Application processing method and system under SIM card multi-channel authentication

Abstract

The present invention relates to the field of communication technology, and specifically discloses an application processing method and system under multi-channel authentication of a SIM card. When a third-party service APP is connected, a service authentication is performed on the SIM card through a multi-channel security capability platform, and an authentication result is generated. In this way, a secure channel mode can be established through a gateway and a SIM card according to the authentication result, so that the installation of a security domain SSD to which the card application belongs and the injection of a key are realized, and then the service APP is installed according to the SIM card application of the SIM card. The present invention simplifies the process of pre-setting the SSD, improves data security and operation convenience, and does not need to use a method in which the SSD is pre-set on the SIM card and the service key is synchronized with the card business, thereby achieving the effect of not requiring the card business to pre-set the SSD while ensuring service security, reducing the risk of exposure of the initial key and the dispersion rule, and making it more convenient for the access and use of the service APP side.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method and system for processing applications under multi-channel authentication of a SIM card. Background Art

[0002] With the issuance of 5G super SIM cards by operators, more and more businesses are based on SIM card security modules, such as digital identity, digital currency, industry 5G private network zero-trust products, digital asset wallets, etc., all of which use SIM cards as security modules, through APP (Application) / H5 (HTML5, a markup language for building web pages and Web applications) / SDK (Software Development Kit) and other methods to achieve key certificate storage, core key management and other functions of the business.

[0003] Due to security considerations, as the SIM card owner, that is, the operator, the access and operation permissions under the main security domain ISD (Investor-State Dispute Settlement) will not be opened, and all third-party business parties are connected in a delegated authorization mode. This leads to the need for many third-party business parties to pre-set the auxiliary security domain SSD (Supplementary Security Domain) and initial keys before docking, and negotiate the key dispersion rules with the operator, adopting a three-party injection mode (operator, business party, SIM card manufacturer). The operator also needs to pre-set the APP access rule file in the SIM card. Specifically, when docking with the security module application based on the SIM card, it is necessary to use the delegated authorization mode (DM mode, a flexible and secure permission management method, which implements fine management of user access control and resource protection through roles and tokens, etc.), that is, the third-party business party needs to provide the SSD root key and key dispersion algorithm to the operator, and the operator will hand it over to the SIM card manufacturer to pre-set the SSD on the SIM card, and then dock, issue the card and test it. This is extremely inconvenient for both the business party and the operator, and it is also easy to increase the risk of initial key and dispersion rules being exposed. Summary of the invention

[0004] The present invention is intended to provide a method and system for processing applications under multi-channel authentication of a SIM card to solve the deficiencies in the prior art. The technical problem to be solved by the present invention is achieved through the following technical solutions.

[0005] The present invention provides a method for processing applications under multi-channel authentication of a SIM card, the method comprising:

[0006] The business APP sends a SIM card application security request to the multi-channel security capability platform;

[0007] The multi-channel security capability platform performs service authentication on the SIM card according to the SIM card application security request and generates an authentication result;

[0008] The multi-channel security capability platform establishes a secure channel mode with the SIM card based on the authentication results, and sends the SSD download and installation instructions and key data to the SIM card;

[0009] The SIM card installs the security domain to which the card application belongs according to the SSD download and installation instruction, and injects the key according to the key data, and returns the SSD installation result to the multi-channel security capability platform after completion;

[0010] The multi-channel security capability platform generates a feedback result according to the SSD installation result and sends it to the business APP, and the business APP installs the SIM card application of the SIM card according to the feedback result.

[0011] In an optional implementation, the step of the multi-channel security capability platform performing service authentication on the SIM card according to the SIM card application security request and generating an authentication result includes:

[0012] The multi-channel security capability platform obtains corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information;

[0013] The multi-channel security capability platform determines whether the authentication information is the same as the preset information;

[0014] If the authentication information is the same as the preset information, an authentication result indicating successful authentication is generated.

