Multi-application remote management system and method based on eSIM and terminal equipment

Abstract

The invention discloses a multi-application remote management system and method based on an eSIM and terminal equipment, the system comprises the terminal equipment and an eSIM platform, and the eSIM platform provides a configuration file corresponding to a Profile for an equipment body. The eSIM platform comprises an eSIM service provider and an MNO operator; the MNO operator is used for providing the corresponding Profile for completing the first operation for the eSIM service provider, and the eSIM service provider receives and pre-configures the corresponding Profile for the eSIM card to download and use. The industry application provider is used for providing the corresponding Profile for completing the ith operation for the eSIM service provider, and the eSIM service provider receives and pre-configures the corresponding Profile and waits for the eSIM card to download and use. According to the invention, a plurality of parallel logic channels are arranged in the eSIM card, and each channel can perform data instruction interaction of different industry applications, so that the operation of different industry applications is realized, and a more flexible application management mode and a more effective physical space utilization rate can be provided for terminal equipment providers and users.

Description

Technical Field

[0001] The present invention relates to the field of mobile communication technologies, and in particular to an eSIM-based multi-application remote management system, method and terminal device. Background Art

[0002] With the development of IoT applications in recent years, we can see more and more IoT terminal devices in our daily lives. However, these IoT terminal devices are difficult to manage in a unified manner due to their wide variety. At the same time, because IoT devices have different forms, the application data storage forms of various terminal devices also vary greatly.

[0003] At present, the application management of various IoT devices mainly includes the following two forms:

[0004] One is the offline application management form based on physical form: that is, the offline sales stores of IoT device manufacturers directly provide application management modules corresponding to IoT devices. For example: digital car key entities provided by automobile manufacturers, bank card entities provided by commercial banks, etc.

[0005] One is the traditional online remote application management form based on non-physical form: that is, after the service provider obtains the industry application data package in a secure manner through the business interface of each IoT device manufacturer, the industry application data package is remotely written to the terminal user's security device through the cellular network in the form of adding a new application Applet. For example: through the secure storage capacity of the SIM card in the user's mobile phone, the industry application data package is in the form of an application Applet, while keeping the user's original eSIM communication capability unchanged, a new security domain is created in the eSIM card, and the new application Applet is installed in the security domain to complete the purpose of remote installation and management of the new application.

[0006] In the above two approaches at this stage:

[0007] 1) Physical application management provided by offline stores is obviously a time-consuming, labor-intensive and inefficient form of management. It is also extremely unfriendly and inconvenient for end users. With the popularity and increase of IoT devices, managing these growing IoT devices in offline physical form will obviously cost a lot of management costs.

[0008] 2) Online remote application management based on non-physical form, although the application data package is securely stored in a digital form, and the application management has been provided in the form of remote management, which provides greater user-friendliness and also optimizes and improves the management cost of the application. However, this traditional remote application management involves cumbersome installation steps, and requires the provider of the industry application to pay attention to too many details, which makes the actual work difficult to carry out, such as: the creation of a new security domain, the replacement of the initial key of the security domain, the installation and instantiation of the application, the personalization of the application data, and other steps involved in the installation process. On the other hand, since the application exists in the operator Profile data structure of the eSIM card security carrier in the form of Applet and security domain, this implies that the use of industry applications will be limited to the operator Profile that is currently in an effective activation state. That is, the current industry application must coexist with the Profile configuration file of a specific network operator. Once the user logs off or abandons the number of the operator, other installed industry applications in this Profile configuration file will no longer be available.

[0009] The limitation of the current traditional online remote application management is that installing a new industry application into the eSIM card involves an overly cumbersome operation process. It is necessary to create a new security domain in the original Profile and then install the industry application based on the protection of the security domain. In addition to the complicated installation process, new industry applications also need to rely on the operator's Profile to be activated before they can be used. In other words, in order for the newly installed industry application to be used normally, it is necessary to ensure that the operator Profile containing the industry application must be activated. Once other new Profiles are enabled, the Profile containing the industry application will become disabled, thereby affecting the use of the industry application. By the same token, if the user chooses to change to a new communication number, that is, to change to a new operator Profile, the industry application installed in the old Profile will also become unavailable. Summary of the invention

[0010] Purpose of the invention: In order to overcome the deficiencies of the above-mentioned prior art, the present invention provides a multi-application remote management system based on eSIM, which solves the problem that installing a new industry application to an eSIM card is too cumbersome and multiple industry applications cannot be used at the same time. The present invention also provides a multi-application remote management method and terminal device based on eSIM.

