User identity card registration method, communication service response method and device

Abstract

The application discloses a user identity identification card registration method and a communication service response method and device. The method comprises the following steps: obtaining the card identification and the communication identification of the unregistered user identity identification card, and the card identification corresponding writing card data and the communication identification corresponding communication authentication data; storing the writing card data into the unregistered user identity identification card to obtain an initial user identity identification card; obtaining the public network communication authentication data and the special network communication authentication data generated based on the communication authentication data, and sending a registration request to a business operation support system; and obtaining a target user identity identification card when receiving the feedback information of the business operation support system that activates the initial user identity identification card in the preset public network and the preset special network according to the registration request. According to the embodiment of the application, the authentication efficiency of the opened user identity identification card can be improved, the data interaction between multiple data systems can be avoided, and the security of the card data of the user identity identification card can be ensured.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of communication, and particularly relates to a user identity identification card registration method and a communication service response method and device. BACKGROUND

[0002] In recent years, many underground coal mine enterprises have built underground private networks to realize underground integrated dispatching, voice communication and online of private network users and public network users, so as to complete the business function of one card one number through the user identity identification card.

[0003] In the existing scheme, on the one hand, by replacing the specific user identity identification card (Subscriber Identity Module, SIM) of the private network, the terminal equipment customized for the private network is used to realize the communication of the public network user when switching from the public network coverage range to the private network coverage range, but this way needs to interrupt the network in actual operation, and is not suitable for the use scenario of frequent switching between the public network and the private network. On the other hand, the user information can be pre-stored through the first network element of the private network and the second network element of the public network, so as to complete the communication between the public network and the private network without replacing the SIM card, but the pre-stored user information and the network access process and the interconnection mode of the public network and the private network have not been solved, so as to cause the complicated process and long time consumption in the actual user identity identification card opening authentication process. SUMMARY

[0004] The application embodiment provides a user identity identification card registration method and a communication service response method and device, which can improve the authentication efficiency of opening the user identity identification card and ensure the security of the card data of the user identity identification card.

[0005] In a first aspect, the application embodiment provides a user identity identification card registration method applied to a customer relationship management system, and the method comprises the following steps.

[0006] Obtaining the card identifier and the communication identifier of the unregistered user identity identification card, and obtaining the card writing data corresponding to the card identifier and the communication authentication data corresponding to the communication identifier;

[0007] Storing the card writing data into the unregistered user identity identification card to obtain an initial user identity identification card;

[0008] Obtaining the public network communication authentication data and the private network communication authentication data generated based on the communication authentication data;

[0009] The registration request is sent to the business operation support system to obtain a target user identity card, wherein the registration request comprises public network communication authentication data and private network communication authentication data, and the registration request is used to activate the initial user identity card in the preset public network and the preset private network respectively according to the registration request.

[0010] In some implementations of the first aspect, after obtaining the card identifier and the communication identifier of the unregistered user identity card, the method further comprises:

[0011] Obtaining service information corresponding to the communication identifier;

[0012] Establishing and saving an association between the service information and the communication identifier.

[0013] In some implementations of the first aspect, the user identity card comprises a preset public network key and a preset private network key; and the public network communication authentication data and the private network communication authentication data generated based on the communication authentication data comprise:

[0014] The authentication data is encrypted by a preset encryption algorithm and the preset public network key to obtain the public network communication authentication data;

[0015] The authentication data is encrypted by a preset encryption algorithm and the preset private network key to obtain the private network communication authentication data.

[0016] In the second aspect, the embodiments of the present application provide a communication service response method applied to a core network, and the method comprises:

[0017] Receiving a communication request of a calling user, wherein the communication request comprises a communication identifier of a called user, the communication identifier is associated with a user identity card of the called user, and the user identity card is obtained according to the first aspect or some implementations of the first aspect;

[0018] Paging the communication identifier in a first network area according to a first network area where the calling user is located;

[0019] In a case where the called user corresponding to the communication identifier is not paged in the first network area, the communication request is routed from a first communication access device to a second communication access device, so that the second communication access device pages the called user corresponding to the communication identifier in a second network area.

[0020] In some implementations of the second aspect, in a case where the called user corresponding to the communication identifier is not paged in the first network area, the communication request is routed from the first communication access device to the second communication access device, comprising:

[0021] In a case where the called user corresponding to the communication identifier is not paged in the first network area, determining location information of the called user according to the communication identifier;

[0022] routing the communication request from the first communication access device to the second communication access device corresponding to the location information.

[0023] In some implementations of the second aspect, when the network category of the first network area is a preset public network, the network category of the second network area is a preset private network.

[0024] When the network category of the first network area is a preset private network, the network category of the second network area is a preset public network.

[0025] In some implementations of the second aspect, when the first network area pages the called user corresponding to the communication identifier, the communication identifier of the called user is sent to the first communication access device, so that the first communication access device pages the called user corresponding to the communication identifier in the first network area.

[0026] In a third aspect, an embodiment of the present application provides a user identity recognition card registration device applied to a customer relationship management system, and the device comprises:

[0027] An acquisition module is configured to acquire a card identifier and a communication identifier of an unregistered user identity recognition card, and acquire writing card data corresponding to the card identifier and communication authentication data corresponding to the communication identifier.

[0028] A processing module is configured to store the writing card data into the unregistered user identity recognition card to obtain an initial user identity recognition card.

