WO2017185458A1

WO2017185458A1 - Method and device for generating and acquiring authorization for deleting isd-p domain

Info

Publication number: WO2017185458A1
Application number: PCT/CN2016/084071
Authority: WO
Inventors: 钟焰涛; 傅文治; 蒋罗
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2016-04-29
Filing date: 2016-05-31
Publication date: 2017-11-02
Also published as: CN105792178A

Abstract

A method and device for generating and acquiring authorization for deleting an ISD-P domain. The method for acquiring authorization for deleting an ISD-P domain comprises: sending to a mobile network operator (MNO) an instruction for acquiring authorization information (S101), the instruction is used to enable the mobile network operator to generate and return the authorization information for deleting an issuer security domain profile (ISD-P) domain; and receiving the authorization information returned by the mobile network operator (S102). The above method enables a mechanism for authorizing deletion, and employing the mechanism can effectively improve security of deleting an ISD-P domain on an eSIM card.

Description

Method and apparatus for generating and obtaining authorization for deleting an ISD-P domain

The present application claims priority to Chinese Patent Application No. 201610281301.5, entitled "Generating and Obtaining Methods and Apparatus for Deleting Authorization for ISD-P Domains", filed on April 29, 2016, The entire contents are incorporated herein by reference.

Technical field

The present invention relates to the field of mobile communications, and in particular, to a method and apparatus for generating and acquiring an authorization for deleting an ISD-P domain.

Background technique

With the development of technology, eSIM (embedded Subscriber Identity Module) card has become popular.

A multi-level security domain is set up on the eSIM card. The ISD-P (Issuer Security Domain Profile) domain is configured on each security zone. The multiple ISD-P domains are isolated from each other. The P domain contains personalized data such as carrier file systems and policy control rules. When an ISD-P domain is contracted with a carrier MNO (Mobile Network Operator), ISD-P, MNO, and SM-DP (Subscription Manager Data Preparation) establish a correspondence.

Currently, there are security risks when deleting ISD-P on the eSIM card. For example, there may be cases of misoperation or malicious operation.

Summary of the invention

The inventors of the present invention have found that the above problem arises in that the "delete authorization" mechanism is not set in the prior art, and the eSIM card can delete the ISD-P without obtaining the "delete authorization".

In view of the deficiencies of the prior art and the above findings, it is an object of the present invention to provide a generation and acquisition The method and device for deleting the authorization of the ISD-P domain are used to solve the problem of security risks when deleting the ISD-P on the eSIM card in the prior art.

The object of the present invention is mainly achieved by the following technical solutions:

According to an aspect of the present invention, the present invention provides a method for obtaining an authorization for deleting an ISD-P domain, including:

Sending to the mobile network operator an instruction to obtain authorization information, the instruction being used to cause the mobile network operator to generate and return authorization information for deleting a certificate issuer security domain configuration domain;

Receiving authorization information returned by the mobile network operator.

According to another aspect of the present invention, the present invention also provides a method of generating an authorization for deleting an ISD-P domain, comprising:

Receiving an instruction to obtain authorization information issued by the contract management data;

Generating authorization information for deleting a certificate issuer security domain configuration domain according to the instruction;

Returning the authorization information to the subscription management data preparation.

According to another aspect of the present invention, the present invention also provides an apparatus for obtaining an authorization for deleting an ISD-P domain, including:

And an authorization requesting module, configured to send, to the mobile network operator, an instruction for obtaining authorization information, where the instruction is used to enable the mobile network operator to generate and return authorization information for deleting a certificate issuer security domain configuration domain;

And an authorization receiving module, configured to receive authorization information returned by the mobile network operator.

According to another aspect of the present invention, the present invention also provides an apparatus for generating an authorization for deleting an ISD-P domain, comprising:

An instruction receiving module, configured to receive an instruction for obtaining authorization information issued by the contract management data;

An authorization generation module, configured to generate authorization information for deleting a certificate issuer security domain configuration domain according to the instruction;

An authorization return module is configured to return the authorization information to the subscription management data preparation.

The beneficial effects of the present invention are as follows:

The method and system of the present invention implements a "delete authorization" mechanism, by which the security of deleting an ISD-P domain on an eSIM card can be effectively improved.

