Device locking method, device, computer device and computer readable storage medium

Abstract

The present application relates to a device locking method, apparatus, computer equipment, computer-readable storage medium and computer program product. The method comprises: obtaining a locking instruction, the locking instruction is generated based on the device information of the terminal; locking the embedded UICC according to the locking instruction, generating a locking result including the locking state of the embedded UICC; transmitting the locking result to the target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using the configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC. The method can realize the locking management of the embedded eUICC.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a device locking method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] With the development of communication technology, the existing Sim Lock method only implements Sim Lock for information such as the user identification code of the removable Sim card of the mobile phone, thereby locking the functions related to the Sim card, and cannot implement device locking for the embedded eUICC (Embedded Universal Integrated Circuit Card).

[0003] There is currently no locking method for embedded eUICC. Summary of the invention

[0004] Based on this, it is necessary to provide a device locking method, apparatus, computer device, computer readable storage medium and computer program product to address the above technical problems, which can implement locking management for embedded eUICC.

[0005] In a first aspect, the present application provides a device locking method, applied to a terminal, comprising:

[0006] Get the lock instruction, which is generated based on the device information of the terminal;

[0007] Lock the embedded UICC according to the locking instruction, and generate a locking result including a locking state of the embedded UICC;

[0008] The locking result is transmitted to the target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using the configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0009] In a second aspect, the present application also provides a device unlocking method, applied to a terminal, comprising:

[0010] Get the unlock start command;

[0011] sending an unlock request to the first server based on the unlock start instruction, so that the first server queries the state of the embedded UICC of the terminal as a locked state according to the unlock request, generates response information based on the locked state, and returns the response information to the terminal, wherein the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC;

[0012] The response information is received, and if the response information indicates that unlocking is allowed, the embedded UICC of the terminal is unlocked.

[0013] In a third aspect, the present application also provides a device lock management method, which is applied to a server and includes:

[0014] receiving a locking result corresponding to the terminal, the locking result including device information of the terminal and a corresponding locking state, the locking state being used to indicate that the embedded UICC of the terminal is currently locked, and restricting the use of a configuration file for the embedded UICC by the terminal;

[0015] The locking result is synchronized to the configuration server corresponding to the configuration file, so that the configuration server stores the locking result, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0016] In a fourth aspect, the present application also provides a device locking apparatus, applied to a terminal, comprising:

[0017] An acquisition module is used to acquire a locking instruction, which is generated based on the device information of the terminal;

[0018] A locking module, used to lock the embedded UICC according to the locking instruction, and generate a locking result including a locking state of the embedded UICC;

[0019] The synchronization module is used to transmit the locking result to the target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using the configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0020] In a fifth aspect, the present application also provides a device unlocking apparatus, applied to a terminal, comprising:

[0021] An acquisition module is used to acquire an unlocking start instruction;

[0022] a request module, configured to send an unlock request to the first server based on the unlock start instruction, so that the first server queries the state of the embedded UICC of the terminal as a locked state according to the unlock request, generates response information based on the locked state, and returns the response information to the terminal, wherein the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC;

[0023] The receiving module is used to receive the response information, and if the response information indicates that unlocking is allowed, unlock the embedded UICC of the terminal.

[0024] In a sixth aspect, the present application further provides a device lock management apparatus, applied to a server, comprising:

[0025] A receiving module, used to receive a locking result corresponding to the terminal, the locking result including device information of the terminal and a corresponding locking state, the locking state being used to indicate that the embedded UICC of the terminal is currently locked, and restricting the use of a configuration file for the embedded UICC by the terminal;

[0026] The synchronization module is used to synchronize the locking result to the configuration server corresponding to the configuration file, so that the configuration server stores the locking result, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0027] In a seventh aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above methods when executing the computer program.

[0028] In an eighth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the above methods when executed by a processor.

[0029] In a ninth aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the above methods are implemented.

[0030] The device locking method, apparatus, computer device, computer-readable storage medium and computer program product acquire a locking instruction, lock the embedded UICC according to the locking instruction, generate a locking result including the locking state of the embedded UICC, and transmit the result to the target server, thereby realizing the terminal locking its own embedded UICC and being able to quickly synchronize the locking state to the target server in a timely manner, quickly completing the locking of the relevant device and the cloud storage of the locking information, making the entire device locking operation process simple and fast, and improving the operation efficiency of the device locking, and wherein the locking state is used to indicate that the embedded UICC is locked, restricting the terminal from using the configuration file corresponding to the embedded UICC, so that when the embedded UICC of the terminal is locked, the terminal cannot use the configuration file corresponding to the embedded UICC, and further restricting all functions of the terminal that are related to the configuration file, thereby being able to efficiently realize batch locking of the relevant functions, and improving the locking efficiency of the device for the relevant functions, and in addition, since the application restricts the terminal from using the configuration file, the risk caused by the security vulnerability problem that may exist in the configuration file is effectively reduced, and the security of the terminal in the locked state is effectively improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A diagram of an application environment of a device locking method in an embodiment;

[0032] Figure 2 is a flow chart of a device locking method in one embodiment;

[0033] Figure 3 A schematic diagram of a flow chart of a device unlocking method in another embodiment;

[0034] Figure 4 A schematic diagram of a flow chart of a device lock management method in another embodiment;

[0035] Figure 5 is a timing diagram of locking and unlocking a device in a specific embodiment;

[0036] Figure 6 is a structural block diagram of a device locking device in one embodiment;

[0037] Figure 7 It is a structural block diagram of a device unlocking apparatus in another embodiment;

[0038] Figure 8 is a structural block diagram of a device locking management apparatus in another embodiment;

[0039] Fig. 9 is an internal structure diagram of a computer device in one embodiment;

[0040] Fig.10 FIG. 4 is a diagram showing the internal structure of another computer device in an embodiment. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0042] The device locking method provided in the embodiment of the present application can be applied to Figure 1In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. The terminal 102 obtains the locking instruction, which is generated based on the device information of the terminal, and locks the embedded UICC according to the locking instruction, and generates a locking result including the locking state of the embedded UICC; the terminal 102 transmits the locking result to the server 104, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the use of the configuration file of the embedded UICC by the terminal, and the locking result is used to manage the use of the configuration file of the embedded UICC. Among them, the terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices, and the Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The server 104 can be implemented with an independent server or a server cluster consisting of multiple servers.

[0043] In one embodiment, Figure 2 As shown, a device locking method is provided, which is applied to Figure 1 The terminal 102 in the example is used as an example to illustrate, and the following steps are included:

[0044] Step S202, obtaining a lock instruction.

[0045] Among them, the locking instruction is generated based on the device information of the terminal, and the locking instruction is used to instruct the terminal to lock its own embedded UICC. The device information of the terminal is an identifier that can uniquely represent the identity information of the terminal, that is, the device information of each terminal corresponds to the terminal one by one. For example, the device information can be the EID (globally unique physical identifier of the embedded UICC) corresponding to the embedded UICC of the terminal, and can also be the IMEI (International Mobile Equipment Identity) of the corresponding terminal or the terminal production serial number, etc.

[0046] Specifically, the locking instruction may be obtained by receiving the terminal from other devices or passing it, or it may be a locking instruction generated by the terminal itself after judging the corresponding instruction generation condition. For example, the detection result of a certain interactive instruction may be used as the judgment condition for the terminal to generate the locking instruction. By detecting the interactive instruction received by the terminal, the terminal generates the locking instruction corresponding to the embedded UICC of the terminal based on the device information corresponding to the terminal. Optionally, the terminal may transmit / send the device information corresponding to the terminal to other devices by wire or wireless means, and then the other devices generate the locking instruction corresponding to the terminal according to the device information of the terminal and return it to the terminal. The other devices here may be other terminals or servers, etc., which are not specifically limited here.

[0047] Step S204: lock the embedded UICC according to the locking instruction, and generate a locking result including the locking state of the embedded UICC.

