System suitable for eSIM security element and attribute configuration method

Abstract

The invention discloses a system suitable for an eSIM security element and an attribute configuration method. The system comprises a telecommunication area and a non-telecommunication area. The telecommunication area is used for storing and managing data related to a network operator and a first application; the non-telecommunication area is used for storing and managing a second application and data irrelevant to a network operator; the non-telecommunication area comprises a plurality of non-telecommunication authorization management security domains which operate independently, each non-telecommunication authorization management security domain uses a GP specification to realize isolation of the security domains, and the non-telecommunication authorization management security domains support a PKI certificate system and a symmetric key security channel; the non-telecommunication authorization management security domain is pre-configured with an isolation attribute, a resource priority attribute, a security migration mechanism and a symmetric security channel mechanism. Therefore, by adopting the method and the device, the problems encountered in the cross-industry use process of the current eSIM technology can be solved, the hardware cost can be saved, the integration complexity can be simplified, and the flexibility and the applicability of the eSIM can be improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a system and attribute configuration method applicable to an eSIM security element. Background Art

[0002] With the rapid rise of the Internet of Things era, the physical form of traditional SIM cards limits the further miniaturization of devices and the improvement of waterproof performance. Therefore, the size of SIM cards has evolved from standard SIM cards to smaller Nano SIM cards to adapt to more compact device designs. The emergence of eSIM (embedded SIM card) technology further saves device space by embedding SIM card information directly into the device's circuit board.

[0003] In the eSIM security element system, the provider of security services is the business application. This type of application cannot exist independently and must be attached to the telecommunications profile. After the user activates the new profile to switch the network, the original profile will be deactivated and the user will not be able to continue to use the security services in the original profile. This feature of eSIM cannot meet the use scenarios of independent profile switching of security services, such as identity recognition applications and transportation payment applications used by users, which require that they can still be used after the network switch. It is impossible to achieve both connection services and security services.

[0004] In order to deal with the above problems, there is a software solution in the related technology, namely, the GSMA SAM.01 specification extends the eSIM security element system architecture. This solution divides a physical space into two logical spaces: the telecom area and the non-telecom area. The telecom area is consistent with the original eSIM architecture and is used for telecom profiles; the non-telecom area manages non-telecom business applications. For example Figure 1 As shown in the figure, the specific components include: Mobile Device Security Application Security Domain (SAM-SD): manages non-telecom areas, including managing application provider security domains and applications in application provider security domains. Control Authorization Security Domain (CASD): provides security services to mobile device security application security domains and application provider security domains, including initialization keys, card content management authorization, etc. Application Provider Security Domain (APSD): manages specific security service applications on behalf of application providers. This system architecture solution does not add new security hardware, and implements independent and profile-file security application / service management by demarcating non-telecom areas in the eSIM security element system.

[0005] Although existing technologies have improved the flexibility and security of eSIM technology to a certain extent, the following defects still exist: (1) Due to the complete logical isolation of the telecom area and the non-telecom area, resource overlap may occur. For example, if applications with the same AID are installed in both areas, the external system cannot determine which area's application to interact with, resulting in resource selection conflicts. (2) Function sharing issues: Non-telecom areas cannot use telecom functions (such as SMS and HTTPS channels used for remote management) and can only rely on applications in the device to achieve remote management, which places high demands on the device's own capabilities. (3) Management complexity: SAM.01 requires that the security domain of mobile device security applications must use the PKI management mechanism and introduce certificates, which has high management complexity. Summary of the invention

[0006] The embodiments of the present application provide a system and attribute configuration method applicable to an eSIM security element. In order to have a basic understanding of some aspects of the disclosed embodiments, a simple summary is given below. This summary is not a general review, nor is it intended to identify key / important components or describe the scope of protection of these embodiments. Its only purpose is to present some concepts in a simple form as a preface to the detailed description that follows.

[0007] In a first aspect, an embodiment of the present application provides a system applicable to an eSIM security element, the system comprising:

[0008] Telecom area and non-telecom area; among them,

[0009] The telecommunications area is used to store and manage data and first applications related to network operators;

[0010] The non-telecom area is used to store and manage second applications and data that are not related to the network operator; wherein,

[0011] The non-telecom area includes multiple independently operated non-telecom authorized management security domains. The non-telecom authorized management security domain is used to manage the area controlled by the application provider and directly manage business / service applications. Each non-telecom authorized management security domain uses the GP specification to achieve security domain isolation. The non-telecom authorized management security domain supports the PKI certificate system and symmetric key security channel; among them,

[0012] The non-telecom authorized management security domain is pre-configured with isolation attributes, resource priority attributes, security migration mechanism and symmetric security channel mechanism.

