network based on a communication standard, such as Wireless-Fidelity (WiFi), 2G or 3G, or a combination thereof. In an exemplary embodiment, the transmitter 53 and the receiver 51 receive broadcast signals or broadcast associated information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the transmitter 53 and the receiver The device 51 also includes a Near Field Communication (NFC) module to facilitate short-range communication. For example, the NFC module can be based on Radio Frequency Identification (RFID) technology, Infrared Data Association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (Bluetooth, Abbreviation: BT) technology and other technologies to achieve.

Additionally, the memory of the subscription management device is configured to store various types of data to support operation at the subscription management device. Examples of such data include instructions for any application or method operating on a subscription management device, contact data, phone book data, messages, pictures, videos, and the like. The memory can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), electrically erasable programmable read only memory (Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read Only Memory (EPROM), Programmable Red-Only Memory (PROM), only Read-Only Memory (ROM), magnetic memory, flash memory, disk or optical disk.

The receiver 51 is configured to receive a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device, and the processor 52 is configured to use at least one second associated with the tag data. One of the profiles is selected to generate a first profile; a transmitter 53 is configured to send the first profile to the terminal device.

Further, the receiver 51 is further configured to acquire first information sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC; the transmitter 53 is further used for The terminal device sends the second information, where the second information includes at least the challenge information of the subscription management device, and the receiver 51 is configured to receive a profile download request sent by the terminal device, where the profile download request includes the And the tag information, the tag identifier, and the signature information generated by the eUICC, where the terminal device uses the challenge information of the subscription management device, and the processor 52 is further configured to identify the identifier according to the identifier. Obtaining corresponding tag data, verifying the security-protected tag data according to the tag data; selecting one of the at least one second profile associated with the tag data after the verification is passed First profile.

Further, the processor 52 is specifically configured to acquire tag data corresponding to the tag identifier, perform security protection processing on the tag data by using challenge information, and process the tagged data and the security-protected tag. The data is compared, and if they are the same, the verification is passed.

Further, the processor 52 is specifically configured to acquire and select one at least one second profile associated with the tag data, and add a fifth information to the selected second profile to generate the The first profile, the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

Further, the processor 52 is further configured to generate, according to the subscription request of the mobile network operator MNO, at least one second profile and one tag information, where the tag information includes the tag data; and the at least one second profile Associated with the tag data; the transmitter 53 is further configured to return an order response to the MNO, the order response including the tag information.

Further, the processor 52 is further configured to acquire, according to a subscription request of the mobile network operator MNO, a tag information, where the tag information includes the tag data, and generate at least one second profile; The second profile is associated with the tag data; the transmitter 53 is further configured to return an order response to the MNO.

Further, the receiver 51 is further configured to receive a profile first deletion notification sent by the terminal device, where the profile first deletion notification includes a profile identifier or an eUICC identifier, and the first deletion notification is obtained according to the profile. The profile identifier or the first profile corresponding to the eUICC identifier; the processor 52 is further configured to restore the first profile to the second profile.

Further, the processor 52 is further configured to generate an encryption key, and decrypt the second profile and use the encryption key to re-encrypt.

Further, the processor 52 is specifically configured to remove the fifth information in the first profile to generate the second profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.

FIG. 17 is a schematic structural diagram of an embodiment of a communication system according to the present invention. As shown in FIG. 17, the system of the present embodiment includes: a terminal device 61, a subscription management device 62, and an eUICC 63. The structure of any device embodiment of FIG. 9 is correspondingly configured to perform the technical solution of any one of the method embodiments of FIG. 1 to FIG. 6. The implementation principle and technical effects are similar, and details are not described herein again; the subscription management device 62 may Using the structure of any of the apparatus embodiments of FIGS. 10 to 14, Correspondingly, the technical solution of any one of the method embodiments of FIG. 1 to FIG. 6 can be performed, and the implementation principle and the technical effect are similar, and details are not described herein again.

Further, the terminal device 61 in the communication system of FIG. 17 may adopt the structure of the device embodiment shown in FIG. 15 , and correspondingly, the technical solution of any of the method embodiments in FIG. 1 to FIG. 6 may be performed, and the implementation principle thereof is implemented. The technical solution is similar to the technical effect, and is not described here. The contract management device 62 can adopt the structure of the device embodiment shown in FIG. 16 , and correspondingly, the technical solution of any one of the method embodiments of FIG. 1 to FIG. 6 can be implemented. The principle and technical effect are similar and will not be described here.