[0048] The locking state is used to indicate that the embedded UICC is currently locked, and to restrict the use of the configuration file of the embedded UICC by the terminal. The locking result is used to manage the use of the configuration file of the embedded UICC. The method of restricting the use of the configuration file of the embedded UICC by the terminal includes but is not limited to prohibiting the terminal from accessing the server storing the configuration file, prohibiting the terminal from downloading the configuration file, or prohibiting the terminal from loading / activating the configuration file, etc. The locking result includes the device information of the terminal and the locking state corresponding to the embedded UICC of the terminal.

[0049] It should be understood that the configuration file of the embedded UICC is used to ensure the normal use of the functions of the terminal embedded UICC. When the terminal downloads the configuration file corresponding to the embedded UICC, and loads and enables it, the relevant functions of the terminal corresponding to the configuration file can be used normally, such as making calls, surfing the Internet, sending and receiving text messages, etc. When the use of the configuration file is in a restricted state (i.e., a locked state), the embedded UICC of the terminal is in an inactive or dormant non-working state. At this time, the terminal can be regarded as being in a state where no SIM card is installed. When the terminal is not connected to a wireless network, only preset functions can be used, such as only supporting related functions that do not depend on the embedded UICC, such as shooting, calculator, Bluetooth, etc.

[0050] Specifically, the terminal locks the embedded UICC according to the acquired locking instruction, and the locking operation can be completed by modifying the state of the locking status bit corresponding to the terminal embedded UICC according to the locking instruction, wherein the state of the locking status bit is used as a flag of whether the terminal embedded UICC has been locked, for example, if the locking status bit is 0, it indicates that it is not locked, and if the locking status bit is 1, it indicates that it is locked; after locking the embedded UICC, the terminal will determine whether the locking is successful, and if the locking is successful, a locking result including the locking status of the embedded UICC is generated. Optionally, the terminal can generate a corresponding locking result according to the device information of the terminal and the locking status of the embedded UICC of the terminal; optionally, if the terminal determines that the locking fails after locking the embedded UICC, a locking result including the locking failure status can be generated, and the locking result including the locking failure status is used as a basis for whether the terminal meets the factory conditions, that is, if the locking result includes the locking failure status, the terminal will be marked as not meeting the factory conditions and will be intercepted by the production line equipment.

[0051] Step S206: delivering the locking result to the target server.

[0052] The target server may be a corresponding server or a corresponding server cluster, and the target server is used to store configuration files corresponding to the embedded UICC of each terminal, and the target server may manage the use of the corresponding configuration files according to the locking results corresponding to the embedded UICC of each terminal.

[0053] Specifically, the way in which the terminal transmits the locking result to the target server includes but is not limited to: the terminal sends the locking result to the target server by wired or wireless means via one or more third devices. For example, in the terminal's equipment production scenario, the terminal sends / transmits the locking result to the production line equipment, and then transmits the locking result to the target server via the production line equipment, thereby realizing cloud-based synchronous storage / recording of the locking result corresponding to the terminal.

[0054] Optionally, when the terminal is connected to the network, the terminal may directly transmit / send the locking result to the target server, so that the target server stores the locking result of the terminal and manages the use of the corresponding configuration file based on the locking result.

[0055] In this embodiment, by acquiring a locking instruction, locking the embedded UICC according to the locking instruction, and then generating a locking result including the locking state of the embedded UICC, and transmitting it to the target server, the terminal can lock its own embedded UICC and can quickly synchronize the locking state to the target server in time, quickly complete the locking of the relevant device and the cloud storage of the locking information, so that the entire device locking operation process is simple and fast, and the operation efficiency of device locking is improved. The locking state is used to indicate that the embedded UICC is locked, and the terminal is restricted from using the configuration file corresponding to the embedded UICC, so that when the embedded UICC of the terminal is locked, the terminal cannot use the configuration file corresponding to the embedded UICC, and then all functions of the terminal that are dependent on the configuration file can be restricted, so that batch locking of the relevant functions can be efficiently realized, and the locking efficiency of the relevant functions of the device is improved. In addition, since the application restricts the use of the configuration file by the terminal, the risk caused by the security vulnerability problem that may exist in the configuration file is effectively reduced, and the security of the terminal in the locked state is effectively improved.

[0056] In one embodiment, obtaining a locking instruction includes: receiving a locking instruction transmitted by a production line device.

[0057] Among them, the locking instruction is generated by the production line equipment based on the device information of the terminal. The production line equipment is a computer device that performs relevant production control on the terminal when the terminal is in production line production.

[0058] Specifically, the terminal transmits the device information corresponding to the terminal to the production line equipment through wired or wireless communication, so that the production line equipment can identify the specific identity of the terminal currently communicating. Next, the production line equipment generates a corresponding locking instruction based on the acquired device information, and returns the locking instruction to the corresponding terminal, instructing the corresponding terminal to lock the corresponding embedded UICC. Optionally, the production line equipment can also generate the corresponding locking instruction by encrypting and adding a tag, and then return the tagged and encrypted locking instruction to the terminal, which first performs a tag match on the locking instruction. If the match is successful, the locking instruction is decrypted to obtain the decrypted locking instruction, thereby improving network security during the locking operation.

[0059] The locking result is transmitted to the server, including: transmitting the locking result to the production line equipment, so that the production line equipment sends the locking result to the server.

[0060] The locking result includes the device information of the terminal and the corresponding locking status.

[0061] Specifically, the terminal can transmit the locking result to the production line equipment by means of a data line connection or wirelessly (such as WiFi, Bluetooth, etc.), and then the production line equipment sends the locking result of the terminal to the server.

[0062] In this embodiment, the locking of the embedded UICC of the terminal before leaving the factory is completed on the equipment production line corresponding to the terminal. The locking operation of the embedded UICC of the terminal is jointly completed through the interaction between the production line equipment on the production line and the corresponding terminal during the locking process, and the locking result corresponding to the embedded UICC of the terminal is sent by the production line equipment to the server, so as to complete the locking of the terminal and the cloud storage / recording of the locking information. Compared with the method in which the terminal directly sends its own locking result to the server after connecting to the network, it avoids the defect that the network congestion caused by the excessive number of network-connected terminals in the production line environment, thereby reducing the efficiency of terminal locking and information storage, and can effectively reduce the number of terminals that need to be connected to the network in the production line environment, effectively reduce the burden of network bandwidth, and save network bandwidth resources.

[0063] In one embodiment, locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC includes: locking the embedded UICC of the terminal according to the locking instruction to obtain a corresponding locking state; and generating the locking result based on the locking state and device information of the terminal.

[0064] The device information of the terminal and the locking state corresponding to the terminal are in a one-to-one correspondence, that is, if a terminal responds to the locking instruction and completes the locking of the embedded UICC, the generated locking result must include the one-to-one correspondence between the device information of the terminal and the locking state.

[0065] In this embodiment, the locking state obtained after locking the embedded UICC of the terminal according to the locking instruction is uniquely matched with the device information of the terminal to generate a corresponding locking result, so that in the subsequent steps, the server can quickly and directly determine the locking state of the embedded UICC of the corresponding terminal according to the locking result, thereby improving data processing efficiency.

[0066] In one embodiment, locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC includes: locking the embedded UICC based on the locking instruction and setting a locking state bit corresponding to the embedded UICC to a locked state; and generating a locking result including the locking state of the embedded UICC based on the locking state of the locking state bit.

[0067] Among them, the lock status bit is used to identify whether the corresponding terminal has locked the embedded UICC. For example, if the lock status bit is in a valid state or the value is 1, it indicates that the embedded UICC of the terminal has been locked. If the lock status bit is in an invalid state or the value is 0, it indicates that the embedded UICC of the terminal is not locked. In addition, the state of the lock status bit is used as a basis for restricting the use of the configuration file for the embedded UICC by the corresponding terminal. For example, if the lock status bit is in a valid state or the value is 1, the use of the configuration file for the embedded UICC by the terminal is restricted, otherwise, it is not restricted.

