WO2024022118A1 - 一种虚拟用户识别卡的访问方法及装置 - Google Patents

一种虚拟用户识别卡的访问方法及装置 Download PDF

Info

Publication number
WO2024022118A1
WO2024022118A1 PCT/CN2023/107198 CN2023107198W WO2024022118A1 WO 2024022118 A1 WO2024022118 A1 WO 2024022118A1 CN 2023107198 W CN2023107198 W CN 2023107198W WO 2024022118 A1 WO2024022118 A1 WO 2024022118A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
sim card
application
modem
data
Prior art date
Application number
PCT/CN2023/107198
Other languages
English (en)
French (fr)
Inventor
杨天曙
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2024022118A1 publication Critical patent/WO2024022118A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/005—Discovery of network devices, e.g. terminals
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04B—TRANSMISSION
    • H04B1/00—Details of transmission systems, not covered by a single one of groups H04B3/00 - H04B13/00; Details of transmission systems not characterised by the medium used for transmission
    • H04B1/38—Transceivers, i.e. devices in which transmitter and receiver form a structural unit and in which at least one part is used for functions of transmitting and receiving
    • H04B1/3816—Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/20—Transfer of user or subscriber data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities
    • H04W8/24—Transfer of terminal data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/26—Network addressing or numbering for mobility support
    • H04W8/265—Network addressing or numbering for mobility support for initial activation of new user