[0029] The acquisition module is further configured to acquire public network communication authentication data and private network communication authentication data generated based on the communication authentication data.

[0030] A registration request module is configured to send a registration request to a business operation support system to obtain a target user identity recognition card, wherein the registration request comprises the public network communication authentication data and the private network communication authentication data, and the registration request is used for the business operation support system to activate the initial user identity recognition card in a preset public network and a preset private network respectively according to the registration request.

[0031] In a fourth aspect, an embodiment of the present application provides a communication service response device applied to a core network, and the device comprises:

[0032] A receiving module is configured to receive a communication request of a calling user, wherein the communication request comprises a communication identifier of a called user, the communication identifier is associated with a user identity recognition card of the called user, and the user identity recognition card is obtained according to the first aspect or some implementations of the first aspect.

[0033] A paging module is configured to page the communication identifier in a first network area according to a first network area where the calling user is located.

[0034] The paging module is further configured to, in a case that the called user corresponding to the communication identifier is not paged in the first network area, route the communication request from the first communication access device to the second communication access device, so that the second communication access device pages the called user corresponding to the communication identifier in the second network area.

[0035] In a fifth aspect, an electronic device is provided, and the device includes a processor and a memory storing computer program instructions.

[0036] The processor, when executing the computer program instructions, implements the user identity card registration method of any one of the first aspect or the communication service response method of any one of the second aspect.

[0037] In a sixth aspect, a computer readable storage medium is provided, and the computer readable storage medium stores computer program instructions. When the computer program instructions are executed by a processor, the user identity card registration method of any one of the first aspect or the communication service response method of any one of the second aspect is implemented.

[0038] In a seventh aspect, a computer program product is provided. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device can execute the user identity card registration method of any one of the first aspect or the communication service response method of any one of the second aspect.

[0039] The user identity card registration method and the communication service response method and device provided in the embodiments of the present application can obtain the card identifier and the communication identifier of the unregistered user identity card and the write card data corresponding to the card identifier and the communication authentication data corresponding to the communication identifier through the customer relationship management system, store the write card data into the unregistered user identity card to obtain an initial user identity card, send a registration request including the public network communication authentication data and the private network communication authentication data to the business operation support system, and activate the initial user identity card in the preset public network and the preset private network to obtain a target user identity card. Since the initial user identity card can be activated in the preset public network and the preset private network synchronously to obtain the target user identity card, the authentication efficiency of the user identity card can be effectively improved. In addition, the communication authentication data and the like involved in the process from obtaining to activating the user identity card are all in the customer relationship management system on the public network side, so that the unified management of the whole life cycle of the user identity card is realized, the data interaction between multiple data systems is avoided, and the security of the card data of the user identity card can be ensured. BRIEF DESCRIPTION OF DRAWINGS

[0040] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed to be used in the embodiments of the present application will be briefly introduced as follows, and other drawings can also be obtained by those of ordinary skill in the art without any creative effort on the premise of not paying any creative effort.

[0041] Figure 1 is a module schematic diagram of a one-card one-number well surface and underground interconnection and intercommunication system provided by the embodiments of the present application;

[0042] Figure 2 is a flowchart of a user identity identification card registration method provided by the embodiments of the present application;

[0043] Figure 3 is a flowchart of a communication service response method provided by the embodiments of the present application;

[0044] Figure 4 is a flowchart of a specific implementation of step S203;

[0045] Figure 5 is a scene schematic diagram of well surface public network calling underground private network communication provided by the embodiments of the present application;

[0046] Figure 6 is a scene schematic diagram of underground private network calling well surface public network communication provided by the embodiments of the present application;

[0047] Figure 7 is a scene schematic diagram of well surface public network communication provided by the embodiments of the present application;

[0048] Figure 8 is a scene schematic diagram of underground private network communication provided by the embodiments of the present application;

[0049] Figure 9 is a structure schematic diagram of a user identity identification card registration device provided by the embodiments of the present application;

[0050] Figure 10 is a structure schematic diagram of a communication service response device provided by the embodiments of the present application;

[0051] Figure 11 is a structure schematic diagram of an electronic device provided by the embodiments of the present application. DETAILED DESCRIPTION

[0052] The features and exemplary embodiments of the various aspects of the present application will be described in detail below with reference to the drawings. For the purpose of clarity, the description is divided into the following sections: technical field, brief summary, detailed description, and claims. The detailed description is further divided into subsections for the purpose of clarity and readability. The following sections are provided for illustrative purposes only and the order of the sections is not meant to limit the scope of the application. The following detailed description is presented primarily for the purposes of enabling others to make and use the application.

[0053] It is to be understood that the phrases such as first and second, and the like, used herein are merely used to distinguish one entity or action from another, and do not necessarily require or imply any actual such relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by "comprises... a" does not, without more constraints, exclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.

[0054] In recent years, as a traditional industry, coal mines have relatively lagged behind in their dependence on communications. Many enterprises, such as underground coal mines, have built their own underground private networks. The main role of the private network is to achieve integrated dispatching underground, and to achieve voice communication and Internet access between private network users and public network users of operators, as well as to meet the needs of users for interworking with public networks, so as to achieve the business function of being able to make calls on the surface and underground with one card.

