An eSIM configuration optimization method based on an industrial cloud platform service
By optimizing the eSIM configuration method through an industrial cloud platform, the centralized management and security issues of eSIM configuration in industrial scenarios are solved, enabling efficient and secure configuration management of devices.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- SHAN DONG BA JUN TONG XIN KE JI YOU XIAN GONG SI
- Filing Date
- 2026-03-10
- Publication Date
- 2026-05-26
AI Technical Summary
Existing eSIM configuration methods lack specificity for industrial application scenarios, making it difficult to achieve centralized management and high security, and failing to meet the flexible management and high security requirements of the Industrial Internet.
The system receives device information through an industrial cloud platform, generates configuration requirement vectors, optimizes eSIM configuration files, and uses a dual-layer encryption mechanism for secure transmission, while dynamically updating the configuration status through monitoring.
It enables unified management, configuration applicability, and security of industrial terminal equipment, ensuring stable operation and efficient management of the equipment.
Smart Images

Figure CN122093831A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the fields of industrial internet and mobile communication technology, specifically to an eSIM configuration optimization method based on industrial cloud platform services. Background Technology
[0002] With the rapid development of the Industrial Internet, more and more industrial terminal devices need to access mobile communication networks to achieve data transmission and remote control. Traditional physical SIM cards have problems such as inconvenience in replacement, high management costs, and easy damage, making it difficult to meet the needs of large-scale equipment deployment and flexible management in industrial scenarios. The emergence of eSIM (embedded subscriber identification module) technology provides a new way to solve the above problems. eSIM enables the writing and updating of operator information through remote configuration, without the need to physically replace the SIM card, which greatly improves the flexibility and convenience of device management. However, existing eSIM configuration methods are mainly geared towards the consumer electronics sector and have the following shortcomings in industrial application scenarios: First, existing configuration methods lack specific consideration for industrial application scenarios and cannot optimize configurations according to different industrial application needs. Second, existing configuration methods lack deep integration with industrial cloud platforms, making it difficult to achieve centralized management and intelligent optimization of configurations. Third, existing configuration methods do not adequately consider security and are difficult to meet the high security requirements of industrial scenarios; Therefore, an eSIM configuration optimization method based on industrial cloud platform services is needed to meet the eSIM configuration management requirements in the industrial internet scenario. Summary of the Invention
[0003] The purpose of this invention is to provide an eSIM configuration optimization method based on industrial cloud platform services.
[0004] To achieve the above objectives, the present invention provides the following technical solution: an eSIM configuration optimization method based on industrial cloud platform services, comprising the following steps: S1. Device registration and information collection steps: The industrial cloud platform receives the registration request sent by the industrial terminal device, obtains the device identification information and eSIM chip identification information of the industrial terminal device, establishes a device information file and stores it in the cloud database; S2. Configuration requirement analysis step: Based on the device information file, obtain the application scenario parameters and network environment parameters of the industrial terminal device, and generate a configuration requirement vector through the configuration requirement analysis module; S3. Configuration file generation steps: Based on the configuration requirement vector, match the target operator configuration template from the preset operator configuration template library, and generate an eSIM configuration file in combination with the application scenario parameters; S4. Configuration optimization process: Optimize the eSIM configuration file, including network access priority configuration, data transmission channel configuration and security authentication parameter configuration, to generate an optimized eSIM configuration file; S5. Secure transmission and distribution steps: The optimized eSIM configuration file is encrypted and encapsulated, and then distributed to the eSIM chip of the industrial terminal device through a secure transmission channel. S6. Configuration verification and activation steps: The eSIM chip of the industrial terminal device receives and decrypts the optimized eSIM configuration file, performs a configuration writing operation, and returns a configuration completion confirmation message to the industrial cloud platform after completing the configuration activation.
[0005] As a further aspect of the present invention: in step S1, the device identification information includes a unique device code, device model information, and the industry type to which the device belongs; the eSIM chip identification information includes a unique eSIM chip identifier and eSIM chip capacity information.
[0006] As a further aspect of the present invention: in step S2, the application scenario parameters include data transmission frequency, single data transmission volume, and real-time requirement level; the network environment parameters include network coverage type and signal strength level.
[0007] As a further aspect of the present invention: in step S2, the method for generating the configuration requirement vector is as follows: The application scenario parameters and network environment parameters are normalized respectively to obtain normalized parameter values; The configuration requirement vector is obtained by multiplying each normalized parameter value by its corresponding weight coefficient and then summing the results. Among them, the weight coefficient for data transmission frequency is 0.25, the weight coefficient for single data transmission volume is 0.20, the weight coefficient for real-time requirement level is 0.30, the weight coefficient for network coverage type is 0.15, and the weight coefficient for signal strength level is 0.10.