[0011] Technical solution: According to a first aspect of the present invention, a terminal device based on eSIM is provided, the terminal device comprising: a device body and an eSIM card, wherein the eSIM card is built in the device body;

[0012] The device body is provided with an LPA program, and a plurality of logical channels capable of parallel communication are provided between the device body and the eSIM card, which are denoted as: T1, T2, ..., T i ,...,T N , where 2<i≤N, and N≥3;

[0013] The first channel T1 is used to complete the instruction interaction between the LPA program and the issuer security root domain ISD-R in the eSIM card, thereby creating multiple parallel Profile security domains, denoted as: ISD-P1, ISD-P2, ..., ISD-P i-1 ,...,ISD-P N-1 ;

[0014] The second channel T2 is used to complete the interaction between the LPA program or the first built-in program in the device body and the data instruction of the ISD-P1, so as to realize the first operation, wherein the first operation is to complete the network access identity authentication of the current user through the Profile corresponding to the ISD-P1, and the first built-in program is a standby program pre-built into the device body for completing the first operation;

[0015] The i-th channel T i The device is used to complete the i-th built-in program in the device body directly with the ISD-P i-1 The data instruction interaction is performed to realize the i-th operation, wherein the i-th operation is performed through the ISD-P i-1 The corresponding Profile completes the specific scenario of the industry application, and the i-th built-in program is a backup program pre-built into the device body to complete the i-th operation.

[0016] In a second aspect, the present invention further provides an eSIM-based multi-application remote management system, the system comprising:

[0017] The terminal device as described above;

[0018] The eSIM platform provides a configuration file corresponding to the Profile for the device body.

[0019] Further, including:

[0020] The eSIM platform includes an eSIM service provider and an MNO operator;

[0021] The MNO operator is used to provide the eSIM service provider with a Profile corresponding to completing the first operation, and the eSIM service provider receives and pre-configures the corresponding Profile and provides it for the eSIM card to download and use.

[0022] Further, including:

[0023] The eSIM platform also includes industry application providers;

[0024] The industry application provider is used to provide the eSIM service provider with a Profile corresponding to completing the i-th operation. The eSIM service provider receives and pre-configures the corresponding Profile and waits for the eSIM card to download and use it.

[0025] In a third aspect, the present invention further provides a management method implemented by a multi-application remote management system based on eSIM, the method comprising:

[0026] The LPA program accesses the Internet through the cellular network in the device body and initiates a request to the eSIM service provider to download the industry application content data; the industry application content data is packaged in a configuration file in the form of a Profile;

[0027] The LPA program interacts with the eSIM card through the first channel data to complete a secure card writing operation;

[0028] The user activates the Profile corresponding to the industry application content data on the device body, and notifies the eSIM service provider of the card writing result status and the current Profile status, and the eSIM service provider updates the status information of the corresponding content data;

[0029] The device body completes the interaction of data instructions by selecting other channels in the eSIM card.

[0030] Further, including:

[0031] Before the LPA program initiates a request to the eSIM service provider to download content data of the industry application through the cellular network in the device body, the device body must also be able to access the operator's cellular network. Specifically:

[0032] The eSIM service provider obtains a configuration file and personalization data for downloading the first Profile from the MNO operator, and receives a number download request from the MNO operator;

[0033] The eSIM service provider organizes data according to the content of the download code request, including: integrating the personalized data with the first Profile;

[0034] The user initiates a request to download resources through the LPA program on the device. Since the current eSIM card does not have the ability to access the cellular network, it can only temporarily connect to the surrounding WIFI network through the WIFI module on the device, so that it can access the Internet to obtain download resources from the eSIM service provider;

[0035] Data is exchanged through the first channel between the LPA program and the eSIM card to complete the card writing operation;

[0036] After the card writing is completed, the downloaded number is activated, and the LPA program notifies the eSIM service provider of the card writing result status and the status of the first Profile.

[0037] Further, including:

[0038] Before the LPA program accesses the Internet through the cellular network in the device body and initiates a request to the eSIM service provider to download content data of the industry application, the process further includes:

[0039] The industry application provider sends the Profile corresponding to the industry application and the industry application content data to the eSIM service provider;

[0040] An operation of downloading industry application resources is initiated from the industry application provider. After receiving the request to download the industry application, the eSIM service provider completes the preparation of the industry application content data and associates the information with the device body through the corresponding channel.

[0041] Further, including:

[0042] The industry application resource download request initiated from the industry application provider includes at least one, and different channels in the eSIM card are used to interact with data instructions according to different built-in programs in the device body.