[0055] One-card one-number interconnection between the surface and underground refers to the user identity card, which needs to be registered by the user in the mobile network first, and then the user's communication authentication data is queried according to the user's mobile phone number, and is encrypted by the specific key of the underground private network. The encrypted communication authentication is returned to the underground private network registration, so as to ensure that the core communication authentication data must be stored and transmitted in encrypted form, and to achieve the registration of the user identity card on the surface and underground.

[0056] In the prior art, on the one hand, a public network user switches from a public network coverage to a private network coverage by replacing a subscriber identity module (SIM) card specific to the private network and a terminal device customized for the private network, but this method needs to interrupt the network and is complicated to operate, and is not suitable for a use scenario that needs to frequently switch between the public network and the private network. On the other hand, the communication between the public network and the private network can be completed without replacing the SIM card, but the first network element of the private network and the second network element of the public network need to store user information in advance, and the specific user information how to be stored in advance and the access flow and interconnection manner of the public network and the private network in the process of realizing the communication cannot be obtained, and a plurality of steps are needed in the actual authentication process and a long time is consumed.

[0057] The present application realizes multi-scene communication based on a one-card one-number interconnection system, as shown in Figure 1 The system includes a downhole private network system, a unified card writing component, a customer relationship management system, a pre-written card resource library, a preset card management system, and a hardware encryption machine. The downhole private network system is used to receive communication authentication data and initiate a registration request of the SIM card, and simultaneously complete the functions of downhole private network communication and automatic access of uphole-downhole interconnection and intercommunication. The unified card writing component interacts with the client and can interact with the SIM card through a card reader to complete the functions of reading information in the SIM card and writing real-time card data. The customer relationship management system (CRM) is responsible for card issuance and card replacement of users, and the user client obtains card writing related data and writes user card data and user authentication data through the card writing component. The pre-written card resource library provides management of card writing resource storage, resource calling, and usage state. The preset card management system provides management functions of various basic information such as number segment, city, and HLR, realizes generation of various card data orders such as empty card, real card, and real-time card data, and generation and management of card data, and recycling and management of data. The hardware encryption machine is used for management operations such as generation, update, and import of various keys, and provides password operation services based on various keys.

[0058] Therefore, for the one-card one-number uphole-downhole interconnection system, the card data management involved in the registration and activation of the SIM card to the communication between the public network and the private network is in the public network side data management system, realizing the unified management of the whole life cycle of the SIM card data. Thus, the data interaction between multiple systems is avoided, the data allocation link is simplified, the data transmission efficiency is effectively improved, and the security of the SIM card data is improved.

[0059] To solve the problems in the prior art and based on Figure 1The card number interconnection system shown in the figure, the embodiment of the application provides a user identity identification card registration method, a communication service response method and device. First, the user identity identification card registration method provided by the embodiment of the application is introduced.

[0060] Figure 2 The flowchart of the user identity identification card registration method provided by the embodiment of the application is shown. As shown in the figure, the method specifically includes the following steps: Figure 2

[0061] S101, obtaining the card identification and communication identification of the unregistered user identity identification card, and obtaining the card identification corresponding to the card data and the communication identification corresponding to the communication authentication data, wherein the user identity identification card includes a preset public network key and a preset private network key;

[0062] S102, storing the card data into the unregistered user identity identification card to obtain an initial user identity identification card;

[0063] S103, obtaining the public network communication authentication data and private network communication authentication data generated based on the communication authentication data;

[0064] S104, sending a registration request to the business operation support system to obtain a target user identity identification card, wherein the registration request includes the public network communication authentication data and the private network communication authentication data, and the registration request is used for the business operation support system to activate the initial user identity identification card in the preset public network and the preset private network according to the registration request.

[0065] Therefore, according to the user identity identification card registration method provided by the embodiment of the application, the card data is stored into the unregistered user identity identification card to obtain the initial user identity identification card, then the registration request including the public network communication authentication data and the private network communication authentication data is sent to the business operation support system, and the initial user identity identification card is activated in the preset public network and the preset private network to obtain the target user identity identification card, thereby realizing the card making and registration activation of the user identity identification card. Since the preset public network and the preset private network can be activated synchronously to obtain the target user identity identification card, the authentication efficiency of the user identity identification card can be effectively improved. In addition, the communication authentication data and the like involved in the process from obtaining to activating the user identity identification card are all in the customer relationship management system on the public network side, thereby realizing the unified management of the whole life cycle of the user identity identification card, avoiding the data interaction between multiple data systems, and ensuring the security of the card data of the user identity identification card.

[0066] ​In some embodiments, in S101, the SIM card imports preset public network keys and preset private network keys in the hardware encryption machine before registration, and performs encryption processing by using an encryption algorithm. The SIM card is a user identification card, the communication identifier is a mobile phone number, the user identification card includes preset public network keys and preset private network keys, and the card identifier includes an integrate circuit card identity (ICCID) and an international mobile subscriber identity (IMSI). The CRM system calls a unified card writing component to obtain an empty card serial number and card information. If the ICCID and IMSI are not all empty, it indicates that the SIM card has been written, and cannot be written repeatedly. If the ICCID and IMSI are all empty, it indicates that the SIM card is an empty card, i.e., has not been registered. For example, if the empty card serial number of the SIM card is 16 bits long, the SIM card is a 2G or 3G card; if the empty card serial number is 20 bits long, the SIM card is a 4G card.

