Method, system and medium for automatically compiling LPA of eSIM device

Automatically compiling LPASDK online through the LPA management platform, solving the problems of long development cycle and security risks of IoT devices, achieving efficient device management and security certification, and improving the online speed and security of IoT devices.

CN116017403BActive Publication Date: 2025-08-19E SURFING IOT CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202211735343.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-12-30
Publication Date
2025-08-19
Estimated Expiration
2042-12-30

AI Technical Summary

Technical Problem

In the prior art, the development cycle of LPA functions of IoT devices is long and lacks unified and standardized management, resulting in the extended equipment online time and security risks.

Method used

Automatically compile LPASDK online through the LPA management platform to realize device manufacturer management, device management and LPA identity authentication, generate an SDK with its own authentication function, and ensure LPA identity authentication before the profile is downloaded.

Benefits of technology

It improves the compilation efficiency of LPASDK, realizes unified management of IoT eSIM devices and legality authentication of LPA access, and ensures access security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116017403B_ABST
    Figure CN116017403B_ABST
Patent Text Reader

Abstract

The present invention discloses an automatic LPA compilation method, system, and medium for an eSIM device. The method includes: an LPA management platform processes the registration of an eSIM device to obtain registration information, and generates a corresponding LPA SDK through a compilation tool based on the registration information, wherein the SDK includes an LPAID and an authentication value; the eSIM device obtains its LPAID and authentication value, and transparently transmits the LPAID and authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; the LPA management platform performs LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and returns the authentication result to the eSIM platform; the eSIM platform notifies the card data management platform of the authentication result, and allows the download of the profile based on the authentication result; the eSIM device downloads the profile from the eSIM platform and writes the profile to the eSIM card. The present invention meets the customer's LPASDK compilation requirements, improves compilation efficiency, realizes the legitimacy authentication of the LPA identity, and ensures access security.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and in particular to a method, system, and medium for automatically compiling an LPA for an eSIM device. Background Art

[0002] RSPeSIM is currently gaining increasing popularity in the IoT sector, but this also places higher demands on IoT devices, requiring them to have the ability to write numbers, meaning they must integrate the LPA functional module. However, IoT device manufacturers are generally small and medium-sized enterprises with limited R&D capabilities and unfamiliarity with GSMA specifications. This leads to long R&D cycles, which severely restricts the time it takes for devices to go online. To help devices go online as quickly as possible, LPA SDKs are generally provided to device manufacturers through offline integration and porting. However, the wide variety of IoT devices and the large differences in operating systems make offline integration inefficient. The LPA (Local Profile Assistant) on IoT eSIM devices is used to download profiles (including file systems, network authentication keys, applications, and other data). Before profile data is written to the physical eSIM card, it must be processed by the device LPA. However, there is currently no single LPA; operators, card vendors, device manufacturers, and others may all be LPA developers. This poses certain security risks to profile data transmission and eSIM platform access. Summary of the Invention

[0003] The embodiments of the present invention provide an automatic LPA compilation method, system, and medium for eSIM devices, aiming to solve the problems of low offline docking efficiency and lack of LPA legitimacy management and identity authentication. The proposed LPA automatic compilation method and system can realize device manufacturer management, device management, LPA automatic compilation, and LPA access identity authentication functions, solving the problems of low LPASDK compilation efficiency and lack of security.

[0004] In a first aspect, an embodiment of the present invention provides an automatic LPA compilation method for an eSIM device, which is applied to an automatic LPA compilation system for an eSIM device. The automatic LPA compilation system for an eSIM device includes an LPA management platform, an eSIM platform, and an eSIM device. The method includes: the LPA management platform processing registration of the eSIM device to obtain registration information, and generating a corresponding LPA SDK using a compilation tool based on the registration information, wherein the SDK includes an LPA ID and an authentication value; the eSIM device obtaining its LPA ID and authentication value, and transparently transmitting the LPA ID and authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; the LPA management platform performing LPA identity authentication based on the LPA ID and authentication value from the eSIM device and the LPA ID and authentication value in the SDK to generate an authentication result, and returning the authentication result to the eSIM platform; the eSIM platform notifying a card data management platform of the authentication result and allowing profile download based on the authentication result; and the eSIM device downloading the profile from the eSIM platform and writing the profile to the eSIM card.