[0015] In an optional implementation, the step of the multi-channel security capability platform establishing a secure channel mode with the SIM card according to the authentication result includes:

[0016] The multi-channel security capability platform encapsulates the data message and encrypts the data message to obtain an encrypted data message;

[0017] The multi-channel security capability platform sends the encrypted data message to the SIM card, and the SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

[0018] In an optional implementation manner, after the step of the SIM card verifying the encrypted data message, the step further includes:

[0019] After the SIM card verification is completed, an https link is pulled up to establish a secure channel mode based on https data interaction with the multi-channel security capability platform.

[0020] In an optional implementation, the multi-channel security capability platform generates a feedback result according to the SSD installation result and sends it to the business APP, and the business APP installs the SIM card application of the SIM card according to the feedback result, including:

[0021] The multi-channel security capability platform generates feedback results based on the SSD installation results, where the feedback results include SSD channel verification instructions and SIM card application write instruction flow;

[0022] The multi-channel security capability platform sends the SSD channel verification instruction and the SIM card application write instruction stream to the business APP;

[0023] The service APP verifies the SSD channel of the SIM card according to the SSD channel verification instruction. After the verification is successful, the service APP performs the machine card instruction writing operation on the SIM card according to the SIM card application writing instruction flow;

[0024] The SIM card generates a completion result according to the card writing operation of the machine card instruction, and sends the completion result to the business APP to complete the SIM card application installation process.

[0025] In an optional implementation, in the step of the multi-channel security capability platform establishing a secure channel mode with the SIM card according to the authentication result, the secure channel mode includes a data SMS secure channel mode, a BIP secure channel mode, and a machine-card secure channel mode.

[0026] In an optional implementation, the multi-channel security capability platform sends an SSD download and installation instruction to the SIM card in a data SMS security channel mode or a BIP security channel mode, and sends key data to the SIM card in a distributed injection manner;

[0027] The business APP installs, downloads, updates and initializes SIM card applications through the machine-card channel.

[0028] The present invention also provides an application processing system under SIM card multi-channel authentication, the system comprising: a business APP, a multi-channel security capability platform and a SIM card;

[0029] The service APP is used to send a SIM card application security request to the multi-channel security capability platform;

[0030] The multi-channel security capability platform is used to perform service authentication on the SIM card according to the SIM card application security request and generate an authentication result;

[0031] The multi-channel security capability platform is also used to establish a secure channel mode with the SIM card based on the authentication result, and send SSD download and installation instructions and key data to the SIM card;

[0032] The SIM card is used to install the security domain to which the card application belongs according to the SSD download and installation instruction, and to perform key injection according to the key data, and after completion, returns the SSD installation result to the multi-channel security capability platform;

[0033] The multi-channel security capability platform is also used to generate a feedback result based on the SSD installation result and send it to the business APP. The business APP is also used to install the SIM card application of the SIM card based on the feedback result.

[0034] In an optional implementation, the multi-channel security capability platform is used to obtain corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information;

[0035] The multi-channel security capability platform is also used to determine whether the authentication information is the same as the preset information;

[0036] If the authentication information is the same as the preset information, an authentication result indicating successful authentication is generated.

[0037] In an optional implementation, the multi-channel security capability platform is used to encapsulate the data message and encrypt the data message to obtain an encrypted data message;

[0038] The multi-channel security capability platform is also used to send the encrypted data message to the SIM card, and the SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

[0039] The embodiments of the present invention include the following advantages:

[0040] The application processing method and system under SIM card multi-channel authentication provided by the embodiment of the present invention, when docking with a third-party service APP, performs service authentication on the SIM card through a multi-channel security capability platform and generates an authentication result, so that a secure channel mode can be established with the SIM card according to the authentication result, and the installation of the SSD of the security domain to which the card application belongs and the injection of the key are realized, and then the service APP is installed according to the SIM card application of the SIM card. The present invention simplifies the SSD pre-setting process, improves data security and operation convenience, and does not need to use the method of pre-setting the SSD on the SIM card and synchronizing the service key with the card vendor, thereby achieving the effect of not requiring the card vendor to pre-set the SSD while ensuring service security, reducing the risk of exposure of the initial key and the dispersion rule, and making it more convenient for the access and use of the service APP side. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a flow chart of the steps of an embodiment of a method for processing an application under multi-channel authentication of a SIM card of the present invention;

