CN115665726A

CN115665726A - Capability approval data acquisition method, platform, eUICC, device and medium

Info

Publication number: CN115665726A
Application number: CN202211346660.6A
Authority: CN
Inventors: 刘煜
Original assignee: China United Network Communications Group Co Ltd
Current assignee: China United Network Communications Group Co Ltd
Priority date: 2022-10-31
Filing date: 2022-10-31
Publication date: 2023-01-31
Anticipated expiration: 2042-10-31
Also published as: CN115665726B

Abstract

The invention provides a capability approval data acquisition method, a service platform, an eUICC, equipment and a medium, which relate to the technical field of communication, and the method comprises the following steps: a service platform acquires a request of a terminal participating in eUICC capability approval generated in a service; responding to an eUICC capacity approval requirement generated along with a service management process, and generating a first command based on a request of a terminal for participating in eUICC capacity approval, wherein the first command comprises a conventional processing mode and a terminal participation mode; the first command is sent to the eUICC, so that the eUICC can select a provision object of the capability approval data based on a first preset strategy, the eUICC generates a second command in response to the selection of the terminal participation mode, the second command comprises the capability approval data provided by the eUICC to the terminal, and the second command is sent to the terminal, so that the terminal can obtain the capability approval data. The technical scheme provided by the invention can provide the use permission of the eUICC capability approval data for the terminal.

Description

Capability approval data acquisition method, platform, eUICC, device and medium

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a capability approval data acquisition method, a service platform, an eUICC, a computer device, and a computer-readable storage medium.

Background

An eSIM (embedded-SIM) technology applied to an M2M (Machine-to-Machine, which refers to a communication form in which one or both of machines are machines and the Machine can automatically complete the entire communication process through program control) service is called an eUICC (embedded UICC) in the GSMA (Global System for Mobile communications Association) international standard.

The eUICC remote management service platform can manage the eUICC by not only realizing main functions of downloading, installing, deleting, activating/deactivating and the like of a subscription data file (Profile), but also performing related data management, policy management and the like, wherein an eUICC Capability approval (eUICC Capability edit) function is a part of the eUICC remote management service platform. The eUICC remote management service platform can request the eUICC to provide capability verification data information such as a Profile state, security domain quantity/identification, available space and the like, so as to verify whether the eUICC information set grasped by the service platform is consistent or updated, and ensure the timeliness of the service platform. However, in the eUICC remote management, the remote management of the subscription data of the eUICC is realized through remote interaction between the eUICC and the service platform, the terminal only serves as a data transmission channel to perform the function of data transparent transmission, and the eUICC capability verification function is also transparent transmission and does not participate in the data transmission, that is, the terminal cannot obtain the usage right of the eUICC capability verification data.

Disclosure of Invention

The present invention is achieved in order to at least partially solve the technical problem that the terminal in the prior art can only serve as a data transmission channel between the eUICC and the service platform to perform a data transparent transmission function, and cannot obtain the use permission of the eUICC capability approval data.

According to an aspect of the present invention, a capability approval data acquisition method is provided, which is applied to a service platform, and the method includes:

acquiring a request generated in a service for a terminal to participate in the eUICC capability verification of an embedded universal integrated circuit card;

responding to an eUICC capacity approval requirement generated along with a service management process, and generating a first command based on a request of a terminal for participating in eUICC capacity approval, wherein the first command comprises two modes of requesting the eUICC to select a provision object of capacity approval data, namely a conventional processing mode and a terminal participation mode; and the number of the first and second groups,

and sending the first command to the eUICC, so that the eUICC selects a provision object of the capability approval data based on a first preset strategy after receiving the first command, the eUICC generates a second command in response to the selection of the terminal participation mode, the second command comprises the capability approval data provided by the eUICC to the terminal, and the second command is sent to the terminal, so that the terminal obtains the capability approval data of the eUICC after receiving the second command.

Optionally, the eUICC capability approval data includes at least one of: the number of security domains ISD-P signing the data profile, the size of available nonvolatile storage space and the size of available volatile storage space.

Optionally, after acquiring the request generated in the service for the terminal to participate in the eUICC capability approval, the method further includes:

judging whether the terminal is allowed to participate in a request of the eUICC capability approval according to a second preset strategy;

if the request is allowed, a step of generating a first command based on the request of the terminal participating in the eUICC capacity approval is executed in response to the eUICC capacity approval requirement generated along with the service management process;

if not, ending the current flow.

Optionally, after sending the first command to the eUICC, the method further includes:

and receiving a response message of the first command returned by the eUICC, and acquiring eUICC capacity approval data, wherein after the eUICC receives the first command, the response message of the first command is generated and returned to the service platform by selecting a terminal participation mode or a conventional processing mode, and the response message of the first command comprises the capacity approval data provided by the eUICC to the service platform.

