WO2024239869A1 - 数据迁移方法、数据恢复方法、装置、设备以及存储介质 - Google Patents

数据迁移方法、数据恢复方法、装置、设备以及存储介质 Download PDF

Info

Publication number
WO2024239869A1
WO2024239869A1 PCT/CN2024/088745 CN2024088745W WO2024239869A1 WO 2024239869 A1 WO2024239869 A1 WO 2024239869A1 CN 2024088745 W CN2024088745 W CN 2024088745W WO 2024239869 A1 WO2024239869 A1 WO 2024239869A1
Authority
WO
WIPO (PCT)
Prior art keywords
sim card
application
data
migration
management platform
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2024/088745
Other languages
English (en)
French (fr)
Inventor
都伟伟
庄怀宇
侯兆森
李亚强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Financial Technology Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Financial Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Financial Technology Co Ltd filed Critical China Mobile Communications Group Co Ltd
Publication of WO2024239869A1 publication Critical patent/WO2024239869A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/602Providing cryptographic facilities or services
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operations
    • G06F11/1446Point-in-time backing up or restoration of persistent data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03Protecting confidentiality, e.g. by encryption
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/18Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/183Processing at user equipment or user record carrier
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/18Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/20Transfer of user or subscriber data
    • H04W8/205Transfer to or from user equipment or user record carrier

