WO2018018419A1

WO2018018419A1 - Configuration file batch-obtaining and downloading method, and server and terminal

Info

Publication number: WO2018018419A1
Application number: PCT/CN2016/091735
Authority: WO
Inventors: 程紫尧
Original assignee: 华为技术有限公司
Priority date: 2016-07-26
Filing date: 2016-07-26
Publication date: 2018-02-01

Abstract

The embodiments of the present invention relate to a configuration file batch-obtaining and downloading method, and a server and a terminal. The method comprises: a subscription management data preparation server SM-DP+ receiving eUICC matching information sent by a first server, and checking whether there is a configuration file downloading-waiting command corresponding to the matching information; if so, the SM-DP+ acquiring a plurality of profiles corresponding to the configuration file downloading-waiting command; the SM-DP+ generating a plurality of session keys corresponding to a plurality of eUICCs respectively; the SM-DP+ generating a plurality of corresponding binding configuration file packages at least according to the plurality of session keys and the plurality of profiles; and the SM-DP+ sending the plurality of binding configuration file packages to the first server, so that the eUICC downloads the binding configuration file packages from the first server. In the embodiments of the present invention, the SM-DP+ can issue a plurality of binding configuration file packages to the first server once, thereby reducing a large amount of signalling overheads.

Description

Configuration file batch acquisition, download method, server and terminal

Technical field

The present invention relates to the field of smart card technologies, and in particular, to a method for batch obtaining and downloading configuration files, a server, and a terminal.

Background technique

With the rapid development of technology, smart card technology is gradually upgrading and progressing. The first generation of smart cards - SIM card (English: Subscriber Identity Module) is a telecom smart card standard developed for Global System for Mobile communication (GSM), used to identify users on the network. Authentication. The second generation of smart cards - UICC card (Universal Integrated Circuit Card, English: Universal Integrated Circuit Card) is a telecom smart card platform standard developed for 3G, separating the UICC platform and identity authentication applications.

The demand for Internet of Things (IoT) has driven the evolution of UICC cards to embedded UICC cards (or embedded SIM cards, or eUICC), namely: allowing different subscription management data preparation. The server's identity authentication application is dynamically loaded online. The physical form of the eUICC is not limited, and may be a traditional SIM card of different sizes or an embedded card.

At this stage, the GSMA (Global Mobile System Alliance, English: Global Mobile System Alliance) only defines the download mechanism and certificate management architecture of the common (single) user profile profile, which is based on the public key infrastructure (Public Key Infrastructure). In the PKI mode, the contract management data preparation server entity and the eUICC use the respective digital certificates to perform mutual authentication and key agreement (end-to-end security), and the profile is securely downloaded from the subscription management data preparation server entity to the eUICC. However, the GSMA does not propose a solution for the enterprise or group user scenarios. Therefore, how to satisfy the enterprise or group users to obtain the profile for eUICC in batches becomes The problem that needs to be solved at this stage.

Summary of the invention

The embodiment of the invention provides a method for obtaining and downloading configuration files in batches, a server and a terminal, which can acquire configuration files in batches.

In a first aspect, an embodiment of the present invention provides a method for batch obtaining and downloading a configuration file, including:

The subscription management data preparation server receives the matching information of the plurality of embedded universal integrated circuit cards eUICC sent by the first server, and checks whether there is a waiting configuration file download command corresponding to the matching information;

The contract management data preparation server acquires a plurality of configuration file profiles corresponding to the waiting configuration file download command in the case that the waiting for matching file download command exists;

The subscription management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs; the subscription management data preparation server generates corresponding at least according to the plurality of session keys and the plurality of profile profiles Binding configuration package;

The subscription management data preparation server sends the plurality of binding configuration file packages to the first server, so that the eUICC downloads the binding configuration file package from the first server.

The subscription management data preparation server of the embodiment of the present invention sends a plurality of binding configuration file packages of the plurality of eUICCs to the first server in batches according to the requirements of the first server, thereby reducing the signaling overhead of the subscription management data preparation server and alleviating The access pressure is used to prevent DoS attacks caused by a large number of users simultaneously launching a profile download request. (DoS is short for Denial of Service, that is, denial of service, and the DoS attack is called a DoS attack).

In an example, the subscription management data preparation server receives the matching information of the plurality of embedded universal integrated circuit cards eUICC sent by the first server, and further includes:

The subscription management data preparation server receives a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC sent by the first server; wherein the plurality of eUICCs and the plurality of presets The keys correspond to each other.

In an example, the subscription management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs, including:

The subscription management data preparation server generates a one-time public-private key pair; the subscription management data preparation server generates corresponding to the plurality of eUICCs according to the plurality of preset public keys of the plurality of eUICCs and the one-time private key Multiple session keys.

In one example, the binding configuration file package includes at least the one-time public key, a public key included in the digital certificate of the subscription management data preparation server, a second digital signature of the subscription management data preparation server, and the preset public key. Hash value

And the second digital signature of the subscription management data preparation server is that the subscription management data preparation server is generated according to at least the one-time public key and the preset public key;

The hash value of the preset public key is generated by the contract management data preparation server hashing the preset public key.

In an example, after the subscription management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs, the method includes:

Separating the plurality of session keys by using a plurality of preset public keys of the plurality of eUICCs to generate a plurality of encrypted session keys, and generating the plurality of the at least one of the plurality of encrypted session keys Bind the configuration package.

In one example, the binding profile package includes at least a hash value of the preset public key, a public key included in a digital certificate of the subscription management data preparation server, the encrypted session key, the Signing a third digital signature of the data preparation server;

And the third digital signature of the subscription management data preparation server is that the subscription management data preparation server is generated according to at least a plurality of encrypted session keys and the preset public key;

In one example, under the check if there is a waiting configuration file corresponding to the matching information Before the command is included, it also includes:

The subscription management data preparation server verifies the digital signature generated by the first server according to at least the plurality of preset public keys of the plurality of eUICCs and the matching information.

In a second aspect, an embodiment of the present invention provides a method for batch obtaining and downloading configuration files, including:

The first server sends a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information corresponding to the plurality of eUICCs to the subscription management data preparation server, so that the subscription management data preparation server generates the matching Multiple binding configuration file packages corresponding to the information;

The plurality of eUICCs respectively correspond to the plurality of preset public keys;

The first server receives an eUICC digital certificate from the eUICC, and checks whether the eUICC identity identifier EID in the eUICC digital certificate exists in the first server;

In the case that the eUICC identity identifier EID is present, the first server searches for a hash value of the preset public key corresponding to the eUICC identity identifier EID, and further determines a location according to the hash value of the preset public key. The binding configuration file package corresponding to the eUICC is sent, and the binding configuration file package is sent to the local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.

The first server of the embodiment of the present invention can obtain a plurality of binding configuration file packages corresponding to the plurality of eUICCs in batches from the subscription management data preparation server, and store the plurality of binding configuration file packages according to the specific requirements of the users of the subordinate eUICC terminals. It is sent to the corresponding eUICC terminal.

In an example, before the first server sends the plurality of preset public keys of the embedded universal integrated circuit card (eUICC) and the matching information of the plurality of eUICCs to the subscription management data preparation server, the method further includes:

Determining, by the first server, a plurality of preset public private key pairs of the plurality of eUICCs and a plurality of the eUICC identity identifiers EID of the plurality of eUICCs, and obtaining a plurality of preset public keys of the plurality of eUICCs Hash value

The first server, the hash value of the plurality of preset public keys of the plurality of eUICCs, and the plurality of The eUICC identity EIDs are stored separately.

In an example, the obtaining the hash values of the plurality of preset public keys of the plurality of eUICCs includes: obtaining the hash values of the plurality of preset public keys of the plurality of eUICCs directly, or A server calculates a hash value of the plurality of preset public keys of the plurality of eUICCs according to the plurality of preset public keys of the plurality of eUICCs.

In an example, the first server sends a plurality of preset public keys of the embedded universal integrated circuit card (eUICC) and the matching information of the plurality of eUICCs to the subscription management data preparation server, and further includes:

The first server sends, to the subscription management data preparation server, a first server first digital signature generated according to at least a plurality of preset public keys of the plurality of eUICCs and the matching information, so that the subscription management data is The preparation server verifies the first digital signature of the first server.

In an example, before verifying whether the eUICC identity identifier EID in the eUICC digital certificate exists in the first server, the method further includes:

The first server verifies the first digital signature generated by the eUICC according to at least the random number of the first server.

The multiple binding configuration file packets obtained by the first server in the embodiment of the present invention are all encrypted, and the first server cannot obtain the specific information of the binding configuration file package, thereby ensuring the security of the binding configuration file package.

In a third aspect, an embodiment of the present invention provides a method for batch obtaining and downloading configuration files, including:

The embedded universal integrated circuit card eUICC terminal sends an eUICC digital certificate to the first server, so that the first server determines a binding configuration file package corresponding to the eUICC identity identifier EID included in the eUICC digital certificate;

The local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and sends the binding configuration file package to the eUICC by repeatedly initiating a load binding configuration file package function. eUICC in the terminal.

In an example, the local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and sends the binding configuration file package by repeatedly initiating a load binding configuration file package function. The eUICC in the eUICC terminal further includes:

The eUICC prepares a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and verifies the digital signature of the subscription management data preparation server included in the initial security channel function, and performs verification. In this case, the session key is generated according to the private key corresponding to the preset public key and the one-time public key of the subscription data management server included in the initialization security channel function.

The eUICC prepares a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and verifies the digital signature of the subscription management data preparation server included in the initial security channel function, and performs verification. In this case, the encrypted session key included in the initialization secure channel function is decrypted by using the preset public key to obtain a session key.

In a fourth aspect, an embodiment of the present invention provides a subscription management data preparation server, including:

a receiver, configured to receive, by the first server, matching information of multiple embedded universal integrated circuit cards eUICC;

a processor, configured to check whether there is a waiting configuration file download command corresponding to the matching information; and if there is the waiting for matching file download command, acquiring a plurality of configuration file profiles corresponding to the waiting configuration file downloading command Generating a plurality of session keys respectively corresponding to the plurality of eUICCs; generating at least a plurality of binding profile packages according to the plurality of session keys and the plurality of profile profiles;

And a transmitter, configured to send the multiple binding configuration file package to the first server, so that the eUICC downloads the binding configuration file package from the first server.

In a fifth aspect, an embodiment of the present invention provides a server, including:

a transmitter, configured to send a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information corresponding to the plurality of eUICCs, so that the subscription management data preparation server generates multiple bindings corresponding to the matching information. Configuration file package;

a receiver, configured to receive an eUICC digital certificate from the eUICC;

a processor, configured to check whether the eUICC identity identifier EID in the eUICC digital certificate exists in the server, and to find a preset public key corresponding to the eUICC identity identifier EID in the presence of the eUICC identity identifier EID And determining a binding configuration file package corresponding to the eUICC according to the hash value of the preset public key;

And a transmitter, configured to send the binding configuration file package to a local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.