[0013] Optional, isolation attribute, used to set the isolation status between the non-telecom authorized management security domain and the telecom area;

[0014] The resource priority attribute is used to determine the priority of resources in the non-telecom authorization management security domain and the telecom area when there is a resource conflict in the eSIM secure element;

[0015] A security migration mechanism is used to determine whether to migrate applications in the telecommunications area to a non-telecom authorized management security domain under preset conditions;

[0016] The symmetric secure channel mechanism is used to allow the non-telecom authorized management security domain to establish a secure communication channel based on a symmetric key with an external entity, which is any one of the remote servers, devices or application providers.

[0017] Optionally, when the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecom area is isolation, the eSIM security element allows the resources of the non-telecom authorization management security domain and the telecom area to be duplicated and the two cannot communicate; or,

[0018] When the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecom area is non-isolated, the eSIM security element does not allow duplication of resources between the non-telecom authorization management security domain and the telecom area and the two can communicate.

[0019] Optionally, configure resource priority attributes for the non-telecom authorization management security domain according to the following steps, including:

[0020] When the non-telecom authorized management security domain is installed in the eSIM secure element, the eSIM secure element determines whether the non-telecom authorized management security domain is configured with an isolation attribute with an isolation state of complete isolation;

[0021] If yes, the eSIM secure element configures the resource priority attribute through the parameters of the installation command or the application programming interface; or, configures the resource priority attribute through the APDU command or the application programming interface.

[0022] Optionally, when the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of complete isolation and a resource conflict occurs, the eSIM security element obtains resources of the non-telecom authorization management security domain or the telecommunications area based on the priority indicated by a pre-configured resource priority attribute.

[0023] Optionally, configure a security migration mechanism for the non-telecom authorized management security domain according to the following steps, including:

[0024] When the non-telecom authorized management security domain is installed in the eSIM secure element, the eSIM secure element determines whether the non-telecom authorized management security domain is configured with an isolation attribute whose isolation state is non-isolated;

[0025] If so, the eSIM secure element configures the security migration mechanism through parameters of the installation command or the application programming interface; alternatively, the security migration mechanism is configured through APDU commands or the application programming interface.

[0026] Optionally, when the non-telecom authorized management security domain is configured with an isolation attribute whose isolation state is non-isolated and a resource migration instruction is received, the eSIM security element obtains a pre-configured security migration mechanism;

[0027] When the security migration mechanism indicates that migration is allowed, the eSIM secure element migrates application resources in the telecommunications area to the non-telecom authorized management security domain; or,

[0028] When the security migration mechanism indicates that migration is not allowed, the eSIM secure element prohibits application resources in the telecommunications area from being migrated to the non-telecom authorized management security domain.

[0029] In a second aspect, a method for configuring attributes is applied to an eSIM security element, and the method includes:

[0030] In response to a security domain installation instruction for a non-telecom area, obtaining a non-telecom authorization management security domain to be installed and installing it in the non-telecom area;

[0031] receiving attribute configuration instructions for an installed non-telecom authorization management security domain;

[0032] When the attribute configuration instruction indicates to configure the isolation attribute, the isolation attribute is configured for the installed non-telecom authorization management security domain through the parameter of the installation instruction or the application programming interface; or, the isolation attribute is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or,

[0033] When the attribute configuration instruction indicates to configure the resource priority attribute and the installed non-telecom authorization management security domain is configured with the isolation attribute of the isolation state being completely isolated, the resource priority attribute is configured for the installed non-telecom authorization management security domain through the parameter of the installation instruction or the application programming interface; or, the resource priority attribute is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or,

[0034] When the attribute configuration instruction indicates to configure the security migration mechanism and the installed non-telecom authorization management security domain is configured with the isolation attribute whose isolation state is non-isolated, the security migration mechanism is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the security migration mechanism is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface;

[0035] Alternatively, when the attribute configuration instruction indicates the configuration of a symmetric security channel mechanism, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface.

