WO2022142246A1

WO2022142246A1 - Esim m2m-based automatic network access method and system

Info

Publication number: WO2022142246A1
Application number: PCT/CN2021/104739
Authority: WO
Inventors: 程柳红
Original assignee: 北京握奇数据股份有限公司
Priority date: 2020-12-29
Filing date: 2021-07-06
Publication date: 2022-07-07
Also published as: CN112804676B; CN112804676A

Abstract

Disclosed in the present invention are an eSIM M2M-based automatic network access method and system. The method comprises: S100, an eUICC establishes a connection to an RSPM by means of a SE; S200, after the connection is established successfully, the RSPM sends an ISDP creation instruction to the eUICC; S300, the eUICC creates an ISD-P on the basis of the ISDP creation instruction, and returns an instruction execution result to the RSPM; S400, the RSPM performs key negotiation with the eUICC; S500, after the key negotiation is completed, the RSPM initiates SCP03T channel establishment to the eUICC; S600, after the SCP03T channel establishment is completed, the RSPM applies for code number data from MNO and obtains Profile data; S700, the RSPM sends, by the SE, the Profile data to the eUICC by means of the SCP03T channel; S800, the eUICC installs a corresponding Profile application on the basis of the Profile data; S900, the RSPM sends a Profile enabling activation instruction to the eUICC; S1000, the eUICC enables the profile application on the basis of the Profile enabling activation instruction, and automatically accesses the network after successful enabling. In the present invention, in the case of shortage of code number resources of an operator, automatic network access of an eSIM Internet of Things card can be implemented without the need to pre-configure available operator resources in advance and without the need for a client to trigger a network access operation.

Description

A method and system for autonomous number assignment based on eSIM M2M

technical field

The invention relates to the field of autonomous number assignment of the GSMA SGP02 specification, in particular to a method and system for autonomous number assignment based on eSIM M2M.

Background technique

In recent years, in order to meet the requirements of smaller mobile phone space, SIM card has experienced SIM, Mini-SIM, Micro-SIM, Nano-SIM, and currently, eSIM will embed the above functions into hardware in the form of software, replacing physical SIM Card. Then, the method of safe numbering of embedded SIM card becomes more and more important. In the prior art, either the operator's available code number needs to be built in in advance, or it needs to be initiated by the user, and there must be an interactive interface, which is inconvenient to use. The method and system for autonomous subscription of eSIM IoT cards can be realized without pre-setting available operator resources or triggering subscription by the client.

SUMMARY OF THE INVENTION

In view of the defects existing in the prior art, the purpose of the present invention is to provide a method and system for autonomous number assignment based on eSIM M2M. The eSIM IoT card can be automatically assigned without the need for the client to trigger operations such as assigning an account.

For achieving the above object, the technical scheme adopted in the present invention is as follows:

A method for autonomous number assignment based on eSIM M2M, comprising the following steps:

S100, the embedded chip card eUICC establishes a connection with the remote service configuration management system RSPM through the security module SE;

S200, after the connection is established successfully, the RSPM sends the encapsulated ISDP creation instruction to the eUICC through the SE;

S300, the eUICC creates an instruction based on the ISDP, creates an issuer Profile security domain ISD-P, and returns the instruction execution result to the RSPM;

S400, the RSPM performs key negotiation with the eUICC after confirming that the creation is successful based on the instruction execution result;

S500. After the key negotiation is completed, the RSPM initiates an SCP03T channel establishment to the eUICC;

S600, after the SCP03T channel is established, the RSPM applies to the operator MNO for code number data, obtains corresponding code number resources and encapsulates personalized Profile data;

S700, the RSPM delivers the Profile data to the eUICC through the SCP03T channel through the SE;

S800, the eUICC installs the corresponding Profile application based on the Profile data, and returns the installation result to the RSPM;

S900, based on the installation result, after confirming that the installation is successful, the RSPM sends the Profile activation activation instruction to the eUICC;

S1000, the eUICC activates an activation instruction based on the Profile, activates the Profile application, and automatically logs in to the Internet after the activation is successful.

Further, in the above-mentioned method, S100 includes:

S101. After the eUICC is powered on, actively send an instruction to open a BIP channel to the SE;

S102, the SE creates a BIP channel with the eUICC based on the open BIP channel instruction;

S103. If the creation is successful, establish an https connection with the RSPM.

Further, in the above method, S100 further includes:

S104. If the creation fails, the eUICC retransmits the BIP channel opening instruction according to a predetermined number of retransmission times.