According to another aspect of the present invention, there is provided a capability approval data acquisition method applied to an embedded universal integrated circuit card eUICC, the method comprising:

receiving a first command sent by a service platform, wherein the first command comprises two modes of requesting an eUICC to select a provision object of capability approval data, namely a conventional processing mode and a terminal participation mode; after acquiring a request for a terminal to participate in eUICC capacity approval generated in a service, a service platform responds to an eUICC capacity approval requirement generated along with a service management process and generates a first command based on the request for the terminal to participate in eUICC capacity approval;

selecting a provision object of the capability approval data based on a first preset strategy;

generating a second command in response to the selection of the terminal participation mode, wherein the second command comprises capability approval data provided by the eUICC to the terminal; and the number of the first and second groups,

and sending the second command to the terminal, so that the terminal obtains the eUICC capability approval data after receiving the second command.

Optionally, the eUICC capability approval data includes at least one of: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space.

Optionally, the first command is generated by the service platform in response to a request for generating an eUICC capability approval requirement along with the service management process and based on the request for the terminal to participate in the eUICC capability approval after judging the request for allowing the terminal to participate in the eUICC capability approval according to the second preset policy.

Optionally, after receiving the first command sent by the service platform, the method further includes:

responding to the selection of the terminal participation mode or the selection of the conventional processing mode, and generating a response message of the first command, wherein the response message of the first command comprises capability approval data provided by the eUICC to the service platform; and the number of the first and second groups,

and returning a response message of the first command to the service platform, so that the service platform obtains the eUICC capability approval data after receiving the response message of the first command.

According to another aspect of the present invention, there is provided a service platform, comprising:

the system comprises an acquisition module, a verification module and a verification module, wherein the acquisition module is used for acquiring a request of a terminal generated in a service for participating in the verification of the capability of an embedded universal integrated circuit card (eUICC);

the first command generation module is configured to generate a first command based on a request of a terminal for participating in the eUICC capability approval in response to an eUICC capability approval requirement generated along with a service management process, wherein the first command comprises two modes of requesting the eUICC to select a provision object of capability approval data, namely a conventional processing mode and a terminal participation mode; and (c) a second step of,

the first sending module is configured to send the first command to the eUICC, so that the eUICC can select a provision object of the capability approval data based on a first preset policy after receiving the first command, generate a second command in response to a terminal participation mode selection, where the second command includes the capability approval uicc data provided by the eUICC to the terminal, send the second command to the terminal, and obtain the eUICC capability approval data after receiving the second command.

According to still another aspect of the present invention, there is provided an embedded eUICC, including:

a second receiving module, configured to receive a first command sent by a service platform, where the first command includes two modes, namely a conventional processing mode and a terminal participation mode, for requesting the eUICC to select a provision object of capability approval data of the eUICC; after acquiring a request for a terminal to participate in eUICC capacity approval generated in a service, a service platform responds to an eUICC capacity approval requirement generated along with a service management process and generates a first command based on the request for the terminal to participate in eUICC capacity approval;

the selection module is configured to select a provision object of the eUICC capability approval data based on a first preset policy;

a second command generating module, configured to generate a second command when the selecting module selects a terminal participation mode, where the second command includes capability approval data provided by the eUICC to the terminal; and the number of the first and second groups,

and the second sending module is configured to send the second command to the terminal, so that the terminal obtains the eUICC capability approval data after receiving the second command.

According to a further aspect of the present invention, there is provided a computer device comprising a memory and a processor, the memory having stored therein a computer program, the processor executing the aforementioned capability approval data acquisition method when the processor runs the computer program stored in the memory.

According to yet another aspect of the present invention, there is provided a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, executes the aforementioned capability verification data acquisition method.

The technical scheme provided by the invention can have the following beneficial effects:

the method for acquiring the capability approval data provided by the invention aims at the requirement that the terminal participates in the capability approval process in the eSIM service to acquire the capability approval data, the terminal participation is used as one of execution modes in the eUICC capability approval process after the permission of a service platform for the selection of the eUICC, and the eUICC capability approval data is provided for the terminal when the eUICC selects the terminal participation mode, thereby solving the problem that the terminal in the prior art can only be used as a data transmission channel between the eUICC and the service platform to play a data transparent transmission role and can not acquire the use permission of the eUICC capability approval data.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

Drawings

The accompanying drawings are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the example serve to explain the principles of the invention and not to limit the invention.

Fig. 1 is a schematic flow chart of a capability verification data acquisition method according to an embodiment of the present invention;

FIG. 2 is a schematic flow chart diagram illustrating another capability verification data acquisition method according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of another capability verification data acquiring method according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of a service platform provided in an embodiment of the present invention;

fig. 5 is a schematic structural diagram of an eUICC according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a capability verification data acquisition system according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a computer device according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the following detailed description of the embodiments of the present invention is provided with reference to the accompanying drawings. It should be understood that the detailed description and specific examples, while indicating the present invention, are given by way of illustration and explanation only, not limitation.