[0068] In this embodiment, by setting a locking status bit for identifying the locking status of the terminal for the embedded UICC in the terminal, the setting of the corresponding locking status is implemented, so that when the use of the configuration file of the embedded UICC of the terminal is restricted, the locking status of the terminal for the embedded UICC can be quickly and accurately determined by querying the state of the locking status bit, thereby improving the efficiency of determining the locking status.

[0069] In one embodiment, after locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: obtaining an access request for a configuration server corresponding to the configuration file; and if the state of the embedded UICC is the locked state, prohibiting the terminal from sending an access request to the configuration server.

[0070] Among them, the access request includes the network access address of the corresponding configuration server. The access request is used to establish a network connection between the terminal and the corresponding configuration server. The access request can be an access request generated by the user entering the access link of the corresponding configuration server on the terminal, or it can be an access request generated by the terminal scanning a related identification code (QR code, bar code, etc.). The related identification code can be an identification code provided by a communication operator or an identification code pre-stored in the terminal. There is no specific restriction here.

[0071] Specifically, after the terminal obtains the access request for the configuration server corresponding to the configuration file, the terminal determines the current state of the embedded UICC. If the state of the embedded UICC is a locked state, the terminal prohibits sending an access request to the configuration server. Specifically, the terminal may intercept the access request. Optionally, if the state of the embedded UICC is a locked state, the terminal compares the server access address carried in the access request with the pre-stored prohibited access address. If the comparison result of the two is consistent, the terminal intercepts the access request.

[0072] In this embodiment, the terminal obtains an access request to the configuration server corresponding to the configuration file, and queries the state of the terminal for the embedded UICC. If the state of the embedded UICC is a locked state, the terminal is prohibited from sending an access request to the configuration server, thereby effectively restricting the terminal's access to the configuration server, and further making it impossible for the terminal to download the corresponding configuration file in the configuration server, thereby implementing restrictions on the use of the configuration file for the embedded UICC by the terminal, so that the terminal cannot illegally use the configuration file corresponding to the embedded UICC in the locked state, effectively ensuring the reliability and security of the lock, and in this embodiment, by directly prohibiting the terminal from accessing the configuration server and downloading the configuration file, this method of restricting the use of the configuration file effectively reduces the network security risks such as virus intrusion caused by possible security vulnerabilities in the configuration file, and improves the security of the terminal in the locked state.

[0073] In one embodiment, after the embedded UICC is locked according to the locking instruction and a locking result including the locking state of the embedded UICC is generated, the method further includes: displaying a corresponding target interface based on the interface operation instruction; obtaining a scanning operation for a target identification code, and generating an access request for a configuration server; if the state of the embedded UICC is the locked state, prompting that the terminal has been locked and prohibiting access to the configuration server.

[0074] Among them, the target interface includes a target identification code, which is used to access the configuration server corresponding to the configuration file. The interface operation instructions can be generated by the user clicking a virtual button on the terminal screen, or by sliding the page, etc. The target identification code can be a QR code, bar code, etc.

[0075] Specifically, the terminal obtains an interface operation instruction, and based on the interface operation instruction, displays a corresponding target interface on the terminal screen, then obtains location information of a target identification code in the target interface, performs a scanning operation on the target identification code of the location information, generates an access request of the terminal to the configuration server, and the terminal queries the status of the embedded UICC. If the status is a locked state, a prompt message is generated to prompt that the terminal is locked and access to the configuration server is prohibited. Optionally, the terminal intercepts the access request. Specifically, if the status of the embedded UICC is a locked state, the terminal compares the server access address carried in the access request with the pre-stored prohibited access address. If the comparison result of the two is consistent, the terminal intercepts the access request.

[0076] In this embodiment, an access request to the corresponding configuration server is automatically generated by scanning the target identification code of the target interface. There is no need to manually fill in the network access address of the configuration server and then generate the access request. This method in this embodiment only requires a simple scan of the target identification code to quickly and conveniently generate an access request from the terminal to the configuration server, thereby effectively improving the efficiency of generating access requests.

[0077] In one embodiment, after locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: sending a configuration file download request to a configuration server corresponding to the configuration file, so that the configuration server rejects the configuration file download request when the embedded UICC of the terminal is in the locked state.

[0078] The locking state of the embedded UICC is obtained based on a query of a locking result corresponding to the terminal pre-stored in the configuration server, and the configuration file download request is used to access a download interface of the configuration file of the configuration server.

[0079] Specifically, when the terminal can normally access the configuration server, the terminal sends a configuration file download request to the corresponding configuration server. After receiving the configuration file download request sent by the terminal, the configuration server queries the state corresponding to the embedded UICC of the terminal stored in the configuration server. If the state corresponding to the embedded UICC of the terminal is a locked state, the configuration file download request sent by the terminal is rejected. Specifically, it can be: the configuration server does not respond to the configuration file download request, or the configuration server generates a rejection response and returns it to the terminal, and the rejection response may carry the reason for refusing the terminal to download the configuration file corresponding to the embedded UICC.

[0080] In this embodiment, a configuration file download request is sent to the configuration server corresponding to the configuration file, so that the configuration server rejects the configuration file download request when the embedded UICC of the terminal is in a locked state, so that the terminal cannot download the corresponding configuration file in the configuration server, thereby implementing restrictions on the use of the configuration file for the embedded UICC by the terminal, so that the terminal cannot illegally use the configuration file corresponding to the embedded UICC in a locked state, effectively ensuring the reliability and security of the locking. It is worth noting that the terminal in this embodiment can perform normal network access with the configuration server, and only the configuration file download request of the terminal is rejected, which does not affect other access activities between the terminal and the configuration server, thereby not affecting other network request behaviors of the terminal, and ensuring the efficiency of the terminal network access operation.

[0081] In one embodiment, after locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: obtaining a file enabling request corresponding to the configuration file; and if the state of the embedded UICC is the locked state, prohibiting the terminal from responding to the file enabling request.

[0082] Among them, the configuration file is downloaded from the configuration server corresponding to the configuration file. The file activation request can be generated by the terminal by detecting an interactive operation on the terminal screen, such as clicking, sliding, etc. The file activation request is used to request the terminal to load and run the configuration file corresponding to the downloaded embedded UICC. The configuration file may be downloaded by the operator or technical production personnel by default when the terminal is produced on the production line and then shipped, that is, the embedded UICC of the terminal has downloaded the corresponding configuration file when it leaves the factory; it may also be that the configuration file is not downloaded when the terminal leaves the factory, and is subsequently downloaded by the user from the configuration server. No specific restrictions are made here.

[0083] Specifically, the terminal obtains a file enabling request corresponding to the configuration file, and detects the current state of the terminal embedded UICC. If the current state is a locked state, the terminal is prohibited from responding to the file enabling request. Specifically, the terminal may ignore / intercept the file enabling request so that the configuration file corresponding to the file enabling request will not be loaded and run.

[0084] In this embodiment, by prohibiting the terminal from responding to the file activation request according to the state of the terminal embedded UICC being in a locked state, the use of the configuration file of the embedded UICC by the terminal is restricted, so that the terminal cannot illegally use the configuration file corresponding to the embedded UICC in the locked state, and the reliability and security of the locking are effectively guaranteed.

[0085] In one embodiment, transmitting the locking result to the target server includes: transmitting the locking result to the first server, so that the first server synchronizes the locking result to the configuration server.

[0086] The first server is used to store the locking result, and the stored locking result is used to process the unlocking request of the terminal; the configuration server is used to store and manage the use of the configuration file corresponding to the embedded UICC of the terminal.

[0087] Specifically, the terminal transmits the locking result to the first server so that the first server stores the locking result of the terminal, and synchronizes the locking result to the configuration server so that the configuration server stores the locking result of the terminal.