[0043] Further, including:

[0044] The operation of initiating a request to download industry application resources from the industry application provider includes:

[0045] The user submits an industry application resource request application to the industry application provider;

[0046] The industry application provider verifies the identity of the user. If the verification is successful, the industry application provider sends the industry application resource request to the eSIM service provider. Otherwise, the current application is rejected.

[0047] In a fourth aspect, the present invention further provides a management method implemented by a multi-application remote management system based on eSIM, characterized in that the method comprises:

[0048] The LPA program accesses the Internet through the WIFI module in the device body and initiates a request to the eSIM service provider to download the content data of the industry application; the content data of the industry application is packaged in a configuration file in the form of a Profile;

[0049] The LPA program interacts with the eSIM card through the first channel data to complete a secure card writing operation;

[0050] The user activates the Profile corresponding to the content data of the industry application on the device body, and notifies the eSIM service provider of the card writing result status and the current Profile status, and the eSIM service provider updates the status information of the corresponding content data;

[0051] The device body completes data instruction interaction of industry applications by selecting other channels in the eSIM card.

[0052] Beneficial effects: Compared with the prior art, the present invention has the following advantages:

[0053] (1) The present invention sets multiple parallel logical channels in the eSIM card, and each channel can perform data instruction interaction of different industry applications, thereby realizing operations of different industry applications, thereby providing terminal equipment providers and users with a more flexible application management method and a more efficient physical space utilization rate;

[0054] (2) Since multiple parallel logical channels are set up, multiple industry applications can exist in the form of independent profiles in the eSIM card and can be activated at the same time to provide specific industry functions at any time.

[0055] (3) The present invention packages industry application content data in the form of a Profile that does not require access to a cellular network, which not only saves network operators' resource allocation, but also ensures that the user's functional use of installed industry applications will not be affected when changing or abandoning the operator code number.

[0056] (4) After the industry application content data of the present invention is directly packaged into the Profile form, the eSIM service provider can complete the installation process of the industry application in one step through remote operation, thereby saving multiple processes such as security domain creation, initial key replacement, application installation, etc. required for the original application installation, and also saving the installation management cost of the industry application. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 This is a schematic diagram of the structure of the terminal device according to Embodiment 1 of the present invention;

[0058] Figure 2 This is a schematic diagram of the structure of a multi-application remote management system based on eSIM according to Embodiment 2 of the present invention;

[0059] Figure 3 This is a flow chart of the management method when the eSIM card described in Embodiment 3 of the present invention has the capability of the operator's cellular network;

[0060] Figure 4 This is a flow chart of a card writing method when the eSIM card described in Embodiment 3 of the present invention has the capability of an operator's cellular network;

[0061] Figure 5 This is a flow chart of the method for providing Profile and industry application content data as described in Example 3 of the present invention;

[0062] Figure 6 This is a flow chart of a management method when the eSIM card does not have the capability of the operator's cellular network as described in Embodiment 4 of the present invention;

[0063] Figure 7 This is a flow chart of the multi-application remote management method based on an eSIM card as described in Example 5 of the present invention. DETAILED DESCRIPTION

[0064] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0065] After the present invention packages the industry application in a Profile that does not require a cellular network, it can be used to install multiple industry applications in one eSIM card through multi-channel parallel use without affecting the communication function of the original eSIM card. At the same time, the industry application will not be affected by the change or abandonment of the Profile of the communication function.

[0066] The following introduces the terms involved in the embodiments of the present application.

[0067] 1. eSIM card

[0068] Embedded universal integrated circuit card (eUICC) can also be called embedded subscriber identification module (eSIM), that is, Embedded-SIM, which is an electronic SIM card. eSIM is an embedded SIM card that is welded to the terminal device and cannot be inserted into the terminal device or separated from the terminal device. Functionally, eSIM is no different from an ordinary SIM card (physical card), but it does not need to be physically inserted, but is directly embedded in the device chip. The main feature of eSIM is that it can be managed through software. Terminal devices with eSIM can download and install the operator's profile, activate and switch operators without changing the SIM card, and use it for mobile communication services.

[0069] An eSIM card can correspond to multiple integrated circuit card identities (ICCIDs) and corresponding multiple phone numbers. At the same time, an eSIM card can only support one of the multiple ICCIDs to be enabled. The eSIM card can initially be a blank card that does not contain any data content except the unique identifier, and then the ICCID is written to the eSIM card through online processing.

[0070] In a possible implementation, when at least one ICCID is stored in the eSIM card, the eSIM card may support enabling and disabling of the ICCID.