Definitions

  • the present application relates to the field of computer and mobile communication technology, and in particular to a data migration method, a data recovery method, a device, an electronic device, and a computer-readable storage medium.
  • SIM super subscriber identity module
  • An embodiment of the present application provides a data migration method to solve the problem existing in the related art of how to safely and effectively migrate application data of a SIM card application on a super SIM card in a device.
  • the embodiment of the present application provides a data recovery method to solve the problem existing in the related art of how to safely and effectively migrate application data of a SIM card application on a super SIM card in a device.
  • the embodiments of the present application also provide a data migration device, a data recovery device, a super SIM card, an electronic device and a computer-readable storage medium.
  • a data migration method, applied to a SIM card migration application comprising:
  • a data recovery method applied to SIM card migration application, comprises: sending a data recovery request to a SIM card management platform, wherein the data recovery request carries an identifier of a SIM card application to be recovered; receiving a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the identifier of the SIM card application to be recovered and ciphertext application data; in response to the first data recovery instruction issued by the SIM card management platform, installing the SIM card application to be recovered on the super SIM card; and writing the ciphertext application data into a storage area on the super SIM card corresponding to the SIM card application to be recovered, thereby completing data recovery.
  • a data migration method is applied to a SIM card terminal, comprising: receiving an identifier of a SIM card application uploaded by a SIM card migration application, and ciphertext application data corresponding to the SIM card application; uploading the ciphertext application data and the identifier of the SIM card application to the SIM card management platform, and the SIM card management platform associates and stores the identifier of the SIM card application with the ciphertext application data.
  • a data recovery method applied to a SIM card terminal, comprises: receiving a data recovery request uploaded by a SIM card migration application through a machine-card channel, wherein the data recovery request carries an identifier of a SIM card application to be recovered; uploading the data recovery request to a SIM card management platform, receiving a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the identifier of the SIM card application to be recovered and ciphertext application data; sending the first data recovery instruction to the SIM card migration application, wherein the SIM card migration application installs the SIM card application to be recovered on a super SIM card, and writes the ciphertext application data into a storage area on the super SIM card corresponding to the SIM card application to be recovered, thereby completing data recovery.
  • a data migration method is applied to a SIM card management platform, comprising: receiving an identifier of a SIM card application uploaded by a SIM card terminal, and ciphertext application data corresponding to the SIM card application; associating and storing the identifier of the SIM card application with the ciphertext application data; and sending an application locking instruction to a SIM card migration application through the SIM card terminal, so that the SIM card migration application locks the SIM card application to complete data migration.
  • a data recovery method is applied to a SIM card management platform, comprising: receiving a data recovery request sent by a SIM card terminal, wherein the data recovery request carries an identifier of a SIM card application to be recovered; determining ciphertext application data corresponding to the identifier of the SIM card application; generating a data recovery instruction according to the ciphertext application data; issuing the data recovery instruction to a SIM card migration application through the SIM card terminal, so that the SIM card migration application installs the SIM card application to be recovered on a super SIM card, and writes the ciphertext application data into a storage area on the super SIM card corresponding to the SIM card application to be recovered, thereby completing data recovery.
  • a data migration method is applied to a SIM card management platform, comprising: receiving a data migration instruction uploaded by a SIM card terminal, wherein the data migration instruction carries an identifier of a SIM card application to be migrated; in response to the data migration instruction, issuing a user information migration instruction to the SIM card terminal, wherein the SIM card terminal collects user information corresponding to the SIM card application to be migrated and uploads it to the SIM card management platform; generating an application migration notification according to the user information, and uploading the application migration notification to a service platform corresponding to the SIM card application to be migrated, wherein the service platform stores the user information, wherein the service platform is used to install the application to be migrated on a super SIM card; and issuing a migration instruction to the SIM card terminal, so that the SIM card terminal deletes the SIM card application to be migrated installed on the super SIM card in response to the migration instruction.
  • a data recovery method applied to a SIM card management platform, comprises: receiving a data recovery instruction uploaded by a SIM card terminal, wherein the data recovery instruction carries a SIM card application identifier to be recovered; uploading the SIM card application identifier to be recovered to a service platform corresponding to the SIM card application to be recovered, the service platform determining user information corresponding to the SIM card application identifier to be recovered, and generating an application installation command according to the user information; receiving an application installation command sent by the service platform, and sending the application installation command to the SIM card terminal, so that the fourth SIM card terminal installs the SIM card application to be recovered on the super SIM card.
  • a data migration method applied to a SIM card terminal, comprises: sending a data migration instruction to a SIM card management platform, wherein the data migration instruction carries an identification of a SIM card application to be migrated; receiving a user information migration instruction issued by the SIM card management platform; collecting user information corresponding to the SIM card application to be migrated according to the user information migration instruction, and uploading it to the SIM card management platform; receiving a migration instruction issued by the SIM card management platform, and deleting the SIM card application to be migrated installed on the super SIM card according to the migration instruction.
  • a data recovery method applied to a SIM card terminal, comprises: sending a data recovery instruction to a SIM card management platform, the SIM card management platform uploading the SIM card application identifier to be recovered to a service platform corresponding to the SIM card application to be recovered, and the service platform determining the user information corresponding to the SIM card application identifier to be recovered, and generating an application installation command according to the user information, wherein the data recovery instruction carries the SIM card application identifier to be recovered; receiving the application installation command sent by the service platform, and installing the SIM card application to be recovered on a super SIM card.
  • a data migration device applied to SIM card migration application, comprises: an application data acquisition unit, used to acquire application data to be migrated corresponding to a SIM card application from application data stored in a super SIM card; an encryption unit, used to encrypt the application data to be migrated to obtain ciphertext application data; a data migration unit, used to send the ciphertext application data and an identifier of the SIM card application to a SIM card management platform, and the SIM card management platform associates and stores the ciphertext application data with the identifier of the SIM card application.
  • a data recovery device applied to SIM card migration application, comprises: a recovery request sending unit, used to send a data recovery request to a SIM card management platform, wherein the data recovery request carries a SIM card application identifier to be recovered; an instruction receiving unit, used to receive a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the SIM card application identifier to be recovered and ciphertext application data; an application installation unit, used to install the SIM card application to be recovered on the super SIM card in response to the first data recovery instruction issued by the SIM card management platform; and a data recovery unit, used to write the ciphertext application data into a storage area corresponding to the SIM card application to be recovered on the super SIM card, to complete data recovery.
  • a data migration device applied to a SIM card terminal, comprises: a data receiving unit, used to receive an identifier of a SIM card application uploaded by a SIM card migration application, and ciphertext application data corresponding to the SIM card application; a data uploading unit, used to upload the ciphertext application data and the identifier of the SIM card application to the SIM card management platform, and the SIM card management platform associates and stores the identifier of the SIM card application with the ciphertext application data.
  • a super SIM card comprises a memory, a processor and a computer program stored in the memory, wherein when executing the computer program, the processor obtains application data to be migrated corresponding to a SIM card application from application data stored in the super SIM card; encrypts the application data to be migrated to obtain ciphertext application data; and sends the ciphertext application data and an identifier of the SIM card application to a SIM card management platform, where the SIM card management platform associates and stores the ciphertext application data with the identifier of the SIM card application.
  • An electronic device comprises a memory, a processor and a computer program stored in the memory, wherein when executing the computer program, the processor obtains application data to be migrated corresponding to a SIM card application from application data stored in a super SIM card; encrypts the application data to be migrated to obtain ciphertext application data; and sends the ciphertext application data and an identifier of the SIM card application to a SIM card management platform, and the SIM card management platform associates and stores the ciphertext application data with the identifier of the SIM card application.
  • An electronic device comprises a memory, a processor and a computer program stored in the memory, wherein the processor, when executing the computer program, sends a data recovery request to a SIM card management platform, wherein the data recovery request carries an identifier of a SIM card application to be recovered; receives a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the identifier of the SIM card application to be recovered and ciphertext application data; in response to the first data recovery instruction issued by the SIM card management platform, installs the SIM card application to be recovered on the super SIM card; and writes the ciphertext application data into a storage area on the super SIM card corresponding to the SIM card application to be recovered, thereby completing data recovery.
  • a computer-readable storage medium stores one or more programs.
  • the electronic device When the one or more programs are executed by an electronic device including multiple application programs, the electronic device performs the following operations: obtaining application data to be migrated corresponding to a SIM card application from application data stored in a super SIM card; encrypting the application data to be migrated to obtain ciphertext application data; and sending the ciphertext application data and an identifier of the SIM card application to a SIM card management platform, which stores the ciphertext application data in association with the identifier of the SIM card application.
  • the SIM card migration application can be used to obtain the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card, and the obtained application data can be encrypted to obtain the ciphertext application data, and then the ciphertext application data and the identification of the SIM card application are sent to the SIM card management platform, and the SIM card management platform associates the ciphertext application data with the identification of the SIM card application to store it, so as to realize the data migration of the SIM card application in the super SIM card.
  • the SIM card migration application installed on the SIM card can be used to encrypt and backup the application data on the super SIM card, and the data migration for the SIM card application can be realized while ensuring the safe migration of the application data out of the super SIM card, which solves the problem that the related technology cannot safely and effectively migrate the application data of the SIM card application on the super SIM card in the device.
  • FIG1 is a schematic diagram of a specific structure of a data migration system provided in an embodiment of the present application.
  • FIG2 is a schematic diagram of a specific process of a data migration and recovery method provided in an embodiment of the present application
  • FIG3a is a schematic diagram of a front-end card application management entry interface provided in an embodiment of the present application.
  • FIG3b is a schematic diagram of a front-end card application management interface provided in an embodiment of the present application.
  • FIG3c is a schematic diagram of a migration confirmation interface provided in an embodiment of the present application.
  • FIG3d is a schematic diagram of a migration success prompt interface provided in an embodiment of the present application.
  • FIG4a is a schematic diagram of another front-end card application management interface provided in an embodiment of the present application.
  • FIG4b is a schematic diagram of a recovery progress display interface provided in an embodiment of the present application.
  • FIG4c is a schematic diagram of a successful recovery prompt interface provided in an embodiment of the present application.
  • FIG5 is a schematic diagram of the specific structure of another data migration system provided in an embodiment of the present application.
  • FIG6 is a schematic diagram of a specific process of another data migration and recovery method provided in an embodiment of the present application.
  • FIG7 is a schematic diagram of a specific structure of a data migration device provided in an embodiment of the present application.
  • FIG8 is a schematic diagram of a specific structure of a data recovery device provided in an embodiment of the present application.
  • FIG9 is a schematic diagram of the specific structure of another data migration device provided in an embodiment of the present application.
  • FIG10 is a schematic diagram of the specific structure of another data recovery device provided in an embodiment of the present application.
  • FIG11 is a schematic diagram of a specific structure of another data migration device provided in an embodiment of the present application.
  • FIG12 is a schematic diagram of a specific structure of another data recovery device provided in an embodiment of the present application.
  • FIG. 13 is a schematic diagram of the specific structure of a data migration and recovery electronic device provided in an embodiment of the present application.
  • a data migration method provided in an embodiment of the present application is used to solve the problem of how to safely and effectively migrate the application data of a SIM card application on a super SIM card in a device in the related art.
  • a migration system for implementing the data migration method is provided in an embodiment of the present application.
  • the data migration system includes a SIM card management platform (Digital Space Operation Platform, DSOP), a SIM card terminal (front-end operation interface), a super SIM card, a SIM card data migration application and other SIM card applications, wherein the SIM card management platform is composed of two parts: a DSOP core platform and a digital asset cloud platform.
  • SIM Subscriber Identification Module
  • GSM Global System for Mobile Communications
  • a mobile phone can only be connected to the network after the SIM card is inserted.
  • Super SIM card a new type of SIM card developed based on the NFC-USIM card security chip, using different functional modules of the SIM card and in modes such as "SIM+CA certificate". It has features such as secure computing, secure storage, and secure connection. In addition to providing basic functions such as 5G networks, the super SIM card can also replace identity cards, campus cards, access cards, transportation cards, e-wallets and other cards by installing SIM card applications, thereby integrating multiple cards into one.
  • the executor of the data migration method provided in the embodiment of the present application may be, but is not limited to, at least one of a SIM terminal (such as a mobile phone or a tablet computer) installed with a super SIM card, the super SIM card itself, or a super SIM card background management platform (such as a SIM card management platform); in addition, the executor of the method may also be the SIM card application itself installed on the super SIM card.
  • a SIM terminal such as a mobile phone or a tablet computer
  • a super SIM card background management platform such as a SIM card management platform
  • the executor of the method may also be the SIM card application itself installed on the super SIM card.
  • the following takes the execution subject of the method as a data migration application (Application, APP) installed on a super SIM card as an example to introduce the implementation of the method. It can be understood that the execution subject of the method as a data migration APP is only an exemplary description and should not be understood as a limitation of the method.
  • FIG2 The specific implementation flow diagram of the data migration method provided in this application is shown in FIG2 , which mainly includes the following steps:
  • Step 11 obtaining the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card;
  • SIM card applications refer to applications installed on the super SIM card that provide users with corresponding functional services.
  • SIM card applications can be divided into two categories based on whether they are factory preset: one is factory preset card applications, such as SIM Shield, SIMeID, SIM Quick Authentication, and White Card Writing Applications; the other is not factory preset, such as e-citizen, SIM car key, SIM access control, SIM card, etc.
  • factory preset card applications SIM card applications can be updated and upgraded by establishing a Bearer Independent Protocol (BIP) channel between the SIM card and the operating system; for card applications that are not factory preset, they can be checked and selected from the super SIM card management platform and downloaded and installed through the BIP channel.
  • BIP Bearer Independent Protocol
  • the application data can refer to the basic data used to support the normal operation of the SIM card application, such as the data saved in the SIM card application installation package; or it can also be the user usage data generated by the user in the process of using the SIM card application, such as the balance data, transaction record data, and entry and exit platform data generated by the user when using the travel SIM card application.
  • the application data of the SIM card application can be stored in the internal storage area of the super SIM card.
  • the storage security level of the internal storage area is relatively high and can be used to store sensitive data.
  • the application data can also be stored in the extended storage area of the super SIM card.
  • the storage security level of the extended storage area is relatively lower than that of the internal storage area, and can be used to store non-sensitive data.
  • the extended storage area of the super SIM card can be an external Flash storage area.
  • the embodiment of the present application does not limit in which storage area the super SIM card specifically stores the application data of the SIM card application.
  • the user when a user needs to migrate a SIM card application installed on a super SIM card, the user can enter the super SIM card application management interface at the front-end card application management portal provided by the SIM card terminal (such as a mobile phone), and trigger the SIM card migration APP to upload a data migration request carrying a unique identifier of the SIM card application to be migrated to the SIM card management platform through the SIM card terminal by clicking a designated virtual button on the operation interface.
  • the front-end card application management portal may include but is not limited to: APP, web page, SMS port, etc.
  • the front-end card application management entrance provided by the SIM card terminal is shown in Figure 3a.
  • the user can click the "Card Space Management" virtual button in the page to trigger the SIM card terminal to display the super SIM card application management interface, as shown in Figure 3b.
  • the user can click the migration button (A) corresponding to the application to be migrated to trigger the SIM card migration APP to send a data migration request carrying the unique identifier of the SIM card application to be migrated to the SIM card terminal, and forward the data migration request to the SIM card management platform through the SIM card terminal.
  • the SIM card terminal can further display a confirmation interface as shown in Figure 3c for the user, so as to determine whether the user needs to migrate the selected SIM card application through a secondary confirmation. Only after the user clicks the "migration" virtual button in the interface will the SIM card terminal be triggered to upload a data migration request to the SIM card management platform.
  • the SIM card management platform After the SIM card management platform receives the data migration request uploaded by the SIM card terminal, it will generate a data migration instruction for the super SIM card and send the data migration instruction to the SIM card terminal. In response to the data migration instruction, the SIM card terminal can send the data migration instruction to the SIM card migration application of the super SIM card by opening the machine-card channel or by establishing a BIP channel between the SIM card and the operating system.
  • the bearer independent protocol is a connection-oriented transmission protocol proposed in the 3GPPTS 31.111 specification. The protocol supports Global System for Mobile Communications (GSM), Code Division Multiple Access (CDMA) and Universal Mobile Telecommunications System (UMTS). UMTS) and other mobile communication networks allow SIM cards and terminals to establish connection-oriented data channels, achieving high-speed data transmission between terminals and SIM cards.
  • GSM Global System for Mobile Communications
  • CDMA Code Division Multiple Access
  • UMTS Universal Mobile Telecommunications System
  • the SIM card migration APP can respond to the data migration instruction and obtain the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card.
  • applications in different security domains of the same super SIM card can read the data storage area of other applications by calling specific interfaces to achieve cross-security domain data interaction within the super SIM card.
  • the SIM card migration APP can obtain the application data corresponding to the SIM card application to be migrated through the following sub-steps:
  • Sub-step 1101 The SIM card migration APP determines the data storage area corresponding to the SIM card application to be migrated and the data length of the data to be migrated;
  • the SIM card migration APP can determine the SIM card application to be migrated based on the unique identifier carried in the data migration instruction, and call the shared interface of the SIM card application to be migrated, and send a data backup notification to the SIM card application to be migrated, and then determine the data storage area corresponding to the SIM card application to be migrated and the data length of the data to be migrated based on the information returned by the SIM card application to be migrated in response to the data backup notification.