DRAWINGS

1 is a flowchart of a method for obtaining an authorization for deleting an ISD-P domain in an embodiment of the present invention;

2 is a flowchart of a method for generating an authorization for deleting an ISD-P domain in an embodiment of the present invention;

3 is a schematic diagram of interaction between an SM-DP and an MNO in an embodiment of the present invention;

4 is a schematic diagram of an apparatus for acquiring an authorization for deleting an ISD-P domain according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an apparatus for generating an authorization for deleting an ISD-P domain according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic diagram of another apparatus for obtaining an authorization for deleting an ISD-P domain in an embodiment of the present invention; FIG.

FIG. 7 is a schematic diagram of another apparatus for generating an authorization for deleting an ISD-P domain in an embodiment of the present invention.

detailed description

In order to solve the problem that the prior art has a security risk when deleting the ISD-P on the eSIM card, the present invention provides a method and an apparatus for generating and acquiring an authorization for deleting an ISD-P domain, which are described below with reference to the accompanying drawings and embodiments. The invention is further described in detail. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to be limiting.

Embodiment 1

As shown in FIG. 1 , an embodiment of the present invention provides a method for acquiring an authorization for deleting an ISD-P domain, where the method is used for a subscription management data preparation (SM-DP) side, including:

S101. Send an instruction for acquiring authorization information to a mobile network operator (MNO), where the instruction is used to enable the mobile network operator to generate and return authorization information for deleting a certificate issuer security domain configuration (ISD-P) domain. ;

S102. Receive authorization information returned by the mobile network operator.

In the embodiment of the present invention, the SM-DP sends an instruction to obtain the authorization information to the MNO, so that the MNO returns the authorization information, thereby implementing a mechanism for deleting the authorization, and the mechanism can effectively improve the deletion of the ISD-P on the eSIM card. Domain security.

In a preferred embodiment of the present invention, the foregoing method is further optimized. Specifically, the method further includes:

Perform identity authentication on the mobile network operator;

After the authentication is passed, an instruction to request authorization is issued to the mobile network operator.

Among them, multiple authentication technologies can be used for identity authentication, including digital signature technology (that is, both parties send their own signatures to each other, let the other party authenticate their identity), and a cryptographic identity authentication protocol.

Through the preferred embodiment, the identity authentication of the MNO can effectively prevent some security problems caused by some masquerading MNOs issuing authorization information to the SM-DP.

Receiving request information of the deleted certificate issuer security domain configuration domain sent by the eSIM card; the request information carries eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity of the deletion action initiated to the eSIM information;

The eSIM identity information, the location information, and the initiator identity information are added to an instruction requesting authorization from the mobile network operator.

According to the preferred embodiment, the MNO can determine whether the deletion action conforms to the predetermined rule according to the information in the instruction, and only generates and returns the authorization information to the SM-DP when the predetermined rule is met, thereby more effectively improving the deletion on the eSIM card. Security of the ISD-P domain.

And transmitting the obtained authorization information to the eSIM card, so that the eSIM card deletes the certificate issuer security domain configuration domain according to the authorization information.

With this preferred embodiment, the SM-DP is made more secure and efficient when deleting the ISD-P domain of the eSIM card.

Specifically, the step of sending the obtained authorization information to the eSIM card, so that the eSIM card deletes the certificate issuer security domain configuration domain according to the authorization information, includes:

Extracting the eSIM identity information, the location information of the certificate issuer security domain configuration domain, and confirming the deletion information from the obtained authorization information;

Sending, according to the parsed eSIM identity information, the authorization information to the corresponding eSIM card, so that the eSIM card according to the parsed confirmation deletion information and location information of the certificate issuer security domain configuration domain , delete the corresponding certificate issuer security domain configuration domain.

The received authorization information is verified.

With this preferred embodiment, the SM-DP can be enabled to obtain spoofed authorization information, thereby avoiding some unsafe deletion actions.

Embodiment 2

As shown in FIG. 2, an embodiment of the present invention provides a method for generating an authorization for deleting an ISD-P domain, where the method is used on a mobile network operator side, including:

S201. Receive an instruction for obtaining authorization information issued by the subscription management data;

S202. Generate, according to the instruction, authorization information used to delete a certificate issuer security domain configuration domain.

S203. Return the authorization information to the subscription management data preparation.

The MNO of the embodiment of the present invention generates and returns an authorization information for deleting a security domain configuration domain of a certificate issuer by acquiring an instruction of the SM-DP, thereby implementing a mechanism for deleting the authorization, and the mechanism can effectively improve the mechanism. Remove the security of the ISD-P domain on the eSIM card.