Further, in the above-mentioned method, the S400 includes:

The RSPM completes key negotiation with the eUICC through multiple instruction interactions, and the key includes ENCKey, MACKey, and DEKKey.

Further, in the above-mentioned method, the S500 includes:

The RSPM completes the establishment of the SCP03T channel through multiple instruction interactions, and obtains the protocols S-ENC, S-MAC and S-RMAC for subsequent data transmission.

An eSIM M2M-based autonomous numbering system, comprising: an embedded chip card eUICC, a security module SE, a remote service configuration management system RSPM, and an operator MNO;

establishing a connection between the eUICC and the RSPM through the SE;

After the connection is established successfully, the RSPM sends the encapsulated ISDP creation instruction to the eUICC through the SE;

The eUICC creates an instruction based on the ISDP, creates an issuer Profile security domain ISD-P, and returns the instruction execution result to the RSPM;

The RSPM performs key negotiation with the eUICC after confirming that the creation is successful based on the instruction execution result;

After the key negotiation is completed, the RSPM initiates SCP03T channel establishment to the eUICC;

After the SCP03T channel is established, the RSPM applies for the code number data to the MNO, obtains the corresponding code number resource and encapsulates the personalized Profile data;

The RSPM sends the Profile data to the eUICC through the SCP03T channel through the SE;

The eUICC installs the corresponding Profile application based on the Profile data, and returns the installation result to the RSPM;

Based on the installation result, the RSPM confirms that the installation is successful, and issues the Profile activation activation instruction to the eUICC;

The eUICC activates the activation instruction based on the Profile, activates the Profile application, and automatically logs in to the Internet after the activation is successful.

Further, in the above system, the eUICC establishes a connection between the SE and the RSPM, including:

After the eUICC is powered on, actively send an instruction to open the BIP channel to the SE;

The SE creates a BIP channel with the eUICC based on the open BIP channel instruction;

If the creation is successful, an https connection is established with the RSPM.

Further, in the above system, the eUICC establishes a connection between the SE and the RSPM, further comprising:

If the creation fails, the eUICC retransmits the BIP channel opening instruction according to a predetermined number of retransmissions.

Further, in the above system, the RSPM performs key negotiation with the eUICC, including:

Further, in the above system, the RSPM initiates SCP03T channel establishment to the eUICC, including:

The beneficial effects of the present invention are: the present invention can realize the autonomous numbering of the eSIM Internet of Things card without presetting available operator resources in advance, and without requiring the client to trigger operations such as numbering under the condition of tight operator number resources .

Description of drawings

Fig. 1 is a kind of working principle frame diagram of the autonomous number assignment based on eSIM M2M provided in the embodiment of the present invention;

2 is a schematic flowchart of a method for autonomously assigning numbers based on eSIM M2M provided in an embodiment of the present invention;

FIG. 3 is a sequence diagram of an eSIM M2M-based autonomous number assignment provided in an embodiment of the present invention.

Detailed ways

In order to make the technical problems solved by the present invention, the technical solutions adopted and the technical effects achieved more clearly, the technical solutions of the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only some, but not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Abbreviations and key terms are explained in Table 1 below.

Table I

As shown in the network topology diagram in Figure 1, operator MNO, subscription management-secure routing SM-SR, subscription management-data preparation SM-DP and embedded chip card eUICC, wherein SM-SR includes SMS transceiver module, BIP gateway modules and business processing modules. MNO is used to provide available resource data; a secure channel SCP03 or SCP03t is established between SM-DP and eUICC, responsible for APDU assembly and interaction with eUICC through SM-SR, specifically for receiving input data and trigger request of MNO, according to Input data and trigger requests to generate personalized data, assemble and preset the personalized data, and generate a Profile file, where Profile is the card file structure, which is specifically defined as Combination of a file structure, data and applications on an eUICC, Profile generation It is the process that the SM-DP platform generates the personalized data according to the profile ordering stage, and generates the profile according to the standard profile format, encrypts the overall data of the profile, and sends the overall ciphertext data of the profile to the embedded chip card eUICC through SM-SR. Install the app inside. The business processing module is used to manage the business process, establish and manage the security channel, and remotely manage the loading, activation, deactivation, deletion, switching and updating of the Profile in the eUICC card. The SMS communication module and the BIP communication module are responsible for connecting the eUICC with the background.

Based on the above network topology structure and the working principle of each functional module, an embodiment of the present invention provides a method for autonomous number assignment based on eSIM M2M, as shown in FIG. 2 , including the following steps:

S100, the embedded chip card eUICC establishes a connection with the remote service configuration management system RSPM through the security module SE.

