Configuration file migration method, device, equipment and storage medium

Abstract

The disclosed embodiments relate to a configuration file migration method, apparatus, device and storage medium, wherein the method comprises: determining a target configuration file to be migrated in response to a user's selection operation; sending a migration request to SM‑DP+ and receiving a target configuration file fed back by SM‑DP+; sending a migration token to a second migration device and receiving a migration receipt fed back by the second migration device, and determining whether the second migration device has passed authentication according to the migration receipt; if the second migration device has passed authentication, encrypting the target configuration file by a key and sending the encrypted target configuration file to the second migration device; setting the target configuration file to an unavailable state. According to the disclosed embodiments, the migration of the target configuration file can be completed with one click, which improves the convenience of the migration of the target configuration file, and the target configuration file is encrypted for transmission, which improves the security of the migration of the target configuration file.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the field of communication technology, and in particular to a configuration file migration method, apparatus, device, and storage medium. Background Art

[0002] eSIM, the full name of which is Embedded SIM (Embedded Subscriber Identity Module), is a digital SIM that is directly embedded into the device chip. Unlike traditional pluggable SIM cards, eSIM does not require a physical card, which allows devices to switch between different mobile network operators without having to replace the physical SIM card.

[0003] However, this also means that the eSIM configuration file cannot be migrated from the old device to the new device by plugging and unplugging. Therefore, if users currently want to migrate the configuration file, they need to re-order and download the new configuration file on the new device and delete the configuration file on the old device. If multiple configuration files need to be migrated, the above operations need to be repeated, which is cumbersome. Summary of the invention

[0004] In order to solve the above technical problem or at least partially solve the above technical problem, the embodiments of the present disclosure provide a configuration file migration method, apparatus, device and storage medium.

[0005] A first aspect of an embodiment of the present disclosure provides a configuration file migration method, which is applied to a first migration device. The method includes:

[0006] In response to a selection operation by a user, determining a target configuration file to be migrated;

[0007] Send a migration request to the SM-DP+, and receive the target profile fed back by the SM-DP+;

[0008] Sending a migration token to a second migration device, receiving a migration receipt fed back by the second migration device, and determining whether the second migration device has passed authentication according to the migration receipt;

[0009] When the second migration device passes the authentication, encrypting the target configuration file by using a key, and sending the encrypted target configuration file to the second migration device;

[0010] Sets the target profile to an unavailable state.

[0011] A second aspect of an embodiment of the present disclosure provides a configuration file migration method, which is applied to a second migration device, and the method includes:

[0012] receiving a migration token sent by the first migration device, generating a migration receipt, and feeding back the migration receipt to the first migration device, so that the first migration device determines whether the second migration device has passed authentication according to the migration receipt;

[0013] When the second migration device passes the authentication, receiving the encrypted target configuration file sent by the first migration device;

[0014] Decrypting the encrypted target configuration file using a key;

[0015] Download the decrypted target configuration file to the eSIM and activate it.

[0016] A second aspect of an embodiment of the present disclosure provides a configuration file migration apparatus, which is applied to a first migration device, and includes:

[0017] A first determining module, configured to determine a target configuration file to be migrated in response to a selection operation of a user;

[0018] A first receiving module, configured to send a migration request to the SM-DP+, and receive the target configuration file fed back by the SM-DP+;

[0019] A second receiving module, configured to send a migration token to a second migration device, receive a migration receipt fed back by the second migration device, and determine whether the second migration device has passed the authentication according to the migration receipt;

[0020] a first encryption module, configured to encrypt the target configuration file by using a key when the second migration device passes the authentication, and send the encrypted target configuration file to the second migration device;

[0021] The first setting module is used to set the target configuration file to an unavailable state.

[0022] A third aspect of an embodiment of the present disclosure provides a configuration file migration apparatus, which is applied to a second migration device, and the apparatus includes:

[0023] a third receiving module, configured to receive a migration token sent by the first migration device, generate a migration receipt, and feed the migration receipt back to the first migration device, so that the first migration device determines whether the second migration device has passed the authentication according to the migration receipt;

[0024] a fourth receiving module, configured to receive the encrypted target configuration file sent by the first migration device when the second migration device passes the authentication;

[0025] A first decryption module, used to decrypt the encrypted target configuration file using a key;

[0026] The first download and activation module is used to download the decrypted target configuration file to the eSIM and activate it.