The SIM card (Subscriber Identity Module) is one of the core functional modules of the mobile network service, and takes the important responsibility of the mobile terminal for network access authentication. In recent years, as mobile terminals (particularly, terminals represented by internet of things devices) are becoming integrated and diversified in form, new requirements for miniaturization, vibration resistance, high temperature resistance, moisture resistance and the like are continuously put on SIM cards. The conventional SIM card has undergone several stages of evolution and gradually miniaturized size, but still cannot meet the strict space limitation requirement of some terminals. Under the background, an embedded encapsulated SIM card capable of meeting the three-proofing requirements of the terminal is produced at the same time, which is an embedded SIM card — eSIM. The eSIM is based on cryptography technology, which separates operator subscription data from hardware in the production, storage and delivery links, exists in the form of electronic data, and supports remote configuration to terminals through a network. The data structure and function of a core Subscriber Identity Module (SIM) of an eSIM are completely identical to those of a conventional SIM card. In order to meet the requirement of electronization, the eSIM is different from the conventional SIM card in technical implementation, production mode and use mode. The terminal is required to be internally provided with security hardware for securely storing an electronic card, such as an eUICC (embedded UICC). The subscription data is electronized, and can be downloaded and installed in the user terminal through the network, so that the method not only is more suitable for the hardware requirements of various novel terminals, but also effectively improves the user experience and the operation efficiency through remote online use and management modes.

An eSIM technology applied to M2M services is called eUICC remote management in a GSMA international standard, in the eUICC remote management, subscription data remote management of the eUICC is implemented through remote interaction between the eUICC and a service platform, a terminal only serves as a channel for data transmission to play a role of data transparent transmission, and cannot directly acquire a service event behavior of the eUICC, and a basic remote management event occurring around a subscription data file (Profile) needs to be instructed through a USAT (USIM Application Toolkit, where the USIM is Universal Subscriber Identity Module) provided by the eUICC, including creation and deletion of the Profile. When events such as Profile creation and Profile deletion occur on the eUICC, the eUICC synchronizes the occurrence of the events to the terminal by initiating a proactive USAT command, and the terminal acquires the change of the deployment state of the Profile on the eUICC in this way.

The eUICC remote management service platform manages the eUICC comprehensively, not only can realize main functions of Profile downloading installation, deletion, activation/deactivation and the like, but also can perform related data management, policy management and the like, and the eUICC capability verification (eUICC availability audio) function is a part of the functions. The eUICC remote management service platform can request the eUICC to provide capability verification data information such as a Profile state, security domain quantity/identification, available space and the like, so as to verify whether the eUICC information set grasped by the service platform is consistent or updated, and ensure the timeliness of the service platform. The same as other functions of the service platform for eUICC management, the eUICC capability approval function is also transparent to the terminal and does not participate in the transparent transmission, and the terminal does not know data and information transmitted in the function implementation process.

The function of checking the capability of the eUICC card can obtain the latest basic information of the eUICC card in time, and the function is very necessary and practical for a more varied SIM card form such as the eUICC card. For some terminal service scenarios, there is a similar need, for example, for user self-service implemented by a terminal, a user may wish to query capability approval data such as information of a current space and some basic elements of a card, but considering that under a basic mechanism of an eUICC remote management service, the eUICC capability approval is one of basic functions of a service platform and an eUICC interface, and the terminal is not allowed to relate to a service flow therein, so the terminal has no channel to implement a corresponding service by means of the function. The processing mode adopted by the prior art is consistent with a service general mechanism, and the safety is also a necessary consideration factor, the eUICC capacity verification data belongs to more critical high-sensitivity information, the terminal is used as open equipment, if the eUICC capacity verification data can be easily obtained, the risk is also improved, and therefore the realizability and the safety of the service are in conflict. In this case, if the terminal can be managed and controlled to realize the orderly utilization of the function under the premise of ensuring the safety, the problem of considerable consideration is solved. In order to meet the new requirements of the eUICC remote management in the service development process in the above-mentioned scenes, and enable the terminal to obtain a channel participating in the eUICC remote management service flow under the necessary condition, the invention provides an implementation scheme for the terminal to obtain the eUICC capacity approval data use permission. The following is a detailed description by way of specific examples.

It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the above-described drawings are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order; furthermore, the embodiments and features of the embodiments of the present invention may be arbitrarily combined with each other without conflict.

In the following description, suffixes such as "module", "component", or "unit" used to denote elements are used only for facilitating the explanation of the present invention, and have no specific meaning in itself. Thus, "module", "component" or "unit" may be used mixedly.

Fig. 1 is a schematic flowchart of a capability verification data acquisition method according to an embodiment of the present invention. The method is applied to a service platform, specifically an eUICC remote management service platform, and the eSIM technology is called eUICC remote management in GSMA international standard, so the method can also be called an eSIM service platform. As shown in fig. 1, the method includes the following steps S101 to S103.

And S101, acquiring a request of a terminal generated in the service for participating in the eUICC capability approval.

In this step, if a request for the terminal to authenticate the eUICC capability is generated in the service, a request for the terminal to participate in the authentication of the eUICC capability is fed back to the service platform in a certain manner, for example, the request is fed back to the service platform in a manner that the terminal interacts with the service platform, or is fed back to the service platform in a manner that the terminal requests the service platform for management, or is fed back to the service platform in a manner that the terminal application platform interacts with the service platform.