S100 includes:

S101. After the eUICC is powered on, actively send an instruction to open the BIP channel to the SE;

S102, the SE creates a BIP channel with the eUICC based on the instruction to open the BIP channel;

S103. If the creation is successful, establish an https connection with RSPM;

S104. If the creation fails, the eUICC retransmits the BIP channel opening instruction according to the predetermined number of retransmissions.

S200. After the connection is established successfully, the RSPM sends the encapsulated ISDP creation instruction to the eUICC through the SE.

S300, the eUICC creates an instruction based on the ISDP, creates the issuer Profile security domain ISD-P, and returns the instruction execution result to the RSPM.

S400. Based on the instruction execution result, after confirming that the creation is successful, the RSPM performs key negotiation with the eUICC.

Specifically, RSPM completes key negotiation with eUICC through multiple command interactions, and the keys include ENCKey, MACKey, and DEKKey.

S500. After the key negotiation is completed, the RSPM initiates the establishment of the SCP03T channel to the eUICC.

Specifically, the RSPM completes the establishment of the SCP03T channel through multiple instruction interactions, and obtains the protocols S-ENC, S-MAC and S-RMAC for subsequent data transmission.

After the S600 and SCP03T channels are established, the RSPM applies to the operator MNO for code number data, obtains corresponding code number resources, and encapsulates personalized Profile data.

S700 and RSPM deliver Profile data to eUICC through SCP03T channel through SE.

The S800 and eUICC install the corresponding Profile application based on the Profile data, and return the installation result to the RSPM.

Based on the installation result, the S900 and RSPM send the Profile activation activation instruction to eUICC after confirming that the installation is successful.

S1000 and eUICC enable activation commands based on Profile, enable Profile application, and automatically log in to the Internet after successful activation.

The present invention can realize the autonomous numbering of the eSIM Internet of Things card without presetting available operator resources in advance, and without requiring the client to trigger operations such as numbering under the condition that the operator's number resources are tight. For the Internet of Things, the number resources of the operator can be saved in the process of autonomous numbering, and at the same time, the space occupation of the card can be reduced to a certain extent.

The implementation of the present invention also provides an eSIM M2M-based autonomous number subscription system, including: an embedded chip card eUICC, a security module SE, a remote service configuration management system RSPM, and an operator MNO. The functions of each component and the relationship between them are shown in Figure 3. The eUICC establishes a connection with the RSPM through the SE; after the connection is established successfully, the RSPM sends the encapsulated ISDP creation command to the eUICC through the SE; the eUICC creates the command based on the ISDP , create the issuer Profile security domain ISD-P, and return the instruction execution result to RSPM; RSPM will conduct key negotiation with eUICC after confirming that the creation is successful based on the instruction execution result; after the key negotiation is completed, RSPM initiates SCP03T channel to eUICC Established; after the SCP03T channel is established, RSPM applies to the MNO for code number data, obtains the corresponding code number resources and encapsulates the personalized Profile data; RSPM sends the Profile data to eUICC through the SCP03T channel through SE; eUICC is based on the Profile data, Install the corresponding Profile application, and return the installation result to RSPM; based on the installation result, RSPM sends the Profile activation activation instruction to eUICC after confirming that the installation is successful; eUICC enables the Profile activation instruction based on the Profile activation instruction, activates the Profile application, and automatically logs in after the activation is successful. network.

Specifically, the eUICC establishes a connection between the SE and the RSPM, including: after the eUICC is powered on, actively sending an open BIP channel command to the SE; based on the BIP channel open command, the SE creates a BIP channel with the eUICC, if the creation is successful, then An https connection is established with the RSPM. If the establishment fails, the eUICC resends the BIP channel open command according to the predetermined number of resends.

Specifically, the RSPM and the eUICC perform key negotiation, including: the RSPM completes the key negotiation with the eUICC through multiple instruction interactions, and the keys include ENCKey, MACKey, and DEKKey.

Specifically, the RSPM initiates the establishment of the SCP03T channel to the eUICC, including: the RSPM completes the establishment of the SCP03T channel through multiple instruction interactions, and obtains the protocols S-ENC, S-MAC and S-RMAC for subsequent data transmission.

Those skilled in the art should understand that the system and method described in the present invention are not limited to the embodiments described in the specific implementation manner, and the above specific description is only for the purpose of explaining the present invention, not for limiting the present invention. Those skilled in the art can obtain other embodiments according to the technical solutions of the present invention, which also belong to the technical innovation scope of the present invention, and the protection scope of the present invention is defined by the claims and their equivalents.