[0027] A third aspect of an embodiment of the present disclosure provides an electronic device, the server comprising: a processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the processor executes the method of the first aspect above.

[0028] A fourth aspect of an embodiment of the present disclosure provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the method of the first aspect described above can be implemented.

[0029] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has the following advantages:

[0030] The disclosed embodiments can determine the target configuration file to be migrated in response to the user's selection operation; send a migration request to SM-DP+ and receive the target configuration file fed back by SM-DP+; send a migration token to the second migration device and receive the migration receipt fed back by the second migration device, and determine whether the second migration device has passed the authentication according to the migration receipt; if the second migration device has passed the authentication, encrypt the target configuration file by a key and send the encrypted target configuration file to the second migration device; set the target configuration file to an unavailable state. It can be seen that the above technical solution can realize the migration of the target configuration file with one click, without the user having to repeatedly re-order and download new configuration files and delete configuration files on the old and new devices, thereby improving the convenience of the target configuration file migration, and encrypting the transmission of the target configuration file to improve the security of the target configuration file migration. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0032] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0033] Figure 1 is a flow chart of a configuration file migration method provided by an embodiment of the present disclosure;

[0034] Figure 2is a flow chart of a configuration file migration method provided by an embodiment of the present disclosure;

[0035] Figure 3 is a flow chart of a first migration device and a second migration device performing migration preparations provided by an embodiment of the present disclosure;

[0036] Figure 4 is a flow chart of authentication of a first migration device and a second migration device provided by an embodiment of the present disclosure;

[0037] Figure 5 is a flow chart of a first migration device and a second migration device transmitting a target configuration file provided by an embodiment of the present disclosure;

[0038] Figure 6 is a flow chart of a second migration device downloading and activating a target configuration file provided by an embodiment of the present disclosure;

[0039] Figure 7 is a schematic diagram of the structure of a configuration file migration device provided by an embodiment of the present disclosure;

[0040] Figure 8 is a schematic diagram of the structure of a configuration file migration device provided by an embodiment of the present disclosure;

[0041] Fig. 9 It is a structural schematic diagram of an electronic device in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0042] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0043] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0044] Figure 1 1 is a flow chart of a configuration file migration method provided by an embodiment of the present disclosure, and the method can be executed by a first migration device. The first migration device can be exemplarily understood as a device such as a mobile phone, a tablet computer, etc. Figure 1 As shown, the method provided in this embodiment includes the following steps:

[0045] S110 . In response to a selection operation by a user, determine a target configuration file to be migrated.

[0046] In an embodiment of the present disclosure, when a user wants to migrate a target configuration file from a first migration device (i.e., an old device) to a second migration device (i.e., a new device), the user can input a selection operation to the first migration device based on the target configuration file to be migrated, and the first migration device responds to the selection operation and determines the target configuration file.

[0047] Specifically, the target configuration file refers to a configuration file (ie, Profile) of the eSIM that the user wants to migrate to the second migration device.

[0048] Specifically, the selection operation may be any operation for selecting a target configuration file, which is not limited in the present disclosure. Exemplarily, the selection operation may be an operation for a user to select a target configuration file from candidate configuration files in a configuration file migration interface by touch, mouse, keyboard, voice, gesture, etc., but is not limited thereto. It should be noted that the number of target configuration files selected by the user may be one or more, which is not limited in the present disclosure.

[0049] S120: Send a migration request to SM-DP+, and receive a target configuration file fed back by SM-DP+.

[0050] Optionally, before sending the migration request to SM-DP+, it also includes: in response to a first input operation of the user, obtaining first account information input by the user, wherein the first account information includes an account name and an account password; if the first account information is correct, determining that the migration preparation of the first migration device is completed.

[0051] In the disclosed embodiment, the user may input a first input operation to the first migration device. In response to the first input operation, the first migration device may obtain the first account information input by the user, and detect whether the first account information is correct. If the first account information is correct, the migration preparation of the first migration device is confirmed to be complete. Of course, if the first account information is incorrect, a prompt message for prompting the user to re-enter the account information may be output to the user until the first account information input by the user is correct or the total number of times the account information is input reaches a preset number threshold and the migration process is terminated. If the migration preparation of the first migration device is complete, the first migration device may send a migration request to SM-DP+. In response to the migration request, SM-DP+ may feedback the target configuration file to the first migration device.