[0088] In this embodiment, the terminal transmits the locking result to the first server, so that the first server synchronizes the locking result to the configuration server, thereby eliminating the need for the terminal to separately transmit the locking result to the configuration server, effectively reducing the workload on the terminal side. In this embodiment, the control process of subsequent unlocking of the terminal and the management process of the configuration file are divided between the first server and the configuration server respectively, thereby effectively avoiding the defect of concentrating all work on one server, which causes excessive computing burden and leads to low work efficiency, and effectively improving the efficiency of device locking management.

[0089] In one embodiment, Figure 3 As shown, a device unlocking method is provided, which is applied to Figure 1 The terminal 102 in the example is used as an example to illustrate, and the following steps are included:

[0090] Step S302, obtaining an unlock start instruction.

[0091] Among them, the unlock start instruction is used to instruct the terminal to start the unlock operation and generate an unlock request; the unlock start instruction can be generated by the terminal through real-time detection of interactive operations on the terminal screen or physical buttons of the terminal, or it can be generated by the terminal scanning an identification code provided by the operator (such as a QR code, bar code, etc.), or it can be generated by receiving instruction instructions sent by other devices.

[0092] Step S304: sending an unlock request to the first server based on the unlock start instruction, so that the first server queries the embedded UICC of the terminal as locked according to the unlock request, generates response information based on the locked status, and returns the response information to the terminal.

[0093] The state of the embedded UICC of the terminal is a locked state which is stored in the first server, and the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC.

[0094] Specifically, the terminal generates an unlock request according to the acquired unlock start instruction, and sends the unlock request to the first server. After receiving the unlock request sent by the terminal, the first server queries the status of the embedded UICC of the terminal stored locally according to the device information carried in the unlock request. If the status of the embedded UICC of the terminal is locked, response information is generated based on the locked status and the response information is returned to the terminal. In addition, when the first server fails to query the locked status of the embedded UICC of the terminal in the local database, a feedback message corresponding to the unlock failure is generated to the terminal, wherein the feedback message may include the reason for the unlock failure.

[0095] Optionally, the terminal may encrypt the unlock request data by adding a signature and encrypting it, and set a corresponding signature identifier, so that after the first server receives the encrypted unlock request, it verifies the signature identifier carried by the unlock request, and if the verification is successful, it decrypts the encrypted unlock request to obtain the device information carried in the decrypted unlock request, and then inquires about the status of the locally stored embedded UICC of the terminal based on the device information. If it is found that the status of the embedded UICC of the terminal is a locked state, response information is generated based on the locked state, and the response information is returned to the terminal.

[0096] Step S306: receiving response information, and if the response information indicates that unlocking is allowed, unlocking the embedded UICC of the terminal.

[0097] Among them, the response information may include device information of the terminal to be unlocked, and the device information of the terminal is an identifier that can uniquely represent the identity information of the terminal, that is, the device information of each terminal corresponds to the terminal one by one. For example, the device information may be the EID (globally unique physical identifier of the embedded UICC) corresponding to the embedded UICC of the terminal, or the IMEI (International Mobile Equipment Identity) of the corresponding terminal or the terminal production serial number, etc. The response information includes at least two indication states (i.e., indicating that unlocking is allowed or prohibited).

[0098] Specifically, the terminal receives the response information returned by the first server, and verifies the device information carried in the response information. If the verification result is successful, it determines whether the response information indicates that the terminal allows unlocking. If the response information indicates that unlocking is allowed, the terminal unlocks the embedded UICC of the terminal.

[0099] Optionally, when generating the response information, the first server may encrypt the response information by adding a signature and encrypting it, and set a corresponding signature identifier, so that after the terminal receives the encrypted response information, it verifies the signature identifier carried by the unlock request, and if the verification is successful, the encrypted response information is decrypted to obtain the device information carried in the decrypted response information, and then the device information carried in the response information is compared with the device information corresponding to the current terminal. If the comparison is consistent, it is determined whether the response information indicates that the terminal is allowed to unlock, and if the response information indicates that unlocking is allowed, the terminal unlocks the embedded UICC of the terminal.

[0100] The device unlocking method generates and sends an unlocking request to the first server based on the unlocking start instruction obtained, so that the first server can query the locking state of the terminal embedded UICC stored locally on the first server according to the unlocking request, so as to quickly determine whether the terminal is a legal terminal. If the locking state corresponding to the embedded UICC of the terminal is locally stored, the terminal is a legal terminal, and corresponding response information is generated at this time, and the response information is fed back to the terminal in a timely manner; after the terminal receives the response information, if it is determined that the response information indicates that unlocking is allowed, the embedded UICC of the terminal is unlocked, so that after the terminal is unlocked, the state of its embedded UICC is no longer in a locked state, and thus the use of the configuration file for the embedded UICC by the terminal is no longer restricted, so that the related functions of the terminal that rely on the configuration file corresponding to the embedded UICC are unlocked in batches, thereby improving the unlocking efficiency of the terminal for the related functions.

[0101] In one embodiment, the device unlocking method further includes: if the response information indicates that unlocking is prohibited, prompting that the unlocking fails, and prohibiting the terminal from unlocking the embedded UICC.

[0102] The method of prompting the unlocking failure may include generating a corresponding prompt box on the terminal screen, wherein the prompt box displays corresponding prompt text, pattern, etc.

[0103] Specifically, the terminal analyzes the relevant flag bit of the received response information. If the analysis result determines that the response information indicates that unlocking is prohibited, a corresponding prompt message is generated to prompt that the current unlocking operation fails, and the terminal will not unlock the embedded UICC. At this time, the embedded UICC of the terminal is still in a locked state, and the terminal's use of related configuration files is still restricted.

[0104] In this embodiment, by analyzing the response information fed back by the first server, it is determined that the response information indicates that unlocking is prohibited, then a prompt of unlocking failure is given, and the terminal is prohibited from unlocking the embedded UICC, so that when the terminal fails to unlock, the unlocking failure can be prompted in time to avoid the terminal or the user from continuously waiting for unlocking, saving waiting time and improving the efficiency of the unlocking operation.

[0105] In one embodiment, after the embedded UICC of the terminal is unlocked, the method includes: obtaining a download request for a configuration file; sending the download request to a configuration server, so that the configuration server determines the current state of the embedded UICC corresponding to the terminal according to the download request, and if the current state is an unlocked state, returns the configuration file to the terminal; receiving the configuration file, and enabling the configuration file.

[0106] The method of obtaining the download request may be generated by the terminal detecting an interactive operation instruction on the screen, or may be generated by receiving trigger information sent by other devices. The unlocked state is obtained by the configuration server updating the lock state of the embedded UICC of the terminal. The lock state update is completed based on the state change notification of the first server. The unlocked state is used to lift the use restriction of the configuration file corresponding to the embedded UICC. The restriction method includes but is not limited to the configuration server prohibiting the terminal from downloading the configuration file from the configuration server.

[0107] Specifically, the terminal obtains a download request for a configuration file, and sends the download request to a configuration server, so that the configuration server queries the status of the locally stored terminal embedded UICC according to the device information of the terminal carried in the download request. If the configuration server queries that the current status corresponding to the device information of the terminal is an unlocked state, the configuration server responds to the download request of the terminal and returns the corresponding configuration file to the terminal; the terminal receives the configuration file and enables the configuration file.

[0108] In this embodiment, the unlocked state of the configuration server is obtained by updating the locked state of the embedded UICC of the terminal by the configuration server, and the locked state update is completed based on the state change notification of the first server, so that the state of the embedded UICC of the terminal stored in the configuration server can be updated in time by the first server, so that the download request of the configuration file after the subsequent terminal is unlocked can be responded normally, and the corresponding configuration file can be successfully downloaded, without too much cumbersome interaction and state verification between the terminal and the configuration server, thereby improving the download efficiency of the configuration file.

[0109] In one embodiment, Figure 4 As shown, a device lock management method is provided, which is applied to Figure 1 The server 104 in the example is used as an example to illustrate, and the following steps are included:

[0110] Step S402: receiving the locking result corresponding to the terminal.

[0111] The locking result includes the device information of the terminal and the corresponding locking status. The locking status is used to indicate that the embedded UICC of the terminal is currently locked, and the use of the configuration file for the embedded UICC by the terminal is restricted. The method of restricting the use of the configuration file includes but is not limited to prohibiting the terminal from accessing the configuration server storing the configuration file, prohibiting the terminal from downloading the corresponding configuration file from the configuration server, and prohibiting the terminal from loading / enabling the downloaded configuration file.

[0112] Among them, the device information of the terminal is an identifier that can uniquely represent the identity information of the terminal, that is, the device information of each terminal corresponds to the terminal one by one. For example, the device information can be the EID (globally unique physical identifier of the embedded UICC) corresponding to the embedded UICC of the terminal, or the IMEI (International Mobile Equipment Identity) of the corresponding terminal or the terminal production serial number, etc.

[0113] Step S404: synchronize the locking result to the configuration server corresponding to the configuration file, so that the configuration server stores the locking result.

[0114] The locking result is used to manage the use of the configuration file of the embedded UICC.

[0115] It should be understood that the configuration file of the embedded UICC is used to ensure the normal use of the functions of the terminal embedded UICC. When the terminal downloads the configuration file corresponding to the embedded UICC, and loads and enables it, the relevant functions of the terminal corresponding to the configuration file can be used normally, such as making calls, surfing the Internet, sending and receiving text messages, etc. When the use of the configuration file is in a restricted state (i.e., a locked state), the embedded UICC of the terminal is in an inactive or dormant non-working state. At this time, the terminal can be regarded as being in a state where no SIM card is installed. When the terminal is not connected to a wireless network, only preset functions can be used, such as only supporting related functions that do not depend on the embedded UICC, such as shooting, calculator, Bluetooth, etc.

[0116] The device locking management method, after receiving the locking result corresponding to the terminal, locally stores the locking result, and synchronizes the locking result corresponding to the terminal to the configuration server, so that the configuration server stores the locking result corresponding to the terminal, so that in the subsequent unlocking process of the terminal, the server can judge whether it meets the unlocking condition according to the state of the terminal embedded UICC stored locally, so as to quickly generate the response information corresponding to the terminal unlocking request, thereby improving the unlocking efficiency of the terminal; in addition, the server will synchronize the locking result corresponding to the terminal to the configuration server storing the configuration file in time, so that the configuration server can determine whether the terminal meets the use permission of the configuration file according to the locking state of the terminal locking result stored locally, and if the terminal has not been unlocked, the terminal is restricted from using the configuration file corresponding to the embedded UICC, so that when the embedded UICC of the terminal is locked, the terminal cannot use the configuration file corresponding to the embedded UICC, thereby improving the security and reliability of device locking.

[0117] In one embodiment, the above-mentioned device lock management method also includes: receiving a status change instruction corresponding to the terminal; based on the status change instruction, generating a corresponding status change notification, and sending the status change notification to the configuration server, so that the configuration server updates the lock status corresponding to the terminal to the unlocked status according to the status change notification.

[0118] Among them, the state change instruction is generated based on the operator information corresponding to the terminal; the unlocked state is used to lift the usage restrictions on the configuration file corresponding to the embedded UICC, and the state change instruction and the state change notification both include the device information of the corresponding terminal and the corresponding target state, which may be an indication to change the locked state of the corresponding terminal to the unlocked state.

[0119] Specifically, the server receives a status change instruction corresponding to the terminal, wherein the status change instruction may be generated by the operator directly through the operator terminal according to the operation policy, and then sent to the server, so that the server generates a corresponding status change notification according to the status change instruction, and sends it to the configuration server, so that the configuration server updates the locked state corresponding to the terminal stored in the configuration server to an unlocked state based on the status change notification.

[0120] Optionally, the state change instruction is generated by: the server receives state information sent by the operator terminal, the state information including a target time point and a target duration; determines an unlocking time based on the target time point and the target duration; and generates a state change instruction if the current time reaches the unlocking time.

[0121] In this embodiment, after receiving the state change instruction, the server generates a corresponding state change notification based on the state change instruction, and then sends the state change notification to the configuration server, so that the configuration server changes the locked state of the corresponding embedded UICC stored locally to the unlocked state, thereby realizing unlocking the use restriction of the corresponding configuration file on the configuration server side. At this time, if the corresponding terminal makes a download request for the configuration file, the configuration server will respond to the download request and allow the download without performing more state verification processes between the terminal and the configuration server, so that the use right of the configuration file corresponding to the terminal can be quickly unlocked, thereby improving the use efficiency of the configuration file after the terminal is unlocked.

[0122] In one embodiment, after synchronizing the locking result to the configuration server corresponding to the configuration file so that the configuration server stores the locking result, the method further includes: receiving an unlocking request corresponding to the terminal; based on the unlocking request, querying that the current state of the embedded UICC of the terminal is a locked state, and generating corresponding response information based on the locked state, and returning the response information to the terminal, so that the terminal processes the unlocking operation based on the response information.

[0123] The response information includes at least two indication meanings of allowing the terminal to be unlocked and prohibiting the terminal to be unlocked; the unlock request includes the device information corresponding to the terminal, and the response information may include the device information of the terminal to be unlocked.

[0124] Specifically, the server receives an unlock request corresponding to the terminal, queries the current state of the embedded UICC of the terminal in the local database according to the device information in the unlock request, and generates response information corresponding to the terminal if the current state of the embedded UICC of the terminal is a locked state, and returns the response information to the corresponding terminal, so that the terminal processes the unlock operation of the terminal according to the response information. Optionally, the terminal can verify the device information of the terminal to be unlocked carried in the response information, and if the verification is successful, the unlock operation of the terminal is processed based on the response information.

[0125] Optionally, when generating the response information, the server may encrypt the response information by adding a signature and encrypting it, and set a corresponding signature identifier, so that after the terminal receives the encrypted response information, it verifies the signature identifier carried by the unlock request. If the verification is successful, the encrypted response information is decrypted to obtain the device information carried in the decrypted response information, and then the device information carried in the response information is compared with the device information corresponding to the current terminal. If the comparison is consistent, it is determined whether the response information indicates that the terminal is allowed to unlock. If the response information indicates that unlocking is allowed, the terminal unlocks the embedded UICC of the terminal.

[0126] In this embodiment, the server queries the lock state of the terminal embedded UICC stored locally on the server according to the received unlock request, so as to quickly determine whether the terminal is a legitimate terminal. If the server queries and finds that the lock state corresponding to the terminal embedded UICC is stored locally, the terminal is a legitimate terminal. At this time, corresponding response information is generated and the response information is fed back to the terminal in a timely manner. After the terminal receives the response information, if it is determined that the response information indicates that unlocking is allowed, the embedded UICC of the terminal is unlocked, so that after the terminal is unlocked, the state of its embedded UICC is no longer a locked state, and thus the use of the configuration file for the embedded UICC by the terminal is no longer restricted, so that the related functions of the terminal that rely on the configuration file corresponding to the embedded UICC are unlocked in batches, thereby improving the unlocking efficiency of the terminal for the related functions.

[0127] In one embodiment, based on an unlock request, it is queried that the current state of the embedded UICC of the terminal is a locked state, and corresponding response information is generated based on the locked state, and the response information is returned to the terminal, including: acquiring dynamic configuration information corresponding to the terminal; if the dynamic configuration information meets the unlocking condition, generating first response information corresponding to unlocking permission, and returning the first response information to the terminal, so that the terminal completes unlocking the embedded UICC based on the first response information; if the dynamic configuration information does not meet the unlocking condition, generating second response information corresponding to unlocking prohibition, and returning the second response information to the terminal, so that the terminal generates prompt information based on the second response information, and prohibits the terminal from unlocking the embedded UICC.

[0128] Among them, the dynamic configuration information is generated based on the operator information corresponding to the terminal, which can be the sale time of the terminal by the operator, or the time conditions for unlocking the terminal set / edited by the operator staff in the server, such as the allowed unlocking status and allowed unlocking time corresponding to the terminals in various locked states set by the operator in the server. The dynamic configuration information can be updated at any time, and the prompt information is used to prompt that the terminal unlocking fails.