In the several embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as the unit may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. . Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform the methods of the various embodiments of the present invention. Part of the steps. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

Those skilled in the art will clearly understand that for the convenience and brevity of the description, only the above The division of the function modules is exemplified. In practical applications, the above function assignments may be completed by different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. For the specific working process of the device described above, refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

A method for processing a profile, comprising:

Obtaining tag information, the tag information including tag data;

Sending a profile download request to the subscription management device, where the profile download request includes at least the tag data;

Receiving a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.
The method according to claim 1, wherein the tag information further includes a tag identifier; and before the sending the profile download request to the subscription management device, the method further includes:

Receiving the first information of the embedded universal integrated circuit card eUICC, and transmitting the first information to the subscription management device, where the first information includes at least the challenge information of the eUICC;

Receiving second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

Using the challenge information of the subscription management device to secure the tag data;

Transmitting the third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least the security-protected tag data and the tag identifier;

Receiving fourth information of the eUICC, where the fourth information includes at least the signature information;

Sending a profile download request to the subscription management device, including:

Sending a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.
The method according to claim 1 or 2, wherein before the obtaining the tag information, the method further comprises:

Sending a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type;

Receiving and displaying profile information corresponding to the profile type sent by the eUICC.
The method according to any one of claims 1 to 3, wherein the using the challenge information of the subscription management device to secure the tag data comprises:

The challenge information of the subscription management device and the tag data are hashed.
The method according to any one of claims 1 to 4, wherein the profile The download request further includes specific indication information, which is used to indicate that the profile that the subscription management device needs to download is a specific type profile.
The method according to any one of claims 1 to 5, further comprising: after receiving the first profile sent by the subscription management device, further comprising:

Sending a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier, so that the subscription management device obtains the location according to the profile first deletion notification. Determining, by the profile identifier, the first profile corresponding to the at least one information in the eUICC identifier, and restoring the first profile to the second profile.
The method according to claim 6, wherein before the sending the profile first deletion notification to the subscription management device, the method further includes:

Sending a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type;

Receiving and displaying profile information corresponding to the profile type sent by the eUICC.
The method according to claim 7, wherein after receiving and displaying the profile information corresponding to the profile type sent by the eUICC, the method further includes:

Obtaining a profile deletion instruction input by the user;

Deleting a corresponding specific type profile in the eUICC according to the profile deletion instruction.
The method according to claim 6, wherein before the sending the profile first deletion notification to the subscription management device, the method further includes:

Receiving a profile second deletion notification sent by the eUICC, where the profile second deletion notification is that the eUICC detects that a specific type profile is stored after receiving the eUICC challenge instruction or the profile activation instruction, and deletes the specific type profile. After sending it.
The method according to any one of claims 1 to 9, wherein after receiving the first profile sent by the subscription management device, the method further includes:

The mobile network operator MNO is notified that the profile download is completed.
A method for processing a profile, comprising:

Receiving a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device;

Selecting one of the at least one second profile associated with the tag data to generate a first profile;

Sending the first profile to the terminal device.
The method according to claim 11, wherein the profile download request further includes a tag identifier; and before the receiving the profile download request sent by the terminal device, the method further includes:

Obtaining first information sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC;

Sending, to the terminal device, second information, where the second information includes at least challenge information of the subscription management device;

The profile download request sent by the receiving terminal device includes:

Receiving a profile download request sent by the terminal device, where the profile download request includes the tag data, the tag identifier, and the eUICC after the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Generated signature information;

The selecting one of the at least one second profile associated with the tag data to generate the first profile comprises:

Obtaining corresponding tag data according to the tag identifier, verifying the security-protected tag data according to the tag data, and selecting one of the at least one second profile associated with the tag data after the verification is passed First profile.
The method according to claim 12, wherein the obtaining the corresponding tag data according to the tag identifier, and verifying the security-protected tag data according to the tag data comprises:

Obtaining tag data corresponding to the tag identifier, and performing security protection processing on the tag data by using challenge information;

The processed tag data is compared with the tag data after the security protection, and if they are the same, the verification is passed.
The method according to any one of claims 11 to 13, wherein the selecting one of the at least one second profile associated with the tag data to generate the first profile comprises:

Obtaining at least one second profile associated with the tag data and selecting one of them;

And adding the fifth information to the selected second profile to generate the first profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.
The method according to any one of claims 11 to 14, wherein said Before obtaining the first information sent by the terminal device, the method further includes:

Generating at least one second profile and one tag information according to a subscription request of the mobile network operator MNO, the tag information including the tag data;

Associating the at least one second profile with the tag data;

A subscription response is returned to the MNO, the subscription response including the tag information.
The method according to any one of claims 11 to 14, wherein before the acquiring the first information sent by the terminal device, the method further includes:

Acquiring a tag information according to the subscription request of the mobile network operator MNO, the tag information including the tag data, and generating at least one second profile;

Associating the at least one second profile with the tag data;

An order response is returned to the MNO.
The method according to any one of claims 11 to 16, wherein after the sending the first profile to the terminal device, the method further includes:

Receiving a profile first deletion notification sent by the terminal device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier;

Obtaining, according to the profile first deletion notification, a first profile corresponding to at least one of the profile identifier or the eUICC identifier;

Restoring the first profile to a second profile.
The method according to claim 17, wherein after the recovering the first profile to the second profile, the method further comprises:

An encryption key is generated, and the second profile is decrypted and then re-encrypted using the encryption key.
The method according to claim 17 or 18, wherein the restoring the first profile to the second profile comprises:

And deleting the fifth information in the first profile to generate the second profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.
A terminal device, comprising:

An obtaining module, configured to obtain tag information, where the tag information includes tag data;

a sending module, configured to send a profile download request to the subscription management device, where the profile download request includes at least the tag data;

a receiving module, configured to receive a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.
The device according to claim 20, wherein the tag information further comprises a tag identifier; the device further comprising: a security protection module;

The receiving module is further configured to receive first information of the embedded universal integrated circuit card eUICC;

The sending module is further configured to send the first information to the subscription management device, where the first information includes at least the challenge information of the eUICC;

The receiving module is further configured to receive second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

The security protection module is configured to perform security protection on the tag data by using challenge information of the subscription management device;

The sending module is further configured to send the third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least the security-protected tag data and the tag Identification

The receiving module is further configured to receive fourth information of the eUICC, where the fourth information includes at least the signature information;

The sending module is specifically configured to send a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.
The device according to claim 20 or 21, wherein the sending module is further configured to send a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type;

The receiving module is further configured to receive and display profile information corresponding to the profile type sent by the eUICC.
The device according to any one of claims 20 to 22, wherein the security protection module is specifically configured to perform hash operation on the challenge information of the subscription management device and the tag data.
The device according to any one of claims 20 to 23, wherein the profile download request further includes specific indication information, the specific indication information being used to indicate the signing The profile that the management device needs to download is a specific type profile.
The device according to any one of claims 20 to 24, wherein the sending module is further configured to send a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least the following a first identifier of the profile identifier or the eUICC identifier, so that the subscription management device acquires a first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the profile first deletion notification, and the A profile is restored to the second profile.
The device according to claim 25, wherein the sending module is further configured to send a profile information acquisition message to the eUICC, where the profile information acquisition message includes a profile type;

The receiving module is further configured to receive and display profile information corresponding to the profile type sent by the eUICC.
The device according to claim 26, further comprising: deleting a module;

The obtaining module is further configured to acquire a profile deletion instruction input by the user;

The deleting module is configured to delete a specific type profile corresponding to the eUICC according to the profile deletion instruction.
The device according to claim 25, wherein the receiving module is further configured to receive a second deletion notification sent by the eUICC, where the second deletion notification is that the eUICC receives the eUICC challenge. After the instruction or profile activation instruction detects that a particular type profile is stored and deletes the specific type profile.
The device according to any one of claims 20 to 28, wherein the sending module is further configured to notify the mobile network operator MNO that the profile download is completed.
A contract management device, comprising:

a receiving module, configured to receive a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device;

a selection module, configured to select one of the at least one second profile associated with the tag data to generate a first profile;

And a sending module, configured to send the first profile to the terminal device.
The device according to claim 30, wherein the profile download request further comprises a tag identifier; the device further comprising: an acquisition module;

The selection module includes: a verification unit and a profile generation unit;

