Remote configuration method, communication device, system and storage medium

Abstract

The present application relates to a remote configuration method, communication device, system, storage medium, and computer program product. The method includes: an eUICC receiving remote configuration information sent by a terminal via a machine-to-card interface, wherein the remote configuration information is carried in a registration acceptance message received by the terminal when completing network registration; the eUICC then performs an operation based on the remote configuration information, obtains an operation execution result, and returns the operation execution result to a remote configuration management platform, so that the remote configuration management platform can control the configuration execution status of the eUICC based on the operation execution result, thereby realizing remote configuration of the eUICC in the Internet of Things. Because this embodiment is based on the REGISTRATION ACCEPT signaling message of the MM layer, the remote configuration information of the eUICC is pushed during the terminal registration process, which not only has better real-time performance but also reduces the terminal's additional steps of querying or reporting information to the service platform, which is beneficial to terminal energy saving and efficiency improvement.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a remote configuration method, communication device, system, storage medium, and computer program product. Background Art

[0002] According to the GSMA (Global System for Mobile communications Association) eUICC (embedded Universal Integrated Circuit Card) remote configuration technology based on SGP.02 IoT solution, the configuration and management of the eUICC must be achieved through SMS. For example, to download the subscription data file (Profile), the SM-DP first initiates a request to the SM-SR. The SM-SR then sends a data SMS to the eUICC via MT-SMS (Message Transmission Short Message Service), triggering the eUICC to initiate an open channel (OPEN CHANNEL), thereby establishing a secure connection with the SM-DP and obtaining the Profile.

[0003] However, this approach requires terminals to have SMS capabilities and the SM-SR platform to communicate with the core network, resulting in a relatively heavy architecture. Furthermore, for IoT service scenarios with long-term dormancy and periodic activation, dormant terminals cannot receive platform SMS messages, and the eUICC management platform cannot timely monitor terminal or card status changes, thus limiting the development of IoT eUICC remote configuration technology. Summary of the Invention

[0004] Embodiments of the present application provide a remote configuration method, communication device, system, storage medium, and computer program product, which can implement real-time remote configuration of an eUICC in the Internet of Things.

[0005] A remote configuration method, applied to an embedded universal integrated circuit card (eUICC), comprising:

[0006] Receiving remote configuration information sent by the terminal through the machine-card interface, the remote configuration information being carried in a registration acceptance message received when the terminal completes network registration;

[0007] Execute an operation according to the remote configuration information to obtain an operation execution result;

[0008] Returning the operation execution result to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution state of the eUICC according to the operation execution result.

[0009] In one embodiment, performing an operation based on the remote configuration information includes: identifying the operation type of the remote configuration information; when the operation type is identified as the operation type of contract data, establishing a secure channel with the remote configuration management platform; and obtaining the contract data corresponding to the remote configuration information through the secure channel.

[0010] In one embodiment, the method further includes: when it is identified that the operation type is an instruction operation type, executing the instruction in the remote configuration information.

[0011] A remote configuration method, applied to a remote configuration management platform, comprising:

[0012] receiving a remote configuration request for the eUICC;

[0013] generating remote configuration information for the eUICC according to the remote configuration request;

[0014] sending an execution status configuration request carrying the remote configuration information to the communication device, so that when the communication device receives the network registration request sent by the terminal and authentication is passed, it returns a registration acceptance message carrying the remote configuration information to the terminal, and causes the terminal to send the remote configuration information to the eUICC through the device-card interface, wherein the execution status configuration request is used to instruct the communication device to configure the configuration execution status of the eUICC.

[0015] In one embodiment, the method further includes: receiving an operation execution result, where the operation execution result is a result of the eUICC performing an operation according to the remote configuration information; and sending a request for updating the configuration execution status to the communication device based on the operation execution result, so that the communication device updates the eUICC configuration execution status according to the update request.

[0016] A remote configuration method, applied to a communication device, comprising:

[0017] When a network registration request is received from a terminal and authentication is successful, determining whether the eUICC corresponding to the terminal has remote configuration information to be executed;

[0018] When it is determined that the eUICC corresponding to the terminal has remote configuration information to be executed, a registration acceptance message carrying the remote configuration information is returned to the terminal, so that the terminal sends the remote configuration information to the eUICC through a machine-card interface instruction and performs an operation according to the remote configuration information.

[0019] In one embodiment, the method further includes: receiving an execution state configuration request sent by the remote configuration management platform and carrying remote configuration information for the eUICC; configuring a configuration execution state of the eUICC according to the execution state configuration request; and determining whether the eUICC corresponding to the terminal has remote configuration information to be executed, comprising: identifying a configuration execution state of the eUICC corresponding to the terminal; when identifying that the configuration execution state is a first state, determining that the eUICC corresponding to the terminal has remote configuration information to be executed; and when identifying that the configuration execution state is a second state, determining that the eUICC corresponding to the terminal does not have remote configuration information to be executed.

[0020] In one embodiment, the method further includes: receiving an update request for the configuration execution status sent by the remote configuration management platform, the update request being sent by the remote configuration management platform based on an execution operation result, the execution operation result being a result of the eUICC performing an operation on the remote configuration information; and updating the configuration execution status according to the update request.

[0021] An embedded universal integrated circuit card, comprising:

[0022] An information receiving module is configured to receive remote configuration information sent by the terminal through the machine-card interface, wherein the remote configuration information is carried in a registration acceptance message received when the terminal completes network registration;

[0023] an operation execution module, configured to execute an operation according to the remote configuration information and obtain an operation execution result;

[0024] The result sending module is configured to return the operation execution result to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution state of the eUICC according to the operation execution result.

[0025] In one embodiment, the operation execution module is configured to perform: identifying the operation type of the remote configuration information; when the operation type is identified as the operation type of contract data, establishing a secure channel with the remote configuration management platform; and obtaining the contract data corresponding to the remote configuration information through the secure channel.

[0026] In one embodiment, the operation execution module is further configured to execute: when it is identified that the operation type is an instruction operation type, execute the instruction in the remote configuration information.