  • the SIM card migration APP calls the data backup interface to access the data storage area, and obtains the backup data corresponding to the SIM card application to be migrated out according to the data length.
  • the data length is used to indicate the number of bytes of valid data that needs to be backed up in the data storage area.
  • the SIM card migration APP can read data of a specified length from the data storage area according to the data length as the application data corresponding to the SIM card application to be migrated.
  • the SIM card migration APP can read the backup data corresponding to the SIM card application to be migrated in batches by calling the data backup interface multiple times.
  • Step 12 the SIM card migration APP encrypts the application data obtained by executing step 11 to obtain ciphertext application data;
  • the SIM card migration APP first needs to encrypt the backup data before the backup data leaves the super SIM card.
  • the SIM card migration APP can encrypt the acquired backup data according to the national secret algorithm (for example: SM1 algorithm, SM2 algorithm, SM3 algorithm and SM4 algorithm) to obtain the ciphertext backup data.
  • the national secret algorithm for example: SM1 algorithm, SM2 algorithm, SM3 algorithm and SM4 algorithm
  • Step 13 Send the encrypted application data and the identifier of the SIM card application to the SIM card management platform, and the SIM card management platform associates and stores the encrypted application data with the identifier of the SIM card application.
  • the SIM card migration APP can upload the SIM card migration application identifier (for example, it can be the account registered by the user using the SIM card migration APP) together with the ciphertext backup data to the SIM card management platform.
  • the super SIM card can further re-encrypt the encrypted backup data according to a specific communication encryption protocol and transmit it to the SIM card terminal.
  • the super SIM card can specifically perform secondary encryption on the ciphertext backup data according to the SCP02 protocol, wherein the SCP02 protocol is a standard protocol for secure communication of SIM cards, which specifies the key negotiation and encryption algorithm used in encrypted communication between the SIM card and the terminal device.
  • the protocol provides reliable security protection, preventing malicious attackers from stealing or tampering with smart card information, thereby ensuring the integrity and security of transmitted data.
  • Negotiating and encrypting the transmitted data between the SIM card and the terminal through the SCP02 protocol is a common technical means in the relevant technical field, so the specific implementation scheme of secondary encryption and transmission of ciphertext backup data according to the SCP02 protocol is not described in detail in the present application embodiment.
  • the SIM card terminal After receiving the SIM card application identifier uploaded by the SIM card migration application and the ciphertext application data corresponding to the SIM card application, the SIM card terminal will directly upload the ciphertext application data and the SIM card application identifier to the SIM card management platform, and the SIM card management platform will associate and store the SIM card application identifier with the ciphertext application data.
  • the SIM card management platform decrypts the ciphertext backup data according to the SCP02 protocol and the national secret algorithm in turn, and then obtains the plaintext backup data corresponding to the ciphertext data and the SIM card migration application identifier.
  • the SIM card management platform associates the ciphertext backup data with the SIM card migration application identifier and saves them in the backup database, so that when application recovery is required later, the SIM card management platform can determine the corresponding backup data according to the SIM card migration application identifier.
  • the data migration method provided in the embodiment of the present application is mainly aimed at the scenario of SIM card replacement.
  • the SIM card when the SIM card is replaced, the old SIM card will be discarded or recycled.
  • the SIM card migration APP uploads the SIM card migration application identifier and the ciphertext backup data to the SIM card management platform according to the above method.
  • the SIM card management platform can issue an application locking instruction to the old super SIM card, so that the SIM card migration APP deletes the locally stored ciphertext backup data and locks the SIM card application to be migrated.
  • the method provided in the embodiment of the present application may include: receiving an application locking instruction issued by the SIM card management platform; in response to the application locking instruction, deleting the ciphertext backup data; locking the SIM card application to be migrated, so that the SIM card application to be migrated is in a locked state, wherein the SIM card application in the locked state cannot be used.
  • the SIM card terminal front end may display a "migration successful" prompt notification as shown in FIG. 3d to prompt the user that the SIM card application migration is completed.
  • the user After the user completes the migration of SIM card applications in the super SIM card by performing the above steps and completes the replacement of the super SIM card, the user can perform the following steps to migrate the SIM card application backup data saved on the SIM card management platform to the new super SIM card to complete the data recovery on the new super SIM card:
  • Step 14 the SIM card migration application sends a data recovery request to the SIM card management platform
  • the data recovery request carries the SIM card application identifier to be restored.
  • the SIM card migration APP can be an application installed by default on the super SIM card, or it can be an application downloaded and installed on the super SIM card by the user as needed. After completing the replacement of the super SIM card, the user can log in to the account corresponding to the SIM card migration APP on the front display page of the SIM card terminal, and then send a data recovery request to the SIM card management platform through the SIM card migration APP.
  • the SIM card migration application can upload a data recovery request to the SIM card terminal through the machine-card channel, and then send the data recovery request to the SIM card management platform through the SIM card terminal.
  • the SIM card terminal can perform the following operations to cooperate with the SIM card migration application to perform data recovery. The method includes: receiving a data recovery request uploaded by the SIM card migration application through the machine-card channel; uploading the data recovery request to the SIM card management platform.
  • the SIM card management platform can perform the following operations to cooperate with the SIM card migration application and the SIM card terminal to perform data recovery, and the method includes: determining the ciphertext application data corresponding to the identifier of the SIM card application; generating a data recovery instruction according to the ciphertext application data; and issuing the data recovery instruction to the SIM card migration application through the SIM card terminal.
  • Step 15 receiving a data recovery instruction issued by the SIM card management platform in response to the data recovery request;
  • the data recovery instruction carries the identifier of the SIM card application to be recovered and the encrypted application data.
  • the encrypted application data is determined by the SIM card management platform in a pre-generated backup database according to the identifier of the SIM card application to be recovered.
  • the SIM card migration APP when performing the data recovery operation, can upload the SIM card migration application identifier (for example, it can be the account registered by the user using the SIM card migration APP) and the identifier of the SIM card application to be restored to the SIM card management platform, so that the SIM card management platform can determine the application data corresponding to the SIM card application to be restored based on the SIM card migration application identifier (for example, the account corresponding to the SIM card migration APP) carried in the received data recovery request and the identifier of the SIM card application to be restored, and then generate a data recovery instruction based on the application to be restored and the application data.
  • the SIM card migration application identifier for example, it can be the account registered by the user using the SIM card migration APP
  • the SIM card management platform can determine the application data corresponding to the SIM card application to be restored based on the SIM card migration application identifier (for example, the account corresponding to the SIM card migration APP) carried in the received data recovery request and the identifier of the SIM card application to be restored,
  • a user may send a data recovery request for a specified SIM card application through the SIM card migration APP, that is, the data recovery request carries the identification information of the application to be restored; or a user may also send a data recovery request for all backed up applications through the SIM card migration APP, that is, the data recovery request sent by the SIM card migration APP may not carry the identification information of the SIM card application to be restored.
  • the SIM card management platform may determine in the backup database all the application identifications to be restored and the backup data corresponding to the account corresponding to the SIM card migration APP carried in the data recovery request.
  • Step 16 in response to the data recovery instruction received by executing step 15, installing the SIM card application to be recovered on the super SIM card;
  • the SIM card migration APP can install the application to be restored on the super SIM card by the following method: the SIM card migration APP responds to the first data recovery instruction, determines the SIM card application to be restored, selects the management application through the select instruction, writes the access control architecture (AC) and the auxiliary security domain AC architecture of the application through the update binary instruction, selects the main security domain through the select instruction, creates the security domain of the card application to be migrated through the install instruction, completes the security domain key writing through the put key, and finally completes the installation of the SIM card application through the install instruction.
  • AC access control architecture
  • auxiliary security domain AC architecture of the application through the update binary instruction
  • the main security domain creates the security domain of the card application to be migrated through the install instruction
  • completes the security domain key writing through the put key and finally completes the installation of the SIM card application through the install instruction.
  • Step 17 the SIM card migration APP writes the acquired encrypted application data into the storage area on the super SIM card corresponding to the SIM card application to be restored, completing data recovery.
  • the SIM card migration APP can first decrypt the acquired ciphertext application data according to the national encryption algorithm to obtain the corresponding plaintext application data, and access the storage area corresponding to the SIM card application to be restored by calling the data recovery interface, and then write the plaintext application data into the corresponding storage area to complete the data recovery of the SIM card application to be restored.
  • the user can click the recovery button (B) corresponding to the SIM card application to be restored in the super SIM card application management interface as shown in Figure 4a to trigger the SIM card migration APP to upload a data recovery request to the SIM card management platform.
  • the SIM card migration APP will perform data recovery on the SIM card application to be restored by executing the relevant schemes of steps 15 to 17 above.
  • the SIM card migration APP will display the recovery progress display interface as shown in Figure 4b to clearly and intuitively show the data recovery process to the user.
  • the front end of the SIM card terminal can display a "Recovery Successful" prompt notification as shown in Figure 4c to prompt the user that the SIM card application recovery is complete.
  • the SIM card migration APP will send the data recovery results to the SIM card management platform, so that the SIM card management platform can clear the encrypted application data corresponding to the SIM card application to be restored stored in the backup database according to the data recovery results.
  • the SIM card management platform may continue to perform the following operations: receive the data recovery result uploaded by the SIM card migration application for the SIM card application to be restored; and delete the ciphertext application data corresponding to the SIM card application to be restored according to the data recovery result.
  • the user when a user needs to migrate a SIM card application on a super SIM card (for example, when changing the card), the user can send a data migration request for a specific SIM card application to a SIM card management platform through a SIM card terminal on which the super SIM card is installed.
  • the SIM card management platform generates a data migration instruction carrying an identifier of the SIM card application to be migrated according to the received data migration request, and sends the data migration instruction to a SIM card migration application installed on the same super SIM card as the SIM card application to be migrated.
  • the SIM card migration application can obtain the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card by accessing the calling interface, and encrypt the obtained application data to obtain ciphertext application data, and then send the ciphertext application data and the SIM card application to the SIM card management platform.
  • the SIM card management platform associates the ciphertext application data with the SIM card application identifier and stores them to realize data migration of the SIM card application in the old super SIM card.
  • the SIM card migration application can send a data recovery request carrying the SIM card application identifier to be restored to the SIM card management platform.
  • the SIM card management platform determines the corresponding ciphertext application data according to the SIM card application identifier to be restored, and sends a data recovery instruction carrying the SIM card application identifier to be restored and the ciphertext application data to the SIM card migration application.
  • the SIM card migration application installs the application to be restored on the super SIM card according to the data recovery instruction, and writes the ciphertext application data into the storage area corresponding to the SIM card application to be restored on the super SIM card, thereby completing the data recovery of the SIM card application.
  • the backup data can be used to restore the application on the new SIM card. While ensuring the security of the application data, data migration for the SIM card application is achieved, which greatly improves the user's card replacement experience.
  • the data migration and recovery methods provided in the above steps 11 to 17 require uploading the backup data to the SIM card management platform. Therefore, they are only applicable to SIM card applications that are not bound to the secure element (SE) chip serial number (SEID) installed on the super SIM card that controls the near-field payment function of the terminal device and are not bound to the terminal integrated circuit card identification code (ICCID).
  • SE secure element
  • SEID chip serial number
  • ICCID terminal integrated circuit card identification code
  • SIM card applications have lower data security requirements, and the relevant application data can be uploaded from the SIM card to the cloud server after encryption, such as SIM card access control and other SIM card applications.
  • SIM card applications with a higher security level when they are installed on a SIM card, they are often bound to the SEID of the SIM card or to the ICCID.
  • SIM card applications can only be used on the currently installed super SIM card and cannot be transferred to other SIM cards for use, that is, the application data of such applications cannot be backed up off the card, such as digital identity applications (such as resident digital ID cards) or asset-related applications (such as bus cards, campus cards, etc.). Due to the particularity of such SIM card applications, the data migration method provided in steps 11 to 17 above cannot be used for data migration.
  • the embodiment of the present application also provides another data migration method.
  • a SIM card management platform Digital Space Operation Platform, DSOP
  • SIM card terminal front-end operation interface
  • super SIM card service platform corresponding to the SIM card application to be migrated
  • other SIM card applications include a SIM card management platform (Digital Space Operation Platform, DSOP), a SIM card terminal (front-end operation interface), a super SIM card, a service platform corresponding to the SIM card application to be migrated, and other SIM card applications.
  • FIG6 The specific implementation flow diagram of the second data migration method provided in this application is shown in FIG6 , which mainly includes the following steps:
  • Step 21 the SIM card management platform receives the data migration instruction uploaded by the SIM card terminal
  • the data migration instruction carries the identification of the SIM card application to be migrated, and because the application to be migrated is an application associated with SEID or ICCID, the data migration instruction also carries the corresponding SEID or ICCID (such as a mobile phone number).
  • the user when the user needs to migrate the SIM card application installed on the super SIM card, the user can enter the super SIM card application management interface at the front-end card application management entrance provided by the SIM card terminal (such as a mobile phone), and trigger the SIM card terminal to upload a data migration request carrying the unique identifier of the SIM card application to be migrated to the SIM card management platform by clicking a designated virtual button on the operation interface.
  • the front-end card application management entrance may include but is not limited to: APP, web page, SMS port, etc.
  • Step 22 the SIM card management platform sends a user information migration instruction to the SIM card terminal in response to the data migration instruction received by executing step 21;
  • the user information migration instruction carries the identification information of the application to be migrated.
  • the user information represents the user's relevant usage records for the application to be migrated, such as the application's transaction records, balances, and user account related information.
  • This type of information is user usage information, which is simply saved and recorded on the super SIM card and has nothing to do with SEID or ICCID. Therefore, the SIM card management platform can issue a user information migration instruction to the SIM card terminal so that the super SIM card installed on the SIM card terminal, Collect user information corresponding to the applications to be migrated and upload it to the SIM card management platform.
  • the SIM card terminal can cooperate with the SIM card management platform to migrate data by performing the following operations, the method comprising: receiving the user information migration instruction issued by the SIM card management platform; according to the user information migration instruction, collecting the user information corresponding to the SIM card application to be migrated, and uploading it to the SIM card management platform.
  • Step 23 The SIM card management platform generates an application migration notification according to the user information obtained by executing step 22, and uploads the application migration notification to the service platform corresponding to the application to be migrated;
  • the business platform is used to install the applications to be migrated on the super SIM card, and can activate the personalized functions of the SIM card applications on the super SIM card.
  • the business platform corresponding to the digital ID card application such as the trusted identity authentication platform CTID.
  • the corresponding digital identity authentication application can be installed on the user's super SIM card through the trusted identity authentication platform CTID, and the electronic certificate generated for the user can be written into the super SIM card, thereby completing the activation of the personalized function for the digital identity authentication application.
  • the service platform After receiving the user information uploaded by the SIM card management platform, the service platform saves the user information so that when data is subsequently restored, the personalized function of the application to be restored can be activated according to the user information.
  • Step 24 the SIM card management platform sends a migration instruction to the SIM card terminal, so that the SIM card terminal responds to the migration instruction and deletes the application to be migrated installed on the super SIM card;
  • the SIM card management platform can issue a migration instruction to the SIM card terminal installed with the old super SIM card, so that the SIM card terminal deletes the application to be migrated installed on the old super SIM.
  • the user After the user completes the migration of the specific SIM card application user information in the super SIM card by performing the above steps and completes the replacement of the super SIM card, the user can restore the specific application on the new super SIM card by performing the following steps:
  • Step 25 the SIM card management platform receives the data recovery instruction uploaded by the SIM card terminal
  • the data recovery instruction carries an identification of the application to be recovered, which may refer to an application account logged in by the user using the application to be recovered, and the SIM card terminal is a terminal device equipped with a super SIM card.
  • the user When the user needs to restore a specified SIM card application (such as a digital identity application) on a new super SIM card, the user can send a data recovery instruction carrying the application identifier to be restored (the user login account corresponding to the application) to the SIM card management platform through the SIM card terminal.
  • a specified SIM card application such as a digital identity application
  • the user can send a data recovery instruction carrying the application identifier to be restored (the user login account corresponding to the application) to the SIM card management platform through the SIM card terminal.
  • Step 26 the SIM card management platform uploads the received identification of the application to be restored to the service platform corresponding to the application to be restored;
  • the service platform may determine the user information corresponding to the application identifier to be restored, and generate an application installation command according to the user information.
  • Step 27 The SIM card management platform receives the application installation command sent by the service platform, and sends the application installation command to the SIM card terminal.
  • the SIM card terminal installs the application to be restored on the super SIM card. It should be noted here that installing the SIM card application on the super SIM card is a common technical means in this field. The embodiment of the present application does not limit the specific method used by the SIM card migration APP to install the application to be migrated. After completing the installation of the SIM card application, the SIM card terminal can write the user information carried in the installation command issued by the service platform into the designated storage area for installing the SIM card application, and complete the activation of the personalized function of the application to be restored.
  • the SIM card terminal will send the data recovery result to the SIM card management platform, and the SIM card management platform will forward the data recovery result to the business platform so that the business platform can delete the user information stored on the business platform based on the data recovery result.
