Method for presetting seed code number for eSIM (Embedded Subscriber Identity Module)

Abstract

The invention relates to the technical field of eSIM, and discloses a method for presetting a seed code number for eSIM, comprising the following steps: step A, applying for code number resources from a plurality of operators, the code number resource provided by each operator having a unique international mobile subscriber identity; step B, a seed code number profile containing a specific applet is preset in all the eUICCs; c, a control program located in the upper computer microcontroller unit or the honeycomb module; and step D, the control program also screens the matched operator seed code number pool according to the current state of the equipment. The problem of high resource cost caused by a traditional mode of presetting independent seed code numbers is solved by realizing sharing and multiplexing of the seed code numbers, a plurality of eUICC cards can share the same initial invalid seed code number, and an effective operator code number is dynamically written only when needed, so that the code number cost is remarkably reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of eSIM, and in particular to a method for presetting a seed code number for an eSIM. Background Art

[0002] In the GSMA's eSIM specification, the types of cellular devices using eSIM are divided into Consumer (i.e., Internet of People, including consumer products such as iPhone and iWatch) and M2M (i.e., Internet of Things, including Internet of Things products such as electricity meters, vehicle locators, and webcams). Cellular devices need to be connected to the Internet when downloading eSIM numbers, and there are two ways to provide the network: using a network outside the cellular device, such as external Wi-Fi, or connecting the user's mobile phone via Bluetooth so that the mobile phone's network can be used. For example, the iPhone uses Wi-Fi when downloading the eSIM number, and the iWatch first connects to the iPhone via Bluetooth when downloading the eSIM number, and then uses the iPhone's network; the other is to pre-set the seed number in the eSIM card (i.e., eUICC). When downloading the number, the cellular device connects to the Internet through the seed number.

[0003] After searching, the Chinese patent number CN110839232A discloses an eSIM profile update method, which pre-sets a seed code number PLMNID and a seed code number configuration file profile set corresponding to each seed code number PLMNID; before the terminal device leaves the factory, the seed profile is preset in the corresponding eSIM using the profile set, and the mapping relationship between the IMEI of the terminal device and the preset seed profile is recorded; when the private network project is opened, the PLMNID for updating the profile is configured in the base station and broadcasted using the seed code number PLMNID; for each terminal device of the private network project, the seed profile used is determined according to the mapping relationship, the PLMNID for updating the profile and the seed profile preset in the eSIM, and an account is opened for it in the core network according to the seed profile; when the terminal device is turned on, the seed profile used is determined using the PLMNID in the broadcast message and is used to access the network; when the terminal device is successfully attached, the profile actually used is obtained by docking with the eSIM management system and the profile is used to access the network.

[0004] However, in the above method, the seed code number is determined after the core network account is opened, and cannot be modified during subsequent use. This means that once the seed code number is assigned, it cannot be adjusted according to subsequent needs or environmental changes, and the seed code number and the IMEI of the device are in a one-to-one correspondence, that is, each device requires a unique seed code number, which not only increases the complexity of code number management, but also such preset code numbers will be occupied for a long time, and with the life cycle of the eUICC, high code number costs will be generated, and once the preset code number fails, it cannot be replaced, which limits the effective reuse of the seed code number. Based on this, the present invention designs a method for presetting seed code numbers for eSIM to solve the above problems. Summary of the invention

[0005] The purpose of the present invention is to provide a method for presetting a seed code number for an eSIM, which solves the problem of high cost in the background technology.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] A method for presetting a seed code number for an eSIM comprises the following steps:

[0008] Step A: Apply for number resources from multiple operators. The number resources provided by each operator have a unique International Mobile Subscriber Identity (IMSI), and the key (KI) and operation parameter (OPc) of all operator number resources are pre-set to a unified specific value, which is determined by the seed number operator and notified to each operator;