[0067] As an example, after S101, the method can further include obtaining service information corresponding to the communication identifier and establishing and saving an association relationship between the service information and the communication identifier. The communication identifier is a user mobile phone number, and the association relationship is a user card basic information relationship. The CRM system or the BOSS system establishes a user file, a number, and a user card basic information relationship. For example, the user card basic information relationship is "SIM card data + user mobile phone number + user purchased service package".

[0068] As an example, the card writing data includes an integrate circuit card identity (ICCID), an international mobile subscriber identity (IMSI), a short message service (SMSP), a personal identification number (PIN), and a personal unlock key (PUK). The PIN includes PIN1 for protecting the security of the SIM card and PIN2 related to charging and modification of internal data of the SIM card. The PUK includes PUK1 for unlocking the SIM card locked due to incorrect PIN input and PUK2 provided by a supplier. Each PIN code corresponds to a different PUK code.

[0069] In some embodiments, in S102, the write card data obtained in S101 is stored in the unregistered user identity recognition card to obtain an initial user identity recognition card. For example, after the CRM system obtains the real-time write card data, a write card interface of a unified write card component is called to write the real-time write card data into the obtained unregistered SIM card.

[0070] In some embodiments, in S103, the preset card management system calls a hardware encryption machine interface to encrypt the authentication data according to the public network and private network keys and algorithms. After the hardware encryption machine completes the encryption of the authentication data, the result is returned to the preset card management system. The pre-write card resource library saves and marks the authentication data generated by the preset card management system, and then the CMR system obtains the authentication data from the pre-write card resource library and initiates a communication opening request to the BOSS system.

[0071] As an example, the authentication data includes an international mobile subscriber identity (IMSI), a key identifier (KI), and an OLE for process control (OPC). The public network communication authentication data is obtained by encrypting the authentication data using a preset encryption algorithm and a preset public network key, and the private network communication authentication data is obtained by encrypting the authentication data using a preset encryption algorithm and a preset private network key. For example, the preset encryption algorithm is a data encryption algorithm (DEA), and the preset public network key and the preset private network key use a triple data encryption (TDEA) block cipher, which is equivalent to applying the data encryption algorithm DEA three times for electronic codebook book (ECB) encryption processing.

[0072] In some embodiments, in S104, the registration request includes the public network communication authentication data and the private network communication authentication data generated based on the communication authentication data obtained in S103. After receiving the registration request, the business & operation support system (BOSS) activates the initial user identity recognition card in the preset public network and the preset private network, respectively.

[0073] In some embodiments, in S105, the BOSS system activates the registration interface of the preset public network and the preset private network respectively according to the registration request to complete the registration opening of the user identity identification card, obtains the authentication data obtained in S103 in real time and imports it into the home location register (HLR) to complete the activation, and obtains the target user identity identification card.

[0074] Thus, based on the user identity identification card registration method provided by the embodiments of the present application, the card making and registration activation of the public network are completed, the communication authentication data of the user identity identification card is obtained through the communication identifier, the private network system registration is realized through the private network specific key encryption and the registration activation interface, the user identity identification card can realize the automatic access conversion between the communication public network and the private network according to the location of the user, and the information interaction between multiple systems can be avoided. Moreover, the target user identity identification card can be obtained through the synchronous activation of the preset public network and the preset private network, so that the authentication efficiency of the opened user identity identification card can be effectively improved. Moreover, in the process of obtaining and activating the user identity identification card, the communication authentication data and the like are involved in the customer relationship management system on the public network side, so that the unified management of the whole life cycle of the user identity identification card is realized, the data interaction between multiple data systems is avoided, and the security of the card data of the user identity identification card can be ensured.

[0075] Figure 3 The communication service response method provided by the embodiments of the present application is applied to a core network, as shown in Figure 3 The method specifically includes the following steps:

[0076] S201, receiving a communication request of a calling user;

[0077] S202, according to a first network area where the calling user is located, paging a communication identifier in the first network area;

[0078] S203, in the case that the communication identifier corresponding to a called user is not paged in the first network area, routing the communication request from a first communication access device to a second communication access device, so that the second communication access device pages the communication identifier corresponding to the called user in a second network area.

[0079] Thus, when the calling user is in a public network environment and the called user is in a private network environment, after the calling user fails to page the called user in the public network volte and 2G retry, the home location of the called user and the private network information of the mine area to which the called user belongs are judged to perform call transfer on the current call request, and the called user is connected through the private network base station.

[0080] In some embodiments, in S201, the communication request includes a communication identifier of the called user, the communication identifier is associated with a user identity card of the called user, and the user identity card is registered by a user identity card registration method provided by the embodiments of the present application.

[0081] In some embodiments, in S202, after receiving the communication request signal, the calling area base station of the calling user forwards the core network for processing, and the communication identifier is paged in the first network area where the calling user is located, i.e., the calling area base station area.

[0082] In some embodiments, in S203, the first communication access device is a public network core device, and the second communication access device is a private network device. When the communication identifier is not paged, in order to route the communication request from the first communication access device to the second communication access device, S203 can further include the following steps: Figure 4

[0083] S2031, in the case that the communication identifier corresponding called user is not paged in the first network area, determining the location information of the called user according to the communication identifier;

[0084] S2032, routing the communication request from the first communication access device to the second communication access device corresponding to the location information.