Claims

A method for autonomous subscription number based on eSIM M2M, comprising the following steps:

S100, the embedded chip card eUICC establishes a connection with the remote service configuration management system RSPM through the security module SE;

S200, after the connection is established successfully, the RSPM sends the encapsulated ISDP creation instruction to the eUICC through the SE;

S300, the eUICC creates an instruction based on the ISDP, creates an issuer Profile security domain ISD-P, and returns the instruction execution result to the RSPM;

S400, the RSPM performs key negotiation with the eUICC after confirming that the creation is successful based on the instruction execution result;

S500. After the key negotiation is completed, the RSPM initiates an SCP03T channel establishment to the eUICC;

S600, after the SCP03T channel is established, the RSPM applies to the operator MNO for code number data, obtains corresponding code number resources and encapsulates personalized Profile data;

S700, the RSPM delivers the Profile data to the eUICC through the SCP03T channel through the SE;

S800, the eUICC installs the corresponding Profile application based on the Profile data, and returns the installation result to the RSPM;

S900, based on the installation result, after confirming that the installation is successful, the RSPM sends the Profile activation activation instruction to the eUICC;

S1000, the eUICC activates an activation instruction based on the Profile, activates the Profile application, and automatically logs in to the Internet after the activation is successful.
The method according to claim 1, wherein S100 comprises:

S101. After the eUICC is powered on, actively send an instruction to open a BIP channel to the SE;

S102, the SE creates a BIP channel with the eUICC based on the open BIP channel instruction;

S103. If the creation is successful, establish an https connection with the RSPM.
The method according to claim 2, wherein S100 further comprises:

S104. If the creation fails, the eUICC retransmits the BIP channel opening instruction according to a predetermined number of retransmission times.
The method according to any one of claims 1-3, wherein the S400 comprises:

The RSPM completes key negotiation with the eUICC through multiple instruction interactions, and the key includes ENCKey, MACKey, and DEKKey.
The method according to any one of claims 1-3, wherein the S500 includes:

The RSPM completes the establishment of the SCP03T channel through multiple instruction interactions, and obtains the protocols S-ENC, S-MAC and S-RMAC for subsequent data transmission.
An eSIM M2M-based system for autonomous number assignment, comprising: an embedded chip card eUICC, a security module SE, a remote service configuration management system RSPM, and an operator MNO;

establishing a connection between the eUICC and the RSPM through the SE;

After the connection is established successfully, the RSPM sends the encapsulated ISDP creation instruction to the eUICC through the SE;

The eUICC creates an instruction based on the ISDP, creates an issuer Profile security domain ISD-P, and returns the instruction execution result to the RSPM;

The RSPM performs key negotiation with the eUICC after confirming that the creation is successful based on the instruction execution result;

After the key negotiation is completed, the RSPM initiates SCP03T channel establishment to the eUICC;

After the SCP03T channel is established, the RSPM applies for the code number data to the MNO, obtains the corresponding code number resource and encapsulates the personalized Profile data;

The RSPM sends the Profile data to the eUICC through the SCP03T channel through the SE;

The eUICC installs the corresponding Profile application based on the Profile data, and returns the installation result to the RSPM;

Based on the installation result, the RSPM confirms that the installation is successful, and issues the Profile activation activation instruction to the eUICC;

The eUICC activates the activation instruction based on the Profile, activates the Profile application, and automatically logs in to the Internet after the activation is successful.
The system according to claim 6, wherein establishing a connection between the eUICC and the RSPM through the SE comprises:

After the eUICC is powered on, actively send an instruction to open the BIP channel to the SE;

The SE creates a BIP channel with the eUICC based on the open BIP channel instruction;

If the creation is successful, an https connection is established with the RSPM.
The system according to claim 7, wherein the eUICC establishes a connection with the RSPM through the SE, further comprising:

If the creation fails, the eUICC retransmits the BIP channel opening instruction according to a predetermined number of retransmissions.
The system according to any one of claims 6-8, wherein the key agreement between the RSPM and the eUICC includes:

The RSPM completes key negotiation with the eUICC through multiple instruction interactions, and the key includes ENCKey, MACKey, and DEKKey.
The system according to any one of claims 6-8, wherein the RSPM initiates SCP03T channel establishment to the eUICC, comprising:

The RSPM completes the establishment of the SCP03T channel through multiple instruction interactions, and obtains the protocols S-ENC, S-MAC and S-RMAC for subsequent data transmission.