  • the user when the user needs to migrate the application data, the user can send a data migration instruction for a specific SIM card application to the SIM card management platform through the SIM card front-end operation interface, and the SIM card management platform responds to the data migration request uploaded by the user and sends a user information migration instruction to the SIM card terminal.
  • the SIM card terminal responds to the user information migration instruction and sends a user information collection instruction to the SIM card through the machine-card channel.
  • the super SIM card uploads the collected user information to the SIM card management platform through the SIM card terminal, and then forwards the collected user information corresponding to the application to be migrated to the corresponding application to be migrated through the SIM card management platform.
  • the service platform saves the user information so that the subsequent service platform can complete the installation of SIM applications and the activation of personalized functions for the user on the new super SIM card according to the saved user information.
  • the second data migration method provided in the embodiment of the present application does not require a full backup of the SIM card application data bound to the SEID or ICCID, but only needs to collect the user usage information generated when the user uses the SIM card application, and upload it to the service platform for storage.
  • the subsequent service platform can directly complete the download and installation of applications and the activation of personalized functions for the user on the newly replaced super SIM card according to the user usage information, which not only meets the user's needs for SIM card application migration, but also ensures the security of application data.
  • the present application also provides a data migration device, which is applied to SIM card migration applications, to solve the problem that the SIM card application data stored on the old SIM card is lost when the user needs to replace the super SIM card due to the inability to migrate the SIM card application installed on the super SIM card in the solution of the related technology, thereby causing the user to be unable to use the original SIM card application.
  • the specific structural diagram of the data migration device is shown in Figure 7, including: an application data acquisition unit 71, an encryption unit 72 and a data migration unit 73.
  • the application data acquisition unit 71 is used to acquire the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card;
  • An encryption unit 72 configured to encrypt the application data to be migrated to obtain ciphertext application data
  • the data migration unit 73 is used to send the encrypted application data and the identifier of the SIM card application to the SIM card management platform, and the SIM card management platform associates and stores the encrypted application data with the identifier of the SIM card application.
  • the application data acquisition unit 71 is specifically used to: determine the data storage area corresponding to the SIM card application on the super SIM card and the data length of the application data; call the data backup interface to access the data storage area, and obtain the application data to be migrated corresponding to the SIM card application according to the data length.
  • the encryption unit 72 is specifically used to: encrypt the application data to be migrated according to the national encryption algorithm to obtain ciphertext application data; send the ciphertext application data and the identifier of the SIM card application to the first SIM card terminal through the encryption machine-card channel, and the first SIM card terminal uploads the ciphertext application data and the identifier of the SIM card application to the SIM card management platform, wherein the first SIM card terminal is a terminal device equipped with the super SIM card.
  • it also includes an application locking unit, which is specifically used to: receive an application locking instruction issued by the SIM card management platform; delete the encrypted application data in response to the application locking instruction; lock the SIM card application so that the SIM card application is in a locked state, wherein the SIM card application in the locked state cannot be used.
  • an application locking unit which is specifically used to: receive an application locking instruction issued by the SIM card management platform; delete the encrypted application data in response to the application locking instruction; lock the SIM card application so that the SIM card application is in a locked state, wherein the SIM card application in the locked state cannot be used.
  • the embodiment of the present application also provides a data recovery device for SIM card migration applications, which is used to solve the problem that the SIM card application data stored on the old SIM card is lost when the user needs to replace the super SIM card due to the inability to migrate the SIM card application installed on the super SIM card in the solution of the related technology, thereby causing the user to be unable to use the original SIM card application.
  • the specific structural diagram of the data recovery device is shown in Figure 8, including: a recovery request sending unit 81, an instruction receiving unit 82, an application installation unit 83 and a data recovery unit 84.
  • the recovery request sending unit 81 is used to send a data recovery request to the SIM card management platform, wherein the data recovery request carries the SIM card application identifier to be recovered;
  • An instruction receiving unit 82 is used to receive a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the application identifier of the SIM card to be recovered and the encrypted application data;
  • An application installation unit 83 configured to install the SIM card application to be restored on the super SIM card in response to a first data restoration instruction issued by the SIM card management platform;
  • the data recovery unit 84 is used to write the encrypted application data into the storage area corresponding to the SIM card application to be restored on the super SIM card to complete data recovery.
  • the data recovery unit 84 is specifically configured to decrypt the ciphertext application data according to a national encryption algorithm to obtain plaintext application data; and call a data recovery interface to write the plaintext application data into a storage area corresponding to the SIM card application to be restored.
  • data clearing is specifically used to: upload the data recovery result of the SIM card application to be restored to the SIM card management platform, and the SIM card management platform clears the ciphertext application data corresponding to the SIM card application to be restored and stored in the backup database according to the data recovery result.
  • the user can send a data migration request for a specific SIM card application to a SIM card management platform through a SIM card terminal on which the super SIM card is installed.
  • the SIM card management platform generates a data migration instruction carrying an identifier of the SIM card application to be migrated according to the received data migration request, and sends the data migration instruction to a SIM card migration application installed on the same super SIM card as the SIM card application to be migrated.
  • the SIM card migration application can obtain the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card by accessing a calling interface, and encrypt the obtained application data to obtain ciphertext application data, and then send the ciphertext application data and the identifier of the SIM card application to the SIM card terminal.
  • the SIM card management platform associates and stores the ciphertext application data with the identifier of the SIM card application to realize the data migration of the SIM card application in the old super SIM card; when the user replaces the new super SIM card and needs to restore the SIM card application, the SIM card migration application can send a data recovery request carrying the identifier of the SIM card application to be restored to the SIM card management platform; the SIM card management platform determines the corresponding ciphertext application data according to the identifier of the SIM card application to be restored, and sends a data recovery instruction carrying the identifier of the SIM card application to be restored and the ciphertext application data to the SIM card migration application; the SIM card migration application installs the application to be restored on the super SIM card according to the data recovery instruction, and writes the ciphertext application data into the storage area corresponding to the SIM card application to be restored on the super SIM card, thereby completing the data recovery of the SIM card application.
  • the user can encrypt and back up the application data on the old SIM card and save it. Then, when the SIM card application needs to be restored after the SIM card replacement is completed, the backup data can be used to restore the application on the new SIM card. While ensuring the security of the application data, data migration for the SIM card application is achieved, which greatly improves the user's card replacement experience.
  • the present application also provides another data migration device, which is applied to a SIM card terminal to solve the problem that when a user needs to replace a super SIM card, the SIM card application data stored on the old SIM card is lost due to the inability to migrate the SIM card application installed on the super SIM card in the solution of the related technology, thereby causing the user to be unable to use the original SIM card application.
  • the specific structural diagram of the data migration device is shown in Figure 9, including: a data receiving unit 91 and a data uploading unit 92.
  • the data receiving unit 91 is specifically used to: receive the identifier of the SIM card application uploaded by the SIM card migration application, and the ciphertext application data corresponding to the SIM card application;
  • the data uploading unit 92 is specifically used to upload the encrypted application data and the identifier of the SIM card application to the SIM card management platform, and the SIM card management platform associates and stores the identifier of the SIM card application with the encrypted application data.
  • the embodiment of the present application also provides a data recovery device to solve the problem that the SIM card application data stored on the old SIM card is lost when the user needs to replace the super SIM card due to the inability to migrate the SIM card application installed on the super SIM card in the solution of the related art, thereby causing the user to be unable to use the original SIM card application.
  • the specific structural schematic diagram of the data recovery device is shown in Figure 10, including: a request receiving unit 101, a recovery instruction receiving unit 102, and a forwarding unit 103.
  • the request receiving unit 101 is specifically used to: receive a data recovery request uploaded by the SIM card migration application through the machine-card channel, wherein the data recovery request carries an identifier of the SIM card application to be restored;
  • the recovery instruction receiving unit 102 is specifically used to: upload the data recovery request to the SIM card management platform, and receive a first data recovery instruction issued by the SIM card management platform in response to the data recovery request, wherein the first data recovery instruction carries the identifier of the SIM card application to be restored and the ciphertext application data;
  • the forwarding unit 103 is specifically used to send the first data recovery instruction to the SIM card migration application, and the SIM card migration application installs the SIM card application to be restored on the super SIM card, and writes the encrypted application data into the storage area corresponding to the SIM card application to be restored on the super SIM card to complete data recovery.
  • the user can send a data migration request for a specific SIM card application to the SIM card management platform through the SIM card terminal on which the super SIM card is installed.
  • the SIM card management platform generates a data migration instruction carrying the identifier of the SIM card application to be migrated according to the received data migration request, and sends the data migration instruction to the SIM card migration application installed on the same super SIM card as the SIM card application to be migrated.
  • the SIM card migration application can obtain the application data to be migrated corresponding to the SIM card application from the application data stored in the super SIM card by accessing the calling interface, and encrypt the obtained application data to obtain the ciphertext application data, and then send the ciphertext application data and the identifier of the SIM card application to the SI M card management platform, the SIM card management platform associates and stores the ciphertext application data with the identifier of the SIM card application to realize the data migration of the SIM card application in the old super SIM card; and when the user replaces the new super SIM card and needs to restore the SIM card application, a data recovery request carrying the identifier of the SIM card application to be restored can be sent to the SIM card management platform through the SIM card migration application; the SIM card management platform determines the corresponding ciphertext application data according to the identifier of the SIM card application to be restored, and sends a data recovery instruction carrying the identifier of the SIM card application to be restored and the ciphertext application data to the SIM card migration application
  • the user can encrypt and back up the application data on the old SIM card and save it. Then, when the SIM card application needs to be restored after the SIM card replacement is completed, the backup data can be used to restore the application on the new SIM card. While ensuring the security of the application data, data migration for the SIM card application is achieved, which greatly improves the user's card replacement experience.
  • SIM card applications installed on the super SIM card that have no binding relationship with the secure element (Secure Element, SE) chip serial number (SEID) that controls the near-field payment function of the terminal device, and have no binding relationship with the terminal integrated circuit card identification code (Integrate circuit card identity, ICCID).
  • SE secure element
  • SEID chip serial number
  • ICCID integrated circuit card identity
  • SIM card applications with a higher security level, when they are installed on a SIM card, they are often bound to the SEID of the SIM card or to the ICCID.
  • SIM card applications can only be used on the currently installed super SIM card and cannot be transferred to other SIM cards for use, that is, the application data of such applications cannot be backed up off the card.
  • digital identity applications such as resident digital ID cards
  • asset-related applications such as bus cards, campus cards, etc.
  • the embodiment of the present application also provides another data migration device.
  • the specific structural diagram of the data migration device is shown in Figure 11, including: a second migration instruction receiving unit 111, a user information migration unit 112, a migration notification sending unit 113 and a second migration instruction issuing unit 114.
  • the second migration instruction receiving unit 111 is specifically used to receive a data migration instruction uploaded by a SIM card terminal, wherein the data migration instruction carries an application identifier of the SIM card to be migrated;
  • the user information migration unit 112 is specifically used to: in response to the data migration instruction, issue a user information migration instruction to the SIM card terminal, and the SIM card terminal collects the user information corresponding to the SIM card application to be migrated and uploads it to the SIM card management platform;
  • the migration notification sending unit 113 is specifically used to: generate an application migration notification according to the user information, and upload the application migration notification to the service platform corresponding to the SIM card application to be migrated, and the service platform saves the user information, wherein the service platform is used to install the application to be migrated on the super SIM card;
  • the second migration instruction issuing unit 114 is specifically configured to issue a migration instruction to the SIM card terminal, so that the SIM card terminal deletes the SIM card application to be migrated installed on the super SIM card in response to the migration instruction.
  • the embodiment of the present application further provides a data recovery device.
  • the specific structural diagram of the data recovery device is shown in FIG12 , and includes: a second recovery instruction receiving unit 121 , an identification uploading unit 122 , and an installation command issuing unit 123 .
  • the second restoration instruction receiving unit 121 is specifically used to: receive a data restoration instruction uploaded by a SIM card terminal, wherein the data restoration instruction carries an application identifier of the SIM card to be restored;
  • the identification uploading unit 122 is specifically used to: upload the SIM card application identification to be restored to the service platform corresponding to the SIM card application to be restored, and the service platform determines the user information corresponding to the SIM card application identification to be restored, and generates an application installation command according to the user information;
  • the installation command issuing unit 123 is specifically used to: receive the application installation command sent by the service platform, and issue the application installation command to the SIM card terminal, so that the fourth SIM card terminal installs the SIM card application to be restored on the super SIM card.
  • it further includes a deleting unit, which is specifically used to: receive a recovery result notification uploaded by the SIM card terminal; upload the recovery result notification to the service platform, so that the service platform deletes the saved user information according to the recovery result notification.
  • a deleting unit which is specifically used to: receive a recovery result notification uploaded by the SIM card terminal; upload the recovery result notification to the service platform, so that the service platform deletes the saved user information according to the recovery result notification.
  • the user can send a data migration instruction for a specific SIM card application to the SIM card management platform through the SIM card front-end operation interface.
  • the SIM card management platform responds to the data migration request uploaded by the user and sends a user information migration instruction to the SIM card terminal.
  • the SIM card terminal responds to the user information migration instruction and sends a user information collection instruction to the SIM card through the machine-card channel.
  • the super SIM card uploads the collected user information to the SIM card management platform through the SIM card terminal, and then forwards the collected user information corresponding to the application to be migrated to the corresponding application to be migrated through the SIM card management platform.
  • the service platform saves the user information so that the subsequent service platform can complete the installation of SIM applications and the activation of personalized functions for the user on the new super SIM card according to the saved user information.
  • the second data migration device and data recovery device provided in the embodiment of the present application do not need to fully back up the SIM card application data bound to the SEID or ICCID, but only need to collect the user usage information generated when the user uses the SIM card application, and upload it to the service platform for storage.
  • the subsequent service platform can directly complete the download and installation of applications and the activation of personalized functions for the user on the newly replaced super SIM card according to the user usage information, which not only meets the user's needs for SIM card application migration, but also ensures the security of application data.
  • FIG13 is a schematic diagram of the structure of an electronic device of an embodiment of the present application.
  • the electronic device includes a processor, and optionally also includes an internal bus, a network interface, and a memory.
  • the memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage, etc.
  • the electronic device may also include hardware required for other services.
  • the processor, the network interface and the memory may be interconnected via an internal bus, which may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc.
  • ISA Industry Standard Architecture
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the bus may be divided into an address bus, a data bus, a control bus, etc.
  • FIG13 only uses one bidirectional arrow, but does not mean that there is only one bus or one type of bus.
  • the memory is used to store the program.
  • the program may include a program code, and the program code includes a computer operation instruction.
  • the memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.
  • the processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a data migration device at the logical level.
  • the processor executes the program stored in the memory and is specifically used to perform the following operations:
  • the method performed by the data migration electronic device disclosed in the embodiment shown in FIG. 13 of the present application can be applied to a processor or implemented by a processor.
  • the processor may be an integrated circuit chip with signal processing capabilities.
  • each step of the above method can be completed by an integrated logic circuit of hardware in the processor or an instruction in the form of software.
  • the above processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.
  • the methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed.
  • the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.
  • the steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution.
  • the software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc.
  • the storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.
  • the electronic device of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.
  • the embodiment of the present application further proposes a computer-readable storage medium, which stores one or more programs, wherein the one or more programs include instructions, which, when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to execute the method of the embodiment shown in FIG. 2, and are specifically used to perform the following operations:
  • the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.
  • a computer-usable storage media including but not limited to disk storage, CD-ROM, optical storage, etc.
  • These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.
  • These computer program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.
  • a computing device includes one or more processors (CPU), input/output interfaces, network interfaces, and memory.
  • processors CPU
  • input/output interfaces network interfaces
  • memory volatile and non-volatile memory
  • Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and/or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.
  • Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, modules of programs or other data. Examples of computer storage media include, but are not limited to, phase-change RAM (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined in this article, computer-readable media does not include transitory media such as modulated data signals and carrier waves.
  • PRAM phase-change RAM
  • SRAM static random access memory
  • DRAM dynamic random access memory
  • RAM random access memory
  • ROM read
  • the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
  • a computer-usable storage media including but not limited to disk storage, CD-ROM, optical storage, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Quality & Reliability (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请公开了一种数据迁移方法、数据恢复方法、装置、电子设备以及计算机可读存储介质。数据迁移方法包括:从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。