In a sixth aspect, an embodiment of the present invention provides a terminal, including:

a transmitter, configured to send an embedded universal integrated circuit card eUICC digital certificate to the first server, so that the first server determines a binding configuration file package corresponding to the eUICC identity identifier EID included in the eUICC digital certificate;

a receiver, configured to receive the binding configuration file package from the first server, and a processor, configured to repeatedly initiate a load binding configuration file package function by using the binding configuration file package;

And a transmitter, configured to send the binding configuration file package to an embedded universal integrated circuit card eUICC in the terminal.

In a seventh aspect, an embodiment of the present invention provides a method for batch obtaining a configuration file, including:

The subscription management data preparation server SM-DP+ receives the matching information sent by the first server and the plurality of embedded universal integrated circuit cards eUICC, wherein the plurality of eUICCs comprise the first eUICC and the second eUICC;

The SM-DP+ checks whether there is a plurality of profile profiles corresponding to the matching information, wherein the plurality of profiles includes a first profile and a pair corresponding to the first eUICC Should be in the second profile of the second eUICC;

Generating, by the SM-DP+, a first session key corresponding to the first eUICC and a second session key corresponding to the second eUICC;

Generating, by the SM-DP+, a first binding profile package and a second binding profile package based on the first session key and the first eUICC, the second session key, and the second eUICC, respectively ;

The SM-DP+ sends the first binding configuration file package and the second binding configuration file package to the first server.

In an example, the first eUICC is preset with a first public private key pair, the first public private key pair includes a first public key and a first private key, and the second eUICC is preset with a second public private key. a key pair, the second public private key pair includes a second public key and a second private key;

Before the SM-DP+ generates the first session key corresponding to the first eUICC and the second session key corresponding to the second eUICC, the method further includes:

The SM-DP+ receives a plurality of preset public keys sent by the first server, and the plurality of preset public keys includes the first public key and the second public key.

Further, the SM-DP+ generates a first session key corresponding to the first eUICC and a second session key corresponding to the second eUICC, including:

The SM-DP+ generates a third public private key pair, where the third public private key pair includes a third public key and a third private key;

The SM-DP+ generates a first session key corresponding to the first eUICC by using the first public key and the third private key;

The SM-DP+ generates a second session key corresponding to the second eUICC using the second public key and the third private key.

Further, the binding configuration file package includes at least the third public key, a public key included in the digital certificate of the subscription management data preparation server, a second digital signature of the subscription management data preparation server, and the The hash value of the first public key;

And the second digital signature of the subscription management data preparation server is that the subscription management data preparation server is generated according to at least the third public key and the first public key;

The hash value of the first public key is generated by the SM-DP+ hashing the first public key.

In an example, the SM-DP+ generates a first session key corresponding to the first eUICC and a second session key corresponding to the second eUICC, including:

Encrypting the first session key with the first public key of the first eUICC to generate a first encrypted session key, and using the second public key of the second eUICC to perform the second session key Encrypting to generate a second encrypted session key, and generating a first binding profile package according to at least the first encrypted session key, and generating the second binding configuration according to at least the second encrypted session key File package.

Further, the first binding profile package includes at least a hash value of the first public key, a public key included in a digital certificate of the subscription management data preparation server, the first encrypted session key, The third digital signature of the subscription management data preparation server; the second binding configuration file package includes at least a hash value of the second public key, a public key included in the digital certificate of the subscription management data preparation server, The second encrypted session key, the third digital signature of the subscription management data preparation server;

And the third digital signature of the subscription management data preparation server is that the SM-DP+ is based on the first encrypted session key, the first public key, and the second encrypted session key, Generated by the second public key;

The hash value of the first public key is generated by the SM-DP+ hashing the first public key; the hash value of the second public key is the SM-DP+ pair The second public key is generated by hashing.

In an example, before the verifying whether there are multiple profiles corresponding to the matching information, the method further includes:

The SM-DP+ verifies that the first server sends at least according to the first eUICC A digital signature generated by a public key, a second public key of the second eUICC, and the matching information.

In an eighth aspect, an embodiment of the present invention provides a method for batch obtaining and downloading a configuration file, including:

The first server sends a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information associated with the plurality of eUICCs to the subscription management data preparation server SM-DP+, wherein the plurality of eUICCs includes a first eUICC and a second eUICC, the plurality of preset public keys including a first public key corresponding to the first eUICC and a second public key corresponding to the second eUICC, so that the SM-DP+ is generated a first binding configuration file package and a second binding configuration file package corresponding to the matching information;

Before the first server sends the plurality of preset public keys of the eUICC and the matching information associated with the multiple eUICCs to the SM-DP+, the method further includes:

Determining, by the first server, the first public private key pair, the second public private key pair, the first identity identifier EID of the first eUICC, and the second identity identifier EID of the second eUICC, and Obtaining a hash value of the first public key and a hash value of the second public key;

The first server stores the hash value of the first public key and the identity identifier EID of the first eUICC, and the hash value of the second public key and the identity of the second eUICC EID Corresponding storage.

In one example, the hash value of the preset public key is obtained in the following manner:

The hash value of the preset public key is directly obtained, or the first server generates a hash value of the preset public key according to the preset public key.

In an example, the first server sends the plurality of preset public keys of the eUICC and the matching information associated with the multiple eUICCs to the SM-DP+, including:

Transmitting, by the first server, the first digital signature of the first server generated according to the first public key of the first eUICC, the second public key of the second eUICC, and the matching information to the SM-DP+, so that The SM-DP+ verifies the first digital signature of the first server.

In an example, before the checking whether the eUICC identity identifier EID in the eUICC digital certificate exists in the first server, the method further includes:

A ninth aspect, the embodiment of the present invention provides a method for batch obtaining and downloading configuration files, including:

In one example, the local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and the binding configuration file package is repeatedly triggered to load the binding configuration file package function. The eUICC sent to the eUICC terminal further includes:

The eUICC prepares a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and includes a signature included in the initial security channel function. The management data preparation server digital signature is verified, and in the case of verification, the session is generated according to the private key corresponding to the preset public key and the one-time public key of the subscription data management server included in the initialization security channel function. Key.

The tenth aspect of the present invention provides a subscription management data preparation server, including:

a receiver, configured to receive matching information associated with a plurality of embedded universal integrated circuit card eUICCs, wherein the plurality of eUICCs comprise a first eUICC and a second eUICC;

a processor, configured to check whether there is a plurality of profile profiles corresponding to the matching information, where the plurality of profiles includes a first profile corresponding to the first eUICC and a first profile corresponding to the second eUICC a second profile, generating a first session key corresponding to the first eUICC and a second session key corresponding to the second eUICC, respectively, based on the first session key and the first eUICC, The second session key and the second eUICC generate a first binding configuration file package and a second binding configuration file package;

And a transmitter, configured to send the first binding configuration file package and the second binding configuration file package to the first server.

In an example, the first eUICC is preset with a first public private key pair, the first public private key pair includes a first public key and a first private key, and the second eUICC is preset with a second public private key. a key pair, the second public private key pair including a second public key and a second private key;

The receiver is further configured to receive a plurality of preset public keys sent by the first server, where the multiple The preset public key includes the first public key and the second public key.

Further, the processor is further configured to generate a third public private key pair, where the third public private key pair includes a third public key and a third private key, and is generated by using the first public key and the third private key Corresponding to the first session key of the first eUICC, using the second public key and the third private key to generate a second session key corresponding to the second eUICC.

In one example, the processor is further configured to encrypt the first session key by using a first public key of the first eUICC to generate a first encrypted session key, by using the second eUICC The second public key encrypts the second session key to generate a second encrypted session key, and generates a first binding profile package according to at least the first encrypted session key, at least according to the second encryption The session key generates the second binding profile package.

And the third digital signature of the subscription management data preparation server is that the processor is based at least on the first encrypted session key, the first public key, and the second encrypted session key, the first Generated by the second public key;

The hash value of the first public key is generated by the processor performing a hash operation on the first public key; the hash value of the second public key is the processor to the second public The key is generated by hashing.

In one example, the processor is further configured to verify a digital signature generated by the first server according to at least the first public key of the first eUICC, the second public key of the second eUICC, and the matching information.

In an eleventh aspect, an embodiment of the present invention provides a server, including:

a transmitter, configured to send, to the subscription management data preparation server SM-DP+, a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information associated with the plurality of eUICCs, wherein the multiple The eUICC includes a first eUICC and a second eUICC, the plurality of preset public keys including a first public key corresponding to the first eUICC and a second public key corresponding to the second eUICC, so that the SM- DP+ generates a first binding configuration file package and a second binding configuration file package corresponding to the matching information;

a receiver, configured to receive an eUICC digital certificate from the eUICC;

a processor, configured to check whether an eUICC identity identifier EID in the eUICC digital certificate exists, and in a case where the eUICC identity identifier EID exists, searching for a hash value of a preset public key corresponding to the eUICC identity identifier EID, And determining, according to the hash value of the preset public key, a binding configuration file package corresponding to the eUICC;

The transmitter is configured to send the binding configuration file package to a local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.

The processor is further configured to obtain, in advance, the first public private key pair, the second public private key pair, the first identity identifier EID of the first eUICC, and the second identity identifier EID of the second eUICC And obtaining a hash value of the first public key and a hash value of the second public key;

The processor stores the hash value of the first public key and the identity identifier EID of the first eUICC, and the hash value of the second public key and the identity identifier EID of the second eUICC Corresponding storage.

In one example, the transmitter is further configured to send, to the SM-DP+, a first generated according to at least a first public key of the first eUICC, a second public key of the second eUICC, and the matching information. The server first digitally signs the SM-DP+ to verify the first digital signature of the first server.

In one example, the processor is further configured to verify a first digital signature generated by the eUICC based on at least a random number of the first server.

A twelfth aspect, the embodiment of the present invention provides a terminal, including:

a receiver, configured to receive the binding configuration file package from the first server;

a processor, configured to repeatedly initiate a load binding configuration file package function by using the binding configuration file package;

In an example, the processor is further configured to: prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and perform subscription management on the initial security channel function. The data preparation server performs digital verification to generate a session key according to the private key corresponding to the preset public key and the one-time public key of the subscription data management server included in the initialization security channel function. .

In an example, the processor is further configured to: prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and perform subscription management on the initial security channel function. The data preparation server digital signature is verified, and in the case of verification, the encrypted public key included in the initialization security channel function is utilized by the preset public key The session key is decrypted to obtain the session key.

The configuration file batch obtaining and downloading method, the server, and the terminal provided by the embodiment of the present invention can deliver multiple binding configuration file packages at one time, which is equivalent to batch processing a large number of eUICC terminal download requests at one time, thereby reducing a large amount of signaling overhead. Alleviate the access pressure and prevent DoS attacks that may be caused when a large number of eUICC terminals initiate a profile download request at the same time. In addition, for the terminal equipment manufacturer (OEM) embedded in the eUICC, it is no longer necessary for each terminal to access the network of different contract management data preparation servers during the factory test for test joint debugging, reducing the test. Cost; and for the contract management data preparation server, only one OEM platform needs to be docked, and subsequent test joint debugging can be solved internally by the OEM.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

FIG. 1 is a schematic diagram of a batch acquisition and download system of a profile profile according to an embodiment of the present disclosure;

2 is a schematic diagram of information acquisition of a first server according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of a method for batch obtaining a profile profile according to Embodiment 1 of the present invention;

4 is a schematic diagram of a batch downloading method of a profile profile according to Embodiment 1 of the present invention;

FIG. 5 is a schematic diagram of a method for obtaining a batch profile file profile according to Embodiment 2 of the present invention;

FIG. 6 is a schematic diagram of a batch downloading method of a profile profile according to Embodiment 2 of the present invention; FIG.