Definitions

  • the embodiments of the present application relate to the field of terminal technology, and in particular, to a method and device for accessing a virtual subscriber identity card.
  • outbound mobile data services have increasingly become a basic requirement for outbound travel.
  • mobile phone manufacturers or third-party application manufacturers have provided an outbound mobile data service that does not require the insertion of a physical subscriber identity module (SIM).
  • SIM subscriber identity module
  • outbound data services can be implemented through virtual SIM card technology.
  • the card data of the virtual SIM card is stored on the mobile phone. After the user arrives abroad, the user's mobile phone uses the card data of the virtual SIM card to access the local contracted operator. , providing data access services.
  • a modem accesses the virtual SIM card through application protocol data unit (APDU) instructions.
  • APDU application protocol data unit
  • This application provides a method and device for accessing a virtual subscriber identification card, which can shorten the access path of the virtual subscriber identification card and reduce power consumption.
  • this application provides a method for accessing a virtual subscriber identity card.
  • the method is applied to an electronic device.
  • the electronic device includes a modem.
  • the method includes: the modem sends a message for accessing the SIM to the first application through the first service. After that, the modem receives a response to the access instruction from the first application through the first service, and the response carries the data of the virtual SIM card; then the modem accesses the mobile data network corresponding to the virtual SIM card according to the response.
  • the first service runs in the framework layer and/or hardware abstraction layer; the first application runs in the trusted execution environment TEE.
  • the modem sends an APDU instruction (i.e. the first application) to the virtual subscriber identity module trusted application (VSIM TA) (i.e. the first application) through the first service in the framework layer and/or hardware abstraction layer. That is, access instructions), VSIM TA runs in the trusted execution environment TEE.
  • the modem receives the response of the APDU command (that is, the response of the access command) from the VSIM TA through the first service.
  • the response of the APDU command carries the data of the virtual SIM card, and the modem accesses the mobile data network corresponding to the virtual SIM card according to the response of the APDU command.
  • the modem can send APDU instructions through the first service in the framework layer and/or hardware abstraction layer, without going through the application layer service.
  • the APDU instruction access process goes through shorter levels, short access paths, low power consumption, and good performance.
  • the access command does not need to go through the application layer service. Therefore, during the use of the virtual SIM card, even if the modem frequently accesses the virtual SIM card, the application layer service does not need to be resident in the memory, and the memory usage is less.
  • the access path of the access command and the access command response is shortened, the probability of data exposure of the virtual SIM card is reduced, and the risk of being attacked is lower, which can improve the security of electronic devices.
  • the first service includes a wireless interface layer service in the hardware abstraction layer and/or a telephony service in the framework layer.
  • the first service includes a wireless interface layer service in the hardware abstraction layer, or the first service includes a wireless interface layer service in the hardware abstraction layer and a telephony service in the framework layer.
  • the modem sends the access instruction to the first application through the first service, including: the modem sends the access instruction to the first application through the wireless interface layer service in the hardware abstraction layer; the modem sends the access instruction to the first application through the wireless interface layer service in the hardware abstraction layer; The wireless interface layer service and the telephony service in the framework layer send access instructions to the first application.
  • the method further includes: the first service obtains the address of the first application; the modem sends an access instruction to the first application through the first service, including: the modem uses the first service to obtain the address of the first application. , sending an access instruction to the first application.
  • the address of the first application may be a file path preset in the system for the first application. That is to say, the modem sends the access instruction to the first service, the first service obtains the file path of the first application, and the first service sends the access instruction to the first application according to the file path of the first application.
  • the first service obtains the address of the first application, including: the first service obtains the preconfigured address of the first application; or the first service obtains the address of the first application from the application layer.
  • the address of the first application may be a file path preset for the first application in the system.
  • the first service obtains the preconfigured address of the first application, or when activating the modem, the application layer sends the address of the first application to the first service.
  • the modem sends an access instruction to the first application through the first service, including: the modem calls the TEE's software development kit (SDK) through the first service to send the access instruction to the first application.
  • SDK software development kit
  • the first service can forward the access instruction to the first application by calling the SDK of the TEE.
  • this application provides a virtual subscriber identity card access device, including: SIM card management module, framework layer, hardware abstraction layer, and trusted execution environment TEE; wherein, the SIM card management module is used to call the framework layer and /or the first service in the hardware abstraction layer; the framework layer and/or the hardware abstraction layer, used to send access instructions to the first application in the TEE through the first service, and the access instructions are used to access the data of the virtual user identification SIM card;
  • the framework layer and/or hardware abstraction layer are also used to receive a response to the access instruction from the first application in the TEE through the first service, and respond to the data carrying the virtual SIM card; the SIM card management module is also used to call back the framework layer and/or Or the first service in the hardware abstraction layer; the SIM card management module is also used to access the data network according to the response; the TEE is used to run the first application.
  • this application provides an access device for a virtual subscriber identity card, including: a processor, a memory and a modem, the memory is coupled to the processor, the memory is used to store computer program code, and the computer program code includes computer instructions, When the processor reads the computer instructions from the memory, the device is caused to execute the method of the first aspect or any one of the implementation modes of the first aspect.
  • the present application provides a computer-readable storage medium.
  • the computer-readable storage medium stores a computer program (which may also be referred to as instructions or codes).
  • the computer program When the computer program is executed by an electronic device, it causes the electronic device to perform the method of the first aspect or any one of the embodiments of the first aspect.
  • the present application provides a computer program product, which when the computer program product is run on an electronic device, causes the electronic device to execute the method of the first aspect or any one of the first aspect implementations.
  • the present application provides a chip system, including at least one processor and at least one interface circuit.
  • the at least one interface circuit is used to perform transceiver functions and send instructions to at least one processor.
  • at least one processor executes the instructions
  • at least one processor executes the method of the first aspect or any one of the implementation modes of the first aspect.
  • Figure 1 is a schematic diagram of a communication system provided by an embodiment of the present application.
  • Figure 2 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.
  • Figure 3 is a software architecture diagram of an electronic device provided by an embodiment of the present application.
  • Figure 4 is a flow chart of a virtual subscriber identification card access method provided by an embodiment of the present application.
  • Figure 5 is a schematic diagram of the package interface of the virtual SIM card provided by the embodiment of the present application.
  • Figure 6 is a flow chart of another virtual subscriber identification card access method provided by an embodiment of the present application.
  • Figure 7 is a schematic structural diagram of an electronic equipment device provided by an embodiment of the present application.
  • FIG. 8 is a schematic structural diagram of a chip system provided by an embodiment of the present application.
  • Embodiments of the present application can be applied to systems that use virtual SIM card technology to implement data network services (such as cellular network services).
  • Data network services that do not require the insertion of a physical SIM card can be implemented through the virtual SIM card.
  • data network services include: using mobile data services to surf the Internet, make and receive calls, send and receive text messages, etc.
  • Figure 1 shows an exemplary architecture of a communication system based on a virtual SIM card.
  • the system includes a network device 101, an electronic device 102, and a server 103. For example, after the electronic device 102 accesses the network through the network device 101, the electronic device 102 then accesses the server 103.
  • the electronic device 102 includes but is not limited to various devices that support virtual SIM cards.
  • the electronic device 102 may be a mobile phone, a tablet computer, a wearable device, a vehicle-mounted device, an augmented reality (AR)/virtual reality (VR) device, a notebook computer, an ultra-mobile personal computer (Ultra-mobile personal computer).
  • AR augmented reality
  • VR virtual reality
  • UMPC computers
  • netbooks netbooks
  • PDA personal digital assistants
  • PDA personal digital assistants
  • the electronic device 102 can implement data network communication through virtual SIM card technology.
  • the VSIM APP can be installed in the electronic device 102.
  • VSIM APP can be used to provide functions such as purchase and activation of virtual SIM card packages.
  • the user needs to use a virtual SIM card to communicate with the electronic device 102, he can open the VSIM APP, and the mobile phone displays the package interface of the VSIM APP.
  • the user can click to start the corresponding virtual SIM card package.
  • the VSIM APP can request the data of the virtual SIM card from the server 103 and receive the data of the virtual SIM card from the server 103.
  • the electronic device 102 can perform network authentication and other operations according to the data of the virtual SIM card, so that the terminal registers in the data network and obtains data network services.
  • the server 103 may be used to provide virtual SIM card package subscription, virtual SIM card data download and other services.
  • the data of the virtual SIM card is sent to the electronic device 102, so that the electronic device 102 accesses the network device according to the data of the virtual SIM card.
  • the virtual SIM data may be: fixedly stored data (or long-term data) and short-term stored data (or temporarily stored data).
  • fixed data is written to the electronic device 102 by the SIM card manufacturer before the electronic device 102 is sold.
  • fixed data includes international mobile subscriber identification number, authentication key, authentication data, encryption algorithm, etc.
  • the authentication data sent to the electronic device 102 by the operator (the operator of the cellular network) and the authentication key of the virtual SIM card can generate an authentication quintuple, and the authentication quintuple is returned to Operators are certified by operators to implement network authentication.
  • the authentication quintuple includes: random number, expected response, encryption key, integrity key and authentication mark.
  • Temporarily stored data includes but is not limited to the following data: location area identification code, mobile user temporary identification code, public telephone network code that prohibits access, related business codes, such as personal identification code, unlock code, billing rate, phone number Book to record relevant data of user information.
  • network equipment includes but is not limited to various types of base stations, used to provide data network (such as cellular network) services for the electronic device 102 .
  • data network such as cellular network
  • FIG. 2 shows a schematic structural diagram of the electronic device 102.
  • the electronic device 102 may include a processor 210, an external memory interface 220, an internal memory 221, a universal serial bus (USB) interface 230, a charging management module 240, a power management module 241, a battery 242, an antenna 1, an antenna 2 , mobile communication module 250, wireless communication module 260, and subscriber identification module (subscriber identification module, SIM) card interface 270, etc.
  • a processor 210 may include a processor 210, an external memory interface 220, an internal memory 221, a universal serial bus (USB) interface 230, a charging management module 240, a power management module 241, a battery 242, an antenna 1, an antenna 2 , mobile communication module 250, wireless communication module 260, and subscriber identification module (subscriber identification module, SIM) card interface 270, etc.
  • SIM subscriber identification module
  • the structure illustrated in the embodiment of the present application does not constitute a specific limitation on the electronic device 102 .
  • the electronic device 102 may include more or fewer components than shown in the figures, or some components may be combined, some components may be separated, or some components may be arranged differently.
  • the components illustrated may be implemented in hardware, software, or a combination of software and hardware.
  • the processor 210 may include one or more processing units.
  • the processor 210 may include an application processor (application processor, AP), a modem processor, a graphics processing unit (GPU), and an image signal processor. (image signal processor, ISP), controller, memory, video codec, digital signal processor (DSP), baseband processor, and/or neural-network processing unit (NPU) wait. That , different processing units can be independent devices or integrated into one or more processors.
  • the controller may be the nerve center and command center of the electronic device 102 .
  • the controller can generate operation control signals based on the instruction operation code and timing signals to complete the control of fetching and executing instructions.
  • the processor 210 may also be provided with a memory for storing instructions and data.
  • the memory in processor 210 is cache memory. This memory may hold instructions or data that have been recently used or recycled by processor 210 . If the processor 210 needs to use the instruction or data again, it can be called directly from the memory. Repeated access is avoided and the waiting time of the processor 210 is reduced, thus improving the efficiency of the system.
  • processor 210 may include one or more interfaces. Interfaces may include integrated circuit (inter-integrated circuit, I2C) interface, integrated circuit built-in audio (inter-integrated circuit sound, I2S) interface, pulse code modulation (pulse code modulation, PCM) interface, universal asynchronous receiver and transmitter (universal asynchronous receiver/transmitter (UART) interface, mobile industry processor interface (MIPI), general-purpose input/output (GPIO) interface, subscriber identity module (SIM) interface, and /or universal serial bus (USB) interface, etc.
  • I2C integrated circuit
  • I2S integrated circuit built-in audio
  • PCM pulse code modulation
  • UART universal asynchronous receiver and transmitter
  • MIPI mobile industry processor interface
  • GPIO general-purpose input/output
  • SIM subscriber identity module
  • USB universal serial bus
  • the UART interface is a universal serial data bus used for asynchronous communication.
  • the bus can be a bidirectional communication bus. It converts the data to be transmitted between serial communication and parallel communication.
  • a UART interface is typically used to connect the processor 210 and the wireless communication module 260 .
  • the processor 210 communicates with the Bluetooth module in the wireless communication module 260 through the UART interface to implement the Bluetooth function.
  • the USB interface 230 is an interface that complies with the USB standard specification, and may be a Mini USB interface, a Micro USB interface, a USB Type C interface, etc.
  • the USB interface 230 can be used to connect a charger to charge the electronic device 102, and can also be used to transmit data between the electronic device 102 and peripheral devices. It can also be used to connect headphones to play audio through them. This interface can also be used to connect other electronic devices, such as AR devices, etc.
  • the interface connection relationships between the modules illustrated in the embodiments of the present application are only schematic illustrations and do not constitute a structural limitation on the electronic device 102 .
  • the electronic device 102 may also adopt different interface connection methods in the above embodiments, or a combination of multiple interface connection methods.
  • the charge management module 240 is used to receive charging input from the charger.
  • the charger can be a wireless charger or a wired charger.
  • the charging management module 240 may receive charging input from the wired charger through the USB interface 230 .
  • the charge management module 240 may receive wireless charging input through the wireless charging coil of the electronic device 102 . While the charging management module 240 charges the battery 242, it can also provide power to the electronic device 102 through the power management module 241.
  • the power management module 241 is used to connect the battery 242, the charging management module 240 and the processor 210.
  • the power management module 241 receives input from the battery 242 and/or the charging management module 240 to provide power to the processor 210, the internal memory 221, the external memory, the wireless communication module 260, and the like.
  • the power management module 241 can also be used to monitor battery capacity, battery cycle times, battery health status (leakage, impedance) and other parameters.
  • the power management module 241 may also be provided in the processor 210 .
  • the power management module 241 and the charging management module 240 may also be provided in the same device.
  • the wireless communication function of the electronic device 102 can be implemented through the antenna 1, the antenna 2, the mobile communication module 250, the wireless communication module 260, the modem processor and the baseband processor.
  • Antenna 1 and Antenna 2 are used to transmit and receive electromagnetic wave signals.
  • Each antenna in electronic device 102 may be used to cover a single or multiple communication frequency bands. Different antennas can also be reused to improve antenna utilization. For example: Antenna 1 can be reused as a diversity antenna for a wireless LAN. In other embodiments, antennas may be used in conjunction with tuning switches.
  • the mobile communication module 250 can provide solutions for wireless communication including 2G/3G/4G/5G applied on the electronic device 102 .
  • the mobile communication module 250 may include at least one filter, switch, power amplifier, low noise amplifier (LNA), etc.
  • the mobile communication module 250 can receive electromagnetic waves from the antenna 1, perform filtering, amplification and other processing on the received electromagnetic waves, and transmit them to the modem processor for demodulation.
  • the mobile communication module 250 can also amplify the signal modulated by the modem processor and convert it into electromagnetic waves through the antenna 1 for radiation.
  • at least part of the functional modules of the mobile communication module 250 may be disposed in the processor 210 .
  • at least part of the functional modules of the mobile communication module 250 and at least part of the modules of the processor 210 may be provided in the same device.
  • the functional modules of the mobile communication module 250 may be provided on a baseband chip (baseband chip). processor, BP).
  • the mobile communication module 250 (such as a baseband chip) may also provide cellular network radio frequency related functions.
  • the baseband chip is responsible for coordinating and controlling communication with the base station, sending and receiving communication data with the base station, and encoding and decoding the data.
  • the baseband chip can interact with an application processor (AP).
  • AP application processor
  • mobile communication module 250 includes a modem.
  • the modem may include a modulator and a demodulator.
  • the modem includes a SIM card management module, and the SIM card management module is used to manage the SIM card.
  • the modem can be connected to a SIM module (such as a SIM card interface), and the modem can operate the SIM card.
  • the modem can provide the activation and deactivation function of the virtual SIM card.
  • the modem can first instruct the physical card to power off, and then use the channel between the modem and RIL. , forward the virtual SIM card activation instruction to the virtual SIM card in order to activate the virtual SIM card.
  • the modem may be a stand-alone device.
  • the modem may be independent of processor 210. For example, it is provided in the same device as the mobile communication module 250 or other functional modules.
  • the wireless communication module 260 can provide applications on the electronic device 102 including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) network), Bluetooth (bluetooth, BT), and global navigation satellites.
  • WLAN wireless local area networks
  • System global navigation satellite system, GNSS
  • frequency modulation frequency modulation, FM
  • near field communication technology near field communication, NFC
  • infrared technology infrared, IR
  • the wireless communication module 260 may be one or more devices integrating at least one communication processing module.
  • the wireless communication module 260 receives electromagnetic waves via the antenna 2 , frequency modulates and filters the electromagnetic wave signals, and sends the processed signals to the processor 210 .
  • the wireless communication module 260 can also receive the signal to be sent from the processor 210, frequency modulate it, amplify it, and convert it into electromagnetic waves through the antenna 2 for radiation.
  • the antenna 1 of the electronic device 102 is coupled to the mobile communication module 250, and the antenna 2 is coupled to the wireless communication module 260, so that the electronic device 102 can communicate with the network and other devices through wireless communication technology.
  • Wireless communication technologies can include global system for mobile communications (GSM), general packet radio service (GPRS), code division multiple access (CDMA), broadband code division Multiple access (wideband code division multiple access, WCDMA), time-division code division multiple access (TD-SCDMA), long term evolution (long term evolution, LTE), BT, GNSS, WLAN, NFC, FM , and/or IR technology, etc.
  • GNSS can include global positioning system (GPS), global navigation satellite system (GLONASS), Beidou navigation satellite system (BDS), quasi-zenith satellite system (quasi-zenith) satellite system (QZSS) and/or satellite based augmentation systems (SBAS).
  • GPS global positioning system
  • GLONASS global navigation satellite system
  • BDS Beidou navigation satellite system
  • QZSS quasi-zenith satellite system
  • SBAS satellite based augmentation systems
  • the electronic device 102 implements display functions through a GPU, an application processor, and the like. GPUs are used to perform mathematical and geometric calculations for graphics rendering. Processor 210 may include one or more GPUs that execute program instructions to generate or alter display information.
  • Digital signal processors are used to process digital signals. In addition to digital image signals, they can also process other digital signals. For example, when the electronic device 102 selects a frequency point, the digital signal processor is used to perform Fourier transform on the frequency point energy.
  • the external memory interface 220 can be used to connect an external memory card, such as a Micro SD card, to expand the storage capacity of the electronic device 102.
  • the external memory card communicates with the processor 210 through the external memory interface 220 to implement the data storage function. Such as saving music, videos, etc. files in external memory card.
  • Internal memory 221 may be used to store computer executable program code, which includes instructions.
  • the internal memory includes a security chip for storing data related to the virtual SIM card.
  • the processor 210 executes instructions stored in the internal memory 221 to execute various functional applications and data processing of the electronic device 102 .
  • the internal memory 221 may include a program storage area and a data storage area. Among them, the stored program area can store an operating system, at least one application program required for a function (such as a sound playback function, an image playback function, etc.).
  • the storage data area may store data created during use of the electronic device 102 (such as audio data, phone book, etc.).
  • the internal memory 221 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, universal flash storage (UFS), etc.
  • the SIM card interface 270 is used to connect a physical SIM card.
  • the physical SIM card can be inserted into the SIM card interface 270, or from the SIM card interface 270.
  • the card interface 270 is pulled out to achieve contact and separation from the electronic device 102 .
  • the electronic device 102 may support 1 or N SIM card interfaces, where N is a positive integer greater than 1.
  • the SIM card interface 270 can support Nano SIM cards, Micro SIM cards, SIM cards, etc. Multiple physical SIM cards can be inserted into the same SIM card interface 270 at the same time. Multiple physical SIM cards can be of the same type or different types.
  • the SIM card interface 270 can also be compatible with different types of physical SIM cards.
  • the SIM card interface 270 is also compatible with external memory cards.
  • the electronic device 102 interacts with the network through a physical SIM card to implement functions such as calls and data communications.
  • the SIM card interface may be implemented as a physical card slot.
  • a hardware channel can be established between the physical card slot and the baseband chip.
  • APDU application protocol data unit
  • a communication channel (such as a hardware channel) can be established between the physical SIM card and the mobile communication module 250 (such as a baseband chip).
  • the baseband chip can send APDU instructions to the SIM card through the communication channel. to access the physical SIM card.