Description

数据迁移方法、数据恢复方法、装置、设备以及存储介质
相关申请的交叉引用
本申请主张在2023年5月19日在中国提交的中国专利申请No.202310570561.4的优先权,其全部内容通过引用包含于此。
技术领域
本申请涉及计算机及移动通信技术领域,尤其涉及一种数据迁移方法、数据恢复方法、装置、电子设备以及计算机可读存储介质。
背景技术
随着近年来第五代移动通信(5th Generation Mobile Communication Technology,5G)技术以及近场通信(Near Field Communication,NFC)技术的普及与发展,电信运营商开发出了一种具备安全计算、安全存储、安全连接等特性的超级用户身份识别模块(Subscriber Identity Module,SIM)卡,用户可以在超级SIM卡上安装应用或者保存应用数据。其中,可以安装在超级SIM卡上的应用,可称为SIM卡应用。
在用户进行安装有超级SIM卡的新旧设备更换等场景下,如何安全有效地对设备中超级SIM卡上的SIM卡应用的应用数据进行迁移,是本领域亟待解决的技术问题。
发明内容
本申请实施例提供一种数据迁移方法,用以解决相关技术存在的如何安全有效地将设备中超级SIM卡上的SIM卡应用的应用数据进行迁移的问题。
本申请实施例提供一种数据恢复方法,用以解决相关技术存在的如何安全有效地将设备中超级SIM卡上的SIM卡应用的应用数据进行迁移的问题。
本申请实施例还提供一种数据迁移装置、数据恢复装置超级SIM卡、电子设备和计算机可读存储介质。
本申请实施例采用下述技术方案:
一种数据迁移方法,应用于SIM卡迁移应用,包括:
从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
一种数据恢复方法,应用于SIM卡迁移应用,包括:向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;响应于所述SIM卡管理平台下发的第一数据恢复指令,在所述超级SIM卡上安装所述待恢复SIM卡应用;将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
一种数据迁移方法,应用于SIM卡终端,包括:接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,由所述SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
一种数据恢复方法,应用于SIM卡终端,包括:接收SIM卡迁移应用通过机卡通道上传的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;将所述数据恢复请求上传至SIM卡管理平台,接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;将所述第一数据恢复指令发送至所述SIM卡迁移应用,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
一种数据迁移方法,应用于SIM卡管理平台,包括:接收SIM卡终端上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;将所述SIM卡应用的标识与所述密文应用数据关联存储;通过所述SIM卡终端,向SIM卡迁移应用发送应用锁定指令,由所述SIM卡迁移应用对所述SIM卡应用进行锁定,完成数据迁移。
一种数据恢复方法,应用于SIM卡管理平台,包括:接SIM卡终端发送的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;确定与所述SIM卡应用的标识对应的密文应用数据;根据所述密文应用数据生成数据恢复指令;通过所述SIM卡终端向SIM卡迁移应用下发所述数据恢复指令,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
一种数据迁移方法,应用于SIM卡管理平台,包括:接收SIM卡终端上传的数据迁移指令,其中,所述数据迁移指令中携带有待迁移SIM卡应用标识;响应于所述数据迁移指令,向所述SIM卡终端下发用户信息迁移指令,由所述SIM卡终端采集所述待迁移SIM卡应用对应的用户信息,并上传至SIM卡管理平台;根据所述用户信息,生成应用迁移通知,并将所述应用迁移通知上传至所述待迁移SIM卡应用对应的业务平台,由所述业务平台保存所述用户信息,其中,所述业务平台用于在超级SIM卡上安装所述待迁移应用;向所述SIM卡终端下发迁移指令,以使得所述SIM卡终端响应于所述迁移指令,删除所述超级SIM卡上安装的所述待迁移SIM卡应用。
一种数据恢复方法,应用于SIM卡管理平台,包括:接收SIM卡终端上传的数据恢复指令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;将所述待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令;接收所述业务平台发送的应用安装命令,并将所述应用安装命令下发至所述SIM卡终端,由所述第四SIM卡终端在所述超级SIM卡上安装所述待恢复SIM卡应用。
一种数据迁移方法,应用于SIM卡终端,包括:向SIM卡管理平台发送数据迁移指令,其中,所述数据迁移指令中携带有待迁移SIM卡应用标识;接收SIM卡管理平台下发的用户信息迁移指令;根据所述用户信息迁移指令,采集所述待迁移SIM卡应用对应的用户信息,并上传至所述SIM卡管理平台;接收SIM卡管理平台下发的迁移指令,根据所述迁移指令删除所述超级SIM卡上安装的所述待迁移SIM卡应用。
一种数据恢复方法,应用于SIM卡终端,包括:向SIM卡管理平台发送数据恢复指令,由所述SIM卡管理平台将所述待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,并由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;接收所述业务平台发送的应用安装命令,在超级SIM卡上安装所述待恢复SIM卡应用。
一种数据迁移装置,应用于SIM卡迁移应用,包括:应用数据获取单元,用于从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;加密单元,用于对所述待迁移的应用数据进行加密,得到密文应用数据;数据迁移单元,用于将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
一种数据恢复装置,应用于SIM卡迁移应用,包括:恢复请求发送单元,用于向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用标识;指令接收单元,用于接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用标识以及密文应用数据;应用安装单元,用于响应于所述SIM卡管理平台下发的第一数据恢复指令,在所述超级SIM卡上安装所述待恢复SIM卡应用;数据恢复单元,用于将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
一种数据迁移装置,应用于SIM卡终端,包括:数据接收单元,用于接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;数据上传单元,用于将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,由所述SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
一种超级SIM卡,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
一种电子设备,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
一种电子设备,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;响应于所述SIM卡管理平台下发的第一数据恢复指令,在所述超级SIM卡上安装所述待恢复SIM卡应用;将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
一种计算机可读存储介质,所述计算机可读存储介质存储一个或多个程序,所述一个或多个程序当被包括多个应用程序的电子设备执行时,使得所述电子设备执行以下操作:从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
本申请实施例采用的上述至少一个技术方案能够达到以下有益效果:
采用本申请实施例提供的数据迁移方法,当用户需要对超级SIM卡上的SIM卡应用进行迁移时,可以通过SIM卡迁移应用从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据,并对该获取到的应用数据进行加密,得到密文应用数据,进而将密文应用数据,以及SIM卡应用的标识,发送至SIM卡管理平台,由SIM卡管理平台对密文应用数据与SIM卡应用的标识关联存储,以实现对超级SIM卡中SIM卡应用的数据迁出。采用本申请实施例所提供的数据迁移方法,利用安装在SIM卡上的SIM卡迁移应用,可以对超级SIM卡上的应用数据进行加密备份保存,在保证应用数据安全迁出超级SIM卡的情况下,实现了针对SIM卡应用的数据迁移,解决了相关技术无法安全有效地将设备中超级SIM卡上的SIM卡应用的应用数据进行迁移的问题。
附图说明
此处所说明的附图用来提供对本申请的进一步理解,构成本申请的一部分,本申请的示意性实施例及其说明用于解释本申请,并不构成对本申请的不当限定。在附图中:
图1为本申请实施例提供的一种数据迁移系统的具体结构示意图;
图2为本申请实施例提供的一种数据迁移恢复方法的具体流程示意图;
图3a为本申请实施例提供的一种前端卡应用管理入口界面示意图;
图3b为本申请实施例提供的一种前端卡应用管理界面示意图;
图3c为本申请实施例提供的一种迁移确认界面示意图;
图3d为本申请实施例提供的一种迁出成功提示界面示意图;
图4a为本申请实施例提供的另一种前端卡应用管理界面示意图;
图4b为本申请实施例提供的一种恢复进度显示界面示意图;
图4c为本申请实施例提供的一种恢复成功提示界面示意图;
图5为本申请实施例提供的另一种数据迁移系统的具体结构示意图;
图6为本申请实施例提供的另一种数据迁移恢复方法的具体流程示意图;
图7为本申请实施例提供的一种数据迁移装置的具体结构示意图;
图8为本申请实施例提供的一种数据恢复装置的具体结构示意图;
图9本申请实施例提供的另一种数据迁移装置的具体结构示意图;
图10为本申请实施例提供的另一种数据恢复装置的具体结构示意图;
图11本申请实施例提供的又一种数据迁移装置的具体结构示意图;
图12为本申请实施例提供的又一种数据恢复装置的具体结构示意图;
图13为本申请实施例提供的一种数据迁移恢复电子设备的具体结构示意图。
具体实施方式
为使本申请的目的、技术方案和优点更加清楚,下面将结合本申请具体实施例及相应的附图对本申请技术方案进行清楚、完整地描述。显然,所描述的实施例仅是本申请一部分实施例,而不是全部的实施例。基于本申请中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本申请保护的范围。
以下结合附图,详细说明本申请各实施例提供的技术方案。
本申请实施例提供的一种数据迁移方法,用以解决相关技术存在的如何安全有效地将设备中超级SIM卡上的SIM卡应用的应用数据进行迁移的问题。如图1所示,为本申请实施例提供一种用于实现数据迁移方法的迁移系统,该数据迁移系统包括SIM卡管理平台(Digital Space Operation Platform,DSOP)、SIM卡终端(前端操作界面)、超级SIM卡、SIM卡数据迁移应用以及其他SIM卡应用组成,其中,SIM卡管理平台由DSOP核心平台以及数字资产云平台两部分组成。
为了便于对本申请实施例所提供的数据迁移方法的理解,首先对本申请所涉及的名词进行解释:
SIM(Subscriber Identification Module)卡:为全球移动通信系统(Global System for Mobile Communications,GSM)中用户所持有集成电路卡(Integrated Circuit Card,IC卡),也称为用户身份识别卡或者智能卡,手机只有插入SIM卡后,才能入网使用。
超级SIM卡:是一种基于NFC-USIM卡安全芯片,利用SIM卡不同功能模块,以“SIM+CA证书”等模式,开发的具备安全计算、安全存储、安全连接等特性的一种新型的SIM卡,超级SIM卡除了可以提供5G网络等基础功能外,还可以通过安装SIM卡应用的方式,来代替身份证、校园卡、门禁卡、交通卡、电子钱包等证和卡,实现多卡合一。
本申请实施例提供的数据迁移方法的执行主体,可以但不限于为安装有超级SIM卡的SIM终端(比如手机或者平板电脑)、超级SIM卡本身或者超级SIM卡后台管理平台(比如,SIM卡管理平台)等中的至少一种;此外,该方法的执行主体还可以是安装在超级SIM卡上的SIM卡应用本身。
为便于描述,下文以该方法的执行主体为安装在超级SIM卡上的数据迁移应用(Application,APP)为例,对该方法的实施方式进行介绍。可以理解,该方法的执行主体为数据迁移APP只是一种示例性的说明,并不应理解为对该方法的限定。
本申请所提供的数据迁移方法的具体实现流程示意图如图2所示,主要包括下述步骤:
步骤11,从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;
其中,SIM卡应用是指安装在超级SIM卡上的,为用户提供相应功能服务的应用程序,SIM卡应用从是否出厂预置维度区分,可分为两类:一是出厂预置的卡应用,如SIM盾、SIMeID、SIM快捷认证、白卡写卡应用;另一类是出厂未预置的,如e公民、SIM车钥匙、SIM门禁、SIM一卡通等。对于出厂预置的卡应用,可以通过在SIM卡与操作系统之间建立承载独立协议(Bearer Independent Protocol,BIP)通道的方式进行SIM卡应用更新、升级;对于出厂未预置的卡应用,可以从超级SIM卡管理平台查阅选择,并通过BIP通道下载安装。而其中应用数据可以是指用于为该SIM卡应用正常运行提供支持的基础数据,比如,SIM卡应用安装包中所保存的数据;或者也可以是用户在使用该SIM卡应用过程中所产生的用户使用数据,比如,用户在使用出行类SIM卡应用时所产生的余额数据、交易记录数据以及出入站台数据等。
这里需要说明的是,本申请实施例中,SIM卡应用的应用数据可以存储在超级SIM卡的内部存储区,该内部存储区域的存储安全等级相对较高,可以用于存储敏感数据。或者也可以将应用数据存储在超级SIM卡的扩展存储区,扩展存储区的存储安全等级相对低于内部存储区域,可以用于存储非敏感数据。例如,在一种可选的实施方式中,超级SIM卡的扩展存储区可以为外接Flash存储区域。本申请实施例对超级SIM卡具体将SIM卡应用的应用数据存储在哪个存储区域不做限定。
在一种实施方式中,当用户需要对安装在超级SIM卡上的SIM卡应用进行迁移时,用户可以在SIM卡终端(比如手机)提供的前端卡应用管理入口,进入超级SIM卡应用管理界面,并通过操作界面上通过点击指定虚拟按键,来触发SIM卡迁移APP通过SIM卡终端向SIM卡管理平台上传携带有待迁移SIM卡应用唯一标识的数据迁移请求。其中,该前端卡应用管理入口可以包括但不仅限于:APP、网页、短信端口等。
例如,SIM卡终端所提供的前端卡应用管理入口如图3a所示,用户可以通过点击该页面中的“卡空间管理”虚拟按键,触发SIM卡终端显示超级SIM卡应用管理界面,如图3b所示,进而用户可以通过点击待迁移应用对应的迁移按键(A)触发SIM卡迁移APP向SIM卡终端发送携带有待迁移SIM卡应用唯一标识的数据迁移请求,并通过SIM卡终端向SIM卡管理平台转发该数据迁移请求。
另外,这里需要说明的是,为了避免由于用户误触迁移按键而导致的误操作,在一种实施方式中,当用户点击前端操作界面中显示的迁移按键后,SIM卡终端可以进一步为用户显示如图3c所示的确认界面,以通过二次确认的方式,确定用户是否需要对选中的SIM卡应用进行迁移,用户点击该界面中的“迁移”虚拟按键后,才会触发SIM卡终端向SIM卡管理平台上传数据迁移请求。
SIM卡管理平台接收到SIM卡终端上传的数据迁移请求后,将会生成针对该超级SIM卡的数据迁移指令,并将该数据迁移指令下发至该SIM卡终端。SIM卡终端响应于该数据迁移指令,可以通过开启机卡通道或者通过在SIM卡与操作系统之间建立BIP通道的方式,将该数据迁移指令下发给超级SIM卡的SIM卡迁移应用。其中,承载独立协议是在3GPPTS 31.111规范中提出的一种面向连接的传输协议,协议支持全球移动通信系统(Global System for Mobile Communications,GSM),码分多址(Code Division Multiple Access,CDMA)以及通用移动通信系统(Universal Mobile Telecommunications System, UMTS)等移动通信网络,允许SIM卡和终端建立面向连接的数据通道,实现终端与SIM之间的高速数据传输。
进而SIM卡迁移APP可以响应于数据迁移指令,从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据。
在本申请实施例中,基于超级SIM卡自身的安全管理策略,同一超级SIM卡不同安全域内的应用之间可以通过调用特定接口的方式,对其他应用的数据存储区域进行读取,以实现在超级SIM卡内的跨安全域数据交互。
在一种实施方式中,SIM卡迁移APP可以通过如下子步骤获取待迁出SIM卡应用对应的应用数据:
子步骤1101:SIM卡迁移APP确定待迁出SIM卡应用对应的数据存储区域以及待迁移数据的数据长度;
具体地,SIM卡迁移APP可以根据数据迁移指令中携带的唯一标识,确定待迁移SIM卡应用,并调用该待迁移SIM卡应用的共享接口,向待迁移SIM卡应用发出数据备份通知,进而根据待迁移SIM卡应用响应于该数据备份通知而返回的信息,确定待迁出SIM卡应用对应的数据存储区域以及待迁移数据的数据长度。
子步骤1102,SIM卡迁移APP调用数据备份接口对数据存储区域进行访问,并按照所述数据长度,获取待迁出SIM卡应用对应的备份数据。
其中,数据长度用于表示在该数据存储区域内,需要备份的、有效数据的字节数,进而SIM卡迁移APP可以按照该数据长度,从数据存储区域内读取指定长度的数据,作为该待迁出SIM卡应用对应的应用数据。
另外这里需要说明的是,如果备份数据量较大,则SIM卡迁移APP可以通过多次调用该数据备份接口的方式,分次读取待迁出SIM卡应用对应的备份数据。
步骤12,SIM卡迁移APP对通过执行步骤11得到应用数据进行加密,得到密文应用数据;
为了保证用户数据的安全性,备份数据在离开超级SIM卡之前,SIM卡迁移APP首先需要对该些备份数据进行加密,在本申请实施例中,SIM卡迁移APP可以根据国密算法(比如:SM1算法,SM2算法,SM3算法以及SM4算法)对获取到的备份数据进行加密,进而得到密文备份数据。