FIG. 7 is a schematic diagram of a process of generating a binding configuration file package according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of a process for distinguishing multiple binding configuration file packages according to an embodiment of the present disclosure;

FIG. 9 is a schematic diagram of a subscription management data preparation server according to an embodiment of the present invention;

FIG. 10 is a schematic diagram of a first server according to an embodiment of the present disclosure;

FIG. 11 is a schematic diagram of an eUICC terminal according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be described in conjunction with the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are part of the present invention. Embodiments, but not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

When the embodiments of the present invention refer to ordinal numbers such as "first", "second" and the like, unless it is intended to express the order according to the context, it should be understood that it only serves as a distinction.

The embodiment of the present invention provides a configuration file profile acquisition and download method, a device, and a system, so that a subscription management data preparation server (Subscription Manager Data Preparation+, SM-DP+) can bind multiple binding configuration files (bound profile). The package is delivered to the first server (such as a server deployed by a third-party service provider), and the first server obtains multiple binding configuration files corresponding to multiple eUICCs, and then configures the multiple bindings. The file package is sent to the corresponding eUICC via the corresponding Local Profile Assistant (LPA), and the download and installation of the binding configuration file package is completed by the eUICC.

FIG. 1 is a schematic diagram of a batch acquisition and download system of a profile profile according to an embodiment of the present invention. The system includes: a contract management data preparation server SM-DP+, a first server, a plurality of local profile assistants LPAs corresponding to the plurality of eUICC terminals, and a plurality of eUICCs.

In FIG. 1, the subscription management data preparation server SM-DP+ is configured to receive information such as multiple preset public keys of multiple eUICCs sent by the first server, matching information corresponding to multiple eUICCs (for example, The subscription management data preparation server SM-DP+ is further configured to receive the domain name of the subscription management data preparation server SM-DP+, the digital certificate of the first server, and the like, and acquire multiple profiles corresponding to the matching information (protected profile package protected profile) a package or an unprotected profile package, and generating a plurality of binding configuration file packages corresponding to the plurality of eUICCs according to the plurality of profiles, and the binding configuration file package includes at least the preset public key of the eUICC The hash value and the public key included in the digital certificate of the subscription management data preparation server SM-DP+; wherein the plurality of eUICCs respectively correspond to the plurality of eUICC terminals, that is, each eUICC terminal is configured with a corresponding eUICC, and multiple The eUICC corresponds to a plurality of preset public keys respectively.

a first server, configured to send (not limited to) a plurality of preset public keys of the plurality of eUICCs and matching information of the plurality of eUICCs to the subscription management data preparation server SM-DP+ (for example, the first server is further used for Sending a domain name of the subscription management data preparation server SM-DP+, a digital certificate of the first server, and the like, and receiving a plurality of binding configuration file packages corresponding to the plurality of eUICCs generated by the subscription management data preparation server SM-DP+; and receiving After the eUICC digital certificate sent by the local configuration file assistant LPA of the eUICC terminal, the eUICC identity identifier EID in the eUICC digital certificate is obtained, and it is checked whether the eUICC identity identifier EID obtained in the first database is the same as the eUICC identity identifier obtained from the digital certificate. The EID, if yes, obtains a hash value of the preset public key of the eUICC corresponding to the eUICC identity identifier EID according to the eUICC identity identifier EID, and determines the binding of the eUICC according to the hash value of the preset public key. The configuration package is packaged and the binding configuration package is sent to the eUICC via the local configuration file assistant LPA. In the first server, the hash value of the preset public key of each eUICC is stored corresponding to the eUICC identity identifier EID, so that there is a corresponding relationship between the two.

The first server may be a server deployed by a third-party service provider (ie, a contract management secure routing server, English: Subscription Manager-Secure Routing+, referred to as SM-SR+), and the third-party service provider includes but is not limited to enterprise users and group users. The first server may also be part of the subscription management data preparation server SM-DP+; the first server may also be a Subscription Manager-Discovery Server (SM-DS). Wait.

The local profile assistant LPA is configured to forward the eUICC digital certificate and the like sent by the eUICC to the first server, and download the binding configuration file package corresponding to the eUICC from the first server, and split the binding configuration file package corresponding to the eUICC. Different data blocks (functions) are sequentially sent to the corresponding eUICC through an Application Protocol Data Unit command. The eUICC is configured to sequentially receive different data blocks (functions) of the binding configuration file package sent by the local configuration file assistant LPA through the application protocol data unit, and decrypt the data block according to the generated session key to complete the binding configuration file. Package installation.

The eUICC terminal includes at least a local profile assistant LPA and an eUICC. The eUICC terminal includes an LPA and a corresponding eUICC, and the information sent by the eUICC terminal to the first server is sent by the LPA. The local configuration file assistant LPA is used to manage the eUICC, forward the information sent by the eUICC, obtain the intent of the eUICC terminal user, and actively request to download, activate, and delete the profile. The eUICC is provided by the communication module manufacturer, the terminal manufacturer, or the M2M industry customer. The eUICC provider subscribes and finally embeds into the eUICC terminal. The eUICC terminal embeds the eUICC digital certificate of the eUICC (eUICC digital certificate including eUICC identity EID), eUICC information set 1 (eUICC_info_1), eUICC information set 2 (eUICC_info_2), pre- The eUICC information set 1 (eUICC_info_1) includes the format of the digital certificate supported by the eUICC, the signature algorithm supported in the subsequent verification process, the specification version number, and the like; eUICC information set 2 (eUICC_info_2) ) Includes eUICC capability information, such as supported specification versions, storage capabilities, and more.

In addition, in the embodiment of the present invention, the digital certificate and the digital signature are used for mutual authentication between devices (for example, the bidirectional authentication of the contract management data preparation server SM-DP+ and the first server, and the first server and the eUICC terminal) Two-way authentication). For ease of understanding, the specific process of two-way authentication between devices through digital certificates and digital signatures is described in detail.

Assume that the first device holds a pair of public and private key pairs, including a first device public key and a first device private key, and the first device public key is a public key included in the digital certificate of the first device; Hold one The public-private key pair includes a second device public key and a second device private key, and the second device public key is a public key included in the digital certificate of the second device.

The first device sends a message M to the second device, and the first device encrypts the hash value (or message digest) of the message M using the first private key to generate a digital signature A. Specifically, the message M is used as the digital information, and the first device generates a hash value of the digital information (for example, the message M) through a hash function, and then uses the first private key pair held by the first device itself. The hash value is encrypted to generate the digital signature A. The first device sends the message M (ie, an example of digital information) and the digital signature A to the second device, the digital information being plaintext information.

The first device sends its own digital certificate, that is, the digital certificate of the first device, to the second device, where the second device first verifies the digital certificate of the first device, and if the digital certificate of the first device is verified, the The first public key in the digital certificate of the first device decrypts the digital signature A to obtain a hash value of the message M.

The second device may perform a calculation using the hash function on the message M, and compare the obtained result with the hash value of the decrypted message M. If the two are consistent, it may be determined that the digital signature A is The first device is calculated by using its own unique first private key, so that the second device verifies the identity of the first device, and can also prove that the message M protected by the digital signature A has not been tampered with. Similarly, the second device may also generate a digital signature B based on the method for generating the digital signature A. The first device verifies the digital signature B sent by the second device based on the method for verifying the digital signature A. For the sake of brevity, it will not be repeated here.

A method for batch obtaining and downloading a profile profile provided by the present invention will be described below with reference to the first embodiment and the second embodiment.

Embodiment 1

The first embodiment of the present invention provides a method for batch obtaining and downloading a profile profile, which mainly includes a first phase and a second phase of two work phases. The first phase is a batch acquisition of a profile profile, and the second phase is a configuration file. Batch download of profiles.

The following takes the first server as the contract management security routing server SM-SR+ as an example.

FIG. 3 is a schematic diagram of a method for obtaining a batch of a profile profile according to the first embodiment of the present invention. As shown in FIG. 3, the first server SM-SR+ from the subscription management data preparation server SM-DP+ is provided in the first embodiment of the present invention. The working principle and process of obtaining multiple binding configuration file packages includes step S101 - step S108:

Before the first server SM-SR+ starts to obtain multiple binding configuration file packages in batches, it also includes:

Referring to FIG. 2, the first server SM-SR+ needs to obtain a matching information (matching ID or Activation Code Token) corresponding to multiple eUICCs from the operator, and obtain a subscription management data preparation server domain name (SM-DP+addr); The eUICC Manufacturer (eUMCC) obtains the preset public key (PK_eUICCi_ECKA) of each eUICC terminal and the hash value h (PK_eUICCi_ECKA) of the preset public key (may also be obtained by the first server SM-SR+) Preset public key calculation generates a hash value of the preset public key), eUICC information set 1 (eUICC_info_1), eUICC information set 2 (eUICC_info_2), eUICC identity EID (eUICC-ID); and will be manufactured from the operator, eUICC The information obtained by the quotient is stored in the first database of the first server SM-SR+, wherein the hash value of the preset public key of each eUICC is stored correspondingly with the eUICC identity identifier EID, so that there is a corresponding relationship between the two. The first server SM-SR+ needs to apply for and obtain the digital certificate of the first server SM-SR+ from the digital certificate authority CI approved by the GMSA.

In addition, as shown in FIG. 1, a waiting configuration file download command corresponding to the above matching information exists in the subscription management data preparation server SM-DP+, and the waiting configuration file download command corresponds to multiple profiles (protected configuration file package or not Protected profile package). The specific generation process of multiple profile profiles is detailed in Figure 7 and related text descriptions.

In step S101, the first server SM-SR+ initiates and establishes a first https (Hyper Text Transfer Protocol over Secure Socket Layer) connection to the subscription management data preparation server SM-DP+ for subsequent interaction. The signaling is performed by the first server SM-SR+ through the first https connection to the subscription management data preparation server SM-DP+, and at least includes the subscription management data preparation server domain name (SM-DP+addr), the first Information such as the server first random number (SR_challenge_1) and eUICC information set 1 (eUICC_info_1).

The first server first random number (SR_challenge_1) is generated by the first server SM-SR+, and has uniqueness and randomness, and can ensure interaction information between the first server SM-SR+ and the subscription management data preparation server SM-DP+. Freshness; eUICC information set 1 (eUICC_info_1) includes the format of the digital certificate supported by the eUICC, the signature algorithm supported in the subsequent verification process, the specification version number, and the like.