S102, responding to an eUICC capacity approval requirement generated along with a service management process, and generating a first command based on a request of a terminal for participating in eUICC capacity approval, wherein the first command comprises two modes of requesting the eUICC to select a provision object of capacity approval data, namely a conventional processing mode and a terminal participation mode.

In this step, the first command may also be referred to as an eUICC capability approval remote command, and the command is initiated by the service platform according to the service requirement of the service platform, and is not initiated independently due to the terminal requirement.

In order to implement that the terminal participates in the eUICC capability approval process, a command related to eUICC capability approval between the service platform and the eUICC needs to be modified first to provide a command execution mode selection for the eUICC, and the upgraded command is the first command, and the specific definition of the first command can be as shown in table 1 below.

TABLE 1

The command extension adds a Data field which does not exist in the prior art, the Data field is used for indicating that the command is a request command which requires the eUICC to provide the capability approval Data after being allowed by the eUICC service platform, the command execution mode can select one of a plurality of specified modes, wherein, 0F indicates that the mode for providing the Data at this time is selectable, an alternative mode identification list is arranged after 0F, and at present, 01 indicates that a providing object of the eUICC capability approval Data is a command sender, namely, the eUICC only needs to return the Data required by the command to the service platform through a response message according to a conventional mode; "02" indicates that the providing object of the eUICC capability approval data is the command sender and the terminal, that is, the eUICC needs to provide the same data to the terminal through the proactive command in addition to returning the data required by the command to the service platform through the response message. The remaining values are retained.

S103, sending the first command to the eUICC, so that the eUICC can select a provision object of the capability approval data based on a first preset strategy after receiving the first command, generating a second command by the eUICC in response to the selection of the terminal participation mode, wherein the second command comprises the capability approval data provided by the eUICC to the terminal, and sending the second command to the terminal, so that the terminal can obtain the capability approval data of the eUICC after receiving the second command.

Wherein the eUICC capability approval data comprises at least one of the following data: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space. Further, the number of security domains ISD-P of the signed data profile is the mandatory data, and the size of the available nonvolatile storage space and the size of the available volatile storage space are optional data.

In this step, after receiving the first command, that is, after receiving a request command for selectively providing the eUICC capability approval data, the eUICC determines and makes a selection decision according to a first preset policy, whether to select a conventional processing mode or a terminal participation mode. Wherein, the first preset strategy comprises: the management requirements of the current subscription data Profile or the eUICC card, or the requirements of security attributes, for example, whether the current subscription data Profile has policy requirements on confidentiality or privacy, and forbids providing specified data to the terminal, if yes, selecting a conventional processing mode, and if not, selecting a terminal participation mode.

If the eUICC selects a terminal participation mode, that is, the execution mode of the selection command is 02, and the eUICC capability approval data is allowed to be synchronously provided to the terminal, a new USAT proactive command needs to be added to support the requirement, and the function is to provide the eUICC capability approval data requested to be provided in the first command to the terminal, where the new addition command is the second command, and may be named as, for example, eUICC availability audio terminal, and its specific definition may be as shown in table 2 below.

TABLE 2

Note: since the data objects such as the number of ISD-P, the available nonvolatile memory space, the available volatile memory space, etc. are converted from the remote management data object to the local machine card interface command data object, new data objects need to be defined for the data objects:

1) "ISD-P" is a newly added data object, and optionally represents the number of ISD-P existing on the eUICC at present, and the specific coding meaning is shown in the table 2;

2) The "available nonvolatile memory space" and the "available volatile memory space" are newly added data objects, and optionally, whether the eUICC card identical name data is obtained in a response message of the eUICC capability approval remote command (i.e., the first command) is determined, and the specific encoding meaning is as shown in table 2 above.

If the eUICC selects the conventional processing mode, that is, the execution mode of the selection command is 01, and the eUICC capability approval data is not allowed to be synchronously provided to the terminal, only the capability approval data is subsequently provided to the service platform.

In this embodiment, through implementation of the foregoing steps, the terminal may participate in the eUICC capability verification process, but the eUICC capability verification still takes the service platform as a leading factor, and the terminal may complete the verification synchronously only after the platform completes the capability verification, and may not complete the verification separately or in advance.

In a specific embodiment, after step S101, the following step S104 is further included.

S104, judging whether the terminal is allowed to participate in the request of the eUICC capacity approval according to a second preset strategy, if so, executing a step S102, namely executing a step of responding to the eUICC capacity approval requirement generated along with the service management process and generating a first command based on the request of the terminal participating in the eUICC capacity approval; if not, ending the current flow.

In this embodiment, after acquiring a request for the terminal to participate in the eUICC capability approval, which is generated in a service, the service platform needs to determine whether to allow the terminal to participate in the request for the eUICC capability approval according to a second preset policy, if the request is allowed, the subsequent steps are continuously executed, and a first command is generated based on the request for the terminal to participate in the eUICC capability approval when the eUICC capability approval requirement is generated along with a service management process, wherein the second preset policy can be set by the service platform according to a policy of the service platform; if not, the current flow is ended, the service platform follows the conventional setting when the eUICC capability approval request needs to be sent subsequently, and only the eUICC is required to provide the capability approval data for the service platform.