[0008] As a further aspect of the present invention: in step S3, the method for matching the target operator configuration template from the preset operator configuration template library is as follows: Calculate the matching degree value between the configuration requirement vector and each operator configuration template in the operator configuration template library; Select the carrier configuration template with the highest matching degree as the target carrier configuration template.
[0009] As a further aspect of the present invention: in step S4, the method for configuring network access priority is as follows: Determine the list of available networks based on the network environment parameters; The networks in the available network list are comprehensively evaluated based on network stability score and network transmission rate score. The network access priority sequence is set according to the comprehensive score from high to low.
[0010] As a further aspect of the present invention: in step S4, the method for configuring the data transmission channel is as follows: Based on the real-time requirement level in the application scenario parameters, the data transmission channel is divided into a real-time transmission channel and a batch transmission channel. Configure low-latency transmission parameters for the real-time transmission channel and high-throughput transmission parameters for the batch transmission channel.
[0011] As a further aspect of the present invention: in step S5, the method for encrypting and encapsulating the optimized eSIM configuration file is as follows: The optimized eSIM configuration file is encrypted using a symmetric encryption algorithm to generate a first encrypted file. A second layer of encryption is performed on the symmetric key of the first encrypted file using an asymmetric encryption algorithm to generate key ciphertext. The first encrypted file and the key ciphertext are encapsulated into an encrypted data packet.
[0012] As a further aspect of the present invention: in step S6, the configuration verification and activation step further includes: Before performing the configuration writing operation, the eSIM chip of the industrial terminal device performs an integrity check on the optimized eSIM configuration file. If the integrity verification passes, the configuration write operation will be performed. If the integrity check fails, a configuration retransmission request is sent to the industrial cloud platform.
[0013] As a further aspect of the present invention, the method further includes a configuration status monitoring step: The industrial cloud platform periodically receives eSIM configuration and operation status information reported by the industrial terminal equipment; Determine whether the current configuration meets the operational requirements based on the eSIM configuration status information; If the current configuration does not meet the operational requirements, the configuration update process is triggered, and steps S2 to S6 are re-executed.
[0014] Compared with the prior art, the beneficial effects of the present invention by adopting the above technical solution are as follows: (1) This invention realizes centralized management of eSIM configuration through an industrial cloud platform, which enables unified configuration management of large-scale industrial terminal equipment, reduces management costs and improves management efficiency.
[0015] (2) Through configuration requirement analysis and configuration optimization, this invention can perform targeted configuration optimization according to the application scenarios and network environment of industrial terminal equipment, thereby improving the applicability and effectiveness of eSIM configuration.
[0016] (3) The present invention uses a double-layer encryption mechanism to securely transmit the configuration file and performs integrity verification on the device side, thereby ensuring the security and reliability of the eSIM configuration process.
[0017] (4) The present invention can detect configuration problems and update them in a timely manner through configuration status monitoring and dynamic update mechanism, thus ensuring the stable operation of industrial terminal equipment. Attached Figure Description
[0018] Figure 1 This is an overall flowchart of an eSIM configuration optimization method based on an industrial cloud platform service, provided as an embodiment of the present invention.
[0019] Figure 2 This is a system architecture diagram provided for an embodiment of the present invention.
[0020] Figure 3 A flowchart for configuration requirement analysis provided for embodiments of the present invention.
[0021] Figure 4 This is a flowchart illustrating the encryption and encapsulation process provided in an embodiment of the present invention.
[0022] Figure 5 The flowchart for configuration verification and activation provided in the embodiments of the present invention. Detailed Implementation
[0023] To make the objectives, technical solutions, and advantages of the present invention clearer, the embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.
[0024] Example 1 Reference Figure 1 As shown, this embodiment of the invention provides an eSIM configuration optimization method based on an industrial cloud platform service, including the following steps: Step S1: Device registration and information collection.
[0025] The industrial cloud platform receives registration requests from industrial terminal devices. These requests include the device identification information and eSIM chip identification information of the industrial terminal devices.
[0026] The equipment identification information includes the equipment unique code, equipment model information, and the industry type to which the equipment belongs. The equipment unique code is used to uniquely identify the equipment in the industrial cloud platform. Device model information is used to determine the device's hardware configuration and communication capabilities; The industry type of the equipment is used to determine the application area of the equipment, such as manufacturing, energy, and logistics.
