WO2017185461A1

WO2017185461A1 - Method and system for recovering tampered key information of virtual subscriber identity module

Info

Publication number: WO2017185461A1
Application number: PCT/CN2016/084079
Authority: WO
Inventors: 邵刚
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2016-04-29
Filing date: 2016-05-31
Publication date: 2017-11-02
Also published as: CN105975363B; CN105975363A

Abstract

A method and a system for recovering tampered key information of a virtual subscriber identity module eSim. The method comprises: detecting that eSim key information has been tampered with (110); sending a prompt to use secure backup information of a secure partition region to perform a restoration (120); the secure partition region receiving a predetermined physical operation restoration instruction (130); using, according to the physical operation restoration instruction, the secure backup information to restore the eSim key information (140). Further provided is a method for recovering tampered key information of a virtual subscriber identity module. When eSim key information is detected to have been tampered with, the eSim key information can be restored according to a physical operation restoration instruction, such that a user can learn, in real time, the current state information of the eSim, and the key information of the eSim can be recovered in time by means of secure backup information of a secure partition region, thereby guaranteeing the security of the eSim key information, ensuring the safe usage of the user.

Description

Method and system for recovering key information of virtual subscriber identity module from being tampered with

This application claims priority to the Chinese Patent Application submitted by the China Patent Office on April 29, 2016, with the application number 201610281020.X, and the invention titled “Recovering Method and System for the Identification of Key Information of Virtual User Identification Modules”. The entire contents of this application are incorporated herein by reference.

Technical field

The embodiments of the present invention relate to the technical field of user identification modules, and in particular, to a method and system for recovering key information of a virtual subscriber identity module.

Background technique

SIM (Subscriber Identity Module) is an indispensable part of the "Global Access" system. It is only defined by the SIM card, that is, the client data is stored in the SIM card, and the authentication algorithm and encryption key are executed. The communication device can effectively complete the connection and information exchange with the network operator, thereby implementing the communication function. The SIM card stores the user's personal identification number and a corresponding key, which is generated in accordance with a certain security algorithm in case of confidentiality. The user key and the security algorithm can not only identify the user, prevent illegal access to the network, but also prevent the user data transmitted on the wireless channel from being stolen. The user can also store some fixed short messages, a directory and other personal information into the SIM card. in. Currently, most communication devices employ a removable physical SIM card that is inserted into a SIM card receiving slot in the communication device. With the development of communication technologies, the physical SIM card will be gradually replaced by a virtual user identity module called eSim, which is directly embedded in the system motherboard of the communication device, and can The eSim is repeatedly defined by a program, a client data is stored, an authentication algorithm and an encryption key are executed, and the communication device embedded in the eSim can access different network operators.

The emergence of eSim makes it unnecessary to configure the receiving slot of the traditional physical SIM card in the communication device, so the communication device can be made thinner, and the eSim can be repeatedly defined, and the communication of the eSim is embedded. The device does not have to be restricted by the network provider and can be replaced at any time.

However, eSim brings more flexibility to users, but also brings security problems. Because the eSim is implemented by writing programs, there is a risk of malicious tampering by criminals, so it is necessary to design an eSim. Tampering recovery methods to ensure the security of eSim's critical information.

Summary of the invention

The embodiment of the invention provides a method and a system for recovering the key information of the virtual subscriber identity module, so as to ensure the security of the key information of the eSim.

In a first aspect, an embodiment of the present invention provides a method for recovering key information of a virtual subscriber identity module, where the method includes:

It was detected that the key information of eSim was tampered with;

Issue a prompt to restore the secure backup information using the secure partition area; wherein the secure backup information of the secure partition area is the key information of the eSim backed up in the secure partition area when the eSim is initialized;

The secure partition area receives a predetermined physical operation restore instruction;

The eSim key information is restored using the secure backup information according to the physical operation restore instruction.