[0009] Step B, presetting a seed code profile containing a specific applet in all eUICCs (embedded universal integrated circuit cards), the initial IMSI of the profile is set to an invalid value, and its KI and OPc are consistent with the specific values ​​required in step A; the applet is configured to respond to a specific application protocol data unit (APDU) instruction for modifying the IMSI and a specific APDU instruction for performing a device validity check to modify the IMSI in the profile, and send a refresh instruction to the modem after the modification;

[0010] Preferably, in the authentication process of the 5G network, the authentication parameters include not only the traditional parameters of KI (key identifier) ​​and OPc (old authentication parameters, used for authentication of 2G / 3G networks). When the 5G network adopts the independent networking (SA) mode, additional authentication parameters need to be introduced to ensure the security of the network and the accuracy of authentication. When the 5G network only adopts the non-independent networking (NSA) mode, only traditional authentication parameters including KI and OPc may be used, and compared with the SA mode, its authentication parameters are fewer.

[0011] Step C: When a seed code number is needed, the control program in the host computer microcontroller unit (MCU) or the cellular module randomly selects one from the preset seed code number IMSI pool, sends a specific APDU instruction to the eUICC through the Modem, and modifies the IMSI in the eUICC to the randomly selected IMSI;

[0012] In step D, the control program also screens the matching operator seed code pool according to the current status of the device, and updates the IMSI data information of the seed code as needed.

[0013] The International Mobile Subscriber Identity (IMSI) is a required parameter and is used to verify the user's identity and authority. This parameter interacts between the network and the user to ensure that only legitimate users can access network services. The Integrated Circuit Card Identity (ICCID) is not directly involved in the authentication process. It is mainly used to identify and recognize the SIM card itself and provide a unique identity for each SIM card.

[0014] Preferably, when network authentication is required, in theory, only the IMSI needs to be modified to meet the authentication requirements; however, considering that some devices or systems may judge certain attributes of the SIM card based on the ICCID, such as the type of card, the affiliated operator, etc., these attributes have an important impact on the device's identification and use of the SIM card. Therefore, in order to ensure that the SIM card can work normally on various devices and reduce potential problems caused by parameter mismatch, the method of modifying both the IMSI and the ICCID is used in actual operation.

[0015] Preferably, in step B, the applet also includes a validity check function, which interacts with the device through a specific APDU instruction. If the validity check fails, the IMSI in the profile is modified to an invalid value, and a refresh instruction is sent to the modem.

[0016] Preferably, in the step C, before modifying the IMSI, the control program first sends an APDU instruction for inputting a management password (ADM) to the eUICC via a Modem to enable read and write permissions for sensitive data.

[0017] Preferably, in step C, the APDU instruction complies with the SIM card specification of 3GPP, or adopts a custom format, wherein the APDU instruction in the custom format needs to be processed in conjunction with the java applet on the eUICC.

[0018] Preferably, the control program runs on a controller (CPU, MCU, single-chip microcomputer, etc.) or a module supporting OPEN CPU, and interacts with the eUICC through instructions (AT+CSIM or AT+CRSM in the standard AT instruction set) provided by a Modem connected to the controller, and the interaction content is data in APDU format.

[0019] Preferably, a fault detection step is also included. When the current seed code number cannot be used to successfully connect to the network, the control program dynamically writes a new seed code number IMSI by randomly extracting or rotating between different operators, and retries to connect to the network; the fault detection step also includes: when the current seed code number cannot be used to successfully connect to the network or download service code number resources, the control program dynamically writes a new seed code number IMSI by randomly extracting or rotating between different suppliers, and retries to connect to the network; the network disconnection of the seed code number will cause the download to fail, and will also cause the seed code number IMSI to be updated; and each time the device is restarted, the IMSI of the seed code number will be updated to avoid collision with other current eUICCs.

[0020] Preferably, the COS (Card Operating System) of the eUICC can ensure that the KI / OPc cannot be modified and read, thereby ensuring the security of the data.