  • the electronic device 102 may use a VSIM card, also known as a virtual user identity card, virtual smart card, or virtual SIM card.
  • the virtual SIM card can replace the physical SIM card and realize the functions of the physical SIM card.
  • the data of the virtual SIM card can be stored in the mobile terminal. After the user activates the virtual SIM card, the mobile terminal can implement wireless communication. In this way, users do not need to insert a physical SIM card into the mobile terminal, which can improve the convenience of use.
  • the virtual SIM card can store user data, such as international mobile subscriber identification number (IMSI), etc.
  • IMSI international mobile subscriber identification number
  • Figure 3 shows an exemplary software architecture of the above electronic device.
  • the software architecture can be a layered architecture or other architectures. Take the layered architecture as an example.
  • the layered architecture can divide the software into several layers, and each layer has clear roles and division of labor.
  • the layers communicate through software interfaces.
  • the layered system may include three layers, from top to bottom, an application layer (referred to as the application layer) 310, an application framework layer (referred to as the framework layer) 320, and a hardware abstraction layer 330.
  • the application layer 310 may include a series of application packages.
  • the application package can be applications such as camera, gallery, calendar, call, map, navigation, WLAN, Bluetooth, music, video, short message, and desktop launcher.
  • the application layer 310 may include an application program that provides virtual SIM card services.
  • the application layer includes a virtual subscriber identity module application (VSIM APP) 311.
  • VSIM APP311 can be used to provide functions such as purchase and activation of virtual SIM card packages.
  • the framework layer 320 provides an application programming interface (API) and programming framework for applications in the application layer.
  • API application programming interface
  • the application framework layer includes some predefined functions.
  • the framework layer 320 may include a telephony service 321.
  • the telephony service 321 can provide virtual SIM card activation and deactivation services. As a possible implementation, the telephony service 321 sends an activation request (or deactivation request) to the RIL service 331 through the HIDL interface 350.
  • the RIL service 331 can convert the activation request (or deactivation request) into a format that can be recognized by the corresponding operator modem. instructions.
  • the HIDL interface is used to specify the interface between the HAL and its services.
  • telephony service 321 can also provide the following services:
  • Call service For example, the function of making calls on a mobile phone.
  • Optional includes the calling party (mobile origin call, MO), which is the initiator of the call; the called party (mobile termination call, MT), which is the receiving party of the call; high-definition voice call (volte call), etc.
  • MO mobile origin call
  • MT mobile termination call
  • high-definition voice call voltage call
  • Data services For example, Internet-related functions through data services.
  • Optional including data network settings, access point name (APN) settings, etc.
  • API access point name
  • Supplementary services voice mailbox, dual-SIM selection, call transfer, call restriction, etc.
  • telephony service 321 can communicate with TEEs.
  • the telephony service 321 can access the VSIM TA in the TEE through the Software Development Kit (SDK) provided by the TEE.
  • SDK Software Development Kit
  • different operating systems and programming languages have different SDK forms.
  • the C ⁇ C++ language SDK under the Linux operating system is usually in the form of a dynamic link library.
  • the framework layer 320 may also include a content provider, a view system, a phone manager, a resource manager, a notification manager, etc. (not shown in the figure).
  • the application layer 310 and the framework layer 320 can communicate through the binder interface 340.
  • the binder interface is the underlying interface used for network communication within the program. Raw data from the network can be sent and received through the binder interface.
  • Hardware abstraction layer (HAL) 330 Provides standard interfaces for various hardware and opens the functions of device hardware to higher-level Android frameworks.
  • the hardware abstraction layer may include a radio interface layer (radio interface layer, RIL) service 331.
  • RIL radio interface layer
  • the RIL service 331 can adapt to modems of different chip operators and provide a standard cellular network interface for the telephony service 321 of the framework layer 320 .
  • the hardware abstraction layer 330 and the framework layer 320 can communicate through the HIDL interface 350 interface.
  • the HIDL interface 350 is a customized interface.
  • an implementation of RIL service 331 may be paired with modem 362.
  • the modem 362 may be provided by a baseband chip operator, which provides supporting RIL service 331 implementation codes for various downstream operators (such as mobile phone operators).
  • RIL service 331 can communicate with the TEE.
  • RIL service 331 can access the VSIM TA in TEE through the software development kit (SDK) provided by TEE.
  • SDK software development kit
  • different operating systems and programming languages have different SDK forms.
  • the C ⁇ C++ language SDK under the Linux operating system is usually in the form of a dynamic link library. In this way, after receiving the APDU command from the modem, the RIL service 331 can forward the APDU command to the VSIM TA by calling the TEE's SDK.
  • FIG. 3 is only a possible example of the software architecture of the electronic device and does not constitute a limitation on the software architecture of the electronic device. It can be understood that the software architecture of the electronic device can also be other. For example, in a layered software architecture, it can be divided into more or fewer layers, and the specific functions of each layer are not limited.
  • Trusted execution environment (TEE) 380 Provides a secure trusted execution environment to ensure that various sensitive data are stored and protected in a trusted environment.
  • the implementation of functions involving data security in electronic devices relies on the TEE380 chip in the electronic device.
  • the trusted execution environment of the chip physically isolates two coexisting execution environments by mixing hardware and software, or by sharing Part or all of the hardware forms two coexisting execution environments that are logically isolated from each other, namely: an ordinary unconfidential execution environment and a secure confidentiality environment.
  • the ordinary non-confidential execution environment is also called the rich execution environment (REE)
  • the secure confidentiality environment is also called TEE.
  • a virtual subscriber identity module trusted application (VSIM TA) 381 runs in the TEE, and the VSIM TA can provide secure services (such as secure storage and encryption).
  • the electronic device can obtain virtual SIM card data from the server.
  • the server encrypts the SIM card data and sends the encrypted SIM card data to the electronic device.
  • VSIM TA 381 decrypts and processes the data of the virtual SIM card, and can store the processed virtual SIM card data in the TEE.
  • VSIM TA361 can receive APDU instructions for accessing virtual SIM card data and return an APDU response to the APDU instructions to the modem, and the modem accesses the data network based on the APDU response.
  • FIG. 3 also shows the connection relationship between the HAL 330 and the hardware device (hardware) 360.
  • Hardware device 360 is a general term for various physical devices composed of electronic, mechanical and optoelectronic components in a computer system.
  • the HAL and the hardware device 360 transmit data through the hardware channel 370 .
  • the hardware device 360 includes a physical card slot 361 and a modem 362.
  • the modem 262 includes a SIM card management module 363.
  • a hardware channel 370 is established between the modem 362 and the physical card slot 361.
  • APDU messages can be exchanged between the modem 362 and the physical card slot 361.
  • APDU messages there are two types of APDU messages: one type is APDU instructions, and the other type is APDU responses.
  • APDU instructions For example, there are two types of APDU messages: one type is APDU instructions, and the other type is APDU responses.
  • the modem 262 After the modem 262 sends an APDU command, it will receive an APDU response sent by the peer (such as VSIM TA 361). This communication method can be called a command-response pair.
  • the APDU command can be sent by the modem 262, and the APDU response can be sent by the peer such as the VSIM TA 361.
  • the following embodiment will take the electronic device 102 as a mobile phone as an example to describe the method of accessing a virtual SIM card provided by the embodiment of the present application.
  • the embodiment of the present application may include the following steps:
  • the mobile phone displays the package interface of the virtual SIM card.
  • the user can open the VSIM APP installed in the mobile phone. After opening the VSIM APP, the mobile phone can display the package interface 601 shown in Figure 5.
  • the package interface 601 includes package information of one or more virtual SIM cards. For example, a 1-day trip package to country A is 630, a 7-day trip package to country B is 610, a 7-day trip package to country B is 620, a 1GB package to country B is 640, a 7-day trip package to country B is 650, a 7-day trip package to country A is 660, and a 7-day trip package to country C is 660. 7-day trip package costs 670.
  • users can also select one or more virtual SIM card packages in the settings, and the phone will automatically jump to the VSIM APP to perform operations.
  • the embodiment of this application does not specifically limit the method of entering the package interface of the virtual SIM card.
  • the mobile phone displays the package interface 60.
  • the user clicks the "Close" button 611 of the 7-day trip package 610 to Country B to deactivate the 7-day trip package 610 to Country B.
  • the 7-day travel package 610 of country B includes a package expiration reminder 612, such as "enabled, 10 hours remaining in the validity period" to remind the user that the package usage time should not exceed the validity period.
  • the user clicks the "Enable” button 631 of the one-day travel package 630 to location A to activate the one-day travel package 630 to location A.
  • a package payment pop-up window 680 pops up, including a "refresh” button 681 and a payment stage prompt 682. The user clicks the "refresh” button 681 to refresh the payment stage prompt 682.
  • the package interface 60 of the mobile phone changes, in which the information corresponding to the 1-day travel package 630 to location A includes a "Close” button 631, the user can close the package 630 by clicking the close button 631.
  • the information corresponding to the package 630 includes an "in use” prompt 632.
  • the VSIM APP of the mobile phone receives the package startup instruction input by the user on the package interface.
  • the package interface 60 includes a one-day travel package 630 to place A.
  • the user can click the enable button 631 corresponding to the package to start and activate the package.
  • the VSIM APP In response to the package startup instruction, the VSIM APP sends a data request to the server to request the data information of the virtual SIM card corresponding to the package.
  • the server receives the data request from the VSIM APP.
  • This data request is used to request data for the virtual SIM card.
  • the server sends the virtual SIM card data to the VSIM APP.
  • VSIM APP receives virtual SIM card data from the server.
  • the data of the virtual SIM card includes but is not limited to one or more of the following: international mobile subscriber identification number, authentication key, authentication and encryption algorithm, location area identification code, mobile subscriber temporary identification code, prohibited access. Enter the public telephone network code, personal identification code, unlock code, billing rate, telephone directory, and record relevant data of user information.
  • VSIM APP can save the data of the virtual SIM card to VSIM TA. Subsequently, VSIM APP can read the data of the virtual SIM card that has been saved in VSIM TA.
  • VSIM APP sends a call request to the telephony service of the framework layer.
  • the calling request is used to request the telephony service to activate/enable the virtual SIM card.
  • the VSIM APP after receiving the data of the virtual SIM card, the VSIM APP also needs to call the telephony service so that the telephony service issues an activation instruction for activating the virtual SIM card.
  • the virtual SIM card can be activated so that the mobile phone can use the activated virtual SIM card.
  • the card implements data network services.
  • the telephony service sends an activation command to the modem.
  • the activation command is used to activate the virtual SIM card.
  • the telephony service can issue activation instructions to the modem through the RIL service of the hardware abstraction layer to instruct the modem to use the virtual SIM card for communication.
  • the modem activates the virtual SIM card.
  • the modem first powers off the specified physical SIM card, and then activates the virtual SIM card.
  • the mobile phone After activating the virtual SIM card, the mobile phone will no longer implement data network services through the physical SIM card, but will access the virtual SIM card through the modem to implement data network services.
  • the process of the modem accessing the virtual SIM card may include the following steps S108-S113:
  • the modem sends an APDU instruction to the RIL service of the hardware abstraction layer.
  • the modem forwards the APDU command to the RIL service through the hardware channel;
  • the APDU command is used to access the virtual SIM card.
  • the RIL service After receiving the APDU instruction, the RIL service sends the APDU instruction to the VSIM TA.
  • the address of VSIM TA can be set in advance, for example, it is set when the mobile phone leaves the factory.
  • the RIL service obtains the address of VSIM TA from VSIM APP.
  • the RIL service uses other methods to obtain the address of the VSIM TA, which is not limited in the embodiment of this application.
  • the RIL service can learn the address of the VSIM TA and send APDU instructions to the VSIM TA based on the address.
  • the RIL service can call the TEE's SDK to send APDU instructions to the VSIM TA.
  • VSIM TA executes APDU instructions based on the data of the virtual SIM card.
  • VSIM TA can parse APDU instructions and obtain the data of the specified virtual SIM card based on the parsing results.
  • VSIM TA returns an APDU response to the RIL service of the hardware abstraction layer.
  • the APDU response carries the data of the virtual SIM card.
  • the data of the virtual SIM card can realize network authentication.
  • the RIL service returns the APDU response to the modem.
  • the modem accesses the data network according to the APDU response.
  • the modem can perform virtual SIM card-related operations such as network authentication based on the virtual SIM card data carried in the APDU response, so that the mobile phone can successfully register with the mobile data network supported by the virtual SIM card. In this way, the phone can use mobile data services to access the Internet.
  • the modem when the modem accesses the virtual SIM card, it sends the APDU instruction for accessing the virtual SIM card to the RIL service through the channel between it and RIL, and the RIL service directly sends the APDU instruction to the VSIM TA, which is equivalent to the modem passing through
  • the hardware abstraction layer can access the virtual SIM card data in the TEE, that is, the virtual SIM card can be accessed at the bottom of the system without going through the application layer and framework layer. Therefore, the access process of this application has gone through The hierarchy is shorter, the access path is shortened, the performance is better, and the power consumption is lower.
  • the VSIM APP since there is no need to rely on the VSIM APP to call the data of the virtual SIM card, during the use of the virtual SIM card, even if the modem frequently accesses the virtual SIM card, the VSIM APP does not need to be resident in the memory, and the memory usage is less.
  • the embodiment of the present application may include the following steps:
  • the mobile phone displays the package interface of the virtual SIM card.
  • the VSIM APP of the mobile phone receives the package start instruction input by the user on the package interface.
  • the package interface 60 includes a one-day travel package 630 to place A.
  • the user can click the enable button 631 corresponding to the package to start and activate the package.
  • the VSIM APP In response to the package startup command, the VSIM APP sends a data request to the server.
  • the server receives the data request from the VSIM APP.
  • This data request is used to request data for the virtual SIM card.
  • the server sends the virtual SIM card data to the VSIM APP.
  • VSIM APP receives virtual SIM card data from the server.
  • VSIM APP can save the data of the virtual SIM card to VSIM TA. Subsequently, VSIM APP can read the data of the virtual SIM card that has been saved in VSIM TA.
  • VSIM APP sends a call request to the telephony service of the framework layer.
  • the calling request is used to request the telephony service to activate/enable the virtual SIM card.
  • the VSIM APP after receiving the data of the virtual SIM card, the VSIM APP also needs to call the telephony service so that the telephony service issues an activation instruction for activating the virtual SIM card.
  • the virtual SIM card can be activated so that the mobile phone can use the activated virtual SIM card.
  • the card implements data network services.
  • the telephony service sends an activation command to the modem.
  • the activation command is used to activate the virtual SIM card.
  • the telephony service can issue activation instructions to the modem through the RIL service of the hardware abstraction layer to instruct the modem to switch the designated card slot to use a virtual SIM card.
  • the modem activates the virtual SIM card.
  • the modem first powers off the specified physical SIM card, and then activates the virtual SIM card.
  • the modem After activating the virtual SIM card, the modem can access the virtual SIM card so that the mobile phone can implement data network services through the virtual SIM card.
  • the process of the modem accessing the virtual SIM card may include the following steps S208-S215:
  • the modem sends an APDU instruction to the RIL service of the hardware abstraction layer.
  • the modem forwards the APDU command to the RIL service through the hardware channel;
  • the RIL service After receiving the APDU instruction, the RIL service sends the APDU instruction to the telephony service of the framework layer.
  • the RIL service forwards APDU instructions to the telephony service through the HIDL interface
  • the telephony service after receiving the APDU command, the telephony service sends the APDU command to VSIM TA.
  • the path address from the telephony service to the VSIM TA can be set in advance, so that the telephony service can learn the path address to the VSIM TA and send APDU instructions to the VSIM TA based on the path address.
  • VSIM TA executes APDU instructions based on the data of the virtual SIM card.
  • VSIM TA can parse APDU instructions and obtain the data of the specified virtual SIM card based on the parsing results.
  • VSIM TA returns an APDU response to the telephony service of the framework layer.
  • the APDU response carries the data of the virtual SIM card.
  • the data of the virtual SIM card includes an authentication quintuple of the virtual SIM card, and the quintuple is used to implement network authentication.
  • the telephony service returns the APDU response to the RIL service.
  • the RIL service returns the APDU response to the modem.
  • the modem should access the data network according to the APDU.
  • the modem can perform authentication and other virtual SIM card-related operations based on the virtual SIM card data carried in the APDU response, so that the mobile phone can successfully register with the mobile data network supported by the virtual SIM card. In this way, the phone can use mobile data services to access the Internet.
  • the modem when the modem accesses the virtual SIM card, it sends an APDU instruction for accessing the virtual SIM card to the RIL service through the channel between it and the RIL, and the RIL service sends an APDU for accessing the virtual SIM card to the telephony service.
  • the telephony service directly sends APDU commands to VSIM TA, which is equivalent to the modem accessing the virtual SIM card data in the TEE through the hardware abstraction layer and framework layer, that is, access to the virtual SIM card can be achieved at the bottom of the system, and the access process goes through
  • the layers are shorter, the performance is better, and the power consumption is lower.
  • the VSIM APP since there is no need to rely on the VSIM APP to call the data of the virtual SIM card, the VSIM APP does not need to be resident during the use of the virtual SIM card and takes up less memory.
  • the exposure probability of virtual SIM card data (such as authentication quintuple data) is reduced, and the risk of being attacked is lower, which can improve the security of electronic devices.
  • the apparatus may include memory and one or more processors.
  • the memory is coupled to the processor.
  • the memory is used to store computer program code, which includes computer instructions.
  • the processor executes the computer instructions, the electronic device can perform each function or step performed by the mobile phone in the above method embodiment.
  • the structure of the electronic device may refer to the structure of the electronic device 102 shown in FIG. 2 .
  • the core structure of the electronic device can be represented as the structure shown in Figure 7.
  • the electronic device includes: a processing module 1301, a storage module 1302 and a communication module 1303.
  • the processing module 1301 may include at least one of a central processing unit (CPU), an application processor (Application Processor, AP), or a communication processor (Communication Processor, CP).
  • the processing module 1301 may perform operations or data processing related to control and/or communication of at least one of the other elements of the user electronic device. Specifically, the processing module 1301 can be used to control the content displayed on the home screen according to certain trigger conditions. Or determine what appears on the screen based on preset rules.
  • the processing module 1301 is also used to process the input instructions or data, and determine the display style according to the processed data.
  • the processing module 1301 can be implemented as the processor 110 shown in FIG. 2 .
  • the storage module 1302 may include volatile memory and/or non-volatile memory.
  • the storage module is used to store at least one related instruction or data among other modules of the user electronic device.
  • the storage module 1302 can be implemented as the memory 210 in the electronic device shown in FIG. 2 .
  • the communication module 1303 is used to support the personal terminal to communicate with other personal terminals (through the communication network).
  • the communication module may be connected to the network via wireless communication or wired communication to communicate with other personal terminals or network servers.
  • Wireless communications may employ at least one of cellular communications protocols, such as Long Term Evolution (LTE), Long Term Evolution-Advanced (LTE-A), Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Universal Mobile Communications System (UMTS), Wireless Broadband (WiBro) or Global System for Mobile Communications (GSM).
  • Wireless communications may include, for example, short-range communications.
  • Short-range communication may include at least one of Wireless Fidelity (Wi-Fi), Bluetooth, Near Field Communication (NFC), Magnetic Stripe Transmission (MST), or GNSS.
  • the device shown in Figure 7 may also include more or fewer components, or split some components, such as input modules, display modules, etc., or have other ways of laying out components, which are not limited by the embodiment of the present application.
  • the chip system includes at least one processor 1401 and at least one interface circuit 1402.
  • the processor 1401 and the interface circuit 1402 may be interconnected by wires.
  • interface circuitry 1402 may be used to receive signals from other devices, such as memory of an electronic device.
  • interface circuit 1402 may be used to send signals to other devices (eg, processor 1401).
  • the interface circuit 1402 can read instructions stored in the memory and send the instructions to the processor 1401.
  • the electronic device can be caused to perform various steps in the above embodiments.
  • the chip system may also include other discrete devices, which are not specifically limited in the embodiments of this application.
  • Embodiments of the present application also provide a computer storage medium.
  • the computer storage medium includes computer instructions.
  • the electronic device When the computer instructions are run on the above-mentioned electronic device, the electronic device causes the electronic device to perform various functions or steps performed by the mobile phone in the above-mentioned method embodiments. .
  • Embodiments of the present application also provide a computer program product.
  • the computer program product When the computer program product is run on a computer, it causes the computer to perform various functions or steps performed by the mobile phone in the above method embodiments.
  • the disclosed devices and methods can be implemented in other ways.
  • the device embodiments described above are only illustrative.
  • the division of modules or units is only a logical function division.
  • there may be other division methods for example, multiple units or components may be The combination can either be integrated into another device, or some features can be omitted, or not implemented.
  • the mutual coupling or Direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.
  • the units described as separate components may or may not be physically separated.
  • the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place, or they may be distributed to multiple different places. . Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.
  • each functional unit in each embodiment of the present application can be integrated into one processing unit, each unit can exist physically alone, or two or more units can be integrated into one unit.
  • the above integrated units can be implemented in the form of hardware or software functional units.
  • the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it may be stored in a readable storage medium.
  • the technical solutions of the embodiments of the present application are essentially or contribute to the existing technology, or all or part of the technical solution can be embodied in the form of a software product, and the software product is stored in a storage medium , including several instructions to cause a device (which can be a microcontroller, a chip, etc.) or a processor to execute all or part of the steps of the methods described in various embodiments of this application.
  • the aforementioned storage media include: U disk, mobile hard disk, read only memory (ROM), random access memory (RAM), magnetic disk or optical disk and other media that can store program code.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Telephone Function (AREA)