[0036] In the embodiment of the present application, on the one hand, by configuring the isolation attribute, the isolation attribute sets the isolation status between the telecommunications area and the non-telecommunications authorized management security domain, which can solve the resource conflict and function sharing problems. On the other hand, the resource priority attribute sets the priority for the non-telecommunications authorized management security domain in a completely isolated scenario, so that the system can quickly and clearly decide which resource to use in the event of a resource conflict, avoiding the confusion and uncertainty caused by resource conflicts, and ensuring business continuity and user experience. On the other hand, the security migration mechanism allows the application in the telecommunications profile file to be migrated to the non-telecommunication area in a non-completely isolated scenario, so that the application can be flexibly migrated between different security domains, improving the availability and flexibility of the application. On the other hand, the symmetric security channel mechanism allows the non-telecommunications authorized management security domain to establish a secure communication channel based on symmetric keys with external entities. Through symmetric key encryption, the confidentiality and integrity of the data during transmission are ensured, and data leakage and tampering are prevented.

[0037] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0039] Figure 1 It is a schematic diagram of a system architecture applicable to an eSIM security element provided in an embodiment of the present application;

[0040] Figure 2 It is another schematic diagram of a system architecture applicable to an eSIM security element provided in an embodiment of the present application;

[0041] Figure 3 This is a property configuration method applied to an eSIM security element provided in an embodiment of the present application. DETAILED DESCRIPTION

[0042] The following description and the accompanying drawings sufficiently illustrate specific embodiments of the present application to enable those skilled in the art to practice them.

[0043] It should be clear that the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0044] When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Instead, they are only examples of systems and attribute configuration methods consistent with some aspects of the present application as detailed in the attached claims.

[0045] In the description of the present application, it should be understood that the terms "first", "second", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance. For those of ordinary skill in the art, the specific meanings of the above terms in the present application can be understood according to the specific circumstances. In addition, in the description of the present application, unless otherwise specified, "multiple" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the objects associated before and after are in an "or" relationship.

[0046] In the embodiment of the present application, on the one hand, by configuring the isolation attribute, the isolation attribute sets the isolation state between the telecommunications area and the non-telecommunications authorized management security domain, which can solve the resource conflict and function sharing problems. On the other hand, the resource priority attribute sets the priority for the non-telecommunications authorized management security domain in a completely isolated scenario, so that the system can quickly and clearly decide which resource to use when there is a resource conflict, avoiding the confusion and uncertainty caused by resource conflicts, and ensuring business continuity and user experience. On the other hand, the security migration mechanism allows the application in the telecommunications profile file to be migrated to the non-telecommunication area in a non-completely isolated scenario, so that the application can be flexibly migrated between different security domains, improving the availability and flexibility of the application. On the other hand, the symmetric security channel mechanism allows the non-telecommunications authorized management security domain to establish a secure communication channel based on symmetric keys with external entities, and through symmetric key encryption, ensures the confidentiality and integrity of data during transmission, and prevents data leakage and tampering. The following uses an exemplary embodiment for detailed description.

[0047] See also Figure 2 , Figure 2: This is a system architecture diagram applicable to an eSIM security element provided by an embodiment of the present application, a telecommunications area and a non-telecommunications area; wherein the telecommunications area is used to store and manage data and a first application related to a network operator; the non-telecommunications area is used to store and manage a second application and data that is not related to the network operator; wherein the non-telecommunications area includes multiple independently running non-telecommunications authorized management security domains, the non-telecommunications authorized management security domains are used to manage areas controlled by application providers and directly manage business / service applications, each non-telecommunications authorized management security domain uses the GP specification to achieve isolation of security domains, and the non-telecommunications authorized management security domain supports a PKI certificate system and a symmetric key security channel; wherein the non-telecommunications authorized management security domain is pre-configured with isolation attributes, resource priority attributes, a security migration mechanism, and a symmetric security channel mechanism.

[0048] Among them, the eSIM security element refers to a hardware module embedded in the device for storing and managing SIM card information, providing a secure data storage and processing environment. The telecommunications area is an area in the eSIM security element specifically used to store and manage data and applications related to mobile network operators (MNOs), such as user identity information, network access keys, certificates, etc. The non-telecom area is an area in the eSIM security element used to store and manage second applications and data that are not related to network operators. For example, it includes non-telecom services such as mobile payment, identity authentication, and access control. The non-telecom authorization management security domain is an independently operated security domain within the non-telecom area, which is used to manage areas controlled by application providers and directly manage business / service applications.