[0021] Preferably, the failure of the seed code number service is caused by a service abnormality of the resource supplier; if the suppliers of the seed code number are China Telecom, China Mobile and China Unicom, after adopting the common seed code number method, the control program uses a preset rotation strategy to dynamically write each card to rotate the code numbers of multiple suppliers. As long as one supplier's service is normal, the code number of the normal service can be quickly switched to by rotating attempts.

[0022] Preferably, when modifying the IMSI, the control program will first send an APDU instruction for entering the management password (ADM) to the eUICC through the Modem to enable SIM card management permissions and implement read and write operations on sensitive data such as IMSI; in the 3GPP SIM card specification, the file address of IMSI is 6F07, and after obtaining the ADM permission, it can be directly modified through the APDU write instruction.

[0023] Preferably, when the control program needs to use the seed code number, it screens the seed code number pool of the matching operator according to the device region information (MCC) and the preset region and operator correspondence; the control program performs a validity check with the profile in the eUICC through a specific APDU instruction in a pre-agreed manner.

[0024] Compared with the prior art, the beneficial effects achieved by the present invention are:

[0025] 1. The present invention solves the high resource cost problem caused by the traditional method of presetting independent seed code numbers by realizing the sharing and reuse of seed code numbers. In the present invention, multiple eUICC cards can share the same initially invalid seed code number, and only dynamically write valid operator code numbers when needed, which greatly reduces the number of pre-set seed code numbers, thereby significantly reducing the code number fee cost.

[0026] 2. In the present invention, the control program can dynamically select a new seed code number and write it into the eSIM according to the current network environment and availability, thereby improving the flexibility and reliability of the device connecting to the network. Even when the code number service of a certain operator fails, the normal use of the device can be ensured by switching to the code number of other operators.

[0027] 3. In the present invention, the COS (Card Operating System) of the eUICC can ensure that sensitive data such as KI / OPc cannot be modified and read, thereby preventing data leakage and illegal access; secondly, before modifying the IMSI, the control program needs to first send an APDU instruction of inputting the management password (ADM) to the eUICC through the Modem to enable the read and write permissions for sensitive data. This step ensures that only authorized operations can modify the IMSI; in addition, the control program will also perform validity checks with the profile in the eUICC through specific APDU instructions, so that the seed code number cannot be used on illegal devices.

[0028] 4. In the present invention, all eUICC cards are pre-set with the same initially invalid seed code number, and the matching seed code number is dynamically written according to the regional information through the control program. This method allows the same eUICC card to be applicable to the network environments of different regions and different operators, thereby realizing single SKU stocking and product universalization, which not only reduces production costs and management difficulties, but also improves product flexibility and market competitiveness. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 A flow chart of a method for presetting a seed code number for an eSIM according to the present invention;

[0030] Figure 2 A process diagram of a method for presetting a seed code number for an eSIM according to the present invention;

[0031] Figure 3 A diagram of the control program and fault detection method of the present invention;

[0032] Figure 4 It is a system composition diagram of the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] See also Figure 1 - Figure 4 In an embodiment of the present invention, a method for presetting a seed code number for an eSIM includes the following steps:

[0035] Step A: Apply for number resources from multiple operators. The number resources provided by each operator have a unique International Mobile Subscriber Identity (IMSI), and the key (KI) and operation parameter (OPc) of all operator number resources are pre-set to a unified specific value, which is determined by the seed number operator and notified to each operator;

[0036] The modification of IMSI requires ADM or customized APDU modification, and the customized format is not disclosed, which can also prevent IMSI from being illegally modified. KI / OPc cannot be modified or read, and is protected by the COS of eUICC.

[0037] Step B, presetting a seed code profile containing a specific applet in all eUICCs (embedded universal integrated circuit cards), the initial IMSI of the profile is set to an invalid value, and its KI and OPc are consistent with the specific values ​​required in step A; the applet is configured to respond to a specific application protocol data unit (APDU) instruction for modifying the IMSI and a specific APDU instruction for performing a device validity check to modify the IMSI in the profile, and send a refresh instruction to the modem after the modification;

[0038] Step C: When a seed code number is needed, the control program in the host computer microcontroller unit (MCU) or the cellular module randomly selects one from the preset seed code number IMSI pool, sends a specific APDU instruction to the eUICC through the Modem, and modifies the IMSI in the eUICC to the randomly selected IMSI;

[0039] In step D, the control program also screens the matching operator seed code pool according to the current status of the device, and updates the IMSI data information of the seed code as needed.