[0071] 2. Profile

[0072] Profile refers to a collection of various data and applications used on the eUICC to provide various services, such as voice services or data services. According to some embodiments, the profile is signed and subscribed by the user and the mobile network operator (MNO) to provide the user with network services.

[0073] eSIM can download or store one or more configuration files, each of which can correspond to a number of an MN0 for the user to choose. The configuration file has a unique identity ID. One configuration file corresponds to one ICCID.

[0074] In some embodiments, when a profile is in a deactivated state, the user can select the corresponding phone number of the eSIM card to activate it, for example, the user can select the phone number of the eSIM card from activated to unactivated, and the terminal device can activate the profile and return the activation status of the profile to the modem.

[0075] In some embodiments, when a profile is in an activated state, the terminal device can deactivate the corresponding profile. For example, the user can select the phone number of the eSIM card from an unactivated state to an activated state, and the terminal device can deactivate the profile and return the deactivated state of the profile to the modem.

[0076] III. LPA Procedure

[0077] LPA Local Profile Assistant is an independent system application that should be included in the Android build image. The profiles on the eSIM card are usually managed by LPA because LPA acts as a bridge between SM-DP+ and eUICC chip.

[0078] 4. ISD-P (profile security domain)

[0079] The representative of the external entity SM-DP (Remote Management Platform Data Preparation) in the card; a card can have multiple ISD-Ps;

[0080] 5. ISD-R (Root Security Domain)

[0081] The representative of the external entity SM-SR (Remote Management Platform Data Routing) inside the card.

[0082] Example 1

[0083] like Figure 1 As shown, this embodiment provides an eSIM-based terminal device, the terminal device comprising: a device body and an eSIM card, wherein the eSIM card is built in the device body;

[0084] The device body is provided with an LPA program, and a plurality of logical channels capable of parallel communication are provided between the device body and the eSIM card, which are recorded as:

[0085] T1,T2,...,T i ,...,T N , where 2<i≤N, and N≥3;

[0086] The first channel T1 is used to complete the instruction interaction between the LPA program and the issuer security root domain ISD-R in the eSIM card, thereby creating multiple parallel Profile security domains, which are recorded as:

[0087] ISD-P1,ISD-P2,...,ISD-P i-1 ,...,ISD-P N-1 ;

[0088] The second channel T2 is used to complete the interaction between the LPA program or the first built-in program in the device body and the data instruction of the ISD-P1, so as to realize the first operation, wherein the first operation is to complete the network access identity authentication of the current user through the Profile corresponding to the ISD-P1, and the first built-in program is a standby program pre-built into the device body for completing the first operation;

[0089] The i-th channel T i The device is used to complete the i-th built-in program in the device body directly with the ISD-P i-1 The data instruction interaction is performed to realize the i-th operation, wherein the i-th operation is performed through the ISD-P i-1 The corresponding Profile completes the specific scenario of the industry application, and the i-th built-in program is a backup program pre-built into the device body to complete the i-th operation.

[0090] Therefore, in the present invention, when the terminal device needs to interact with the card for data instructions, it completes the communication with the card by selecting different ports on the eSIM card side. For example, the LPA program on the terminal device can use the first channel to interact with the ISD-R in the card to create the required ISD-P1, ISD-P2, ISD-P i-1 Profile; then, when it is necessary to access the cellular network, in order to complete the authentication of network access capabilities, LPA or other programs on the terminal device can use the second channel to directly interact with ISD-P1 to obtain network access authentication information and complete network access identity authentication;

[0091] When a specific industry application is needed, such as using an industry application to represent a digital hard wallet to complete a payment function, the specific program on the terminal device can use the third channel to directly interact with ISD-P2 for data instructions to complete the payment operation.

[0092] In this embodiment, since multiple profiles are activated at the same time, and the interaction of data commands can be carried out with different profiles by selecting different command interaction ports on the terminal device side, different profiles will not be affected by each other, thereby realizing flexible management of multiple applications on one eSIM card.

[0093] Example 2

[0094] like Figure 2 As shown, the present invention also provides a multi-application remote management system based on eSIM, the system comprising:

[0095] The terminal device as described in Example 1; an eSIM platform, wherein the eSIM platform provides a configuration file corresponding to the Profile for the device body.

[0096] Furthermore, this embodiment also includes:

[0097] The eSIM platform includes an eSIM service provider and an MNO operator;

[0098] The MNO operator is used to provide the eSIM service provider with a Profile corresponding to completing the first operation, and the eSIM service provider receives and pre-configures the corresponding Profile and provides it for the eSIM card to download and use.