Preparing identity authentication for the subscription management data;

After the authentication is passed, according to the instruction, authorization information for deleting the certificate issuer security domain configuration domain is generated.

With the preferred embodiment, the identity authentication of the SM-DP can effectively prevent some of the security problems caused by some spoofed SM-DPs issuing instructions to the MNO to obtain authorization information.

The received instructions are verified.

With this preferred embodiment, the security of deleting the ISD-P domain on the eSIM card is further improved.

Specifically, the step of verifying the received instruction includes:

Step 1, parsing eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity information of the deletion action initiated by the eSIM from the instruction;

Step 2: Determine, according to the eSIM identity information, the location information, and the identity information of the initiator, whether the deletion action meets a predetermined rule;

The predetermined rule is not specifically limited, and may be arbitrarily set according to the prior art; for example, when the specific step is implemented, the initiator code may be set, and if the initiator code in the instruction is wrong, the predetermined rule is not met; By setting the correspondence between the location information code and the eSIM card, if the correspondence in the command does not match the aforementioned correspondence, the predetermined rule is not met.

The eSIM identity information includes an integrated circuit card ID (ECCID) identity and an eUICC-ID identity of the eSIM. The initiator identity information that initiates the delete action to the eSIM may be set to the form of an identity, and the initiator includes any one of an MNO, various applications, and a user (eg, a delete command issued by the user). The location information of the certificate issuer security domain configuration domain includes at least one of path information and an ID identifier of the ISD-P.

Step 3: When it is determined that the predetermined rule is met, the authorization information for deleting the certificate issuer security domain configuration domain is generated.

In the specific mode, the eSIM identity information, the location information, and the initiator identity information are used to determine whether the deletion action meets the predetermined rule. When the predetermined rule is met, the authorization information for deleting the certificate issuer security domain configuration domain is generated, and the authorization information is further improved. The security of the authorization information is generated, thereby improving the security of deleting the ISD-P domain on the eSIM card.

When it is determined that the predetermined rule is met, the confirmation deletion information is generated, and the confirmation deletion information, the eSIM identity information, the location information, and the initiator identity information are added to the generated authorization information.

In this preferred manner, the SM-DP can verify the authorization information by using the information in the authorization information, and further improve the security of deleting the ISD-P domain on the eSIM card.

The interaction between the SM-DP applying the method in the first embodiment of the present invention and the MNO applying the method in the second embodiment of the present invention will be described below with reference to a specific application example. As shown in Figure 3:

Step 1. Both parties authenticate each other. Authentication can use a variety of authentication technologies, including digital signature technology (that is, both parties send their own signatures to each other, let the other party authenticate their identity), cryptographic identity authentication protocols, and so on.

Step 2, if the authentication fails, terminate.

Step 3. The SM-DP requests the ISD-P to delete the authorization. The content of the sent request message includes: an integrated circuit card ID (ECCID) identifier of the eSIM, an eUICC-ID identifier, an ID identifier of the target ISD-P, and an identity identifier of the initiator of the deletion action.

In step 4, the MNO generates authorization information. The authorization message shall include: all content sent by the SM-DP, a message confirming the deletion, and a signature of all the above contents and the confirmation information.

In step 5, the MNO sends the authorization information.

In step 6, the SM-DP receives and verifies the authorization information. When the SM-DP verifies the authorization information from the MNO, it mainly verifies that the signature of the MNO is correct. If it is correct, it considers that the correct authorization has been received.

Step 7. The SM-DP authorization information verification fails and is terminated.

Embodiment 3

As shown in FIG. 4, an embodiment of the present invention provides an apparatus for acquiring an authorization for deleting an ISD-P domain, and an apparatus embodiment corresponding to the first embodiment, where the apparatus is used for a subscription management data preparation side, including:

In the embodiment of the present invention, the MNO implements a “delete authorization” mechanism by using the authorization request module and the authorization receiving module, and the mechanism can effectively improve the security of deleting the ISD-P domain on the eSIM card.

In a preferred embodiment of the present invention, the device is further optimized. Specifically, the device further includes:

An identity authentication module, configured to perform identity authentication on the mobile network operator;

After the authentication is passed, the authorization request module is triggered to issue an instruction requesting authorization to the mobile network operator.