[0040] In step B, the applet also includes a validity check function, which interacts with the device through a specific APDU instruction. If the validity check fails, the IMSI in the profile is modified to an invalid value and a refresh instruction is sent to the modem.

[0041] In step C, before modifying the IMSI, the control program first sends an APDU instruction for entering the management password (ADM) to the eUICC through the Modem to enable the read and write permissions for sensitive data.

[0042] In step C, the APDU instruction complies with the SIM card specification of 3GPP, or adopts a custom format, wherein the APDU instruction in the custom format needs to be processed in conjunction with the java applet on the eUICC.

[0043] The working principle of the embodiment of the present invention is: the control program runs on a controller (CPU, MCU, single-chip microcomputer, etc.) or a module supporting OPEN CPU, and interacts with the eUICC through the instructions provided by the Modem (such as AT+CSIM or AT+CRSM in the standard AT instruction set), and the interactive content is data in APDU format. The operating system of the controller can be Windows, Linux, Android, uC / OS, RTOS, etc., and can be developed in Java or C / C++. Usually, only the serial port driver of the Modem is required to send AT commands. The operating system of the cellular module supporting OPEN CPU can be RTOS, Linux, Android, and can be developed in Java or C. Usually, the development environment of the OPEN CPU module already provides the ability to send AT commands without other dependencies.

[0044] Step A is the starting point of the entire method. Its core is to apply for number resources with unique IMSI from multiple operators and preset unified KI and OPc values ​​for these resources. This preset operation ensures that all number resources are consistent in security and provides a basis for subsequent security verification and communication. The seed number operator, as the leader of this step, is responsible for determining and notifying each operator of these specific security parameters.

[0045] Step B presetting a seed code profile containing a specific applet in the eUICC is one of the key steps of the method of the present invention. The initial IMSI of this profile is set to an invalid value, which means that the eUICC cannot perform normal network communication before further operation. At the same time, the KI and OPc of this profile are consistent with the specific values ​​preset in step A, ensuring security.

[0046] As the core component of the profile, the applet is configured to respond to two specific APDU instructions: one is for modifying the IMSI, and the other is for checking the device validity. When the IMSI is successfully modified, the applet sends a refresh instruction to the modem so that the modem can recognize and use the new IMSI. In addition, the applet also has a validity check function, which interacts with the specific APDU instructions agreed upon by the device. If the device fails the validity check, the IMSI is reset to an invalid value and a refresh instruction is sent to the modem to ensure communication security.

[0047] When the device needs to use the seed code number for communication, the control program in the host computer MCU or cellular module will intervene. This control program is responsible for randomly selecting an IMSI from the preset seed code number IMSI pool and sending a specific APDU instruction to the eUICC through the modem to modify the IMSI in the eUICC. Before modifying the IMSI, the control program will first send an APDU instruction to the eUICC through the modem to enter the management password (ADM) to enable read and write permissions for sensitive data. In addition, sensitive files can be modified in the APPLET. The modem does not need to send ADM to the eUICC, but only needs to send a custom non-sensitive instruction to the eUICC. After receiving the instruction, the APPLET sends ADM to the COS in the card, and then obtains the permission to modify sensitive data.

[0048] APDU instructions can follow the 3GPP SIM card specification or use a custom format. APDU instructions in a custom format need to be processed in conjunction with the java applet on the eUICC, which provides greater flexibility and increases security because the custom format is not easily cracked.

[0049] Finally, the control program will also filter the matching operator seed code pool according to the current status of the device, and update the IMSI data information of the seed code as needed. Step D ensures that the device can select the most appropriate operator code resources according to actual conditions, thereby optimizing communication performance and costs.