[0049] Among them, GP specification refers to the GlobalPlatform specification, which is an international standard that defines the architecture of secure smart cards and secure elements, security domain isolation, application lifecycle management, etc. The PKI (Public Key Infrastructure) certificate system is a system for managing and verifying digital certificates, which are used to verify identities and encrypt data in secure communications. A symmetric key secure channel refers to a secure communication channel that uses the same key for data encryption and decryption.

[0050] In some embodiments of the present application, an isolation attribute is used to set the isolation status between the non-telecom authorization management security domain and the telecommunication area; a resource priority attribute is used to determine the priority of resources in the non-telecom authorization management security domain and the telecommunication area when there is a resource conflict in the eSIM security element; a security migration mechanism is used to determine whether to migrate an application in the telecommunication area to the non-telecom authorization management security domain under preset conditions; a symmetric security channel mechanism is used to allow the non-telecom authorization management security domain to establish a secure communication channel based on a symmetric key with an external entity, the external entity being any one of a remote server, a device or an application provider.

[0051] Among them, the isolation attribute refers to the setting for configuring the degree of isolation between the telecom area and the non-telecom area, which determines whether the two areas are completely isolated or can communicate to a certain extent. The resource priority attribute is set in a completely isolated scenario and is used to decide which security domain's resources to use when there is a resource conflict. The security migration mechanism allows applications in the telecom area to be migrated to the non-telecom area in a non-completely isolated scenario to solve the problem that application visibility is affected by the Profile status. The symmetric security channel mechanism allows the non-telecom authorized management security domain to establish a secure communication channel based on symmetric keys with external entities to ensure the security of data transmission.

[0052] In some embodiments of the present application, the specific process of configuring isolation attributes for a non-telecom authorization management security domain is as follows: when a non-telecom authorization management security domain is installed into an eSIM security element, the eSIM security element configures isolation attributes through parameters of an installation instruction or an application programming interface; or, when a non-telecom authorization management security domain is installed into an eSIM security element, the eSIM security element configures isolation attributes through APDU instructions or an application programming interface.

[0053] Specifically, when the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecommunication area is isolated, the eSIM security element allows the resources of the non-telecom authorization management security domain and the telecommunication area to be duplicated and the two cannot communicate; or, when the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecommunication area is non-isolated, the eSIM security element does not allow the resources of the non-telecom authorization management security domain and the telecommunication area to be duplicated and the two can communicate.

[0054] Among them, API is a set of predefined functions, protocols and tools for building software applications. In the context of eSIM secure elements, API allows external applications to interact with eSIM secure elements, configure isolation properties, etc. APDU (Application Protocol Data Unit) instructions are a communication protocol used for smart cards to send commands and receive responses. In the context of eSIM secure elements, APDU instructions are used to configure the properties of security domains, such as isolation properties. The isolation state is isolated, which means that the isolation property between the non-telecom authorized management security domain and the telecom area is configured as the "isolated" state, which means that the two areas are logically completely independent, communication is not allowed, and resources can be repeated. The isolation state is non-isolated, which means that the isolation property between the non-telecom authorized management security domain and the telecom area is configured as the "non-isolated" state, which means that the two areas are not logically completely independent, communication is allowed, and resource duplication is not allowed. Resource duplication refers to the existence of the same resources in two different security domains, such as the same application identifier (AID). In the isolated state, this duplication is allowed because the two areas do not share resources. Unable to communicate / communicable describes the communication capability between the non-telecom authorized management security domain and the telecom area. In the isolated state, the two areas cannot communicate; in the non-isolated state, the two areas can communicate and share resources and functions.

[0055] For example, if the configuration is isolated: the isolation attribute is set to "isolated", the non-telecom authorization management security domain and the telecom area are logically completely isolated and cannot communicate with each other. This configuration is consistent with the GSMA's SAM.01 specification, allowing resource duplication in the two areas, for example, there can be applications with the same application identifier (AID). If the configuration is not isolated: the isolation attribute is set to "not isolated", the non-telecom authorization management security domain and the telecom area are not completely isolated, and they can communicate with each other. In this configuration, resource duplication is not allowed to avoid conflicts.