步骤13,将密文应用数据,以及SIM卡应用的标识,发送至SIM卡管理平台,由SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
这里需要说明的是,由于本申请实施例所提供的数据迁移方法一般是针对用户更换终端设备或者更换超级SIM卡的场景,在这种场景下,用户的设备编码或者电话号码可能均发生了变更,在这种情况下,为了保证SIM卡管理平台可以确定接收到的该些密文备份数据所对应的用户,在一种实施方式中,SIM卡迁移APP可以将SIM卡迁移应用标识(比如可以是用户使用该SIM卡迁移APP所注册的账号)与该密文备份数据一并上传至SIM卡管理平台。
另外这里需要说明的是,SIM卡迁移应用在将密文备份数据发送至SIM卡终端时,为了进一步保证用户个人数据的安全性,超级SIM卡可以进一步根据特定通信加密协议对密文备份数据进行二次加密,并传输至SIM卡终端。
在一种实施方式中,超级SIM卡具体可以根据SCP02协议,对密文备份数据进行二次加密,其中,SCP02协议是一种用于SIM卡的安全通信的标准协议,它规定了SIM卡与终端设备之间进行加密通信时使用的密钥协商和加密算法等相关内容。该协议提供了可靠的安全性保障,防止了恶意攻击者对智能卡信息的窃取或篡改,从而可以保传输数据的完整性和安全性。通过SCP02协议对SIM卡与终端之间的传输数据进行协商加密属于相关技术领域常用技术手段,故本申请实施例对根据SCP02协议,对密文备份数据进行二次加密以及传输的具体实现方案不做赘述。
SIM卡终端在接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据后,会直接将该密文应用数据以及SIM卡应用的标识上传至SIM卡管理平台,由SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
SIM卡管理平台依次根据SCP02协议以及国密算法对该密文备份数据进行解密,进而得到密文数据对应的明文备份数据以及SIM卡迁移应用标识,SIM卡管理平台将密文备份数据与SIM卡迁移应用标识关联保存至备份数据库中,以便后续当需要进行应用恢复时,SIM卡管理平台可以根据SIM卡迁移应用标识确定对应的备份数据。
在一种实施方式中,本申请实施例提供的数据迁移方法主要是针对SIM卡更换的场景,在该场景下,当SIM卡更换完毕后,旧SIM卡将会被丢弃或者回收,为了保证旧SIM卡中所安装的SIM卡应用数据不会泄露,在SIM卡迁移APP按照上述方法将SIM卡迁移应用标识以及密文备份数据共同上传至SIM卡管理平台,完成对旧SIM卡上应用的迁移后,SIM卡管理平台可以向旧超级SIM卡下发应用锁定指令,以使得SIM卡迁移APP对本地保存的密文备份数据进行删除,并将该待迁移SIM卡应用进行锁定,具体地,本申请实施例提供的方法可以包括:接收所述SIM卡管理平台下发的应用锁定指令;响应于所述应用锁定指令,删除所述密文备份数据;对所述待迁出SIM卡应用进行锁定,以使得所述待迁出SIM卡应用处于锁定状态,其中,处于所述锁定状态下的SIM卡应用无法使用。
在完成SIM卡应用迁移后,SIM卡终端前端可以显示如图3d的“迁出成功”提示通知,以提示用户SIM卡应用迁移完成。
当用户通过执行上述步骤完成对超级SIM卡中SIM卡应用的迁移,并完成超级SIM卡的更换后,用户可以通过下述步骤,将在SIM卡管理平台上保存的SIM卡应用备份数据迁入新的超级SIM卡上,以完成在新超级SIM卡上的数据恢复:
步骤14,SIM卡迁移应用向SIM卡管理平台发送数据恢复请求;
其中,该数据恢复请求中携带有待恢复SIM卡应用标识。该SIM卡迁移APP可以是超级SIM卡上默认安装的应用,或者也可以是用户根据需要自行下载并安装在超级SIM卡上的应用,在完成超级SIM卡更换后,用户可以在SIM卡终端的前端显示页面登录SIM卡迁移APP对应的账户,进而通过SIM卡迁移APP向SIM卡管理平台发送数据恢复请求。
在本申请实施例中,SIM卡迁移应用可以通过机卡通道将数据恢复请求上传至SIM卡终端,进而通过SIM卡终端将数据恢复请求发送至SIM卡管理平台,则在一种实施方式中,SIM卡终端可以执行如下操作,配合SIM卡迁移应用进行数据恢复,方法包括:接收SIM卡迁移应用通过机卡通道上传的数据恢复请求;将数据恢复请求上传至SIM卡管理平台。
相应地,SIM卡管理平台在接收到SIM卡终端发送的数据恢复请求后,可以通过执行如下操作,配合SIM卡迁移应用以及SIM卡终端进行数据恢复,方法包括:确定与所述SIM卡应用的标识对应的密文应用数据;根据所述密文应用数据生成数据恢复指令;通过所述SIM卡终端向SIM卡迁移应用下发所述数据恢复指令。
步骤15,接收SIM卡管理平台响应于数据恢复请求下发的数据恢复指令;
其中,数据恢复指令中携带有待恢复SIM卡应用的标识以及密文应用数据,密文应用数据为SIM卡管理平台根据待恢复SIM卡应用标识,在预先生成的备份数据库中确定的。
这里需要说明的是,由于本申请实施例所提供的数据恢复方法一般是针对用户更换终端设备或者更换超级SIM卡的场景,在这种场景下,用户的设备编码或者电话号码可能均发生了变更,因此,为了保证SIM卡管理平台可以确定待恢复SIM卡应用所对应的用户,在一种实施方式中,在进行数据恢复操作时,SIM卡迁移APP可以将SIM卡迁移应用标识(比如可以是用户使用该SIM卡迁移APP所注册的账号)与待恢复SIM卡应用的标识一并上传至SIM卡管理平台,以便SIM卡管理平台可以根据接收到的数据恢复请求中所携带的SIM卡迁移应用标识(比如,SIM卡迁移APP对应的账户)以及待恢复SIM卡应用的标识,确定待恢复SIM卡应用对应的应用数据,进而根据待恢复应用以及应用数据,生成数据恢复指令。
这里需要说明的是,在本申请实施例中,用户可以通过SIM卡迁移APP发送针对指定SIM卡应用的数据恢复请求,即在该数据恢复请求中携带待恢复应用的标识信息;或者用户也可以通过SIM卡迁移APP发送针对所有已备份应用的数据恢复请求,即SIM卡迁移APP发送的数据恢复请求中可以不携带待恢复SIM卡应用的标识信息,则在这种情况下,SIM卡管理平台可以根据数据恢复请求中携带的SIM卡迁移APP对应的账户,在备份数据库中确定所有与该账户对应的待恢复应用标识以及备份数据。
步骤16,响应于通过执行步骤15接收到的数据恢复指令,在超级SIM卡上安装待恢复SIM卡应用;
在一种实施方式中,SIM卡迁移APP可以通过如下方法在超级SIM卡上安装待恢复应用:SIM卡迁移APP响应于第一数据恢复指令,确定待恢复的SIM卡应用,通过选择(select)指令选择管理应用,通过写二进制(update binary)指令写入应用的接入控制架构(Access Control,AC)及辅助安全域AC架构,通过select指令选中主安全域,通过install指令创建待迁移卡应用的安全域,通过put key完成安全域密钥写入,最后通过install指令完成该SIM卡应用的安装。这里需要说明的是,在超级SIM卡上安装SIM卡应用属于本领域常用技术手段,本申请实施例对SIM卡迁移APP具体采用何种方法安装待迁移应用不做限定。
步骤17,SIM卡迁移APP将获取到的密文应用数据写入超级SIM卡上与待恢复SIM卡应用对应的存储区域中,完成数据恢复。
在一种实施方式中,SIM卡迁移APP可以首先根据国密算法对获取到的密文应用数据进行解密,得到对应的明文应用数据,并通过调用数据恢复接口的方式,访问该待恢复SIM卡应用对应的存储区域,进而将该些明文应用数据写入对应的存储区域,完成对该待恢复SIM卡应用的数据恢复。
例如,用户可以在如图4a所示超级SIM卡应用管理界面中可以通过点击待恢复SIM卡应用对应的恢复按键(B)触发SIM卡迁移APP向SIM卡管理平台上传数据恢复请求,随后,SIM卡迁移APP会通过执行上述步骤15~步骤17的相关方案,对待恢复SIM卡应用进行数据恢复,在数据恢复过程中,SIM卡迁移APP会显示如图4b所示的恢复进度显示界面,以清楚直观地为用户展示数据恢复进程,在完成SIM卡应用恢复完成后,SIM卡终端前端可以显示如图4c的“恢复成功”提示通知,以提示用户SIM卡应用恢复完成。
另外这里还需要说明的是,在完成应用数据恢复后,SIM卡迁移APP会向SIM卡管理平台发送数据恢复结果,以使得SIM卡管理平台根据数据恢复结果,清除备份数据库中保存的、与待恢复SIM卡应用对应的所述密文应用数据。
具体地,当SIM卡管理平台向SIM卡迁移应用下发所述数据恢复指令后,SIM卡管理平台可以继续执行以下操作:接收SIM卡迁移应用上传的、针对待恢复SIM卡应用的数据恢复结果;根据数据恢复结果,删除与待恢复SIM卡应用对应的所述密文应用数据。
采用本申请实施例提供的数据迁移方法,当用户需要对超级SIM卡上的SIM卡应用进行迁移(比如在换卡的情况下)时,用户可以通过安装该超级SIM卡的SIM卡终端向SIM卡管理平台发送针对特定SIM卡应用的数据迁移请求,SIM卡管理平台根据接收到的数据迁移请求生成携带有待迁移SIM卡应用标识的数据迁移指令,并将该数据迁移指令下发至与该待迁移SIM卡应用安装在同一超级SIM卡上的SIM卡迁移应用处,SIM卡迁移应用响应于该数据迁移指令,可以通过访问调用接口的方式,从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据,并对该获取到的应用数据进行加密,得到密文应用数据,进而将密文应用数据,以及SIM卡应用的标识,发送至SIM卡管理平台,由SIM卡管理平台对密文应用数据与SIM卡应用的标识关联存储,以实现对旧超级SIM卡中SIM卡应用的数据迁出;而当用户更换完新的超级SIM卡,需要进行SIM卡应用恢复时,可以通过SIM卡迁移应用向SIM卡管理平台发送携带有待恢复SIM卡应用标识的数据恢复请求;SIM卡管理平台根据待恢复SIM卡应用标识,确定对应的密文应用数据,并向SIM卡迁移应用下发携带有待恢复SIM卡应用标识以及密文应用数据的数据恢复指令,SIM卡迁移应用根据数据恢复指令,在超级SIM卡上安装待恢复应用,并将密文应用数据写入超级SIM卡上与待恢复SIM卡应用对应的存储区域中,从而完成SIM卡应用的数据恢复。采用本申请实施例所提供的数据迁移方法,利用安装在SIM卡上的SIM卡迁移应用以及SIM卡管理平台,用户可以对旧SIM卡上的应用数据进行加密备份保存,进而在完成SIM卡更换需要进行SIM卡应用恢复时,利用备份数据实现对新的SIM卡进行应用的恢复,在保证应用数据安全的情况下,实现了针对SIM卡应用的数据迁移,极大地提升了用户换卡体验。
这里需要说明的是,上述步骤11~步骤17所提供的数据迁移以及恢复方法,由于需要将备份数据上传至SIM卡管理平台,因而只适用于在超级SIM卡上安装的与终端设备控制近场支付功能的安全元件(Secure Element,SE)芯片序列号(SEID)无绑定关系,且与终端集成电路卡识别码(Integrate circuit card identity,ICCID)无绑定关系的SIM卡应用,该些SIM卡应用对数据安全要求较低,相关应用数据经加密后可以从SIM卡上传至云端服务器,比如SIM卡门禁等SIM卡应用。而针对安全级别较高的SIM卡应用,当其安装在SIM卡上后,往往会与SIM卡的SEID绑定,或者与ICCID绑定,该类SIM卡应用只能在当前安装的超级SIM卡上使用,而无法转移到其他SIM卡上使用,即该类应用的应用数据无法备份出卡,比如数字身份类应用(比如居民数字身份证),或者与资产相关的应用(比如,公交卡、校园卡等),由于该类SIM卡应用的特殊性,因而无法采用上述步骤11~步骤17所提供的数据迁移方法进行数据迁移。
为了解决针对该类与终端SEID或者ICCID关联的SIM卡应用无法迁移出SIM卡的问题,本申请实施例还提供了另外一种数据迁移方法,如图5所示,为本申请实施例提供另外一种用于实现数据迁移方法的迁移系统,该数据迁移系统包括SIM卡管理平台(Digital Space Operation Platform,DSOP)、SIM卡终端(前端操作界面)、超级SIM卡、待迁移SIM卡应用对应的业务平台以及其他SIM卡应用组成。
本申请所提供的第二种数据迁移方法的具体实现流程示意图如图6所示,主要包括下述步骤:
步骤21,SIM卡管理平台接收SIM卡终端上传的数据迁移指令;
其中,数据迁移指令中携带有待迁移SIM卡应用标识,且由于该待迁移应用为与SEID或者ICCID关联的应用,故在该数据迁移指令中还携带有对应的SEID或者ICCID(比如手机号)。
在本申请实施例中,当用户需要对安装在超级SIM卡上的SIM卡应用进行迁移时,用户可以在SIM卡终端(比如手机)提供的前端卡应用管理入口,进入超级SIM卡应用管理界面,并通过操作界面上通过点击指定虚拟按键,来触发SIM卡终端向SIM卡管理平台上传写携带有待迁移SIM卡应用唯一标识的数据迁移请求。其中,该前端卡应用管理入口可以包括但不仅限于:APP、网页、短信端口等。
步骤22,SIM卡管理平台响应于通过执行步骤21接收到的数据迁移指令,向SIM卡终端下发用户信息迁移指令;
其中,该用户信息迁移指令中携带有待迁移应用的标识信息,该用户信息表示用户针对该待迁移应用的相关使用记录,比如,应用的交易记录、余额以及用户账号相关信息等,该类信息为用户使用信息,单纯保存记录在超级SIM卡上,与SEID或者ICCID无关,故SIM卡管理平台可以通过向SIM卡终端下发用户信息迁移指令,以使得安装在该SIM卡终端上的超级SIM卡, 对待迁移应用对应的用户信息进行采集,并上传至SIM卡管理平台。
相应地,SIM卡终端在接收到SIM卡管理平台发送的用户信息迁移指令后,可以通过执行如下操作,配合SIM卡管理平台进行数据迁移,方法包括:接收SIM卡管理平台下发的用户信息迁移指令;根据所述用户信息迁移指令,采集所述待迁移SIM卡应用对应的用户信息,并上传至所述SIM卡管理平台。
步骤23,SIM卡管理平台根据通过执行步骤22获取到的用户信息,生成应用迁移通知,并将应用迁移通知上传至与待迁移应用对应的业务平台;
其中,业务平台用于在超级SIM卡上安装待迁移应用,并可以在超级SIM卡上开通SIM卡应用的个人化功能,比如针对居民数字身份证应用,该数据身份证应用对应的业务平台(比如可以可信身份认证平台CTID),当用户需要在超级SIM卡上使用居民数字身份证应用时,通过该可信身份认证平台CTID可以在用户的超级SIM卡上安装对应的数字身份认证应用,并将针对该用户生成的电子证照写入该超级SIM卡,进而完成针对该数字身份认证应用的个人化功能的开通。
业务平台接收到SIM卡管理平台上传的用户信息后,保存用户信息,以便后续在进行数据恢复时,可以根据该些用户信息,完成对待恢复应用个人化功能的开通。
步骤24,SIM卡管理平台向SIM卡终端下发迁移指令,以使得SIM卡终端响应于迁移指令,删除超级SIM卡上安装的待迁移应用;
为了保证旧超级SIM卡中所安装的SIM卡应用数据不会泄露,在SIM卡迁移APP按照上述方法将待迁移应用对应的用户信息上传至业务平台后,SIM卡管理平台可以向安装有旧超级SIM卡的SIM卡终端下发迁移指令,以使得SIM卡终端删除该旧超级SIM上所安装的待迁移应用。
当用户通过执行上述步骤完成对超级SIM卡中特定SIM卡应用用户信息的迁移,并完成超级SIM卡的更换后,用户可以通过下述步骤,将在新的超级SIM卡上恢复该特定应用:
步骤25,SIM卡管理平台接收SIM卡终端上传的数据恢复指令;
其中,数据恢复指令中携带有待恢复应用标识,该待恢复应用标识可以是指用户使用该待恢复应用是所登录的应用账号,SIM卡终端为安装有超级SIM卡的终端设备。
当用户需要进行在新的超级SIM卡上恢复指定SIM卡应用(比如数字身份应用)时,用户可以通过SIM卡终端向SIM卡管理平台发送携带有待恢复应用标识(应用对应的用户登录账号)的数据恢复指令。
步骤26,SIM卡管理平台将接收到的待恢复应用标识上传至待恢复应用对应的业务平台;
业务平台可以确定与待恢复应用标识对应的用户信息,并根据该用户信息生成应用安装命令。
步骤27,SIM卡管理平台接收所述业务平台发送的应用安装命令,并将该应用安装命令下发至SIM卡终端。
SIM卡终端在超级SIM卡上安装待恢复应用,这里需要说明的是,在超级SIM卡上安装SIM卡应用属于本领域常用技术手段,本申请实施例对SIM卡迁移APP具体采用何种方法安装待迁移应用不做限定。在完成SIM卡应用安装后,SIM卡终端可以根据业务平台下发的安装命令中所携带的用户信息,将该些用户信息写入以安装SIM卡应用的指定存储区域,完成对待恢复应用个人化功能的开通。
另外这里还需要说明的是,在完成应用数据恢复后,SIM卡终端会向SIM卡管理平台发送数据恢复结果,SIM卡管理平台将该数据恢复结果转发至业务平台,以使得业务平台根据上数据恢复结果,删除业务平台上所保存的用户信息。
采用本申请实施例所提供的上述第二种数据迁移方法,针对超级SIM卡上安装的与SIM卡SEID或者ICCID绑定的SIM卡应用,当用户需要进行应用数据迁移时,用户可以通过SIM卡前端操作界面向SIM卡管理平台发送针对特定SIM卡应用的数据迁移指令,SIM卡管理平台响应于用户上传的数据迁移请求,向SIM卡终端下发用户信息迁移指令,SIM卡终端响应于该用户信息迁移指令,通过机卡通道向SIM卡下发用户信息采集指令,超级SIM卡将采集到用户信息通过SIM卡终端上传至SIM卡管理平台,进而通过SIM卡管理平台将采集到的待迁移应用对应的用户信息转发至该待迁移应用对应的业务平台进行保存,以便后续业务平台可以根据保存的该些用户信息,在新的超级SIM卡上为用户完成SIM应用的安装以及个人化功能开通,相比于通过备份数据完成SIM卡应用迁移的方式,本申请实施例提供的第二种数据迁移方式不需要对与SEID或者ICCID绑定的SIM卡应用数据进行全量备份,而只需要对用户使用该SIM卡应用时产生的用户使用信息进行采集,并上传至业务平台进行保存,进而后续业务平台可以根据该些用户使用信息,直接在用户新更换的超级SIM卡上为用户完成应用的下载安装以及个人化功能的开通,既满足了用户针对SIM卡应用进行迁移的需求,同时也保证了应用数据的安全。
在一种实施方式中,本申请实施例还提供了一种数据迁移装置,应用于SIM卡迁移应用,用以解决采用相关技术中的方案由于无法对安装在超级SIM卡上的SIM卡应用进行迁移,而造成当用户需要更换超级SIM卡时,保存在旧SIM卡上的SIM卡应用数据丢失,进而导致用户无法使用原SIM卡应用的问题。该数据迁移装置的具体结构示意图如图7所示,包括:应用数据获取单元71、加密单元72以及数据迁移单元73。
其中,应用数据获取单元71,用于从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;
加密单元72,用于对所述待迁移的应用数据进行加密,得到密文应用数据;
数据迁移单元73,用于将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
在一种实施方式中,应用数据获取单元71,具体用于:确定所述SIM卡应用在所述超级SIM卡上对应的数据存储区域以及所述应用数据的数据长度;调用数据备份接口对所述数据存储区域进行访问,并按照所述数据长度,获取所述SIM卡应用对应的待迁移的应用数据。
在一种实施方式中,加密单元72,具体用于:根据国密算法对所述待迁移的应用数据进行数据加密,得到密文应用数据;通过加密机卡通道,将所述密文应用数据以及所述SIM卡应用的标识发送至第一SIM卡终端,由所述第一SIM卡终端将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,其中,所述第一SIM卡终端为安装有所述超级SIM卡的终端设备。