Further, the method further includes:

Prompt whether to allow eSim key information to be modified before the eSim key information is modified;

If the consent modification instruction is received, the key information of eSim is modified; if the rejection modification instruction is received, the key information of eSim is not modified.

Illustratively, the predetermined physical operation restore instruction includes:

A physical operation restore command issued by a specific physical button or a combination of physical keys or a restore command issued by inputting a set restore password.

Preferably, the key information includes one or more of user identity information, user authentication parameters, and operator parameters.

Further, the method further includes: setting a preset regular flag at the time of eSim initialization to monitor the status of the eSim key information.

In a second aspect, the embodiment of the present invention further provides a recovery system in which the key information of the virtual subscriber identity module is tampered with, and the system includes:

a detection module, configured to detect that the key information of the eSim has been tampered with;

The first prompt module is configured to issue a prompt for restoring the secure backup information of the secure partition area; wherein the secure backup information of the secure partition area is the key information of the eSim backed up in the secure partition area when the eSim is initialized;

a receiving module, configured to receive a predetermined physical operation restoration instruction in the secure partition area;

And a restore module, configured to perform eSim key information restoration by using the secure backup information according to the physical operation restore instruction.

Further, the system further includes:

a second prompting module, configured to issue a prompt to allow the eSim key information to be modified before the eSim key information is modified;

The response module is configured to modify the eSim key information if the consent modification instruction is received; if the rejection modification instruction is received, the eSim key information is not modified.

A physical operation restore command issued by a user through a specific physical button or combination of physical keys or a restore command issued by inputting a set restore password.

Preferably, the key information includes: user identity information, user authentication parameters, and operator parameters. One or more of them.

Further, the system further includes: a setting module, configured to set a preset regular flag when the eSim is initialized, to monitor the status of the eSim key information.

The method for recovering the key information of the virtual subscriber identity module is tamper-removed by the embodiment of the present invention. When detecting that the key information of the eSim is tampered with, the user is prompted to use the secure backup information of the secure partition area for restoration, wherein the security partition is The secure backup information of the area is the eSim key information that is backed up in the secure partition area when the eSim is initialized; after receiving the predetermined physical operation restore command, the secure partition area uses the secure backup information to restore the eSim key information according to the physical operation restore instruction. It enables the user to know in real time whether the key information of eSim has been tampered with. If it is tampered with, the key information of eSim can be recovered in time through the secure backup information of the secure partition area, thereby ensuring the security of the key information of eSim and ensuring the safe use of the user.

DRAWINGS

1 is a schematic flowchart of a method for restoring key information of a virtual subscriber identity module according to a first embodiment of the present invention;

2 is a schematic flowchart of a method for restoring key information of a virtual subscriber identity module according to Embodiment 2 of the present invention;

3 is a schematic structural diagram of a recovery system in which key information of a virtual subscriber identity module is tampered with according to Embodiment 3 of the present invention;

4 is a schematic structural diagram of a recovery system in which key information of a virtual subscriber identity module is tampered with according to Embodiment 4 of the present invention;

FIG. 5 is a schematic structural diagram of a recovery system in which key information of a virtual subscriber identity module is tampered with according to Embodiment 5 of the present invention.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. It should also be noted that, for ease of description, only some, but not all, of the structures related to the present invention are shown in the drawings.

Before discussing the exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as a process or method depicted as a flowchart. Although the flowcharts describe the various steps as a sequential process, many of the steps can be implemented in parallel, concurrently or concurrently. In addition, the order of the steps can be rearranged. The process may be terminated when its steps are completed, but may also have additional steps not included in the figures. The processing may correspond to methods, functions, procedures, subroutines, subroutines, and the like.

Embodiment 1

FIG. 1 is a flowchart of a method for recovering key information of a virtual subscriber identity module according to a first embodiment of the present invention. The method may be applicable to a situation in which eSim key information is tampered with timely recovery of correct information, and may be identified by a virtual user. Module critical information is tampered with the recovery system to perform. The system can be implemented in hardware and/or software. The method specifically includes the following steps:

Step 110: It is detected that the key information of the eSim is tampered with.