[0042] Figure 2 The invention is a structural schematic diagram of an application processing system under multi-channel authentication of a SIM card according to an embodiment of the present invention. DETAILED DESCRIPTION

[0043] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0044] Please refer to Figure 1 , Figure 2 The present invention provides a method for processing applications under multi-channel authentication of a SIM card, the method comprising:

[0045] S1. The business APP sends a SIM card application security request to the multi-channel security capability platform;

[0046] S2. The multi-channel security capability platform performs service authentication on the SIM card according to the SIM card application security request and generates an authentication result;

[0047] S3. The multi-channel security capability platform establishes a secure channel mode with the SIM card based on the authentication result, and sends the SSD download and installation instructions and key data to the SIM card;

[0048] S4. The SIM card installs the security domain to which the card application belongs according to the SSD download and installation instruction, and injects the key according to the key data. After completion, the SSD installation result is returned to the multi-channel security capability platform;

[0049] S5. The multi-channel security capability platform generates a feedback result according to the SSD installation result and sends it to the business APP. The business APP installs the SIM card application of the SIM card according to the feedback result.

[0050] As described in the above steps S1-S5, the multi-channel security capability platform belongs to the operator module, and the operator module also includes a gateway and a SIM card. The multi-channel security capability platform has security authentication capabilities for use by third-party business APPs; the gateway provides basic service facilities for operators, and provides SMS access numbers and branch access; the third-party business APP is a business partner, and uses the SIM card as a security module to realize its own business; the SIM card is an operator SIM card, which has passed EAL4+ (inclusive) or above security certification, has the ability to resist physical attacks, supports multiple SSDs and multiple applications and other security spaces in the card, and provides security module capabilities; the key data is a business key. When the third-party service APP is connected, the present invention performs service authentication on the SIM card through the multi-channel security capability platform and generates an authentication result. In this way, a secure channel mode can be established through the gateway and the SIM card according to the authentication result to realize the installation of the SSD of the security domain to which the card application belongs and the injection of the key. Then the service APP is installed according to the SIM card application of the SIM card. Compared with the prior art, the present invention simplifies the SSD pre-installation process, improves data security and operation convenience, and does not need to use the method of pre-installing SSD on the SIM card and synchronizing the service key with the card vendor, but directly uses the multi-channel security capability platform (operator module) to install the SSD in the security domain to which the card application belongs. Connect to the business APP (third-party business platform), and the business APP initiates the installation / download of SSD and the injection of business keys through the call of the multi-channel security capability platform, so as to achieve the effect of not requiring the card manufacturer to pre-install SSD. That is, the multi-channel security capability platform sends SSD installation and business key injection in vain, avoiding the need to pre-install business keys and dispersion algorithm rules to SIM card manufacturers. This reduces the need to pass the initial business key to the SIM card manufacturer in the traditional way, thereby ensuring business security, reducing the risk of leakage of initial keys and dispersion rules, and making it more convenient for the access and use of the business APP side.

[0051] In one embodiment, the multi-channel security capability platform performs service authentication on the SIM card according to the SIM card application security request and generates a step S2 of an authentication result, including:

[0052] S21. The multi-channel security capability platform obtains corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information;

[0053] S22, the multi-channel security capability platform determines whether the authentication information is the same as the preset information;

[0054] S23. If the authentication information is the same as the preset information, generate an authentication result indicating successful authentication.