The acquiring module is configured to acquire first information sent by the terminal device, where the first information includes at least challenge information of the embedded universal integrated circuit card eUICC;

The sending module is further configured to send second information to the terminal device, where the second information includes at least challenge information of the subscription management device;

The receiving module is specifically configured to receive a profile download request sent by the terminal device, where the profile download request includes a mark that the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Data, a tag identifier, and signature information generated by the eUICC;

The verification unit is configured to obtain corresponding tag data according to the tag identifier, and verify the security-protected tag data according to the tag data;

The profile generating unit is configured to select one of the at least one second profile associated with the tag data to generate a first profile after the verification is passed.
The device according to claim 31, wherein the verification unit is configured to acquire tag data corresponding to the tag identifier, and perform security protection processing on the tag data by using challenge information; The data is compared with the security-protected tag data, and if they are the same, the verification is passed.
The device according to any one of claims 30 to 32, wherein the selection module is configured to acquire at least one second profile associated with the tag data, and select one of them; Adding the fifth information to the second profile to generate the first profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.
The apparatus according to any one of claims 30 to 33, further comprising: a first generation module and a first association module;

The first generating module is configured to generate at least one second profile and one tag information according to a subscription request of the mobile network operator MNO, where the tag information includes the tag data;

The first association module is configured to associate the at least one second profile with the tag data;

The sending module is further configured to return an order response to the MNO, where the order response includes the tag information.
The device according to any one of claims 30 to 33, further comprising: a second generation module and a second association module;

a second generating module, configured to acquire, according to a subscription request of the mobile network operator MNO, a tag information, where the tag information includes the tag data, and generate at least one second profile;

a second association module, configured to associate the at least one second profile with the tag data;

The sending module is further configured to return an order response to the MNO.
The apparatus according to any one of claims 30 to 35, further comprising: a recovery module;

The receiving module is further configured to receive a profile first deletion notification sent by the terminal device, where the profile first deletion notification includes at least one of the following information: a profile identifier or an eUICC identifier; and the first deletion notification is acquired according to the profile. a first profile corresponding to the at least one of the profile identifier or the eUICC identifier;

The recovery module is configured to restore the first profile to a second profile.
The device of claim 36, further comprising:

And an encryption module, configured to generate an encryption key, and decrypt the second profile and use the encryption key to re-encrypt.
The device according to claim 36 or 37, wherein the recovery module is specifically configured to remove the fifth information in the first profile to generate the second profile, where the fifth information includes at least Initialize the security channel information and configure the profile security domain command.
A terminal device, comprising:

a processor, configured to acquire tag information, where the tag information includes tag data;

a sender, configured to send a profile download request to the subscription management device, where the profile download request includes at least the tag data;

a receiver, configured to receive a first profile sent by the subscription management device, where the first profile is generated by the subscription management device according to one selected from the at least one second profile associated with the tag data.
The device according to claim 39, wherein the tag information further comprises a tag identifier; the processor is further configured to acquire first information of the embedded universal integrated circuit card eUICC;

The transmitter is further configured to send the first information to a subscription management device, where the first information includes at least challenge information of the eUICC;

The receiver is further configured to receive second information returned by the subscription management device, where the second information includes at least challenge information of the subscription management device;

The processor is further configured to perform security protection on the tag data by using challenge information of the subscription management device;

The processor is further configured to control to transmit the third information to the eUICC, so that the eUICC generates signature information by using the third information, where the third information includes at least the security-protected tag data and the Marking the identifier; acquiring fourth information of the eUICC, the fourth information including at least the signature information;