[0099] Furthermore, this embodiment also includes:

[0100] The eSIM platform also includes industry application providers;

[0101] The industry application provider is used to provide the eSIM service provider with a Profile corresponding to completing the i-th operation. The eSIM service provider receives and pre-configures the corresponding Profile and waits for the eSIM card to download and use it.

[0102] The present invention pre-configures the Profile of the eSIM service provider in the eSIM card of the terminal device, and configures personalized data for the Profile through interactive processing among the MNO operator, the user's personal data Profile, and the eSIM service provider, thereby ensuring that the terminal device has the ability to access the operator's cellular network.

[0103] Industry application providers will industry application Profile, that is Figure 2 ISD-P i-1 Provided to the eSIM service provider, the eSIM service provider provides the corresponding industry Profile configuration file for the terminal device. Based on this, the terminal device has the ability to access the operator's cellular network.

[0104] After obtaining the download resource, i.e., the industry application profile, from the eSIM service provider through the LPA program, the card writing operation is completed through the machine-card interaction channel between the LPA program and the eSIM card. In this embodiment, the profile of the eSIM service provider and the profile provided by the industry application provider are independent profiles.

[0105] Example 3

[0106] like Figure 3 As shown, the present invention also provides a management method implemented by a multi-application remote management system based on eSIM. The eSIM cards involved in the management method of the present application include eSIM cards with operator cellular network capabilities and eSIM cards without operator cellular network capabilities and only using WIFI modules.

[0107] First, if the eSIM card has the capability of the operator's cellular network, the method includes the following steps:

[0108] (1) The device program interacts with the eSIM card through the second channel data to complete the authentication of the cellular network to provide the ability to access the Internet. The LPA program initiates a request to the eSIM service provider to download industry application content data by accessing the Internet; the industry application content data is packaged in a configuration file in the form of a Profile.

[0109] Therefore, this application simplifies the process of remote application installation by packaging industry applications into Profiles and downloading and installing them as an independent whole.

[0110] (2) The LPA program interacts with the eSIM card through the first channel data to complete the secure card writing operation;

[0111] (3) The user activates the profile corresponding to the industry application content data on the device body, and notifies the eSIM service provider of the card writing result status and the current profile status, and the eSIM service provider updates the status information of the corresponding content data;

[0112] (4) The device body completes the interaction of data instructions by selecting other channels in the eSIM card.

[0113] Furthermore, if the eSIM card is a blank eSIM card, it is temporarily unable to access the operator's cellular network. Therefore, it is necessary to first download a common operator Profile to the eSIM card, and then continue to download the required industry applications with the help of the operator's network access, and then use the specific industry applications through the corresponding channels. Therefore, in this embodiment, before the LPA program initiates a request to the eSIM service provider to download the content data of the industry application through the cellular network, it is also necessary to enable the device body to have the ability to access the operator's cellular network. Specifically, Figure 4 As shown:

[0114] (1-1) The eSIM service provider obtains a configuration file and personalization data for downloading the first profile from the MNO operator, and receives a number download request from the MNO operator;

[0115] (1-2) The eSIM service provider organizes data according to the content of the download code request, including: integrating the personalized data with the first profile;

[0116] (1-3) The user initiates a request to download resources through the LPA program on the device. Since the current eSIM card does not have the ability to access the cellular network, it can only temporarily connect to the surrounding WIFI network through the WIFI module on the device, so that it can access the Internet to obtain download resources from the eSIM service provider;

[0117] (1-4) Data is exchanged through the first channel between the LPA program and the eSIM card to complete the card writing operation;

[0118] (1-5) After the card writing is completed, the downloaded number is activated, and the LPA program notifies the eSIM service provider of the card writing result status and the status of the first Profile.

[0119] After completing the above steps, the terminal device will have the ability to access the operator's cellular network. Therefore, the terminal device will no longer be restricted by specific regional location restrictions when accessing the Internet to perform other business request operations.

[0120] Further, in this embodiment, after the terminal device has the ability to access the operator's cellular network, it continues to download the required industry applications with the help of the operator's network access, and then uses the specific industry applications through the corresponding channels. Therefore, it is necessary to provide Profile and industry application content data. Before the LPA program accesses the Internet through the device body and the cellular network capability provided by the first Profile to initiate a request to the eSIM service provider to download the content data of the industry application, it specifically includes, Figure 5As shown:

[0121] (11) The industry application provider sends the Profile corresponding to the industry application and the industry application content data to the eSIM service provider;

[0122] (12) Initiate an operation of downloading industry application resources from the industry application provider. After receiving the request to download the industry application, the eSIM service provider completes the preparation of the industry application content data and associates the information with the device body through the corresponding channel.