[0050] See also Figure 1-Figure 4 In the embodiment of the present invention, the control program runs on a controller (CPU, MCU, single-chip microcomputer, etc.) or a module supporting OPEN CPU, and interacts with the eUICC through instructions (AT+CSIM or AT+CRSM in the standard AT instruction set) provided by a Modem connected to the controller, and the interaction content is data in APDU format.

[0051] It also includes a fault detection step. When the current seed code number cannot be used to successfully connect to the network, the control program dynamically writes a new seed code number IMSI by randomly extracting or rotating between different operators, and retries to connect to the network; the fault detection step also includes: when the current seed code number cannot be used to successfully connect to the network or download service code number resources, the control program dynamically writes a new seed code number IMSI by randomly extracting or rotating between different suppliers, and retries to connect to the network; the network disconnection of the seed code number will cause the download to fail, and will also cause the seed code number IMSI to be updated; and each time the device is restarted, the IMSI of the seed code number will be updated to avoid collision with other current eUICCs.

[0052] The eUICC's COS (Card Operating System) can ensure that KI / OPc cannot be modified or read, thereby ensuring data security.

[0053] The failure of the seed code service is caused by the abnormal service of the resource supplier. If the suppliers of the seed code are China Telecom, China Mobile and China Unicom, and the seed code is shared, the control program will use the preset rotation strategy to dynamically write codes for each card to rotate the codes of multiple suppliers. As long as one supplier's service is normal, it can quickly switch to the code of normal service through rotation attempts.

[0054] When modifying IMSI, the control program will first send an APDU command to the eUICC through the modem to enter the management password (ADM) to enable SIM card management permissions and implement read and write operations on sensitive data such as IMSI. In the 3GPP SIM card specification, the file address of IMSI is 6F07. After obtaining ADM permissions, it can be directly modified through the APDU write instruction.

[0055] When the control program needs to use the seed code number, it screens the seed code number pool of the matching operator according to the device's region information (MCC) and the preset region and operator correspondence; the control program performs validity check with the profile in the eUICC through specific APDU instructions in a pre-agreed manner.

[0056] The working principle of the embodiment of the present invention is as follows: first, the control program runs on the controller or the module supporting OPEN CPU, and communicates with the eUICC through the Modem, and the communication content adopts data in APDU format. This communication method ensures the security and integrity of the data.

[0057] Secondly, when the device cannot successfully connect to the network or download service code resources using the current seed code, the control program will automatically trigger the fault detection mechanism. This mechanism dynamically updates the seed code IMSI in the eUICC by randomly extracting or rotating between different operators, and retries to connect to the network. This dynamic update strategy improves the flexibility and reliability of device connection to the network. In addition, to ensure data security, the eUICC's COS (Card Operating System) can ensure that sensitive data such as KI / OPc cannot be modified or read. This feature enhances the security of the device and prevents data leakage and illegal access.

[0058] In terms of seed code number service, if the service of the resource supplier is abnormal, the control program will dynamically write the code numbers of multiple suppliers according to the preset rotation strategy to rotate each card. This rotation strategy ensures that as long as one supplier's service is normal, the device can quickly switch to the code number of the normal service, thereby improving the network connection stability of the device.

[0059] When modifying the IMSI, the control program will first send an APDU command to the eUICC through the modem to enter the management password (ADM) to obtain the SIM card management permission. After successfully obtaining the permission, the control program will directly modify the IMSI through the APDU write instruction in accordance with the 3GPP SIM card specification. This process ensures the security and effectiveness of IMSI modification.

[0060] When the seed code is needed, the control program will filter the matching operator seed code pool according to the device's region information (MCC) and the preset region and operator correspondence. At the same time, the control program will also perform validity checks with the profile in the eUICC through specific APDU instructions to ensure that the seed code used is legal and valid. The screening and checking mechanism further improves the security and reliability of the device.