[0056] In some embodiments of the present application, the specific process of configuring the resource priority attribute for the non-telecom authorization management security domain includes: when the non-telecom authorization management security domain is installed into the eSIM security element, the eSIM security element determines whether the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of complete isolation; if so, the eSIM security element configures the resource priority attribute through parameters of the installation instruction or the application programming interface; or, configures the resource priority attribute through APDU instructions or application programming interfaces.

[0057] Specifically, when the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of complete isolation and a resource conflict occurs, the eSIM security element obtains resources of the non-telecom authorization management security domain or the telecommunication area based on the priority indicated by the pre-configured resource priority attribute.

[0058] Among them, the resource priority attribute refers to the configuration setting used to determine which area's resources should be used first when a resource conflict occurs between the non-telecom authorization management security domain and the telecom area. Resource conflict refers to the situation where the same resources (such as application identifier AID) exist in two security domains (non-telecom authorization management security domain and telecom area), resulting in the system needing to decide which resource to use. The isolation attribute of complete isolation means that the isolation attribute between the non-telecom authorization management security domain and the telecom area is configured as the "complete isolation" state, which means that the two areas are logically completely independent, communication is not allowed, and resources can be duplicated.

[0059] In an embodiment of the present application, if the non-telecom authorization management security domain is configured with a completely isolated isolation attribute, then in the event of a resource conflict, the eSIM security element will decide which security domain's resources to use based on the pre-configured resource priority attribute. This process can be configured through installation instruction parameters, API or APDU instructions. Such a mechanism ensures that in a completely isolated configuration, the system can clearly decide which security domain's resources to use first in the event of a resource conflict, thereby avoiding uncertainty and potential confusion.

[0060] For example, using non-telecom authorization to manage resources in a security domain or telecom profile file (such as applications with the same AID value). When two areas are completely isolated and there is a resource conflict (for example, applications with the same application identifier AID in two areas), the secure element system will decide which security domain's resources to use based on the configured priority.

[0061] In some embodiments of the present application, the specific process of configuring a security migration mechanism for a non-telecom authorization management security domain includes: when the non-telecom authorization management security domain is installed into an eSIM security element, the eSIM security element determines whether the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of non-isolated; if so, the eSIM security element configures the security migration mechanism through parameters of the installation instruction or an application programming interface; or, configures the security migration mechanism through APDU instructions or an application programming interface.

[0062] Specifically, when the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of non-isolated and receives a resource migration instruction, the eSIM security element obtains a pre-configured security migration mechanism; when the security migration mechanism indicates that migration is allowed, the eSIM security element migrates application resources in the telecommunication area to the non-telecom authorization management security domain; or, when the security migration mechanism indicates that migration is not allowed, the eSIM security element prohibits the migration of application resources in the telecommunication area to the non-telecom authorization management security domain.

[0063] In an embodiment of the present application, if the non-telecom authorized management security domain is configured with a non-isolated isolation attribute, then upon receiving a resource migration instruction, the eSIM security element will decide whether to perform the migration operation based on a pre-configured security migration mechanism. This process can be configured through installation instruction parameters, API or APDU instructions. If the security migration mechanism indicates that migration is allowed, the eSIM security element will perform the migration of application resources; if it indicates that migration is not allowed, the migration operation is prohibited. Such a mechanism ensures that under a non-isolated configuration, the system can flexibly manage the migration of application resources according to security policies and business needs.

[0064] In some embodiments of the present application, the non-telecom authorized management security domain supports a secure channel mechanism based on a symmetric key mechanism, and can establish a secure channel based on a symmetric key with the outside world, simplifying the management complexity and facilitating external entities to manage the application provider security domain or application in the authorized security domain. Allow the non-telecom authorized management security domain (Non-Telecom Authorized Management Secure Domain) to establish a secure communication channel with external entities (such as remote servers, other devices or service providers). The non-telecom authorized management security domain can establish a secure communication channel based on a symmetric key with external entities. Such a channel can ensure the confidentiality and integrity of data during transmission.