Step S102, the subscription management data preparation server SM-DP+ verifies the subscription management data preparation server domain name (SM-DP+addr) sent by the first server SM-SR+ (to verify whether the domain name corresponds to the subscription management data preparation server SM-DP+) Verifying the content in the eUICC information set 1 (eUICC_info_1), if the verification is successful, generating a first interaction identifier (TransactionID_1), a contract management data preparation server random number (DP_challenge), and a contract management data preparation server digital signature, which is referred to herein as The contract management data preparation server first digital signature (DP_sign1); wherein the subscription management data preparation server first digital signature (DP_sign1) is a subscription management data preparation server SM-DP+ at least according to the first server first random number (SR_challenge_1), The contract management data preparation server random number (DP_challenge), the contract management data preparation server domain name (SM-DP+addr), and the first interaction identifier (TransactionID_1) are generated; if the subscription management data preparation server domain name (SM-DP+addr) and eUICC If the information set 1 (eUICC_info_1) fails to be verified, an error message is sent to the first server SM-SR+. Shown, and ends the operation.

Step S103, the subscription management data preparation server SM-DP+ at least the first interaction identifier (TransactionID_1), the contract management data preparation server random number (DP_challenge), the contract management data preparation server first digital signature (DP_sign1), and the contract management data preparation server Domain name (SM-DP+addr), contract management data preparation server digital certificate (CERT.DP.ECDSA), Curve To Be Used (here refers to the contracted management data preparation server SM-DP+ selected key The parameter reference value is sent to the first server SM-SR+ through the first https connection.

Step S104, the first server SM-SR+ verifies the received subscription management data preparation server digital certificate (CERT.DP.ECDSA) and the contract management data preparation server first digital signature (DP_sign1), and if the verification is successful, the contract is signed. The data preparation server SM-DP authenticates successfully, and generates a first server digital signature, which is referred to herein as a first server first digital signature (SR_sign1); wherein the first server first digital signature (SR_sign1) is the first server SM -SR+ according to at least a plurality of preset public keys (PK.eUICC1.ECKA...PK.eUICCn.ECKA), matching information (matchingID or Activation Code Token), first interaction identifier (TransactionID_1), and contract management data of a plurality of eUICCs The server random number (DP_challenge), the subscription management data preparation server domain name (SM-DP+addr), the terminal information (Device_info), and the eUICC information set 2 (eUICC_info_2) are generated; wherein the terminal information (Device_info) includes at least the terminal capability. The eUICC information set 2 (eUICC_info_2) includes at least eUICC capability information, such as a supported specification version, and storage, such as the supported network access mode (2G/3G/4G). Force or the like; wherein the plurality of the plurality of preset eUICC corresponding public key respectively.

Specifically, the signing management data preparation server generates a first digital signature (DP_sign1) and the first server SM-SR+ validates the first digital signature (DP_sign1) of the subscription management data preparation server, see the first device and The second device performs a two-way authentication process. The specific verification process of the first server SM-SR+ for the first digital signature (DP_sign1) of the subscription management data preparation server needs to be verified according to a specific signature algorithm. The embodiment of the present invention adopts an elliptic curve signature algorithm ECDSA (Curve To Be). Used).

Step S105: The first server SM-SR+ at least the first interaction identifier (TransactionID_1), the plurality of preset public keys of the plurality of eUICCs, the subscription management data preparation server domain name (SM-DP+addr), and the matching information (matchingID or Activation) Code Token), terminal information (Device_info), eUICC information set 2 (eUICC_info_2), first server first digital signature (SR_sign1), first server digital certificate (CERT.SR.ECDSA) are sent to the contract management through the first https connection a data preparation server SM-DP+; wherein the plurality of eUICCs and the plurality of preset public keys are respectively correspond.

Step S106, the subscription management data preparation server SM-DP+ verifies the first server digital certificate (CERT.SR.ECDSA) and the first server first digital signature (SR_sign1). If the verification passes, the first server SM-SR+ The authentication succeeds, and the eligibility verification is performed according to the eUICC information set 2 (eUICC_info_2) and the terminal information (Device_info). If any of the above verification fails, the first server SM-DP+ sends an error message prompt and ends the operation; Successfully, check whether the subscription management data preparation server SM-DP+ has a waiting configuration file download command corresponding to the matching information (matchingID or Activation Code Token), and if so, acquire multiple profiles corresponding to the matching information (unprotected configuration file) Package or protected configuration package).

The contract management data preparation server SM-DP+ generates a one-time public-private key pair including a one-time private key (otSK.DP.ECKA) and a one-time public key (otPK.DP.ECKA).

The contract management data preparation server SM-DP+ generates a plurality of session keys corresponding to the plurality of eUICCs according to the plurality of preset public keys of the plurality of eUICCs and the one-time private key (otSK.DP.ECKA) of the subscription management data preparation server (session) Keys), referred to herein as the first session key. The one-time public-private key pair of the subscription management data preparation server used by the plurality of profiles corresponding to the same waiting profile download command is the same, and the subscription management data preparation used by the plurality of profiles corresponding to the different waiting profile download commands is prepared. The server's one-time public and private key pairs are not the same.

The subscription management data preparation server SM-DP+ generates, for each eUICC, a digital signature of the subscription management data preparation server according to at least the generated one-time public key and the preset public key of the eUICC, which is referred to herein as a subscription management data preparation server. Two digital signatures (DP_sign2). Therefore, for a plurality of eUICCs, the contract management data preparation server SM-DP generates a corresponding plurality of DP_sign2.

The plurality of preset public keys of the plurality of eUICCs sent by the first server SM-SR+ are hashed to generate hash values of the plurality of preset public keys respectively corresponding to the plurality of eUICCs.

The subscription management data preparation server SM-DP+ generates a binding configuration file according to at least a first session key corresponding to each eUICC and a corresponding profile profile (for example, a protected profile). package. Therefore, for multiple eUICCs, multiple corresponding binding profile packages are generated. The binding configuration file package is generated by the subscription management data preparation server SM-DP+, and through a key agreement with the eUICC, that is, a first session key is generated by key negotiation, and one is The protected configuration file package is associated with a specific eUICC. Each binding configuration file package is composed of consecutive TLV (Tag Length Value) commands, including the following TLV commands: initializing the secure channel data block ('InitialiseSecureChannel'block), Configure ISDP (Issuer Security Domain Profile) data block ('ConfigureISDP' block), store metadata data block ('StoreMetadata' block), and profile protection key data block ('Profile Protection Keys' block) and protected configuration file package. SCP03t payload TLVs of the Protected profile package, wherein the data block configures an ISDP data block, a storage metadata data block, and a configuration file protection key data block (optional, when the subscription management data preparation server SM-DP+ When generating the profile key) Encryption and integrity guarantees through the first session keys .

The subscription management data preparation server SM-DP+ stores the hash values of the preset public keys of the plurality of eUICCs in the Initialise Secure Channel data blocks of the plurality of binding configuration file packages, and the initialization security channel data is initialized. The block further includes at least a subscription management data preparation server one-time public key (otPK.DP.ECKA), a public key of the contract management data preparation server digital certificate (PK.DPpb.ECDSA), and a second digital signature of the contract management data preparation server ( DP_sign2) and the hash value of the preset public key corresponding to eUICC. The specific generation process of the binding configuration file package is shown in Figure 7 and related text descriptions.

In step S107, the subscription management data preparation server SM-DP+ sends a plurality of binding configuration file packages to the first server SM-SR+.

Step S108: The first server SM-SR+ stores the acquired multiple binding configuration file packages in the first database. It should be noted that, because the hash value of the preset public key of the multiple eUICCs in the first database is correspondingly stored and the multiple eUICC identity identifiers EID, the first server SM-SR+ can obtain the corresponding information according to the eUICC identity identifier EID. The hash value of the pre-public key of the eUICC, and then the root According to the hash value of the preset public key of the eUICC, the binding configuration file package of the hash value of the same preset public key stored in the corresponding security channel data block is obtained, and the specific process is shown in FIG. 8 and related text description.

FIG. 4 is a schematic diagram of a batch downloading method of a profile profile according to Embodiment 1 of the present invention. As shown in FIG. 4, the first embodiment of the present invention provides an eUICC to download a binding profile package from a first server and implement installation. The process and principle include step S201 - step S219:

In step S201, the local profile assistant LPA sends a random number acquisition request to the eUICC.

Step S202, the eUICC receives the random number acquisition request, and generates an eUICC random number (eUICC_challenge).

Step S203: The eUICC sends at least the eUICC random number (eUICC_challenge) and the eUICC information set 1 (eUICC_info_1) to the local profile assistant LPA; wherein the eUICC information set 1 (eUICC_info_1) includes the format of the digital certificate supported by the eUICC, and is subsequently verified. The signature algorithm, specification version number, etc. supported in the process.

Step S204, the local profile assistant LPA establishes a second https connection with the first server SM-SR+ to perform encryption and integrity protection on the subsequent interaction signaling; the local profile assistant LPA connects at least the eUICC random number through the second https connection ( eUICC_challenge), the eUICC information set 1 (eUICC_info_1), and the first server domain name (SM-SR+addr) are sent to the first server SM-SR+; it should be noted that the local configuration file assistant LPA has previously learned the first server domain name (SM) -SR+addr), for example, when the first server domain name is preset in the LPA (when the eUICC terminal is shipped), or when the first server domain name is preset in the eUICC terminal for the LPA to access the first server SM-SR+.

In step S205, the first server SM-SR+ verifies the first server domain name (SM-SR+addr) and eUICC information set 1 (eUICC_info_1) sent by the local profile assistant LPA, and after the verification succeeds, generates a second interaction identifier ( TransactionID_2) and the first server digital signature, here referred to as the first server second digital signature (SR_sign2), the first server second random number (SR_challenge_2), if any of the above verification fails, the error message prompts and ends Fuck The first server second random number (SR_challenge_2) is generated by the first server SM-SR+; the first server second digital signature (SR_sign2) is determined by the first server SM-SR+ according to at least the eUICC random number (eUICC_challenge), A server second random number (SR_challenge_2), a second interaction identifier (TransactionID_2), and a first server domain name (SM-SR+addr) are generated.

Step S206, the first server SM-SR+ at least the second interaction identifier (TransactionID_2), the first server second random number (SR_challenge_2), the first server second digital signature (SR_sign2), the first server digital certificate (CERT.SR) .ECDSA), Curve To Be Used (here referred to as the key parameter reference value selected by the first server) is sent to the local profile assistant LPA.

Step S207, the local profile assistant LPA sets a second interaction identifier (TransactionID_2), a first server second random number (SR_challenge_2), a first server second digital signature (SR_sign2), and a first server digital certificate (CERT.SR.ECDSA). ), elliptic curve type is forwarded to eUICC.

Step S208, the eUICC verifies the first server digital certificate (CERT.SR.ECDSA) and the first server second digital signature (SR_sign2). If the verification succeeds, the eUICC authentication succeeds, and the eUICC digital signature is generated, which is referred to herein. It is an eUICC first digital signature (eUICCi_Sign1), and the eUICC first digital signature (eUICCi_Sign1) is based at least on the second interaction identifier (TransactionID_2), the first server second random number (SR_challenge_2), and the first server domain name (SM-SR+) Addr) and eUICC information set 2 (eUICC_info_2) are generated.

Step S209, the eUICC at least the second interaction identifier (TransactionID_2), the first server domain name (SM-SR+addr), the terminal information (Device_info), the eUICC information set 2 (eUICC_info_2), the eUICC first digital signature (eUICCi_Sign1), eUICC The digital certificate (CERT_EUICC_ECDSA) and the eUICC manufacturer digital certificate (CERT_EUM_ECDSA) are sent to the local profile assistant LPA.

