A SIM card production preprocessing method and system

Abstract

The present invention relates to the technical field of SIM card production, and discloses a SIM card production preprocessing method and system, the method comprising: obtaining an encrypted order information data packet for parsing to obtain order data, script data, and personalized data; performing multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data; establishing an association between the order data and the corresponding personalized data and script data, and uploading the authenticated script data and personalized data to a production database; generating an operation log recording the entire order processing process and system status for archiving. The present invention significantly improves production efficiency and reduces large-scale order processing time through automated data parsing, multi-level authentication verification, systematic data association storage, and full-process log recording, reduces the error rate of human operation, and ensures the security of sensitive data through multiple authentication mechanisms. The detailed operation log generated by the present invention facilitates rapid tracing of the root cause of the problem, thereby helping to optimize management.

Description

Technical Field

[0001] The present invention relates to the technical field of SIM card production, and in particular to a SIM card production preprocessing method and system. Background Art

[0002] In the SIM card production industry, existing technology primarily relies on manual processing for data parsing, authentication, uploading, and association, resulting in significant drawbacks such as low efficiency, prone to errors, and difficulty in tracing. Manual operations can be time-consuming, complex authentication processes can easily lead to missed detections due to fatigue, and manual data entry is prone to errors and omissions, leading to data corruption, key leaks, and script execution errors. Furthermore, manual processing makes it difficult to fully record operational information, making tracing issues difficult and ensuring that every step meets industry compliance requirements. During peak periods, insufficient processing capacity and slow response to exceptions can also lead to serious impacts on production efficiency and product quality. Summary of the Invention

[0003] In view of this, the present invention provides a SIM card production preprocessing method and system to solve the existing SIM card production industry work mainly relies on manual processing, there are drawbacks in production efficiency, quality, safety and management.

[0004] In a first aspect, the present invention provides a SIM card production preprocessing method, comprising:

[0005] Obtain the encrypted order information data packet and parse it to obtain order data, script data and personalized data;

[0006] Perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data;

[0007] Establish the association between order data and corresponding personalized data and script data, and upload the authenticated script data and personalized data to the production database;

[0008] Generate an operation log that records the entire order processing process and system status for archiving.

[0009] The SIM card production preprocessing method provided by the embodiment of the present invention significantly improves production efficiency and significantly reduces large-scale order processing time through automated data analysis, multi-level authentication and verification, systematic data association storage, and full-process logging. It also reduces the error rate of human operation and ensures the security of sensitive data through multiple authentication mechanisms. The detailed operation log generated facilitates rapid tracing of the root cause of problems, helps enterprises optimize management, and strictly adheres to industry standards to improve compliance, achieving efficient management and intelligent application of production data, and comprehensively enhancing the competitiveness of enterprises in the field of smart card production.

[0010] In an optional embodiment, the obtaining of the encrypted order information data packet and parsing the obtained order data, script data and personalized data includes:

[0011] Identify the data type of the order information data packet based on its file name, and extract key information of the order data, script data, and personalized data based on the data format analysis;

[0012] The order data includes: file name, chip model, order number, and requirement code;

[0013] The script data includes: pre-personalization script, post-personalization script, and detection script;

[0014] The personalization data includes: PIN1, KI, and OP / OPC key information.

[0015] The data parsing and classification method provided by the embodiment of the present invention improves data processing efficiency and reduces error rate through intelligent file name recognition and format adaptive parsing. At the same time, it realizes the precise matching of order data with production requirements, the orderly and standardized execution of scripts, and the encrypted storage of sensitive keys, effectively avoiding the risks of card scrapping and key leakage caused by human misjudgment, and laying a solid foundation for the efficient, safe and compliant operation of SIM card production preprocessing.

[0016] In an optional implementation, the performing multi-level authentication on the SIM card based on the parsed data includes:

[0017] Connect the corresponding SIM card reader according to the chip model, detect the initial data status of the SIM card, and perform the card writing operation when the ATR data and the first personalized data are present;

[0018] Compare the data of bare card, blank card and finished card in pre-personalization with the actual data of SIM card to achieve primary authentication;

[0019] Advanced authentication is achieved by simulating a base station to generate a random number challenge and verifying the consistency of the SRES response value generated by the card with the simulated calculation result.