[0027] A remote configuration management platform, comprising:

[0028] a data receiving module configured to receive a remote configuration request from a service system for the eUICC;

[0029] an information generation module, configured to generate remote configuration information for the eUICC according to the remote configuration request;

[0030] a data sending module configured to send an execution status configuration request carrying the remote configuration information to a communication device, so that upon receiving a network registration request sent by a terminal and passing authentication, the communication device returns a registration acceptance message carrying the remote configuration information to the terminal, and causes the terminal to send the remote configuration information to the eUICC via a device-to-card interface, wherein the execution status configuration request is used to instruct the communication device to configure a configuration execution status of the eUICC.

[0031] In one embodiment, the data receiving module is further configured to: receive an operation execution result, where the operation execution result is a result of the eUICC performing an operation according to the remote configuration information; and the data sending module is further configured to: send an update request for the configuration execution status to the communication device based on the operation execution result, so that the communication device updates the eUICC configuration execution status according to the update request.

[0032] A communication device, comprising:

[0033] a determination module configured to, upon receiving a network registration request sent by a terminal and passing authentication, determine whether an eUICC corresponding to the terminal has remote configuration information to be executed;

[0034] The message sending module is configured to, when it is determined that the eUICC corresponding to the terminal has remote configuration information to be executed, return a registration acceptance message carrying the remote configuration information to the terminal, so that the terminal sends the remote configuration information to the eUICC through a machine-card interface instruction and performs an operation according to the remote configuration information.

[0035] In one embodiment, the device further includes: a receiving module configured to receive an execution state configuration request sent by the remote configuration management platform and carrying remote configuration information for the eUICC; a processing module configured to configure a configuration execution state of the eUICC according to the execution state configuration request; and the determining module is further configured to: identify a configuration execution state of the eUICC corresponding to the terminal; when identifying that the configuration execution state is a first state, determine that remote configuration information to be executed exists for the eUICC corresponding to the terminal; and when identifying that the configuration execution state is a second state, determine that no remote configuration information to be executed exists for the eUICC corresponding to the terminal.

[0036] In one embodiment, the receiving module is further configured to: receive a request for updating the configuration execution status sent by the remote configuration management platform, where the update request is sent by the remote configuration management platform based on an execution operation result, where the execution operation result is a result of the eUICC performing an operation on the remote configuration information; and the processing module is further configured to: update the configuration execution status based on the update request.

[0037] A remote configuration system comprises the above-mentioned embedded universal integrated circuit card, the above-mentioned remote configuration management platform and the above-mentioned communication device.

[0038] A computer-readable storage medium stores a computer program, which implements the steps described in the above method when executed by a processor.

[0039] A computer program product includes a computer program, wherein the computer program implements the steps described in the above method when executed by a processor.

[0040] In the aforementioned remote configuration method, communication device, system, storage medium, and computer program product, the eUICC can receive remote configuration information sent by a terminal via a device-to-card interface. The remote configuration information is carried in a Registration Accept message received by the terminal upon network registration. The eUICC can then perform operations based on the remote configuration information, obtain operation execution results, and return the operation execution results to a remote configuration management platform. The remote configuration management platform can then control the configuration execution status of the eUICC based on the operation execution results, thereby enabling remote configuration of the eUICC in the Internet of Things. Because this embodiment pushes the eUICC's remote configuration information during terminal registration based on the REGISTRATION ACCEPT signaling message of the MM (Mobile Management) layer, it not only improves real-time performance but also reduces the need for the terminal to query or report information to the service platform, thereby facilitating terminal energy conservation and efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 1 is a flow chart of a remote configuration method according to an embodiment;

[0042] Figure 2 A flowchart of executing operation steps according to remote configuration information in one embodiment;

[0043] Figure 3 is a flowchart of a remote configuration method in another embodiment;

[0044] Figure 4 A flowchart of processing steps according to operation execution results in one embodiment;

[0045] Figure 5 1 is a flow chart of a remote configuration method in yet another embodiment;

[0046] Figure 6 is a structural block diagram of an embedded universal integrated circuit card in one embodiment;

[0047] Figure 7 A structural block diagram of a remote configuration management platform in one embodiment;

[0048] Figure 8 is a structural block diagram of a communication device in one embodiment;

[0049] Figure 9 is a structural block diagram of a remote configuration system in one embodiment;

[0050] Figure 10 Schematic diagram of a remote configuration method in another embodiment. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solutions and advantages of this application more clear, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0052] Traditionally, dormant IoT devices cannot receive SMS messages, and the platform cannot timely monitor their status changes, making remote management impossible. If dormant devices were to report or query their status to the IoT service platform, this would result in insufficient real-time performance, low efficiency, and increased power consumption.

[0053] Based on this, in one embodiment, Figure 1 As shown, a remote configuration method is provided, which is described by taking the application of the method to an embedded universal integrated circuit card eUICC as an example, and includes the following steps:

[0054] Step 102: Receive remote configuration information sent by the terminal through the machine-card interface.

[0055] Remote configuration information refers to information used to remotely manage the eUICC in the IoT, including, but not limited to, information instructing the eUICC to download or update a profile, or instructions for the eUICC to activate or deactivate a profile. A terminal is a terminal device in the IoT that has an eUICC loaded.

[0056] In this embodiment, the remote configuration information is carried in the Registration Accept message (REGISTRATION ACCEPT) received by the terminal when the terminal completes network registration. Typically, when the terminal is powered on or periodically updated, it will register with the network, that is, initiate a network registration request to the network. The network then performs registration procedures such as authentication and key negotiation with the terminal based on the terminal's network registration request, and returns a REGISTRATION ACCEPT message to the terminal after authentication is successful. Specifically, in this embodiment, the network can carry the remote configuration information for the eUICC in the REGISTRATION ACCEPT message returned to the terminal. After receiving the REGISTRATION ACCEPT message, the terminal can identify whether it carries the remote configuration information for the eUICC. If it is identified that it carries the remote configuration information for the eUICC, it can send the remote configuration information to the eUICC via the device-to-card interface, and the eUICC can then receive the remote configuration information.