[0061] Embodiment 3;

[0062] See also Figure 1-Figure 4 , provides an exchange example based on APDU instructions, interacts with eSIM through standardized AT+CSIM instructions to realize the presetting, modification and verification of seed code numbers. The following is a specific implementation method:

[0063] (1) Preset seed code number:

[0064] When an eSIM card is produced, a specific seed code (including key information such as IMSI, KI and OPc) is preset in the eSIM. This seed code can be a universal, unactivated code, such as IMSI: 000000000000000, while KI and OPc are set to a unified specific value.

[0065] (2) Enable SIM card management permissions:

[0066] When the MCU (microcontroller unit) is turned on, the AT+CSIM command is sent to the eSIM through the modem, and the ADM (SIM card management password) is entered to enable the SIM card management authority of the eSIM. For example, the command at+csim=26,0020000A083231333832323633 is sent to enter the correct ADM password.

[0067] (3) Modify IMSI:

[0068] After obtaining the management rights of eSIM, the MCU can modify the IMSI in the eSIM by sending a series of APDU instructions. First, the file address (6F07) of the IMSI is located by sending a select file instruction (such as at+csim=14,00A4000C023F00, etc.). Then, a write instruction (such as at+csim=28,"00D6000009084945003604523005") is sent to write the new IMSI value.

[0069] (4) Customize APDU instructions to implement additional functions:

[0070] If additional functions need to be implemented, such as automatically sending a refresh command after the IMSI is modified, or forcibly changing the IMSI to an invalid value when the password is not received after power-on, a Java Applet can be developed on the eSIM to process these custom APDU commands. The MCU triggers the corresponding functions by sending these custom commands.

[0071] (5) Verify the validity of the seed code:

[0072] After the MCU is powered on and successfully switched to the seed code number, the password is sent to the eSIM for validity check. If the eSIM verification passes, it means that the seed code number is valid and can continue to be used; if the verification fails, corresponding error handling is required.

[0073] (6) Update the seed code number:

[0074] When the seed code number needs to be replaced or updated (such as the termination of cooperation with a certain operator), it can be achieved by updating the control program of the MCU. The new control program will contain a new operator IMSI list and corresponding selection logic to ensure that the MCU can correctly select and use the new seed code number.

[0075] A resource cost saving calculation method is provided, which reduces the number fee cost by reducing the number of preset seed numbers and improves the stability of the system. The following is a specific implementation method:

[0076] (1) Determine the concurrency rate:

[0077] The concurrency rate of the eSIM card (i.e. the proportion of the number of eSIM cards used simultaneously to the total number of issued eSIM cards) is determined according to actual usage. For example, assuming the concurrency rate is 1%.

[0078] (2) Calculate the number of seed codes required:

[0079] The number of seed code numbers that need to be preset is calculated based on the concurrency rate. For example, if 1 million eSIM cards are issued and the concurrency rate is 1%, only 10,000 seed code numbers need to be preset.

[0080] (3) Preset seed code number:

[0081] When producing eSIM cards, the calculated seed code numbers are preset in the eSIM. These seed code numbers can be codes from different operators to ensure that they can switch to different networks when necessary.

[0082] (4) Dynamically write code number:

[0083] When the MCU is turned on, a seed code number is dynamically selected and written into the eSIM based on the current network environment and availability. For example, it first tries to use the code number of operator A to connect to the network. If it fails, it tries the code number of operator B, and so on. By using a common seed code number, each eSIM card can rotate the code numbers of multiple operators. When the code number service of a certain operator fails, it can switch to the code number of other operators to ensure the normal use of the eSIM card.

[0084] (5) Save resource costs:

[0085] Since the number of pre-set seed codes is reduced, the code fee cost can be significantly reduced. For example, compared with pre-setting an independent seed code for each card, 99% of resource costs can be saved.