[0027] eSIM chip identification information includes the eSIM chip unique identifier and eSIM chip capacity information. The eSIM chip unique identifier, also known as EID, is used to uniquely identify the eSIM chip. eSIM chip capacity information is used to determine the number of configuration files that the eSIM chip can store.
[0028] The industrial cloud platform establishes device information files based on the acquired device identification information and eSIM chip identification information and stores them in the cloud database. The device information files adopt a structured storage method to facilitate subsequent query and management.
[0029] Step S2: Configuration requirements analysis.
[0030] Reference Figure 3 As shown, based on the equipment information file, the application scenario parameters and network environment parameters of the industrial terminal equipment are obtained.
[0031] Application scenario parameters include data transmission frequency, data volume per transmission, and real-time requirement level. Data transmission frequency indicates the number of times the device needs to transmit data per unit time. Single transmission data volume refers to the amount of data transmitted by the device each time; The real-time requirement level indicates the device's sensitivity to data transmission latency, and is divided into three levels: high, medium, and low.
[0032] Network environment parameters include network coverage type and signal strength level. Network coverage type indicates the type of network available in the area where the device is located, such as 4G network or 5G network. Signal strength level indicates the network signal strength in the area where the device is located, and is divided into three levels: strong, medium, and weak.
[0033] The configuration requirements analysis module normalizes application scenario parameters and network environment parameters, mapping each parameter value to a range of 0 to 1. The normalization formula is as follows: ; in, This represents the normalized parameter value. This represents the original parameter value. This indicates the preset lower limit value of the parameter. This indicates the preset upper limit value of the parameter.
[0034] The configuration requirement vector is obtained by multiplying each normalized parameter value by its corresponding weighting coefficient and then summing the results. The formula for calculating the configuration requirement vector is as follows: ; in, This represents the configuration requirement vector. Indicates the total number of parameters. Indicates the first The weighting coefficients of each parameter. Indicates the first Normalization of each parameter.
[0035] The weighting coefficients for each parameter are set as follows: the weighting coefficient for data transmission frequency is 0.25, the weighting coefficient for single data transmission volume is 0.20, the weighting coefficient for real-time requirement level is 0.30, the weighting coefficient for network coverage type is 0.15, and the weighting coefficient for signal strength level is 0.10.
[0036] Step S3: Configuration file generation step.
[0037] Based on the configuration requirement vector, the target operator configuration template is matched from the preset operator configuration template library. The operator configuration template library stores configuration templates from multiple operators, and each configuration template corresponds to a feature vector.
[0038] The matching degree between the configuration requirement vector and each operator configuration template in the operator configuration template library is calculated. The matching degree is calculated using the cosine similarity method, and the calculation formula is as follows: ; in, This represents the matching degree value. This represents the configuration requirement vector. This represents the feature vector of the operator configuration template. The modulus of the configuration requirement vector is represented. This represents the modulus of the feature vector of the operator configuration template.
[0039] The operator configuration template with the highest matching degree is selected as the target operator configuration template. Combined with application scenario parameters, the parameters of the target operator configuration template are customized to generate an eSIM configuration file.
[0040] Step S4: Configuration optimization process.
[0041] The eSIM configuration file is optimized, including network access priority configuration, data transmission channel configuration, and security authentication parameter configuration.
[0042] The specific method for configuring network access priority is as follows: determine the list of available networks based on network environment parameters; The networks in the available network list are comprehensively evaluated based on network stability score and network transmission rate score. Network access priority is set according to the comprehensive score from high to low. The formula for calculating the comprehensive score is as follows: ; in, This indicates the overall score. This represents the network stability score. This indicates a network transmission rate score. This represents the weighting coefficient for the network stability score, with a value of 0.6. This represents the weighting coefficient for the network transmission rate score, with a value of 0.4.
[0043] The specific method for configuring the data transmission channel is as follows: Based on the real-time requirement level in the application scenario parameters, the data transmission channel is divided into a real-time transmission channel and a batch transmission channel. When the real-time requirement level is high, the data is transmitted through the real-time transmission channel. When the real-time requirement level is medium or low, data is transmitted through the bulk transmission channel. Low-latency transmission parameters are configured for the real-time transmission channel, including shorter packet sending intervals and higher transmission priority. Configure high-throughput transmission parameters for bulk transmission channels, including larger packet sizes and data aggregation transmission strategies.
[0044] The specific method for configuring security authentication parameters is as follows: Based on the industry type of the device and the sensitivity of the data, configure the corresponding security authentication parameters, including authentication algorithm type, key length and authentication period.
[0045] After completing the above optimization process, the optimized eSIM configuration file is generated.