The transmitter is specifically configured to send a profile download request to the subscription management device, where the profile download request includes security-protected tag data, the tag identifier, and the signature information.
The device according to claim 39 or 40, wherein the processor is further configured to control transmission of a profile information acquisition message to the eUICC, the profile information acquisition message includes a profile type, and obtain and control display Profile information corresponding to the profile type sent by the eUICC.
The device according to any one of claims 39 to 41, wherein the processor is specifically configured to perform hash operation on challenge information of the subscription management device and the tag data.
The device according to any one of claims 39 to 42, wherein the profile download request further includes specific indication information, where the specific indication information is used to indicate that the profile management device needs to download a profile of a specific type. Profile.
The device according to any one of claims 39 to 43, wherein the sender is further configured to send a profile first deletion notification to the subscription management device, where the profile first deletion notification includes at least the following a first identifier of the profile identifier or the eUICC identifier, so that the subscription management device acquires a first profile corresponding to at least one of the profile identifier or the eUICC identifier according to the profile first deletion notification, and the A profile is restored to the second profile.
The device according to claim 44, wherein the processor is further configured to control transmission of a profile information acquisition message to the eUICC, the profile information acquisition message includes a profile type, and acquire and control display of the eUICC transmission. Corresponding to the profile type Profile information.
The device according to claim 45, wherein the processor is further configured to acquire a profile deletion instruction input by a user, and delete a specific type profile corresponding to the eUICC according to the profile deletion instruction.
The device according to claim 44, wherein the processor is further configured to acquire a profile second deletion notification sent by the eUICC, where the profile second deletion notification is that the eUICC receives the eUICC challenge After the instruction or profile activation instruction detects that a particular type profile is stored and deletes the specific type profile.
The device according to any one of claims 39 to 47, wherein the sender is further configured to notify the mobile network operator MNO that the profile download is complete.
A contract management device, comprising:

a receiver, configured to receive a profile download request sent by the terminal device, where the profile download request includes at least the tag data acquired by the terminal device;

a processor, configured to select one of the at least one second profile associated with the tag data to generate a first profile;

And a transmitter, configured to send the first profile to the terminal device.
The device according to claim 49, wherein the profile download request further comprises a tag identifier; the receiver is further configured to acquire first information sent by the terminal device, where the first information includes at least an embedded universal Challenge information of the integrated circuit card eUICC;

The transmitter is further configured to send second information to the terminal device, where the second information includes at least challenge information of the subscription management device;

The receiver is specifically configured to receive a profile download request sent by the terminal device, where the profile download request includes a mark that the terminal device uses the challenge information of the subscription management device to perform security protection on the acquired tag data. Data, a tag identifier, and signature information generated by the eUICC;

The processor is further configured to obtain corresponding tag data according to the tag identifier, verify the security-protected tag data according to the tag data, and at least one associated with the tag data after the verification is passed Select one of the second profiles to generate the first profile.
The device according to claim 50, wherein the processor is configured to acquire tag data corresponding to the tag identifier, and use the challenge information to perform the tag data. The security protection process compares the processed tag data with the security-protected tag data, and if the same, the verification passes.
The device according to any one of claims 49 to 51, wherein the processor is configured to acquire at least one second profile associated with the tag data, and select one of them; Adding the fifth information to the second profile to generate the first profile, where the fifth information includes at least an initialization security channel information and a configuration profile security domain command.
The device according to any one of claims 49 to 52, wherein the processor is further configured to generate at least one second profile and one tag information according to a subscription request of a mobile network operator MNO, the tag The information includes the tag data; associating the at least one second profile with the tag data;

The transmitter is further configured to return an order response to the MNO, where the order response includes the tag information.
The device according to any one of claims 49 to 52, wherein the processor is further configured to acquire a tag information according to a subscription request of a mobile network operator MNO, where the tag information includes the tag data And generating at least one second profile; associating the at least one second profile with the tag data;

The transmitter is further configured to return an order response to the MNO.
The device according to any one of claims 49 to 54, wherein the receiver is further configured to receive a profile first deletion request sent by the terminal device, where the profile first deletion request includes at least the following The first profile corresponding to the at least one of the profile identifier or the eUICC identifier is obtained according to the profile first deletion notification according to the profile identifier or the eUICC identifier;

The processor is further configured to restore the first profile to a second profile.
The device according to claim 55, wherein the processor is further configured to generate an encryption key, and decrypt the second profile and use the encryption key to re-encrypt.
The device according to claim 55 or 56, wherein the processor is specifically configured to remove the fifth information in the first profile to generate the second profile, where the fifth information includes at least Initialize the security channel information and configure the profile security domain command.
A communication device, comprising: a terminal device, a subscription management device, and An embedded universal integrated circuit card (eUICC), wherein the terminal device employs the apparatus of any one of claims 20 to 29, and the contract management device employs the apparatus of any one of claims 30-38.
A communication device, comprising: a terminal device, a subscription management device, and an embedded universal integrated circuit card eUICC; wherein the terminal device adopts the device according to any one of claims 39 to 48, the signing The management device employs the device of any one of claims 49 to 57.