[0065] In the embodiment of the present application, on the one hand, by configuring the isolation attribute, the isolation attribute sets the isolation status between the telecommunications area and the non-telecommunications authorized management security domain, which can solve the resource conflict and function sharing problems. On the other hand, the resource priority attribute sets the priority for the non-telecommunications authorized management security domain in a completely isolated scenario, so that the system can quickly and clearly decide which resource to use in the event of a resource conflict, avoiding the confusion and uncertainty caused by resource conflicts, and ensuring business continuity and user experience. On the other hand, the security migration mechanism allows the application in the telecommunications profile file to be migrated to the non-telecommunication area in a non-completely isolated scenario, so that the application can be flexibly migrated between different security domains, improving the availability and flexibility of the application. On the other hand, the symmetric security channel mechanism allows the non-telecommunications authorized management security domain to establish a secure communication channel based on symmetric keys with external entities. Through symmetric key encryption, the confidentiality and integrity of the data during transmission are ensured, and data leakage and tampering are prevented.

[0066] See also Figure 3 , is a flow chart of a method for configuring attributes according to an embodiment of the present application, which is applied to an eSIM security element. Figure 3 As shown, the detection method of the embodiment of the present application may include the following steps:

[0067] S101, in response to a security domain installation instruction for a non-telecom area, obtaining a non-telecom authorization management security domain to be installed and installing it in the non-telecom area;

[0068] S102, receiving an attribute configuration instruction for an installed non-telecom authorization management security domain;

[0069] S103, when the attribute configuration instruction indicates to configure the isolation attribute, configure the isolation attribute of the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, configure the isolation attribute of the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or, when the attribute configuration instruction indicates to configure the resource priority attribute and the installed non-telecom authorization management security domain is configured with the isolation attribute of the isolation state being completely isolated, configure the resource priority attribute of the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, configure the resource priority attribute of the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or, When the attribute configuration instruction indicates to configure the security migration mechanism and the installed non-telecom authorization management security domain is configured with the isolation attribute with the isolation status as non-isolated, the security migration mechanism is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the security migration mechanism is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or, when the attribute configuration instruction indicates to configure the symmetric security channel mechanism, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface.

[0070] In the embodiment of the present application, on the one hand, by configuring the isolation attribute, the isolation attribute sets the isolation status between the telecommunications area and the non-telecommunications authorized management security domain, which can solve the resource conflict and function sharing problems. On the other hand, the resource priority attribute sets the priority for the non-telecommunications authorized management security domain in a completely isolated scenario, so that the system can quickly and clearly decide which resource to use in the event of a resource conflict, avoiding the confusion and uncertainty caused by resource conflicts, and ensuring business continuity and user experience. On the other hand, the security migration mechanism allows the application in the telecommunications profile file to be migrated to the non-telecommunication area in a non-completely isolated scenario, so that the application can be flexibly migrated between different security domains, improving the availability and flexibility of the application. On the other hand, the symmetric security channel mechanism allows the non-telecommunications authorized management security domain to establish a secure communication channel based on symmetric keys with external entities. Through symmetric key encryption, the confidentiality and integrity of the data during transmission are ensured, and data leakage and tampering are prevented.

[0071] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program applicable to the eSIM security element can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the storage medium of the program applicable to the eSIM security element can be a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0072] The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. A system applicable to an eSIM security element, characterized in that: The system comprises: Telecom area and non-telecom area; among them, The telecommunications area is used to store and manage data related to the network operator and the first application; The non-telecom area is used to store and manage second applications and data that are not related to the network operator; wherein, The non-telecom area includes multiple independently running non-telecom authorization management security domains, the non-telecom authorization management security domains are used to manage the area controlled by the application provider and directly manage business / service applications, each non-telecom authorization management security domain uses the GP specification to achieve security domain isolation, and the non-telecom authorization management security domain supports the PKI certificate system and symmetric key security channel; wherein, The non-telecom authorization management security domain is pre-configured with isolation attributes, resource priority attributes, security migration mechanism and symmetric security channel mechanism.

2. The system according to claim 1, characterized in that The isolation attribute is used to set the isolation state between the non-telecom authorization management security domain and the telecommunication area; The resource priority attribute is used to determine the priority of resources in the non-telecom authorization management security domain and the telecom area when there is a resource conflict in the eSIM secure element; The security migration mechanism is used to determine whether to migrate the application in the telecommunication area to the non-telecommunications authorized management security domain under preset conditions; The symmetric secure channel mechanism is used to allow the non-telecom authorization management security domain to establish a secure communication channel based on a symmetric key with an external entity, and the external entity is any one of a remote server, a device or an application provider.