Abstract

本申请提供一种虚拟用户识别卡的访问方法及装置，能够缩短虚拟用户识别卡的访问路径，降低功耗。所述方法应用于电子设备，电子设备中包括调制解调器modem，所述方法包括：所述modem通过第一服务向第一应用发送访问指令，所述访问指令用于访问虚拟用户识别SIM卡的数据；所述第一服务运行于框架层和/或硬件抽象层中；所述第一应用运行于可信执行环境TEE中；所述modem通过所述第一服务从所述第一应用接收所述访问指令的响应，所述响应携带所述虚拟SIM卡的数据；所述modem根据所述响应接入所述虚拟SIM卡对应的移动数据网络。

Description

一种虚拟用户识别卡的访问方法及装置
本申请要求于2022年07月29日提交国家知识产权局、申请号为202210911262.8、申请名称为“一种虚拟用户识别卡的访问方法及装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请实施例涉及终端技术领域，尤其涉及一种虚拟用户识别卡的访问方法及装置。
背景技术
随着国内出境旅游的人数越来越多，出境移动数据服务越来越成为一种出境的基本诉求。对此，手机厂家或者第三方应用厂商都提供了一种不需要插入实体用户识别卡(subscriber identity module，SIM)的出境移动数据服务。一般来说，出境数据服务可以通过虚拟SIM卡技术实现，比如，在手机上存储虚拟SIM卡的卡数据，用户到了境外之后，用户的手机使用虚拟SIM卡的卡数据接入到当地签约运营商，提供数据接入服务。
相关技术中，调制解调器(modem)通过应用协议数据单元(application protocol data unit，APDU)指令访问虚拟SIM卡。涉及调用指令在多个层或功能模块之间的转发、处理，调用过程较为复杂，导致访问性能比较差。
发明内容
本申请提供一种虚拟用户识别卡的访问方法及装置，能够缩短虚拟用户识别卡的访问路径，降低功耗。
为实现上述技术目的，本申请采用如下技术方案：
第一方面，本申请提供了一种虚拟用户识别卡的访问方法，该方法应用于电子设备，电子设备中包括调制解调器modem，该方法包括：modem通过第一服务向第一应用发送用于访问SIM卡的数据的访问指令，之后，modem通过第一服务从第一应用接收访问指令的响应，该响应携带虚拟SIM卡的数据；进而modem根据该响应接入虚拟SIM卡对应的移动数据网络。其中，第一服务运行于框架层和/或硬件抽象层中；第一应用运行于可信执行环境TEE中。
也就是说，调制解调器modem通过框架层和/或硬件抽象层中的第一服务，向虚拟用户识别卡可信应用(virtual subscriber identity module trusted application，VSIM TA)(即第一应用)发送APDU指令(即访问指令)，VSIM TA运行于可信执行环境TEE中。之后，modem通过第一服务从VSIM TA接收APDU指令的响应(即访问指令的响应)。其中，APDU指令的响应携带虚拟SIM卡的数据，modem根据APDU指令的响应接入虚拟SIM卡对应的移动数据网络。modem通过框架层和/或硬件抽象层中的第一服务就可以发送APDU指令，不用经过应用层的服务，APDU指令访问过程历经的层级更短，访问路径短，功耗低，性能好。并且，访问指令不用经过应用层的服务，因此，虚拟SIM卡的使用过程中，即使modem频繁访问虚拟SIM卡，也不需要应用层的服务常驻内存，内存占用更少。此外，由于访问指令以及访问指令响应的访问路径缩短，因此虚拟SIM卡的数据的暴露概率降低，被攻击的风险更低，能够提升电子设备的安全性。
在一种可能的实现方式中，第一服务包括硬件抽象层中的无线接口层服务和/或框架层中的电话服务。
示例性的，第一服务包括硬件抽象层中的无线接口层服务，或者第一服务包括硬件抽象层中的无线接口层服务和框架层中的电话服务。
在一种可能的实现方式中，modem通过第一服务向第一应用发送访问指令，包括：modem通过硬件抽象层中的无线接口层服务向第一应用发送访问指令；modem通过硬件抽象层中的无线接口层服务和框架层中的电话服务向第一应用发送访问指令。
在一种可能的实现方式中，该方法还包括：第一服务获取第一应用的地址；modem通过第一服务向第一应用发送访问指令，包括：modem通过第一服务根据第一应用的地址，向第一应用发送访问指令。
示例性的，第一应用的地址可以为第一应用预置在系统中的文件路径。也就是说，modem将访问指令发送到第一服务，第一服务获取第一应用的文件路径，第一服务根据第一应用的文件路径，将访问指令发送到第一应用中。
在一种可能的实现方式中，第一服务获取第一应用的地址，包括：第一服务获取预先配置的第一应用的地址；或者，第一服务从应用层获取第一应用的地址。
示例性的，第一应用的地址可以为第一应用预置在系统里的文件路径。第一服务获取预先配置的第一应用的地址，也可以在激活modem时，应用层将第一应用的地址发送给第一服务。
在一种可能的实现方式中，modem通过第一服务向第一应用发送访问指令，包括：modem通过第一服务调用TEE的软件开发工具包(software development kit，SDK)向第一应用发送访问指令。
示例性的，第一服务从modem接收访问指令之后,可以通过调用TEE的SDK向第一应用转发该访问指令。
第二方面，本申请提供一种虚拟用户识别卡的访问装置，包括：SIM卡管理模块、框架层、硬件抽象层、可信执行环境TEE；其中，SIM卡管理模块，用于调用框架层和/或硬件抽象层中的第一服务；框架层和/或硬件抽象层，用于通过第一服务向TEE中的第一应用发送访问指令，访问指令用于访问虚拟用户识别SIM卡的数据；框架层和/或硬件抽象层，还用于通过第一服务从TEE中的第一应用接收访问指令的响应，响应携带虚拟SIM卡的数据；SIM卡管理模块，还用于回调框架层和/或硬件抽象层中的第一服务；SIM卡管理模块，还用于根据响应接入数据网络；TEE，用于运行第一应用。
第三方面，本申请提供一种虚拟用户识别卡的访问装置，包括：处理器，存储器和调制解调器modem，存储器与所述处理器耦合，存储器用于存储计算机程序代码，计算机程序代码包括计算机指令，当处理器从存储器中读取计算机指令，使得装置执行第一方面或第一方面中任意一种实施方式的方法。
第四方面，本申请提供一种计算机可读存储介质。计算机可读存储介质存储有计算机程序(也可称为指令或代码)，当该计算机程序被电子设备执行时，使得电子设备执行第一方面或第一方面中任意一种实施方式的方法。
第五方面，本申请提供一种计算机程序产品，当计算机程序产品在电子设备上运行时，使得电子设备执行第一方面或第一方面中任意一种实施方式的方法。
第六方面，本申请提供一种芯片系统，包括至少一个处理器和至少一个接口电路，至少一个接口电路用于执行收发功能，并将指令发送给至少一个处理器，当至少一个处理器执行指令时，至少一个处理器执行第一方面或第一方面中任意一种实施方式的方法。
附图说明
图1为本申请实施例提供的通信系统的示意图；
图2为本申请实施例提供的电子设备的结构示意图；
图3为本申请实施例提供的电子设备的一种软件架构图；
图4为本申请实施例提供的一种虚拟用户识别卡的访问方法流程图；
图5为本申请实施例提供的虚拟SIM卡的套餐界面示意图；
图6为本申请实施例提供的另一种虚拟用户识别卡的访问方法流程图；
图7为本申请实施例提供的一种电子设备装置的结构示意图；
图8为本申请实施例提供的一种芯片系统的结构示意图。
具体实施方式
下面结合附图对本申请实施例提供的一种虚拟用户识别卡的访问方法及装置进行详细地描述。
本申请实施例的描述中所提到的术语“包括”和“具有”以及它们的任何变形，意图在于覆盖不排他的包含。例如包含了一系列步骤或单元的过程、方法、系统、产品或设备没有限定于已列出的步骤或单元，而是可选地还包括其他没有列出的步骤或单元，或可选地还包括对于这些过程、方法、产品或设备固有的其它步骤或单元。
本申请实施例中，“示例性的”或者“例如”等词用于表示作例子、例证或说明。本申请实施例中被描述为“示例性的”或者“例如”的任何实施例或设计方案不应被解释为比其它实施例或设计方案更优选或更具优势。确切而言，使用“示例性的”或者“例如”等词旨在以具体方式呈现相关概念。
在本申请实施例的描述中，除非另有说明，“多个”的含义是指两个或两个以上。本文中的“和/或”仅仅是一种描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B，可以表示：单独存在A，同时存在A和B，单独存在B这三种情况。
本申请实施例可以应用在使用虚拟SIM卡技术实现数据网络服务(比如蜂窝网络服务)的系统中，通过虚拟SIM卡可以实现不需要插入实体SIM卡的数据网络服务。可选的，数据网络服务包括：使用移动数据服务上网、接打电话，收发短信等。图1示出了基于虚拟SIM卡的一种通信系统的示例性架构。如图1，该系统包括网络设备101、电子设备102、服务器103。示例性的，电子设备102通过网络设备101接入网络后，电子设备102再访问服务器103。
可选的，电子设备102包括但不限于各种支持虚拟SIM卡的设备。比如，电子设备102可以是手机、平板电脑、可穿戴设备、车载设备、增强现实(augmented reality，AR)/虚拟现实(virtual reality，VR)设备、笔记本电脑、超级移动个人计算机(ultra-mobile personal computer，UMPC)、上网本、个人数字助理(personal digital assistant，PDA)等电子设备上，本申请实施例对终端的具体类型不作任何限制。
本申请实施例中，电子设备102可以通过虚拟SIM卡技术实现数据网络通信。作为一种可能的实现方式，电子设备102中可以安装VSIM APP。VSIM APP可以用于提供虚拟SIM卡套餐的购买、激活等功能。示例性的，用户需要使用虚拟SIM卡实现电子设备102通信时，可以打开VSIM APP，手机显示VSIM APP的套餐界面。用户可以点击启动相应的虚拟SIM卡套餐，响应于用户的点击启动套餐操作，VSIM APP可以向服务器103请求虚拟SIM卡的数据，并从服务器103接收虚拟SIM卡的数据。电子设备102可以根据虚拟SIM卡的数据执行网络鉴权等操作，以使得终端注册到数据网络中，获取数据网络服务。
可选的，服务器103可以用于提供虚拟SIM卡的套餐订购、虚拟SIM卡的数据下载等服务。示例性的，向电子设备102发送虚拟SIM卡的数据，以使得电子设备102根据虚拟SIM卡的数据接入网络设备。可选的，虚拟SIM数据可以是：固定存放的数据(或称长期数据)和短期存放的数据(或称暂存数据)。通常，固定数据在电子设备102被出售之前由SIM卡厂商写入电子设备102。可选的，固定数据包括国际移动用户识别号、鉴权密钥、鉴权数据和加密算法等。可选的，用户鉴权时，运营商(蜂窝网络的运营商)发到电子设备102的鉴权数据以及虚拟SIM卡的鉴权秘钥可以生成鉴权五元组，鉴权五元组返回给运营商由运营商认证，实现网络鉴权。可选的，鉴权五元组包括：随机数、期望响应，加密密钥、完整性密钥和鉴权标记。暂存数据包括但不限于如下数据：位置区域识别码、移动用户暂时识别码、禁止接入的公共电话网代码、相关的业务代码,如个人识别码、解锁码、计费费率、电话号码簿,记录用户资料的相关数据。
可选的，网络设备包括但不限于各类型基站，用于为电子设备102提供数据网络(比如蜂窝网络)服务。
示例性的，图2示出了电子设备102的结构示意图。电子设备102可以包括处理器210，外部存储器接口220，内部存储器221，通用串行总线(universal serial bus，USB)接口230，充电管理模块240，电源管理模块241，电池242，天线1，天线2，移动通信模块250，无线通信模块260，以及用户标识模块(subscriber identification module，SIM)卡接口270等。
可以理解的是，本申请实施例示意的结构并不构成对电子设备102的具体限定。在本申请另一些实施例中，电子设备102可以包括比图示更多或更少的部件，或者组合某些部件，或者拆分某些部件，或者不同的部件布置。图示的部件可以以硬件，软件或软件和硬件的组合实现。
处理器210可以包括一个或多个处理单元，例如：处理器210可以包括应用处理器(application processor，AP)，调制解调处理器，图形处理器(graphics processing unit，GPU)，图像信号处理器(image signal processor，ISP)，控制器，存储器，视频编解码器，数字信号处理器(digital signal processor，DSP)，基带处理器，和/或神经网络处理器(neural-network processing unit，NPU)等。其 中，不同的处理单元可以是独立的器件，也可以集成在一个或多个处理器中。
其中，控制器可以是电子设备102的神经中枢和指挥中心。控制器可以根据指令操作码和时序信号，产生操作控制信号，完成取指令和执行指令的控制。
处理器210中还可以设置存储器，用于存储指令和数据。在一些实施例中，处理器210中的存储器为高速缓冲存储器。该存储器可以保存处理器210刚用过或循环使用的指令或数据。如果处理器210需要再次使用该指令或数据，可从存储器中直接调用。避免了重复存取，减少了处理器210的等待时间，因而提高了系统的效率。
在一些实施例中，处理器210可以包括一个或多个接口。接口可以包括集成电路(inter-integrated circuit，I2C)接口，集成电路内置音频(inter-integrated circuit sound，I2S)接口，脉冲编码调制(pulse code modulation，PCM)接口，通用异步收发传输器(universal asynchronous receiver/transmitter，UART)接口，移动产业处理器接口(mobile industry processor interface，MIPI)，通用输入输出(general-purpose input/output，GPIO)接口，用户标识模块(subscriber identity module，SIM)接口，和/或通用串行总线(universal serial bus，USB)接口等。
其中，UART接口是一种通用串行数据总线，用于异步通信。该总线可以为双向通信总线。他将要传输的数据在串行通信与并行通信之间转换。在一些实施例中，UART接口通常被用于连接处理器210与无线通信模块260。例如：处理器210通过UART接口与无线通信模块260中的蓝牙模块通信，实现蓝牙功能。
USB接口230是符合USB标准规范的接口，具体可以是Mini USB接口，Micro USB接口，USB Type C接口等。USB接口230可以用于连接充电器为电子设备102充电，也可以用于电子设备102与外围设备之间传输数据。也可以用于连接耳机，通过耳机播放音频。该接口还可以用于连接其他电子设备，例如AR设备等。
可以理解的是，本申请实施例示意的各模块间的接口连接关系，只是示意性说明，并不构成对电子设备102的结构限定。在本申请另一些实施例中，电子设备102也可以采用上述实施例中不同的接口连接方式，或多种接口连接方式的组合。
充电管理模块240用于从充电器接收充电输入。其中，充电器可以是无线充电器，也可以是有线充电器。在一些有线充电的实施例中，充电管理模块240可以通过USB接口230接收有线充电器的充电输入。在一些无线充电的实施例中，充电管理模块240可以通过电子设备102的无线充电线圈接收无线充电输入。充电管理模块240为电池242充电的同时，还可以通过电源管理模块241为电子设备102供电。
电源管理模块241用于连接电池242，充电管理模块240与处理器210。电源管理模块241接收电池242和/或充电管理模块240的输入，为处理器210，内部存储器221，外部存储器，和无线通信模块260等供电。电源管理模块241还可以用于监测电池容量，电池循环次数，电池健康状态(漏电，阻抗)等参数。在其他一些实施例中，电源管理模块241也可以设置于处理器210中。在另一些实施例中，电源管理模块241和充电管理模块240也可以设置于同一个器件中。
电子设备102的无线通信功能可以通过天线1，天线2，移动通信模块250，无线通信模块260，调制解调处理器以及基带处理器等实现。