[0057] Step 104: Execute the operation according to the remote configuration information to obtain the operation execution result.

[0058] The operation execution result is a result obtained after the eUICC performs the corresponding operation according to the instruction in the remote configuration information. Specifically, the eUICC can perform the corresponding operation according to the instruction in the remote configuration information to obtain the operation execution result.

[0059] Step 106: Return the operation execution result to the remote configuration management platform.

[0060] The remote configuration management platform is used to prepare and manage security data for the eSIM and is a key component of the eSIM ecosystem. Specifically, the remote configuration management platform can be implemented based on the SM-DP and has RSM (Remote Service Management) functionality. In this embodiment, the remote configuration information is generated by the remote configuration management platform based on the remote configuration request to the eUICC and provided to the network side.

[0061] In this embodiment, the eUICC may also return an operation execution result to the remote configuration management platform, so that the remote configuration management platform can control the configuration execution status of the eUICC based on the operation execution result. Specifically, the configuration execution status may be the status of whether the eUICC has remote configuration information to be executed, which can be managed using a status flag.

[0062] In the above-described remote configuration method, the eUICC can receive remote configuration information sent by the terminal via the device-card interface. The remote configuration information is carried in the Registration Accept message received by the terminal upon completing network registration. The eUICC can then perform operations based on the remote configuration information, obtain operation execution results, and return the operation execution results to the remote configuration management platform. The remote configuration management platform can then control the configuration execution status of the eUICC based on the operation execution results, thereby implementing remote configuration of the eUICC in the Internet of Things. Because this embodiment pushes the eUICC's remote configuration information during the terminal registration phase based on the REGISTRATION ACCEPT signaling message of the MM (Mobile Management) layer, it not only improves real-time performance but also reduces the terminal's need to query or report information to the service platform, thereby facilitating terminal energy conservation and efficiency.

[0063] In one embodiment, Figure 2 As shown, step 104, performing operations according to the remote configuration information, may specifically include the following steps:

[0064] Step 202: Identify the operation type of the remote configuration information.

[0065] The operation type includes an operation on a profile or an operation on an instruction. Specifically, the operation on a profile may be downloading a profile or updating a profile. It is understood that if the operation type is an operation on an instruction, the remote configuration information may also include an instruction set that needs to be executed by the eUICC.

[0066] In this embodiment, the eUICC may determine the corresponding operation type by identifying the received remote configuration information.

[0067] Step 204: When the operation type is identified as the contract data operation type, a secure channel is established with the remote configuration management platform.

[0068] Specifically, when the eUICC identifies that the operation type is Profile, it initiates OPENCHANNEL through ISD-R to establish a secure connection with the SM-DP, that is, to establish a secure channel with the remote configuration management platform.

[0069] Step 206: Acquire the contract data corresponding to the remote configuration information through the secure channel.

[0070] Specifically, the eUICC can obtain the profile corresponding to the remote configuration information through a secure channel. Furthermore, the eUICC can also determine the result of the corresponding operation. For example, the eUICC can download the profile through the secure channel and obtain a download success result or a download failure result.

[0071] Step 208: When the operation type is identified as an instruction operation type, execute the instruction in the remote configuration information.

[0072] Specifically, when the eUICC identifies that the operation type is an instruction operation type, it executes the instruction in the remote configuration information and obtains a corresponding execution result, such as a result of successful instruction execution or a result of failed instruction execution.

[0073] In this embodiment, the eUICC identifies the operation type of the remote configuration information. When the operation type is identified as a subscription data operation type, a secure channel is established with the remote configuration management platform, and the subscription data corresponding to the remote configuration information is obtained through the secure channel. When the operation type is identified as an instruction operation type, the instruction in the remote configuration information is executed, thereby realizing remote configuration of the eUICC.

[0074] In one embodiment, Figure 3 As shown, the present application also provides a remote configuration method, which is described by taking the application of the method to a remote configuration management platform as an example, and includes the following steps:

[0075] Step 302: Receive a remote configuration request for the eUICC.

[0076] A remote configuration request is a request for remote configuration management of an eUICC. Specifically, when remote configuration management of an eUICC is required, a corresponding remote configuration request may be initiated to a remote configuration management platform, such as an SM-DP. The SM-DP then receives the remote configuration request for the eUICC. It is understood that the request may include the identifier of the specific eUICC for which configuration is requested.

[0077] Step 304: Generate remote configuration information for the eUICC according to the remote configuration request.

[0078] The remote configuration information is related information used by the eUICC to perform remote configuration management, including, for example, but not limited to, information instructing the eUICC to download or update a Profile, or instruction information instructing the eUICC to activate or deactivate a Profile.

[0079] In this embodiment, the remote configuration management platform may generate remote configuration information for the eUICC, such as generating an RPM (Remote Profile Management) instruction, based on a received remote configuration request for the eUICC. Specifically, the remote configuration information may include a corresponding information identifier, an operation type, and an identifier of the corresponding eUICC. The operation type may include an operation on a profile or an operation on an instruction. Specifically, a profile operation may include downloading a profile or updating a profile. It will be understood that if the operation type is an instruction operation type, the remote configuration information may also include an instruction set to be executed by the eUICC.

[0080] Step 306: Send an execution state configuration request carrying remote configuration information to the communication device.

[0081] The communication device may be a network element device in the core network, such as a UDM (Unified Data Management) network element. The execution status configuration request is a request or command for instructing the communication device to configure the configuration execution status of the eUICC. The configuration execution status may be a status indicating whether the eUICC has remote configuration information to be executed. This status may be managed using a status identifier. For example, when the eUICC has remote configuration information to be executed, the corresponding status may be configured based on the status identifier. For example, the eUICC may be configured to have remote configuration information to be executed. When the eUICC does not have remote configuration information to be executed, the eUICC may be configured to have no remote configuration information to be executed based on the status identifier. This allows the status identifier, i.e., the configuration execution status, to quickly determine whether the eUICC has remote configuration information to be executed.