In a specific embodiment, after step S103, the following step S105 is further included.

And S105, receiving a response message of the first command returned by the eUICC, and acquiring eUICC capacity approval data, wherein the eUICC generates and returns a response message of the first command to the service platform by selecting a terminal participation mode or a conventional processing mode after receiving the first command, and the response message of the first command comprises the capacity approval data provided by the eUICC to the service platform.

In this embodiment, no matter which mode, conventional processing mode or terminal participation mode is selected by the eUICC, the eUICC returns a response message of the first command to the service platform, and sends the eUICC capability verification data to the service platform. Certainly, the eUICC capability approval data returned to the service platform by the eUICC is the same data as the eUICC capability approval data sent to the terminal.

It should be noted that the sequence of the above steps is only a specific example provided for illustrating the embodiment of the present invention, and the present invention does not limit the sequence of the above steps, and those skilled in the art can adjust the sequence as required in practical application; and the sequence number size of the steps does not limit the execution sequence.

Fig. 2 is a schematic flow chart of another capability verification data acquisition method according to an embodiment of the present invention. The method is applied to the eUICC, and as shown in fig. 2, the method includes the following steps S201 to S204.

S201, receiving a first command sent by a service platform, wherein the first command comprises two modes of requesting an eUICC to select a provision object of capability approval data, namely a conventional processing mode and a terminal participation mode; after acquiring a request for the terminal to participate in the eUICC capacity approval, generated in the service, the service platform responds to an eUICC capacity approval requirement generated along with a service management process and generates a first command based on the request for the terminal to participate in the eUICC capacity approval.

In this step, after a request for the terminal to participate in the eUICC capability approval is generated in the service, the request for the terminal to participate in the eUICC capability approval is fed back to the service platform in a certain manner, for example, the request is fed back to the service platform in a manner that the terminal interacts with the service platform, or the request is fed back to the service platform in a manner that the service platform requires management, or the request is fed back to the service platform in a manner that the terminal application platform interacts with the service platform, so that after the service platform generates the eUICC capability approval request along with the service management process, a first command is generated based on the request for the terminal to participate in the eUICC capability approval, the first command may also be referred to as an eUICC capability approval remote command, the command is initiated by the service platform according to the service requirement of the service platform itself, and is not initiated individually due to the terminal requirement, and the specific structure of the first command is detailed in table 1 in the foregoing embodiment.

S202, selecting a providing object of the capability approval data based on a first preset strategy.

S203, responding to the selection of the participation mode of the terminal, and generating a second command, wherein the second command comprises capability approval data provided by the eUICC to the terminal.

In this step, if the eUICC selects a terminal participation mode, and allows the eUICC capability approval data to be synchronously provided to the terminal, a new USAT active command needs to be added to support the requirement, the function is to provide the eUICC capability approval data requested to be provided in the first command to the terminal, the new added command is the second command, and a specific structure of the second command is detailed in table 2 in the foregoing embodiment.

And S204, sending the second command to the terminal so that the terminal can acquire the eUICC capability approval data after receiving the second command.

Wherein the eUICC capability approval data includes at least one of: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space. Further, the number of security domains ISD-P of the signed data profile is the mandatory data, and the size of the available nonvolatile storage space and the size of the available volatile storage space are optional data.

In a specific embodiment, the first command is generated by the service platform in response to a request for generating an eUICC capability approval requirement along with the service management process and based on a request for the terminal to participate in the eUICC capability approval after judging a request for allowing the terminal to participate in the eUICC capability approval according to a second preset policy.

In this embodiment, after acquiring a request for the terminal to participate in the eUICC capability approval, which is generated in a service, the service platform needs to determine whether to allow the terminal to participate in the request for the eUICC capability approval according to a second preset policy, and if the request is allowed, a first command is generated based on the request for the terminal to participate in the eUICC capability approval when an eUICC capability approval requirement is generated along with a service management process, where the second preset policy may be set by the service platform according to its own policy; if not, the current flow is ended, the service platform follows the conventional setting when the eUICC capability approval request needs to be sent subsequently, and only the eUICC is required to provide the capability approval data for the service platform.

In a specific embodiment, after step S201, the following steps S205 and S206 are further included.

S205, responding to the selection of the terminal participation mode or the selection of the conventional processing mode, generating a response message of the first command, wherein the response message of the first command comprises capability approval data provided by the eUICC to the service platform;

s206, returning the response message of the first command to the service platform, so that the service platform obtains the eUICC capability approval data after receiving the response message of the first command.

It should be noted that the sequence of the above steps is only a specific example provided for illustrating the embodiment of the present invention, and the present invention does not limit the sequence of the above steps, and those skilled in the art can adjust the sequence as required in practical application; and the sequence number of the steps does not limit the execution sequence.