[0046] Step S5: Secure transmission and distribution steps.
[0047] Reference Figure 4 As shown, the optimized eSIM configuration file is encrypted and encapsulated.
[0048] First, the optimized eSIM configuration file is encrypted using a symmetric encryption algorithm to generate the first encrypted file. The symmetric encryption algorithm used is AES-256, and the key length is 256 bits.
[0049] Then, an asymmetric encryption algorithm is used to perform a second layer of encryption on the symmetric key of the first encrypted file to generate key ciphertext. The asymmetric encryption algorithm used is the RSA-2048 algorithm, and the public key of the industrial terminal equipment is used for encryption.
[0050] The first encrypted file and the key ciphertext are encapsulated into an encrypted data packet. The encrypted data packet also contains a data integrity check code, which is used by the receiving end to verify the integrity of the data.
[0051] Encrypted data packets are sent to the eSIM chip of industrial terminal equipment through a secure transmission channel. The secure transmission channel uses the TLS 1.3 protocol for transport layer encryption to ensure the security of the transmission process.
[0052] Step S6: Configuration verification and activation steps.
[0053] Reference Figure 5 As shown, after receiving the encrypted data packet, the eSIM chip of the industrial terminal device first uses the device's private key to decrypt the key ciphertext and obtain the symmetric key. Then, the first encrypted file is decrypted using a symmetric key to obtain the optimized eSIM configuration file.
[0054] Before performing the configuration write operation, the eSIM chip performs an integrity check on the optimized eSIM configuration file. The integrity check uses the SHA-256 hash algorithm to calculate the hash value of the configuration file and compare it with the data integrity check code in the encrypted data packet.
[0055] If the integrity verification passes, the configuration write operation is performed, writing the optimized eSIM configuration file to the secure storage area of the eSIM chip. After the configuration is written, the eSIM chip performs a configuration activation operation to make the new configuration effective.
[0056] If the integrity check fails, it indicates that the configuration file may have been tampered with or damaged during transmission. The eSIM chip sends a configuration retransmission request to the industrial cloud platform, requesting the industrial cloud platform to reissue the configuration file.
[0057] Once the configuration and activation are complete, the industrial terminal device returns a configuration completion confirmation message to the industrial cloud platform. The configuration completion confirmation message includes the configuration activation timestamp and the configuration version number.
[0058] Example 2 Based on Embodiment 1, this embodiment of the invention also provides a configuration status monitoring step.
[0059] The industrial cloud platform periodically receives eSIM configuration and operation status information reported by industrial terminal devices. The reporting cycle can be configured according to actual needs, with the default being once every 24 hours.
[0060] eSIM configuration status information includes the current operator information, network connection status, data transmission success rate, and average transmission latency.
[0061] The system determines whether the current configuration meets the operational requirements based on the eSIM configuration status information. The criteria for this determination include whether the data transmission success rate is higher than the preset success rate threshold. Is the average transmission delay lower than the preset delay threshold? The preset success rate threshold is set to 95%. The preset delay threshold is set according to the real-time requirement level: 100 milliseconds for high level, 500 milliseconds for medium level, and 2000 milliseconds for low level.
[0062] If the current configuration meets the operational requirements, then continue using the current configuration.
[0063] If the current configuration does not meet the operational requirements, the configuration update process is triggered. The configuration update process re-executes steps S2 to S6, and regenerates and distributes the optimized eSIM configuration file according to the current network environment and application requirements.
[0064] Example 3 Reference Figure 2 As shown, the system architecture provided in this embodiment of the invention includes two parts: an industrial cloud platform and industrial terminal equipment.
[0065] The industrial cloud platform includes an equipment management module, a configuration requirement analysis module, a configuration generation module, a configuration optimization module, a secure transmission module, and a status monitoring module.
[0066] The device management module is responsible for receiving registration requests from industrial terminal devices and establishing and maintaining device information files.
[0067] The configuration requirements analysis module is responsible for analyzing the application scenario parameters and network environment parameters of industrial terminal equipment and generating configuration requirements vectors.
[0068] The configuration generation module is responsible for matching the target operator's configuration template with the configuration requirement vector and generating the eSIM configuration file.
[0069] The configuration optimization module is responsible for optimizing the eSIM configuration file and generating an optimized eSIM configuration file.
[0070] The secure transmission module is responsible for encrypting and securely transmitting the optimized eSIM configuration file.
[0071] The status monitoring module is responsible for receiving and analyzing the configuration and operation status information reported by industrial terminal devices, and determining whether a configuration update process needs to be triggered.