The eSim key information may preferably include one or more of user identity information, user authentication parameters, and operator parameters. Of course, the eSim may also save the user's phone book or SMS data. Further, the method may further include: setting a preset regular flag when the eSim is initialized, to monitor the state of the eSim key information, that is, the eSim key information is set during the initialization process. Determining the correct state of the information according to a flag or a check code generated by a certain rule, the rule being confidential and not publicly disclosed, if the eSim key information is modified, causing the flag bit to no longer follow the rule It is considered to be a malicious tampering of the eSim key information. For example, when the eSim key information is initialized, the information that should be continuously stored is stored in a non-continuous manner, and specific flag bits are added between the information to form eSim key information. Initialization information, when the state of the information needs to be known, by reading the initialization information, and filtering the flag bit to compare with a flag bit added when the information is initialized, if the two are consistent, the information is In the correct state, it has not been tampered with, otherwise the information is considered to have been tampered with. Therefore, it can be detected whether the eSim key information has been tampered by judging the flag bit.

Step 120: Send a prompt for restoring using the secure backup information of the secure partition area; wherein the secure backup information of the secure partition area is the key information of the eSim backed up in the secure partition area when the eSim is initialized.

When it is detected that the eSim key information is tampered with, the user is prompted to use the secure backup information of the secure partition area to perform the restoration, and the prompting manner may be displayed on the terminal screen by using a pop-up window, or by voice prompting. Tips, of course, can also be other tips.

Step 130: The secure partition area receives a predetermined physical operation restore instruction.

The secure partition area can only be controlled by a specific physical operation restore command to ensure the security of the information in the secure partition area. Preferably, the physical operation restore command may be through a specific physical button or a physical button. A physical operation restore command issued by a combination or a restore command issued by inputting a set restore password. The specific physical button may specifically be a power button or a volume button, and the physical button combination may specifically be a combination of a power button and a volume button, such as pressing a power button and a volume up button, so that the power button and the power button are in the same time period. The volume up button is pressed, or it can be A small circular hole is disposed in the terminal, and the small circular hole is provided with an action component, and the action component in the small circular hole can be triggered by the thimble to issue a physical operation reduction command.

Step 140: Perform, according to the physical operation restore instruction, the eSim key information restoration by using the secure backup information.

The recovery method for the tampering of the key information of the virtual subscriber identity module provided by the embodiment, when detecting that the key information of the eSim is tampered with, prompting the user to restore the security backup information using the secure partition zone, wherein the secure partition zone The secure backup information is the eSim key information that is backed up in the secure partition area when the eSim is initialized; after receiving the predetermined physical operation restore command, the secure partition area uses the secure backup information to restore the eSim key information according to the physical operation restore instruction. It enables users to know the current status information of eSim in real time, and can recover the key information of eSim in time through the secure backup information of the secure partition area, thus ensuring the security of eSim key information and ensuring the safe use of users.

Embodiment 2

2 is a schematic flowchart of a method for recovering key information of a virtual subscriber identity module according to a second embodiment of the present invention. On the basis of the first embodiment, the following steps are added: before the key information of the eSim is modified, Sending a prompt to allow eSim key information to be modified. The advantage of this setting is that the user can know the current status of the key information of eSim in real time, and can choose to modify or reject the modification according to his own situation. For details, see FIG. 2, the method is The steps added on the basis of the first embodiment are as follows:

Step 210: Send a prompt to allow the eSim key information to be modified before the eSim key information is modified.

Further, the method may further include: setting a preset regular flag bit during eSim initialization to monitor a state of the eSim key information, that is, the eSim key information is set in a process of initializing a flag or a rule generated according to a certain rule. Checking the code to characterize the correct state of the information. The rule is confidential and not publicly disclosed. If the eSim key information is to be modified, the flag bit will change accordingly, so the flag can be monitored by judging the flag. Whether the eSim key information will be modified.