在一种实施方式中,还包括应用锁定单元,具体用于:接收所述SIM卡管理平台下发的应用锁定指令;响应于所述应用锁定指令,删除所述密文应用数据;对所述SIM卡应用进行锁定,以使得所述SIM卡应用处于锁定状态,其中,处于所述锁定状态下的SIM卡应用无法使用。
相应地,本申请实施例还提供了一种应用于SIM卡迁移应用的数据恢复装置,用以解决采用相关技术中的方案由于无法对安装在超级SIM卡上的SIM卡应用进行迁移,而造成当用户需要更换超级SIM卡时,保存在旧SIM卡上的SIM卡应用数据丢失,进而导致用户无法使用原SIM卡应用的问题。该数据恢复装置的具体结构示意图如图8所示,包括:恢复请求发送单元81、指令接收单元82、应用安装单元83以及数据恢复单元84。
其中,恢复请求发送单元81,用于向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用标识;
指令接收单元82,用于接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用标识以及密文应用数据;
应用安装单元83,用于响应于所述SIM卡管理平台下发的第一数据恢复指令,在所述超级SIM卡上安装所述待恢复SIM卡应用;
数据恢复单元84,用于将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
在一种实施方式中,数据恢复单元84,具体用于根据国密算法对所述密文应用数据进行解密,得到明文应用数据;调用数据恢复接口将所述明文应用数据写入所述待恢复SIM卡应用对应的存储区域。
在一种实施方式中,数据清除,具体用于:针对所述待恢复SIM卡应用的数据恢复结果上传至所述SIM卡管理平台,由所述SIM卡管理平台根据所述数据恢复结果,清除所述备份数据库中保存的、与所述待恢复SIM卡应用对应的所述密文应用数据。
采用本申请实施例提供的数据迁移装置,当用户需要更换超级SIM卡时,用户可以通过安装该超级SIM卡的SIM卡终端向SIM卡管理平台发送针对特定SIM卡应用的数据迁移请求,SIM卡管理平台根据接收到的数据迁移请求生成携带有待迁移SIM卡应用标识的数据迁移指令,并将该数据迁移指令下发至与该待迁移SIM卡应用安装在同一超级SIM卡上的SIM卡迁移应用处,SIM卡迁移应用响应于该数据迁移指令,可以通过访问调用接口的方式,从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据,并对该获取到的应用数据进行加密,得到密文应用数据,进而将密文应用数据,以及SIM卡应用的标识,发送至SIM卡管理平台,由SIM卡管理平台对密文应用数据与SIM卡应用的标识关联存储,以实现对旧超级SIM卡中SIM卡应用的数据迁出;而当用户更换完新的超级SIM卡,需要进行SIM卡应用恢复时,可以通过SIM卡迁移应用向SIM卡管理平台发送携带有待恢复SIM卡应用标识的数据恢复请求;SIM卡管理平台根据待恢复SIM卡应用标识,确定对应的密文应用数据,并向SIM卡迁移应用下发携带有待恢复SIM卡应用标识以及密文应用数据的数据恢复指令,SIM卡迁移应用根据数据恢复指令,在超级SIM卡上安装待恢复应用,并将密文应用数据写入超级SIM卡上与待恢复SIM卡应用对应的存储区域中,从而完成SIM卡应用的数据恢复。采用本申请实施例所提供的数据迁移装置,利用安装在SIM卡上的SIM卡迁移应用以及SIM卡管理平台,用户可以对旧SIM卡上的应用数据进行加密备份保存,进而在完成SIM卡更换需要进行SIM卡应用恢复时,利用备份数据实现对新的SIM卡进行应用的恢复,在保证应用数据安全的情况下,实现了针对SIM卡应用的数据迁移,极大地提升了用户换卡体验。
在一种实施方式中,本申请实施例还提供了另一种数据迁移装置,应用于SIM卡终端,用以解决采用相关技术中的方案由于无法对安装在超级SIM卡上的SIM卡应用进行迁移,而造成当用户需要更换超级SIM卡时,保存在旧SIM卡上的SIM卡应用数据丢失,进而导致用户无法使用原SIM卡应用的问题。该数据迁移装置的具体结构示意图如图9所示,包括:数据接收单元91以及数据上传单元92。
其中,数据接收单元91具体用于:接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;
数据上传单元92,具体用于:将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,由所述SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
相应地,本申请实施例还提供了一种的数据恢复装置,用以解决采用相关技术中的方案由于无法对安装在超级SIM卡上的SIM卡应用进行迁移,而造成当用户需要更换超级SIM卡时,保存在旧SIM卡上的SIM卡应用数据丢失,进而导致用户无法使用原SIM卡应用的问题。该数据恢复装置的具体结构示意图如图10所示,包括:请求接收单元101、恢复指令接收单元102以及转发单元103。
其中,请求接收单元101,具体用于:接收SIM卡迁移应用通过机卡通道上传的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
恢复指令接收单元102,具体用于:将所述数据恢复请求上传至SIM卡管理平台,接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;
转发单元103,具体用于将所述第一数据恢复指令发送至所述SIM卡迁移应用,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
采用本申请实施例提供的数据迁移装置,当用户需要更换超级SIM卡时,用户可以通过安装该超级SIM卡的SIM卡终端向SIM卡管理平台发送针对特定SIM卡应用的数据迁移请求,SIM卡管理平台根据接收到的数据迁移请求生成携带有待迁移SIM卡应用标识的数据迁移指令,并将该数据迁移指令下发至与该待迁移SIM卡应用安装在同一超级SIM卡上的SIM卡迁移应用处,SIM卡迁移应用响应于该数据迁移指令,可以通过访问调用接口的方式,从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据,并对该获取到的应用数据进行加密,得到密文应用数据,进而将密文应用数据,以及SIM卡应用的标识,发送至SIM卡管理平台,由SIM卡管理平台对密文应用数据与SIM卡应用的标识关联存储,以实现对旧超级SIM卡中SIM卡应用的数据迁出;而当用户更换完新的超级SIM卡,需要进行SIM卡应用恢复时,可以通过SIM卡迁移应用向SIM卡管理平台发送携带有待恢复SIM卡应用标识的数据恢复请求;SIM卡管理平台根据待恢复SIM卡应用标识,确定对应的密文应用数据,并向SIM卡迁移应用下发携带有待恢复SIM卡应用标识以及密文应用数据的数据恢复指令,SIM卡迁移应用根据数据恢复指令,在超级SIM卡上安装待恢复应用,并将密文应用数据写入超级SIM卡上与待恢复SIM卡应用对应的存储区域中,从而完成SIM卡应用的数据恢 复。采用本申请实施例所提供的数据迁移装置,利用安装在SIM卡上的SIM卡迁移应用以及SIM卡管理平台,用户可以对旧SIM卡上的应用数据进行加密备份保存,进而在完成SIM卡更换需要进行SIM卡应用恢复时,利用备份数据实现对新的SIM卡进行应用的恢复,在保证应用数据安全的情况下,实现了针对SIM卡应用的数据迁移,极大地提升了用户换卡体验。
另外,这里还需要说明的是,上述数据迁移装置以及恢复装置,由于需要将应用数据上传至SIM卡管理平台,因而只适用于在超级SIM卡上安装的与终端设备控制近场支付功能的安全元件(Secure Element,SE)芯片序列号(SEID)无绑定关系,且与终端集成电路卡识别码(Integrate circuit card identity,ICCID)无绑定关系的SIM卡应用,该些SIM卡应用对数据安全要求较低,相关应用数据经加密后可以从SIM卡上传至云端服务器,比如SIM卡门禁等SIM卡应用。而针对安全级别较高的SIM卡应用,当其安装在SIM卡上后,往往会与SIM卡的SEID绑定,或者与ICCID绑定,该类SIM卡应用只能在当前安装的超级SIM卡上使用,而无法转移到其他SIM卡上使用,即该类应用的应用数据无法备份出卡,比如数字身份类应用(比如居民数字身份证),或者与资产相关的应用(比如,公交卡、校园卡等),由于该类SIM卡应用的特殊性,因而无法采用上述装置进行数据迁移。
为了解决针对该类与终端SEID或者ICCID关联的SIM卡应用无法迁移出SIM卡的问题,本申请实施例还提供了另外一种数据迁移装置。该数据迁移装置的具体结构示意图如图11所示,包括:第二迁移指令接收单元111、用户信息迁移单元112、迁移通知发送单元113以及第二迁移指令下发单元114。
其中,第二迁移指令接收单元111,具体用于接收SIM卡终端上传的数据迁移指令,其中,所述数据迁移指令中携带有待迁移SIM卡应用标识;
用户信息迁移单元112,具体用于:响应于所述数据迁移指令,向所述SIM卡终端下发用户信息迁移指令,由所述SIM卡终端采集所述待迁移SIM卡应用对应的用户信息,并上传至SIM卡管理平台;
迁移通知发送单元113,具体用于:根据所述用户信息,生成应用迁移通知,并将所述应用迁移通知上传至所述待迁移SIM卡应用对应的业务平台,由所述业务平台保存所述用户信息,其中,所述业务平台用于在超级SIM卡上安装所述待迁移应用;
第二迁移指令下发单元114,具体用于:向所述SIM卡终端下发迁移指令,以使得所述SIM卡终端响应于所述迁移指令,删除所述超级SIM卡上安装的所述待迁移SIM卡应用。
相应地,本申请实施例还提供了一种的数据恢复装置。该数据恢复装置的具体结构示意图如图12所示,包括:第二恢复指令接收单元121、标识上传单元122以及安装命令下发单元123。
其中,第二恢复指令接收单元121,具体用于:接收SIM卡终端上传的数据恢复指令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;
标识上传单元122,具体用于:将所述待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令;
安装命令下发单元123,具体用于:接收所述业务平台发送的应用安装命令,并将所述应用安装命令下发至所述SIM卡终端,由所述第四SIM卡终端在所述超级SIM卡上安装所述待恢复SIM卡应用。
在一种实施方式中,还包括删除单元,具体用于:接收SIM卡终端上传的恢复结果通知;将所述恢复结果通知上传至所述业务平台,以使得所述业务平台根据所述恢复结果通知,删除保存的所述用户信息。
采用本申请实施例所提供的上述第二种数据迁移装置以及数据恢复装置,针对超级SIM卡上安装的与SIM卡SEID或者ICCID绑定的SIM卡应用,当用户需要进行应用数据迁移时,用户可以通过SIM卡前端操作界面向SIM卡管理平台发送针对特定SIM卡应用的数据迁移指令,SIM卡管理平台响应于用户上传的数据迁移请求,向SIM卡终端下发用户信息迁移指令,SIM卡终端响应于该用户信息迁移指令,通过机卡通道向SIM卡下发用户信息采集指令,超级SIM卡将采集到用户信息通过SIM卡终端上传至SIM卡管理平台,进而通过SIM卡管理平台将采集到的待迁移应用对应的用户信息转发至该待迁移应用对应的业务平台进行保存,以便后续业务平台可以根据保存的该些用户信息,在新的超级SIM卡上为用户完成SIM应用的安装以及个人化功能开通,相比于通过备份数据完成SIM卡应用迁移的方式,本申请实施例提供的第二种数据迁移装置以及数据恢复装置,不需要对与SEID或者ICCID绑定的SIM卡应用数据进行全量备份,而只需要对用户使用该SIM卡应用时产生的用户使用信息进行采集,并上传至业务平台进行保存,进而后续业务平台可以根据该些用户使用信息,直接在用户新更换的超级SIM卡上为用户完成应用的下载安装以及个人化功能的开通,既满足了用户针对SIM卡应用进行迁移的需求,同时也保证了应用数据的安全。
图13是本申请的一个实施例电子设备的结构示意图。请参考图13,在硬件层面,该电子设备包括处理器,可选地还包括内部总线、网络接口、存储器。其中,存储器可能包含内存,例如高速随机存取存储器(Random-Access Memory,RAM),也可能还包括非易失性存储器(non-volatile memory),例如至少1个磁盘存储器等。当然,该电子设备还可能包括其他业务所需要的硬件。
处理器、网络接口和存储器可以通过内部总线相互连接,该内部总线可以是工业标准体系结构(Industry Standard Architecture,ISA)总线、外设部件互连标准(Peripheral Component Interconnect,PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture,EISA)总线等。所述总线可以分为地址总线、数据总线、控制总线等。为便于表示,图13中仅用一个双向箭头表示,但并不表示仅有一根总线或一种类型的总线。
存储器,用于存放程序。具体地,程序可以包括程序代码,所述程序代码包括计算机操作指令。存储器可以包括内存和非易失性存储器,并向处理器提供指令和数据。
处理器从非易失性存储器中读取对应的计算机程序到内存中然后运行,在逻辑层面上形成数据迁移装置。处理器,执行存储器所存放的程序,并具体用于执行以下操作:
从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
上述如本申请图13所示实施例揭示的数据迁移电子设备执行的方法可以应用于处理器中,或者由处理器实现。处理器可能是一种集成电路芯片,具有信号的处理能力。在实现过程中,上述方法的各步骤可以通过处理器中的硬件的集成逻辑电路或者软件形式的指令完成。上述的处理器可以是通用处理器,包括中央处理器(Central Processing Unit,CPU)、网络处理器(Network Processor,NP)等;还可以是数字信号处理器(Digital Signal Processor,DSP)、专用集成电路(Application Specific Integrated Circuit,ASIC)、现场可编程门阵列(Field-Programmable Gate Array,FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。可以实现或者执行本申请实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合本申请实施例所公开的方法的步骤可以直接体现为硬件译码处理器执行完成,或者用译码处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器,闪存、只读存储器,可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器,处理器读取存储器中的信息,结合其硬件完成上述方法的步骤。
当然,除了软件实现方式之外,本申请的电子设备并不排除其他实现方式,比如逻辑器件抑或软硬件结合的方式等等,也就是说以下处理流程的执行主体并不限定于各个逻辑单元,也可以是硬件或逻辑器件。
本申请实施例还提出了一种计算机可读存储介质,该计算机可读存储介质存储一个或多个程序,该一个或多个程序包括指令,该指令当被包括多个应用程序的便携式电子设备执行时,能够使该便携式电子设备执行图2所示实施例的方法,并具体用于执行以下操作:
从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;对所述待迁移的应用数据进行加密,得到密文应用数据;将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
本领域内的技术人员应明白,本申请的实施例可提供为方法、系统、或计算机程序产品。因此,本申请可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且,本申请可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。
本申请是参照根据本申请实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器,使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中,使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品,该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上,使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理,从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
在一个典型的配置中,计算设备包括一个或多个处理器(CPU)、输入/输出接口、网络接口和内存。
内存可能包括计算机可读介质中的非永久性存储器,随机存取存储器(RAM)和/或非易失性内存等形式,如只读存储器(Read-Only Memory,ROM)或闪存(flash RAM)。内存是计算机可读介质的示例。
计算机可读介质包括永久性和非永久性、可移动和非可移动媒体可以由任何方法或技术来实现信息存储。信息可以是计算机可读指令、数据结构、程序的模块或其他数据。计算机的存储介质的例子包括,但不限于相变内存(Phase-change RAM,PRAM)、静态随机存取存储器(Static Random-Access Memory,SRAM)、动态随机存取存储器(Dynamic Random Access Memory,DRAM)、其他类型的随机存取存储器(RAM)、只读存储器(ROM)、电可擦除可编程只读存储器(Electrically Erasable Programmable Read Only Memory,EEPROM)、快闪记忆体或其他内存技术、只读光盘只读存储器(Compact Disc Read-Only Memory,CD-ROM)、数字多功能光盘(Digital Video Disc,DVD)或其他光学存储、磁盒式磁带,磁带磁磁盘存储或其他磁性存储设备或任何其他非传输介质,可用于存储可以被计算设备访问的信息。按照本文中的界定,计算机可读介质不包括暂存电脑可读媒体(transitory media),如调制的数据信号和载波。
还需要说明的是,术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法、商品或者设备不仅包括那些要素,而且还包括没有明确列出的其他要素,或者是还包括为这种过程、方法、商品或者设备所固有的要素。在没有更多限制的情况下,由语句“包括一个……”限定的要素,并不排除在包括所述要素的过程、方法、商品或者设备中还存在另外的相同要素。
本领域技术人员应明白,本申请的实施例可提供为方法、系统或计算机程序产品。因此,本申请可采用完全硬件实施例、完全软件实施例或结合软件和硬件方面的实施例的形式。而且,本申请可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。
以上所述仅为本申请的实施例而已,并不用于限制本申请。对于本领域技术人员来说,本申请可以有各种更改和变化。凡在本申请的精神和原理之内所作的任何修改、等同替换、改进等,均应包含在本申请的权利要求范围之内。