[0052] Specifically, the first account information is the account information input by the user into the first migration device, wherein the account information includes the account name and account password, i.e., the name and password of the service account registered by the user at the mobile network operator of his / her choice. The user can manage his / her services online through this service account, such as downloading and activating eSIM configuration files, changing packages, viewing usage, paying bills, etc.

[0053] Specifically, there are many specific implementation methods for verifying whether the first account information is correct. Exemplarily, the first account information input by the user is compared with the correct account information stored in advance. If the two are consistent, the first account information is correct; if the two are inconsistent, the first account information is incorrect, but it is not limited to this.

[0054] It can be understood that by verifying whether the first account information is correct, and when the first account information is correct, the first migration device sends a migration request to the SM-DP+, the security and legality of the migration operation can be ensured.

[0055] Specifically, the migration request may be any request that enables SM-DP+ (Subscription Manager-DataPreparation Plus) to feedback a target profile.

[0056] In one example, the migration request includes the integrated circuit card identification code (ICCID) of the eSIM associated with the target profile, and the SM-DP+ can feedback all profiles of the eSIM associated with the ICCID in the migration request to the first migration device.

[0057] In another example, the migration request includes a unique identifier of the target profile, and the SM-DP+ may feed back the target profile to the first migration device according to the unique identifier of the target profile.

[0058] S130: Send a migration token to the second migration device, receive a migration receipt fed back by the second migration device, and determine whether the second migration device has passed authentication according to the migration receipt.

[0059] In the embodiment of the present disclosure, when the first migration device receives the target configuration file fed back by SM-DP+, the first migration device may generate a migration token and send the migration token to the second migration device. When the second migration device receives the migration token, the second device may generate a migration receipt and send the migration receipt to the first migration device. Then, the first migration device determines whether the second migration device has passed the authentication according to the migration receipt, so that when the second migration device has passed the authentication, the first migration device transmits the target transfer file to the second migration device. Of course, when the second migration device has not passed the authentication, the migration process may be terminated.

[0060] Specifically, the migration token is a security credential for migrating the target configuration file from the first migration device to the second migration device. There are many specific implementations for the first migration device to generate the migration token. For example, random information (such as a random number, a random picture, etc.) is generated, and the random information is encrypted by the first encryption information (such as an account password and / or the EID of the first migration device) to generate the migration token, but it is not limited thereto.

[0061] Specifically, the migration receipt is confirmation information provided by the second migration device after completing the reception of the migration token. There are many specific implementations for the second migration device to generate the migration receipt. For example, the migration token is parsed to obtain the random information contained therein, and the random information is encrypted by the second encryption information (such as the account password and / or the EID of the second migration device) to generate the migration receipt, but it is not limited thereto.

[0062] Specifically, there are many specific implementation methods for determining whether the second migration device has passed authentication based on the migration receipt. Exemplarily, the migration receipt is parsed to obtain the random information contained therein, and the random information parsed from the migration receipt is compared with the random information used to generate the migration token. If the two are consistent, the second migration device has passed authentication; if the two are inconsistent, the second migration device has failed authentication, but it is not limited to this.

[0063] Optionally, S130 includes: S131, sending a first EID request to the second migration device, and receiving a second EID fed back by the second migration device, wherein the second EID is the EID of the second migration device.

[0064] Specifically, before S131, it also includes: creating a secure transmission channel. The secure transmission channel is used to ensure that the data transmitted between the first migration device and the second migration device is not eavesdropped, tampered with or forged, thereby improving security. The secure transmission channel may include an NFC transmission channel, a WIFI transmission channel, or a Bluetooth transmission channel, etc., but is not limited to this. The following is an example of an NFC transmission channel. The first migration device and the second migration device both include a security chip that integrates NFC functions and eSIM functions (that is, the NFC function and the eSIM function are located on the same security chip). In this way, when the first migration device and the second migration device are in physical contact or close to each other, an NFC connection can be established, thereby creating an NFC transmission channel (that is, a secure transmission channel). It is understandable that, for the integration and miniaturization of security chips, more and more devices integrate NFC functions and eSIM functions on the same security chip, and transmit the target configuration file through the NFC transmission channel, so that the device does not need to additionally set up a hardware module for transmitting the target configuration file. Moreover, since the NFC function and the eSIM function are integrated on the same security chip, the subsequent second migration device can more conveniently download the target configuration file to the eSIM and activate it after receiving the target configuration file, thereby reducing the possibility of external interference.

[0065] Specifically, the first EID request may be any request that enables the second migration device to feed back a unique identifier (Embedded ID, EID) of its own embedded subscriber identity module.

[0066] S132: Receive a second EID request sent by the second migration device, and feed back the first EID to the second migration device, where the first EID is the EID of the first migration device.

[0067] Specifically, the second EID request may be any request that enables the first migration device to feed back its own EID.

[0068] S133: Generate a first random number, encrypt the first random number using a key and a first EID to generate a migration token, send the migration token to the second migration device, and receive a migration receipt fed back by the second migration device.

[0069] Specifically, when the second migration device receives the migration token, it can decrypt the migration token using the key and the first EID to obtain a third random number, and then encrypt the third random number using the key and the second EID to generate a migration receipt, and send the migration receipt to the first migration device.

[0070] Optionally, the key is an account password. It is understandable that the account password is information known only to the user, and each user's account password is usually different, which means that each user's random number can be encrypted with a different key, which increases the difficulty of cracking the key, thereby improving the security of the target configuration file migration.

[0071] S134. Decrypt the migration receipt according to the second EID and the key to obtain a second random number.

[0072] S135: If the first random number and the second random number are consistent, it is determined that the second migration device has passed the authentication; otherwise, it is determined that the second migration device has not passed the authentication.

[0073] It can be understood that by setting a new random number to be generated each time authentication is performed and the random number is encrypted by the key and the first EID to obtain a migration token, it is ensured that the migration token at each authentication is likely to be different and difficult to predict, thereby reducing the risk of the migration token being cracked. Similarly, by setting the migration receipt to be encrypted by the key and the second EID to obtain a migration receipt, it is ensured that the migration receipt at each authentication is likely to be different and difficult to predict, thereby reducing the risk of the migration receipt being cracked. In this way, the reliability of authentication of the second migration device is improved.

[0074] S140: When the second migration device passes the authentication, encrypt the target configuration file by using the key, and send the encrypted target configuration file to the second migration device.

[0075] In the embodiment of the present disclosure, when the second migration device passes the authentication, the first migration device can encrypt the target configuration file by using the key, and send the encrypted target configuration file to the second migration device through the secure transmission channel. When receiving the encrypted target configuration file, the second migration device can decrypt the encrypted target configuration file by using the key, and then download the decrypted target configuration file to the eSIM and activate it.

[0076] S150: Set the target configuration file to an unavailable state.

[0077] In the embodiment of the present disclosure, when the second migration device receives the completed target configuration file, the first migration device may set the target configuration file to an unavailable state by deleting the target configuration file or switching the state of the target configuration file from valid to invalid.

[0078] The disclosed embodiments can achieve one-click completion of the migration of the target configuration file, without the need for the user to repeatedly re-order and download new configuration files and delete configuration files on old and new devices, thereby improving the convenience of the target configuration file migration, and encrypting the target configuration file for transmission, thereby improving the security of the target configuration file migration.

[0079] Figure 2 1 is a flow chart of a configuration file migration method provided by an embodiment of the present disclosure, and the method can be executed by a second migration device. The first migration device can be exemplarily understood as a device such as a mobile phone, a tablet computer, etc. Figure 1 As shown, the method provided in this embodiment includes the following steps:

[0080] S210: Receive a migration token sent by the first migration device, generate a migration receipt, and feed the migration receipt back to the first migration device, so that the first migration device determines whether the second migration device passes authentication according to the migration receipt.

[0081] Optionally, before receiving the migration token sent by the first migration device, it also includes: in response to a second input operation of the user, obtaining second account information input by the user, wherein the second account information includes an account name and an account password; if the second account information is correct, determining that the migration preparation of the second migration device is complete.

[0082] In an embodiment of the present disclosure, a user may input a second input operation to a second migration device. In response to the second input operation, the second migration device may obtain the second account information input by the user, and detect whether the second account information is correct. If the second account information is correct, the second migration device is confirmed to be ready for migration. Of course, if the second account information is incorrect, a prompt message may be output to the user to prompt the user to re-enter the account information until the second account information input by the user is correct or the total number of times the account information is input reaches a preset threshold and the migration process is terminated. If the second migration device is ready for migration, the second migration device may receive the migration token sent by the first migration device, generate a migration receipt, and feed back the migration receipt to the first migration device. Then, the first migration device determines whether the second migration device has passed authentication based on the migration receipt.

[0083] Specifically, the second account information is account information input by the user to the second migration device.

[0084] Specifically, there are many specific implementation methods for verifying whether the second account information is correct. Exemplarily, the second account information input by the user is compared with the correct account information stored in advance. If the two are consistent, the second account information is correct; if the two are inconsistent, the second account information is incorrect, but it is not limited to this.

[0085] It is understandable that by verifying whether the second account information is correct, and if the second account information is correct, the second migration device receives the migration token, the security and legality of the migration operation can be ensured.

[0086] Optionally, S210 may include: S211, receiving a first EID request sent by a first migration device, and feeding back a second EID to the first migration device, wherein the second EID is an EID of the second migration device.

[0087] S212: Send a second EID request to the first migration device, and receive a first EID fed back by the first migration device, wherein the first EID is the EID of the first migration device.

[0088] S213: Receive a migration token sent by the first migration device.

[0089] S214. Decrypt the migration token according to the key and the first EID to obtain a third random number.

[0090] S215. Encrypt the third random number according to the key and the first EID to generate a migration receipt.

[0091] Optionally, the first migration device and the second migration device both include a security chip integrating NFC function and eSIM function, and the first migration device and the second migration device transmit the target configuration file through the NFC transmission channel, and the key is the account password.

[0092] Specifically, for the understanding of S211-S215, please refer to the previous explanation of S111-S115, which will not be repeated here.

[0093] S220: When the second migration device passes the authentication, receive the encrypted target configuration file sent by the first migration device.

[0094] S230: Decrypt the encrypted target configuration file using the key.

[0095] S240: Download the decrypted target configuration file to the eSIM and activate it.

[0096] In the embodiment of the present disclosure, when the second migration device passes the authentication, the first migration device can encrypt the target configuration file by using the key, and send the encrypted target configuration file to the second migration device through the secure transmission channel. When receiving the encrypted target configuration file, the second migration device can decrypt the encrypted target configuration file by using the key, and then download the decrypted target configuration file to the eSIM and activate it.

[0097] The disclosed embodiments can achieve one-click completion of the migration of the target configuration file, without the need for the user to repeatedly re-order and download new configuration files and delete configuration files on old and new devices, thereby improving the convenience of the target configuration file migration, and encrypting the target configuration file for transmission, thereby improving the security of the target configuration file migration.

[0098] The following is a detailed description of the configuration file migration method provided by the embodiment of the present disclosure with reference to a specific example. Figure 3 This is a flowchart of a first migration device and a second migration device performing migration preparations provided by an embodiment of the present disclosure. Figure 4 This is a flowchart of authentication of a first migration device and a second migration device provided by an embodiment of the present disclosure. Figure 5 The present invention provides a flowchart of a first migration device and a second migration device transmitting a target configuration file. Figure 6 FIG. 1 is a flow chart of a second migration device downloading and activating a target configuration file provided by an embodiment of the present disclosure. Figure 3 As shown, the process of migration preparation for the first migration device and the second migration device is as follows: the user selects the target configuration file to be migrated on the first migration device; the user enters the mobile phone account information (i.e., the first account information) to the first migration device, and the process ends if the mobile phone account information verification fails; after the mobile phone account information verification is successful, the first migration device initiates a migration request to SM-DP+ for the target profile (i.e., the target configuration file); SM-DP+ returns the target profile to the first migration device; the user enters the mobile phone account information (i.e., the second account information) to the second migration device, and the process ends if the mobile phone account information verification fails, and after the mobile phone account information verification is successful, the migration preparation is completed. Figure 4 As shown, the authentication process of the first migration device and the second migration device is as follows: the first migration device contacts the NFC module of the second migration device to create an NFC transmission channel; the first migration device requests the EID of the second migration device (i.e., EID2) from the second migration device, and the second migration device requests the EID of the first migration device (i.e., EID1) from the first migration device; the first migration device generates a random number, encrypts the random number with the key (i.e., account password) and EID1 to generate a migration token, and sends the migration token to the second migration device; after receiving the migration token, the second migration device decrypts the migration token with the key and EID1 to obtain a random number, encrypts the random number with the key and EID2 to generate a migration receipt, and returns the migration receipt to the first migration device; the first migration device decrypts the migration receipt with the key and EID2, and checks whether the decrypted random number is consistent with the random number used to generate the migration token. If they are consistent, the authentication is successful. Figure 5As shown, the process of the first migration device and the second migration device transmitting the target configuration file is as follows: the first migration device encrypts the target profile with a key to obtain an encrypted target profile, and transmits it to the second migration device through the NFC transmission channel; after receiving the encrypted target profile, the second migration device decrypts the encrypted target profile with a key, and returns the receiving status to the first migration device; the first migration device checks the status word in the receiving status, and terminates the migration process if the status word is abnormal (indicating a reception abnormality), otherwise it continues to transmit the encrypted target profile until the second migration device receives all encrypted target profiles, and then the first migration device sets the target profile to an unavailable state. Figure 6 As shown, the process of downloading and activating the target profile by the second migration device is as follows: after the second migration device obtains the decrypted target profile, it downloads the target profile to the eSIM through the LPA (Local Profile Assistant) and activates it.

[0099] Figure 7 is a schematic diagram of the structure of a configuration file migration device provided by an embodiment of the present disclosure. The configuration file migration device can be understood as the first migration device or some functional modules in the first migration device. Figure 7 As shown, the migration device of the configuration file includes:

[0100] A first determining module 710, configured to determine a target configuration file to be migrated in response to a selection operation by a user;

[0101] A first receiving module 720 is configured to send a migration request to the SM-DP+ and receive the target configuration file fed back by the SM-DP+;

[0102] The second receiving module 730 is used to send a migration token to the second migration device, receive a migration receipt fed back by the second migration device, and determine whether the second migration device has passed the authentication according to the migration receipt;

[0103] A first encryption module 740 is configured to encrypt the target configuration file by using a key when the second migration device passes the authentication, and send the encrypted target configuration file to the second migration device;

[0104] The first setting module 750 is used to set the target configuration file to an unavailable state.

[0105] Optionally, the second receiving module 730 is specifically configured to send a first EID request to the second migration device, and receive a second EID fed back by the second migration device, wherein the second EID is the EID of the second migration device;

[0106] receiving a second EID request sent by the second migration device, and feeding back a first EID to the second migration device, wherein the first EID is the EID of the first migration device;

[0107] Generate a first random number, encrypt the first random number using the key and the first EID to generate the migration token, send the migration token to the second migration device, and receive the migration receipt fed back by the second migration device;

[0108] Decrypting the migration receipt according to the second EID and the key to obtain a second random number;

[0109] If the first random number is consistent with the second random number, it is determined that the second migration device has passed the authentication; otherwise, it is determined that the second migration device has not passed the authentication.

[0110] Optionally, the apparatus further includes a second determining module, configured to, before sending the migration request to the SM-DP+, obtain first account information input by the user in response to a first input operation of the user, wherein the first account information includes an account name and an account password;

[0111] When the first account information is correct, it is determined that the migration preparation of the second migration device is complete.

[0112] The device provided in this embodiment can execute the method of any of the above embodiments, and its execution method and beneficial effects are similar, which will not be repeated here.