[0082] In this embodiment, after the remote configuration management platform generates remote configuration information for the eUICC based on the above steps, it can send an execution status configuration request for the remote configuration information to a communication device in the core network, such as a UDM, so that the communication device can set the configuration execution status of the corresponding eUICC according to the execution status configuration request. Then, when the communication device receives the network registration request sent by the terminal and authentication is passed, it can return a registration acceptance message carrying the remote configuration information to the terminal based on the configuration execution status of the eUICC, and cause the terminal to send the remote configuration information to the eUICC via the device-card interface, thereby realizing remote configuration of the eUICC.

[0083] In one embodiment, Figure 4 As shown, the above method may further include:

[0084] Step 402: Receive the operation execution result.

[0085] The "operation execution result" is the result of the eUICC executing the corresponding operation based on the remote configuration information. It is used to indicate the success or failure of the eUICC's execution of the remote configuration information. Specifically, after receiving the remote configuration information, the eUICC can perform the corresponding operation according to the instructions in the remote configuration information to obtain the operation execution result, and return the operation execution result to the remote configuration management platform, which can then receive the operation execution result.

[0086] Step 404: Send a request for updating the configuration execution status to the communication device according to the operation execution result.

[0087] Specifically, the remote configuration management platform may also send a configuration execution status update request to the communication device based on the received operation execution result, so that the communication device can update the configuration execution status of the eUICC based on the update request. For example, when the operation execution result received by the remote configuration management platform indicates that the eUICC successfully executed the remote configuration information, the remote configuration management platform may send a configuration execution status update request to the communication device, so that the communication device can update the configuration execution status of the eUICC, such as updating the eUICC to a state where no remote configuration information to be executed exists, or updating the eUICC to a state where the remote configuration information has been executed.

[0088] In one embodiment, after receiving the operation execution result, the remote configuration management platform may also send an EIS (eUICC Information Set) information update request to the SM-SR, so that the SM-SR can update the relevant information of the corresponding eUICC. For example, it can update a series of information such as the eUICC version, available storage space, and the profile list and status on the card to achieve timely update of EIS information.

[0089] In this embodiment, the remote configuration management platform generates remote configuration information for the eUICC based on a received remote configuration request for the eUICC, and provides a service configuration interface with the UDM. Direct connection with the UDM or indirect management by the CRM system can be adopted. The RPM status flag (i.e., configuration execution status) of the corresponding eUICC on the UDM is managed through the service configuration interface. When the terminal is powered on or periodically updated, the UDM can promptly notify the eUICC to obtain the profile or instruction from the SM-DP based on the RPM status flag of the eUICC, thereby triggering the download and management of the IoT eUICC profile.

[0090] In one embodiment, Figure 5 As shown, the present application also provides a remote configuration method, which is described by taking the application of the method to a communication device as an example, and includes the following steps:

[0091] Step 502: When a network registration request sent by a terminal is received and authentication is passed, it is determined whether the eUICC corresponding to the terminal has remote configuration information to be executed.

[0092] The communication device may be a network device in the core network, such as a UDM network element, an AMF (Access and Mobility Management Function) network element, etc. Typically, when a terminal is powered on or periodically updated, it will register with the network device, i.e., initiate a network registration request to the network device. The network device then performs registration procedures such as authentication and key negotiation with the terminal based on the terminal's network registration request. Typically, after the network device successfully authenticates the terminal's network registration request, it may return a REGISTRATION ACCEPT message to the terminal.

[0093] In this embodiment, to implement remote configuration of the eUICC, when the communication device receives a network registration request from a terminal and authentication is successful, it can first determine whether the eUICC corresponding to the terminal has pending remote configuration information, and then remotely configure the eUICC based on subsequent steps. Specifically, the remote configuration information can be relevant information used for remote management of the eUICC in the Internet of Things.

[0094] Step 504: When it is determined that the eUICC corresponding to the terminal has remote configuration information to be executed, a registration acceptance message carrying the remote configuration information is returned to the terminal.

[0095] Specifically, when the communication device determines that the eUICC corresponding to the terminal has remote configuration information to be executed, it can return a registration acceptance message carrying the remote configuration information to the terminal. That is, the corresponding remote configuration information is carried in the registration acceptance message returned to the terminal, so that the terminal can send the remote configuration information to the eUICC through the machine-card interface instruction, and perform corresponding operations according to the remote configuration information, thereby realizing remote configuration of the eUICC.

[0096] In one embodiment, before determining in step 502 whether the eUICC corresponding to the terminal has remote configuration information to be executed, the method may further include: receiving an execution state configuration request carrying remote configuration information for the eUICC from the remote configuration management platform; and configuring the configuration execution state of the eUICC according to the execution state configuration request.

[0097] The execution status configuration request may be a request or command for instructing the communication device to configure the configuration execution status of the eUICC. The configuration execution status may be a status for configuring whether the eUICC has remote configuration information to be executed, which may be managed by a status identifier. For example, when the eUICC has remote configuration information to be executed, its corresponding status may be configured based on the status identifier, such as the status in which the eUICC has remote configuration information to be executed. When the eUICC does not have remote configuration information to be executed, the status in which the eUICC does not have remote configuration information to be executed may be configured based on the status identifier. This allows the communication device to quickly determine whether the eUICC has remote configuration information to be executed through the status identifier, i.e., the configuration execution status. Specifically, the communication device may receive an execution status configuration request carrying remote configuration information for the eUICC sent by the remote configuration management platform, and configure the configuration execution status of the eUICC according to the execution status configuration request.

[0098] In step 502, determining whether the eUICC corresponding to the terminal has remote configuration information to be executed may specifically include: identifying a configuration execution state of the eUICC corresponding to the terminal; when the configuration execution state is identified as a first state, determining that the eUICC corresponding to the terminal has remote configuration information to be executed; when the configuration execution state is identified as a second state, determining that the eUICC corresponding to the terminal does not have remote configuration information to be executed.