[0055] As described in the above steps S21-S23, the SIM card application identifier information can be used to verify the role of identifying and selecting specific applications. Through the SIM card application identifier information, terminal devices such as the multi-channel security capability platform and business APP can accurately find and operate specific applications on the SIM card. In addition, the SIM card application identifier information also involves data interaction between the SIM card and the multi-channel security capability platform and business APP, which is of great significance for maintaining the continuity and stability of communication. By verifying the APP installation package name, the list of downloadable card applications, and the business APP access ID information, it is ensured that only legitimate users can access the network, thereby protecting the security of the network and the privacy of users.‌

[0056] In one embodiment, step S3 of the multi-channel security capability platform establishing a security channel mode with the SIM card according to the authentication result includes:

[0057] S31. The multi-channel security capability platform encapsulates the data message and encrypts the data message to obtain an encrypted data message;

[0058] S32. The multi-channel security capability platform sends the encrypted data message to the SIM card. The SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

[0059] As described in the above steps S31-S32, the multi-channel security capability platform encapsulates the GSM 0348 format data SMS, uses encrypted messages, and completes the establishment of the security channel mode through data verification by the gateway and the SIM card.

[0060] In one embodiment, after the step S32 of the SIM card verifying the encrypted data message, the method further includes:

[0061] S321. After the SIM card verification is completed, pull up the https link and establish a secure channel mode based on https data interaction with the multi-channel security capability platform.

[0062] As described in step S321 above, a secure channel mode can also be established via a BIP (Bearer Independent Protocol) method. Specifically, the BIP secure channel mode is a concept in the field of communication technology, which involves the communication management between a SIM card (Subscriber Identity Module) and a user terminal (multi-channel security capability platform, business APP). The BIP secure channel mode state management method involves receiving and responding to commands and messages related to the BIP channel state to ensure effective management and maintenance of the channel. The method includes receiving a first channel state management command sent by a UICC (Universal Integrated Circuit Card), and then sending a channel state response message containing the current BIP channel state to the UICC. After sending the channel state response message, the method also stipulates that a channel state event download command containing the BIP channel state obtained in the current state provision cycle is sent to the UICC at intervals of a predetermined state provision cycle. This method aims to solve the problem of low efficiency in BIP channel maintenance and simplify the BIP channel status management process. In this embodiment, the multi-channel security capability platform first encapsulates the GSM0348 format data SMS, uses encrypted messages, and after data verification by the gateway and SIM card, pulls up the https link and establishes a secure channel mode based on the BIP method with the multi-channel security capability platform. Subsequently, data interaction can be completed through https.

[0063] In one embodiment, the multi-channel security capability platform generates a feedback result according to the SSD installation result and sends it to the service APP, and the service APP installs the SIM card application of the SIM card according to the feedback result. Step S5 includes:

[0064] S51, the multi-channel security capability platform generates a feedback result according to the SSD installation result, wherein the feedback result includes an SSD channel verification instruction and a SIM card application write instruction flow;

[0065] S52, the multi-channel security capability platform sends the SSD channel verification instruction and the SIM card application write instruction flow to the business APP;

[0066] S53, the service APP verifies the SSD channel of the SIM card according to the SSD channel verification instruction. After the verification is successful, the service APP performs a machine card instruction write operation on the SIM card according to the SIM card application write card instruction flow;

[0067] S54. The SIM card generates a completion result according to the card writing operation of the machine card instruction, and sends the completion result to the business APP to complete the SIM card application installation process.

[0068] As described in the above steps S51-S54, when the SIM card application is installed, the SIM card application is installed in the security domain SSD to which the card application belongs. When the business APP interacts with the SIM card, a key verification is required through the security domain SSD to which the card application belongs. This ensures that the SIM card application of the third-party business APP is secure and independent and will not be accessed by other APPs.

[0069] In one embodiment, in the step of establishing a secure channel mode with the SIM card according to the authentication result, the secure channel mode includes a data SMS secure channel mode, a BIP secure channel mode, and a machine-card secure channel mode.