An information receiving module, configured to receive request information of a delete certificate issuer security domain configuration domain sent by an eSIM card; the request information carries eSIM identity information, location information of the certificate issuer security domain configuration domain, and is initiated to the eSIM Delete the identity information of the initiator of the action;

And an information adding module, configured to add the eSIM identity information, the location information, and the initiator identity information to an instruction requesting authorization from the mobile network operator.

And an authorization deletion module, configured to send the obtained authorization information to the eSIM card, so that the eSIM card deletes the certificate issuer security domain configuration domain according to the authorization information.

The authorization deletion module is specifically configured to parse the eSIM identity information, the location information of the certificate issuer security domain configuration domain, and the confirmation deletion information from the obtained authorization information.

An authorization verification module is configured to verify the received authorization information.

Embodiment 4

As shown in FIG. 5, an embodiment of the present invention provides an apparatus for generating an authorization for deleting an ISD-P domain, and an apparatus embodiment corresponding to the second embodiment, where the apparatus is used by a mobile network operator side, including:

The MNO of the embodiment of the present invention implements a mechanism for deleting an authorization by using an instruction receiving module, an authorization generating module, and an authorization returning module. The mechanism can effectively improve the security of deleting an ISD-P domain on an eSIM card.

An identity authentication unit, configured to perform identity authentication on the subscription management data;

After the authentication is passed, the trigger authorization generation module generates authorization information for deleting the certificate issuer security domain configuration domain according to the instruction.

An instruction verification module for verifying received instructions.

The instruction verification module is specifically configured to parse the eSIM identity information, the location information of the certificate issuer security domain configuration domain, and the initiator identity information of the deletion action initiated by the eSIM from the instruction;

Determining, according to the eSIM identity information, the location information, and the identity information of the initiator, whether the deletion action meets a predetermined rule;

When it is determined that the predetermined rule is met, authorization information for deleting the certificate issuer security domain configuration domain is generated.

An information adding unit, configured to generate confirmation deletion information when determining that the predetermined rule is met, and add the confirmation deletion information, the eSIM identity information, the location information, and the initiator identity information to the generated authorization Information.

Embodiment 5

As shown in FIG. 6, the embodiment of the present invention provides another schematic diagram of an apparatus for obtaining an authorization for deleting an ISD-P domain. As shown in FIG. 6, the apparatus 6 may include: at least one processor 61, such as a CPU. At least one communication bus 62 and a memory 63; the communication bus 62 is used to implement connection communication between these components; the memory 63 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. . A set of program codes is stored in the memory 63, and the processor 61 is configured to call the program code stored in the memory 63 for performing the following operations:

Receiving authorization information returned by the mobile network operator.

In a preferred embodiment of the present invention, the processor 61 also performs the following operations:

In a preferred embodiment of the present invention, the processor 61 performs the sending of the obtained authorization information to the eSIM card, so that the eSIM card deletes the certificate issuer security domain configuration according to the authorization information. When you step through the domain, do the following:

Embodiment 6

As shown in FIG. 7, an embodiment of the present invention provides another apparatus for generating an authorization for deleting an ISD-P domain. As shown in FIG. 7, the apparatus 7 may include: at least one processor 71, such as a CPU. At least one communication bus 72 and a memory 73; the communication bus 72 is used to implement connection communication between these components; the memory 73 may be a high speed RAM memory or may be non-easy Non-volatile memory, such as at least one disk storage. A set of program codes is stored in the memory 73, and the processor 71 is configured to call the program code stored in the memory 73 for performing the following operations:

In a preferred embodiment of the present invention, the processor 71 also performs the following operations:

Parsing eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity information for initiating a deletion action to the eSIM from the instruction;

While the preferred embodiments of the present invention have been disclosed for purposes of illustration, those skilled in the art will recognize that various modifications, additions and substitutions are possible, and the scope of the invention should not be limited to the embodiments described above.