[0113] Figure 8 is a schematic diagram of the structure of a configuration file migration device provided by an embodiment of the present disclosure. The configuration file migration device can be understood as the second migration device or a part of the functional modules in the second migration device. Figure 8 As shown, the migration device of the configuration file includes:

[0114] The third receiving module 810 is used to receive the migration token sent by the first migration device, generate a migration receipt, and feed back the migration receipt to the first migration device, so that the first migration device determines whether the second migration device passes the authentication according to the migration receipt;

[0115] A fourth receiving module 820, configured to receive the encrypted target configuration file sent by the first migration device when the second migration device passes the authentication;

[0116] A first decryption module 830, configured to decrypt the encrypted target configuration file using a key;

[0117] The first download and activation module 840 is used to download the decrypted target configuration file to the eSIM and activate it.

[0118] Optionally, the third receiving module 810 includes a first receiving generation submodule, which is used to receive the migration token sent by the first migration device and generate a migration receipt, and the first receiving generation submodule is specifically used to receive the first EID request sent by the first migration device and feedback the second EID to the first migration device, wherein the second EID is the EID of the second migration device;

[0119] Sending a second EID request to the first migration device, and receiving a first EID fed back by the first migration device, wherein the first EID is the EID of the first migration device;

[0120] receiving a migration token sent by the first migration device;

[0121] Decrypting the migration token according to the key and the first EID to obtain a third random number;

[0122] The third random number is encrypted according to the key and the first EID to generate the migration receipt.

[0123] Optionally, the apparatus further includes a third determination module, which is used to obtain second account information input by the user in response to a second input operation of the user before receiving the migration token sent by the first migration device, wherein the second account information includes an account name and an account password; and if the second account information is correct, determine that the migration preparation of the second migration device is complete.

[0124] Optionally, the first migration device and the second migration device both include a security chip integrating NFC function and eSIM function, the first migration device and the second migration device transmit the target configuration file through an NFC transmission channel, and the key is an account password.

[0125] The device provided in this embodiment can execute the method of any of the above embodiments, and its execution method and beneficial effects are similar, which will not be repeated here.

[0126] An embodiment of the present disclosure further provides an electronic device, which includes: a memory, in which a computer program is stored; and a processor, for executing the computer program. When the computer program is executed by the processor, the method of any of the above embodiments can be implemented.

[0127] For example, Fig. 9 Schematic diagram of the structure of an electronic device in the embodiment of the present disclosure. Fig. 9 , which shows a schematic diagram of the structure of an electronic device 900 suitable for implementing the embodiment of the present disclosure. The electronic device 900 in the embodiment of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Fig. 9 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0128] like Fig. 9 As shown, the electronic device 900 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage device 908 into a random access memory (RAM) 903. In the RAM 903, various programs and data required for the operation of the electronic device 900 are also stored. The processing device 901, the ROM 902, and the RAM 903 are connected to each other via a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.

[0129] Typically, the following devices may be connected to the I / O interface 905: an input device 906 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 907 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 908 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 909. The communication device 909 may allow the electronic device 900 to communicate with other devices wirelessly or by wire to exchange data. Although Fig. 9 The electronic device 900 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0130] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device 909, or installed from a storage device 908, or installed from a ROM 902. When the computer program is executed by the processing device 901, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0131] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, in which a computer-readable program code is carried. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0132] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0133] The computer-readable medium may be included in the electronic device, or may exist independently without being installed in the electronic device.

[0134] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: determines the target configuration file to be migrated in response to the user's selection operation; sends a migration request to the SM-DP+, and receives the target configuration file fed back by the SM-DP+; sends a migration token to the second migration device, and receives the migration receipt fed back by the second migration device, and determines whether the second migration device passes the authentication according to the migration receipt; if the second migration device passes the authentication, encrypts the target configuration file by using a key, and sends the encrypted target configuration file to the second migration device; and sets the target configuration file to an unavailable state.

[0135] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0136] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0137] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware, wherein the name of a unit does not, in some cases, limit the unit itself.

[0138] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0139] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0140] The embodiments of the present disclosure also provide a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the method of any of the above embodiments can be implemented. The execution method and beneficial effects are similar and will not be repeated here.

[0141] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0142] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A configuration file migration method, characterized in that: Applied to a first migration device, the method includes: In response to a selection operation by a user, determining a target configuration file to be migrated; Send a migration request to the SM-DP+, and receive the target profile fed back by the SM-DP+; Sending a migration token to a second migration device, receiving a migration receipt fed back by the second migration device, and determining whether the second migration device has passed authentication according to the migration receipt; When the second migration device passes the authentication, encrypting the target configuration file by using a key, and sending the encrypted target configuration file to the second migration device; Sets the target profile to an unavailable state.