[0070] The multi-channel security capability platform also includes a security authentication processing module for performing security authentication processing on the SIM card; it also includes an instruction encapsulation module for encapsulating and issuing the SIM card application write instruction flow and data SMS and determining the result of the SIM card returning a response message; it also includes a service authentication module for authenticating the access of a third-party service APP, including application AID, application data and initial key, dispersion algorithm, etc.

[0071] In one embodiment, the multi-channel security capability platform sends an SSD download and installation instruction to the SIM card via the gateway in the data SMS security channel mode or the BIP security channel mode, and sends key data to the SIM card in a decentralized injection manner, and the SIM card decentralized injects the key data.

[0072] The business APP installs, downloads, updates and initializes SIM card applications through the machine-card channel.

[0073] The present invention also provides an application processing system under SIM card multi-channel authentication, the system comprising: a service APP, a multi-channel security capability platform and a SIM card, the multi-channel security capability platform and the SIM card perform information exchange through a gateway;

[0074] The service APP is used to send a SIM card application security request to the multi-channel security capability platform;

[0075] The multi-channel security capability platform is used to perform service authentication on the SIM card according to the SIM card application security request and generate an authentication result;

[0076] The multi-channel security capability platform is also used to establish a secure channel mode with the SIM card based on the authentication result, and send SSD download and installation instructions and key data to the SIM card;

[0077] The SIM card is used to install the security domain to which the card application belongs according to the SSD download and installation instruction, and to perform key injection according to the key data, and after completion, returns the SSD installation result to the multi-channel security capability platform;

[0078] The multi-channel security capability platform is also used to generate a feedback result based on the SSD installation result and send it to the business APP. The business APP is also used to install the SIM card application of the SIM card based on the feedback result.

[0079] In one embodiment, the multi-channel security capability platform is used to obtain corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information;

[0080] The multi-channel security capability platform is also used to determine whether the authentication information is the same as the preset information;

[0081] If the authentication information is the same as the preset information, an authentication result indicating successful authentication is generated.

[0082] In one embodiment, the multi-channel security capability platform is used to encapsulate the data message and encrypt the data message to obtain an encrypted data message;

[0083] The multi-channel security capability platform is also used to send the encrypted data message to the SIM card, and the SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

[0084] It should be noted that the above detailed descriptions are exemplary and are intended to provide further explanation of the present application. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the art to which the present application belongs.

[0085] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should also be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0086] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein.

[0087] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or inherent to these processes, methods, products, or apparatuses.

[0088] For ease of description, spatially relative terms, such as "above", "above", "on the upper surface of", "above", etc., may be used herein to describe the spatial positional relationship between a device or feature and other devices or features as shown in the figure. It should be understood that spatially relative terms are intended to include different orientations of the device in use or operation in addition to the orientation described in the figure. For example, if the device in the accompanying drawings is inverted, the device described as "above other devices or structures" or "above other devices or structures" will be positioned as "below other devices or structures" or "below other devices or structures". Thus, the exemplary term "above" may include both "above" and "below". The device may also be positioned in other different ways, such as rotated 90 degrees or in other orientations, and the spatially relative descriptions used herein are interpreted accordingly.

[0089] In the above detailed description, reference is made to the accompanying drawings, which form a part of this document. In the accompanying drawings, similar symbols typically identify similar components unless the context indicates otherwise. The illustrated embodiments described in the detailed description, drawings, and claims are not meant to be limiting. Other embodiments may be used, and other changes may be made, without departing from the spirit or scope of the subject matter presented herein.