The prompting manner may be displayed on the screen of the terminal by using a pop-up window, or may be prompted by a voice prompt, and may also be other prompting manners.

Step 220: If the consent modification instruction is received, the eSim key information is modified; if the rejection modification instruction is received, the eSim key information is not modified. The method for recovering the key information of the virtual subscriber identity module is modified according to the embodiment, and the prompt for allowing the eSim key information to be modified is sent before the key information of the eSim is modified; if the consent modification command is received, the key information of the eSim is sent. The modification is made; if the rejection modification instruction is received, the eSim key information is not modified. It enables the user to know the current status of the key information of eSim in real time, and can perform the modification operation or stop the modification operation according to the user's instruction, thereby ensuring the security of the key information of eSim and ensuring the safe use of the user.

Embodiment 3

FIG. 3 is a structural block diagram of a system for recovering key information of a virtual subscriber identity module according to a third embodiment of the present invention. For details, refer to FIG. 3, the system specifically includes the following:

The detecting module 310, the first prompting module 320, the receiving module 330 and the restoring module 340;

The detecting module 310 is configured to detect that the eSim key information is tampered with; the first prompting module 320 is configured to issue a prompt for restoring the secure backup information using the secure partition area; wherein the secure backup information of the secure partition area is initialized by the eSim Key information of eSim backed up in the secure partition area; The receiving module 330 is configured to receive a predetermined physical operation restore command for the secure partition area, and the restore module 340 is configured to use the secure backup information to perform eSim key information restoration according to the physical operation restore command.

A recovery system in which the key information of the virtual subscriber identity module is tampered with by the embodiment of the present invention, when detecting that the key information of the eSim has been tampered with, prompting the user to use the secure backup information of the secure partition area for restoration, wherein the security partition The secure backup information of the area is the eSim key information that is backed up in the secure partition area when the eSim is initialized; after receiving the predetermined physical operation restore command, the secure partition area uses the secure backup information to restore the eSim key information according to the physical operation restore instruction. It enables users to know the current status information of eSim in real time, and can recover the key information of eSim in time through the secure backup information of the secure partition area, thus ensuring the security of eSim key information and ensuring the safe use of users.

Embodiment 4

4 is a structural block diagram of a system for recovering key information of a virtual subscriber identity module according to a fourth embodiment of the present invention. On the basis of the third embodiment, the key information of the virtual subscriber identity module provided by the embodiment is tamper-recovered. The second prompt module is added to the system. For details, refer to FIG. 4, the system specifically includes the following:

The detection module 410, the first prompting module 420, the receiving module 430, the restoring module 440, and the second prompting module 450; wherein, the second prompting module 450 is configured to issue whether the eSim key information is allowed to be modified before the eSim key information is modified. The prompt module is configured to modify the key information of the eSim if the consent modification instruction is received; if the rejection modification instruction is received, the key information of the eSim is not modified.

Illustratively, the predetermined physical operation restore instruction may include:

Preferably, the key information may include one or more of user identity information, user authentication parameters, and operator parameters.

Further, the system may further include: a setting module, configured to set a preset regular flag when the eSim is initialized, to monitor the status of the eSim key information.

A recovery system in which the key information of the virtual subscriber identity module is tampered with by the embodiment provides a prompt for allowing the eSim key information to be modified before the eSim key information is modified; if the consent modification instruction is received, the eSim key information is The modification is made; if the rejection modification instruction is received, the eSim key information is not modified. It enables the user to know the current status of the key information of eSim in real time, and can perform the modification operation or stop the modification operation according to the user's instruction, thereby ensuring the security of the key information of eSim and ensuring the safe use of the user.