[0123] The operation of initiating a request to download industry application resources from the industry application provider includes:

[0124] (121) The user submits an industry application resource request application to the industry application provider;

[0125] (122) The industry application provider verifies the identity of the user. If the verification is successful, the industry application provider sends an industry application resource request to the eSIM service provider. Otherwise, the current application is rejected.

[0126] In this embodiment, since multiple logical channels are set in the eSIM card, the multiple industry applications involved in the present invention exist in the eSIM card in the form of independent profiles, and can be activated at the same time to provide specific industry functions at any time. Therefore, the download industry application resource request initiated from the industry application provider includes at least one, and different channels in the eSIM card are used to interact with data instructions according to the different built-in programs in the device body. Therefore, the present application provides the use of multiple applications in a physical eSIM card, which can save more physical space utilization.

[0127] Example 4

[0128] This embodiment provides a management method for implementing a multi-application remote management system based on eSIM. Specifically, the eSIM card has no operator cellular network capability and can only use an eSIM card with a WIFI module. Figure 6 As shown, including:

[0129] S1: The LPA program accesses the Internet through the WIFI module in the device body and initiates a request to the eSIM service provider to download the content data of the industry application; the content data of the industry application is packaged in a configuration file in the form of a Profile;

[0130] S2: the LPA program interacts with the eSIM card through the first channel data to complete the secure card writing operation;

[0131] S3 The user activates the Profile corresponding to the content data of the industry application on the device body, and notifies the eSIM service provider of the card writing result status and the current Profile status, and the eSIM service provider updates the status information of the corresponding content data;

[0132] S4: The device body completes data instruction interaction of industry applications by selecting other channels in the eSIM card.

[0133] As described in Example 3, in this embodiment, the terminal device continues to download the required industry application with the help of the operator network access, and then uses the specific industry application through the corresponding channel. Therefore, it is necessary to provide Profile and industry application content data. Before the LPA program accesses the Internet through the WIFI module in the device body to initiate a request to the eSIM service provider to download the content data of the industry application, it specifically includes: Figure 5 As shown:

[0134] (11) The industry application provider sends the Profile corresponding to the industry application and the industry application content data to the eSIM service provider;

[0135] (12) Initiate an operation of downloading industry application resources from the industry application provider. After receiving the request to download the industry application, the eSIM service provider completes the preparation of the industry application content data and associates the information with the device body through the corresponding channel.

[0136] The operation of initiating a request to download industry application resources from the industry application provider includes:

[0137] (121) The user submits an industry application resource request application to the industry application provider;

[0138] (122) The industry application provider verifies the identity of the user. If the verification is successful, the industry application provider sends an industry application resource request to the eSIM service provider. Otherwise, the current application is rejected.

[0139] Example 5

[0140] Combined with the above embodiments, this embodiment assumes that the initial state is a blank eSIM card, which has no ability to access the operator's cellular network. Therefore, this application needs to first download a common operator Profile to the eSIM card, and then continue to download the required industry applications with the help of the operator's network access, and then use the specific industry applications through the corresponding channels. The process steps are as follows Figure 7 As shown:

[0141] 1) The platform as an eSIM service provider first obtains the template structure definition required to download the Profile, that is, the Profile configuration file, from the MNO operator.

[0142] This application packages industry application content data in the form of a Profile that does not require access to a cellular network, which not only saves network operators' resource allocation, but also ensures that the functional use of installed industry applications will not be affected when users change or abandon operator codes.

[0143] 2) Then continue to obtain personalized data from the MNO operator for future downloading to the eSIM card and access to the cellular network.

[0144] 3) Usually, the user first submits an application for downloading the relevant number resources on the MNO operator side. After the MNO operator completes the verification of the user's identity, it sends the corresponding number download request to the eSIM service provider.

[0145] 4) After receiving the code download request, the eSIM service provider needs to organize the data according to the content of the request, including the integration of personalized data with the Profile template, and the association of the ID identifier of the downloaded identity on the user terminal side.

[0146] 5) The user initiates a resource download request through the LPA program on the terminal device. At this time, since the eSIM card does not have the ability to access the cellular network, it can only temporarily connect to the surrounding WIFI network through the WIFI module on the device side so that it can access the Internet to obtain download resources from the eSIM service provider.

[0147] 6) After obtaining the downloaded resources from the eSIM service provider through the LPA program, the card writing operation is completed through the machine-card interaction channel between the LPA program and the eSIM card.