天线1和天线2用于发射和接收电磁波信号。电子设备102中的每个天线可用于覆盖单个或多个通信频带。不同的天线还可以复用，以提高天线的利用率。例如：可以将天线1复用为无线局域网的分集天线。在另外一些实施例中，天线可以和调谐开关结合使用。
移动通信模块250可以提供应用在电子设备102上的包括2G/3G/4G/5G等无线通信的解决方案。移动通信模块250可以包括至少一个滤波器，开关，功率放大器，低噪声放大器(low noise amplifier，LNA)等。移动通信模块250可以由天线1接收电磁波，并对接收的电磁波进行滤波，放大等处理，传送至调制解调处理器进行解调。移动通信模块250还可以对经调制解调处理器调制后的信号放大，经天线1转为电磁波辐射出去。在一些实施例中，移动通信模块250的至少部分功能模块可以被设置于处理器210中。在一些实施例中，移动通信模块250的至少部分功能模块可以与处理器210的至少部分模块被设置在同一个器件中。
在另一些实施例中，移动通信模块250的至少部分功能模块可以设置在基带芯片(baseband  processor，BP)中。在本申请的一些实施例中，移动通信模块250(例如基带芯片)还可以提供蜂窝网络射频相关功能。基带芯片负责协调控制与基站的通信，收发与基站的通信数据，对数据进行编解码。
在一些实施例中，基带芯片可以与应用芯片(application processor，AP)进行交互。
在一些实施例中，移动通信模块250(例如基带芯片)包括调制解调器。可选的，调制解调器可以包括调制器和解调器。示例性的，调制解调器包括SIM卡管理模块，SIM卡管理模块用于管理SIM卡。在一些实施例中，调制解调器可以和SIM模块(比如SIM卡接口)连接，进而调制解调器可以对SIM卡进行操作。
示例性的，调制解调器可以提供虚拟SIM卡的激活去激活功能，激活虚拟SIM卡时如果指定卡槽中有实体卡的话，调制解调器可以先指示下电该实体卡，再通过调制解调器与RIL之间的通道，将虚拟SIM卡激活的指令转发到虚拟SIM卡，以便激活虚拟SIM卡。在一些实施例中，调制解调器可以是独立的器件。在另一些实施例中，调制解调器可以独立于处理器210。比如，与移动通信模块250或其他功能模块设置在同一个器件中。
无线通信模块260可以提供应用在电子设备102上的包括无线局域网(wireless local area networks，WLAN)(如无线保真(wireless fidelity，Wi-Fi)网络)，蓝牙(bluetooth，BT)，全球导航卫星系统(global navigation satellite system，GNSS)，调频(frequency modulation，FM)，近距离无线通信技术(near field communication，NFC)，红外技术(infrared，IR)等无线通信的解决方案。无线通信模块260可以是集成至少一个通信处理模块的一个或多个器件。无线通信模块260经由天线2接收电磁波，将电磁波信号调频以及滤波处理，将处理后的信号发送到处理器210。无线通信模块260还可以从处理器210接收待发送的信号，对其进行调频，放大，经天线2转为电磁波辐射出去。
在一些实施例中，电子设备102的天线1和移动通信模块250耦合，天线2和无线通信模块260耦合，使得电子设备102可以通过无线通信技术与网络以及其他设备通信。无线通信技术可以包括全球移动通讯系统(global system for mobile communications，GSM)，通用分组无线服务(general packet radio service，GPRS)，码分多址接入(code division multiple access，CDMA)，宽带码分多址(wideband code division multiple access，WCDMA)，时分码分多址(time-division code division multiple access，TD-SCDMA)，长期演进(long term evolution，LTE)，BT，GNSS，WLAN，NFC，FM，和/或IR技术等。GNSS可以包括全球卫星定位系统(global positioning system，GPS)，全球导航卫星系统(global navigation satellite system，GLONASS)，北斗卫星导航系统(beidou navigation satellite system，BDS)，准天顶卫星系统(quasi-zenith satellite system，QZSS)和/或卫星增强系统(satellite based augmentation systems，SBAS)。
电子设备102通过GPU，以及应用处理器等实现显示功能。GPU用于执行数学和几何计算，用于图形渲染。处理器210可包括一个或多个GPU，其执行程序指令以生成或改变显示信息。
数字信号处理器用于处理数字信号，除了可以处理数字图像信号，还可以处理其他数字信号。例如，当电子设备102在频点选择时，数字信号处理器用于对频点能量进行傅里叶变换等。
外部存储器接口220可以用于连接外部存储卡，例如Micro SD卡，实现扩展电子设备102的存储能力。外部存储卡通过外部存储器接口220与处理器210通信，实现数据存储功能。例如将音乐，视频等文件保存在外部存储卡中。
内部存储器221可以用于存储计算机可执行程序代码，可执行程序代码包括指令。可选的，内部存储器包括安全芯片，用于存储虚拟SIM卡的相关数据。处理器210通过运行存储在内部存储器221的指令，从而执行电子设备102的各种功能应用以及数据处理。内部存储器221可以包括存储程序区和存储数据区。其中，存储程序区可存储操作系统，至少一个功能所需的应用程序(比如声音播放功能，图像播放功能等)等。存储数据区可存储电子设备102使用过程中所创建的数据(比如音频数据，电话本等)等。此外，内部存储器221可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件，闪存器件，通用闪存存储器(universal flash storage，UFS)等。
SIM卡接口270用于连接实体SIM卡。实体SIM卡可以通过插入SIM卡接口270，或从SIM 卡接口270拔出，实现和电子设备102的接触和分离。电子设备102可以支持1个或N个SIM卡接口，N为大于1的正整数。SIM卡接口270可以支持Nano SIM卡，Micro SIM卡，SIM卡等。同一个SIM卡接口270可以同时插入多张实体SIM卡。多张实体SIM卡的类型可以相同，也可以不同。SIM卡接口270也可以兼容不同类型的实体SIM卡。SIM卡接口270也可以兼容外部存储卡。电子设备102通过实体SIM卡和网络交互，实现通话以及数据通信等功能。
在本申请的一些实施例中，SIM卡接口可以实现为实体卡卡槽。实体卡卡槽与基带芯片之间可以建立诸如硬件通道。可选的，基带芯片与实体卡卡槽之间可以交互应用协议数据单元(application protocol dataunit，APDU)指令。
在本申请的一些实施例中，实体SIM卡可以与移动通信模块250(例如基带芯片)之间建立通信通道(比如硬件通道)，如此，基带芯片可以通过该通信通道向SIM卡发送APDU指令，以便访问实体SIM卡。
在本申请的一些实施例中，电子设备102可以采用VSIM卡，也称虚拟用户身份识别卡、虚拟智能卡、虚拟SIM卡。在一些示例中，虚拟SIM卡可代替实体的SIM卡，实现实体SIM卡的功能。具体的，可以在移动终端内存储虚拟SIM卡的数据，待用户激活虚拟SIM卡之后，移动终端可以实现无线通信。如此，用户无需向移动终端插入实体SIM卡，可以提升使用便捷性。
示例性的。虚拟SIM卡可以存储用户数据，如国际移动用户识别码(international mobile subscriber identification number，简称：IMSI)等。
如图3示出了上述电子设备的一种示例性软件架构。可选的，软件架构可以是分层架构或其他架构。以分层架构为例，分层架构可将软件分成若干个层，每一层都有清晰的角色和分工。层与层之间通过软件接口通信。在一些实施例中，分层系统可包括三层，从上至下分别为应用程序层(简称应用层)310，应用程序框架层(简称框架层)320，以及硬件抽象层330。
其中，应用层310可以包括一系列应用程序包。例如，应用程序包可以为相机，图库，日历，通话，地图，导航，WLAN，蓝牙，音乐，视频，短信息以及桌面启动(launcher)等应用程序。
本申请实施例中，应用层310可以包括提供虚拟SIM卡业务的应用程序。示例性的，如图3，应用层包括虚拟用户识别卡应用程序(virtual subscriber identity module application，VSIM APP)311。VSIM APP311可以用于提供虚拟SIM卡套餐的购买、激活等功能。
框架层320为应用程序层的应用程序提供应用编程接口(application programming interface，API)和编程框架。应用程序框架层包括一些预先定义的函数。
本申请实施例中，示例性的，如图3所示，框架层320可以包括telephony服务321。
telephony服务321可以提供虚拟SIM卡的激活、去激活业务。作为一种可能的实现方式，telephony服务321通过HIDL接口350向RIL服务331发送激活请求(或者去激活请求)，RIL服务331可以将激活请求(或去激活请求)转换为对应运营商调制解调器能够识别的指令。可选的，HIDL接口用于指定HAL与其服务之间的接口。
可选的，telephony服务321还可以提供如下业务：
1、通话业务：比如，手机拨打电话的功能。可选的，包括主叫(mobile origination call，MO)，即拨打电话的发起方；被叫(mobile termination call，MT)，即电话的接听方；高清语音通话(volte call)等。
2、数据业务：比如，通过数据业务上网相关的功能。可选的，包括数据网络的设置、接入点名称(access point name，APN)的设置等。
3、补充业务：语音信箱、双卡选择、呼叫转移、呼叫限制等。
在一些实施例中，telephony服务321可以与TEE通信。作为一种可能的实现方式，telephony服务321可以通过TEE提供的软件开发工具包(Software Development Kit，SDK)访问TEE中的VSIM TA。可选的，不同操作系统、编程语言有不同的SDK形式。示例性的，Linux操作系统下C\C++语言的SDK通常为动态链接库的形式。如此，telephony服务321从调制解调器接收APDU指令之后,可以通过调用TEE的SDK向VSIM TA转发APDU指令。
可选的，框架层320还可以包括内容提供器，视图(view)系统，电话管理器，资源管理器，通知管理器等(附图未示出)。
可选的，应用层310与框架层320之间可以通过binder接口340接口进行通信。可选的，binder接口是程序内用于网络通信的底层接口，网络的原始数据可以通过binder接口发送和接收。
硬件抽象层(hardware abstraction layer，HAL)330：提供各种硬件的标准接口，将设备硬件的功能开放给更高级别的Android框架。示例性的，如图3，硬件抽象层可以包括无线接口层(radio interface layer，RIL)服务331。RIL服务331可以适配不同芯片运营商的调制解调器，为框架层320的telephony服务321提供标准的蜂窝网络接口。
可选的，硬件抽象层330与框架层320之间可以通过HIDL接口350接口进行通信。可选的，HIDL接口350是一种自定义接口。
在一些实施例中,RIL服务331的实现可以与调制解调器362配套。示例性的，调制解调器362可以由基带芯片运营商提供，基带芯片运营商为各个下游运营商(比如手机运营商)提供配套的RIL服务331的实现代码。
在一些实施例中，RIL服务331可以与TEE通信。作为一种可能的实现方式，RIL服务331可以通过TEE提供的软件开发工具包(software development kit，SDK)访问TEE中的VSIM TA。可选的，不同操作系统、编程语言有不同的SDK形式。示例性的，Linux操作系统下C\C++语言的SDK通常为动态链接库的形式。如此，RIL服务331从调制解调器接收APDU指令之后,可以通过调用TEE的SDK向VSIM TA转发APDU指令。
上述图3仅为电子设备的软件架构的一种可能示例，并不构成对电子设备的软件架构的限制。可以理解，电子设备的软件架构还可以为其他。比如，在分层软件架构中，还可划分为更多层或更少层，并且每个层的具体功能不做限定。
可信执行环境(trusted execution environment，TEE)380：提供一个安全的可信执行环境，可确保各种敏感数据在一个可信环境中被存储和受到保护。
电子设备中涉及数据安全的功能的实现，需要依赖于电子设备内芯片的TEE380，芯片的可信执行环境通过混合使用硬件和软件的方法在物理上隔离出两个并存的执行环境，或者通过共享部分或全部硬件的方式形成在逻辑上彼此隔离的两个并存的执行环境，即：普通的非保密执行环境和安全的保密环境。其中，普通非保密执行环境又称为普通执行环境(rich execution environment，REE)，安全的保密环境又称为TEE。如图3所示，虚拟用户识别卡可信应用(virtual subscriber identity module trusted application，VSIM TA)381运行于TEE中，VSIM TA可提供安全的服务(比如安全存储和加密)。
示例性的，电子设备可以从服务器获取虚拟SIM卡的数据。可选的，为了保障虚拟SIM卡的数据的安全性，服务器加密SIM卡的数据，并将加密后的SIM卡数据发送给电子设备。电子设备接收虚拟SIM卡的数据之后，VSIM TA 381对虚拟SIM卡的数据进行解密和处理，并可以将处理后的虚拟SIM卡的数据存储在TEE中。
之后，在SIM卡激活后，VSIM TA361可以接收用于访问虚拟SIM卡数据的APDU指令，并向调制解调器返回针对APDU指令的APDU响应，调制解调器根据APDU响应接入数据网络。
图3还示出了HAL330与硬件设备(hardware)360之间的连接关系。硬件设备360是计算机系统中由电子，机械和光电元件等组成的各种物理装置的总称。
作为一种可能的实现方式，HAL与硬件设备360通过硬件通道370传输数据。
示例性的，硬件设备360包括实体卡卡槽361以及调制解调器362。示例性的，调制解调器262中包括SIM卡管理模块363。
调制解调器362与实体卡卡槽361之间建立硬件通道370，可选的，调制解调器362与实体卡卡槽361之间可以交互APDU消息。
示例性地，APDU消息有两类：一类是APDU指令，另一类是APDU响应。一般来说，调制解调器262在发送一个APDU指令之后，会接收到一个对端(例如VSIM TA 361)发送的APDU响应，这种通信方式可称为指令响应对(command-response pair)。APDU指令可以由调制解调器262发出，APDU响应可以由对端例如VSIM TA 361发出。
本领域技术人员可以理解，APDU消息的具体结构及定义在与SIM卡相关的标准中有详细说明，在此不予赘述。
以下实施例将以电子设备102为手机为例，对本申请实施例提供的访问虚拟SIM卡的方法进行阐述。
如图4所示，以支持虚拟SIM卡业务的电子设备为手机为例，本申请实施例可以包括如下步骤：
S101、手机显示虚拟SIM卡的套餐界面。
示例性的，用户可以打开手机中安装的VSIM APP，打开VSIM APP之后，手机可以显示图5所示的套餐界面601。该套餐界面601包括一个或多个虚拟SIM卡的套餐的信息。比如，A地1日行套餐630、B国7日行套餐610、B国7日行套餐620、B国1GB套餐640、B国7日行套餐650、A地7日行套餐660、C国7日行套餐670等。
可选的，用户也可以在设置中选择一个或多个虚拟SIM卡的套餐，手机自动跳转到VSIM APP执行操作。本申请实施例对进入虚拟SIM卡的套餐界面的方法不做具体限制。
用户可以通过套餐对应的相应控件对相应套餐进行设置。比如，如图5的(a)，手机显示套餐界面60。用户点击B国7日行套餐610的“关闭”按钮611，即可停用该B国7日行套餐610。可选的，B国7日行套餐610中包括套餐到期提示612，比如“已启用，有效期剩余10小时”，以此来提醒用户套餐使用时间，不要超过有效期。