Claims (29)

  1. 一种数据迁移方法,应用于SIM卡迁移应用,所述方法包括:
    从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;
    对所述待迁移的应用数据进行加密,得到密文应用数据;
    将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
  2. 根据权利要求1所述的方法,其中,获取SIM卡应用对应的待迁移的应用数据,具体包括:
    确定所述SIM卡应用在所述超级SIM卡上对应的数据存储区域以及所述应用数据的数据长度;
    调用数据备份接口对所述数据存储区域进行访问,并按照所述数据长度,获取所述SIM卡应用对应的待迁移的应用数据。
  3. 根据权利要求1所述的方法,其中,所述对所述待迁移的应用数据进行加密,得到密文应用数据,将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,具体包括:
    根据国密算法对所述待迁移的应用数据进行数据加密,得到密文应用数据;
    通过加密机卡通道,将所述密文应用数据以及所述SIM卡应用的标识发送至第一SIM卡终端,由所述第一SIM卡终端将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,其中,所述第一SIM卡终端为安装有所述超级SIM卡的终端设备。
  4. 根据权利要求1所述的方法,其中,所述将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台后,还包括:
    接收所述SIM卡管理平台下发的应用锁定指令;
    响应于所述应用锁定指令,删除所述密文应用数据;
    对所述SIM卡应用进行锁定,以使得所述SIM卡应用处于锁定状态,其中,处于所述锁定状态下的SIM卡应用无法使用。
  5. 一种数据恢复方法,应用于SIM卡迁移应用,所述方法包括:
    向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
    接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;
    响应于所述SIM卡管理平台下发的第一数据恢复指令,在超级SIM卡上安装所述待恢复SIM卡应用;
    将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中。
  6. 根据权利要求5所述的方法,其中,所述将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复,具体包括:
    根据国密算法对所述密文应用数据进行解密,得到明文应用数据;
    调用数据恢复接口将所述明文应用数据写入所述待恢复SIM卡应用对应的存储区域。
  7. 根据权利要求5所述的方法,其中,所述将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复后,还包括:
    将针对所述待恢复SIM卡应用的数据恢复结果上传至所述SIM卡管理平台,由所述SIM卡管理平台根据所述数据恢复结果,清除备份数据库中保存的、与所述待恢复SIM卡应用对应的所述密文应用数据。
  8. 一种数据迁移方法,应用于SIM卡终端,所述方法包括:
    接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;
    将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,由所述SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
  9. 一种数据恢复方法,应用于SIM卡终端,所述方法包括:
    接收SIM卡迁移应用通过机卡通道上传的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
    将所述数据恢复请求上传至SIM卡管理平台,接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;
    将所述第一数据恢复指令发送至所述SIM卡迁移应用,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中。
  10. 一种数据迁移方法,应用于SIM卡管理平台,所述方法包括:
    接收SIM卡终端上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;
    将所述SIM卡应用的标识与所述密文应用数据关联存储;
    通过所述SIM卡终端,向SIM卡迁移应用发送应用锁定指令,由所述SIM卡迁移应用对所述SIM卡应用进行锁定。
  11. 一种数据恢复方法,应用于SIM卡管理平台,所述方法包括:
    接收到SIM卡终端发送的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
    确定与所述SIM卡应用的标识对应的密文应用数据;
    根据所述密文应用数据生成数据恢复指令;
    通过所述SIM卡终端向SIM卡迁移应用下发所述数据恢复指令,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中。
  12. 根据权利要求11所述的方法,其中,所述通过所述SIM卡终端向SIM卡迁移应用下发所述数据恢复指令后,还包括:
    接收所述SIM卡迁移应用上传的、针对所述待恢复SIM卡应用的数据恢复结果;
    根据所述数据恢复结果,删除与所述待恢复SIM卡应用对应的所述密文应用数据。
  13. 一种数据迁移方法,应用于SIM卡管理平台,所述方法包括:
    接收SIM卡终端上传的数据迁移指令,其中,所述数据迁移指令中携带有待迁移SIM卡应用标识;
    响应于所述数据迁移指令,向所述SIM卡终端下发用户信息迁移指令,由所述SIM卡终端采集所述待迁移SIM卡应用对应的用户信息,并上传至SIM卡管理平台;
    根据所述用户信息,生成应用迁移通知,并将所述应用迁移通知上传至所述待迁移SIM卡应用对应的业务平台,由所述业务平台保存所述用户信息,其中,所述业务平台用于在超级SIM卡上安装所述待迁移应用;
    向所述SIM卡终端下发迁移指令,以使得所述SIM卡终端响应于所述迁移指令,删除所述超级SIM卡上安装的所述待迁移SIM卡应用。
  14. 一种数据恢复方法,应用于SIM卡管理平台,所述方法包括:
    接收SIM卡终端上传的数据恢复指令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;
    将所述待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令;
    接收所述业务平台发送的应用安装命令,并将所述应用安装命令下发至所述SIM卡终端,由所述SIM卡终端在超级SIM卡上安装所述待恢复SIM卡应用。
  15. 根据权利要求14所述的方法,其中,所述接收所述业务平台发送的应用安装命令,并将所述应用安装命令下发至所述SIM卡终端,由所述SIM卡终端在所述超级SIM卡上安装所述待恢复SIM卡应用后,还包括:
    接收SIM卡终端上传的恢复结果通知;
    将所述恢复结果通知上传至所述业务平台,以使得所述业务平台根据所述恢复结果通知,删除保存的所述用户信息。
  16. 一种数据迁移方法,应用于SIM卡终端,所述方法包括:
    向SIM卡管理平台发送数据迁移指令,其中,所述数据迁移指令中携带有待迁移SIM卡应用标识;
    接收SIM卡管理平台下发的用户信息迁移指令;
    根据所述用户信息迁移指令,采集所述待迁移SIM卡应用对应的用户信息,并上传至所述SIM卡管理平台;
    接收SIM卡管理平台下发的迁移指令,根据所述迁移指令删除超级SIM卡上安装的所述待迁移SIM卡应用。
  17. 一种数据恢复方法,应用于SIM卡终端,所述方法包括:
    向SIM卡管理平台发送数据恢复指令,由所述SIM卡管理平台将待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,并由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;
    接收所述业务平台发送的应用安装命令,在超级SIM卡上安装所述待恢复SIM卡应用。
  18. 一种数据迁移装置,应用于SIM卡迁移应用,所述装置包括:
    应用数据获取单元,用于从超级SIM卡存储的应用数据中,获取SIM卡应用对应的待迁移的应用数据;
    加密单元,用于对所述待迁移的应用数据进行加密,得到密文应用数据;
    数据迁移单元,用于将所述密文应用数据,以及所述SIM卡应用的标识,发送至SIM卡管理平台,由所述SIM卡管理平台对所述密文应用数据与所述SIM卡应用的标识关联存储。
  19. 一种数据恢复装置,应用于SIM卡迁移应用,所述装置包括:
    恢复请求发送单元,用于向SIM卡管理平台发送数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用标识;
    指令接收单元,用于接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用标识以及密文应用数据;
    应用安装单元,用于响应于所述SIM卡管理平台下发的第一数据恢复指令,在超级SIM卡上安装所述待恢复SIM卡应用;
    数据恢复单元,用于将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中,完成数据恢复。
  20. 一种数据迁移装置,应用于SIM卡终端,所述装置包括:
    数据接收单元,用于接收SIM卡迁移应用上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;
    数据上传单元,用于将所述密文应用数据以及所述SIM卡应用的标识上传至所述SIM卡管理平台,由所述SIM卡管理平台对所述SIM卡应用的标识与所述密文应用数据进行关联存储。
  21. 一种数据迁移装置,应用于SIM卡终端,所述装置包括:
    数据恢复请求接收单元,用于接收SIM卡迁移应用通过机卡通道上传的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
    第一数据恢复指令接收单元,用于将所述数据恢复请求上传至SIM卡管理平台,接收所述SIM卡管理平台响应于所述数据恢复请求下发的第一数据恢复指令,其中,所述第一数据恢复指令中携带有所述待恢复SIM卡应用的标识以及密文应用数据;
    恢复单元,用于将所述第一数据恢复指令发送至所述SIM卡迁移应用,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中。
  22. 一种数据迁移装置,应用于SIM卡管理平台,所述装置包括:
    标识接收单元,用于接收SIM卡终端上传的SIM卡应用的标识,以及所述SIM卡应用对应的密文应用数据;
    关联存储单元,用于将所述SIM卡应用的标识与所述密文应用数据关联存储;
    应用锁定单元,用于通过所述SIM卡终端,向SIM卡迁移应用发送应用锁定指令,由所述SIM卡迁移应用对所述SIM卡应用进行锁定。
  23. 一种数据恢复装置,应用于SIM卡管理平台,所述装置包括:
    第二数据请求接收单元,用于接收到SIM卡终端发送的数据恢复请求,其中,所述数据恢复请求中携带有待恢复SIM卡应用的标识;
    应用数据确定单元,用于确定与所述SIM卡应用的标识对应的密文应用数据;
    恢复指令生成单元,用于根据所述密文应用数据生成数据恢复指令;
    应用恢复单元,用于通过所述SIM卡终端向SIM卡迁移应用下发所述数据恢复指令,由所述SIM卡迁移应用在超级SIM卡上安装所述待恢复SIM卡应用,并将所述密文应用数据写入所述超级SIM卡上与所述待恢复SIM卡应用对应的存储区域中。
  24. 一种数据迁移装置,应用于SIM卡管理平台,所述装置包括:
    迁移指令接收单元,用于接收SIM卡终端上传的数据迁移指令,其中, 所述数据迁移指令中携带有待迁移SIM卡应用标识;
    用户信息迁移单元,用于响应于所述数据迁移指令,向所述SIM卡终端下发用户信息迁移指令,由所述SIM卡终端采集所述待迁移SIM卡应用对应的用户信息,并上传至SIM卡管理平台;
    迁移通过之生成单元,用于根据所述用户信息,生成应用迁移通知,并将所述应用迁移通知上传至所述待迁移SIM卡应用对应的业务平台,由所述业务平台保存所述用户信息,其中,所述业务平台用于在超级SIM卡上安装所述待迁移应用;
    应用删除单元,用于向所述SIM卡终端下发迁移指令,以使得所述SIM卡终端响应于所述迁移指令,删除所述超级SIM卡上安装的所述待迁移SIM卡应用。
  25. 一种数据恢复装置,应用于SIM卡管理平台,所述装置包括:
    第三数据恢复指令接收单元,用于接收SIM卡终端上传的数据恢复指令,其中,所述数据恢复指令中携带有待恢复SIM卡应用标识;
    应用标识上传单元,用于将所述待恢复SIM卡应用标识上传至所述待恢复SIM卡应用对应的业务平台,由所述业务平台确定所述待恢复SIM卡应用标识对应的用户信息,并根据所述用户信息生成应用安装命令;
    应用安装单元,用于接收所述业务平台发送的应用安装命令,并将所述应用安装命令下发至所述SIM卡终端,由所述SIM卡终端在超级SIM卡上安装所述待恢复SIM卡应用。
  26. 一种超级SIM卡,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现权利要求1~4中任一项所述的数据迁移方法或实现权利要求5~7中任一项所述的数据恢复方法。
  27. 一种电子设备,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现权利要求8或权利要求10或权利要求13或权利要求16所述的数据迁移方法。
  28. 一种电子设备,包括存储器、处理器及存储在存储器上的计算机程序,所述处理器在执行所述计算机程序时实现权利要求9或权利要求11或权利要求14或权利要求17所述的数据恢复方法。
  29. 一种计算机可读存储介质,所述计算机可读存储介质存储一个或多个程序,所述一个或多个程序当被包括多个应用程序的电子设备执行时,使得所述电子设备执行如权利要求1-17任一项所述的方法。
PCT/CN2024/088745 2023-05-19 2024-04-19 数据迁移方法、数据恢复方法、装置、设备以及存储介质 Ceased WO2024239869A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202310570561.4 2023-05-19
CN202310570561.4A CN116489633A (zh) 2023-05-19 2023-05-19 数据迁移方法、数据恢复方法、装置、设备以及存储介质

Publications (1)

Publication Number Publication Date
WO2024239869A1 true WO2024239869A1 (zh) 2024-11-28

Family

ID=87211934

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2024/088745 Ceased WO2024239869A1 (zh) 2023-05-19 2024-04-19 数据迁移方法、数据恢复方法、装置、设备以及存储介质

Country Status (2)

Country Link
CN (1) CN116489633A (zh)
WO (1) WO2024239869A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116489633A (zh) * 2023-05-19 2023-07-25 中移动金融科技有限公司 数据迁移方法、数据恢复方法、装置、设备以及存储介质
CN117215831B (zh) * 2023-09-05 2024-08-27 中移互联网有限公司 Usim卡应用数据迁移方法、装置、电子设备及存储介质
CN119987813B (zh) * 2025-01-24 2025-09-30 楚天龙股份有限公司 应用升级方法、智能卡及电子设备

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103823726A (zh) * 2014-03-13 2014-05-28 中国联合网络通信集团有限公司 Sim卡数据备份方法及终端
CN106201783A (zh) * 2016-07-15 2016-12-07 广东欧珀移动通信有限公司 一种数据恢复方法和装置
CN106507331A (zh) * 2015-09-07 2017-03-15 中国移动通信集团公司 一种卡应用数据的安全迁移方法、装置及系统
CN113626833A (zh) * 2020-08-10 2021-11-09 中国移动通信有限公司研究院 一种卡应用数据备份和恢复方法及相关设备
CN115499823A (zh) * 2022-08-05 2022-12-20 东信和平科技股份有限公司 基于sim卡的应用数据备份和恢复方法及系统
CN116489633A (zh) * 2023-05-19 2023-07-25 中移动金融科技有限公司 数据迁移方法、数据恢复方法、装置、设备以及存储介质

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9871851B2 (en) * 2014-06-30 2018-01-16 EMC IP Holding Company LLC Migrating private infrastructure services to a cloud
GB2571294B (en) * 2018-02-22 2020-09-23 Arm Cloud Services Ltd System and method for connectivity management
CN113821843B (zh) * 2020-06-18 2024-08-02 青岛海信移动通信技术有限公司 移动终端及其插入卡的类型确定方法
CN114501416A (zh) * 2020-10-26 2022-05-13 中移互联网有限公司 基于bip网关的sim卡应用处理方法、装置及设备
CN113297615A (zh) * 2021-05-20 2021-08-24 青岛海信移动通信技术股份有限公司 移动终端及其数据加密方法

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103823726A (zh) * 2014-03-13 2014-05-28 中国联合网络通信集团有限公司 Sim卡数据备份方法及终端
CN106507331A (zh) * 2015-09-07 2017-03-15 中国移动通信集团公司 一种卡应用数据的安全迁移方法、装置及系统
CN106201783A (zh) * 2016-07-15 2016-12-07 广东欧珀移动通信有限公司 一种数据恢复方法和装置
CN113626833A (zh) * 2020-08-10 2021-11-09 中国移动通信有限公司研究院 一种卡应用数据备份和恢复方法及相关设备
CN115499823A (zh) * 2022-08-05 2022-12-20 东信和平科技股份有限公司 基于sim卡的应用数据备份和恢复方法及系统
CN116489633A (zh) * 2023-05-19 2023-07-25 中移动金融科技有限公司 数据迁移方法、数据恢复方法、装置、设备以及存储介质

Also Published As

Publication number Publication date
CN116489633A (zh) 2023-07-25

Similar Documents

Publication Publication Date Title
WO2024239869A1 (zh) 数据迁移方法、数据恢复方法、装置、设备以及存储介质
US8918633B2 (en) Information processing device, information processing system, and program
CN103916844A (zh) 客户识别模块卡开通方法及虚拟客户识别模块卡服务器
WO2009039771A1 (en) Mobile payment terminal and payment method based on pki technology
CN104899506A (zh) 基于可信执行环境中虚拟安全元件的安全系统实现方法
WO2019134494A1 (zh) 验证信息处理方法、通信设备、业务平台及存储介质
WO2007099062A2 (fr) Gestion d'acces securise a un contenu numerique securise dans un objet communicant portable
EP2835997A1 (en) Cell phone data encryption method and decryption method
CN111404706B (zh) 应用下载方法、安全元件、客户端设备及服务管理设备
Ahmad et al. Enhancing the security of mobile applications by using TEE and (U) SIM
CN113626833A (zh) 一种卡应用数据备份和恢复方法及相关设备
CN111786995B (zh) 账号密码管理方法、管理中间件、系统、设备及存储介质
JP5678150B2 (ja) ユーザ端末、鍵管理システム、及びプログラム
CN105915541A (zh) 基于nfc的移动终端密码保存与恢复处理方法及系统
CN119312372B (zh) 一种设备资源解密方法、装置、电子设备及存储介质
CN104994498A (zh) 一种终端应用与手机卡应用交互的方法及系统
WO2025082483A1 (zh) 数据加密和解密方法、加解密系统、电子设备及介质
US10140431B2 (en) File management system and user terminal in file management system
CN111143879A (zh) 一种Android平台SD卡文件保护方法、终端设备及存储介质
KR20120057873A (ko) 모바일 단말기의 보안 관련 정보 보호 장치 및 그 방법
CN117909607A (zh) 浏览器运行方法、装置、计算机设备和存储介质
CN106209381A (zh) 一种照片加解密方法及其系统
CN108769989B (zh) 一种无线网连接方法、无线接入装置和设备
CN119052092B (zh) 一种多系统终端跨域通信管控系统及方法
CN101112040B (zh) 用于保护数字权限文件描述的方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 24810116

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE