Connection management system of intelligent network detection terminal based on Internet of Things

Abstract

The invention discloses a connection management system of an intelligent network detection terminal based on the Internet of Things, which comprises an SM-DP + module, an eSIM distribution center service module, a key management system and a device and code number relation management module, and relates to the technical field of the Internet of Things. By automatically managing the operations of importing, distributing, starting, stopping and deleting the eSIM code number, the management efficiency is improved, the functions of updating and querying the code number state in real time are provided, the fault positioning and problem processing capabilities are enhanced, the unified management of the equipment and the code number in a multi-operator environment is supported, the global equipment deployment requirement of the Internet of Things is met, and the management efficiency is improved. Through high-security-level secret key and certificate management, the security of data transmission and code number operation is ensured, alarm and automatic redistribution of code numbers when the equipment state is abnormal are supported, and the stability of equipment connection is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a connection management system for an intelligent network detection terminal based on the Internet of Things. Background Art

[0002] With the rapid development of the Internet of Things, a large number of devices need to access the network. Traditional SIM cards are gradually being replaced by embedded SIM (eSIM) technology due to the complexity of physical replacement and high management costs. eSIM enables network connection of devices through remote configuration, greatly improving the efficiency of device management.

[0003] However, the existing technology has the following deficiencies in eSIM number management, maintenance of the relationship between equipment and numbers, and compatibility with multiple operator environments: lack of automated management of eSIM number distribution and status, resulting in low distribution efficiency and high error rate; insufficient management of the number lifecycle, making it difficult to handle abnormal conditions in a timely manner; insufficient compatibility of cross-operator number management, increasing the difficulty of global deployment; lack of high-security protection mechanisms in key and certificate management, posing a risk of data leakage; inability to flexibly maintain the dynamic correspondence between equipment and numbers, affecting the connection stability of the device.

[0004] To this end, the present invention provides a connection management system for an intelligent network detection terminal based on the Internet of Things to solve the above problems. Summary of the invention

[0005] In view of the deficiencies in the prior art, the present invention provides a connection management system for an intelligent network detection terminal based on the Internet of Things, which solves the above problems.

[0006] To achieve the above objectives, the present invention is implemented through the following technical solutions: A connection management system for an intelligent network detection terminal based on the Internet of Things, comprising:

[0007] SM-DP+ module, which is used to implement secure storage of eSIM numbers, communicate with eUICC devices, complete number downloads and installations, maintain number lifecycle status, and support real-time update and query of number status;

[0008] eSIM distribution center service module, which is used to receive the code numbers provided by the operator and import them into the SM-DP+ module, allocate the code numbers to the target devices, manage the issuance, activation, deactivation and deletion of the code numbers, and provide the code number recycling function to reallocate the deleted code numbers to the operator resource pool. It also supports the state management of the code number life cycle, including the automatic flow from "idle" to "enabled" states;

[0009] A key management system (KMS), the key management system (KMS) comprising:

[0010] A key generation module, which provides a high-security key generation mechanism and supports dynamic key distribution when devices are connected;

[0011] A key storage module, wherein the key storage module is based on a hardware security module (HSM) to ensure physical security storage of keys;

[0012] A key recovery module, which is used to support secure deletion of keys after their life cycle ends;

[0013] A certificate management module, which supports the issuance, revocation and renewal of certificates;

[0014] The device and code number relationship management module is used to establish a mapping relationship between the device and the eSIM code number, support the association management of the device and multiple code numbers and dynamically track the connection properties of the device, including connection status, used traffic and service permissions, and provide traffic statistics and anomaly detection functions. It supports automatic alarm and reallocation operations when the device status is abnormal, and supports unified management of devices and codes in a multi-operator environment, and is compatible with network deployment requirements in different regions.

[0015] Preferably, the SM-DP+ module further includes:

[0016] A secure storage submodule, which protects the integrity and security of the code number data based on an encryption algorithm;

[0017] A status query submodule, which supports operators or system administrators to query the number status in real time;

[0018] The communication interface submodule provides a standardized communication interface with the eUICC device and supports remote operation of the code number.

[0019] Preferably, the eSIM distribution hub service module further includes:

[0020] An operation instruction management submodule, which supports the addition, distribution, activation, deactivation, deletion and recycling instructions of code numbers;

[0021] An operator interaction submodule, which interacts with multiple operator systems through a standardized interface and provides a number resource management function;

[0022] The log recording submodule records the operation history of code number distribution and state flow, and supports subsequent problem tracing and analysis.

[0023] Preferably, the key management system (KMS) further includes:

[0024] A security encryption submodule, which is based on hardware encryption technology to ensure data security during key transmission;

[0025] A backup and recovery submodule, which supports secure backup and disaster recovery of keys and certificates;

[0026] The permission control submodule provides a hierarchical access permission mechanism to restrict unauthorized users from operating the key.

[0027] Preferably, the device and code number relationship management module further includes:

[0028] A dynamic mapping submodule, which supports automatic binding and unbinding operations between devices and codes;

[0029] The attribute synchronization submodule synchronizes the connection attribute changes between the device and the code number in real time, including network status and traffic usage;

[0030] The abnormality detection submodule detects and handles the abnormality of code number allocation or device connection by analyzing the connection status of the device.

[0031] Preferably, the connection management system supports number distribution and management across multiple operator environments, can dynamically adjust number distribution rules according to operator agreements, and is compatible with network technology requirements of different operators.

[0032] Preferably, the connection management system has an automatic scheduling function, which can automatically select a suitable code number and complete distribution and activation according to the network access requirements and code number status of the device.

[0033] Beneficial Effects

[0034] The present invention provides a connection management system for an intelligent network detection terminal based on the Internet of Things. Compared with the prior art, it has the following beneficial effects:

[0035] The present invention improves management efficiency by automatically managing the import, distribution, activation, deactivation and deletion of eSIM numbers, provides real-time update and query functions for number status, enhances fault location and problem handling capabilities, supports unified management of devices and numbers in a multi-operator environment, adapts to global IoT device deployment requirements, ensures the security of data transmission and number operations through high-security level key and certificate management, supports alarms when device status is abnormal and automatic reallocation of numbers, and improves the stability of device connections. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is the overall structural diagram of the present invention;

[0037] Figure 2 It is a block diagram of the SM-DP+ module structure of the present invention;

[0038] Figure 3 This is a structural block diagram of the eSIM distribution hub service module of the present invention;

[0039] Figure 4 It is a structural block diagram of the key management system of the present invention;

[0040] Figure 5 It is a structural block diagram of the equipment and code number relationship management module of the present invention.

[0041] In the figure, 1, SM-DP+ module; 101, secure storage submodule; 102, status query submodule; 103, communication interface submodule; 2, eSIM distribution center service module; 201, operation instruction management submodule; 202, operator interaction submodule; 203, log recording submodule; 3, key management system; 301, key generation module; 302, key storage module; 303, key recovery module; 304, certificate management module; 305, secure encryption submodule; 306, backup and recovery submodule; 307, permission control submodule; 4, device and code number relationship management module; 401, dynamic mapping submodule; 402, attribute synchronization submodule; 403, anomaly detection submodule. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] Embodiment 1:

[0044] See also Figure 1 , a connection management system for an intelligent network detection terminal based on the Internet of Things, comprising:

[0045] SM-DP+ module 1: SM-DP+ module 1 is used to realize the secure storage of eSIM code numbers, communicate with eUICC devices, complete code number download and installation, maintain the code number life cycle status, and support real-time update and query of code number status;

[0046] eSIM distribution center service module 2: eSIM distribution center service module 2 is used to receive the code numbers provided by the operator and import them into the SM-DP+ module 1, and at the same time allocate the code numbers to the target devices, manage the issuance, activation, deactivation and deletion of the code numbers, and provide the code number recycling function to reallocate the deleted code numbers to the operator resource pool. It also supports the status management of the code number life cycle, including the automatic flow from "idle" to "enabled" states;

[0047] Key management system (KMS) 3, the key management system 3 includes:

[0048] Key generation module 301, key generation module 301 provides a high-security key generation mechanism and supports dynamic key distribution when devices are connected; key generation module 301 generates high-strength keys based on ECC (elliptic curve cryptography) and ensures the security of the key distribution process through a two-factor authentication mechanism, and allocates exclusive keys to newly connected IoT devices for device authentication and encrypted communication.

[0049] The key storage module 302 is based on a hardware security module (HSM) to ensure the physical security storage of the key. The key storage module 302 uses a hardware security module (HSM) to store the key. The key is encrypted in a hierarchical manner during storage and supports a physical tamper-proof protection mechanism. In high-security scenarios, such as network connections for medical IoT devices or industrial control systems, ensure that the key is not stolen or tampered with.

[0050] Key recovery module 303 is used to support secure deletion of keys after their life cycle ends. Key recovery module 303 supports secure destruction of keys after their life cycle ends, and allocates new keys to devices. This module archives expired keys for audit purposes. When the ownership of an IoT device changes or its function is reset, the recovery module destroys the original key to prevent abuse of the old key.

[0051] The certificate management module 304 supports the issuance, revocation and renewal of certificates. The certificate management module 304 issues digital certificates based on PKI (public key infrastructure) to IoT devices, supports certificate renewal, revocation and query functions, and implements identity authentication through certificates when the device needs to establish a TLS secure connection with a remote platform.

[0052] Device and code number relationship management module 4, device and code number relationship management module 4 is used to establish a mapping relationship between the device and the eSIM code number, supports the association management of the device and multiple code numbers and dynamically tracks the connection properties of the device, including connection status, usage traffic and service permissions, and provides traffic statistics and anomaly detection functions. It supports automatic alarm and reallocation operations when the device status is abnormal, and supports unified management of devices and codes in a multi-operator environment, and is compatible with network deployment requirements in different regions.

[0053] The connection management system supports number distribution and management across multiple operator environments, can dynamically adjust number distribution rules according to operator agreements, and is compatible with network technology requirements of different operators.

[0054] The connection management system has an automatic scheduling function, which can automatically select the appropriate code number and complete distribution and activation based on the network access requirements and code number status of the device.

[0055] Embodiment 2:

[0056] See also Figure 2-5 This embodiment provides a technical solution based on the first embodiment: the SM-DP+ module 1 further includes:

[0057] The secure storage submodule 101 protects the integrity and security of the code number data based on the encryption algorithm; the secure storage submodule 101 encrypts each code number in groups based on the AES (Advanced Encryption Standard) algorithm and stores it in a dedicated encryption database. This module performs regular integrity checks on the stored code numbers to ensure that the data has not been tampered with during transmission and storage. When IoT devices are deployed in batches, encrypted codes can be quickly assigned to the devices to prevent the devices from facing network intrusion risks due to code number leakage.

[0058] Status query submodule 102, status query submodule 102 supports real-time query of code number status by operators or system administrators; status query submodule 102 provides a real-time status query interface, and system administrators or operators can query the current status of the code number through the API, including "enabled", "disabled", etc., support batch query, improve management efficiency, and in the event of network connection problems during the operation of IoT devices, administrators can quickly locate abnormal code number status and take remedial measures.

[0059] The communication interface submodule 103 provides a standardized communication interface with the eUICC device and supports remote operation of the code number. The communication interface submodule 103 complies with the GSMA SGP.22 standard, implements the ES2+ communication interface with the eUICC device, and securely transmits the code number data to the target device through remote download, supports remote update and reconfiguration of the device, and is particularly suitable for IoT devices distributed in different geographical locations.

[0060] The eSIM distribution hub service module 2 also includes:

[0061] Operation instruction management submodule 201, operation instruction management submodule 201 supports the addition, distribution, activation, deactivation, deletion and recycling instructions of code numbers; operation instruction management submodule 201 provides a unified instruction set to support the full life cycle management of code numbers from receipt to recycling. Instructions include "addProfile", "installProfile", "enableProfile", etc., covering the operation methods of GSMA standards. When deploying IoT terminals on a large scale, batch execution of instructions can reduce human intervention and improve the efficiency of code number distribution.

[0062] Operator interaction submodule 202, the operator interaction submodule 202 interacts with multiple operator systems through a standardized interface and provides code resource management functions; the operator interaction submodule 202 implements standardized interface docking with multiple operator systems, including data synchronization, automatic sending of code configuration requests and traffic management instructions, and supports dynamic adjustment of configuration parameters to meet the requirements of different operators.

[0063] Log recording submodule 203, log recording submodule 203 records the operation history of code number distribution and status flow, and supports subsequent problem tracing and analysis. Log recording submodule 203 records the full process operation logs such as code number distribution, activation, deactivation and deletion, and saves the communication records of interaction with the operator. Supports log query and export for problem tracing and auditing. When the IoT device cannot connect to the network, log analysis can be used to find out whether the abnormality is caused by a code number operation error.

[0064] The Key Management System (KMS)3 also includes:

[0065] The security encryption submodule 305 is based on hardware encryption technology to ensure data security during key transmission;

[0066] The backup and recovery submodule 306 supports secure backup and disaster recovery of keys and certificates;

[0067] The authority control submodule 307 provides a hierarchical access authority mechanism to restrict unauthorized users from operating the key.

[0068] The device and number relationship management module 4 also includes:

[0069] Dynamic mapping submodule 401, dynamic mapping submodule 401 supports automatic binding and unbinding operations between devices and code numbers; dynamic mapping submodule 401 supports binding and unbinding operations between devices and code numbers, automatically allocates appropriate code numbers from the code number pool when a device is connected, and recycles the code numbers when the device is disconnected.

[0070] Attribute synchronization submodule 402, the attribute synchronization submodule 402 synchronizes the connection attribute changes between the device and the code number in real time, including network status and traffic usage; the attribute synchronization submodule 402 updates the connection attributes of the device in real time, including network status, traffic usage and signal strength, and synchronizes the attribute data to the operator platform through the monitoring interface.

[0071] The anomaly detection submodule 403 detects and handles code number allocation anomalies or device connection anomalies by analyzing the device connection status. The anomaly detection submodule 403 detects and warns of code number allocation anomalies or connection interruptions based on device connection status and network performance analysis, and supports automatic reallocation of code numbers.

[0072] Meanwhile, the contents not described in detail in this specification belong to the prior art known to those skilled in the art.

[0073] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0074] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A connection management system for an intelligent network detection terminal based on the Internet of Things, characterized in that: include: An SM-DP+ module (1), the SM-DP+ module (1) is used to implement secure storage of eSIM numbers, communicate with eUICC devices, complete number downloading and installation, maintain the number life cycle status, and support real-time update and query of number status; An eSIM distribution center service module (2), the eSIM distribution center service module (2) is used to receive the code number provided by the operator and import it into the SM-DP+ module (1), and at the same time allocate the code number to the target device, manage the issuance, activation, deactivation and deletion operations of the code number, and provide a code number recycling function to reallocate the deleted code number to the operator resource pool, and also support the state management of the code number life cycle, including the automatic flow from "idle" to "activated" states; A key management system (3), the key management system (3) comprising: A key generation module (301), wherein the key generation module (301) provides a key generation mechanism with a high security level and supports dynamic key distribution when devices are connected; A key storage module (302), the key storage module (302) is based on a hardware security module to ensure physical security storage of keys; A key recovery module (303), the key recovery module (303) is used to support safe deletion of a key after its life cycle ends; A certificate management module (304), the certificate management module (304) supports the issuance, revocation and renewal of certificates; A device and code number relationship management module (4), the device and code number relationship management module (4) is used to establish a mapping relationship between a device and an eSIM code number, support the association management of a device and multiple code numbers and dynamically track the connection attributes of the device, including connection status, used traffic and service permissions, while providing traffic statistics and anomaly detection functions, supporting automatic alarms and reallocation operations when the device status is abnormal, and supporting unified management of devices and codes in a multi-operator environment, and being compatible with network deployment requirements in different regions.

2. The connection management system of the intelligent network detection terminal based on the Internet of Things according to claim 1 is characterized in that: The SM-DP+ module (1) further comprises: A secure storage submodule (101), wherein the secure storage submodule (101) protects the integrity and security of the code number data based on an encryption algorithm; A status query submodule (102), wherein the status query submodule (102) supports an operator or system administrator to query the code number status in real time; A communication interface submodule (103), wherein the communication interface submodule (103) provides a standardized communication interface with an eUICC device and supports remote operation of a code number.

3. The connection management system of the intelligent network detection terminal based on the Internet of Things according to claim 1 is characterized in that: The eSIM distribution hub service module (2) further includes: An operation instruction management submodule (201), the operation instruction management submodule (201) supports the addition, distribution, activation, deactivation, deletion and recycling instructions of code numbers; An operator interaction submodule (202), wherein the operator interaction submodule (202) interacts with multiple operator systems through a standardized interface to provide a number resource management function; A log recording submodule (203), wherein the log recording submodule (203) records the operation history of code number distribution and state flow, and supports subsequent problem tracing and analysis.

4. The connection management system of the intelligent network detection terminal based on the Internet of Things according to claim 1, characterized in that: The key management system (3) further comprises: A security encryption submodule (305), wherein the security encryption submodule (305) is based on hardware encryption technology to ensure data security during key transmission; A backup and recovery submodule (306), wherein the backup and recovery submodule (306) supports secure backup and disaster recovery of keys and certificates; The authority control submodule (307) provides a hierarchical access authority mechanism to restrict unauthorized users from operating the key.

5. The connection management system of the intelligent network detection terminal based on the Internet of Things according to claim 1 is characterized in that: The device and code number relationship management module (4) also includes: A dynamic mapping submodule (401), the dynamic mapping submodule (401) supports automatic binding and unbinding operations between a device and a code number; A property synchronization submodule (402), wherein the property synchronization submodule (402) synchronizes the connection property changes between the device and the code number in real time, including network status and traffic usage; The abnormality detection submodule (403) detects and processes the code number allocation abnormality or device connection abnormality by analyzing the connection status of the device.

6. The connection management system of the intelligent network detection terminal based on the Internet of Things according to claim 1, characterized in that: The connection management system supports number distribution and management across multiple operator environments, can dynamically adjust number distribution rules according to operator agreements, and is compatible with network technology requirements of different operators.

7. The connection management system for an intelligent network detection terminal based on the Internet of Things according to claim 1, characterized in that: The connection management system has an automatic scheduling function, and can automatically select a suitable code number and complete distribution and activation according to the network access requirements and code number status of the device.

Images