[0129] Specifically, the server may obtain the dynamic configuration information corresponding to the terminal by receiving the dynamic configuration information sent by other devices (such as the terminal, the server, etc.), or may directly read the dynamic configuration information from the local storage area, and then determine the indication state contained in the dynamic configuration information to determine whether it satisfies the unlocking condition of the terminal. For example, when the dynamic configuration information contains the terminal EID information of 001 and the indication state of the corresponding terminal embedded UICC is unlocking allowed, it means that the dynamic configuration information satisfies the unlocking condition of the terminal with the terminal EID information of 001, and then generates the corresponding first response information, and returns the first response information to the terminal, so that the terminal completes unlocking the embedded UICC based on the first response information; if the dynamic configuration information does not contain the indication state of the terminal with the terminal EID information of 001 or the indication state is unlocking prohibited, it means that the dynamic configuration information does not meet the unlocking condition of the terminal, and at this time, generates the second response information, and returns the second response information to the terminal, so that the terminal generates the prompt information based on the second response information, and prohibits the terminal from unlocking the embedded UICC.

[0130] In this embodiment, dynamic configuration information is acquired in real time, and then the dynamic configuration information is analyzed to determine whether the unlocking condition is met, and first response information or second response information is generated according to the determination result, and then returned to the terminal, so that the terminal processes the unlocking operation according to whether the returned response information is the first response information or the second response information. If the embedded UICC of the terminal is unlocked, the state of the embedded UICC is no longer a locked state after the terminal is unlocked, and thus the use of the configuration file for the embedded UICC by the terminal is no longer restricted, so that the related functions of the terminal that depend on the configuration file corresponding to the embedded UICC are unlocked in batches, thereby improving the unlocking efficiency of the terminal for the related functions.

[0131] The present application also provides an application scenario, and the application scenario applies the above-mentioned device locking method. Specifically, the application of the device locking method in the application scenario is as follows:

[0132] In the existing Sim Lock solution, only the PLMN (Public Land Mobile Network) and IMSI information of the card used by the mobile phone are implemented to lock the related functions that depend on the SIM card (such as disabling the card's Internet access, call functions, etc.). Currently, there is no lock for the EID information in the eUICC, thereby restricting the use of any eSim profile on the eUICC.

[0133] Based on this, the device locking method provided in this embodiment can realize the locking management for the embedded eUICC, which can make the entire device locking operation process simple and fast, improve the operation efficiency of device locking, and limit the terminal from using the configuration file corresponding to the embedded UICC, thereby limiting all functions of the terminal that depend on the configuration file, and can efficiently realize batch locking of related functions, thereby improving the locking efficiency of the device for related functions, and at the same time improving the security of the terminal in the locked state. The specific process is shown in the following steps:

[0134] 1. Terminal locking process

[0135] like Figure 5 As shown, when the production line produces a terminal with an eUICC, when the terminal passes through the target station, the production line equipment automatically obtains the EID information in the terminal eUICC through a data line connection, and generates a locking instruction based on the EID information. The locking instruction includes encrypting and signing the EID and the locking request, converting them into instructions corresponding to the chip platform through the production line tool and sending them to the terminal;

[0136] The locking instruction is sent to the terminal, so that the terminal locks the eUICC according to the locking instruction; the locking method includes prohibiting the mobile terminal from downloading and activating the eSIM profile corresponding to the eUICC from the configuration server corresponding to the eSIM profile, and the eSIM profile is used to activate the eUICC; the locking process includes the terminal performing instruction signature verification and data decryption after receiving the locking instruction, and when the decrypted operation action is "lock", the eUICC is locked, and the eUICC lock status bit in the terminal is set to "locked". The eUICC status bit in the terminal determines whether the terminal restricts the download, loading, and activation of the eSIMprofile.

[0137] If the eUICC lock status bit is locked, the download / load / activation of the eSIM profile is restricted in the following ways:

[0138] (1) The terminal is prohibited from accessing the URL for deploying the eSIM profile. When the terminal opens the interface corresponding to the eUICC and scans the QR code provided by the operator for accessing the configuration server, the terminal directly prompts that the eUICC of this terminal has been locked and access to the URL is prohibited.

[0139] (2) The terminal can access the configuration server that deploys the eSIM profile, but cannot download the eSIM profile. This method synchronizes the information of all eUICC-locked terminal device EIDs with the configuration server. When verifying the terminal information and EID with the configuration server, if the EID to be accessed is locked in the database, the configuration server rejects the terminal's download request.

[0140] (3) The terminal can support downloading the ESIM profile, but the terminal directly prohibits the loading and activation of the ESIM profile. When the terminal loads and activates the ESIM profile from the settings, the terminal first checks the terminal eUICC lock status. If it is "locked", the terminal prohibits the loading and activation of the ESIM profile.

[0141] Generate locking information, and send the locking information to the first server, so that the first server records the EID information of the eUICC of the terminal and the locking status corresponding to the terminal according to the locking information; the first server is used to respond to the unlocking request of the terminal and instruct the terminal to unlock; wherein the first server synchronizes the EID and locking status of all terminals to the configuration server of the operator deploying the eSIM profile.

[0142] 2. Terminal unlocking process

[0143] The terminal generates an unlock request and sends it to the first server, so that the first server verifies the received unlock request and returns an unlock instruction carrying the corresponding EID information. The process includes:

[0144] (1) When the terminal is connected to the network and the eUICC of the terminal is locked, the user needs to click the "Request Unlock" button built into the terminal to trigger the unlock request. The unlock request includes the unlock operation request, the terminal EID information, etc. The unlock request is sent to the first server through signature and encryption; after receiving the unlock request, the first server obtains the unlock request data through signature verification and decryption, confirms that the EID is locked in the database, and the current state satisfies the unlocking requirement, and then returns the unlock data with EID verification, which is sent after encryption and signature.

[0145] (2) The user goes to the operator's after-sales service center and asks the operator to directly operate in the first server to set the specified EID to unlock. The first server synchronizes the status to the terminal. After the terminal connects to the network, it receives the status and completes the unlocking.

[0146] Whether a certain EID can be unlocked in the first server depends on the operator's own strategy. This case can support the following solutions:

[0147] (1) After the terminal is sold, a contract is signed with the user and time point A is recorded in the server. After time point B, that is, when the agreed time in the contract is met, the first server can issue an unlocking instruction;

[0148] (2) The operator can directly operate the status of a certain EID in the server, can directly set it to unlock, and can use the first server to directly issue an unlocking instruction.

[0149] The terminal receives the unlock instruction returned by the first server, and verifies the EID information carried in the unlock instruction. When the verification succeeds, the eUICC of the terminal is unlocked. Unlocking includes the following process: After the terminal receives the data feedback from the first server, it performs signature verification and decryption, and makes a judgment on the decrypted data field. If it is "unlocked", and the EID verification issued by the terminal and the first server is consistent, then unlocking is performed. After unlocking, the eUICC lock status flag in the terminal is marked as "unlocked", and the corresponding functions of the eUICC can be used normally.

[0150] In the device locking method provided in this embodiment, the terminal obtains a locking instruction, locks the eUICC according to the locking instruction, generates a locking result including the locking state of the eUICC, and transmits the result to the configuration server, thereby realizing that the terminal locks its own eUICC and can promptly and quickly synchronize the locking state to the configuration server, quickly complete the locking of related devices and cloud storage of locking information, so that the entire device locking operation process is simple and fast, and the operation efficiency of device locking is improved. The locking state is used to indicate that the eUICC is locked, and the terminal is restricted from using the eSIM profile corresponding to the eUICC, so that when the eUICC of the terminal is locked, the terminal cannot use the eSIM profile corresponding to the eUICC, and further restricts all functions of the terminal that are related to the eSIM profile, so that batch locking of related functions can be efficiently realized, and the locking efficiency of the device for related functions is improved. In addition, since the present embodiment restricts the use of the eSIM profile by the terminal, the risk caused by the security vulnerability problem that may exist in the eSIM profile is effectively reduced, and the security of the terminal in the locked state is effectively improved.