[0086] An example method for configuring an eSIM pre-set seed code number is provided, which allows the seed code number in the eSIM to be dynamically updated and configured according to actual needs. The following is a specific implementation method:

[0087] (1) Apply for operator resources:

[0088] Apply for number resources from different operators and obtain key information such as IMSI, KI and OPc of these numbers. For example, operator A has 10,000 number resources with IMSIs ranging from 45400600000000 to 454006000009999; operator B has 1,000 number resources with IMSIs ranging from 460001000001000 to 460001000001999; operator C has 1,000 number resources with IMSIs ranging from 460001000001000 to 460001000001999; operator C has 1,000 number resources with IMSIs ranging from 45400600000000 to 454006000009999. The operator has 1,000 number resources, with IMSIs ranging from 311588000003000 to 311588000003999, KIs 549E22B48713D74C3648B1E5084194BE, and OPcs of 8BAD9C4802B2D7EDD8CC3F2109101C1D. It is required that the KI and OPc of all operator number resources be unified as specific values.

[0089] (2) Preset universal seed code number:

[0090] The same seed code number (such as IMSI: 000000000000000, KI: 549E22B48713D74C3648B1E5084194BE, OPc: 8BAD9C4802B2D7EDD8CC3F2109101C1D) is preset in 120,000 (1% concurrency rate, 12,000 seed code numbers) eUICC cards. This seed code number will serve as the basis for subsequent dynamic configuration.

[0091] (3) Configure the MCU control program:

[0092] The control program of the MCU is configured according to the applied operator resources and actual needs. The control program contains the IMSI list of different operators and the corresponding selection logic.

[0093] (4) Dynamically select and write the code number:

[0094] When the MCU is powered on, an operator code is dynamically selected and written into the eSIM according to the logic in the control program. This selection process can be based on the current network environment, user preferences or other factors. For example, the AT command is used to switch to the seed code and send a password to the eUICC to pass the validity check of the eUICC: at+csim=26,"0020000A083231333832323633"

[0095] The MCU randomly selects one from the A operator IMSI (454006000000000 to 454006000009999), 454006000006789, updates the IMSI of the eUICC, and tries to connect to the Internet with this IMSI.

[0096] If the connection fails, a random IMSI (460001000001000 to 460001000001999) of operator B is selected, 460001000001234, to update the IMSI of the eUICC. Then try to connect to the network with this IMSI.

[0097] If the connection still fails, randomly select one from the C operator IMSI (311588000003000 to 311588000003999), 311588000003678, and update the IMSI of the eUICC. Then try to connect to the network with this IMSI.

[0098] (5) Update configuration:

[0099] If you need to update or add new operator resources (such as terminating cooperation with a certain operator and introducing a new operator), you can do this by updating the MCU's control program. The new control program will contain a new operator IMSI list and corresponding selection logic. For example, for some reason, cooperation with operator C is terminated, and operator D is newly introduced. Apply for 2000 seed number resources, and the IMSIs are 206018165093000 to 206018165094999. Then you only need to update the MCU's control program, no longer use the IMSI of operator C, and replace it with the IMSI of operator D.

[0100] (6) Validity check and troubleshooting:

[0101] After each dynamic writing of the code number, a validity check is performed to ensure the normal use of the eSIM card. If any failure or error occurs, the corresponding error handling is performed and an attempt is made to switch to other available code numbers. For example, if the applet in the seed code number profile does not receive the password sent by the MCU within 5 minutes after power-on, the IMSI of the seed code number will be changed to 0000000000000000.

[0102] Working principle: By applying for code resources with unique IMSIs from multiple operators and presetting unified KI and OPc values ​​to ensure security, a seed code profile containing a specific applet is preset in the eUICC. The initial IMSI of the profile is invalid. When the device needs to use the seed code, the control program randomly selects an IMSI, sends an APDU instruction to the eUICC through the modem to modify the IMSI, and enables the SIM card management authority for read and write operations. If the current seed code cannot be connected to the network, a new seed code IMSI is dynamically written and retried. The COS of the eUICC ensures KI / OPc security. In addition, the control program screens the matching operator seed code pool according to the device region information and performs a validity check. The present invention realizes the dynamic update and configuration of the seed code, improves the flexibility and reliability of the device connecting to the network, while reducing the code fee cost and enhancing the system stability.