[0072] Industrial terminal equipment includes a communication module and an eSIM chip. The communication module is responsible for data interaction with the industrial cloud platform. The eSIM chip is responsible for receiving, storing, and executing the eSIM profile.
[0073] The above are merely specific embodiments of the present invention and do not limit the patent scope of the present invention. Any equivalent modifications made based on the content of the present invention's specification and drawings, whether directly or indirectly applied to related technical fields, are similarly included within the patent protection scope of the present invention.
Claims
1. A method for optimizing eSIM configuration based on industrial cloud platform services, characterized in that, Includes the following steps: S1. Device registration and information collection steps: The industrial cloud platform receives the registration request sent by the industrial terminal device, obtains the device identification information and eSIM chip identification information of the industrial terminal device, establishes a device information file and stores it in the cloud database; S2. Configuration requirement analysis step: Based on the device information file, obtain the application scenario parameters and network environment parameters of the industrial terminal device, and generate a configuration requirement vector through the configuration requirement analysis module; S3. Configuration file generation steps: Based on the configuration requirement vector, match the target operator configuration template from the preset operator configuration template library, and generate an eSIM configuration file in combination with the application scenario parameters; S4. Configuration optimization process: Optimize the eSIM configuration file, including network access priority configuration, data transmission channel configuration and security authentication parameter configuration, to generate an optimized eSIM configuration file; S5. Secure transmission and distribution steps: The optimized eSIM configuration file is encrypted and encapsulated, and then distributed to the eSIM chip of the industrial terminal device through a secure transmission channel. S6. Configuration verification and activation steps: The eSIM chip of the industrial terminal device receives and decrypts the optimized eSIM configuration file, performs a configuration writing operation, and returns a configuration completion confirmation message to the industrial cloud platform after completing the configuration activation.
2. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S1, the device identification information includes a unique device code, device model information, and the industry type to which the device belongs; the eSIM chip identification information includes a unique eSIM chip identifier and eSIM chip capacity information.
3. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S2, the application scenario parameters include data transmission frequency, single data transmission volume, and real-time requirement level; the network environment parameters include network coverage type and signal strength level.
4. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S2, the method for generating the configuration requirement vector is as follows: The application scenario parameters and network environment parameters are normalized respectively to obtain normalized parameter values; The configuration requirement vector is obtained by multiplying each normalized parameter value by its corresponding weight coefficient and then summing the results. Among them, the weight coefficient for data transmission frequency is 0.25, the weight coefficient for single data transmission volume is 0.20, the weight coefficient for real-time requirement level is 0.30, the weight coefficient for network coverage type is 0.15, and the weight coefficient for signal strength level is 0.
10.
5. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S3, the method for matching the target operator configuration template from the preset operator configuration template library is as follows: Calculate the matching degree value between the configuration requirement vector and each operator configuration template in the operator configuration template library; Select the carrier configuration template with the highest matching degree as the target carrier configuration template.
6. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S4, the method for configuring network access priority is as follows: Determine the list of available networks based on the network environment parameters; The networks in the available network list are comprehensively evaluated based on network stability score and network transmission rate score. The network access priority sequence is set according to the comprehensive score from high to low.
7. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S4, the method for configuring the data transmission channel is as follows: Based on the real-time requirement level in the application scenario parameters, the data transmission channel is divided into a real-time transmission channel and a batch transmission channel. Configure low-latency transmission parameters for the real-time transmission channel and high-throughput transmission parameters for the batch transmission channel.
8. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S5, the method for encrypting and encapsulating the optimized eSIM configuration file is as follows: The optimized eSIM configuration file is encrypted using a symmetric encryption algorithm to generate a first encrypted file. A second layer of encryption is performed on the symmetric key of the first encrypted file using an asymmetric encryption algorithm to generate key ciphertext. The first encrypted file and the key ciphertext are encapsulated into an encrypted data packet.
9. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: In step S6, the configuration verification and activation step further includes: Before performing the configuration writing operation, the eSIM chip of the industrial terminal device performs an integrity check on the optimized eSIM configuration file. If the integrity verification passes, the configuration write operation will be performed. If the integrity check fails, a configuration retransmission request is sent to the industrial cloud platform.
10. The eSIM configuration optimization method based on industrial cloud platform services according to claim 1, characterized in that: The method also includes a configuration status monitoring step: The industrial cloud platform periodically receives eSIM configuration and operation status information reported by the industrial terminal equipment; Determine whether the current configuration meets the operational requirements based on the eSIM configuration status information; If the current configuration does not meet the operational requirements, the configuration update process is triggered, and steps S2 to S6 are re-executed.