Creation method of auxiliary security domain, SM-SR and system
An SM-SR and auxiliary security technology, applied in the field of smart cards, can solve problems such as inability to support multi-service provider applications
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0069] This embodiment provides a method for creating an auxiliary security domain, which is applied to the SM-SR (Subscription Manager Security Routing) network element of the subscription relationship management platform, such as figure 1 As shown, the method includes:
[0070] Step S102: Receive a request for creating a supplementary security domain SSD (Supplementary Security Domain) sent by the service platform.
[0071] It should be noted that the present invention is based on a standard eUICC architecture and an eUICC card, and creates SSDs required for services in the currently activated profile. The eUICC architecture mainly includes SM-SR, SM-DP (SubscriptionManager Data Preparation, contract relationship Management platform data preparation), ECASD, ISD-P and ISD-R, the complete eUICC architecture can also include other network elements, which is not limited.
[0072] In this embodiment, the SM-SR is an important network element of the remote management platform of...
Embodiment 2
[0134] refer to image 3 , this embodiment provides a method for creating an auxiliary security domain, which is applied to the eUICC, and the method includes:
[0135] Step S202: The ISD-R of the eUICC receives the SSD creation command sent by the SM-SR, and the SSD creation command is sent by the SM-SR after receiving the SSD creation request sent by the service platform;
[0136] Step S204: The ISD-R creates an SSD in the eUICC according to the SSD creation command;
[0137] Step S206: If the SSD creation success message sent by the created SSD is received, the ISD-R returns an SSD creation response to the SM-SR, so that the SM-SR generates an initial key for the created SSD after receiving the SSD creation response, and sends the The service platform sends the initial key;
[0138] Step S208: ISD-R receives the initial key sent by SM-SR, and sends the initial key to the created SSD;
[0139] Step S210: The created SSD receives the initial key, and uses the initial key t...
Embodiment 3
[0146] This embodiment provides a method for creating an auxiliary security domain, which is applied to SM-DP, and the method includes:
[0147] Receive the request for applying for SSD migration token sent by SM-SR;
[0148] Generate an SSD migration token according to the request for applying for an SSD migration token;
[0149] Returning the SSD migration token to the SM-SR, the SSD migration token is used to trigger the SM-SR to send an SSD migration command carrying the SSD migration token to the ISD-R, so that the ISD -R forwards the SSD migration command to the Profile security domain ISD-P, and makes the ISD-P verify the SSD migration token after receiving the SSD migration command, and sends the SSD migration token to the The eUICC sends indication information authorizing the eUICC to migrate the created SSD to the ISD-P, so that the eUICC migrates the created SSD to the ISD-P.
[0150] Optionally, the request for applying for an SSD migration token carries an EID; ...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