再比如，如图5的(b)，可选的，若想再次使用该B国7日行套餐610，可点击B国7日行套餐的“继续使用”按钮613，即可重新启用该B国7日行套餐610。可选的，B国7日行套餐可分为普通套餐610及特定套餐620。可选的，特定套餐620有附加限制条件。比如，“支持5G”、“企业支付”“仅限本地使用”等。
再比如，如图5的(b)所示，用户点击A地1日行套餐630的“启用”按钮631，即可启用A地1日行套餐630。可选的，启用A地1日行套餐630时，弹出套餐支付弹窗680，包括“刷新”按钮681以及，支付阶段提示682，用户点击“刷新”按钮681，即可刷新支付阶段提示682。
可选的，如图5的(c)所示，手机启用A地1日行套餐630之后，手机的套餐界面60发生变化，其中，A地1日行套餐630对应的信息包括“关闭”按钮631，用户可以通过点击关闭按钮631关闭该套餐630。此外，套餐630对应的信息包括“使用中”提示632。
S102、手机的VSIM APP接收用户在套餐界面输入的套餐启动指令。
示例性的，如图5的(b)，套餐界面60包括A地1日行套餐630。用户可以点击该套餐对应的启用按钮631，以启动、激活该套餐。
S103、响应于套餐启动指令，VSIM APP向服务器发送数据请求，以请求获取该套餐对应的虚拟SIM卡的数据信息。
相应的，服务器从VSIM APP接收数据请求。该数据请求用于请求该虚拟SIM卡的数据。
S104、服务器向VSIM APP发送虚拟SIM卡的数据。
相应的，VSIM APP从服务器接收虚拟SIM卡的数据。
可选的，虚拟SIM卡的数据包括但不限于以下一种或多种：国际移动用户识别号、鉴权密钥、鉴权和加密算法、位置区域识别码、移动用户暂时识别码、禁止接入的公共电话网代码、个人识别码、解锁码、计费费率、电话号码簿,记录用户资料的相关数据。
作为一种可能的实现方式，VSIM APP接收虚拟SIM卡的数据之后，可以将虚拟SIM卡的数据保存到VSIM TA中。后续，VSIM APP可以读取VSIM TA中已经保存的虚拟SIM卡的数据。
S105、VSIM APP向框架层的telephony服务发送调用请求。
其中，调用请求用于请求telephony服务激活/使能虚拟SIM卡。
应理解，VSIM APP接收虚拟SIM卡的数据之后，还需要调用telephony服务，以使得telephony服务下发用于激活虚拟SIM卡的激活指令，如此，可以激活虚拟SIM卡，以便手机通过激活的虚拟SIM卡实现数据网络服务。
S106、telephony服务向调制解调器发送激活指令。
其中，激活指令用于激活虚拟SIM卡。
作为一种可能的实现方式，telephony服务可以通过硬件抽象层的RIL服务向调制解调器下发激活指令，以指示调制解调器使用虚拟SIM卡进行通信。
S107、响应于激活指令，调制解调器激活虚拟SIM卡。
作为一种可能的实现方式，如果指定的SIM卡槽中有实体SIM卡的话，调制解调器先下电该指定的实体SIM卡，再将虚拟SIM卡激活。
激活虚拟SIM卡之后，手机后续不再通过实体SIM卡实现数据网络服务，而是通过调制解调器访问虚拟SIM卡实现数据网络服务。可选的，调制解调器访问虚拟SIM卡的过程可以包括如下步骤S108-S113：
S108、调制解调器向硬件抽象层的RIL服务发送APDU指令。
作为一种可能的实现方式，调制解调器通过硬件通道将APDU指令转发给RIL服务；
可选的，APDU指令用于访问虚拟SIM卡。
S109、RIL服务接收到APDU指令后，向VSIM TA发送APDU指令。
示例性的，VSIM TA的地址可以事先设置，比如手机出厂时即设置好。或者，RIL服务从VSIM APP获取VSIM TA的地址。或者，RIL服务采用其他方式获取VSIM TA的地址，本申请实施例不做限制。从而，RIL服务可以得知VSIM TA的地址，并根据该地址将APDU指令发送到VSIM TA。
作为一种可能的实现方式，RIL服务获取VSIM TA的地址之后，可以调用TEE的SDK向VSIM TA发送APDU指令。
S110、VSIM TA基于虚拟SIM卡的数据执行APDU指令。
示例性的，VSIM TA可以解析APDU指令，并根据解析结果得到指定虚拟SIM卡的数据。
S111、VSIM TA向硬件抽象层的RIL服务返回APDU响应。
可选的，APDU响应携带虚拟SIM卡的数据。可选的，虚拟SIM卡的数据可以实现网络鉴权。
S112、RIL服务将APDU响应返回给调制解调器。
S113、调制解调器根据APDU响应接入数据网络。
示例性的，调制解调器接收APDU响应后，可以根据APDU响应携带的虚拟SIM卡的数据，执行网络鉴权等虚拟SIM卡相关的操作，以使得手机成功注册到虚拟SIM卡支持的移动数据网络。如此，手机可以使用移动数据服务上网。
本申请实施例中，调制解调器访问虚拟SIM卡时，通过和RIL之间的通道向RIL服务发送用于访问虚拟SIM卡的APDU指令，并由RIL服务直接向VSIM TA发送APDU指令，相当于调制解调器通过硬件抽象层就可以访问TEE里的虚拟SIM卡数据，即在系统底层就可以实现虚拟SIM卡的访问，而不需要经过应用层和框架层来实现虚拟SIM卡的访问，因而本申请访问过程历经的层级更短，访问路径缩短，性能更好，功耗更低。
并且，由于无需依赖VSIM APP调用虚拟SIM卡的数据，因此，虚拟SIM卡的使用过程中，即使modem频繁访问虚拟SIM卡，也不需要VSIM APP常驻内存，内存占用更少。
此外，由于APDU指令以及APDU指令响应的传递路径缩短，因此虚拟SIM卡的数据(比如鉴权五元组数据)的暴露概率降低，被攻击的风险更低，能够提升手机的安全性。
如图6所示，以支持虚拟SIM卡业务的电子设备为手机为例，本申请实施例可以包括如下步骤：
S201、手机显示虚拟SIM卡的套餐界面。
S202、手机的VSIM APP接收用户在套餐界面输入的套餐启动指令。
示例性的，如图5的(b)，套餐界面60包括A地1日行套餐630。用户可以点击该套餐对应的启用按钮631，以启动、激活该套餐。
S203、响应于套餐启动指令，VSIM APP向服务器发送数据请求。
相应的，服务器从VSIM APP接收数据请求。该数据请求用于请求虚拟SIM卡的数据。
S204、服务器向VSIM APP发送虚拟SIM卡的数据。
相应的，VSIM APP从服务器接收虚拟SIM卡的数据。
作为一种可能的实现方式，VSIM APP接收虚拟SIM卡的数据之后，可以将虚拟SIM卡的数据保存到VSIM TA中。后续，VSIM APP可以读取VSIM TA中已经保存的虚拟SIM卡的数据。
S205、VSIM APP向框架层的telephony服务发送调用请求。
其中，调用请求用于请求telephony服务激活/使能虚拟SIM卡。
应理解，VSIM APP接收虚拟SIM卡的数据之后，还需要调用telephony服务，以使得telephony服务下发用于激活虚拟SIM卡的激活指令，如此，可以激活虚拟SIM卡，以便手机通过激活的虚拟SIM卡实现数据网络服务。
S206、telephony服务向调制解调器发送激活指令。
其中，激活指令用于激活虚拟SIM卡。
作为一种可能的实现方式，telephony服务可以通过硬件抽象层的RIL服务向调制解调器下发激活指令，以指示调制解调器将指定卡槽切换为使用虚拟SIM卡。
S207、响应于激活指令，调制解调器激活虚拟SIM卡。
作为一种可能的实现方式，如果指定的SIM卡槽中有实体SIM卡的话，调制解调器先下电该指定的实体SIM卡，再将虚拟SIM卡激活。
激活虚拟SIM卡之后，调制解调器可以访问虚拟SIM卡，以便手机可以通过虚拟SIM卡实现数据网络服务。可选的，调制解调器访问虚拟SIM卡的过程可以包括如下步骤S208-S215:
S208、调制解调器向硬件抽象层的RIL服务发送APDU指令。
作为一种可能的实现方式，调制解调器通过硬件通道将APDU指令转发给RIL服务；
S209、RIL服务接收到APDU指令后，向框架层的telephony服务发送APDU指令。
作为一种可能的实现方式，RIL服务通过HIDL接口将APDU指令转发给telephony服务；
S210、telephony服务接收到APDU指令后，向VSIM TA发送APDU指令。
示例性的，telephony服务到VSIM TA的路径地址可以事先设置，从而，telephony服务可以得知到达VSIM TA的路径地址，并根据该路径地址将APDU指令发送到VSIM TA。
S211、VSIM TA基于虚拟SIM卡的数据执行APDU指令。
示例性的，VSIM TA可以解析APDU指令，并根据解析结果得到指定虚拟SIM卡的数据。
S212、VSIM TA向框架层的telephony服务返回APDU响应。
可选的，APDU响应携带虚拟SIM卡的数据。可选的，虚拟SIM卡的数据包括虚拟SIM卡的鉴权五元组，五元组用于实现网络鉴权。
S213、telephony服务将APDU响应返回给RIL服务。
S214、RIL服务将APDU响应返回给调制解调器。
S215、调制解调器根据APDU应接入数据网络。
示例性的，调制解调器接收APDU响应后，可以根据APDU响应携带的虚拟SIM卡的数据，执行鉴权等虚拟SIM卡相关的操作，以使得手机成功注册到虚拟SIM卡支持的移动数据网络。如此，手机可以使用移动数据服务上网。
本申请实施例中，调制解调器访问虚拟SIM卡时，通过和RIL之间的通道向RIL服务发送用于访问虚拟SIM卡的APDU指令，并由RIL服务向telephony服务发送用于访问虚拟SIM卡的APDU指令，telephony服务直接向VSIM TA发送APDU指令，相当于调制解调器通过硬件抽象层和框架层就可以访问TEE里的虚拟SIM卡数据，即在系统底层就可以实现虚拟SIM卡的访问，访问过程历经的层级较短，性能较好，功耗较低。
并且，由于无需依赖VSIM APP调用虚拟SIM卡的数据，因此，虚拟SIM卡的使用过程中，不需要VSIM APP常驻，内存占用更少。此外，相比于现有技术，由于传递路径缩短，因此虚拟SIM卡的数据(比如鉴权五元组数据)的暴露概率降低，被攻击的风险更低，能够提升电子设备的安全性。
上述一个或多个界面均是示例性的，在另一些实施例中，还可以有其他的界面设计方式。
可选的，上述各方法实施例的流程中的一些操作任选地被组合，并且/或者一些操作的顺序任选地被改变。并且，各流程的步骤之间的执行顺序仅是示例性的，并不构成对步骤之间执行顺序的限制，各步骤之间还可以是其他执行顺序。并非旨在表明所述执行次序是可以执行这些操作的唯一次序。本领域的普通技术人员会想到多种方式来对本文所述的操作进行重新排序。另外，应当指出的是，本文某个实施例涉及的过程细节同样以类似的方式适用于其他实施例，或者，不同实施例之间可以组合使用。
此外，方法实施例中的某些步骤可等效替换成其他可能的步骤。或者，方法实施例中的某些步骤可以是可选的，在某些使用场景中可以删除。或者，可以在方法实施例中增加其他可能的步骤。
并且，上述各方法实施例之间可以单独实施，或结合起来实施。
本申请另一些实施例提供了一种装置，该装置可以是上述电子设备或电子设备中的组件(比如芯片系统)。该装置可以包括：存储器和一个或多个处理器。该存储器和处理器耦合。该存储器用于存储计算机程序代码，该计算机程序代码包括计算机指令。当处理器执行计算机指令时，电子设备可执行上述方法实施例中手机执行的各个功能或者步骤。该电子设备的结构可以参考图2所示的电子设备102的结构。
其中，该电子设备的核心结构可以表示为图7所示的结构，电子设备包括：处理模块1301、存储模块1302和通信模块1303。
处理模块1301，可包括中央处理器(CPU)、应用处理器(Application Processor，AP)或通信处理器(Communication Processor，CP)中的至少一个。处理模块1301可执行与用户电子设备的其他元件中的至少一个的控制和/或通信相关的操作或数据处理。具体地，处理模块1301可用于根据一定的触发条件，控制主屏上显示的内容。或者根据预设规则确定屏幕上显示的内容。处理模块1301还用于将输入的指令或数据进行处理，并根据处理后的数据确定显示样式。可选的，处理模块1301可以实现为图2所示的处理器110。
存储模块1302，可包括易失性存储器和/或非易失性存储器。存储模块用于存储用户电子设备的其他模块中的至少一个相关的指令或数据。可选的，存储模块1302可以实现为图2所示电子设备中的存储器210。
通信模块1303，用于支持个人终端(通过通信网络)与其他个人终端通信。例如，通信模块可经由无线通信或有线通信连接到网络，以与其他个人终端或网络服务器进行通信。无线通信可采用蜂窝通信协议中的至少一个，诸如，长期演进(LTE)、高级长期演进(LTE-A)、码分多址(CDMA)、宽带码分多址(WCDMA)、通用移动通信系统(UMTS)、无线宽带(WiBro)或全球移动通信系统(GSM)。无线通信可包括例如短距通信。短距通信可包括无线保真(Wi-Fi)、蓝牙、近场通信(NFC)、磁条传输(MST)或GNSS中的至少一个。
图7所示装置还可以包括更多、更少组件，或拆分部分组件，比输入模块、显示模块等，或有其他布局组件的方式，本申请实施例对此不做限制。
本申请实施例还提供一种芯片系统，如图8所示，该芯片系统包括至少一个处理器1401和至少一个接口电路1402。处理器1401和接口电路1402可通过线路互联。例如，接口电路1402可用于从其它装置(例如电子设备的存储器)接收信号。又例如，接口电路1402可用于向其它装置(例如处理器1401)发送信号。示例性的，接口电路1402可读取存储器中存储的指令，并将该指令发送给处理器1401。当所述指令被处理器1401执行时，可使得电子设备执行上述实施例中的各个步骤。当然，该芯片系统还可以包含其他分立器件，本申请实施例对此不作具体限定。
本申请实施例还提供一种计算机存储介质，该计算机存储介质包括计算机指令，当所述计算机指令在上述电子设备上运行时，使得该电子设备执行上述方法实施例中手机执行的各个功能或者步骤。
本申请实施例还提供一种计算机程序产品，当所述计算机程序产品在计算机上运行时，使得所述计算机执行上述方法实施例中手机执行的各个功能或者步骤。
通过以上实施方式的描述，所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，仅以上述各功能模块的划分进行举例说明，实际应用中，可以根据需要而将上述功能分配由不同的功能模块完成，即将装置的内部结构划分成不同的功能模块，以完成以上描述的全部或者部分功能。
在本申请所提供的几个实施例中，应该理解到，所揭露的装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅是示意性的，例如，所述模块或单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个装置，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或 直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是一个物理单元或多个物理单元，即可以位于一个地方，或者也可以分布到多个不同地方。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个可读取存储介质中。基于这样的理解，本申请实施例的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该软件产品存储在一个存储介质中，包括若干指令用以使得一个设备(可以是单片机，芯片等)或处理器(processor)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(read only memory，ROM)、随机存取存储器(random access memory，RAM)、磁碟或者光盘等各种可以存储程序代码的介质。
以上内容，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何在本申请揭露的技术范围内的变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (8)