[0005] In a second aspect, an embodiment of the present invention further provides an LPA automatic compilation system for an eSIM device, the LPA automatic compilation system for the eSIM device comprising an LPA management platform, an eSIM platform and an eSIM device; the LPA management platform comprises a compilation unit and an LPA identity authentication unit, the eSIM device comprises an LPA identity authentication request unit and a card writing unit, and the eSIM platform comprises a notification unit; wherein the compilation unit is used to register the eSIM device to obtain registration information, and generate a corresponding LPASDK through a compilation tool according to the registration information, wherein the SDK includes an LPAID and an authentication value; the LPA identity authentication request unit is used to obtain its LPAID and authentication value, and write the LPA to the card. The AID and the authentication value are transparently transmitted to the LPA management platform through the eSIM platform to request LPA identity authentication; an LPA identity authentication unit is used by the LPA management platform to perform LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and return the authentication result to the eSIM platform; a notification unit is used by the eSIM platform to notify the card data management platform of the authentication result and allow profile downloading based on the authentication result; a card writing unit is used by the eSIM device to download the profile from the eSIM platform and write the profile to the eSIM card.

[0006] In a third aspect, an embodiment of the present invention further provides an LPA automatic compilation system for an eSIM device, comprising at least three computer devices, each of which includes a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processors in the at least three computer devices execute the corresponding computer program, they jointly implement the method described in the first aspect above.

[0007] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein the storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the method of the first aspect can be implemented.

[0008] An embodiment of the present invention provides an LPA automatic compilation method, system, and medium for an eSIM device. The method includes: the LPA management platform processes the registration of the eSIM device to obtain registration information, and generates a corresponding LPA SDK based on the registration information through a compilation tool, wherein the SDK includes an LPA ID and an authentication value; the eSIM device obtains its LPA ID and authentication value, and transparently transmits the LPA ID and the authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; the LPA management platform performs LPA identity authentication based on the LPA ID and authentication value from the eSIM device and the LPA ID and authentication value in the SDK to generate an authentication result, and returns the authentication result to the eSIM platform; the eSIM platform notifies the card data management platform of the authentication result and allows the download of a profile based on the authentication result; the eSIM device downloads the profile from the eSIM platform and writes the profile to the eSIM card. The technical solution of the embodiment of the present invention enables the device manufacturer to register on the LPA management platform, manage the device, and automatically complete the LPASDK compilation work. The generated SDK has its own LPA authentication function. Before the eSIM device downloads the profile, it first performs LPA identity authentication. Only after the authentication is passed will the profile download operation be performed. This meets the customer's LPASDK compilation requirements, improves compilation efficiency, unifies the management of IoT eSIM devices and LPA, realizes the legitimacy authentication of the LPA identity, and ensures access security. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0010] Figure 1 A schematic diagram of an application scenario of the automatic LPA compilation method for an eSIM device provided by an embodiment of the present invention;

[0011] Figure 2 A schematic diagram of a flow chart of an automatic LPA compilation method for an eSIM device provided in an embodiment of the present invention;

[0012] Figure 3 A schematic diagram of the interaction of the LPA automatic compilation system for an eSIM device provided by an embodiment of the present invention;

[0013] Figure 4 A schematic block diagram of an automatic LPA compilation apparatus for an eSIM device according to an embodiment of the present invention;

[0014] Figure 5 This is a schematic block diagram of an LPA automatic compilation system for an eSIM device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0015] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0016] It will be understood that when used in this specification and the appended claims, the terms “comprises” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0017] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the present invention. As used in the specification and appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

[0018] It should be further understood that the term "and / or" used in the present description and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0019] See also Figure 1 , Figure 1This is a schematic diagram of an application scenario for the automatic LPA compilation method for eSIM devices provided by an embodiment of the present invention. This application scenario includes an LPA management platform 30, an eSIM platform 20, and an eSIM device 10. An eSIM device is typically an IoT terminal device. The eSIM platform is used to manage the eSIM device, and the LPA management platform is used to implement LPA identity authentication. An eSIM is an electronic SIM card, a data file that can be downloaded to a mobile terminal via the internet. With it, various terminals can connect to the internet, make calls, send text messages, and more. Functionally, it is identical to a regular SIM card; any device with mobile network access can use an eSIM. The plug-and-play, pre-integration, then number-writing feature of the eSIM card offers advantages and convenience for the mass production of IoT terminals. Directly embedding the eSIM blank card during device production meets the low-cost, high-security, and high-stability requirements of IoT terminals. LPA (Local Profile Assistant) is also known as the local profile assistant. Current eSIM device number writing has the following shortcomings: LPA function development cycles for IoT eSIM devices are long, making it difficult to quickly launch projects; there is a lack of unified and standardized management of eSIM devices and LPAs; and LPAs are non-unique, posing security risks. To this end, the LPA automatic compilation method for eSIM devices proposed in this embodiment realizes unified management of IoT eSIM devices and LPA through online automatic compilation of the IoT device LPA SDK. The device and platform implement identity authentication and authorization of LPA access to the eSIM platform through the newly added LPA identity authentication function module, ensuring the legality and security of the access.