Fig. 3 is a flowchart illustrating another capability verification data acquisition method according to an embodiment of the present invention. As shown in fig. 3, the method includes the following steps S301 to S312.

S301, a request of a terminal for checking the eUICC capability is generated in a service, and the request of the terminal for participating in the eUICC capability checking is fed back to an eSIM service platform in a certain mode, such as modes of interaction between the terminal and the eSIM service platform, management requirements of the eSIM service platform, interaction between a terminal application platform and the eSIM service platform, and the like;

s302, the eSIM service platform judges whether to allow the terminal to participate in the request of the eUICC capability approval according to the own strategy setting, if so, the subsequent step S303 is continued, if not, the flow is ended, the eSIM service platform follows the conventional setting when the eUICC capability approval request needs to be sent subsequently, and only the eUICC is required to provide capability approval data for the eSIM service platform;

s303, when the eSIM service platform generates an eUICC capability approval requirement along with the service management process (whether the command is initiated is not affected by steps S301 and S302), the eSIM service platform generates a first command that selectively provides eUICC capability approval, where the first command requests the eUICC to select a command execution mode, where the alternative modes include a conventional processing mode and a terminal participation mode, and a specific structure of the command is shown in table 1;

s304, the eSIM service platform sends a first command to the eUICC;

s305, the eUICC receives the first command and then analyzes the first command to obtain the requirement of selectively providing the eUICC capability approval data;

s306, the eUICC analyzes and compares the eUICC capacity approval execution mode options according to the current subscription data Profile or the management requirement of the eUICC card or the requirement of the security attribute (namely the current strategy), determines a selection result, executes a first command according to the selection result, executes the step S307 if a conventional processing mode is selected, and respectively executes the steps S307 and S309 if a terminal participation mode is selected;

s307, the eUICC generates a response message of a first command containing eUICC capability approval data, and the structure of the response message follows the prior art;

s308, the eUICC returns a response message of the first command to the eSIM service platform, and the eSIM service platform obtains the required capability approval data;

s309. The eUICC generates a second command for providing eUICC capability approval data to the terminal, the data contained in the second command is the same as the eUICC capability approval data in the response message of the first command, and the command structure is shown in the table 2;

s310, the eUICC sends a second command to the terminal;

s311, the terminal receives and analyzes the second command, and acquires eUICC capability verification data which comprise the number of ISD-Ps existing in the eUICC and possible available nonvolatile and volatile storage spaces, so that the eUICC meets the requirement of participating in eUICC capability verification;

and S312, the terminal returns a response that the second command is successfully executed to the eUICC.

It can be seen that, in this embodiment, under the condition that the terminal is constrained by various conditions, such as participation requirements of the terminal, an eSIM universal mechanism, security requirements, and the like, an implementation idea that all the parties are considered is designed, the eUICC capability approval command is expanded and upgraded, active instructions for providing eUICC capability approval data to the terminal are newly defined, the active instructions include structure and parameter definitions, such as upgraded or newly added functions, structure and parameter definitions, and the like, and the requirements of flow steps and rules for interaction among the eSIM service platform, the eUICC card, and the terminal are specified at the same time.

The method for acquiring the capability approval data provided by the embodiment of the invention comprises the steps of feeding back the capability approval data to a service platform in a set mode when a requirement of a terminal for participating in eUICC capability approval is generated in a service, judging whether the data allowing the eUICC capability approval is provided to the terminal or not according to a first preset strategy when the service platform receives the requirement, if the requirement is allowed, providing different choices for the eUICC through a first command when the service platform needs the eUICC capability approval data, wherein the choices comprise a conventional processing mode and a terminal participation mode, the eUICC judges and selects according to the setting of the currently used Profile, feeds back a selection result and the eUICC capability approval data to the service platform through a response message, if the terminal participation mode is selected, the eUICC needs to generate a second command and send the second command to the terminal at the same time, the eUICC capability approval data contained in the second command has the same content as the eUICC capability approval data in a response message fed back to the service platform, and the terminal can obtain the eUICC capability approval data, thereby meeting the requirement of a certain new service requirement generated in the development process of remote management of the eUICC and ensuring the service under the necessary security of the service.

Fig. 4 is a schematic structural diagram of a service platform provided in the embodiment of the present invention. The service platform is specifically an eUICC remote management service platform, and the eSIM technology is called eUICC remote management in the GSMA international standard, and therefore, the service platform can also be called an eSIM service platform. As shown in fig. 4, the service platform includes: an acquisition module 401, a first command generation module 402 and a first sending module 403.

The obtaining module 401 is configured to obtain a request for a terminal to participate in the eUICC capability approval of the embedded universal integrated circuit card, which is generated in a service; the first command generating module 402 is configured to generate a first command based on a request of a terminal to participate in eUICC capability approval in response to an eUICC capability approval requirement generated along with a service management process, where the first command includes two modes, namely a conventional processing mode and a terminal participation mode, for requesting the eUICC to select a provision object of capability approval data thereof; the first sending module 403 is configured to send the first command to the eUICC, so that the eUICC selects a provision object of the capability approval data based on a first preset policy after receiving the first command, and in response to selecting a terminal participation mode, the eUICC generates a second command, where the second command includes the capability approval uicc data provided by the eUICC to the terminal, and sends the second command to the terminal, so that the terminal obtains the eUICC capability approval data after receiving the second command.