  1. 一种虚拟用户识别卡的访问方法，其特征在于，应用于电子设备，电子设备中包括调制解调器modem，所述方法包括：
    所述modem通过第一服务向第一应用发送访问指令，所述访问指令用于访问虚拟用户识别SIM卡的数据；所述第一服务运行与框架层和/或硬件抽象层中；所述第一应用运行于可信执行环境TEE中；
    所述modem通过所述第一服务从所述第一应用接收所述访问指令的响应，所述响应携带所述虚拟SIM卡的数据；
    所述modem根据所述响应接入所述虚拟SIM卡对应的移动数据网络。
  2. 根据权利要求1所述的方法，其特征在于，所述第一服务包括所述硬件抽象层中的无线接口层服务和/或所述框架层中的电话服务。
  3. 根据权利要求1或2所述的方法，其特征在于，所述方法还包括：所述第一服务获取所述第一应用的地址；
    所述modem通过第一服务向第一应用发送访问指令，包括：
    所述modem通过所述第一服务根据所述第一应用的地址，向所述第一应用发送所述访问指令。
  4. 根据权利要求3所述的方法，其特征在于，所述第一服务获取所述第一应用的地址，包括：
    所述第一服务获取预先配置的所述第一应用的地址；
    或者，所述第一服务从应用层获取所述第一应用的地址。
  5. 根据权利要求1-4中任一项所述的方法，其特征在于，所述modem通过第一服务向第一应用发送访问指令，包括：
    所述modem通过所述第一服务调用TEE的软件开发工具包SDK向第一应用发送访问指令。
  6. 一种虚拟用户识别卡的访问装置，其特征在于，包括：SIM卡管理模块、框架层、硬件抽象层、可信执行环境TEE；其中，
    所述SIM卡管理模块，用于调用所述框架层和/或硬件抽象层中的第一服务；
    所述框架层和/或硬件抽象层，用于通过所述第一服务向所述TEE中的第一应用发送访问指令，所述访问指令用于访问虚拟用户识别SIM卡的数据；
    所述框架层和/或硬件抽象层，还用于通过所述第一服务从所述TEE中的第一应用接收访问指令的响应，所述响应携带所述虚拟SIM卡的数据；
    所述SIM卡管理模块，还用于回调所述框架层和/或硬件抽象层中的第一服务；
    所述SIM卡管理模块，还用于根据所述响应接入数据网络；
    所述TEE，用于运行所述第一应用。
  7. 一种虚拟用户识别卡的访问装置，其特征在于，包括：处理器，存储器和调制解调器modem，所述存储器与所述处理器耦合，所述存储器用于存储计算机程序代码，所述计算机程序代码包括计算机指令，当所述处理器从所述存储器中读取所述计算机指令，使得所述装置执行如权利要求1-5任一项所述的方法。
  8. 一种计算机可读存储介质，所述计算机可读存储介质中存储有指令，其特征在于，当所述指令在电子设备上运行时，使得所述电子设备执行如权利要求1-5中任一项所述的方法。
PCT/CN2023/107198 2022-07-29 2023-07-13 一种虚拟用户识别卡的访问方法及装置 WO2024022118A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210911262.8A CN117528478A (zh) 2022-07-29 2022-07-29 一种虚拟用户识别卡的访问方法及装置
CN202210911262.8 2022-07-29