[0085] As an example, in S2031, since the called user is in the private network area, the volte paging returns 2G retry paging after the public network paging of the called user fails, and the 2G retry paging directly returns the location area of the private network where the called user is located. Exemplarily, when the network category of the first network area is a preset public network, the network category of the second network area is a preset private network; when the network category of the first network area is a preset private network, the network category of the second network area is a preset public network.

[0086] ​As an example, in S2032, the called user paging fails, the core network system judges the called user's home location and the user's special network information to directly call transfer the current communication request, and routes the communication request from the first communication access device to the second communication access device corresponding to the location information. Among them, based on the home location of the called user's mobile phone number, the home location of the called user is determined; through the public network interconnection session border controller I-SBC device and the Internet private line, the communication request is routed to the second communication access device corresponding to the location information, such as special network IMS (IP Multimedia Subsystem) device, and the special network device receives the communication request and finds the called user. Therefore, when the calling user is in the public network environment and the called user is in the special network environment, after the calling user fails to page and retry to page the called user in the public network volte, the called user's home location and the user's special network information are judged to directly call transfer the current communication request, and the called user is connected through the special network base station.

[0087] As an example, as shown in Figure 5 , the calling user is in the public network on the well, and the called user is in the special network under the well, and the core network is used to realize the communication service response. The calling user initiates a communication request to the user in the special network under the well in the public network on the well, and the communication request includes the communication identifier of the called user, that is, the mobile phone number of the called user. The core network queries the mobile phone number of the called user, directly pages the called user in the public network through volte according to the mobile phone number, and can determine that the mobile phone number of the called user is also opened in the special network through the mobile phone number, so that call transfer can be performed after volte paging fails.

[0088] As an example, as shown in Figure 6 , the calling user is in the special network under the well, and the called user is in the public network on the well. The calling user initiates a communication request to the user in the public network on the well in the special network under the well, and the special network region base station receives the communication request signal and pages the called user in the special network region. If the paging fails, the communication request is directly forwarded to the special network IMS device, the communication request is routed from the first communication access device to the second communication access device through the special network device and the Internet private line, and the called user corresponding to the communication identifier is paged in the second network region.

[0089] Therefore, when the calling user is in the special network environment and the called user is in the public network environment, the called user is directly forwarded to the special network IMS device after the special network fails to page the called user, routed to the public network I-SBC device through the special network IMS device and the Internet private line, and the called user is connected through the public network base station.

[0090] In some embodiments, if the called user corresponding to the communication identifier is paged in the first network region, the core network sends the communication identifier of the called user to the first communication access device, so that the first communication access device pages the called user corresponding to the communication identifier in the first network region.

[0091] As an example, as shown in Figure 7 the calling user and the called user are both in the public network on the well, the calling user initiates a communication request to the called user in the public network on the well, and the calling area base station forwards the communication request signal to the core network for processing, queries the base station where the called user is located, and connects the called user through the called area base station.

[0092] Thus, based on the embodiments of the present application, when the calling user and the called user register in the public network, the registration in the private network is completed synchronously, thereby simplifying the registration steps of the public network and the private network.

[0093] As an example, as shown in Figure 8 the calling user and the called user are both in the private network on the well, the calling user sends a communication request to the called user in the private network on the well, and the core network queries the called user through the private network base station and submits the query result to the private network equipment such as the mobile switching center (MSC), and connects the called user after the called user information is queried. Thus, when the calling user and the called user are both in the private network environment, the SIM card used by the user does not need to use a specific SIM card in the private network to realize independent communication in the private network, thereby saving communication time.

[0094] Based on the user identity recognition card in the public network and the private network synchronous registration and the multi-scene communication method after registration provided by the embodiments of the present application, for the SIM card registration method, the preset public network key and the preset private network key are imported in advance in the hardware encryption machine before the SIM card is registered, after the real-time card data writing is completed, the encryption interface of the hardware encryption machine is called through the preset card management system, the communication authentication data of the public network side and the private network authentication data are generated synchronously, the registration conditions of the public network system and the private network system are met, and the synchronous activation opening of the SIM card is completed by directly calling the activation registration interface of the public network system and the activation registration interface of the private network system through the CRM. In addition, for the communication service response method, after the SIM card completes the synchronous registration of the public network system and the private network system, the voice call transfer is realized by the Internet private line and the public I-SBC (Internet Session Border Controller) equipment through the interface of the IMS equipment of the private network system.

[0095] Thus, the embodiments of the present application provide a safer and more efficient solution for the key management, card data management involved in the SIM registration process, and the acquisition and transmission of data in the registration process of the public network system and the private network system. In the communication process of the public network system and the private network system, the actual situation of the business can be combined to meet the real-time communication in multiple scenarios.

[0096] It should be noted that the application scenarios described in the above embodiments of the present application are for more clearly illustrating the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. It can be known by those skilled in the art that, with the appearance of new application scenarios, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0097] Based on the same inventive concept, the present application provides a user identity identification card registration device 900 corresponding to the above-mentioned user identity identification card registration method, which will be described in detail in combination with Figure 9

[0098] Figure 9 is a structural schematic diagram of a user identity identification card registration device provided by the embodiments of the present application, as Figure 9 shown, the user identity identification card registration device 900 can include:

[0099] The acquisition module 910 is configured to acquire the card identifier and the communication identifier of the unregistered user identity identification card, and acquire the card writing data corresponding to the card identifier and the communication authentication data corresponding to the communication identifier.