Step S210: The local profile assistant LPA sets at least a second interaction identifier (TransactionID_2), a first server domain name (SM-SR+addr), terminal information (Device_info), The eUICC information set 2 (eUICC_info_2), the eUICC first digital signature (eUICCi_Sign1), the eUICC digital certificate (CERT_EUICC_ECDSA), and the eUICC manufacturer digital certificate (CERT_EUM_ECDSA) are sent to the first server.

Step S211, the first server SM-SR+ verifies the eUICC manufacturer digital certificate (CERT_EUM_ECDSA), the eUICC digital certificate (CERT_EUICC_ECDSA), and the eUICC first digital signature (eUICCi_Sign1). If the verification succeeds, the eUICC authentication succeeds, and the verification is performed. Whether the EID of the eUICC identity EID included in the eUICC digital certificate is the same as the EID of the eUICC, and if so, the hash value of the preset public key of the eUICC corresponding to the eUICC identity EID is obtained, and then the preset of the eUICC is utilized. The hash value of the key determines the binding configuration file package corresponding to the eUICC (see Figure 8 and related text description for the determination process). If any of the above verification fails, the error message prompts and the operation ends.

Step S212, the first server SM-SR+ sends at least the binding configuration file package corresponding to the eUICC to the local configuration file assistant LPA; wherein the binding configuration file package includes at least the one-time public key of the subscription management data preparation server (otPK.DP) .ECKA), the contract management data preparation server digital certificate public key (PK.DP.ECDSA), the contract management data preparation server second digital signature (DP_sign2), and the hash value of the eUICC preset public key.

Step S213, the local configuration file assistant LPA sends the different data blocks of the binding configuration file package to the eUICC by repeatedly initiating the load binding configuration file package function ("ES10b.LoadBoundProfilePackage" function), including initializing the secure channel data block/initialization security. Channel data block function, configuration ISDP data block/configuration ISDP function, storage metadata data block/storage metadata function, and configuration file protection key data block/profile protection key function and profile element.

Step S214, after receiving the initial secure channel data block, the eUICC prepares the subscription management data in the secure channel data block by using the digital certificate public key (PK.DPpb.ECDSA) of the subscription management data preparation server in the secure channel data block. The server second digital signature (DP_sign2) performs verification (ie, integrity verification is performed on the subscription management data preparation server one-time public key (otPK.DP.ECKA) protected in the second digital signature (DP_sign2) of the subscription management data preparation server), If If the verification is successful, the first session key is generated according to the preset private key (SK_eUICCi_ECKA) of the corresponding eUICC and the one-time public key (otPK.DP.ECKA) of the subscription management data preparation server, and is tied by the first session key. The encrypted data block in the configuration file package is decrypted to complete the installation process.

In step S215, the eUICC sends a profile installation result (Profile Installation Result) to the local profile assistant LPA.

In step S216, the local profile assistant LPA forwards the configuration file installation result to the first server SM-SR+.

Step S217, after receiving the configuration file installation result, the first server SM-SR+ sends an acknowledgement message to the local profile assistant LPA.

In step S218, the local profile assistant LPA sends a list removal notification command (RemoveNotificationFromList) to the eUICC.

In step 219, the eUICC receives the list removal notification command (RemoveNotificationFromList) and deletes the configuration file installation result.

Embodiment 2

The second embodiment of the present invention provides a method for batch obtaining and downloading a profile profile, which mainly includes a first phase and a second phase of two work phases. The first phase is a batch acquisition of a profile profile, and the second phase is a configuration file. Batch download of profiles.

FIG. 5 is a schematic diagram of a method for obtaining a profile profile in batches according to Embodiment 2 of the present invention. As shown in FIG. 5, the second embodiment of the present invention provides a first server SM-DP+ slave subscription management data preparation server SM-SR+ batch. The working process and principle of acquiring multiple binding configuration file packages includes step S101'-step S108'.

Step S101', the first server SM-SR+ initiates and establishes a first https connection to the subscription management data preparation server SM-DP+ to perform encryption and integrity protection on the subsequent interaction signaling; the first server SM-SR+ passes the first https Connection to the contract management data preparation server SM-DP+ transmission At least the information including the contract management data preparation server domain name (SM-DP+addr), the first server first random number (SR_challenge_1), and the eUICC information set 1 (eUICC_info_1).

Step S102', the subscription management data preparation server SM-DP+ verifies the subscription management data preparation server domain name (SM-DP+addr) sent by the first server SM-SR+ (verifies whether the domain name corresponds to the subscription management data preparation server SM-DP+) And verifying the content in the eUICC information set 1 (eUICC_info_1), if the verification is successful, generating a first interaction identifier (TransactionID_1), a contract management data preparation server random number (DP_challenge), and a contract management data preparation server first digital signature (DP_sign1) The contract management data preparation server first digital signature (DP_sign1) is a contract management data preparation server SM-DP+ at least according to the first server first random number (SR_challenge_1), the contract management data preparation server random number (DP_challenge), signing Management data preparation server domain name (SM-DP+addr) and first interaction identifier (TransactionID_1) generation; if the subscription management data preparation server domain name (SM-DP+addr) and eUICC information set 1 (eUICC_info_1) fail to be verified, then A server SM-SR+ sends an error message and ends the operation.

Step S103', the subscription management data preparation server SM-DP+ at least the first interaction identifier (TransactionID_1), the contract management data preparation server random number (DP_challenge), the contract management data preparation server first digital signature (DP_sign1), and the contract management data preparation The server domain name (SM-DP+addr), the contract management data preparation server digital certificate (CERT.DP.ECDSA), and the elliptic curve type is sent to the first server SM-SR+ through the first https connection.

Step S104', the first server SM-SR+ prepares the server digital certificate (CERT.DP.ECDSA) and the contract management data preparation server first digital signature for the received contract management data. (DP_sign1) performs verification. If the verification is successful, the authentication of the subscription data preparation server SM-DP is successful, and the first digital signature of the first server (SR_sign1) is generated; wherein the first digital signature of the first server (SR_sign1) is the first The server SM-SR+ is based on at least a plurality of preset public keys (PK.eUICC1.ECKA...PK.eUICCn.ECKA), matching information (matchingID or Activation Code Token), first interaction identifier (TransactionID_1), and subscription of a plurality of eUICCs. The management data preparation server random number (DP_challenge), the subscription management data preparation server domain name (SM-DP+addr), the terminal information (Device_info), and the eUICC information set 2 (eUICC_info_2) are generated; wherein the terminal information (Device_info) includes at least the terminal Capabilities, such as supported network access methods (2G/3G/4G), etc., eUICC information set 2 (eUICC_info_2) includes at least eUICC capability information, such as supported specification versions, storage capabilities, and the like.

Step S105', the first server SM-SR+ at least the first interaction identifier (TransactionID_1), the plurality of preset public keys of the plurality of eUICCs, the subscription management data preparation server domain name (SM-DP+addr), and the matching information (matchingID or Activation Code Token), terminal information (Device_info), eUICC information set 2 (eUICC_info_2), first server first digital signature (SR_sign1), first server digital certificate (CERT.SR.ECDSA) are sent to the contract via the first https connection Manage the data preparation server SM-DP+.

As apparent from the above, in the second embodiment, steps S101' to S105' are the same as steps S101 to S105 in the first embodiment.

Step S106', the contract management data preparation server SM-DP+ verifies the first server digital certificate (CERT.SR.ECDSA) and the first server first digital signature (SR_sign1), if After the verification is passed, the first server SM-SR+ is successfully authenticated, and the eligibility verification is performed according to the eUICC information set 2 (eUICC_info_2) and the terminal information (Device_info). If any of the above verification fails, the first server SM-DP+ Send the error message prompt and end the operation; if the verification is successful, check whether the subscription management data preparation server SM-DP+ has a waiting configuration file download command corresponding to the matching information (matchingID or Activation Code Token), and if so, obtain and match the information. Corresponding multiple profiles (unprotected profile packages or protected profile packages).

The subscription management data preparation server SM-DP+ generates a plurality of session keys, where the session key is referred to as a second session key, and the generated second session key is a generated random number, the plurality of The second session key is respectively associated with the plurality of eUICCs, and the plurality of second session keys are separately encrypted by using the plurality of preset public keys of the plurality of eUICCs to obtain a plurality of encrypted second session keys (encrypted session keys).

The contract management data preparation server SM-DP+ generates a digital signature for each eUICC based on at least the encrypted second session key (encrypted session keys) and the preset public key of the eUICC, which is referred to herein as a contract management data preparation server. Three digital signatures (DP_sign3). Therefore, for a plurality of eUICCs, the contract management data preparation server SM-DP generates a corresponding plurality of DP_sign3s.

Performing a hash operation on the plurality of preset public keys of the plurality of eUICCs to generate hash values of the plurality of preset public keys respectively corresponding to the plurality of eUICCs.

The subscription management data preparation server SM-DP+ generates a binding configuration file package according to at least a second session key corresponding to each eUICC and a corresponding profile profile (eg, a protected profile). Therefore, for multiple eUICCs, multiple corresponding binding profile packages are generated. Each binding configuration file package is composed of consecutive TLV (Tag Length Value) commands, including the following TLV commands: initializing the secure channel data block ('InitialiseSecureChannel' block), configuring the ISDP data block ('ConfigureISDP'block), and storing the element Data block ('StoreMetadata' block) and profile protection key data block ('Profile Protection Keys' block) and protected profile package TLV command (SCP03t payload TLVs of the Protected profile Package), wherein the data block configures the ISDP data block, the storage metadata data block, and the configuration file protection key data block (optionally, when the subscription management data preparation server SM-DP+ generates the configuration file key) passes the second session Session keys for encryption and integrity protection.

The contract management data preparation server SM-DP+ stores the hash values of the plurality of preset public keys of the plurality of eUICCs in the Initialise Secure Channel data block of the plurality of binding configuration files, respectively; The channel data block further includes at least a subscription management data preparation server digital certificate public key (PK.DPpd.ECDSA), a contract management data preparation server third digital signature (DP_sign3), and an encrypted second session key. The specific generation process of the binding configuration file package is shown in Figure 7 and related text descriptions.

In step S107', the contract management data preparation server SM-DP+ transmits a plurality of binding configuration file packages to the first server SM-SR+.

Step S108', the first server SM-SR+ stores the acquired plurality of binding configuration file packages in the first database. It should be noted that, since the hash values of the multiple preset public keys of the multiple eUICCs in the first database are correspondingly stored and the multiple eUICC identity identifiers EID, the first server SM-SR+ can identify the EID according to the eUICC identity. Obtaining a hash value of the preset public key of the corresponding eUICC, and acquiring a binding configuration of the hash value of the same preset public key stored in the corresponding initialized secure channel data block according to the hash value of the preset public key of the eUICC The file package, the specific process is shown in Figure 8 and related text description.

As apparent from the above, in the second embodiment, steps S107' and S108' are the same as steps S107 and S108 in the first embodiment.