[0099] The first state and the second state may be states based on whether the eUICC has remote configuration information to be executed, which is pre-configured based on the configuration execution state. Specifically, the first state may be a state configured when the eUICC has remote configuration information to be executed, and the second state may be a state configured when the eUICC does not have remote configuration information to be executed. Both the first state and the second state may be implemented based on a state identifier.

[0100] Therefore, in this embodiment, the communication device can identify the configuration execution state of the eUICC corresponding to the terminal. When the configuration execution state is identified as the first state, it can be determined that the eUICC corresponding to the terminal has remote configuration information to be executed, and the corresponding remote configuration information to be executed is carried in the registration acceptance message returned to the terminal to implement remote configuration of the eUICC.

[0101] When the communication device identifies that the configuration execution state is the second state, it can be determined that there is no remote configuration information to be executed on the eUICC corresponding to the terminal. Since there is no remote configuration information to be executed on the eUICC corresponding to the terminal at this time, the registration acceptance message can be directly returned to the terminal without carrying the remote configuration information.

[0102] In one embodiment, the communication device may also receive a configuration execution status update request sent by the remote configuration management platform, and update the configuration execution status according to the update request. The update request may be sent by the remote configuration management platform based on an execution operation result returned by the eUICC, where the execution operation result is the result of the eUICC performing an operation on the remote configuration information, such as a successful execution result or a failed execution result.

[0103] For example, when the operation execution result received by the remote configuration management platform is a result that the eUICC successfully executed the remote configuration information, a configuration execution status update request may be sent to the communication device. The communication device may then update the configuration execution status of the eUICC, such as updating it to a state where there is no remote configuration information to be executed on the eUICC, or updating it to a state where the remote configuration information has been executed, thereby achieving real-time update of the configuration execution status of the eUICC.

[0104] It should be understood that although Figure 1-Figure 5 The steps in the flowchart are shown in sequence as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of these steps, and these steps can be executed in other orders. In addition, Figure 1-Figure 5 At least part of the steps may include multiple steps or multiple stages. These steps or stages are not necessarily performed at the same time, but can be performed at different times. The order of execution of these steps or stages is not necessarily one by one, but can be performed in turn or alternately with other steps or at least part of the steps or stages in other steps.

[0105] In one embodiment, Figure 6 As shown, the present application also provides an embedded universal integrated circuit card, which specifically includes an information receiving module 602, an operation execution module 604 and a result sending module 606, wherein:

[0106] The information receiving module 602 is configured to receive remote configuration information sent by the terminal through the machine-card interface, where the remote configuration information is carried in a registration acceptance message received when the terminal completes network registration;

[0107] The operation execution module 604 is configured to execute the operation according to the remote configuration information and obtain the operation execution result;

[0108] The result sending module 606 is configured to return the operation execution result to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution state of the eUICC according to the operation execution result.

[0109] In one embodiment, the operation execution module can also be configured to perform: identifying the operation type of the remote configuration information; when the operation type is identified as the operation type of the contract data, establishing a secure channel with the remote configuration management platform; and obtaining the contract data corresponding to the remote configuration information through the secure channel.

[0110] In one embodiment, the operation execution module may be further configured to execute: when it is identified that the operation type is an instruction operation type, execute the instruction in the remote configuration information.

[0111] For specific restrictions on embedded universal integrated circuit cards, please refer to the above Figure 1 、 Figure 2 The limitations of the remote configuration method shown are not further elaborated here. Each module in the above-mentioned embedded universal integrated circuit card can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in the computer device in software form, so that the processor can call and execute the corresponding operations of each of the above modules.

[0112] In one embodiment, Figure 7 As shown, the present application also provides a remote configuration management platform, which specifically includes a data receiving module 702, an information generating module 704 and a data sending module 706, wherein:

[0113] The data receiving module 702 is configured to receive a remote configuration request from a service system for the eUICC;

[0114] an information generation module 704, configured to generate remote configuration information for the eUICC according to the remote configuration request;

[0115] The data sending module 706 is configured to execute sending an execution status configuration request carrying the remote configuration information to the communication device, so that when the communication device receives the network registration request sent by the terminal and authentication is passed, it returns a registration acceptance message carrying the remote configuration information to the terminal, and causes the terminal to send the remote configuration information to the eUICC through the device-card interface. The execution status configuration request is used to instruct the communication device to configure the configuration execution status of the eUICC.

[0116] In one embodiment, the data receiving module 702 may be further configured to: receive an operation execution result, where the operation execution result is a result of the eUICC performing an operation according to the remote configuration information; and the data sending module 706 may be further configured to: send, based on the operation execution result, a request for updating the configuration execution status to the communication device, so that the communication device updates the eUICC configuration execution status according to the update request.

[0117] For the specific limitations of the remote configuration management platform, please refer to the above Figure 3 、 Figure 4 The limitations of the remote configuration method shown are not further elaborated here. Each module in the remote configuration management platform described above can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the modules described above can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in a computer device in software form, so that the processor can call and execute the operations corresponding to each of the modules described above.

[0118] In one embodiment, Figure 8 As shown, the present application also provides a communication device, which may specifically include a determination module 802 and a message sending module 804, wherein:

[0119] The determination module 802 is configured to, when a network registration request sent by a terminal is received and authentication is passed, determine whether an eUICC corresponding to the terminal has remote configuration information to be executed;

[0120] The message sending module 804 is configured to, when it is determined that the eUICC corresponding to the terminal has remote configuration information to be executed, return a registration acceptance message carrying the remote configuration information to the terminal, so that the terminal sends the remote configuration information to the eUICC through a device-card interface instruction and performs an operation based on the remote configuration information.