2. The method according to claim 1, characterized in that The sending of the migration token to the second migration device, receiving a migration receipt fed back by the second migration device, and determining whether the second migration device has passed the authentication according to the migration receipt includes: Sending a first EID request to the second migration device, and receiving a second EID fed back by the second migration device, wherein the second EID is the EID of the second migration device; receiving a second EID request sent by the second migration device, and feeding back a first EID to the second migration device, wherein the first EID is the EID of the first migration device; Generate a first random number, encrypt the first random number using the key and the first EID to generate the migration token, send the migration token to the second migration device, and receive the migration receipt fed back by the second migration device; Decrypting the migration receipt according to the second EID and the key to obtain a second random number; If the first random number is consistent with the second random number, it is determined that the second migration device has passed the authentication; otherwise, it is determined that the second migration device has not passed the authentication.

3. The method according to claim 1, characterized in that Before sending the migration request to the SM-DP+, the method further includes: In response to a first input operation of the user, obtaining first account information input by the user, wherein the first account information includes an account name and an account password; When the first account information is correct, it is determined that the migration preparation of the first migration device is complete.

4. A configuration file migration method, characterized in that: Applied to the second migration device, the method includes: receiving a migration token sent by the first migration device, generating a migration receipt, and feeding back the migration receipt to the first migration device, so that the first migration device determines whether the second migration device has passed authentication according to the migration receipt; When the second migration device passes the authentication, receiving the encrypted target configuration file sent by the first migration device; Decrypting the encrypted target configuration file using a key; Download the decrypted target configuration file to the eSIM and activate it.

5. The method according to claim 4, characterized in that The receiving the migration token sent by the first migration device and generating a migration receipt includes: receiving a first EID request sent by the first migration device, and feeding back a second EID to the first migration device, wherein the second EID is the EID of the second migration device; Sending a second EID request to the first migration device, and receiving a first EID fed back by the first migration device, wherein the first EID is the EID of the first migration device; receiving a migration token sent by the first migration device; Decrypting the migration token according to the key and the first EID to obtain a third random number; The third random number is encrypted according to the key and the first EID to generate the migration receipt.

6. The method according to claim 4, characterized in that Before receiving the migration token sent by the first migration device, the method further includes: In response to a second input operation of the user, obtaining second account information input by the user, wherein the second account information includes an account name and an account password; If the second account information is correct, it is determined that the migration preparation of the second migration device is complete.

7. The method according to any one of claims 1 to 6, characterized in that: The first migration device and the second migration device both include a security chip integrating NFC function and eSIM function. The first migration device and the second migration device transmit the target configuration file through an NFC transmission channel, and the key is an account password.

8. A configuration file migration device, characterized in that: Applied to the first migration device, including: A first determining module, configured to determine a target configuration file to be migrated in response to a selection operation of a user; A first receiving module, configured to send a migration request to the SM-DP+, and receive the target configuration file fed back by the SM-DP+; A second receiving module, configured to send a migration token to a second migration device, receive a migration receipt fed back by the second migration device, and determine whether the second migration device has passed the authentication according to the migration receipt; a first encryption module, configured to encrypt the target configuration file by using a key when the second migration device passes the authentication, and send the encrypted target configuration file to the second migration device; The first setting module is used to set the target configuration file to an unavailable state.

9. A configuration file migration device, characterized in that: Applicable to the second migration device, including: a second receiving module, configured to receive a migration token sent by the first migration device, generate a migration receipt, and feed the migration receipt back to the first migration device, so that the first migration device determines whether the second migration device has passed the authentication according to the migration receipt; A third receiving module, configured to receive the encrypted target configuration file sent by the first migration device when the second migration device passes the authentication; A first decryption module, used to decrypt the encrypted target configuration file using a key; The first download and activation module is used to download the decrypted target configuration file to the eSIM and activate it.

10. An electronic device, characterized in that: include: A processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the processor executes the method according to any one of claims 1 to 3 or the method according to any one of claims 4 to 7.

11. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 3 or any one of claims 4 to 7 is implemented.

Images