[0020] The automatic LPA compilation method for eSIM devices in this embodiment is applied to the automatic LPA compilation method system for eSIM devices. Device manufacturers register on the platform, manage their devices, and automatically complete the LPA SDK compilation process. The generated SDK has built-in LPA authentication functionality. Before downloading a profile, the device first performs LPA identity authentication, and only after successful authentication can the profile download operation proceed. This system primarily includes: an LPA management platform, an IoT eSIM device, and an eSIM platform. Before describing the automatic LPA compilation method for eSIM devices in this embodiment, a brief introduction to the functions of the LPA management platform, IoT eSIM device, and eSIM platform in this embodiment is provided.

[0021] First, the functions of the LPA management platform in this embodiment are introduced. The LPA management platform includes manufacturer management, device management, automatic compilation, and LPA authentication functions. The specific functions are as follows:

[0022] 1) Manufacturer management: Equipment manufacturers upload their business licenses, sign agreements, and complete account application on the platform.

[0023] 2) Device management: Device manufacturers complete device registration management on the platform, including device model, software version, EID, IMEI, compilation tool and version, etc.

[0024] 3) Automatic Compilation: Select the appropriate compilation tool and version. The backend will automatically match the LPA source code. You can choose either "one device, one key" or "one model, one key" for security. The SDK will be generated based on the device model, EID, and IMEI. In addition to standard LPA functionality, the SDK also includes a generated LPA ID, authentication key, hash algorithm, and authentication request functionality. If the system does not have the appropriate compilation tool, you can upload it yourself and compile it.

[0025] 4) LPA authentication function: securely stores relevant information such as device model, EID, IMEI, authentication key, and LPAID, and completes the identity authentication of LPA when LPA accesses the eSIM platform.

[0026] Next, the functions of the eSIM device in this embodiment are introduced. The IoT eSIM device refers to an eSIM device that integrates the LPASDK function. The LPASDK can be integrated on the communication module, the IoT device MCU, or the main device. The LPASDK includes LPA authentication and standard LPA functions. The specific functions are as follows:

[0027] 1) LPA authentication: Read the device's EID and IMEI, and generate an authentication value through HASH calculation based on the EID, IMEI, authentication key and other information. The authentication process is the first step when accessing the eSIM platform.

[0028] 2) LPA: GSMA standard LPA functions, including initial authentication, profile download, etc.

[0029] Finally, the functions of the eSIM platform in this embodiment are introduced. The IoT eSIM platform includes standard DP+ function and LPA authentication function. LPA authentication mainly transmits the received LPA identity authentication request of the IoT eSIM device to the LPA management platform.

[0030] The following is a detailed description of the LPA automatic compilation method of the eSIM device. Figure 2 As shown, the method includes the following steps S110-S150.

[0031] S110. The LPA management platform processes the registration of the eSIM device to obtain registration information, and generates a corresponding LPA SDK using a compilation tool according to the registration information, wherein the SDK includes an LPA ID and an authentication value;

[0032] In this embodiment, the device manufacturer first registers an account in the LPA management platform. The device manufacturer then uses this account to register the manufacturer's eSIM devices, and all of the manufacturer's eSIM devices are registered in the LPA management platform. When registering an eSIM device, the manufacturer needs to upload the device model, software version, EID, IMEI, compilation tool and version, and other information. This information constitutes the registration information of the eSIM device. After the device manufacturer completes the registration, the LPA management platform will first automatically compile the LPASDK using the compilation tool. SDK (Software Development Kit) refers to the software development kit. The SDK generation process is as follows:

[0033] The LPA management platform matches the LPA source code in the background according to different eSIM devices to obtain the LPA source code corresponding to the eSIM device; the LPA source code is used by the compilation tool to generate the corresponding LPASDK according to the device model, EID and IMEI, wherein the registration letter includes the device model, the EID and the IMEI. Because different eSIM devices often have different operating systems and operating environments, it is necessary to pre-configure the corresponding LPA source code for various eSIM devices. Then, when compiling through the compilation tool, it is only necessary to match it with the LPA source code to obtain the LPA source code corresponding to the eSIM device and give it to the compilation tool, and then the compilation tool will automatically compile the complete SDK. During the compilation process of the compilation tool, it is necessary to generate according to the device model, EID and IMEI, among which the device model refers to the type number of the eSIM device; EID refers to the citizen network electronic identity, and eID is a network identity based on cryptographic technology and a smart security chip as a carrier. It can remotely identify the identity online without leaking identity information; IMEI refers to the International Mobile Equipment Identity (IMEI), which is commonly known as the mobile phone serial number or mobile phone "serial number". It is used to identify each independent mobile phone and other mobile communication devices in the mobile phone network, which is equivalent to the ID card of the mobile phone. In addition to the standard LPA function, the SDK also includes the generated LPAID, authentication key, HASH algorithm and authentication request function. Among them, the LPAID is automatically generated when registering in the LPA management platform. The generated ones can be diverse and are not limited here. In addition, the LPA management platform also generates an authentication value. The specific process is as follows:

[0034] The LPA management platform generates an authentication value through a HASH operation based on the EID, the IMEI, and the authentication key. Specifically, HASH is a method of transforming an input of arbitrary length (also called a pre-image) into an output of fixed length through a hash algorithm, and the output is the hash value. This conversion is a compression mapping, that is, the space of hash values is usually much smaller than the space of inputs, and different inputs may hash to the same output, so it is impossible to determine the unique input value from the hash value. Simply put, it is a function that compresses a message of arbitrary length into a message digest of a fixed length. In this embodiment, the EID, IMEI, and authentication key are used as HASH inputs for calculation to generate an authentication value.

[0035] It should be noted that the authentication key in this embodiment is allocated by the LPA management platform. The specific allocation principle is one key per device or one key per type, that is, the LPA management platform allocates the authentication key according to the number of eSIM devices; or, allocates the authentication key according to the device signal of the eSIM device.

[0036] S120: The eSIM device obtains its LPA ID and authentication value, and transparently transmits the LPA ID and authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication;

[0037] In this embodiment, after the device manufacturer completes the registration of the eSIM device on the LPA management platform, it can obtain the LPAID and the assigned authentication key, and then the device manufacturer will solidify the LPAID and authentication key into the eSIM device. In this way, when the eSIM device wants to perform LED identity authentication, it can directly obtain the LPAID of the device itself. As for the authentication value, it is generated in the following way: the eSIM device obtains the EID, IMEI and authentication key of the device itself, and generates an authentication value through HASH operation based on the EID, IMEI and authentication key of the device itself. Specifically, first obtain the EID, IMEI and authentication key of the device itself (the authentication key is obtained by the device manufacturer from the LPA management platform and then solidified into the device), and then use the EID, IMEI and authentication key as the input of HASH to calculate and generate the authentication value.

[0038] S130. The LPA management platform performs LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and returns the authentication result to the eSIM platform.

[0039] In this embodiment, the LPA management platform receives an LPA authentication request from an eSIM device and performs LPA authentication. The LPA authentication process is as follows: the LPA management platform determines whether the LPAID and authentication value from the eSIM device are identical to those in the SDK; if so, a successful LPA authentication result is generated. Specifically, the LPA management platform compares the LPAID of the eSIM device with the LPAID in the SDK, and the authentication value of the SIM device with the authentication value in the SDK. If both are identical, the LPA authentication is considered successful, and a successful LPA authentication result is generated. This authentication result is then transmitted back to the eSIM platform.

[0040] S140. The eSIM platform notifies the card data management platform of the authentication result and allows downloading of the profile based on the authentication result.

[0041] In this embodiment, the card data management platform, DP+, is used to store and manage card numbers. The LPA management platform notifies DP+ of the authentication result, which DP+ then identifies and issues instructions to allow or deny profile downloads. Specifically, the eSIM platform's card data management platform determines whether to allow profile downloads based on the authentication result. If the LPA identity authentication result is successful, the eSIM device is allowed to download the profile; if the LPA identity authentication result is unsuccessful, the eSIM device is denied access.

[0042] S150: The eSIM device downloads the profile from the eSIM platform and writes the profile into the eSIM card.