[0100] The processing module 920 is configured to store the card writing data into the unregistered user identity identification card to obtain an initial user identity identification card.

[0101] The acquisition module 910 is further configured to acquire public network communication authentication data and private network communication authentication data generated based on the communication authentication data.

[0102] The registration request module 930 is configured to send a registration request to a business operation support system, wherein the registration request includes the public network communication authentication data and the private network communication authentication data, and the registration request is used for the business operation support system to activate the initial user identity identification card in the preset public network and the preset private network according to the registration request. In the case that the feedback information of the business operation support system activating the initial user identity identification card in the preset public network and the preset private network according to the registration request is received, a target user identity identification card is obtained.

[0103] ​Thus, the user identity recognition card registration device provided by the embodiment of the present application stores the card data into the unregistered user identity recognition card to obtain an initial user identity recognition card, and then sends a registration request including the public network communication authentication data and the private network communication authentication data to the business operation support system, and activates the initial user identity recognition card in the preset public network and the preset private network respectively to obtain a target user identity recognition card. Since the target user identity recognition card can be activated synchronously in the preset public network and the preset private network, the authentication efficiency of the user identity recognition card can be effectively improved. In addition, the communication authentication data and the like involved in the process from obtaining to activating the user identity recognition card are all in the customer relationship management system of the public network side, so that the unified management of the whole life cycle of the user identity recognition card is realized, the data interaction between multiple data systems is avoided, and the security of the card data of the user identity recognition card can be ensured.

[0104] In some embodiments, in order to realize the registration of the user identity recognition card, the user identity recognition card registration device 900 can further include the following sub-modules:

[0105] The obtaining sub-module is configured to obtain the service information corresponding to the communication identifier.

[0106] The establishing sub-module is configured to establish and save the association relationship between the service information and the communication identifier.

[0107] In some embodiments, the user identity recognition card includes a preset public network key and a preset private network key, and in order to obtain the public network communication authentication data and the private network communication authentication data generated based on the communication authentication data, the obtaining module 910 can include the following units:

[0108] The encryption processing unit is configured to perform encryption processing on the authentication data by using the preset encryption algorithm and the preset public network key to obtain the public network communication authentication data, and perform encryption processing on the authentication data by using the preset encryption algorithm and the preset private network key to obtain the private network communication authentication data.

[0109] Based on the same inventive concept, the present application also provides a communication service response device 1000 corresponding to the above-mentioned communication service response method, which will be described in detail in combination with Figure 10 .

[0110] Figure 10 is a structural schematic diagram of a communication service response device provided by the embodiment of the present application, as Figure 10 shown, the communication service response device 1000 can include:

[0111] The receiving module 1010 is configured to receive a communication request of a calling user, wherein the communication request comprises a communication identifier of a called user, and the communication identifier is associated with a user identity card of the called user, and the user identity card is obtained according to the user identity card registration method provided in the embodiments of the present application.

[0112] The paging module 1020 is configured to page the communication identifier in a first network area where the calling user is located, and further configured to, in the case that the called user corresponding to the communication identifier is not paged in the first network area, route the communication request from a first communication access device to a second communication access device, so that the second communication access device pages the called user corresponding to the communication identifier in a second network area.

[0113] Therefore, based on the communication service response apparatus provided in the embodiments of the present application, when the calling user is in a public network environment and the called user is in a private network environment, and the calling user fails in paging the called user in the public network (volte) and in 2G retry paging, the called user's home and the mine area private network information to which the called user belongs are determined to transfer the current call, and the called user is connected through a private network base station.

[0114] In some embodiments, in order to route the communication request from the first communication access device to the second communication access device, the paging module 1020 can further include the following units:

[0115] The determining unit is configured to, in the case that the called user corresponding to the communication identifier is not paged in the first network area, determine the location information of the called user according to the communication identifier, and when the network type of the first network area is a preset public network, the network type of the second network area is a preset private network, and when the network type of the first network area is a preset private network, the network type of the second network area is a preset public network.

[0116] The routing unit is configured to route the communication request from the first communication access device to the second communication access device corresponding to the location information.

[0117] The sending paging unit is configured to, in the case that the called user corresponding to the communication identifier is paged in the first network area, send the communication identifier of the called user to the first communication access device, so that the first communication access device pages the called user corresponding to the communication identifier in the first network area.

[0118] Figure 11 A hardware structure schematic diagram of an electronic device provided in the embodiments of the present application is shown.

[0119] As shown in Figure 11 the electronic device 1100 can include a processor 1101 and a memory 1102 storing computer program instructions.

[0120] In particular, the processor 1101 can include a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or can be configured to implement one or more integrated circuits that embody the embodiments of the present application.

[0121] The memory 1102 can include a mass storage for data or instructions. By way of example and not limitation, the memory 1102 can include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a Universal Serial Bus (USB) drive or a combination of two or more of these. The memory 1102 can include removable or non-removable (or fixed) media, where appropriate. The memory 1102 can be internal or external to the integrated gateway disaster recovery device, as appropriate. In particular embodiments, the memory 1102 is non-volatile, solid-state memory.

[0122] The memory 1102 can include read-only memory (ROM), random-access memory (RAM), a magnetic disk storage medium, an optical storage medium, a flash memory device, electrical, optical, or other physical / tangible memory storage device. Thus, in general, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software that, when executed (by one or more processors), is operable to perform operations as described with reference to the user identity identification card registration method or the communication service response method according to the first aspect or the second aspect of the present application.

