Self-service card writing system without preoccupying IMSI (International Mobile Subscriber Identity) resources

Abstract

The invention provides a self-service card writing system without preoccupying IMSI (International Mobile Subscriber Identity) resources, which comprises a self-service card writing service system for providing a self-service card writing service interface according to a card writing request initiated by a CRM (Clustering Request Management) system, distributing a permanent IMSI for a user, calculating card writing data to obtain an activation code, and returning the activation code to the user; the CRM system is used for storing card-made resources, serving as an entrance for an electronic channel and a service system to carry out service calling, initiating a user activation code request, binding authentication data of a user, and submitting the authentication data to a network side to be opened and activated; the electronic channel is used for providing an online channel and providing an entrance for card purchase and activation of a user; and the card merchant system is used for receiving the card making data sent by the card writing resource library, completing the making of the O2O physical card according to the card making data, and delivering the made card to a designated place. According to the invention, the utilization rate of IMSI resources can be effectively improved, the user experience is enhanced, and the marketing cost is reduced.

Description

Technical Field

[0001] The invention relates to the technical field of mobile communications, and in particular to a self-service card writing system without pre-occupying IMSI resources. Background Art

[0002] With the rapid development of mobile communication technology, the user identification module serves as a bridge between the mobile communication network and the user equipment. Its card activation method is directly related to the user's service experience and the operator's resource management efficiency. At present, there are mainly two user identification module card activation solutions on the market: pre-set blank card activation solution and physical card activation solution. However, these two solutions have obvious defects and cannot meet the growing market demand and user experience requirements.

[0003] Preset blank card opening solution: Preset blank cards only have some basic data (such as CARDSN, Ki, OPC, K1, etc.) preset when making the card, while personalized data (such as IMSI, ICCID, PIN1, PIN2, PUK1, PUK2, SMSP, etc.) is written into the card through the card writing system when the user handles the business. There are the following problems:

[0004] No pre-occupancy of resources: Since no personalized data is written into the pre-set blank card, IMSI resources are not pre-occupied, which alleviates the shortage of IMSI resources to a certain extent.

[0005] Device dependence: A card reader is needed to write personalized data into a pre-set blank card, which increases promotion and operation costs.

[0006] Poor business handling experience: The process of writing preset blank cards requires data interaction with the CRM system. Abnormal situations such as interface delays and network problems will cause the business handling process to be interrupted or extended, affecting the user experience.

[0007] Physical card activation solution: When the physical card is produced, all data (including IMSI, ICCID, PIN1, PIN2, PUK1, PUK2, SMSP, Ki, OPC, etc.) has been written into the card. When the user handles the business, he only needs to read the authentication data of the physical card and send it to the network element to complete the card activation. There are the following problems:

[0008] Resource occupation: All data has been written into the physical card, and IMSI resources have been pre-occupied in advance. Since IMSI resources are the core resources for the development of number card services and are very scarce, the large-scale use of physical cards will aggravate the shortage of IMSI resources.

[0009] Lack of flexibility: Once the physical card is produced, its data is fixed and cannot be flexibly adjusted according to user needs.

[0010] In summary, both the pre-set blank card activation solution and the physical card activation solution in the prior art have obvious defects. Although the pre-set blank card solution does not pre-occupy IMSI resources, it relies on the card reader and has a poor service handling experience; although the physical card solution does not require card writing, it pre-occupies IMSI resources in advance and lacks flexibility. Therefore, there is an urgent need for a new card activation solution that can effectively utilize IMSI resources, improve service handling experience, and is not device-dependent. Summary of the invention

[0011] To solve the above problems, the present invention proposes a self-service card writing system that does not pre-occupy IMSI resources, aiming to improve the utilization rate of IMSI resources, enhance user experience, and reduce marketing costs.

[0012] The present invention achieves the above-mentioned purpose through the following technical solutions:

[0013] A self-service card writing system without pre-occupying IMSI resources, comprising:

[0014] The card writing resource library is used to provide data support for card making and writing, provide card making data when making cards, and synchronize card making data to the CRM system;

[0015] The self-service card writing service system provides a self-service card writing service interface based on the card writing request initiated by the CRM system, allocates a permanent IMSI to the user, calculates the card writing data to obtain an activation code, and then returns the activation code to the user; after the activation code is entered, the permanent IMSI is written into the O2O card through the activation code;

[0016] The CRM system is used to store the resources that have been produced, and serves as the entry point for electronic channels and business systems to make business calls, initiate user activation code requests, bind the user's authentication data, and submit it to the network side for activation;

[0017] Electronic channels are used to provide online channels for users to purchase and activate cards;

[0018] The card merchant system is used to receive the card making data sent by the card writing resource library, complete the production of O2O physical cards according to the card making data, and deliver the completed cards to the designated location.

[0019] According to the present invention, a self-service card writing system without pre-occupying IMSI resources includes the following steps when making a card:

[0020] After entering basic information in the O2O self-service card writing support system, initiate a card making request;

[0021] The card writing resource library generates O2O card making data including temporary IMSI and CardSN, ICCID, Ki, OPC, PIN1, PIN2, PUK1, PUK2, and SMSP according to the card type in the card making request and the preset data generation rules;

[0022] The card writing resource library packages the generated card making data and synchronizes one of the packaged card making data to the card making person in charge, who then provides it to the card merchant system for card making.

[0023] The card writing resource library uses the ICCID in the card making data as an identifier and stores the card making data in the database;

[0024] The card writing resource library then synchronizes another packaged card production data to the CRM system for subsequent calling and processing in the card issuance process;

[0025] After receiving the card-making data provided by the card-making person in charge, the card merchant system completes the production of the O2O physical card.

[0026] According to a self-service card writing system without pre-occupying IMSI resources provided by the present invention, the preset data generation rules include:

[0027] Set corresponding temporary IMSI allocation strategies for different types of cards to ensure that the temporary IMSI is a fixed value or generated according to specific rules during the card making process and does not conflict with the permanent IMSI in the existing network;

[0028] Generate a unique CardSN based on the card type and business requirements to identify the uniqueness of each card

[0029] Generate an ICCID in a format that complies with industry standards or operator regulations to ensure the uniqueness and identifiability of the ICCID globally;

[0030] Generate authentication and encryption data based on security algorithms and key management strategies to ensure the communication security of the card;

[0031] Set the initial value or generation rule of PIN1 and PIN2, and the corresponding generation strategy of PUK1 and PUK2 for user identity authentication and card unlocking;

[0032] Generate parameters related to the short message service according to the operator's network configuration and service requirements to ensure that the card can receive and send short messages normally.

[0033] According to a self-service card writing system that does not pre-occupy IMSI resources provided by the present invention, the card writing resource library allocates a unique ICCID to each card during the process of generating card making data;

[0034] The card writing resource library establishes a database table, which contains at least one field for storing ICCID as a primary key or a unique index;

[0035] After the card making data is generated, the card writing resource library uses the ICCID in the card making data as the unique identifier of the record and inserts the complete card making data record into the database table;

[0036] The database table indexes and manages the card production data according to the ICCID field to ensure that the card production data of each card can be retrieved and queried quickly and accurately;

[0037] When the card writing resource library needs to call or process card making data, it uses ICCID as the query condition to retrieve the corresponding card making data record from the database table.

[0038] According to a self-service card writing system without pre-occupying IMSI resources provided by the present invention, when performing a self-service card writing process, the following steps are included:

[0039] Select your mobile phone number and package in the electronic channel and business system, complete payment and conduct real-name authentication, and then get an O2O card;

[0040] Log in to the electronic channel, enter the ICCID on the interface and submit it to the backend to obtain the activation code, or go to the business hall to provide the ICCID to obtain the activation code on site.

[0041] According to a self-service card writing system that does not pre-occupy IMSI resources provided by the present invention, the CRM system initiates a user activation code request according to the user's request, the card writing resource library provides a corresponding card writing data, which includes ICCID and permanent IMSI, and calls the self-service card writing service interface to request to obtain the activation code;

[0042] After receiving the request from the CRM system, the self-service card writing service system calculates the provided card writing data, generates an activation code, and returns the activation code to the CRM system;

[0043] The CRM system sends the received activation code to the user, binds the user's authentication data, and submits it to the network side for activation processing.

[0044] According to a self-service card writing system that does not pre-occupy IMSI resources provided by the present invention, after receiving the activation code, the O2O card is inserted into the user device and turned on;

[0045] After booting up, the user device enters the first-level menu of the self-service card writing navigation, accesses the interface for entering the activation code, and enters the 15-digit activation code;

[0046] The O2O card parses the input activation code data and calculates the verification code; if the verification code in the input activation code is consistent with the calculated verification code, the permanent IMSI is written into the O2O card;

[0047] The user is prompted that the card writing is successful. After restarting the user's device or searching the network again, the O2O card can be used normally for communication.

[0048] According to a self-service card writing system without pre-occupying IMSI resources provided by the present invention, after receiving a request from a CRM system, the self-service card writing service system operates the provided card writing data to generate an activation code in a specific manner including:

[0049] The self-service card writing service system first receives the card writing data sent by the CRM system, which at least includes the ICCID and permanent IMSI;

[0050] The system processes the received card writing data according to a preset activation code generation algorithm; wherein the activation code generation algorithm includes at least one or more operation modes of hash operation, encryption operation, data splicing, random number generation and combinations thereof;

[0051] Generate a unique activation code associated with the card data through calculation, which has sufficient complexity and randomness to ensure its security and uniqueness;

[0052] The system returns the generated activation code to the CRM system so that the CRM system can subsequently send the activation code to the user for self-service card writing operations.

[0053] According to a self-service card writing system without pre-occupying IMSI resources provided by the present invention, when generating authentication data, an authentication key is generated or obtained according to a key management policy, including:

[0054] Establish a key management system for the full life cycle management of keys, where keys are stored in encrypted form and the storage location is physically isolated from the location where the keys are used;

[0055] A hierarchical key structure is adopted, including root key, master key and working key. The root key and master key are used to generate and manage working keys, and the working key is directly used for authentication and encryption operations.

[0056] A composite authentication algorithm based on a hash function and a symmetric encryption algorithm is used; the authentication algorithm is specifically: authentication code = HMAC (authentication key, data), where HMAC represents a message authentication code algorithm based on a hash function;

[0057] During the authentication process, the authentication key and data are first used as input to generate an intermediate value through a hash function; then, the intermediate value is symmetrically encrypted to obtain the final authentication code.

[0058] According to a self-service card writing system that does not pre-occupy IMSI resources provided by the present invention, a dynamic key distribution mechanism is implemented when generating encrypted data, and a unique encryption key is used in each encryption operation; wherein the encryption key is stored in a hardware security module HSM or an equivalent secure storage facility to prevent unauthorized access;

[0059] Implement key lifecycle management, including key generation, distribution, use, update and destruction, with log records at each stage;

[0060] A symmetric encryption algorithm is used. The encryption algorithm is specifically: encrypted data = AES (encryption key, original data), where AES stands for Advanced Encryption Standard algorithm;

[0061] During the encryption process, the encryption key and original data are used as input, and multiple rounds of transformation and substitution operations are performed through the AES algorithm to generate encrypted data.

[0062] It can be seen that compared with the prior art, the present invention, by introducing a temporary IMSI mechanism, achieves the function of not occupying the scarce resource IMSI and enabling users to activate their cards by themselves, which brings significant beneficial effects, which are specifically reflected in the following aspects:

[0063] Significantly improve resource utilization: The present invention uses a temporary IMSI with a fixed value during the card-making stage, avoiding the need to pre-occupy scarce IMSI resources in the traditional card-making process, so that IMSI resources can be allocated only when the user actually purchases a card and needs a permanent IMSI, thereby greatly improving the utilization efficiency of IMSI resources. Through this mechanism, the present invention effectively alleviates the problem of IMSI resource shortage, provides operators with a more flexible and efficient resource management method, and reduces resource waste and cost increase caused by resource pre-occupancy.

[0064] Enhanced user experience: Users can purchase cards through electronic channels anytime and anywhere, and complete the card activation operation through the self-service card writing platform, without having to go to the business hall to queue up, which greatly improves the convenience and timeliness of users' business. In addition, the self-service card activation function is applicable to a variety of scenarios such as new account opening, card replacement, etc., meeting the diverse needs of users and improving user satisfaction and loyalty.

[0065] Effectively reduce marketing costs: The card activation process of the present invention does not require the preparation of additional physical equipment. Only user equipment (UE) and O2O cards are required to complete the card activation, which simplifies the card activation process and reduces the card activation cost. This mechanism allows operators to expand agents more easily, facilitates agents to operate, reduces agents' access costs, and is more conducive to business promotion and market expansion. At the same time, through the online and offline fast card sales and self-service card collection process, it enables low-cost marketing on the front line and improves marketing efficiency and effectiveness.

[0066] In summary, the present invention, by introducing a temporary IMSI mechanism, achieves multiple beneficial effects such as no pre-occupancy of scarce resources, self-service card activation by users, and getting rid of external device dependence. These effects not only improve the utilization rate of IMSI resources and enhance user experience, but also reduce marketing costs, provide operators with a more flexible, efficient and convenient way of handling business, and have significant economic and social benefits.

[0067] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 It is a principle diagram of an embodiment of a self-service card writing system of the present invention that does not pre-occupy IMSI resources.

[0069] Figure 2 It is a flowchart of a card making process implemented in an embodiment of a self-service card writing system that does not pre-occupy IMSI resources of the present invention.

[0070] Figure 3 It is a flowchart of self-service card writing implemented in an embodiment of a self-service card writing system without pre-occupying IMSI resources of the present invention. DETAILED DESCRIPTION

[0071] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0072] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0073] See also Figure 1 This embodiment provides a self-service card writing system that does not pre-occupy IMSI resources, including:

[0074] The card writing resource library is used to provide data support for card making and writing, provide card making data when making cards, and synchronize card making data to the CRM system. Among them, card making data includes but is not limited to temporary IMSI (International Mobile Subscriber Identity) and CardSN (Card Serial Number), ICCID (Integrated Circuit Card Identification Code), Ki (Authentication Key), OPC (Operation Code), PIN1 (Personal Identification Code 1), PIN2 (Personal Identification Code 2), PUK1 (Unlock Code 1), PUK2 (Unlock Code 2), SMSP (Short Message Service Parameters) and other data.

[0075] The self-service card writing service system provides a self-service card writing service interface based on the card writing request initiated by the CRM system, allocates a permanent IMSI to the user, calculates the card writing data to obtain an activation code, and then returns the activation code to the user; after the activation code is entered, the permanent IMSI is written into the O2O card through the activation code.

[0076] The CRM system is used to store the resources that have been produced, and serves as the entry point for electronic channels and business systems to make business calls. It initiates user activation code requests, binds the user's authentication data, and submits it to the network side for activation.

[0077] Electronic channels are used to provide online channels for users to purchase and activate cards. For example, offline business halls can also call online channels for self-service card writing services.

[0078] The card merchant system is used to receive the card making data sent by the card writing resource library, complete the production of O2O physical cards according to the card making data, and deliver the completed cards to the designated location.

[0079] In this embodiment, the O2O self-service card writing support system includes a card writing resource library and a self-service card writing service, wherein the card writing resource library provides data support for card making and card writing, provides temporary IMSI (fixed value) and CardSN, ICCID, Ki, OPC, PIN1, PIN2, PUK1, PUK2, SMSP data when making a card, and synchronizes the card making data to the CRM. The self-service card writing service is part of the O2O self-service card writing support system. The self-service card writing service provides a self-service card writing service interface based on the card writing request initiated by the CRM, allocates a permanent IMSI to the user, and calculates the card writing data (ICCID and permanent IMSI and other data) to obtain an activation code, which is then returned to the user. The user enters the activation code, and the permanent IMSI is finally written into the O2O card through the activation code.

[0080] When making a card, the following steps are included:

[0081] After inputting basic information such as the card quantity, card merchant information, and card type in the O2O self-service card writing support system, a card making request is initiated;

[0082] The card writing resource library generates O2O card making data including temporary IMSI and CardSN, ICCID, Ki, OPC, PIN1, PIN2, PUK1, PUK2, and SMSP according to the card type in the card making request and the preset data generation rules;

[0083] The card writing resource library packages the generated card making data and synchronizes one of the packaged card making data to the card making person in charge, who then provides it to the card merchant system for card making.

[0084] The card writing resource library uses the ICCID in the card making data as an identifier and stores the card making data in the database;

[0085] The card writing resource library then synchronizes another packaged card production data to the CRM system for subsequent calling and processing in the card issuance process;

[0086] After receiving the card-making data provided by the card-making person in charge, the card merchant system completes the production of the O2O physical card and mails the completed physical card to the designated location for business use.

[0087] Specifically, Figure 2 As shown, the card making process of this embodiment includes the following steps:

[0088] 1. The person in charge of card making enters the basic information such as the number of cards to be made, the card merchant, and the card type in the O2O self-service card writing support system and initiates a card making request;

[0089] 2. The card writing resource library generates O2O card making data according to the card type requested and the data generation rules. The generated data includes temporary IMSI (fixed value) and CardSN, ICCID, Ki, OPC, PIN1, PIN2, PUK1, PUK2, and SMSP.

[0090] 3. Write the card resource library to package the card making data, and send a copy to the card making person in charge, who will provide it to the card vendor for card making;

[0091] 4. The card writing resource library stores the card making data in the database according to the ICCID in the card making data;

[0092] 5. Write a copy of the card resource library to the CRM for subsequent card issuance;

[0093] 6. After the card dealer completes the card production, he / she will mail the physical card to the designated location for business use.

[0094] In this embodiment, the preset data generation rules include:

[0095] Set corresponding temporary IMSI allocation strategies for different types of cards to ensure that the temporary IMSI is a fixed value or generated according to specific rules during the card making process and does not conflict with the permanent IMSI in the existing network;

[0096] Generate a unique CardSN based on the card type and business requirements to identify the uniqueness of each card;

[0097] Generate an ICCID in a format that complies with industry standards or operator regulations to ensure the uniqueness and identifiability of the ICCID globally;

[0098] Generate authentication and encryption related data such as Ki and OPC according to security algorithms and key management strategies to ensure the communication security of the card;

[0099] Set the initial value or generation rule of PIN1 and PIN2, and the corresponding generation strategy of PUK1 and PUK2 for user identity authentication and card unlocking;

[0100] Generate parameters related to the short message service according to the operator's network configuration and service requirements to ensure that the card can receive and send short messages normally.

[0101] It can be seen that the card writing resource library automatically generates complete O2O card making data according to the above preset data generation rules for subsequent card making and writing processes.

[0102] In this embodiment, the card writing resource library assigns a unique ICCID to each card during the process of generating card making data;

[0103] The card writing resource library establishes a database table, which contains at least one field for storing ICCID as a primary key or a unique index;

[0104] After the card making data is generated, the card writing resource library uses the ICCID in the card making data as the unique identifier of the record and inserts the complete card making data record into the database table;

[0105] The database table indexes and manages the card production data according to the ICCID field to ensure that the card production data of each card can be retrieved and queried quickly and accurately;

[0106] When the card writing resource library needs to call or process card making data, it uses ICCID as the query condition to retrieve the corresponding card making data record from the database table.

[0107] Through the above method, the card writing resource library uses the ICCID in the card making data as an identifier to store the card making data in the database in an orderly and efficient manner, providing data support for subsequent card making, card issuance, card writing, and user activation.

[0108] In this embodiment, if Figure 3 As shown, the self-service card writing process includes the following steps:

[0109] After users select their mobile phone number and package in the electronic channel and business system, complete payment and undergo real-name authentication, they will receive an O2O card;

[0110] Log in to the electronic channel, enter the ICCID on the interface and submit it to the backend to obtain the activation code, or go to the business hall to provide the ICCID to obtain the activation code on site.

[0111] The CRM system initiates a user activation code request based on the user's request. The card writing resource library provides a corresponding card writing data, which includes the ICCID and permanent IMSI, and calls the self-service card writing service interface to request the activation code.

[0112] After receiving the request from the CRM system, the self-service card writing service system calculates the provided card writing data, generates an activation code, and returns the activation code to the CRM system;

[0113] The CRM system sends the received activation code to the user, binds the user's authentication data, and submits it to the network side for activation processing.

[0114] After receiving the activation code, insert the O2O card into the user device and turn it on;

[0115] After booting up, the user device enters the first-level menu of the self-service card writing navigation, accesses the interface for entering the activation code, and enters the 15-digit activation code;

[0116] The O2O card parses the input activation code data and calculates the verification code; if the verification code in the input activation code is consistent with the calculated verification code, the permanent IMSI is written into the O2O card;

[0117] The user is prompted that the card writing is successful. After restarting the user's device or searching the network again, the O2O card can be used normally for communication.

[0118] Through the above self-service card writing process, users can easily complete the activation and card writing operations of O2O cards, and realize self-service card writing services without occupying IMSI resources.

[0119] In this embodiment, after receiving the request from the CRM system, the self-service card writing service system operates the provided card writing data to generate the activation code in the following specific manners:

[0120] The self-service card writing service system first receives the card writing data sent by the CRM system, which at least includes the ICCID and permanent IMSI;

[0121] The system processes the received card writing data according to a preset activation code generation algorithm; wherein the activation code generation algorithm includes at least one or more operation modes of hash operation, encryption operation, data splicing, random number generation and combinations thereof;

[0122] Generate a unique activation code associated with the card data through calculation, which has sufficient complexity and randomness to ensure its security and uniqueness;

[0123] The system returns the generated activation code to the CRM system so that the CRM system can subsequently send the activation code to the user for self-service card writing operations.

[0124] Through the above method, the self-service card writing service system can effectively calculate the provided card writing data, generate a safe and unique activation code, and provide key technical support for the self-service card writing process.

[0125] In this embodiment, when generating authentication data, generating or obtaining an authentication key according to a key management policy includes:

[0126] A key management system is established to manage the entire life cycle of keys. Keys are stored in encrypted form and the storage location is physically isolated from the location where the keys are used. The generation, distribution, use and destruction of keys are all logged for auditing and tracking purposes.

[0127] A hierarchical key structure is adopted, including root key, master key and working key. The root key and master key are used to generate and manage working keys, and the working key is directly used for authentication and encryption operations.

[0128] A composite authentication algorithm based on a hash function and a symmetric encryption algorithm is used; the authentication algorithm is specifically: authentication code = HMAC (authentication key, data), where HMAC represents a message authentication code algorithm based on a hash function;

[0129] During the authentication process, the authentication key and data are first used as input to generate an intermediate value through a hash function; then, the intermediate value is symmetrically encrypted to obtain the final authentication code. The authentication code is unique and unpredictable, and can effectively prevent forgery and tampering.

[0130] Through the above-mentioned key management strategy and authentication algorithm, highly secure authentication data can be generated, providing reliable protection for the communication security of the card.

[0131] In this embodiment, when generating encrypted data, a dynamic key distribution mechanism is implemented to use a unique encryption key for each encryption operation; wherein the encryption key is stored in a hardware security module HSM or an equivalent secure storage facility to prevent unauthorized access;

[0132] Implement key lifecycle management, including key generation, distribution, use, update and destruction, with log records at each stage;

[0133] A symmetric encryption algorithm is used. The encryption algorithm is specifically: encrypted data = AES (encryption key, original data), where AES stands for Advanced Encryption Standard algorithm;

[0134] During the encryption process, the encryption key and original data are used as input, and multiple rounds of transformation and substitution operations are performed through the AES algorithm to generate encrypted data.

[0135] Through the above-mentioned key management strategy and encryption algorithm, highly secure encrypted data can be generated, providing strong protection for card communication and data storage.

[0136] In summary, the present invention, by introducing a temporary IMSI mechanism, has the advantages of not occupying scarce resources, allowing users to activate cards by themselves, and getting rid of dependence on external devices. It not only improves the utilization rate of IMSI resources and enhances user experience, but also reduces marketing costs, providing operators with a more flexible, efficient and convenient business handling method, with significant economic and social benefits.

[0137] Furthermore, the present invention adopts a temporary IMSI with a fixed value in the card making stage, avoiding the need to pre-occupy scarce IMSI resources in the traditional card making process, so that IMSI resources can be allocated only when the user actually purchases a card and needs a permanent IMSI, thereby greatly improving the utilization efficiency of IMSI resources. Through this mechanism, the present invention effectively alleviates the problem of IMSI resource shortage, provides operators with a more flexible and efficient resource management method, and reduces resource waste and cost increase caused by resource pre-occupancy.

[0138] Furthermore, users can purchase cards through electronic channels anytime and anywhere, and complete the card activation operation through the self-service card writing platform, without having to go to the business hall to queue up, which greatly improves the convenience and timeliness of users' business. In addition, the self-service card activation function is applicable to a variety of scenarios such as new account opening, card replacement, etc., meeting the diverse needs of users and improving user satisfaction and loyalty.

[0139] Furthermore, the card activation process of the present invention does not require the preparation of additional physical equipment. Only the user equipment (UE) and the O2O card are required to complete the card activation, which simplifies the card activation process and reduces the card activation cost. This mechanism allows operators to expand agents more easily, facilitates agents to operate, reduces the access cost of agents, and is more conducive to business promotion and market expansion. At the same time, through the online and offline fast card sales and self-service card collection process, low-cost marketing on the front line is enabled, and marketing efficiency and effectiveness are improved.

[0140] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0141] The above-mentioned embodiments are only preferred embodiments of the present invention and cannot be used to limit the scope of protection of the present invention. Any non-substantial changes and substitutions made by technicians in this field on the basis of the present invention shall fall within the scope of protection required by the present invention.

Claims

1. A self-service card writing system that does not pre-occupy IMSI resources, characterized in that: include: The card writing resource library is used to provide data support for card making and writing, provide card making data when making cards, and synchronize card making data to the CRM system; The self-service card writing service system provides a self-service card writing service interface according to the card writing request initiated by the CRM system, allocates a permanent IMSI to the user, calculates the card writing data to obtain an activation code, and then returns the activation code to the user; wherein, after the activation code is input, the permanent IMSI is written into the O2O card through the activation code; The CRM system is used to store the resources that have been produced, and serves as the entry point for electronic channels and business systems to make business calls, initiate user activation code requests, bind the user's authentication data, and submit it to the network side for activation; Electronic channels are used to provide online channels for users to purchase and activate cards; The card merchant system is used to receive the card making data sent by the card writing resource library, complete the production of O2O physical cards according to the card making data, and deliver the completed cards to the designated location.

2. The system according to claim 1, characterized in that: When making a card, the following steps are included: After entering basic information in the O2O self-service card writing support system, initiate a card making request; The card writing resource library generates O2O card making data including temporary IMSI and CardSN, ICCID, Ki, OPC, PIN1, PIN2, PUK1, PUK2, and SMSP according to the card type in the card making request and the preset data generation rules; The card writing resource library packages the generated card making data and synchronizes one of the packaged card making data to the card making person in charge, who then provides it to the card merchant system for card making. The card writing resource library uses the ICCID in the card making data as an identifier and stores the card making data in the database; The card writing resource library then synchronizes another packaged card production data to the CRM system for subsequent calling and processing in the card issuance process; After receiving the card-making data provided by the card-making person in charge, the card merchant system completes the production of the O2O physical card.

3. The system according to claim 2, characterized in that The preset data generation rules include: Set corresponding temporary IMSI allocation strategies for different types of cards to ensure that the temporary IMSI is a fixed value or generated according to specific rules during the card making process and does not conflict with the permanent IMSI in the existing network; Generate a unique CardSN based on the card type and business requirements to identify the uniqueness of each card; Generate an ICCID in a format that complies with industry standards or operator regulations to ensure the uniqueness and identifiability of the ICCID globally; Generate authentication and encryption data based on security algorithms and key management strategies to ensure the communication security of the card; Set the initial value or generation rule of PIN1 and PIN2, and the corresponding generation strategy of PUK1 and PUK2 for user identity authentication and card unlocking; Generate parameters related to the short message service according to the operator's network configuration and service requirements to ensure that the card can receive and send short messages normally.

4. The system according to claim 2, characterized in that: The card writing resource library assigns a unique ICCID to each card during the process of generating card making data; The card writing resource library establishes a database table, which contains at least one field for storing ICCID as a primary key or a unique index; After the card making data is generated, the card writing resource library uses the ICCID in the card making data as the unique identifier of the record and inserts the complete card making data record into the database table; The database table indexes and manages the card production data according to the ICCID field to ensure that the card production data of each card can be retrieved and queried quickly and accurately; When the card writing resource library needs to call or process card making data, it uses ICCID as the query condition to retrieve the corresponding card making data record from the database table.

5. The system according to claim 1, characterized in that: The self-service card writing process includes the following steps: Select your mobile phone number and package in the electronic channel and business system, complete payment and conduct real-name authentication, and then get an O2O card; Log in to the electronic channel, enter the ICCID on the interface and submit it to the backend to obtain the activation code, or go to the business hall to provide the ICCID to obtain the activation code on site.

6. The system according to claim 5, characterized in that: The CRM system initiates a user activation code request based on the user's request. The card writing resource library provides a corresponding card writing data, which includes the ICCID and permanent IMSI, and calls the self-service card writing service interface to request the activation code. After receiving the request from the CRM system, the self-service card writing service system calculates the provided card writing data, generates an activation code, and returns the activation code to the CRM system; The CRM system sends the received activation code to the user, binds the user's authentication data, and submits it to the network side for activation processing.

7. The system according to claim 6, characterized in that: After receiving the activation code, insert the O2O card into the user device and turn it on; After booting up, the user device enters the first-level menu of the self-service card writing navigation, accesses the interface for entering the activation code, and enters the 15-digit activation code; The O2O card parses the input activation code data and calculates the verification code; if the verification code in the input activation code is consistent with the calculated verification code, the permanent IMSI is written into the O2O card; The user is prompted that the card writing is successful. After restarting the user's device or searching the network again, the O2O card can be used normally for communication.

8. The system according to claim 6, characterized in that: After receiving the request from the CRM system, the self-service card writing service system operates the provided card writing data to generate the activation code in the following specific ways: The self-service card writing service system first receives the card writing data sent by the CRM system, which at least includes the ICCID and permanent IMSI; The system processes the received card writing data according to a preset activation code generation algorithm; wherein the activation code generation algorithm includes at least one or more operation modes of hash operation, encryption operation, data splicing, random number generation and combinations thereof; Generate a unique activation code associated with the card data through calculation, which has sufficient complexity and randomness to ensure its security and uniqueness; The system returns the generated activation code to the CRM system so that the CRM system can subsequently send the activation code to the user for self-service card writing operations.

9. The system according to claim 3, characterized in that: When generating authentication data, an authentication key is generated or obtained according to the key management policy, including: Establish a key management system for the full life cycle management of keys, where keys are stored in encrypted form and the storage location is physically isolated from the location where the keys are used; A hierarchical key structure is adopted, including root key, master key and working key. The root key and master key are used to generate and manage working keys, and the working key is directly used for authentication and encryption operations. A composite authentication algorithm based on a hash function and a symmetric encryption algorithm is used; the authentication algorithm is specifically: authentication code = HMAC (authentication key, data), where HMAC represents a message authentication code algorithm based on a hash function; During the authentication process, the authentication key and data are first used as input to generate an intermediate value through a hash function; then, the intermediate value is symmetrically encrypted to obtain the final authentication code.

10. The system according to claim 3, characterized in that: When generating encrypted data, a dynamic key distribution mechanism is implemented to use a unique encryption key for each encryption operation; wherein the encryption key is stored in a hardware security module HSM or an equivalent secure storage facility to prevent unauthorized access; Implement key lifecycle management, including key generation, distribution, use, update and destruction, with log records at each stage; A symmetric encryption algorithm is used. The encryption algorithm is specifically: encrypted data = AES (encryption key, original data), where AES stands for Advanced Encryption Standard algorithm; During the encryption process, the encryption key and original data are used as input, and multiple rounds of transformation and substitution operations are performed through the AES algorithm to generate encrypted data.

Images