[0121] In one embodiment, the communication device may further include: a receiving module configured to receive an execution state configuration request sent by the remote configuration management platform and carrying remote configuration information for the eUICC; a processing module configured to configure a configuration execution state of the eUICC according to the execution state configuration request; and a determining module further configured to: identify a configuration execution state of the eUICC corresponding to the terminal; when identifying that the configuration execution state is a first state, determine that the eUICC corresponding to the terminal has remote configuration information to be executed; and when identifying that the configuration execution state is a second state, determine that the eUICC corresponding to the terminal does not have remote configuration information to be executed.

[0122] In one embodiment, the receiving module is further configured to: receive a request for updating the configuration execution status sent by the remote configuration management platform, where the update request is sent by the remote configuration management platform based on an execution operation result, where the execution operation result is a result of the eUICC performing an operation on the remote configuration information; and the processing module is further configured to: update the configuration execution status based on the update request.

[0123] For specific limitations on communication equipment, please refer to the above Figure 5 The limitations of the remote configuration method shown are not further described here. Each module in the above-mentioned communication device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0124] In one embodiment, Figure 9 As shown, the present application also provides a remote configuration system, which may specifically include the following Figure 6 The embedded universal integrated circuit card 902 shown in FIG. Figure 7 The remote configuration management platform 904 shown and Figure 8 The communication device 906 is shown. The remote configuration management platform 904 in this embodiment can be implemented based on the SM-DP, and the communication device 906 can include a UDM network element and an AMF network element. The eUICC 902 is loaded into the terminal device, which also includes a modem (MODEM, also known as a baseband modem, used to demodulate, descramble, despread, and decode wireless signals in the mobile network, and transmit the final decoded digital signal to the upper layer system for processing).

[0125] Specifically, the SM-DP may have an RSM function, which receives a remote configuration request for the eUICC and generates an RPM instruction, and caches the RPM instruction and corresponding event identifier (event ID) for the eUICC; and provides a service configuration interface with the UDM. It can be directly connected to the UDM or indirectly managed by the CRM system. The RPM status flag (i.e., configuration execution status) of the corresponding eUICC on the UDM is managed through the service configuration interface. When the terminal is powered on or periodically updated, the UDM can promptly notify the eUICC to obtain the profile or instruction from the SM-DP based on the RPM status flag of the eUICC, thereby triggering the download and management of the IoT eUICC profile.

[0126] The UDM supports setting and clearing the RPM state and provides a management interface with the SM-DP. When the SM-DP notifies the eUICC that an RPM command is pending, the UDM sets the eUICC's RPM state. When the command corresponding to the event ID is executed, the SM-DP notifies the UDM to reset the flag, thereby enabling control over the RPM state.

[0127] The AMF network element supports the RPM Indication information element (IE) in the REGISTRATION ACCEPT message. When the terminal registration is completed, the AMF can send an MM message REGISTRATION ACCPET to the terminal with RPM Indication, which sends the eUICC RPM instruction request (i.e., remote configuration information for the eUICC) to the terminal, so that the terminal can promptly notify the eUICC to obtain the profile or instruction from the SM-DP, thereby triggering the download and management of the IoT eUICC profile.

[0128] The embedded universal integrated circuit card (eUICC) is set on the terminal and has an RSB (Remote Service Business) module, which can receive and process data packets sent by the terminal via ENVELOPE (SMS-PP Data Download) (i.e., remote configuration information for the eUICC), and identify and execute the remote configuration information to achieve remote configuration management of the eUICC.

[0129] In one embodiment, Figure 10 As shown, the following combination Figure 9 The system architecture diagram further illustrates the remote configuration method of the present application, which may specifically include the following steps:

[0130] Step 1002: The SM-DP receives a remote configuration request for the eUICC.

[0131] Specifically, the SM-DP receives a remote configuration request for the eUICC from a user or other service system, and the request may carry an identifier of the corresponding eUICC.

[0132] Step 1004: The SM-DP generates remote configuration information for the eUICC based on the remote configuration request.

[0133] Specifically, the RSM module in the SM-DP can generate an instruction file (such as an RPM instruction) for the eUICC based on the remote configuration request and a corresponding event record (event ID, i.e., an RPM instruction identifier, which can be associated with the eUICC identifier, so that the RPM instruction is associated with the eUICC).

[0134] Step 1006: The SM-DP sends an execution state configuration request carrying remote configuration information to the UDM.

[0135] Request to set the RPM status bit corresponding to the IMSI (i.e., the eUICC identifier), and provide the event ID, operation type, and instruction set (less than 140 octets).

[0136] Step 1008: The UDM configures the configuration execution state of the eUICC according to the execution state configuration request.

[0137] That is, the UDM configures the RPM status flag of the eUICC to a state with remote configuration information to be executed.

[0138] Step 1010: The terminal sends a network registration request to the AMF.

[0139] Specifically, when the terminal is powered on or updated periodically, it sends a network registration request to the AMF via the modem MODEM.

[0140] In step 1012, the AMF obtains the user's subscription data from the UDM and performs registration processes such as authentication and key negotiation with the terminal.

[0141] Specifically, the user subscription data may include an RPM status identifier for the eUICC configured by the UDM.

[0142] Step 1014: When the authentication is successful, the AMF returns a registration acceptance message to the terminal.

[0143] The AMF determines whether the eUICC corresponding to the terminal has remote configuration information to be executed.

[0144] Specifically, the AMF can determine whether there is remote configuration information to be executed on the eUICC based on the RPM status identifier obtained above for the eUICC. When it is determined that there is remote configuration information to be executed on the eUICC, the AMF returns a registration acceptance message carrying the remote configuration information to the terminal. The registration acceptance message carries an RPM Indication information element (IE), which carries the remote configuration information, and places a secured packet encapsulating the event ID, operation type, and instruction set (if any) in a container, and sets the container's protocol identifier to SIM data download.

[0145] Step 1016: After receiving the registration acceptance message, the terminal determines whether the message carries remote configuration information.

[0146] Specifically, the terminal identifies whether the registration accept message carries the RPM Indication information unit, and executes step 1018 if it is identified that the message carries the RPM Indication information unit.