[0123] The processor 1101 implements any of the user identity identification card registration method or the communication service response method in the above embodiments by reading and executing computer program instructions stored in the memory 1102.

[0124] In one example, the electronic device 1100 can further include a communication interface 1103 and a bus 1104. As shown, the processor 1101, the memory 1102, and the communication interface 1103 are connected through the bus 1104 and complete communication among each other. Figure 11

[0125] The communication interface 1103 is mainly used to realize the communication between the modules, devices, units and / or equipment in the embodiments of the present application.

[0126] ​Bus 1104 includes hardware, software, or both, to couple components of electronic device 1100 to each other and to couple electronic device 1100 to other systems or devices. While bus 1104 is shown for the sake of clarity as a single bus, bus 1104 can include one or more buses operating together to form a bus system. Bus 1104 can include a system bus or any of various types of bus structures, including a memory bus or memory channel, a peripheral bus or peripheral component interconnect (PCI) bus, a serial bus, a parallel bus, and so forth. Bus 1104 can include any of various types of electrical, optical, wireless, or other connection mechanisms, including a serial peripheral interface (SPI), an inter-integrated circuit (I2C) bus, a mobile industry processor interface (MIPI) bus, an audio serial bus (ASB), an on-chip peripheral (OCF) bus, a personal computer memory card international association (PCMCIA) bus, a high-definition audio (HD-Audio) bus, and so forth. In some embodiments, bus 1104 can include one or more buses according to the Advanced Graphics Port (AGP) or other graphics bus, Enhanced Industry Standard Architecture (EISA) bus, Front Side Bus (FSB), HyperTransport (HT) interconnect, Industry Standard Architecture (ISA) bus, InfiniBand interconnect, Low Pin Count (LPC) bus, memory bus, Micro Channel Architecture (MCA) bus, Peripheral Component Interconnect (PCI) bus, PCI-Express (PCI-X) bus, Serial Advanced Technology Attachment (SATA) bus, Video Electronics Standards Association Local (VLB) bus, or any other suitable bus or interconnect, or a combination of two or more of these. Where appropriate, bus 1104 can include one or more bus structures according to various embodiments of the present application. Although this application describes and illustrates a particular bus, this application contemplates any suitable bus or interconnect.

[0127] Electronic device 1100 can implement the user identity card registration method and apparatus described in conjunction with Figure 2 and Figure 9 the communication service response method and apparatus described in conjunction with Figure 3 and Figure 10 .

[0128] In addition, in conjunction with the user identity card registration method or the communication service response method described in the above embodiments, an embodiment of the present application can provide a computer storage medium to implement. The computer storage medium has computer program instructions stored thereon; the computer program instructions are executed by a processor to implement any one of the user identity card registration methods or the communication service response methods described in the above embodiments.

[0129] It needs to be clear that the present application is not limited to the specific configurations and processes described above and shown in the drawings. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between steps, after understanding the spirit of the present application.

[0130] The functions noted in the description of the structural block diagrams above can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application specific integrated circuits (ASICs), appropriate firmware, plug-ins, functional cards, and the like. When implemented in software, the elements of the present application are program or code segments that are used to perform the required tasks. The program or code segments can be stored in a machine-readable medium or transmitted through a data signal carried in a carrier wave over a transmission medium or communication link. A "machine-readable medium" includes any medium that can store or transport information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, radio frequency (RF) links, and the like. The code segments can be downloaded via computer networks such as the Internet, intranets, and the like.

[0131] It is also important to note that the examples described herein can be implemented in a variety of systems, including and not limited to a digital electronic circuit, an analog electronic circuit, a computer hardware, firmware, software, or in combinations of them. The example described herein can be implemented as one or more computer programs running on a computer or other programmable data processing devices, a computer program, a computer program product, a computer readable storage medium for storing a computer program, or as one or more computer programs running on a computer or other programmable data processing devices, programmable logic for use with a computer system, an apparatus or a system, a computer program product, a computer readable storage medium for storing a computer program, or as one or more computer programs running on a computer or other programmable data processing devices, a programmable logic for use with a computer system, an apparatus or a system.

[0132] The computer program instructions can also be loaded onto a computer or other programmable data processing devices to cause a series of operational steps to be performed on the computer or other programmable data processing devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable data processing devices provide steps for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0133] The above merely describes a specific implementation of the present application. Those skilled in the art can clearly understand the specific working processes of the system, modules and units described above for the convenience and brevity of description, and can refer to the corresponding processes in the foregoing method embodiments, which will not be described herein again. It should be understood that the protection scope of the present application is not limited to this, and any person skilled in the art can easily think of various equivalent modifications or replacements within the technical range disclosed by the present application, and these modifications or replacements should be covered within the protection scope of the present application.