[0103] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and alterations may be made to the embodiments without departing from the principles and spirit thereof, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for presetting a seed code number for an eSIM, characterized in that: The following steps are involved: Step A, applying for number resources from multiple operators, the number resources provided by each operator have a unique international mobile subscriber identity code, and pre-setting the keys and operation parameters of all operator number resources to a unified specific value, which is determined by the seed number operator and notified to each operator; Step B, presetting a seed code profile containing a specific applet in all eUICCs, the initial IMSI of the profile is set to an invalid value, and its KI and OPc are consistent with the specific values ​​required in step A; the applet is configured to respond to a specific application protocol data unit instruction for modifying the IMSI and a specific APDU instruction for performing a device validity check to modify the IMSI in the profile, and send a refresh instruction to the modem after the modification; Step C, the control program in the upper computer microcontroller unit or the cellular module randomly selects one from the preset seed code number IMSI pool when the seed code number needs to be used, sends a specific APDU instruction to the eUICC through the Modem, and modifies the IMSI in the eUICC to the randomly selected IMSI; In step D, the control program also screens the matching operator seed code pool according to the current status of the device, and updates the IMSI data information of the seed code as needed.

2. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: In step B, the applet also includes a validity check function, which interacts with the device through a specific APDU instruction. If the validity check fails, the IMSI in the profile is modified to an invalid value and a refresh instruction is sent to the modem.

3. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: In the step C, before modifying the IMSI, the control program first sends an APDU instruction for inputting a management password to the eUICC through the Modem to enable read and write permissions for sensitive data.

4. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: In the step C, the APDU instruction complies with the SIM card specification of 3GPP, or adopts a custom format, wherein the APDU instruction in the custom format needs to be processed in conjunction with the java applet on the eUICC.

5. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: The control program runs on a controller or a module supporting OPEN CPU, and interacts with the eUICC through instructions provided by a Modem connected to the controller, and the interaction content is data in APDU format.

6. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: It also includes a fault detection step, when the current seed code number cannot be used to successfully connect to the network, the control program dynamically writes a new seed code number IMSI by randomly drawing or rotating between different operators, and retries to connect to the network; The fault detection step also includes: when the current seed code number cannot be used to successfully connect to the network or download the service code number resource, the control program dynamically writes a new seed code number IMSI by randomly extracting or rotating among different suppliers, and retrying to connect to the network; the network disconnection of the seed code number will cause the download to fail, and will also cause the seed code number IMSI to be updated; Every time the device is restarted, the IMSI of the seed code number will be updated to avoid collision with other current eUICCs.

7. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: The COS of the eUICC can ensure that KI / OPc cannot be modified and read, thereby ensuring the security of data.

8. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: The failure of the seed code number service is caused by the abnormal service of the resource supplier. If the suppliers of the seed code number are China Telecom, China Mobile and China Unicom, after adopting the common seed code number method, the control program will use the preset rotation strategy to dynamically write each card to rotate the code numbers of multiple suppliers. As long as one supplier's service is normal, the code number of the normal service can be quickly switched to by rotating attempts.

9. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: When modifying IMSI, the control program will first send an APDU instruction to enter the management password to the eUICC through the Modem to enable SIM card management permissions and implement read and write operations on sensitive data such as IMSI; in the 3GPP SIM card specification, the file address of IMSI is 6F07. After obtaining ADM permissions, it can be directly modified through the APDU write instruction.

10. The method for presetting a seed code number for an eSIM according to claim 1, characterized in that: When the control program needs to use the seed code number, the control program screens the seed code number pool of the matching operator according to the region information of the device and the preset region-operator correspondence relationship; the control program performs validity check with the profile in the eUICC through a specific APDU instruction in a pre-agreed manner.

Images