[0148] 7) After the card writing is completed, the user can activate the code number resource on the terminal side and put it into use. At the same time, the LPA program notifies the eSIM service provider of the card writing result status and the current Profile status so that the platform side can update the status information of the corresponding resources to ensure the consistency of information between the platform and the terminal side.

[0149] 8) After the above steps are completed, the terminal device will have the ability to access the operator's cellular network. Therefore, the terminal device will no longer be restricted by specific regional location restrictions when accessing the Internet to perform other business request operations.

[0150] At this time, the industry application provider can also provide the terminal device with a corresponding Profile template file for later download operations. At this time, the operation steps can actually be prepared in advance in the initial step, waiting for the download resource request triggered by the user end at any time later.

[0151] 9) Industry application providers also need to provide the corresponding industry data content to the eSIM service provider in advance for later download operations.

[0152] 10) The operation of downloading industry applications initiated from the industry application provider. Usually, this step first requires the user to submit a relevant resource application to the industry application provider, and after the industry application provider verifies the user's identity, the industry application provider will send the request to the eSIM service provider.

[0153] 11) After receiving the request to download the industry application, the eSIM service provider completes the binding of the industry application to the specific terminal device and updates the status of the relevant resource information.

[0154] 12) The user initiates a resource download request to the eSIM service provider through the LPA program on the terminal device. At this time, the eSIM card with cellular network access capability can access the Internet through the cellular network to obtain the required industry application download resources from the eSIM service provider.

[0155] In this step, the content data of the industry application is packaged in a configuration file in the form of a Profile. Therefore, the process of installing the industry application is simplified to the process of installing the Profile, and the entire data package content can be sent to the terminal device side for installation at one time. The traditional industry application installation process first requires the creation of a security domain, then the replacement of the initial key on the created security domain, and then the application installation and application personalization operations through the replaced key. The entire operation process is relatively cumbersome and complicated, and it also requires the provider of the industry application to pay attention to many cumbersome details, which is not conducive to the development of the work.

[0156] 13) After obtaining resources for downloading industry applications from the eSIM service provider through the LPA program, the card writing operation is completed through the machine-card interaction channel between the LPA program and the eSIM card.

[0157] 14) After the card writing is completed, the user can activate the Profile resource on the terminal side. At the same time, the LPA program notifies the eSIM service provider of the card writing result status and the current Profile status so that the platform side can update the status information of the corresponding resources to ensure the consistency of information between the platform and the terminal side.

[0158] 15) When the profile of the industry application is installed and activated successfully, the terminal device can use the business functions of the industry application normally. For example, if the industry application is a digital hard wallet, the terminal device can use the MEP capability to select different ports in the eSIM card to use the industry application to complete the corresponding payment function. At the same time, the use of the industry application will not affect the normal use of the original communication code number in the eSIM card.

[0159] Therefore, in the method of the above process, the card writing operation process in step 6) and step 13) uses the first channel in the eSIM card to complete the writing of the Profile resource; the process of obtaining downloaded resources through the Internet in step 12) uses the data interaction of the second channel in the eSIM card to complete the cellular network capability provided after network authentication; and the subsequent step 15) operation for the use of industry applications uses other channels in the eSIM card except the first and second channels to complete the interaction of data instructions, thereby ensuring the possibility of coexistence of multiple applications through a multi-channel approach; at the same time, the industry application is packaged in a Profile that does not require access to the cellular network, which also gets rid of the impact on the use of industry applications due to the change of operator numbers in the later stage.

[0160] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0161] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0162] Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present invention without departing from the spirit and scope of the embodiments of the present invention. Thus, if these modifications and variations of the embodiments of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A terminal device based on eSIM, characterized in that: The terminal device comprises: a device body and an eSIM card, wherein the eSIM card is built in the device body; The device body is provided with an LPA program, and a plurality of logical channels capable of parallel communication are provided between the device body and the eSIM card, which are denoted as: T1, T2, ..., T i ,...,T N , where 2<i≤N, and N≥3; The first channel T1 is used to complete the instruction interaction between the LPA program and the issuer security root domain ISD-R in the eSIM card, thereby creating multiple parallel Profile security domains, denoted as: ISD-P1, ISD-P2, ..., ISD-P i-1 ,...,ISD-P N-1 ; The second channel T2 is used to complete the interaction between the LPA program or the first built-in program in the device body and the data instruction of the ISD-P1, so as to realize the first operation, wherein the first operation is to complete the network access identity authentication of the current user through the Profile corresponding to the ISD-P1, and the first built-in program is a standby program pre-built into the device body for completing the first operation; The i-th channel T i The device is used to complete the i-th built-in program in the device body directly with the ISD-P i-1 The data instruction interaction is performed to realize the i-th operation, wherein the i-th operation is performed through the ISD-P i-1 The corresponding Profile completes the specific scenario of the industry application, and the i-th built-in program is a backup program pre-built into the device body to complete the i-th operation.