Claims

1. A method for registering a user identification card, characterized in that, The method is applied to a customer relationship management system, which is a component of a one-card-one-number interconnection system between the surface and underground operations. The interconnection system also includes an underground private network system, a unified card writing component, a pre-written card resource library, a pre-defined card management system, and a hardware encryption machine. The method includes: Obtain the card identifier and communication identifier of an unregistered user identification card, and obtain the card writing data corresponding to the card identifier and the communication authentication data corresponding to the communication identifier; The unified card writing component stores the card writing data into the unregistered user identity card to obtain the initial user identity card. The system acquires public network communication authentication data and private network communication authentication data generated based on the communication authentication data. The public network communication authentication data and the private network communication authentication data are generated by the preset card management system calling the hardware encryption machine. After the hardware encryption machine completes the encryption of the authentication data, it sends the result back to the preset card management system. The pre-written card resource library stores the public network communication authentication data and the private network communication authentication data in the library and marks them. The customer relationship management system obtains the public network communication authentication data and the private network communication authentication data from the pre-written card resource library. The system sends a registration request to the business operation support system through the underground private network system to obtain the target user identification card. The registration request includes public network communication authentication data and private network communication authentication data. The registration request is used by the business operation support system to activate the initial user identification card on the preset public network and the preset private network respectively according to the registration request.

2. The method according to claim 1, characterized in that, The method further includes: After obtaining the card identifier and communication identifier of the unregistered user identification card, the method further includes: Obtain the service information corresponding to the communication identifier; Establish and save the association between the business information and the communication identifier.

3. The method according to claim 1, characterized in that, The user identification card includes a preset public network key and a preset private network key. The step of obtaining public network communication authentication data and private network communication authentication data generated based on the communication authentication data includes: The authentication data is encrypted using a preset encryption algorithm and the preset public key to obtain the public network communication authentication data. The authentication data is encrypted using a preset encryption algorithm and the preset private network key to obtain the private network communication authentication data.

4. A communication service response method, characterized in that, The method is applied to the core network, and the method includes: Receive a communication request from a calling user, wherein the communication request includes a communication identifier of the called user, the communication identifier being associated with the called user's identity card, and the identity card being obtained according to any one of claims 1 to 3; Based on the first network area where the calling user is located, the communication identifier is paged in the first network area; If the called user corresponding to the communication identifier is not paged in the first network area, the communication request is routed from the first communication access device to the second communication access device, so that the second communication access device can page the called user corresponding to the communication identifier in the second network area. The second network area is of a different network type than the first network area, the first communication access device corresponds to the network type of the first network, and the second communication access device corresponds to the network type of the second network.

5. The method according to claim 4, characterized in that, In the case where the called user corresponding to the communication identifier is not paged in the first network area, routing the communication request from the first communication access device to the second communication access device includes: If the called user corresponding to the communication identifier is not paged in the first network area, the location information of the called user is determined based on the communication identifier. The communication request is routed from the first communication access device to the second communication access device corresponding to the location information.

6. The method according to claim 4, characterized in that, The method further includes: When the network category of the first network area is a preset public network, the network category of the second network area is a preset private network; When the network category of the first network area is a preset private network, the network category of the second network area is a preset public network.

7. The method according to claim 4, characterized in that, The method further includes: When the called user corresponding to the communication identifier is found in the first network area, the communication identifier of the called user is sent to the first communication access device, so that the first communication access device can page the called user corresponding to the communication identifier in the first network area.

8. A user identification card registration device, characterized in that, The device is applied to a customer relationship management system, which is a component of a one-card-one-number interconnection system between the surface and underground operations. This interconnection system also includes an underground dedicated network system, a unified card writing component, a pre-written card resource library, a pre-defined card management system, and a hardware encryption machine. The device includes: The acquisition module is used to acquire the card identifier and communication identifier of an unregistered user identification card, and to acquire the card writing data corresponding to the card identifier and the communication authentication data corresponding to the communication identifier. The processing module is used to store the card writing data into the unregistered user identification card through the unified card writing component to obtain the initial user identification card; The acquisition module is further configured to acquire public network communication authentication data and private network communication authentication data generated based on the communication authentication data. The public network communication authentication data and the private network communication authentication data are generated by the preset card management system calling the hardware encryption machine. After the hardware encryption machine completes the encryption of the authentication data, it sends the result back to the preset card management system. The pre-written card resource library stores the public network communication authentication data and the private network communication authentication data in the library and marks them. The customer relationship management system acquires the public network communication authentication data and the private network communication authentication data from the pre-written card resource library. The registration request module is used to send a registration request to the business operation support system through the underground private network system to obtain the target user identification card. The registration request includes public network communication authentication data and private network communication authentication data. The registration request is used by the business operation support system to activate the initial user identification card on the preset public network and the preset private network respectively according to the registration request.

9. A communication service response device, characterized in that, The device is applied to the core network, and the device includes: A receiving module is configured to receive a communication request from a calling user, wherein the communication request includes a communication identifier of a called user, the communication identifier being associated with a user identification card of the called user, and the user identification card being obtained according to any one of claims 1 to 3; The paging module is used to page the communication identifier in the first network area according to the location of the calling user; The paging module is further configured to, when the called user corresponding to the communication identifier is not paged in the first network area, route the communication request from the first communication access device to the second communication access device, so that the second communication access device can page the called user corresponding to the communication identifier in the second network area. The second network area has a different network category than the first network area, the first communication access device corresponds to the network category of the first network, and the second communication access device corresponds to the network category of the second network.

10. An electronic device, characterized in that, The device includes: a processor, and a memory storing computer program instructions; The processor reads and executes the computer program instructions to implement the user identification card registration method as described in any one of claims 1 to 3, or the communication service response method as described in any one of claims 4 to 7.

Images