Claims

A method for obtaining an authorization for deleting an ISD-P domain, comprising:

Sending to the mobile network operator an instruction to obtain authorization information, the instruction being used to cause the mobile network operator to generate and return authorization information for deleting a certificate issuer security domain configuration domain;

Receiving authorization information returned by the mobile network operator.
The method of claim 1 wherein the method further comprises:

Receiving request information of the deleted certificate issuer security domain configuration domain sent by the eSIM card; the request information carries eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity of the deletion action initiated to the eSIM information;

The eSIM identity information, the location information, and the initiator identity information are added to an instruction requesting authorization from the mobile network operator.
The method of claim 1 or 2, wherein the method further comprises:

And transmitting the obtained authorization information to the eSIM card, so that the eSIM card deletes the certificate issuer security domain configuration domain according to the authorization information.
The method according to claim 3, wherein the step of transmitting the obtained authorization information to the eSIM card to cause the eSIM card to delete a certificate issuer security domain configuration field according to the authorization information ,include:

Extracting the eSIM identity information, the location information of the certificate issuer security domain configuration domain, and confirming the deletion information from the obtained authorization information;

Sending, according to the parsed eSIM identity information, the authorization information to the corresponding eSIM card, so that the eSIM card according to the parsed confirmation deletion information and location information of the certificate issuer security domain configuration domain , delete the corresponding certificate issuer security domain configuration domain.
A method for generating an authorization for deleting an ISD-P domain, comprising:

Receiving an instruction to obtain authorization information issued by the contract management data;

Generating authorization information for deleting a certificate issuer security domain configuration domain according to the instruction;

Returning the authorization information to the subscription management data preparation.
The method of claim 5, wherein the method further comprises:

Parsing eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity information for initiating a deletion action to the eSIM from the instruction;

Determining, according to the eSIM identity information, the location information, and the identity information of the initiator, whether the deletion action meets a predetermined rule;

When it is determined that the predetermined rule is met, authorization information for deleting the certificate issuer security domain configuration domain is generated.
The method of claim 5 or claim 6, wherein the method further comprises:

When it is determined that the predetermined rule is met, the confirmation deletion information is generated, and the confirmation deletion information, the eSIM identity information, the location information, and the initiator identity information are added to the generated authorization information.
An apparatus for obtaining an authorization for deleting an ISD-P domain, comprising:

And an authorization requesting module, configured to send, to the mobile network operator, an instruction for obtaining authorization information, where the instruction is used to enable the mobile network operator to generate and return authorization information for deleting a certificate issuer security domain configuration domain;

And an authorization receiving module, configured to receive authorization information returned by the mobile network operator.
The device of claim 8 further comprising:

An information receiving module, configured to receive request information of a delete certificate issuer security domain configuration domain sent by an eSIM card; the request information carries eSIM identity information, location information of the certificate issuer security domain configuration domain, and is initiated to the eSIM Delete the identity information of the initiator of the action;

And an information adding module, configured to add the eSIM identity information, the location information, and the initiator identity information to an instruction requesting authorization from the mobile network operator.
The device according to claim 8 or 9, wherein the device further comprises:

An authorization deletion module, configured to send the obtained authorization information to the eSIM card, so as to The eSIM card deletes the certificate issuer security domain configuration domain according to the authorization information.
The device of claim 10, wherein the authorization deletion module is configured to parse out eSIM identity information, location information of a certificate issuer security domain configuration domain, and confirm deletion from the obtained authorization information. information;

Sending, according to the parsed eSIM identity information, the authorization information to the corresponding eSIM card, so that the eSIM card according to the parsed confirmation deletion information and location information of the certificate issuer security domain configuration domain , delete the corresponding certificate issuer security domain configuration domain.
An apparatus for generating an authorization for deleting an ISD-P domain, comprising:

An instruction receiving module, configured to receive an instruction for obtaining authorization information issued by the contract management data;

An authorization generation module, configured to generate authorization information for deleting a certificate issuer security domain configuration domain according to the instruction;

An authorization return module is configured to return the authorization information to the subscription management data preparation.
The device of claim 12, wherein the device further comprises:

An instruction verification module, configured to parse, from the instruction, eSIM identity information, location information of the certificate issuer security domain configuration domain, and initiator identity information that initiates a deletion action to the eSIM;

Determining, according to the eSIM identity information, the location information, and the identity information of the initiator, whether the deletion action meets a predetermined rule;

When it is determined that the predetermined rule is met, the authorization generation module is triggered to generate authorization information for deleting the certificate issuer security domain configuration domain.
The device according to claim 12 or 13, wherein the device further comprises:

An information adding unit, configured to generate confirmation deletion information when determining that the predetermined rule is met, and add the confirmation deletion information, the eSIM identity information, the location information, and the initiator identity information to the generated authorization Information.