[0147] Step 1018: The terminal sends the data in the container to the eUICC through the device-card interface.

[0148] Specifically, the terminal transmits the data in the corresponding container to the eUICC through the machine-card interface instruction ENVELOPE (SMS-PP DOWNLOAD).

[0149] Step 1020: The eUICC identifies the remote configuration information.

[0150] Specifically, the eUICC receives data sent by the terminal through the device-card interface, identifies whether it contains remote configuration information, and passes it to the RSB module for processing.

[0151] Step 1022: The RSB module executes an operation according to the remote configuration information and obtains an operation execution result.

[0152] Specifically, the RSB module can identify the operation type of the remote configuration information. When it is identified that the operation type is the contract data operation type, it establishes a secure channel with the remote configuration management platform, obtains the contract data corresponding to the remote configuration information through the secure channel, and determines the corresponding operation execution result, such as the result of a successful download or the result of a failed download. When it is identified that the operation type is the instruction operation type, it executes the instruction in the remote configuration information and obtains the corresponding execution result, such as the result of a successful instruction execution or the result of a failed instruction execution.

[0153] Step 1024: The RSB module feeds back the operation execution result corresponding to the remote configuration information to the SM-DP.

[0154] Step 1026: The SM-DP sends an EIS information update request to the SM-SR.

[0155] Specifically, the SM-DP can send an EIS information update request to the SM-SR, so that the SM-SR can update the relevant information of the corresponding eUICC. For example, it can update a series of information such as the eUICC version, available storage space, profile list and status on the card, so as to achieve timely update of EIS information.

[0156] In step 1028, the RSM module in the SM-DP may also initiate an update request for the configuration execution status to the UDM.

[0157] Since the RPM command of the eUICC has been executed, the SM-DP can request the UDM to update the RPM command identifier to avoid the RPM command being executed again the next time the terminal registers.

[0158] Step 1030: The UDM updates the RPM instruction identifier.

[0159] Specifically, for an executed RPM instruction, the UDM may directly clear the corresponding RPM instruction identifier, or may modify the status of the RPM instruction, such as modifying the status of the RPM instruction to executed, thereby preventing the RPM instruction from being repeatedly executed.

[0160] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above method are implemented.

[0161] An embodiment of the present application also provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute the steps of the above-described method.

[0162] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0163] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0164] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that a person skilled in the art could make various modifications and improvements without departing from the spirit of the present application, all of which fall within the scope of protection of the present application. Therefore, the scope of protection of the present patent application shall be determined by the appended claims.

Claims

1. A remote configuration method, characterized in that: The method is applied to an embedded universal integrated circuit card (eUICC), and the method includes: Receiving remote configuration information sent by the terminal through the device-card interface, the remote configuration information being carried in a registration acceptance message received by the terminal when completing network registration; the remote configuration information being operation information for instructing the eUICC in the Internet of Things to perform remote configuration, the remote configuration information including an operation type; Execute an operation according to the remote configuration information to obtain an operation execution result; Returning the operation execution result to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution status of the eUICC based on the operation execution result; the configuration execution status includes whether the eUICC has remote configuration information to be executed, and the configuration execution status is managed by a status flag; The performing of an operation according to the remote configuration information includes: identifying an operation type of the remote configuration information; and when the operation type is identified as an instruction operation type, and the remote configuration information further includes an instruction that needs to be executed by the eUICC, executing the instruction in the remote configuration information.

2. The method according to claim 1, characterized in that The method further comprises: When identifying that the operation type is a contract data operation type, establishing a secure channel with the remote configuration management platform; Acquire the contract data corresponding to the remote configuration information through the secure channel.

3. A remote configuration method, characterized in that: The method is applied to a remote configuration management platform, and includes: receiving a remote configuration request for the eUICC; generating remote configuration information for the eUICC according to the remote configuration request; wherein the remote configuration information is operation information for instructing the eUICC in the Internet of Things to perform remote configuration; sending an execution status configuration request carrying the remote configuration information to the communication device, so that upon receiving the network registration request sent by the terminal and passing authentication, the communication device returns a registration acceptance message carrying the remote configuration information to the terminal, and causes the terminal to send the remote configuration information to the eUICC via the device-to-card interface. The remote configuration information includes an operation type, the remote configuration information is used to instruct the eUICC to identify the operation type of the remote configuration information. When the operation type is identified as an instruction operation type, the remote configuration information also includes an instruction to be executed by the eUICC, and the instruction in the remote configuration information is executed to obtain an operation execution result. The execution status configuration request is used to instruct the communication device to configure a configuration execution status of the eUICC. The configuration execution status includes whether the eUICC has remote configuration information to be executed. The configuration execution status is managed by a status identifier.

4. The method according to claim 3, characterized in that The method further comprises: receiving an operation execution result, where the operation execution result is a result of the eUICC performing the operation according to the remote configuration information; and sending, according to the operation execution result, an update request for the configuration execution status to the communication device, so that the communication device updates the configuration execution status of the eUICC according to the update request.

5. A remote configuration method, characterized in that: The method is applied to a communication device, and the method includes: Upon receiving a network registration request from a terminal and passing authentication, determining whether the eUICC has pending remote configuration information based on the configuration execution status of the eUICC corresponding to the terminal; the remote configuration information is operation information for instructing the eUICC in the Internet of Things to perform remote configuration; the configuration execution status includes whether the eUICC has pending remote configuration information, and the configuration execution status is managed by a status indicator; When it is determined that the eUICC corresponding to the terminal has remote configuration information to be executed, a registration acceptance message carrying the remote configuration information is returned to the terminal, so that the terminal sends the remote configuration information to the eUICC via a device-card interface instruction, wherein the remote configuration information includes an operation type, and the remote configuration information is used to instruct the eUICC to identify the operation type of the remote configuration information; when the operation type is identified as an instruction operation type, and the remote configuration information also includes an instruction to be executed by the eUICC, the instruction in the remote configuration information is executed, and an operation execution result is obtained, and the operation execution result is returned to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution state of the eUICC based on the operation execution result.