[0020] The embodiment of the present invention uses a multi-level authentication mechanism to adapt the card reader according to the chip model and detect the card status to ensure the validity of card writing. Combined with the data consistency comparison of primary authentication and the base station simulation challenge of advanced authentication, it forms a double protection from basic parameter verification to encryption capability verification. It can not only avoid manual adaptation errors and promptly intercept cards with abnormal data, but also deeply verify the correctness of keys and encryption algorithms, effectively improving the card writing success rate, product qualification rate and security protection level of SIM card production, meeting the needs of high-security fields and reducing after-sales risks.

[0021] In an optional embodiment, the method of simulating a base station to generate a random number challenge and verifying the consistency between the SRES response value generated by the card and the simulated calculation result to achieve advanced authentication includes:

[0022] Verify the PIN1 entered by the user. If it is correct, continue. If it is wrong, prompt to re-enter or terminate the authentication. It is used to confirm the user's identity and protect the data in the card from unauthorized access.

[0023] Simulate the network base station to generate random numbers and timestamps as authentication challenge factors;

[0024] Using KI, OP / OPC, and random numbers, the authentication response SRES is calculated using the encryption algorithm preset in the SIM card and sent to the base station;

[0025] The base station calculates the expected SRES based on the same KI, OP / OPC, and random number, and performs a consistency comparison based on the timestamp and the received authentication response SRES;

[0026] If the comparison is consistent, the authentication is successful; if the comparison is inconsistent, the authentication fails.

[0027] This embodiment of the present invention uses PIN1 verification to initially confirm the user's identity, effectively preventing unauthorized access to sensitive data on the card and reducing the risk of data leakage. Secondly, a simulated base station generates a random number and timestamp as a challenge factor. Combined with keys such as KI, OP / OPC, and a preset encryption algorithm, this dynamically performs encryption verification on the card, ensuring the uniqueness and unpredictability of each SIM card's encryption response, preventing malicious tampering or forgery. Finally, timestamp comparison and SRES verification not only verify the correctness of the card's encryption algorithm but also protect against replay attacks, ensuring communication security. This entire process significantly enhances the security and reliability of SIM card data.

[0028] In an optional embodiment, establishing an association relationship between the order data and the corresponding personalized data and script data, and uploading the authenticated script data and personalized data to the production database includes:

[0029] Establishing an association between the order number and personalized data, and an association between the order number and the requirement code and script data;

[0030] Create a database connection pool, distribute the upload task of personalized data that has passed authentication through multiple threads, and upload it to the preset database table;

[0031] Establish an object storage connection through the MinIO server IP and port, and based on the path generated by the order number and requirement code, classify the script data by order number and store it in the corresponding folder.

[0032] The embodiment of the present invention achieves structured integration of production data by establishing precise associations between order numbers and personalized data and script data, facilitating subsequent rapid queries and calls, and avoiding production errors caused by data confusion; with the help of database connection pools and multi-threading technology, the efficiency of uploading personalized data is increased several times, significantly shortening data processing time and meeting the rapid response requirements of large-scale orders; using MinIO object storage to classify and store script data according to order numbers and requirement codes not only improves the standardization of script management, but also enhances the flexibility and scalability of data storage, effectively reducing data storage and retrieval costs, while ensuring the integrity and security of production data, providing strong support for full-process traceability and quality control of SIM card production.

[0033] In an optional implementation, the operation log includes:

[0034] Troubleshooting log, used to record system problem events;

[0035] Operation audit log, used to record important system operations;

[0036] Behavior tracking logs are used to record user behavior and system operation trajectories.

[0037] The embodiment of the present invention uses a troubleshooting log to record in detail abnormal events during system operation, making it easier for technical personnel to quickly locate the root cause of the fault, significantly shortening the problem-solving time and reducing the losses caused by production interruptions. The operation audit log records key operations such as data parsing, card writing, and authentication to ensure that the production process complies with standards and specifications, providing a solid basis for quality control and responsibility tracing, and avoiding human operational errors or violations. The behavior tracking log fully records user operation behavior and system operation trajectory, which can not only assist in optimizing the production process, but also conduct retrospective analysis when security incidents occur, prevent risks such as data leakage and malicious tampering, and enhance system security and trustworthiness. The three types of logs complement each other to achieve refined management of the entire production process, improve the company's production efficiency, product quality, and compliance capabilities.

[0038] In an optional implementation, the method further includes: issuing an abnormal alarm signal when decryption fails, authentication exceeds a limit, or script crashes.

[0039] The abnormality alarm mechanism implemented in this embodiment of the present invention significantly improves the stability and risk prevention capabilities of the SIM card production preprocessing process through real-time monitoring and rapid response. During the production process, if an abnormality such as decryption failure, authentication limit overrun, or script crash occurs, the system immediately triggers an alarm. This changes the situation where traditional manual inspections struggle to detect problems in a timely manner, shortening abnormality response time from hours or even days to minutes, significantly reducing the risk of large-scale production halts due to untimely processing. Furthermore, the alarm signal can precisely locate the problem link, enabling technical personnel to quickly intervene and address it, preventing the spread of the fault and causing a chain reaction, and reducing costs caused by rework and scrapping. Furthermore, this mechanism provides data support for system optimization. By analyzing frequent alarm types, potential risk points can be identified in advance, promoting continuous improvement of the production process, and ensuring efficient and safe operation of SIM card production.

[0040] In a second aspect, the present invention provides a SIM card production preprocessing system, the system comprising:

[0041] The data parsing module is used to obtain the encrypted order information data packet and parse it to obtain the order data, script data and personalized data;

[0042] Authentication module, used to perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data;

[0043] The data upload and storage module is used to establish the association between order data and corresponding personalized data and script data, and upload the authenticated script data and personalized data to the production database;

[0044] The log archiving module is used to generate operation logs that record the entire order processing process and system status for archiving.

[0045] In a third aspect, the present invention provides a computer device comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the computer instructions to thereby execute the SIM card production preprocessing method of the first aspect or any corresponding embodiment thereof.

[0046] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the SIM card production preprocessing method of the first aspect or any corresponding embodiment thereof.

[0047] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the SIM card production preprocessing method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0049] Figure 1 1 is a flow chart of a SIM card production preprocessing method according to an embodiment of the present invention;

[0050] Figure 2 is a structural block diagram of a SIM card production preprocessing system according to an embodiment of the present invention;

[0051] Figure 3 Schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0052] To make the purpose, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative efforts shall fall within the scope of protection of the present invention.

[0053] This embodiment provides a SIM card production preprocessing method, which can realize the automation of the entire process from receiving and parsing encrypted data to docking with the production system, greatly reducing the need for manual intervention. At the same time, it ensures the security of sensitive data through multiple security mechanisms. Through automated processes and systematic processing, it effectively solves the drawbacks of traditional manual operations in terms of efficiency, quality, safety and management. Figure 1 FIG. 1 is a flow chart of a SIM card production preprocessing method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0054] Step S1, obtaining the encrypted order information data packet and parsing it to obtain order data, script data and personalized data.

[0055] Specifically, in the SIM card production preprocessing task, after a customer places an order, the data center runs a data generation platform to generate PGP-encrypted (Pretty Good Privacy, an information security protocol based on public key encryption technology that encrypts and protects personalized data) personalized data based on a personalized script provided by the relevant industry department and a test script provided by the testing department. This information is then packaged, encrypted, and placed into the smart card production preprocessing software. The program identifies the data type based on different folder names to determine which part of the order information it belongs to. Furthermore, based on different data formats (such as XLSX, XML, JSON, and PDF), it parses and identifies keywords to extract relevant information. In this embodiment of the present invention, the parsed data includes order data, script data, and personalized data. The order data includes file name, chip model, order number, and requirement code; the script data includes pre-personalization script, post-personalization script, and test script; and the personalized data includes PIN1, KI, and OP / OPC key information.

[0056] In one embodiment, different data formats are parsed and identified to extract relevant information using keywords. For example, from P04AIRRW_TG72_V05_A10, the chip model is extracted as A10 and the requirement code is extracted as P04AIRRW_TG72_V05. For personalized data, the decryption module is used again to parse the first personalized data item to extract the PIN1, KI, OP, and OPC for subsequent authentication.

[0057] It's important to note that the Personal Identification Number 1 (PIN1) in the personalization data is the SIM card's user identity password, primarily used to verify the user's identity during SIM card operations (such as checking balances and modifying settings). However, during the authentication process, the PIN1 itself does not directly participate in encryption or identity verification; rather, it protects the SIM card from unauthorized access. The Key Identifier (KI) is a unique key stored in the SIM card. It is a shared secret between the SIM card and the network and plays a key role in the authentication process, used to calculate the authentication response. Typically, the KI is a 64-bit random number known only to the SIM card and the network's operator server. Using the KI, the SIM card performs cryptographic calculations on challenges from base stations and generates authentication responses. The Operator Key (OP) is the operator's key used for encryption and authentication communications. It is typically stored on the operator's server and is used to generate encryption keys and perform cryptographic operations. The Operator Authentication Key (OPC) is a derived key generated by the OP and primarily used for encrypted communications between the SIM card and the network. The OPC also plays a key role in calculating the authentication response. OP and OPC are generated through a series of encryption algorithms and used together with KI to generate authentication responses.

[0058] Step S2: Perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data. Specifically, the multi-level authentication process of the embodiment of the present invention includes the following steps:

[0059] S21 connects the corresponding SIM card reader based on the chip model, checks the SIM card's initial data status, and executes the card write operation when ATR data and the first personalized data are present. The present invention automatically connects to the corresponding card reader based on the chip model, avoiding manual matching errors and ensuring compatibility between the device and the SIM card communication protocol. Simultaneously, the card status is determined by detecting the ATR (Answer to Reset) data (a set of data returned by the smart card to the reader after receiving a reset signal from the reader when establishing communication with the card reader. It contains many key information about the smart card and allows the reader to identify the card's basic characteristics, thereby establishing a correct communication connection and data exchange). The card write operation is only executed for SIM cards that meet the requirements, preventing card write failures or data errors due to card anomalies. This effectively improves card write efficiency and success rate, and reduces the time and resource waste caused by ineffective operations.

[0060] S22, compares the data of the bare card, blank card, and finished card in the pre-personalization stage with the actual data of the SIM card to ensure consistency and implement primary authentication. This embodiment of the present invention comprehensively compares the bare card, blank card, and finished card data in the pre-personalization stage with the actual data of the SIM card to ensure that the basic parameters and configuration information of the card during the production process are accurate. It can promptly detect problems such as data entry errors and chip batch discrepancies, prevent unqualified products from entering subsequent production links, reduce product quality problems caused by data inconsistency, such as communication failures and identity verification failures, and improve the overall product qualification rate.

[0061] S23 simulates a base station-generated random number challenge and verifies the consistency of the card-generated SRES (Signed Response), a core parameter used for user identity authentication in mobile communication networks and essentially a cryptographic hash value, with the simulated calculation result, achieving advanced authentication. This embodiment of the present invention simulates a base station random number challenge in a real network environment and verifies the consistency of the card-generated SRES response value with the simulated calculation result, thereby deeply verifying the correctness of the SIM card encryption algorithm and key. This process effectively prevents security risks caused by card data tampering, forgery, or key leakage, meeting the strict SIM card security requirements of high-security sectors such as finance and communications, ensuring user data security and stable communication system operation.

[0062] Furthermore, the embodiment of the present invention simulates a base station to generate a random number challenge, and verifies the consistency of the SRES response value generated by the card with the simulated calculation result to achieve the process of advanced authentication, including the following steps:

[0063] S231: Verify the PIN1 entered by the user. If it is correct, the authentication process continues. If it is incorrect, the user is prompted to re-enter the PIN or the authentication process is terminated. This is used to confirm the user's identity and protect the card data from unauthorized access.

[0064] S232, simulating a network base station to generate a random number and a timestamp as an authentication challenge factor;

[0065] S233, using KI, OP / OPC, and random number, the authentication response SRES is calculated using the encryption algorithm preset in the SIM card and sent to the base station;

[0066] S234, the base station calculates the expected SRES based on the same KI, OP / OPC, and random number, and performs a consistency comparison based on the timestamp and the received authentication response SRES;

[0067] S235, if the comparison is consistent, the authentication is successful, and if the comparison is inconsistent, the authentication fails.

[0068] The advanced authentication process provided by this embodiment of the present invention utilizes a multi-dimensional security verification mechanism to establish a rigorous data security protection system. This system demonstrates significant advantages in user identity verification, data encryption verification, and anti-tampering and replay attack protection. First, PIN1 verification provides preliminary user identity verification, effectively preventing unauthorized access to sensitive card data and reducing the risk of data leakage. Second, a simulated base station generates a random number and timestamp as a challenge factor. This, combined with keys such as the KI, OP / OPC, and a pre-set encryption algorithm, dynamically performs cryptographic verification on the card, ensuring the uniqueness and unpredictability of each SIM card's encryption response and preventing malicious data tampering or forgery. Finally, timestamp comparison and SRES response value verification not only verify the correctness of the card's encryption algorithm but also defend against replay attacks, ensuring communication security. This entire process significantly enhances the security and reliability of SIM card data, meeting the stringent identity authentication and data protection requirements of high-security industries such as finance and communications, effectively reducing user losses and corporate reputation risks caused by security vulnerabilities.

[0069] Step S3: Establishing the association between the order data and the corresponding personalized data and script data, and uploading the authenticated script data and personalized data to the production database. Specifically, step S3 includes the following process:

[0070] S31 establishes an association between the order number and personalized data, and an association between the order number and requirement code and script data. This embodiment of the present invention precisely binds personalized data and script data via the order number, forming a three-dimensional association system: "order number-personalized data-script data." In the event of a production anomaly, the order number allows for rapid retrieval of the full set of associated data, significantly reducing issue tracing time while ensuring data consistency (e.g., matching script version with chip model), preventing card writing errors caused by data confusion.

[0071] S32: A database connection pool is created, and multiple threads are used to assign upload tasks for authenticated personalized data to a preset database table. The purpose of uploading personalized data in this embodiment of the present invention is to use a database connection to obtain personalized information (such as the ICCID (Integrated Circuit Card Identification Number), which uniquely identifies a SIM card) when personalizing a device. The database connection pool reuses database connections, reducing connection creation overhead. Combined with multi-threaded parallel upload of personalized data, this significantly shortens the upload time for large-scale orders compared to existing technologies, improving CPU resource utilization. A test comparing the original solution for 3 million orders took 22 minutes, while the current technology took 9 minutes. This mechanism effectively resolves database congestion caused by traditional single-threaded uploads and supports concurrent data processing during peak production periods.

[0072] S33 establishes an object storage connection via the MinIO server IP and port. Based on the path generated by the order number and requirement code, the script data is categorized and stored in the corresponding folder by order number. This embodiment generates a hierarchical storage path based on "order number / requirement code" in MinIO object storage, categorizing and storing script data by order. This reduces script retrieval time for a single order from 10 seconds in the file system to less than 1 second. Compared to traditional relational database storage, MinIO's distributed architecture supports elastic scalability (storage capacity can be expanded to petabytes on demand) and reduces storage costs. Version control ensures traceability of script iterations. Furthermore, the categorized storage mode supports data isolation at different security levels (e.g., separate storage zones for key data and script data), further enhancing data security.

[0073] Step S4: Generate an operation log that records the entire order processing process and system status for archiving.

[0074] The operation log system of the embodiment of the present invention establishes a comprehensive and accurate traceability and control mechanism for the SIM card production pre-processing process through classified recording and systematic management. Specific operation logs include:

[0075] 1. Troubleshooting logs are used to record system problem events. Specifically, they mainly record abnormal events during system operation, such as decryption failures and authentication limit violations, so that technical personnel can quickly locate the root cause of the problem, significantly shorten problem-solving time, and reduce losses caused by production interruptions.

[0076] 2. Operation audit logs are used to record important system operations. Specifically, key operations such as data analysis, card writing, and authentication are recorded to ensure that the production process complies with standards and specifications, provide a solid basis for quality control and responsibility traceability, and avoid human operational errors or violations.

[0077] 3. Behavior tracking logs are used to record user behavior and system operation trajectories. By fully recording user operations and system operation trajectories, they can not only assist in optimizing production processes, but also conduct retrospective analysis when security incidents occur, preventing risks such as data leakage and malicious tampering, and enhancing system security and trustworthiness. These three types of logs complement each other, enabling refined management of the entire production process and improving enterprise production efficiency, product quality, and compliance capabilities.

[0078] The method provided in this embodiment also includes issuing an exception alarm signal when decryption failure, authentication limit exceeded, or script crash occurs. This exception alarm mechanism significantly improves the stability and risk prevention capabilities of the SIM card production pre-processing process through real-time monitoring and rapid response. During the production process, if an abnormal condition such as decryption failure, authentication limit exceeded, or script crash occurs, the system immediately triggers an alarm, promptly identifying the problem. This reduces the response time from hours or even days to minutes, significantly reducing the risk of large-scale production halts caused by untimely handling. Furthermore, the alarm signal accurately locates the problem link, enabling technical personnel to quickly intervene and address it, preventing the spread of the fault and triggering a chain reaction, reducing costs caused by rework and scrapping. Furthermore, this mechanism provides data support for system optimization. By analyzing frequent alarm types, potential risk points can be identified in advance, promoting continuous improvement of the production process and ensuring efficient and safe operation of SIM card production.

[0079] In one embodiment, for decryption failures, the log will record the key type (such as private key ID, public key ID), encrypted data file identifier, error code (such as signature failure), and failure timestamp, and issue an abnormal alarm signal to notify operation and maintenance personnel. They can locate key errors or data transmission corruption by checking private key permissions and data integrity. Authentication overlimit events will record the overlimit threshold (such as 5 consecutive authentication failures), the random number of the last authentication attempt, the SRES response value, and the associated card ID. Exception alarm signals will be issued to notify operation and maintenance personnel. By analyzing the authentication log sequence, they can determine whether it is a malicious attack or a card encryption algorithm anomaly. In the event of a script crash, the log will capture the script execution steps, input parameters, error stack information (such as function name, line number), and system resource usage (CPU / memory peak) before the crash. Exception alarm signals will be issued to notify operation and maintenance personnel to facilitate the location of script logic errors or insufficient resources.

[0080] The SIM card production preprocessing method provided in an embodiment of the present invention automates the entire process by parsing encrypted data packets to obtain order information, scripts, and personalized data, and then performing data authentication, data upload, data binding, production system integration, and full-process logging. This reduces processing speed from hours to minutes, reduces data error rates through automated verification, and rapidly supports new customer data formats through configuration, significantly reducing the need for manual intervention. Multiple security mechanisms are also used to ensure the security of sensitive data, improve compliance, and achieve efficient management and intelligent application of production data, comprehensively enhancing the competitiveness of enterprises in the smart card production field. This embodiment also provides a SIM card production preprocessing system for implementing the above-mentioned embodiments and preferred embodiments. Details already described will not be repeated. As used below, the term "module" may refer to a combination of software and / or hardware that implements a predetermined function. Although the systems described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

[0081] This embodiment provides a SIM card production pre-processing system, such as Figure 2 As shown, including:

[0082] The data parsing module 21 is used to obtain the encrypted order information data packet and parse it to obtain the order data, script data and personalized data;

[0083] Authentication module 22, used to perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data;

[0084] The data upload and storage module 23 is used to establish an association between the order data and the corresponding personalized data and script data, and upload the authenticated script data and personalized data to the production database;

[0085] The log archiving module 24 is used to generate an operation log recording the entire order processing process and system status for archiving.

[0086] In some optional implementations, the data parsing module 21 includes:

[0087] Identify the data type of the order information data packet based on its file name, and extract key information of the order data, script data, and personalized data based on the data format analysis;

[0088] The order data includes: file name, chip model, order number, and requirement code;

[0089] The script data includes: pre-personalization script, post-personalization script, and detection script;

[0090] The personalization data includes: PIN1, KI, and OP / OPC key information.

[0091] In some optional implementations, the authentication module 22 includes:

[0092] The initial state detection unit is used to connect to the corresponding SIM card reader according to the chip model, detect the initial data state of the SIM card, and perform the card writing operation when the ATR data and the first personalized data are present;

[0093] The primary authentication unit is used to compare the data of the bare card, blank card and finished card in the pre-personalization process with the actual data of the SIM card to achieve primary authentication;

[0094] The advanced authentication unit is used to generate a random number challenge by simulating the base station and verify the consistency of the SRES response value generated by the card with the simulation calculation result to achieve advanced authentication.

[0095] In some optional implementations, the advanced authentication unit includes:

[0096] Verify the PIN1 entered by the user. If it is correct, continue. If it is wrong, prompt to re-enter or terminate the authentication. It is used to confirm the user's identity and protect the data in the card from unauthorized access.

[0097] The simulated network base station generates a random number and a timestamp as authentication challenge factors.

[0098] Using KI, OP / OPC, and random numbers, the authentication response SRES is calculated using the encryption algorithm preset in the SIM card and sent to the base station;

[0099] The base station calculates the expected SRES based on the same KI, OP / OPC, and random number, and performs a consistency comparison based on the timestamp and the received authentication response SRES;

[0100] If the comparison is consistent, the authentication is successful; if the comparison is inconsistent, the authentication fails.

[0101] In some optional implementations, the data upload and storage module 23 includes:

[0102] An association relationship establishing unit, used to establish an association relationship between the order number and the personalized data, and an association relationship between the order number and the requirement code and the script data;

[0103] The personalized data uploading unit is used to create a database connection pool, distribute the upload task of personalized data that has passed authentication through multiple threads, and upload it to the preset database table;

[0104] The script data upload unit is used to establish an object storage connection through the MinIO server IP and port, and to store the script data in the corresponding folder according to the order number based on the path generated by the order number and the requirement code.

[0105] In an optional embodiment, the operation log in the log archiving module 24 includes:

[0106] Troubleshooting log, used to record system problem events;

[0107] Operation audit log, used to record important system operations;

[0108] Behavior tracking logs are used to record user behavior and system operation trajectories.

[0109] In an optional embodiment, the system further includes: an abnormality alarm module, configured to issue an abnormality alarm signal when decryption failure, authentication limit exceeded, or script crash occurs.

[0110] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0111] The SIM card production preprocessing system in this embodiment is presented in the form of functional units, where the units refer to ASIC (Application Specific Integrated Circuit) circuits, processors and memories that execute one or more software or fixed programs, and / or other devices that can provide the above functions.

[0112] The embodiment of the present invention also provides a computer device having the above Figure 2 The SIM card production pre-processing system shown.

[0113] See also Figure 3 , Figure 3 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 3As shown, the computer device includes: one or more processors 10, memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components utilize different buses to communicate with each other and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in the memory or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Equally, multiple computer devices can be connected, and each device provides part of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 3 A processor 10 is taken as an example.

[0114] The processor 10 may be a central processing unit, a network processor, or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit, a programmable logic device, or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic, or any combination thereof.

[0115] The memory 20 stores instructions that can be executed by at least one processor 10, so as to enable at least one processor 10 to execute the method shown in the above embodiment.

[0116] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; the data storage area may store data created based on the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely located relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0117] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid-state drive; the memory 20 may also include a combination of the above types of memory.

[0118] The computer device further includes a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0119] The embodiment of the present invention also provides a computer-readable storage medium. The above-mentioned method according to the embodiment of the present invention can be implemented in hardware, firmware, or implemented as a computer code that can be recorded in a storage medium, or implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and downloaded through a network and will be stored in a local storage medium, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor or hardware, the method shown in the above embodiment is implemented.

[0120] A portion of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the form in which the computer program instruction exists in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc. Accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium that can be accessed by the computer.

[0121] Although the embodiments of the present invention have been described with reference to the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention. Such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A SIM card production preprocessing method, characterized in that: include: Obtaining the encrypted order information data packet and parsing it to obtain order data, script data and personalized data, wherein the order data includes: order number and requirement code; Perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data; Establishing an association relationship between the order data and the corresponding personalized data and script data, and uploading the authenticated script data and personalized data to a production database, wherein establishing an association relationship between the order data and the corresponding personalized data and script data includes: establishing an association relationship between the order number and the personalized data, and establishing an association relationship between the order number and the requirement code and the script data; Generate an operation log that records the entire order processing process and system status for archiving.

2. The method according to claim 1, characterized in that The encrypted order information data packet is obtained and parsed to obtain order data, script data and personalized data, including: Identify the data type of the order information data packet based on its file name, and extract key information of the order data, script data, and personalized data based on the data format analysis; The order data also includes: file name, chip model; The script data includes: pre-personalization script, post-personalization script, and detection script; The personalization data includes: PIN1, KI, and OP / OPC key information.

3. The method according to claim 2, characterized in that The multi-level authentication of the SIM card based on the parsed data includes: Connect the corresponding SIM card reader according to the chip model, detect the initial data status of the SIM card, and perform the card writing operation when the ATR data and the first personalized data are present; Primary authentication is achieved by comparing the data of the bare card, blank card and finished card in pre-personalization with the actual data of the SIM card; Advanced authentication is achieved by simulating a base station to generate a random number challenge and verifying the consistency of the SRES response value generated by the card with the simulated calculation result.

4. The method according to claim 3, characterized in that The method of simulating a base station to generate a random number challenge and verifying the consistency between the SRES response value generated by the card and the simulated calculation result to achieve advanced authentication includes: Verify the PIN1 entered by the user. If it is correct, continue. If it is wrong, prompt to re-enter or terminate the authentication. It is used to confirm the user's identity and protect the data in the card from unauthorized access. Simulate the network base station to generate random numbers and timestamps as authentication challenge factors; Using KI, OP / OPC, and random numbers, the authentication response SRES is calculated using the encryption algorithm preset in the SIM card and sent to the base station; The base station calculates the expected SRES based on the same KI, OP / OPC, and random number, and performs a consistency comparison based on the timestamp and the received authentication response SRES; If the comparison is consistent, the authentication is successful; if the comparison is inconsistent, the authentication fails.

5. The method according to claim 1, wherein The step of uploading the authenticated script data and personalized data to the production database includes: Create a database connection pool, distribute the upload task of personalized data that has passed authentication through multiple threads, and upload it to the preset database table; Establish an object storage connection through the MinIO server IP and port, and based on the path generated by the order number and requirement code, classify the script data by order number and store it in the corresponding folder.

6. The method according to claim 1, characterized in that The operation log includes: Troubleshooting log, used to record system problem events; Operation audit log, used to record important system operations; Behavior tracking logs are used to record user behavior and system operation trajectories.

7. The method according to claim 1 or 6, characterized in that Also includes: When decryption fails, authentication exceeds the limit, or the script crashes, an abnormal alarm signal is issued.

8. A SIM card production pre-processing system, characterized in that: include: A data parsing module is used to obtain the encrypted order information data packet and parse it to obtain order data, script data and personalized data. The order data includes: order number and requirement code; Authentication module, used to perform multi-level authentication on the SIM card based on the parsed data to verify the legitimacy and integrity of the data; A data upload and storage module, configured to establish an association between the order data and the corresponding personalized data and script data, and to upload the authenticated script data and personalized data to a production database, wherein establishing an association between the order data and the corresponding personalized data and script data includes establishing an association between the order number and the personalized data, and establishing an association between the order number and the requirement code and the script data; The log archiving module is used to generate operation logs that record the entire order processing process and system status for archiving.

9. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the SIM card production preprocessing method according to any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the SIM card production preprocessing method according to any one of claims 1 to 7.

Images