3. The system according to claim 1 or 2, characterized in that: The following steps are followed to configure isolation attributes for the non-telecom authorized management security domain, including: When the non-telecom authorization management security domain is installed in the eSIM security element, the eSIM security element configures isolation attributes through parameters of the installation instruction or an application programming interface; or, In the case where the non-telecom authorization management security domain is installed to the eSIM secure element, the eSIM secure element configures isolation attributes through APDU instructions or application programming interfaces.

4. The system according to claim 3, characterized in that When the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecom area is isolation, the eSIM security element allows the resources of the non-telecom authorization management security domain and the telecom area to be duplicated and the two cannot communicate; or, When the isolation attribute indicates that the isolation state between the non-telecom authorization management security domain and the telecommunication area is non-isolated, the eSIM security element does not allow the non-telecom authorization management security domain to duplicate resources with the telecommunication area and the two can communicate.

5. The system according to claim 1 or 2, characterized in that: The following steps are followed to configure resource priority attributes for the non-telecom authorization management security domain, including: In the case where the non-telecom authorization management security domain is installed in the eSIM security element, the eSIM security element determines whether the non-telecom authorization management security domain is configured with an isolation attribute whose isolation state is completely isolated; If yes, the eSIM secure element configures the resource priority attribute through a parameter of an installation instruction or an application programming interface; or, configures the resource priority attribute through an APDU instruction or an application programming interface.

6. The system according to claim 5, characterized in that When the non-telecom authorization management security domain is configured with an isolation attribute with an isolation state of complete isolation and a resource conflict occurs, the eSIM security element obtains resources of the non-telecom authorization management security domain or the telecommunication area based on a priority indicated by a pre-configured resource priority attribute.

7. The system according to claim 1 or 2, characterized in that: The following steps are followed to configure a security migration mechanism for the non-telecom authorization management security domain, including: In the case where the non-telecom authorization management security domain is installed in the eSIM security element, the eSIM security element determines whether the non-telecom authorization management security domain is configured with an isolation attribute whose isolation state is non-isolated; If yes, the eSIM secure element configures the security migration mechanism through parameters of the installation instruction or the application programming interface; or, configures the security migration mechanism through APDU instructions or the application programming interface.

8. The system according to claim 7, characterized in that When the non-telecom authorization management security domain is configured with an isolation attribute whose isolation state is non-isolated and a resource migration instruction is received, the eSIM security element obtains a pre-configured security migration mechanism; When the security migration mechanism indicates that migration is allowed, the eSIM security element migrates application resources in the telecommunication area to the non-telecommunications authorization management security domain; or, In a case where the security migration mechanism indicates that migration is not allowed, the eSIM secure element prohibits application resources in the telecommunication area from being migrated to the non-telecommunications authorized management security domain.

9. A property configuration method implemented by the system according to any one of claims 1 to 8, characterized in that: Applied to an eSIM security element, the method comprises: In response to a security domain installation instruction for the non-telecom area, obtaining a non-telecom authorization management security domain to be installed and installing it in the non-telecom area; receiving attribute configuration instructions for an installed non-telecom authorization management security domain; When the attribute configuration instruction indicates to configure the isolation attribute, the isolation attribute is configured for the installed non-telecom authorization management security domain through the parameter of the installation instruction or the application programming interface; or, the isolation attribute is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or, When the attribute configuration instruction indicates to configure the resource priority attribute and the installed non-telecom authorization management security domain is configured with an isolation attribute whose isolation state is completely isolated, the resource priority attribute is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the resource priority attribute is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface; or, When the attribute configuration instruction indicates to configure a security migration mechanism and the installed non-telecom authorization management security domain is configured with an isolation attribute whose isolation state is non-isolated, configure the security migration mechanism for the installed non-telecom authorization management security domain through parameters of the installation instruction or an application programming interface; or configure the security migration mechanism for the installed non-telecom authorization management security domain through an APDU instruction or an application programming interface; Alternatively, when the attribute configuration instruction indicates the configuration of a symmetric security channel mechanism, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the parameters of the installation instruction or the application programming interface; or, the symmetric security channel mechanism is configured for the installed non-telecom authorization management security domain through the APDU instruction or the application programming interface.

Images