FIG. 6 is a schematic diagram of a batch downloading method of a configuration file profile according to Embodiment 2 of the present invention. As shown in FIG. 6 , the second embodiment of the present invention provides an eUICC downloading a binding configuration file package from a first server and implementing the installation work. The process and principle include step S201'-step S219':

In step S201', the local profile assistant LPA sends a random number acquisition request to the eUICC.

Step S202', the eUICC receives the random number acquisition request, and generates an eUICC random number. (eUICC_challenge).

Step S203', the eUICC sends at least the eUICC random number (eUICC_challenge) and the eUICC information set 1 (eUICC_info_1) to the local profile assistant LPA; wherein the eUICC information set 1 (eUICC_info_1) includes the format of the digital certificate supported by the eUICC, The signature algorithm, specification version number, etc. supported during the verification process.

Step S204', the local profile assistant LPA establishes a second https connection with the first server SM-SR+ to perform encryption and integrity protection on the subsequent interaction signaling; the local profile assistant LPA connects at least the eUICC random number through the second https connection. (eUICC_challenge), eUICC information set 1 (eUICC_info_1), and first server domain name (SM-SR+addr) are sent to the first server SM-SR+; it should be noted that the local profile assistant LPA has previously learned the first server domain name ( SM-SR+addr), for example, when the first server domain name is preset in the LPA (when the eUICC terminal is shipped), or when the first server domain name is preset in the eUICC terminal for the LPA to access the first server SM-SR+.

Step S205 ′, the first server SM-SR+ verifies the first server domain name (SM-SR+addr) and eUICC information set 1 (eUICC_info_1) sent by the local profile assistant LPA, and after the verification succeeds, generates a second interaction identifier. (TransactionID_2), the first server second digital signature (SR_sign2), the first server second random number (SR_challenge_2), if any of the above verification fails, replying with an error message prompting and ending the operation; wherein, the first server second random number (SR_challenge_2) is generated by the first server SM-SR+; the first server second digital signature (SR_sign2) is determined by the first server SM-SR+ according to at least the eUICC random number (eUICC_challenge), the first server second random number (SR_challenge_2), The second interaction identifier (TransactionID_2) and the first server domain name (SM-SR+addr) are generated.

Step S206', the first server SM-SR+ at least the second interaction identifier (TransactionID_2), the first server second random number (SR_challenge_2), the first server second digital signature (SR_sign2), the first server digital certificate (CERT. SR.ECDSA), elliptic curve type is sent to the local profile assistant LPA.

Step S207', the local profile assistant LPA sets a second interaction identifier (TransactionID_2), a first server second random number (SR_challenge_2), a first server second digital signature (SR_sign2), and a first server digital certificate (CERT.SR. ECDSA), elliptic curve type is forwarded to eUICC.

Step S208', the eUICC verifies the first server digital certificate (CERT.SR.ECDSA) and the first server second digital signature (SR_sign2). If the verification is successful, the eUICC authentication succeeds, and the eUICC first digital signature is generated ( eUICCi_Sign1), the eUICC first digital signature (eUICCi_Sign1) is based at least on the second interaction identifier (TransactionID_2), the first server second random number (SR_challenge_2), the first server domain name (SM-SR+addr), and the eUICC information set 2 ( eUICC_info_2) is generated.

Step S209', the eUICC at least the second interaction identifier (TransactionID_2), the first server domain name (SM-SR+addr), the terminal information (Device_info), the eUICC information set 2 (eUICC_info_2), the eUICC first digital signature (eUICCi_Sign1), The eUICC digital certificate (CERT_EUICC_ECDSA) and the eUICC manufacturer digital certificate (CERT_EUM_ECDSA) are sent to the local profile assistant LPA.

Step S210', the local profile assistant LPA at least the second interaction identifier (TransactionID_2), the first server domain name (SM-SR+addr), the terminal information (Device_info), the eUICC information set 2 (eUICC_info_2), the eUICC first digital signature (eUICCi_Sign1), eUICC digital certificate (CERT_EUICC_ECDSA), eUICC manufacturer digital certificate (CERT_EUM_ECDSA) are sent to the first server SM-SR+.

Step S211', the first server SM-SR+ verifies the eUICC manufacturer digital certificate (CERT_EUM_ECDSA), the eUICC digital certificate (CERT_EUICC_ECDSA), and the eUICC first digital signature (eUICCi_Sign1). If the verification is successful, the eUICC authentication succeeds, and the verification is successful. Whether the EID of the eUICC identity EID included in the eUICC digital certificate (CERT_EUICC_ECDSA) is the same as the EID of the eUICC, and if so, the hash value of the preset public key of the eUICC corresponding to the eUICC identity EID is obtained. The binding configuration file package corresponding to the eUICC is determined by using the hash value of the preset public key of the eUICC (the determination process is detailed in FIG. 8 and related text description), and if any of the above verification fails, the error information prompts and the operation ends.

Step S212', the first server SM-SR+ sends at least the binding configuration file package corresponding to the eUICC to the local configuration file assistant LPA; wherein the binding configuration file package includes at least the subscription management data preparation server digital certificate public key (PK. DP.ECDSA), encrypted second session key (encrypted session keys), subscription management data preparation server third digital signature (DP_sign3), hash value of the eUICC's preset public key.

Step S213', the local configuration file assistant LPA sends the different data blocks of the binding configuration file package to the eUICC by repeatedly initiating the load binding configuration file package function ("ES10b.LoadBoundProfilePackage" function), including initializing the secure channel data block/initialization. Secure channel data block function, configure ISDP data block/configuration ISDP function, store metadata data block/storage metadata function, and configuration file protection key data block/profile protection key function and profile element.

As apparent from the above, in the second embodiment, the steps S201' to S213' are the same as the steps S201 to S213 in the first embodiment.

Step S214', after receiving the initialization secure channel data block, the eUICC uses the digital certificate public key (PK.DPpb.ECDSA) of the subscription management data preparation server in the secure channel data block to sign the management data in the secure channel data block. Preparing a server third digital signature (DP_sign3) for verification (ie, performing integrity verification on the encrypted second session key corresponding to the eUICC preset public key (PK_eUICCi_ECKA) in the third digital signature (DP_sign3) of the subscription management data preparation server) If the verification is successful, decrypt the corresponding encrypted second session key according to the preset private key (SK_eUICCi_ECKA) of the corresponding eUICC to obtain the second session key, and then use the second session key pair to bind the configuration file package. The encrypted data block is decrypted to complete the installation process; wherein the preset private key (SK_eUICCi_ECKA) of the eUICC corresponds to the preset public key (PK_eUICCi_ECKA) of the eUICC, and the preset private key (SK_eUICCi_ECKA) and the preset public key ( PK_eUICCi_ECKA) is a pair of preset public and private key pairs, using the preset public key After (PK_eUICCi_ECKA) is encrypted, it needs to be decrypted with the preset private key (SK_eUICCi_ECKA).

In step S215', the eUICC sends a profile installation result (Profile Installation Result) to the local profile assistant LPA.

In step S216', the local profile assistant LPA forwards the configuration file installation result to the first server SM-SR+.

Step S217', after receiving the configuration file installation result, the first server SM-SR+ sends an acknowledgement message to the local profile assistant LPA.

In step S218', the local profile assistant LPA sends a list removal notification command (RemoveNotificationFromList) to the eUICC.

In step 219', the eUICC receives the list removal notification command (RemoveNotificationFromList) and deletes the configuration file installation result. As apparent from the above, in the second embodiment, steps S215' to S219' are the same as steps S215 to S219 in the first embodiment.

FIG. 7 is a schematic diagram of a process of generating a binding configuration file package according to an embodiment of the present invention. As shown in FIG. 7 , the process of generating a plurality of binding configuration file packages by the subscription management data preparation server SM-DP+ includes steps S71-S73. :

Step S71: Before the connection with the first server SM-SR+ is established, the subscription management data preparation server SM-DP+ generates multiple corresponding eUICCs according to the information provided by the operator contract (the service provider subscription information of the first server is deployed). Unprotected profile package, each unprotected profile package consists of multiple data blocks (PETLV1, PETLV2...PETLVn).

Step S72, the subscription management data preparation server SM-DP+ adopts multiple session keys (first session key or second session key) or multiple profile protection keys as corresponding multiple unprotected The configuration file package is separately encrypted to generate multiple protected configuration file packages. (protected profile package), the generated protected configuration file package consists of multiple encrypted data blocks (Segment1, Segment2...Segmentn).

Optionally, if the subscription management data preparation server SM-DP+ has generated multiple protected configuration file packages before the subscription management data preparation server SM-DP+ establishes a connection with the first server SM-SR+, wait for the configuration file download command and A plurality of protected configuration file packages have a corresponding relationship; if the subscription management data preparation server SM-DP+ establishes a connection with the first server SM-SR+, the subscription management data preparation server SM-DP+ does not generate a plurality of protected configuration file packages. Wait for the configuration file download command to correspond to multiple unprotected configuration file packages. Therefore, the subscription management data preparation server SM-DP+ can acquire a plurality of protected configuration file packages or a plurality of unprotected configuration file packages by waiting for the configuration file download command.

Step S73, after receiving the matching information sent by the first server SM-SR+, the subscription management data preparation server SM-DP+ determines, according to the matching information, whether there is a waiting configuration file download command corresponding to the matching information, and if so, acquires Wait for multiple profiles (multiple protected configuration files or multiple unprotected configuration files) corresponding to the configuration file download command.

The contract management data preparation server SM-DP+ generates an initial security channel data block ('Initialise Secure Channel' block, including a plaintext TLV command, such as a TLV command for key agreement related content), and an ISDP data block ('Configure ISDP'block, Contains TLV commands for ISDP generation and configuration), storage metadata blocks ('Store Metadata' block, TLV commands containing metadata for configuration files), and profile protection key blocks ('Profile Protection keys' block, including configuration) a TLV command for protecting a key; wherein the initializing the secure channel data block includes at least a subscription management data preparation server second digital signature (DP-sign2) or a contract management data preparation server third digital signature (DP-sign3), subscription management The public key (PK.DPpb.ECDSA) of the data preparation server digital certificate, the one-time public key or the encrypted second session key of the contract management data preparation server, and the subscription management data preparation server SM-DP+ according to the preset of the corresponding eUICC The hash value of the preset public key of the eUICC generated by the public key.

Configure ISDP data blocks, store metadata data blocks, and configure file protection key modules ( Optionally, when the subscription management data preparation server SM-DP+ generates the configuration file key, the corresponding session key (the first session key or the second session key) is used for encryption.

The contract management data preparation server SM-DP+ places the above-mentioned secure initialization channel data block, configuration ISDP data block, storage metadata data block, and configuration file protection key data block in the above-mentioned protected matching file package (protected configuration file package SCP03t payload) Before TLV), the binding configuration package is composed. After receiving the binding configuration file package, the local configuration file assistant LPA splits the binding configuration file package into different data blocks (as shown in Figure 7 for the split configuration file package, the specific split mode is as shown in the figure). The data blocks are sent to the eUICC in sequence through the application protocol data unit command (APDU command).

In one example, the Segmented Bound Profile Package (SBPP) is generated by the Local Profile Assistant LPA, and the Local Profile Assistant LPA passes each split segment through the APDU (Application Protocol). The data unit, English: ApplicationProtocolDataUnit) command is sent to eUICC, where each split segment is up to 255 bytes (bytes).