6. The method according to claim 5, characterized in that The method further comprises: receiving an execution state configuration request carrying remote configuration information for the eUICC, sent by the remote configuration management platform; configuring a configuration execution state of the eUICC according to the execution state configuration request; The determining, based on the configuration execution status of the eUICC corresponding to the terminal, whether the eUICC has remote configuration information to be executed includes: Identifying a configuration execution status of an eUICC corresponding to the terminal; When identifying that the configuration execution state is the first state, determining that the eUICC corresponding to the terminal has remote configuration information to be executed; When it is identified that the configuration execution state is the second state, it is determined that the eUICC corresponding to the terminal does not have remote configuration information to be executed.

7. The method according to claim 6, characterized in that The method further comprises: receiving a request for updating the configuration execution status sent by the remote configuration management platform, where the update request is sent by the remote configuration management platform according to an execution operation result, where the execution operation result is a result of the eUICC performing an operation on the remote configuration information; The configuration execution status is updated according to the update request.

8. An embedded universal integrated circuit card, characterized in that: include: an information receiving module configured to receive remote configuration information sent by a terminal via a device-card interface, the remote configuration information being carried in a registration acceptance message received by the terminal upon completion of network registration; the remote configuration information being operation information for instructing an eUICC in the Internet of Things to perform remote configuration, the remote configuration information including an operation type; an operation execution module, configured to execute an operation according to the remote configuration information and obtain an operation execution result; a result sending module configured to return the operation execution result to the remote configuration management platform, so that the remote configuration management platform controls the configuration execution status of the eUICC based on the operation execution result; the configuration execution status includes whether the eUICC has remote configuration information to be executed, and the configuration execution status is managed by a status flag; The operation execution module is further configured to: identify an operation type of the remote configuration information; and when the operation type is identified as an instruction operation type, and the remote configuration information also includes an instruction that needs to be executed by the eUICC, execute the instruction in the remote configuration information.

9. The embedded universal integrated circuit card according to claim 8, characterized in that: The operation execution module is configured to execute: When identifying that the operation type is a contract data operation type, establishing a secure channel with the remote configuration management platform; Acquire the contract data corresponding to the remote configuration information through the secure channel.

10. A remote configuration management platform, characterized in that: include: a data receiving module configured to receive a remote configuration request from a service system for the eUICC; an information generation module configured to generate remote configuration information for the eUICC based on the remote configuration request; the remote configuration information is operation information for instructing the eUICC in the Internet of Things to perform remote configuration; A data sending module is configured to execute sending an execution status configuration request carrying the remote configuration information to a communication device, so that upon receiving a network registration request sent by a terminal and passing authentication, the communication device returns a registration acceptance message carrying the remote configuration information to the terminal, and causes the terminal to send the remote configuration information to the eUICC via a device-to-card interface. The remote configuration information includes an operation type, and the remote configuration information is used to instruct the eUICC to identify the operation type of the remote configuration information. When the operation type is identified as an instruction operation type, and the remote configuration information also includes an instruction to be executed by the eUICC, the eUICC executes the instruction in the remote configuration information to obtain an operation execution result. The execution status configuration request is used to instruct the communication device to configure a configuration execution status of the eUICC. The configuration execution status includes whether the eUICC has remote configuration information to be executed. The configuration execution status is managed by a status identifier.

11. The remote configuration management platform according to claim 10, characterized in that: The data receiving module is further configured to: receive an operation execution result, where the operation execution result is a result of the eUICC performing an operation according to the remote configuration information; The data sending module is further configured to execute: sending an update request for the configuration execution status to the communication device according to the operation execution result, so that the communication device updates the eUICC configuration execution status according to the update request.

12. A communication device, characterized in that: include: a determination module configured to, upon receiving a network registration request sent by a terminal and passing authentication, determine, based on a configuration execution status of an eUICC corresponding to the terminal, whether the eUICC has pending remote configuration information; the remote configuration information being operation information for instructing the eUICC in the Internet of Things to perform remote configuration; The configuration execution status includes whether the eUICC has remote configuration information to be executed, and the configuration execution status is managed by a status identifier; a message sending module configured to, upon determining that the eUICC corresponding to the terminal has remote configuration information to be executed, return a registration acceptance message carrying the remote configuration information to the terminal, so that the terminal sends the remote configuration information to the eUICC via a machine-card interface instruction, wherein the remote configuration information includes an operation type, the remote configuration information being used to instruct the eUICC to identify the operation type of the remote configuration information; and when the operation type is identified as an instruction operation type, and the remote configuration information also includes an instruction to be executed by the eUICC, execute the instruction in the remote configuration information, obtain an operation execution result, and return the operation execution result to a remote configuration management platform, so that the remote configuration management platform controls the configuration execution state of the eUICC based on the operation execution result.

13. The communication device according to claim 12, wherein: The device further comprises: a receiving module configured to receive an execution state configuration request carrying remote configuration information for the eUICC, sent by the remote configuration management platform; a processing module configured to configure a configuration execution state of the eUICC according to the execution state configuration request; The judgment module is further configured to execute: Identifying a configuration execution status of an eUICC corresponding to the terminal; When identifying that the configuration execution state is the first state, determining that the eUICC corresponding to the terminal has remote configuration information to be executed; When it is identified that the configuration execution state is the second state, it is determined that the eUICC corresponding to the terminal does not have remote configuration information to be executed.

14. The communication device according to claim 13, wherein: The receiving module is further configured to: receive a request for updating the configuration execution status sent by the remote configuration management platform, where the update request is sent by the remote configuration management platform according to an execution operation result, where the execution operation result is a result of the eUICC performing an operation on the remote configuration information; The processing module is further configured to execute: updating the configuration execution status according to the update request.

15. A remote configuration system, characterized in that: It comprises the embedded universal integrated circuit card according to claim 8 or 9, the remote configuration management platform according to claim 10 or 11, and the communication device according to any one of claims 12 to 14.

16. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

17. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images