[0151] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0152] Based on the same inventive concept, the embodiment of the present application also provides a device locking device for implementing the device locking method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more device locking device embodiments provided below can refer to the limitations on the device locking method above, and will not be repeated here.

[0153] In one embodiment, Figure 6 As shown, a device locking apparatus 600 is provided, comprising: an acquisition module 602, a locking module 604 and a synchronization module 606, wherein:

[0154] An acquisition module 602 is used to acquire a locking instruction, where the locking instruction is generated based on the device information of the terminal;

[0155] The locking module 604 is used to lock the embedded UICC according to the locking instruction and generate a locking result including the locking state of the embedded UICC;

[0156] The synchronization module 606 is used to transmit the locking result to the target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using the configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0157] In one embodiment, the acquisition module 602 is further used to receive a locking instruction transmitted by a production line device, wherein the locking instruction is generated by the production line device based on device information of the terminal.

[0158] In one embodiment, the locking module 604 is further configured to lock the embedded UICC of the terminal according to the locking instruction to obtain a corresponding locking state; and generate a locking result based on the locking state and the device information of the terminal.

[0159] In one embodiment, the locking module 604 is further configured to lock the embedded UICC based on the locking instruction, and set the locking state bit corresponding to the embedded UICC to a locked state; and generate a locking result including the locking state of the embedded UICC based on the locking state of the locking state bit.

[0160] In one embodiment, the locking module 604 is further configured to obtain an access request to a configuration server corresponding to the configuration file; if the state of the embedded UICC is a locked state, the terminal is prohibited from sending an access request to the configuration server.

[0161] In one embodiment, the locking module 604 is further used to display a corresponding target interface based on the interface operation instruction, where the target interface includes a target identification code, and the target identification code is used to access the configuration server corresponding to the configuration file; obtain a scanning operation for the target identification code, and generate an access request for the configuration server; if the state of the embedded UICC is a locked state, it is prompted that the terminal is locked and access to the configuration server is prohibited.

[0162] In one embodiment, the locking module 604 is further configured to send a configuration file download request to a configuration server corresponding to the configuration file, so that the configuration server rejects the configuration file download request when the embedded UICC of the terminal is in a locked state, and the locking state of the embedded UICC is obtained based on a query in a locking result corresponding to the terminal pre-stored in the configuration server.

[0163] In one embodiment, the locking module 604 is further configured to obtain a file enabling request corresponding to a configuration file, where the configuration file is downloaded from a configuration server corresponding to the configuration file; if the state of the embedded UICC is a locked state, the terminal is prohibited from responding to the file enabling request.

[0164] In one embodiment, the synchronization module 606 is further used to transmit the locking result to the production line equipment, so that the production line equipment sends the locking result to the server.

[0165] In one embodiment, the synchronization module 606 is further used to transmit the locking result to the first server, so that the first server synchronizes the locking result to the configuration server; the first server is used to store the locking result, and the stored locking result is used to process the unlocking request of the terminal; the configuration server is used to store and manage the use of the configuration file corresponding to the embedded UICC of the terminal.

[0166] Each module in the above-mentioned device locking device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.

[0167] Based on the same inventive concept, the embodiment of the present application also provides a device unlocking device for implementing the device unlocking method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more device unlocking device embodiments provided below can refer to the limitations on the device unlocking method above, and will not be repeated here.

[0168] In one embodiment, Figure 7 As shown, a device unlocking apparatus 700 is provided, comprising: an acquisition module 702, a request module 704 and a receiving module 706, wherein:

[0169] An acquisition module 702 is used to acquire an unlock start instruction;

[0170] The request module 704 is configured to send an unlock request to the first server based on the unlock start instruction, so that the first server queries the state of the embedded UICC of the terminal as a locked state according to the unlock request, generates response information based on the locked state, and returns the response information to the terminal, wherein the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC;

[0171] The receiving module 706 is configured to receive response information, and if the response information indicates that unlocking is allowed, unlock the embedded UICC of the terminal.

[0172] In one embodiment, the receiving module 706 is further configured to indicate that the unlocking fails and prohibit the terminal from unlocking the embedded UICC if the response information indicates that the unlocking is prohibited.

[0173] In one embodiment, the receiving module 706 is further used to obtain a download request for a configuration file; send the download request to a configuration server, so that the configuration server determines the current state of the embedded UICC corresponding to the terminal according to the download request, and returns the configuration file to the terminal if the current state is an unlocked state, wherein the unlocked state is obtained by the configuration server updating the locked state of the embedded UICC of the terminal, and the locked state update is completed based on the state change notification of the first server, and the unlocked state is used to lift the use restriction of the configuration file corresponding to the embedded UICC; receive the configuration file, and enable the configuration file.

[0174] Each module in the above-mentioned device unlocking apparatus can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.

[0175] Based on the same inventive concept, the embodiment of the present application also provides a device lock management device for implementing the device lock management method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in one or more device lock management device embodiments provided below can refer to the limitations of the device lock management method above, and will not be repeated here.

[0176] In one embodiment, Figure 8 As shown, a device unlocking apparatus 800 is provided, comprising: a receiving module 802 and a synchronization module 804, wherein:

[0177] The receiving module 802 is used to receive a locking result corresponding to the terminal, where the locking result includes device information of the terminal and a corresponding locking state, where the locking state is used to indicate that the embedded UICC of the terminal is currently locked, and restrict the use of the configuration file for the embedded UICC by the terminal;

[0178] The synchronization module 804 is used to synchronize the locking result to the configuration server corresponding to the configuration file, so that the configuration server stores the locking result, and the locking result is used to manage the use of the configuration file of the embedded UICC.

[0179] In one embodiment, the receiving module 802 is further used to receive a state change instruction corresponding to the terminal, where the state change instruction is generated based on the operator information corresponding to the terminal; based on the state change instruction, a corresponding state change notification is generated, and the state change notification is sent to the configuration server, so that the configuration server updates the locked state corresponding to the terminal to the unlocked state according to the state change notification; the unlocked state is used to lift the use restriction of the configuration file corresponding to the embedded UICC.

[0180] In one embodiment, the synchronization module 804 is further used to receive an unlock request corresponding to the terminal; based on the unlock request, query that the current state of the embedded UICC of the terminal is a locked state, and generate corresponding response information based on the locked state, and return the response information to the terminal, so that the terminal processes the unlock operation based on the response information.

[0181] In one embodiment, the synchronization module 804 is further used to obtain dynamic configuration information corresponding to the terminal, where the dynamic configuration information is generated based on the operator information corresponding to the terminal; if the dynamic configuration information satisfies the unlocking condition, first response information corresponding to allowing unlocking is generated, and the first response information is returned to the terminal, so that the terminal completes unlocking the embedded UICC based on the first response information; if the dynamic configuration information does not satisfy the unlocking condition, second response information corresponding to prohibiting unlocking is generated, and the second response information is returned to the terminal, so that the terminal generates prompt information based on the second response information, and prohibits the terminal from unlocking the embedded UICC, and the prompt information is used to prompt the terminal that the unlocking fails.

[0182] Each module in the above-mentioned device lock management device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.

[0183] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Fig. 9 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store locking result data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a device locking method, a device unlocking method or a device locking management method is implemented.

[0184] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Fig.10 As shown. The computer device includes a processor, a memory, a communication interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a device locking method or a device unlocking method or a device locking management method is implemented. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covered on the display screen, or a key, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0185] Those skilled in the art will understand that Fig. 9 and Fig.10 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0186] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0187] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0188] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0189] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0190] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0191] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0192] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A device locking method, characterized in that: Applied to a terminal, the method comprises: Obtaining a locking instruction, where the locking instruction is generated based on device information of the terminal; Lock the embedded UICC according to the locking instruction, and generate a locking result including a locking state of the embedded UICC; The locking result is transmitted to a target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using a configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC.