In a specific embodiment, the eUICC capability approval data includes at least one of: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space.

In a specific embodiment, the service platform further includes: and a judging module.

The judging module is configured to judge whether the terminal is allowed to participate in the request of the eUICC capability approval according to a second preset strategy.

Correspondingly, the first command generating module 402 is specifically configured to, when the determination result of the determining module is a request for allowing the terminal to participate in the eUICC capability approval, execute an operation of generating the first command based on the request for the terminal to participate in the eUICC capability approval in response to an eUICC capability approval requirement generated along with the service management process. Of course, if the judgment result of the judgment module is a request for not allowing the terminal to participate in the eUICC capability approval, the subsequent workflow is not performed.

In a specific embodiment, the service platform further includes: a first receiving module.

The first receiving module is configured to receive a response message of the first command returned by the eUICC, and acquire eUICC capability approval data, wherein after receiving the first command, the eUICC generates and returns a response message of the first command to the service platform in both a terminal participation mode or a conventional processing mode, and the response message of the first command includes capability approval data provided by the eUICC to the service platform.

The service platform provided by the embodiment of the invention judges according to a first preset strategy when receiving a requirement that the terminal participates in the eUICC capability approval in a service, determines whether to allow data of the eUICC capability approval to be provided to the terminal, if so, the service platform can provide different choices for the eUICC through a first command when the data of the eUICC capability approval is required, wherein the choices comprise a conventional processing mode and a terminal participation mode, the eUICC judges and selects according to the setting of the currently used Profile, the selection result and the eUICC capability approval data are fed back to the service platform through a response message, if the terminal participation mode is selected, the eUICC also needs to generate a second command and send the second command to the terminal, the second command comprises the eUICC capability approval data, the content of the eUICC capability approval data is the same as that of the eUICC capability data in the response message fed back to the service platform, the terminal obtains the eUICC capability approval data, thereby meeting new requirements of some scenes generated in the development process of the eUICC under necessary conditions, and realizing the safety of the eUICC under the remote management of the service flow.

Fig. 5 is a schematic structural diagram of an eUICC provided in the embodiment of the present invention. As shown in fig. 5, the eUICC includes: a second receiving module 501, a selecting module 502, a second command generating module 503 and a second sending module 504.

The second receiving module 501 is configured to receive a first command sent by the service platform, where the first command includes two modes, namely a conventional processing mode and a terminal participation mode, for requesting the eUICC to select a provision object of its capability approval data; after acquiring a request for the terminal to participate in the eUICC capacity approval, generated in the service, the service platform responds to an eUICC capacity approval requirement generated along with a service management process and generates a first command based on the request for the terminal to participate in the eUICC capacity approval. The selection module 502 is configured to select a provision object of the eUICC capability approval data based on a first preset policy. The second command generating module 503 is configured to generate a second command when the selecting module selects the terminal participation mode, where the second command includes capability approval data provided by the eUICC to the terminal. The second sending module 504 is configured to send the second command to the terminal, so that the terminal obtains the eUICC capability approval data after receiving the second command.

In a specific embodiment, the second command generating module 503 is further configured to generate a response message of the first command after the selecting module selects the terminal participation mode or selects the normal processing mode, where the response message of the first command includes capability approval data provided by the eUICC to the service platform. The second sending module 504 is further configured to return a response message of the first command to the service platform, so that the service platform obtains the eUICC capability approval data after receiving the response message of the first command.

The eUICC provided in the embodiment of the present invention receives a first command sent by a service platform, and obtains two choices, namely a conventional processing mode and a terminal participation mode, provided for the eUICC, when receiving a requirement that the terminal participates in eUICC capability approval in a service, the service platform first determines according to a first preset policy, and determines whether to allow data for eUICC capability approval to be provided to the terminal, if the data is allowed, the service platform can provide different choices for the eUICC through the first command when the eUICC capability approval data is required, the eUICC performs the determination and selects according to the setting of a Profile currently used, and feeds back a selection result and the eUICC capability approval data to the service platform through a response message, if the eUICC needs to generate a second command and send the second command to the terminal at the same time, the content of the eUICC capability approval data included in the second command is the same as that of the eUICC in a response message fed back to the service platform, and the terminal obtains the eUICC capability approval data, thereby satisfying a certain new service requirement generated in a development process of the eUICC, and realizing a security guarantee mechanism of the service under a necessary scene.

Fig. 6 is a schematic structural diagram of a capability verification data acquisition system according to an embodiment of the present invention. As shown in fig. 6, the capability approval data acquisition system includes a service platform 601 and an eUICC602.

The service platform 601 may adopt a specific structure of the service platform in the foregoing embodiment, and the eUICC602 may adopt a specific structure of the eUICC in the foregoing embodiment, which is not described herein again.