Embodiment 5

FIG. 5 is a structural block diagram of another system for recovering key information of a virtual subscriber identity module according to Embodiment 5 of the present invention. As shown in FIG. 5, the system 7 may include: at least one processor 71, such as a CPU, at least A communication bus 72 and a memory 73; the communication bus 72 is used to implement connection communication between these components; the memory 73 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. A set of program codes is stored in the memory 73, and the processor 71 is configured to call the program code stored in the memory 73 for performing the following operations:

It was detected that the key information of eSim was tampered with;

Further, the processor 71 also performs the following operations:

Further, the predetermined physical operation restoration instruction includes:

A physical operation restore command issued by a specific physical button or combination of physical keys.

Further, the key information includes one or more of user identity information, user authentication parameters, and operator parameters.

Further, the processor 71 also performs the following operations:

The preset regular flag is set during eSim initialization to monitor the status of eSim's critical information.

The above product can perform the method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. For technical details not fully described in this embodiment, reference may be made to the method provided by any embodiment of the present invention.

Those skilled in the art can understand that all or part of the steps of implementing the above embodiments may be completed by a program instructing related hardware, and the program is stored in a storage medium, and includes a plurality of instructions for making a device (which may be a single chip microcomputer). , a chip, etc. or a processor performs all or part of the steps of the methods described in various embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

Note that the above are only the preferred embodiments of the present invention and the technical principles applied thereto. Those skilled in the art will appreciate that the present invention is not limited to the specific embodiments described herein, and that various modifications, changes and substitutions may be made without departing from the scope of the invention. Therefore, the present invention has been described in detail by the above embodiments, but the present invention is not limited to the above embodiments, and other equivalent embodiments may be included without departing from the inventive concept. The scope is determined by the scope of the appended claims.

Claims

A method for recovering key information of a virtual subscriber identity module eSim is characterized in that it comprises:

It was detected that the key information of eSim was tampered with;

Issue a prompt to restore the secure backup information using the secure partition area; wherein the secure backup information of the secure partition area is the key information of the eSim backed up in the secure partition area when the eSim is initialized;

The secure partition area receives a predetermined physical operation restore instruction;

The eSim key information is restored using the secure backup information according to the physical operation restore instruction.
The method of claim 1 further comprising:

Prompt whether to allow eSim key information to be modified before the eSim key information is modified;

If the consent modification instruction is received, the key information of eSim is modified; if the rejection modification instruction is received, the key information of eSim is not modified.
The method of claim 1 wherein said predetermined physical operation restore command comprises:

A physical operation restore command issued by a specific physical button or combination of physical keys.
The method according to claim 1, wherein the key information comprises one or more of user identity information, user authentication parameters, and operator parameters.
The method according to claim 1, further comprising: setting a preset regular flag at the time of eSim initialization to monitor the status of the eSim key information.
A recovery system in which the virtual user identification module eSim key information is tampered with, characterized in that it comprises:

a detection module, configured to detect that the key information of the eSim has been tampered with;

The first prompt module is configured to issue a prompt for restoring the secure backup information using the secure partition area; wherein the secure backup information of the secure partition area is backed up in the secure partition area when the eSim is initialized Key information of eSim;

a receiving module, configured to receive a predetermined physical operation restoration instruction in the secure partition area;

And a restore module, configured to perform eSim key information restoration by using the secure backup information according to the physical operation restore instruction.
The system of claim 6 further comprising:

a second prompting module, configured to issue a prompt to allow the eSim key information to be modified before the eSim key information is modified;

The response module is configured to modify the eSim key information if the consent modification instruction is received; if the rejection modification instruction is received, the eSim key information is not modified.
The system of claim 6 wherein said predetermined physical operation restore command comprises:

The user restores the instruction by a physical operation issued by a specific physical button or combination of physical keys.
The system of claim 6, wherein the key information comprises one or more of user identity information, user authentication parameters, and operator parameters.
The system according to claim 6, further comprising: a setting module, configured to set a preset regular flag bit during eSim initialization to monitor the status of the eSim key information.