2. The method according to claim 1, characterized in that The acquisition lock instruction includes: Receiving a locking instruction transmitted by a production line device, where the locking instruction is generated by the production line device based on device information of the terminal; The step of transmitting the locking result to the server comprises: The locking result is transmitted to the production line equipment, so that the production line equipment sends the locking result to the server.

3. The method according to claim 1, characterized in that The step of locking the embedded UICC according to the locking instruction and generating a locking result including a locking state of the embedded UICC includes: Lock the embedded UICC of the terminal according to the locking instruction to obtain a corresponding locking state; The locking result is generated based on the locking state and the device information of the terminal.

4. The method according to claim 1, characterized in that: The step of locking the embedded UICC according to the locking instruction and generating a locking result including a locking state of the embedded UICC includes: Locking the embedded UICC based on the locking instruction, and setting a locking state bit corresponding to the embedded UICC to a locked state; Based on the lock status of the lock status bit, a lock result including the lock status of the embedded UICC is generated.

5. The method according to claim 1, characterized in that After locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: Obtaining an access request to a configuration server corresponding to the configuration file; If the state of the embedded UICC is a locked state, the terminal is prohibited from sending the access request to the configuration server.

6. The method according to claim 1, characterized in that After locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: Based on the interface operation instruction, display a corresponding target interface, wherein the target interface includes a target identification code, and the target identification code is used to access the configuration server corresponding to the configuration file; Acquire a scanning operation for the target identification code and generate an access request for the configuration server; If the state of the embedded UICC is locked, it is prompted that the terminal is locked and access to the configuration server is prohibited.

7. The method according to claim 1, characterized in that After locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: and sending a configuration file download request to a configuration server corresponding to the configuration file, so that the configuration server rejects the configuration file download request when the embedded UICC of the terminal is in a locked state, wherein the locking state of the embedded UICC is obtained based on a query in a locking result corresponding to the terminal pre-stored in the configuration server.

8. The method according to claim 1, characterized in that After locking the embedded UICC according to the locking instruction and generating a locking result including the locking state of the embedded UICC, the method further includes: Obtaining a file activation request corresponding to the configuration file, where the configuration file is downloaded from a configuration server corresponding to the configuration file; If the state of the embedded UICC is a locked state, the terminal is prohibited from responding to the file activation request.

9. The method according to claim 1, characterized in that: The step of transmitting the locking result to the target server comprises: The locking result is transmitted to the first server so that the first server synchronizes the locking result to the configuration server; the first server is used to store the locking result, and the stored locking result is used to process the unlocking request of the terminal; the configuration server is used to store and manage the use of the configuration file corresponding to the embedded UICC of the terminal.

10. A device unlocking method, characterized in that: Applied to a terminal, the method comprises: Get the unlock start command; sending an unlock request to a first server based on the unlock start instruction, so that the first server inquires that the state of the embedded UICC of the terminal is locked according to the unlock request, generates response information based on the locked state, and returns the response information to the terminal, wherein the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC; The response information is received, and if the response information indicates that unlocking is allowed, the embedded UICC of the terminal is unlocked.

11. The method according to claim 10, characterized in that The method further comprises: If the response information indicates that unlocking is prohibited, it is prompted that the unlocking fails, and the terminal is prohibited from unlocking the embedded UICC.

12. The method according to claim 10, characterized in that After unlocking the embedded UICC of the terminal, the method includes: Obtaining a download request for the configuration file; sending the download request to the configuration server, so that the configuration server determines the current state of the embedded UICC corresponding to the terminal according to the download request, and returns the configuration file to the terminal if the current state is an unlocked state, wherein the unlocked state is obtained by the configuration server updating the locked state of the embedded UICC of the terminal, wherein the locked state update is completed based on the state change notification of the first server, and the unlocked state is used to remove the use restriction of the configuration file corresponding to the embedded UICC; The configuration file is received and the configuration file is enabled.

13. A device lock management method, characterized in that: Applied to a server, the method comprises: receiving a locking result corresponding to the terminal, the locking result including device information of the terminal and a corresponding locking state, the locking state being used to indicate that the embedded UICC of the terminal is currently locked, and restricting the terminal from using a configuration file for the embedded UICC; The locking result is synchronized to a configuration server corresponding to the configuration file, so that the configuration server stores the locking result, and the locking result is used to manage the use of the configuration file of the embedded UICC.

14. The method according to claim 13, characterized in that The method further comprises: receiving a state change instruction corresponding to the terminal, wherein the state change instruction is generated based on operator information corresponding to the terminal; Based on the state change instruction, a corresponding state change notification is generated, and the state change notification is sent to the configuration server, so that the configuration server updates the locked state corresponding to the terminal to an unlocked state according to the state change notification; the unlocked state is used to lift the use restriction of the configuration file corresponding to the embedded UICC.

15. The method according to claim 13, characterized in that After synchronizing the locking result to the configuration server corresponding to the configuration file so that the configuration server stores the locking result, the method further includes: Receiving an unlock request corresponding to the terminal; Based on the unlock request, it is found that the current state of the embedded UICC of the terminal is a locked state, and corresponding response information is generated based on the locked state, and the response information is returned to the terminal, so that the terminal processes an unlock operation based on the response information.

16. The method according to claim 15, characterized in that The querying, based on the unlock request, that the current state of the embedded UICC of the terminal is a locked state, generating corresponding response information based on the locked state, and returning the response information to the terminal includes: Acquire dynamic configuration information corresponding to the terminal, where the dynamic configuration information is generated based on operator information corresponding to the terminal; If the dynamic configuration information satisfies the unlocking condition, generating first response information corresponding to allowing unlocking, and returning the first response information to the terminal, so that the terminal completes unlocking the embedded UICC based on the first response information; If the dynamic configuration information does not meet the unlocking condition, second response information corresponding to the prohibition of unlocking is generated, and the second response information is returned to the terminal, so that the terminal generates prompt information based on the second response information, and prohibits the terminal from unlocking the embedded UICC, and the prompt information is used to prompt that the terminal fails to unlock.

17. A device locking device, characterized in that: Applied to a terminal, the device comprises: An acquisition module, used for acquiring a locking instruction, wherein the locking instruction is generated based on the device information of the terminal; a locking module, configured to lock the embedded UICC according to the locking instruction, and generate a locking result including a locking state of the embedded UICC; A synchronization module is used to transmit the locking result to a target server, wherein the locking state is used to indicate that the embedded UICC is currently locked, restricting the terminal from using a configuration file of the embedded UICC, and the locking result is used to manage the use of the configuration file of the embedded UICC.

18. A device unlocking apparatus, characterized in that: Applied to a terminal, the device comprises: An acquisition module is used to obtain an unlocking start instruction; a request module, configured to send an unlock request to a first server based on the unlock start instruction, so that the first server inquires according to the unlock request that the state of the embedded UICC of the terminal is a locked state, generates response information based on the locked state, and returns the response information to the terminal, wherein the locked state is used to indicate that the embedded UICC is currently locked, and restricts the terminal from using a configuration file for the embedded UICC; The receiving module is configured to receive the response information, and if the response information indicates that unlocking is allowed, unlock the embedded UICC of the terminal.

19. A device lock management device, characterized in that: Applied to a server, the device comprises: a receiving module, configured to receive a locking result corresponding to a terminal, wherein the locking result includes device information of the terminal and a corresponding locking state, wherein the locking state is used to indicate that the embedded UICC of the terminal is currently locked, and restrict the terminal from using a configuration file for the embedded UICC; A synchronization module is used to synchronize the locking result to a configuration server corresponding to the configuration file, so that the configuration server stores the locking result, and the locking result is used to manage the use of the configuration file of the embedded UICC.

20. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 16 are implemented.

21. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 16 are implemented.

22. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 16 are implemented.

Images