Since the initialization security channel is not encrypted, and the content thereof is plaintext, the first server SM-SR+ can distinguish the binding configuration file package according to the hash value of the preset public key of the corresponding eUICC in the initialization security channel. The specific differentiation process is shown in Figure 8 and related text descriptions.

FIG. 8 is a schematic diagram of a process for distinguishing multiple binding configuration file packages according to an embodiment of the present invention. As shown in FIG. 8, the specific process and principle of the first server SM-SR+ distinguishing multiple binding configuration file packages in the first database is :

In the first database, the hash value of the preset public key of the plurality of eUICCs is correspondingly stored with the plurality of eUICC identity identifiers EID (as shown in part 01 in FIG. 8), and the first server SM-SR+ can be based on the eUICC The hash value of the preset public key or the eUICC identity EID acquires another information, that is, the first server SM-SR+ can obtain the eUICC identity EID according to the hash value of the preset public key of the eUICC, the first server The SM-SR+ can also obtain the hash value of the preset public key of the eUICC according to the eUICC identity EID.

Step S81: After completing the identity verification of the eUICC, the first server SM-SR+ obtains the eUICC identity identifier EID from the eUICC digital certificate received by the local profile assistant LPA, and checks whether the eUICC identity identifier is stored in the first database. EID, if yes, execute step S82, otherwise send an error message to the local profile assistant LPA and end the operation.

Step S82: Search for a hash value of the preset public key of the eUICC corresponding to the eUICC identity identifier EID in the first database according to the eUICC identity identifier EID.

Step S83, searching for a corresponding initial security channel data block of the plurality of binding configuration file packets stored in the first database according to the hash value of the preset public key of the eUICC, and if the security channel data of the binding configuration file package is initialized The block stores the hash value of the preset public key of the same eUICC, and determines that the binding configuration file package is the binding configuration file package corresponding to the eUICC, and sends the binding configuration file corresponding to the eUICC to the corresponding eUICC. Local Profile Assistant LPA.

For example, an eUICC terminal needs to obtain a binding configuration file package corresponding to the eUICC on the eUICC terminal from the first database of the first server SM-SR+, and the eUICC sends the LSI to the first server SM-SR+ through the LPA of the eUICC terminal. a plurality of preset public keys, matching information, and related information of the plurality of eUICCs, wherein the related information includes at least a digital signature generated by the eUICC (ie, an eUICC first digital signature), an eUICC digital certificate, and an eUICC manufacturer digital certificate. After the server SM-SR+ verifies the digital signature generated by the eUICC manufacturer digital certificate, the eUICC digital certificate, and the eUICC, the eUICC identity EID is obtained from the eUICC digital certificate; the first server SM-SR+ searches the first database, and determines After the eUICC identity EID (for example, EID2) in the first database is the same as the eUICC identity identifier EID obtained from the eUICC digital certificate, the eUICC corresponding to the eUICC is searched in the first database according to the eUICC identity identifier EID2. The hash value of the key 2, because the hash value 2 of the preset public key of the corresponding eUICC is stored in the initialization security channel data block in the binding configuration file package 2, Determining the binding profile of the package 2 eUICC binding configuration corresponding to that package.

It should be noted that the foregoing describes a method for acquiring and downloading a profile profile in batches according to an embodiment of the present invention. Those skilled in the art are aware of the method embodiments and the various steps, Can be implemented in hardware. Those skilled in the art can construct corresponding modules and deformations according to the above method embodiments, and these modules and deformations are attributed to the protection scope of the present invention.

FIG. 9 is a schematic diagram of a subscription management data preparation server according to an embodiment of the present invention. The subscription management data preparation server 900 includes at least a receiver 901, a processor 902, and a transmitter 903.

Those skilled in the art will appreciate that Figure 9 only shows a simplified design of the structure of the contract management data preparation server. The contract management data preparation server structure shown in FIG. 9 does not constitute a limitation on the contract management data preparation server, and the contract management data preparation server may include more or less components than the illustration 9, for example, a contract management data preparation server. A memory for storing instructions corresponding to the communication algorithm may also be included. Further, to save chip area, the receiver 901 and the transmitter 903 may also be integrated to form a transceiver.

In FIG. 9, the receiver 901 is configured to receive matching information of multiple embedded universal integrated circuit cards eUICC sent by the first server.

The processor 902 is configured to check whether there is a waiting configuration file download command corresponding to the matching information, and if there is the waiting for matching file download command, acquire a plurality of configuration file profiles corresponding to the waiting configuration file download command; a plurality of session keys respectively corresponding to the plurality of eUICCs; generating a plurality of binding profile packages according to the plurality of session keys and the plurality of profile profiles.

The transmitter 903 is configured to send the multiple binding configuration file package to the first server, so that the eUICC downloads the binding configuration file package from the first server.

The receiver 901 is further configured to receive a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC sent by the first server, where the plurality of eUICCs respectively correspond to the plurality of preset public keys.

In an example, the processor 902 is further configured to generate a one-time public-private key pair, and generate multiple session keys corresponding to the multiple eUICCs according to the multiple preset public keys of the multiple eUICCs and the one-time private key. .

Further, the binding configuration file package includes at least the one-time public key and the subscription management data. Preparing a public key of the digital certificate of the server, a second digital signature of the subscription management data preparation server, a hash value of the preset public key; and the processor 902 is further configured to select the at least the one-time public key and the preset The public key generates a second digital signature of the subscription management data preparation server, and is used to hash the preset public key to obtain a hash value of the preset public key.

In another example, the processor 902 is further configured to separately encrypt the plurality of session keys by using a plurality of preset public keys of the plurality of eUICCs to generate a plurality of encrypted session keys, and at least according to the multiple encryptions. The session key generates the multiple binding profile packages.

Further, the binding configuration file package includes at least a hash value of the preset public key, a public key included in the digital certificate of the subscription management data preparation server, the encrypted session key, and the subscription management data preparation server. The third digital signature is generated by the processor 902, and the third digital signature of the subscription management data preparation server is generated according to at least the plurality of encrypted session keys and the preset public key, and is used to perform the preset public key. The hash operation generates a hash value of the preset public key.

In one example, the processor 902 is further configured to verify a digital signature generated by the first server according to at least a plurality of preset public keys of the plurality of eUICCs and the matching information.

FIG. 10 is a first server according to an embodiment of the present invention.

The first server may be a server deployed by a third-party service provider (ie, a subscription management-secure routing server, English: Subscription Manager-Secure Routing, referred to as SM-SR+), and the third-party service provider includes but is not limited to enterprise users and group users. The first server may also be part of the subscription management data preparation server SM-DP+; the first server may also be a Subscription Manager-Discovery Server (SM-DS).

The first server 1000 includes at least a transmitter 1001, a receiver 1002, and a processor 1003.

Those skilled in the art will appreciate that Figure 10 only shows a simplified design of the structure of the first server. The first server structure shown in FIG. 10 does not constitute a limitation to the first server, and the first server may include more or less components than the illustration 10, for example, the first server may also include The memory storing the corresponding instructions of the communication algorithm, in addition, in order to save the chip area, the receiver 1002 and the transmitter 1001 can also be integrated to form a transceiver.

In FIG. 10, the transmitter 1001 is configured to send a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information corresponding to the plurality of eUICCs, so that the subscription management data preparation server generates the corresponding information corresponding to the matching information. a plurality of binding configuration file packages; wherein the plurality of eUICCs respectively correspond to the plurality of preset public keys.

The receiver 1002 is configured to receive an eUICC digital certificate from the eUICC.

The processor 1003 is configured to check whether the eUICC identity EID in the eUICC digital certificate exists in the server, and in the presence of the eUICC identity EID, search for a hash value of the preset public key corresponding to the eUICC identity identifier EID, And determining, according to the hash value of the preset public key, a binding configuration file package corresponding to the eUICC.

The transmitter 1001 is configured to send the binding configuration file package to a local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.

In an example, the processor 1003 is further configured to obtain a plurality of preset public private key pairs of the plurality of eUICCs and a plurality of the eUICC identity identifiers EID of the plurality of eUICCs, and obtain multiple presets of the multiple eUICCs. The hash of the public key.

In an example, the processor 1003 is further configured to directly obtain a hash value of the plurality of preset public keys of the plurality of eUICCs, or calculate the plurality of eUICCs according to the plurality of preset public keys of the plurality of eUICCs. The hash value of multiple preset public keys.

In an example, the processor 1003 is further configured to generate a first server first digital signature according to at least the preset public key of the multiple eUICCs and the matching information; the transmitter 1001 is further configured to prepare the subscription management data. The server sends the first digital signature of the first server, so that the subscription management data preparation server verifies the first digital signature of the first server.

In one example, the processor 1003 is further configured to generate the first server first digital signature according to at least the random number of the first server.

The transmitter 1001 is further configured to send the first digital signature of the first server.

FIG. 11 is a terminal provided by an embodiment of the present invention, such as an eUICC terminal, and the eUICC terminal includes an embedded universal integrated circuit card eUICC and a local configuration file assistant LPA.

In FIG. 11, the terminal 1100 includes at least a transmitter 1101, a receiver 1102, and a processor 1103.

Those skilled in the art will appreciate that Figure 11 only shows a simplified design of the structure of the terminal. The terminal structure shown in FIG. 11 does not constitute a limitation to the terminal, and the terminal may include more or less components than the illustration 11, for example, the terminal may further include a memory for storing instructions corresponding to the communication algorithm, In addition, to save chip area, the receiver 1102 and the transmitter 1101 can also be integrated to form a transceiver.

In FIG. 11, a transmitter 1101 is configured to send an embedded universal integrated circuit card eUICC digital certificate to a first server, so that the first server determines a binding configuration file package corresponding to an eUICC identity identifier EID included in the eUICC digital certificate. .

The receiver 1102 is configured to receive the binding configuration file package from the first server.

The processor 1103 is configured to repeatedly initiate a load binding configuration file package function by using the binding configuration file package.

The transmitter 1101 is configured to send the binding configuration file package to the embedded universal integrated circuit card eUICC in the terminal.

In an example, the processor 1103 is further configured to prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and prepare the server for the subscription management data included in the initial security channel function. The digital signature is verified. In the case of verification, the session key is generated according to the private key corresponding to the preset public key and the one-time public key of the subscription data management server included in the initialization security channel function.

In another example, the processor 1103 is further configured to prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and prepare the subscription management data included in the initial security channel function. The server digital signature is verified, and in the case of verification, the encrypted session secret included in the initialization secure channel function is utilized by the preset public key. The key is decrypted to get the session key.

The steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented in hardware, a software module executed by a processor, or a combination of both. The software module can be placed in random access memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field. Any other form of storage medium known.