[0043] In this embodiment, after completing LPA identity authentication, the LPA completes profile download by calling the communication chip / module interface and writes the applied profile into the eSIM card.

[0044] By implementing this embodiment, LPASDK compilation is automatically implemented online, which improves compilation efficiency while achieving unified management of IoT eSIM devices and LPA; a new LPA authentication mechanism is added to ensure the legal access of LPA through LPA identity authentication.

[0045] To further understand the LPA automatic compilation method of the eSIM device of this embodiment, please refer to Figure 3 The following example describes the interaction process between the LPA management platform, the eSIM platform, and the eSIM device in the LPA automatic compilation system of the eSIM device.

[0046] 1) The device manufacturer completes the account application and IoT eSIM device registration on the LPA management platform. According to the one-device-one-code or one-model-one-code, one-device-one-LPASDK or one-model-one-LPASDK generation rules, the LPASDK is compiled online. The generated LPASDK has the LPA authentication function.

[0047] 2) IoT eSIM devices integrate LPASDK functions and read EID and IMEI information by calling communication chips, modules or slave device interfaces.

[0048] 3) LPA accesses the eSIM platform, first making an LPA identity authentication request and uploading the LPA ID and authentication value.

[0049] 4) The LPA authentication module on the eSIM platform transparently transmits the authentication request to the LPA management platform. The LPA authentication module on the LPA management platform compares the LPAID and authentication value uploaded by the device with the platform's self-generated value, completes the LPA identity authentication, and returns the authentication result.

[0050] 5) The eSIM platform LPA authentication function notifies DP+ of the authentication result. If it passes, subsequent profile download requests are allowed; if it fails, they are rejected.

[0051] 6) The IoT eSIM device receives the authentication result. If it passes, it triggers the standard LPA application profile download. If it fails, it terminates access to the eSIM platform.

[0052] 7) Standard LPA applies to the eSIM platform for profile download, GSMA standard interface.

[0053] 8) Standard LPA completes profile download by calling the communication chip / module interface and writes the applied profile into the eSIM card.

[0054] Figure 4 FIG is a schematic block diagram of an LPA automatic compilation system 200 for an eSIM device provided by an embodiment of the present invention. Figure 4 As shown, corresponding to the above-mentioned LPA automatic compilation method of the eSIM device, the present invention also provides an LPA automatic compilation system 200 for the eSIM device. The LPA automatic compilation system 200 for the eSIM device includes a unit for executing the above-mentioned LPA automatic compilation method of the eSIM device, and the device can be configured in the system. Specifically, please refer to Figure 4 The LPA automatic compilation system 200 of the eSIM device includes: a compilation unit 201, an LPA identity authentication request unit 202, an LPA identity authentication unit 203, a notification unit 204 and a card writing unit 205.

[0055] Among them, the compilation unit 201 is used to register the eSIM device to obtain registration information, and generate a corresponding LPASDK through a compilation tool based on the registration information, wherein the SDK includes an LPAID and an authentication value; the LPA identity authentication request unit 202 is used to obtain its LPAID and authentication value, and transparently transmit the LPAID and the authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; the LPA identity authentication unit 203 is used by the LPA management platform to perform LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and return the authentication result to the eSIM platform; the notification unit 204 is used by the eSIM platform to notify the card data management platform of the authentication result and allow the download of the profile based on the authentication result; the card writing unit 205 is used by the eSIM device to download the profile from the eSIM platform and write the profile to the eSIM card.

[0056] In one embodiment, the LPA management platform further includes: a matching unit and a generating unit.

[0057] Among them, the matching unit is used for the LPA management platform to match the LPA source code in the background according to different eSIM devices to obtain the LPA source code corresponding to the eSIM device; the generation unit is used to use the LPA source code through a compilation tool and generate the corresponding LPASDK according to the device model, EID and IMEI, wherein the registration letter includes the device model, the EID and the IMEI.

[0058] In one embodiment, the LPA management platform further includes: a first computing unit.

[0059] Among them, the first operation unit is used for the LPA management platform to generate an authentication value through HASH operation according to the EID, the IMEI, and the authentication key.

[0060] In one embodiment, the LPA management platform further includes: an allocation unit.

[0061] an allocating unit, configured to allocate the authentication key according to the number of the eSIM devices on the LPA management platform; or allocate the authentication key according to the device signal of the eSIM device.

[0062] In one embodiment, the LPA management platform further includes: a comparison unit and an authentication result generation unit.

[0063] Among them, the comparison unit is used by the LPA management platform to determine whether the LPAID and the authentication value from the eSIM device are the same as the LPAID and the authentication value in the SDK; the authentication result generation unit is used to generate an authentication result indicating successful LPA identity authentication if they are the same.

[0064] In one embodiment, the eSIM device further includes: a second computing unit.

[0065] The second operation unit is configured to enable the eSIM device to obtain the EID, IMEI, and authentication key of the device itself, and to generate an authentication value through a HASH operation based on the EID, IMEI, and authentication key of the device itself.

[0066] In one embodiment, the eSIM platform further includes: a download permission determination unit, a download permission unit, and a download rejection unit.

[0067] Among them, the download permission judgment unit is used for the card data management platform of the eSIM platform to judge whether to allow the profile download according to the authentication result; the download permission unit is used to allow the eSIM device to download the profile if the authentication result is that the LPA identity authentication is successful; the download rejection unit is used to reject access to the eSIM device if the authentication result is that the LPA identity authentication fails.

[0068] It should be noted that those skilled in the art will clearly understand that the specific implementation process of the LPA automatic compilation device 200 and each unit of the above-mentioned eSIM device can refer to the corresponding description in the aforementioned method embodiment. For the convenience and brevity of description, it will not be repeated here.

[0069] The LPA automatic compilation device of the eSIM device can be implemented in the form of a computer program. The computer program can be used in the following ways: Figure 5 The eSIM device shown is running on the LPA automatic compilation system.

[0070] See also Figure 5 , Figure 5 This is a schematic block diagram of an LPA automatic compilation system for an eSIM device provided in an embodiment of the present application.

[0071] See Figure 5 The LPA automatic compilation system 500 of the eSIM device includes a processor 502, a memory and a network interface 505 connected through a system bus 501, wherein the memory may include a non-volatile storage medium 503 and an internal memory 504.

[0072] The non-volatile storage medium 503 can store an operating system 5031 and a computer program 5032. The computer program 5032 includes program instructions, which, when executed, can enable the processor 502 to execute an LPA automatic compilation method for an eSIM device.

[0073] The processor 502 is used to provide computing and control capabilities to support the operation of the LPA automatic compilation system 500 of the entire eSIM device.

[0074] The internal memory 504 provides an environment for the operation of the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute an LPA automatic compilation method for an eSIM device.

[0075] The network interface 505 is used to communicate with other devices through the network. Figure 5 The structure shown in the figure is only a block diagram of a portion of the structure related to the solution of the present application and does not constitute a limitation on the LPA automatic compilation system 500 of the eSIM device to which the solution of the present application is applied. The LPA automatic compilation system 500 of a specific eSIM device may include more or fewer components than shown in the figure, or combine certain components, or have a different component arrangement.

[0076] The processor 502 is configured to run a computer program 5032 stored in the memory to implement any embodiment of the above-mentioned method for automatically compiling the LPA of an eSIM device.

[0077] It should be understood that in the embodiment of the present application, the processor 502 may be a central processing unit (CPU), and the processor 502 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0078] Those skilled in the art will appreciate that all or part of the steps in the method of the above-described embodiment can be implemented by instructing the relevant hardware through a computer program. The computer program includes program instructions, which can be stored in a storage medium that is computer-readable. The program instructions are executed by at least one processor in the computer system to implement the steps in the method of the above-described embodiment.

[0079] Therefore, the present invention also provides a storage medium. The storage medium may be a computer-readable storage medium. The storage medium stores a computer program, wherein the computer program includes program instructions. When executed by a processor, the program instructions cause the processor to perform any embodiment of the above-described method for automatically compiling an LPA for an eSIM device.

[0080] The storage medium may be any computer-readable storage medium that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a magnetic disk, or an optical disk.

[0081] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the composition and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0082] In the several embodiments provided herein, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the various units is merely a logical functional division, and actual implementation may employ other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be omitted or not implemented.

[0083] The steps in the methods of the embodiments of the present invention may be adjusted in order, combined, or deleted as needed. The units in the devices of the embodiments of the present invention may be combined, divided, or deleted as needed. Furthermore, the functional units in the various embodiments of the present invention may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit.

[0084] If this integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for enabling the LPA automatic compilation system of an eSIM device to perform all or part of the steps of the method described in various embodiments of the present invention.

[0085] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0086] Obviously, those skilled in the art may make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, to the extent such changes and modifications fall within the scope of the claims and their equivalents, the present invention is intended to encompass such changes and modifications.

[0087] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and such modifications or substitutions are intended to be within the scope of protection of the present invention. Therefore, the scope of protection of the present invention shall be subject to the scope of protection of the claims.

Claims

1. A method for automatically compiling LPA for an eSIM device, characterized in that: An LPA automatic compilation system applied to an eSIM device, the LPA automatic compilation system of the eSIM device comprising: an LPA management platform, an eSIM platform, and an eSIM device, the method comprising: The LPA management platform processes the registration of the eSIM device to obtain registration information, and generates a corresponding LPA SDK through a compilation tool according to the registration information, wherein the SDK includes an LPAID and an authentication value; The eSIM device obtains its LPAID and authentication value, and transparently transmits the LPAID and the authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; The LPA management platform performs LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and returns the authentication result to the eSIM platform; The eSIM platform notifies the card data management platform of the authentication result and allows downloading of the profile based on the authentication result; The eSIM device downloads the profile from the eSIM platform and writes the profile into the eSIM card; The step of the eSIM device obtaining its LPAID and authentication value includes: The eSIM device obtains the device's own EID, IMEI and authentication key, and generates an authentication value through a HASH operation based on the device's own EID, IMEI and authentication key.

2. The method according to claim 1, characterized in that The method further comprises: The LPA management platform matches the LPA source code of the backend according to different eSIM devices to obtain the LPA source code corresponding to the eSIM device; The LPA source code is used by a compilation tool to generate a corresponding LPA SDK according to the device model, EID and IMEI, wherein the registration letter includes the device model, the EID and the IMEI.

3. The method according to claim 2, characterized in that The method further comprises: The LPA management platform generates an authentication value through a HASH operation according to the EID, the IMEI, and the authentication key.

4. The method according to claim 3, characterized in that The LPA management platform allocates the authentication key according to the number of the eSIM devices; or allocates the authentication key according to the device signal of the eSIM device.

5. The method according to claim 4, characterized in that The method further comprises: The LPA management platform determines whether the LPAID and the authentication value from the eSIM device are the same as the LPAID and the authentication value in the SDK; If they are the same, an LPA identity authentication success result is generated.

6. The method according to claim 1, characterized in that The method further comprises: The card data management platform of the eSIM platform determines whether to allow downloading of the profile based on the authentication result; If the authentication result is that the LPA identity authentication is successful, the eSIM device is allowed to download the profile; If the authentication result is that the LPA identity authentication fails, access to the eSIM device is denied.

7. An LPA automatic compilation system for an eSIM device, characterized in that: The LPA automatic compilation system of the eSIM device includes an LPA management platform, an eSIM platform and an eSIM device; the LPA management platform includes a compilation unit and an LPA identity authentication unit, the eSIM device includes an LPA identity authentication request unit and a card writing unit, and the eSIM platform includes a notification unit; wherein, A compilation unit, configured to register the eSIM device to obtain registration information, and generate a corresponding LPASDK using a compilation tool according to the registration information, wherein the SDK includes an LPAID and an authentication value; An LPA identity authentication request unit is configured to obtain its LPAID and authentication value, and transparently transmit the LPAID and the authentication value to the LPA management platform through the eSIM platform to request LPA identity authentication; An LPA identity authentication unit, configured for the LPA management platform to perform LPA identity authentication based on the LPAID and authentication value from the eSIM device and the LPAID and authentication value in the SDK to generate an authentication result, and return the authentication result to the eSIM platform; a notification unit, configured for the eSIM platform to notify the card data management platform of the authentication result and to allow profile downloading based on the authentication result; a card writing unit, configured for the eSIM device to download the profile from the eSIM platform and write the profile into the eSIM card; The eSIM device further includes: a second computing unit; The second operation unit is used for the eSIM device to obtain the EID, IMEI and authentication key of the device itself, and generate an authentication value through HASH operation according to the EID, IMEI and authentication key of the device itself.

8. An LPA automatic compilation system for an eSIM device, characterized in that: The method comprises at least three computer devices, each of which comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processors in the at least three computer devices jointly implement the method according to any one of claims 1 to 6 when executing the corresponding computer program.

9. A storage medium, characterized in that: The storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the method according to any one of claims 1 to 6 can be implemented.

Citation Information

Patent Citations

  • A method and related apparatus for managing eUICC configuration files

    CN109792604B