2. A multi-application remote management system based on eSIM, characterized in that: The system includes: The terminal device as claimed in claim 1; The eSIM platform provides a configuration file corresponding to the Profile for the device body.

3. The multi-application remote management system based on eSIM according to claim 2, characterized in that: The eSIM platform includes an eSIM service provider and an MNO operator; The MNO operator is used to provide the eSIM service provider with a Profile corresponding to completing the first operation, and the eSIM service provider receives and pre-configures the corresponding Profile and provides it for the eSIM card to download and use.

4. The multi-application remote management system based on eSIM according to claim 3, characterized in that: The eSIM platform also includes industry application providers; The industry application provider is used to provide the eSIM service provider with a Profile corresponding to completing the i-th operation. The eSIM service provider receives and pre-configures the corresponding Profile and waits for the eSIM card to download and use it.

5. A management method implemented by the eSIM-based multi-application remote management system according to claim 4, characterized in that: The method includes: The LPA program accesses the Internet through the cellular network in the device body and initiates a request to the eSIM service provider to download the industry application content data; the industry application content data is packaged in a configuration file in the form of a Profile; The LPA program interacts with the eSIM card through the first channel data to complete a secure card writing operation; The user activates the Profile corresponding to the industry application content data on the device body, and notifies the eSIM service provider of the card writing result status and the current Profile status, and the eSIM service provider updates the status information of the corresponding content data; The device body completes the interaction of data instructions by selecting other channels in the eSIM card.

6. The eSIM-based multi-application remote management method according to claim 5, characterized in that: Before the LPA program initiates a request to the eSIM service provider to download content data of the industry application through the cellular network in the device body, the device body must also be able to access the operator's cellular network. Specifically: The eSIM service provider obtains a configuration file and personalization data for downloading the first Profile from the MNO operator, and receives a number download request from the MNO operator; The eSIM service provider performs data sorting according to the content of the code number download request, including: integrating the personalized data with the first profile; The user initiates a request to download resources through the LPA program on the device. Since the current eSIM card does not have the ability to access the cellular network, it can only temporarily connect to the surrounding WIFI network through the WIFI module on the device, so that it can access the Internet to obtain download resources from the eSIM service provider; Data is exchanged through the first channel between the LPA program and the eSIM card to complete the card writing operation; After the card writing is completed, the downloaded number is activated, and the LPA program notifies the eSIM service provider of the card writing result status and the status of the first Profile.

7. The eSIM-based multi-application remote management method according to claim 5, characterized in that: Before the LPA program accesses the Internet through the cellular network in the device body and initiates a request to the eSIM service provider to download content data of the industry application, the process further includes: The industry application provider sends the Profile corresponding to the industry application and the industry application content data to the eSIM service provider; An operation of downloading industry application resources is initiated from the industry application provider. After receiving the request to download the industry application, the eSIM service provider completes the preparation of the industry application content data and associates the information with the device body through the corresponding channel.

8. The eSIM-based multi-application remote management method according to claim 7, characterized in that: The industry application resource download request initiated from the industry application provider includes at least one, and different channels in the eSIM card are used to interact with data instructions according to different built-in programs in the device body.

9. The eSIM-based multi-application remote management method according to claim 7, characterized in that: The operation of initiating a request to download industry application resources from the industry application provider includes: The user submits an industry application resource request application to the industry application provider; The industry application provider verifies the identity of the user. If the verification is successful, the industry application provider sends the industry application resource request to the eSIM service provider. Otherwise, the current application is rejected.

10. A management method implemented by the eSIM-based multi-application remote management system according to claim 4, characterized in that: The method includes: The LPA program accesses the Internet through the WIFI module in the device body and initiates a request to the eSIM service provider to download the content data of the industry application; the content data of the industry application is packaged in a configuration file in the form of a Profile; The LPA program interacts with the eSIM card through the first channel data to complete a secure card writing operation; The user activates the Profile corresponding to the content data of the industry application on the device body, and notifies the eSIM service provider of the card writing result status and the current Profile status, and the eSIM service provider updates the status information of the corresponding content data; The device body completes data instruction interaction of industry applications by selecting other channels in the eSIM card.

Images