The specific embodiments of the present invention have been described in detail with reference to the preferred embodiments of the present invention. All modifications, equivalent substitutions, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

A method for batch obtaining and downloading a configuration file, wherein the method includes:

The subscription management data preparation server receives the matching information of the plurality of embedded universal integrated circuit cards eUICC sent by the first server, and checks whether there is a waiting configuration file download command corresponding to the matching information;

The contract management data preparation server acquires a plurality of configuration file profiles corresponding to the waiting configuration file download command in the case that the waiting for matching file download command exists;

The subscription management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs;

The subscription management data preparation server generates at least a plurality of binding configuration file packages according to the plurality of session keys and the plurality of configuration file profiles;

The subscription management data preparation server sends the plurality of binding configuration file packages to the first server, so that the eUICC downloads the binding configuration file package from the first server.
The method according to claim 1, wherein the subscription management data preparation server receives the matching information of the plurality of embedded universal integrated circuit cards eUICC sent by the first server, and further includes:

The subscription management data preparation server receives a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC sent by the first server;

The plurality of eUICCs respectively correspond to the plurality of preset public keys.
The method according to claim 2, wherein the subscription management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs, including:

The subscription management data preparation server generates a one-time public-private key pair;

The contract management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs according to the plurality of preset public keys of the plurality of eUICCs and the one-time private key.
The method according to claim 3, wherein the binding profile package comprises at least the one-time public key, a public key included in a digital certificate of the subscription management data preparation server, a second digital signature of the subscription management data preparation server, and a hash value of the preset public key;

And the second digital signature of the subscription management data preparation server is that the subscription management data preparation server is generated according to at least the one-time public key and the preset public key;

The hash value of the preset public key is generated by the contract management data preparation server hashing the preset public key.
The method according to claim 2, after the contract management data preparation server generates a plurality of session keys respectively corresponding to the plurality of eUICCs, including:

Separating the plurality of session keys by using a plurality of preset public keys of the plurality of eUICCs to generate a plurality of encrypted session keys, and generating the plurality of the at least one of the plurality of encrypted session keys Bind the configuration package.
The method according to claim 5, wherein the binding profile package includes at least a hash value of the preset public key, a public key included in a digital certificate of the subscription management data preparation server, and the An encrypted session key, a third digital signature of the subscription management data preparation server;

And the third digital signature of the subscription management data preparation server is that the subscription management data preparation server is generated according to at least a plurality of encrypted session keys and the preset public key;

The hash value of the preset public key is generated by the contract management data preparation server hashing the preset public key.
The method according to any one of claims 2 to 6, further comprising: before the checking whether there is a waiting configuration file download command corresponding to the matching information, further comprising:

The subscription management data preparation server verifies the digital signature generated by the first server according to at least a plurality of preset public keys of the plurality of eUICCs and the matching information.
A method for batch obtaining and downloading a configuration file, wherein the method includes:

The first server sends a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information corresponding to the plurality of eUICCs to the subscription management data preparation server, so that the subscription management data preparation server generates the matching Multiple binding configuration file packages corresponding to the information;

The plurality of eUICCs respectively correspond to the plurality of preset public keys;

The first server receives an eUICC digital certificate from the eUICC, and checks whether the eUICC identity identifier EID in the eUICC digital certificate exists in the first server;

In the case that the eUICC identity identifier EID is present, the first server searches for a hash value of the preset public key corresponding to the eUICC identity identifier EID, and further determines a location according to the hash value of the preset public key. The binding configuration file package corresponding to the eUICC is sent, and the binding configuration file package is sent to the local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.
The method according to claim 8, wherein the first server sends a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and the plurality of eUICCs to the subscription management data preparation server. Before matching the information, it also includes:

Determining, by the first server, a plurality of preset public private key pairs of the plurality of eUICCs and a plurality of the eUICC identity identifiers EID of the plurality of eUICCs, and obtaining a plurality of preset public keys of the plurality of eUICCs Hash value

The first server stores the hash values of the plurality of preset public keys of the plurality of eUICCs and the plurality of eUICC identity identifiers EID respectively.
The method according to claim 8 or 9, wherein the obtaining the hash values of the plurality of preset public keys of the plurality of eUICCs comprises:

Directly obtaining the hash values of the plurality of preset public keys of the plurality of eUICCs, or the first server calculating, by using the plurality of preset public keys of the plurality of eUICCs, multiple presets of the plurality of eUICCs Set the hash value of the public key.
The method according to any one of claims 8 to 10, wherein the first server sends a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC to the subscription management data preparation server and corresponding to the Matching information of multiple eUICCs, including:

The first server sends, to the subscription management data preparation server, a first server first digital signature generated according to at least a plurality of preset public keys of the plurality of eUICCs and the matching information, In order for the subscription management data preparation server to verify the first digital signature of the first server.
The method according to any one of claims 8 to 11, wherein before the checking whether the eUICC identity identifier EID in the eUICC digital certificate exists in the first server, the method further includes:

The first server verifies the first digital signature generated by the eUICC according to at least the random number of the first server.
A method for batch obtaining and downloading configuration files, which is characterized in that:

The embedded universal integrated circuit card eUICC terminal sends an eUICC digital certificate to the first server, so that the first server determines a binding configuration file package corresponding to the eUICC identity identifier EID included in the eUICC digital certificate;

The local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and sends the binding configuration file package to the eUICC by repeatedly initiating a load binding configuration file package function. eUICC in the terminal.
The method according to claim 13, wherein the local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and the binding configuration file package is repeated. The function of initiating the load binding configuration file package is sent to the eUICC in the eUICC terminal, and further includes:

The eUICC prepares a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and verifies the digital signature of the subscription management data preparation server included in the initial security channel function, and performs verification. In this case, the session key is generated according to the private key corresponding to the preset public key and the one-time public key of the subscription data management server included in the initialization security channel function.
The method according to claim 13 or 14, wherein the local profile assistant LPA in the eUICC terminal receives the binding configuration file package from the first server, and the binding configuration file package The eUICC is sent to the eUICC in the eUICC terminal by repeatedly initiating the load binding configuration file package function, and further includes:

The eUICC prepares a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, and verifies the digital signature of the subscription management data preparation server included in the initial security channel function, and performs verification. In this case, the encrypted session key included in the initialization secure channel function is decrypted by using the preset public key to obtain a session key.
A contract management data preparation server, comprising:

a receiver, configured to receive, by the first server, matching information of multiple embedded universal integrated circuit cards eUICC;

a processor, configured to check whether there is a waiting configuration file download command corresponding to the matching information; and if there is the waiting for matching file download command, acquiring a plurality of configuration file profiles corresponding to the waiting configuration file downloading command Generating a plurality of session keys respectively corresponding to the plurality of eUICCs; generating at least a plurality of binding profile packages according to the plurality of session keys and the plurality of profile profiles;

And a transmitter, configured to send the multiple binding configuration file package to the first server, so that the eUICC downloads the binding configuration file package from the first server.
The subscription management data preparation server according to claim 16, wherein the receiver is further configured to receive a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC sent by the first server;

The plurality of eUICCs respectively correspond to the plurality of preset public keys.
The contract management data preparation server according to claim 17, wherein the processor is further configured to generate a one-time public-private key pair, according to the plurality of preset public keys of the plurality of eUICCs and the one-time The private key generates a plurality of session keys respectively corresponding to the plurality of eUICCs.
The contract management data preparation server according to claim 18, wherein the binding configuration file package includes at least the one-time public key, a public key included in a digital certificate of the contract management data preparation server, and the Signing a second digital signature of the data preparation server, and a hash value of the preset public key;

And the processor is further configured to generate, according to the one-time public key and the preset public key, a second digital signature of the subscription management data preparation server, and perform a hash operation on the preset public key. Obtaining a hash value of the preset public key.
The subscription management data preparation server according to claim 17, wherein the processor is further configured to separately encrypt the plurality of session keys by using a plurality of preset public keys of the plurality of eUICCs a plurality of encrypted session keys and generating the plurality of binding profile packages based on at least the plurality of encrypted session keys.
The subscription management data preparation server according to claim 20, wherein the binding configuration file package includes at least a hash value of the preset public key, and a public certificate included in the digital certificate of the subscription management data preparation server a key, the encrypted session key, and a third digital signature of the subscription management data preparation server;

And the processor is further configured to generate a third digital signature of the subscription management data preparation server according to at least the plurality of encrypted session keys and the preset public key, and configured to perform the preset public key The hash operation generates a hash value of the preset public key.
The subscription management data preparation server according to any one of claims 17 to 21, wherein the processor is further configured to verify, by the first server, at least a plurality of preset public keys according to the plurality of eUICCs The digital signature generated by the matching information.
A server, comprising:

a transmitter, configured to send a plurality of preset public keys of the plurality of embedded universal integrated circuit cards eUICC and matching information corresponding to the plurality of eUICCs, so that the subscription management data preparation server generates multiple bindings corresponding to the matching information. a configuration file package; wherein the plurality of eUICCs respectively correspond to the plurality of preset public keys;

a receiver, configured to receive an eUICC digital certificate from the eUICC;

a processor, configured to check whether the eUICC identity identifier EID in the eUICC digital certificate exists in the server, and to find a preset public key corresponding to the eUICC identity identifier EID in the presence of the eUICC identity identifier EID The hash value, and then based on the hash value of the preset public key Binding a configuration file package corresponding to the eUICC;

The transmitter is configured to send the binding configuration file package to a local configuration file assistant corresponding to the eUICC, so that the eUICC downloads the binding configuration file package.
The server according to claim 23, wherein the processor is further configured to obtain a plurality of preset public private key pairs of the plurality of eUICCs and a plurality of the eUICC identity identifiers EID of the plurality of eUICCs in advance. And obtaining hash values of the plurality of preset public keys of the plurality of eUICCs.
The server according to claim 23 or 24, wherein the processor is further configured to directly obtain a hash value of a plurality of preset public keys of the plurality of eUICCs, or according to the plurality of eUICCs The plurality of preset public keys calculate a hash value of the plurality of preset public keys of the plurality of eUICCs.
The server according to any one of claims 23 to 25, wherein the processor is further configured to generate a first server according to at least a plurality of preset public keys of the plurality of eUICCs and the matching information. a digital signature;

The transmitter is further configured to send the first digital signature of the first server to the subscription management data preparation server, so that the subscription management data preparation server verifies the first digital signature of the first server.
The server according to any one of claims 23 to 26, wherein the processor is further configured to generate a first digital signature of the first server according to at least a random number of the first server;

The transmitter is further configured to send the first digital signature of the first server.
A terminal, comprising:

a transmitter, configured to send an embedded universal integrated circuit card eUICC digital certificate to the first server, so that the first server determines a binding configuration file package corresponding to the eUICC identity identifier EID included in the eUICC digital certificate;

a receiver, configured to receive the binding configuration file package from the first server;

a processor, configured to repeatedly initiate a load binding configuration file package function by using the binding configuration file package;

a transmitter, configured to send the binding configuration file package to an embedded universal set in the terminal Into the circuit card eUICC.
The terminal according to claim 28, wherein the processor is further configured to: prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, Initializing the security management function included in the secure channel function to prepare the server digital signature for verification. In the case of verification, the private key corresponding to the preset public key and the subscription data management server included in the initialization security channel function are once A public key that generates a session key.
The terminal according to claim 28 or 29, wherein the processor is further configured to prepare a server digital certificate public key according to the subscription management data in the initial security channel function included in the binding configuration file package, The initial management security channel includes a subscription management data preparation server digital signature for verification, and in the case of verification, the encrypted session key included in the initialization security channel function is decrypted by using the preset public key. Session key.