[0090] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for processing applications under multi-channel authentication of a SIM card, characterized in that: The method comprises: The business APP sends a SIM card application security request to the multi-channel security capability platform; The multi-channel security capability platform performs service authentication on the SIM card according to the SIM card application security request and generates an authentication result; The multi-channel security capability platform establishes a secure channel mode with the SIM card based on the authentication results, and sends the SSD download and installation instructions and key data to the SIM card; The SIM card installs the security domain to which the card application belongs according to the SSD download and installation instruction, and injects the key according to the key data, and returns the SSD installation result to the multi-channel security capability platform after completion; The multi-channel security capability platform generates a feedback result based on the SSD installation result and sends it to the business APP, and the business APP installs the SIM card application of the SIM card based on the feedback result; wherein, The multi-channel security capability platform obtains corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information; The multi-channel security capability platform determines whether the authentication information is the same as the preset information; If the authentication information is the same as the preset information, a successful authentication result is generated; The multi-channel security capability platform encapsulates the data message and encrypts the data message to obtain an encrypted data message; The multi-channel security capability platform sends the encrypted data message to the SIM card, and the SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

2. The SIM card multi-channel authentication application processing method according to claim 1, characterized in that: After the step of the SIM card verifying the encrypted data message, the method further comprises: After the SIM card verification is completed, an https link is pulled up to establish a secure channel mode based on https data interaction with the multi-channel security capability platform.

3. The method for processing applications under SIM card multi-channel authentication according to claim 1, characterized in that: The multi-channel security capability platform generates a feedback result according to the SSD installation result and sends it to the business APP, and the business APP installs the SIM card application of the SIM card according to the feedback result, including: The multi-channel security capability platform generates feedback results based on the SSD installation results, where the feedback results include SSD channel verification instructions and SIM card application write instruction flow; The multi-channel security capability platform sends the SSD channel verification instruction and the SIM card application write instruction stream to the business APP; The service APP verifies the SSD channel of the SIM card according to the SSD channel verification instruction. After the verification is successful, the service APP performs the machine card instruction writing operation on the SIM card according to the SIM card application writing instruction flow; The SIM card generates a completion result according to the card writing operation of the machine card instruction, and sends the completion result to the business APP to complete the SIM card application installation process.

4. The method for processing applications under SIM card multi-channel authentication according to claim 1, characterized in that: In the step of the multi-channel security capability platform establishing a secure channel mode with the SIM card according to the authentication result, the secure channel mode includes a data SMS secure channel mode, a BIP secure channel mode, and a machine-card secure channel mode.

5. The method for processing applications under SIM card multi-channel authentication according to claim 4, characterized in that: The multi-channel security capability platform sends an SSD download and installation instruction to the SIM card in a data SMS security channel mode or a BIP security channel mode, and sends key data to the SIM card in a distributed injection manner; The business APP installs, downloads, updates and initializes SIM card applications through the machine-card channel.

6. A SIM card multi-channel authentication application processing system, characterized in that: The system includes: a business APP, a multi-channel security capability platform and a SIM card; The service APP is used to send a SIM card application security request to the multi-channel security capability platform; The multi-channel security capability platform is used to perform service authentication on the SIM card according to the SIM card application security request and generate an authentication result; The multi-channel security capability platform is also used to establish a secure channel mode with the SIM card based on the authentication result, and send SSD download and installation instructions and key data to the SIM card; The SIM card is used to install the security domain to which the card application belongs according to the SSD download and installation instruction, and to perform key injection according to the key data, and after completion, returns the SSD installation result to the multi-channel security capability platform; The multi-channel security capability platform is also used to generate a feedback result based on the SSD installation result and send it to the business APP, and the business APP is also used to install the SIM card application of the SIM card based on the feedback result; wherein, The multi-channel security capability platform is used to obtain corresponding authentication information according to the SIM card application security request, wherein the authentication information includes SIM card application identifier information, APP installation package name, downloadable card application list, and service APP access ID information; The multi-channel security capability platform is also used to determine whether the authentication information is the same as the preset information; If the authentication information is the same as the preset information, a successful authentication result is generated; The multi-channel security capability platform is used to encapsulate data SMS and encrypt the data SMS to obtain encrypted data messages; The multi-channel security capability platform is also used to send the encrypted data message to the SIM card, and the SIM card verifies the encrypted data message. After the verification is completed, a secure channel mode for information interaction is established with the multi-channel security capability platform.

Images