Publications (1)

Publication Number Publication Date
WO2024022118A1 true WO2024022118A1 (zh) 2024-02-01

Family

ID=89705317

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/107198 WO2024022118A1 (zh) 2022-07-29 2023-07-13 一种虚拟用户识别卡的访问方法及装置

Country Status (2)

Country Link
CN (1) CN117528478A (zh)
WO (1) WO2024022118A1 (zh)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016185293A1 (en) * 2015-05-16 2016-11-24 Simless, Inc. Apparatuses, methods and systems for virtualizing a reprogrammable universal integrated circuit chip
CN108353281A (zh) * 2015-11-11 2018-07-31 高通股份有限公司 远程用户识别模块(sim)认证的系统和方法
CN112020055A (zh) * 2020-10-27 2020-12-01 深圳杰睿联科技有限公司 虚拟卡码号管理系统和方法、终端设备以及存储介质
CN112367625A (zh) * 2020-11-12 2021-02-12 深圳杰睿联科技有限公司 虚拟卡驻网方法和系统、服务器、移动终端和存储介质
CN113498052A (zh) * 2020-03-20 2021-10-12 荣耀终端有限公司 识别嵌入式身份识别模块eSIM卡的方法及终端设备
CN113950044A (zh) * 2021-09-16 2022-01-18 深圳市优克联新技术有限公司 用户识别卡的识别方法、装置、终端设备及存储介质

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016185293A1 (en) * 2015-05-16 2016-11-24 Simless, Inc. Apparatuses, methods and systems for virtualizing a reprogrammable universal integrated circuit chip
CN108353281A (zh) * 2015-11-11 2018-07-31 高通股份有限公司 远程用户识别模块(sim)认证的系统和方法
CN113498052A (zh) * 2020-03-20 2021-10-12 荣耀终端有限公司 识别嵌入式身份识别模块eSIM卡的方法及终端设备
CN112020055A (zh) * 2020-10-27 2020-12-01 深圳杰睿联科技有限公司 虚拟卡码号管理系统和方法、终端设备以及存储介质
CN112367625A (zh) * 2020-11-12 2021-02-12 深圳杰睿联科技有限公司 虚拟卡驻网方法和系统、服务器、移动终端和存储介质
CN113950044A (zh) * 2021-09-16 2022-01-18 深圳市优克联新技术有限公司 用户识别卡的识别方法、装置、终端设备及存储介质

Also Published As

Publication number Publication date
CN117528478A (zh) 2024-02-06

Similar Documents

Publication Publication Date Title
US10820188B2 (en) Electronic device and method for providing communication service based on subscriber identity information in electronic device
CN104935744A (zh) 一种验证码显示方法、验证码显示装置及移动终端
WO2018133271A1 (zh) Esim卡的开通方法、无线路由器及用户终端
KR20170109467A (ko) 전자 장치 및 전자 장치의 제어 방법
US11102646B1 (en) Triggering electronic subscriber identity module activation
US11770695B2 (en) Mechanism to activate and manage a standalone device for cellular service
WO2021104114A1 (zh) 一种提供无线保真WiFi网络接入服务的方法及电子设备
US10820187B2 (en) Electronic device for managing embedded subscriber identification module and method for same
KR20090099336A (ko) 위치 기반 서비스를 제공하기 위한 방법 및 스마트 카드
WO2021185063A1 (zh) 一种上网方法及电子设备、芯片
WO2019214345A1 (zh) 网络连接方法、装置、计算机装置及计算机可读存储介质
US20130288649A1 (en) Automatically Adjusting Country and Area Codes When Doing a Business Card or Telephone Number Exchange
CN114301899B (zh) 数据传输方法、系统、电子设备及存储介质
US20220386105A1 (en) Electronic device, and method for processing profile policy rule of embedded subscriber identification module by electronic device
KR20210101667A (ko) 복수 심을 지원하는 전자 장치 및 그 동작 방법
EP3334194A1 (en) Connection information broadcast using beacon technology
US10334553B2 (en) Wireless communications network registration method and terminal
WO2024022118A1 (zh) 一种虚拟用户识别卡的访问方法及装置
CN112492505B (zh) 一种位置信息获取方法及电子设备
WO2021000319A1 (zh) 保障终端安全的方法、装置以及系统
EP4192046A1 (en) Display method and electronic device
EP2950556A1 (en) Application controlled security element selection
CN112566046B (zh) 移动通信设备及移动通信方法
KR20220025532A (ko) 전자 장치 및 복수의 sim을 지원하는 전자 장치에서 단문 메시지를 수신하는 방법
CN111654575A (zh) 多卡多待单通实现方法、装置、电子设备及可读存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23845330

Country of ref document: EP

Kind code of ref document: A1