The capability approval data acquisition system provided by the embodiment of the invention feeds back the capability approval data to the service platform in a set mode when the requirement of the terminal for participating in the eUICC capability approval is generated in the service, the service platform receives the requirement and judges according to a first preset strategy to determine whether the data of the eUICC capability approval is allowed to be provided to the terminal, if the requirement is allowed, the service platform can provide different choices for the eUICC through a first command when the eUICC capability approval data is required, wherein the different choices comprise a conventional processing mode and a terminal participation mode, the eUICC judges and selects according to the setting of the currently used Profile, the selection result and the eUICC capability approval data are fed back to the service platform through a response message, if the terminal participation mode is selected, the eUICC also needs to generate a second command and send the second command to the terminal at the same time, the eUICC capability approval data is contained in the second command, the eUICC capability approval data is the same as the eUICC data in the response message fed back to the service platform, the terminal obtains the capability approval data, thereby meeting the requirements of some new services generated in the remote management process, and the terminal can obtain the security management conditions of the eUICC under the necessary scenarios, and the service can be considered under the security management, and the security of the service platform.

Based on the same technical concept, the embodiment of the present invention correspondingly provides a computer device, as shown in fig. 7, the computer device includes a memory 71 and a processor 72, the memory 71 stores a computer program, and when the processor 72 runs the computer program stored in the memory 71, the processor 72 executes the aforementioned capability verification data acquisition method.

Based on the same technical concept, embodiments of the present invention correspondingly provide a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the processor executes the aforementioned capability verification data acquisition method.

In summary, according to the method, the system, the service platform, the eUICC, the computer device and the storage medium for acquiring the capability approval data provided in the embodiments of the present invention, when the terminal needs to use the capability approval function of the eUICC, the terminal is enabled to safely and controllably acquire the usage right of the capability approval data of the eUICC under the condition of obtaining the relevant permission through the corresponding judgment and control operations of the service platform and the eUICC, so as to meet new requirements of some scenarios generated in the service development process of the eUICC remote management, enable the terminal to acquire channels participating in the service process under necessary conditions, and also consider the mechanism characteristics of adapting to the eUICC remote management service, so that sufficient consideration is given to the security, and the service can be implemented under the condition of security guarantee.

It will be understood by those of ordinary skill in the art that all or some of the steps of the methods, systems, functional modules/units in the devices disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be performed by several physical components in cooperation. Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on computer readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). The term computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data, as is well known to those of ordinary skill in the art. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital Versatile Disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed by a computer. In addition, communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media as known to those skilled in the art.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for acquiring capability approval data is applied to a service platform, and comprises the following steps:

2. The method of claim 1, wherein the eUICC capability approval data comprises at least one of: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space.

3. The method according to claim 1 or 2, wherein after acquiring the request for the terminal to participate in the eUICC capability approval, the method further comprises:

if not, ending the current flow.

4. The method of claim 1 or 2, wherein after sending the first command to the eUICC, further comprising:

5. A method for acquiring capability approval data is applied to an embedded universal integrated circuit card (eUICC), and comprises the following steps:

and sending the second command to the terminal so that the terminal can acquire the eUICC capability approval data after receiving the second command.

6. The method of claim 5, wherein the eUICC capability approval data comprises at least one of: the number of security domains ISD-P signing the data profile, the size of available non-volatile storage space and the size of available volatile storage space.

7. The method as claimed in claim 5 or 6, wherein the first command is generated by the service platform in response to a request for eUICC capability approval generated along with the service management process and based on the request for the terminal to participate in eUICC capability approval after determining the request for allowing the terminal to participate in eUICC capability approval according to the second preset policy.

8. The method according to claim 5 or 6, further comprising, after receiving the first command sent by the service platform:

generating a response message of the first command in response to the selection of the terminal participation mode or the selection of the conventional processing mode, wherein the response message of the first command comprises capability approval data provided by the eUICC to the service platform; and the number of the first and second groups,

9. A service platform, comprising:

the system comprises an acquisition module, a verification module and a verification module, wherein the acquisition module is used for acquiring a request for a terminal to participate in the capability verification of an embedded universal integrated circuit card (eUICC) generated in a service;

the first command generation module is configured to generate a first command based on a request of a terminal for participating in the eUICC capability approval in response to an eUICC capability approval requirement generated along with a service management process, wherein the first command comprises two modes of requesting the eUICC to select a provision object of capability approval data, namely a conventional processing mode and a terminal participation mode; and the number of the first and second groups,

10. An embedded universal integrated circuit card (eUICC), comprising:

11. A computer device comprising a memory in which a computer program is stored and a processor that executes the capability verification data acquisition method according to any one of claims 1 to 4 or the capability verification data acquisition method according to any one of claims 5 to 8 when the processor runs the computer program stored in the memory.

12. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, executes the capability approval data acquisition method according to any one of claims 1 to 4 or the capability approval data acquisition method according to any one of claims 5 to 8.