Authentication method and device of cloud card equipment and communication terminal

Abstract

The invention discloses an authentication method and device of a cloud card device and a communication terminal, in response to a downloading instruction issued by a cloud server, communication connection with the cloud server and an SM-DP + platform is kept, and the downloading instruction comprises an access address and an AC activation code of a Profile related to an eSIM plugging card; the Profile is downloaded from the SM-DP + platform according to the access address and the AC activation code; the Profile file is written into a corresponding eSIM plug-in card, the Profile file is activated, and the card information of the eSIM plug-in card is uploaded to the cloud server; and in response to an authentication request which is issued by the cloud server and is used for authenticating the cloud card, calculating an authentication response value according to the authentication request, uploading the authentication response value to the cloud server, and completing cloud card equipment authentication through the cloud server. According to the invention, remote authentication of the cloud card device can be completed by means of the eSIM card, the problem of eSIM resource waste is solved, and the method is adaptive to the low-cost IoT device market.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to an authentication method, device, communication terminal and medium for a cloud card device. Background Art

[0002] Cloud SIM cards are a digitized version of traditional physical SIM cards, built on virtualization technology and using software and cloud services. They are widely used in portable Wi-Fi mobile communication devices and in international roaming services offered by some mobile phone manufacturers. These cloud SIM card terminals use a built-in seed card for identity authentication and dynamically allocate local operator profiles via the cloud. This allows users to switch networks and achieve international roaming without having to manually change SIM cards, and at rates significantly lower than traditional roaming. However, the implementation of cloud SIM cards is subject to numerous limitations.

[0003] Based on the above problems, the applicant proposed the technical solution of this application. Summary of the Invention

[0004] In order to achieve the above object, the present invention discloses an authentication method for a cloud card device, comprising the following steps:

[0005] Maintain communication with the cloud server and the SM-DP+ platform in response to a download instruction from the cloud server, where the download instruction includes the access address of the profile file related to the eSIM card and the AC activation code;

[0006] Download the Profile file from the SM-DP+ platform according to the access address and AC activation code;

[0007] Writing the Profile file into the corresponding eSIM plug-in card, activating the Profile file, and uploading the card information of the eSIM plug-in card to the cloud server;

[0008] In response to the authentication request issued by the cloud server to authenticate the cloud card, the eSIM plug-in card calculates an authentication response value according to the authentication request, uploads the authentication response value to the cloud server, and completes the cloud card device authentication through the cloud server.

[0009] In some embodiments, the method further comprises:

[0010] Check whether the storage space of the eSIM plug-in card is sufficient. If the storage space of the eSIM plug-in card is sufficient, download the profile file from the SM-DP+ platform. If the storage space of the eSIM plug-in card is insufficient, generate an error message and send it to the cloud server, and stop downloading the profile file from the SM-DP+ platform.

[0011] In some embodiments, the profile is downloaded from the SM-DP+ platform via a local profile assistant (LPA).

[0012] In some embodiments, writing the Profile file into the corresponding eSIM plug-in card specifically involves writing the International Mobile Subscriber Identity IMSI, Integrated Circuit Card Identity ICCID, Authentication Key KI and Operation Key OPC in the Profile file into the eSIM plug-in card.

[0013] In some embodiments, uploading the card information of the eSIM plug-in card to the cloud server specifically involves uploading the International Mobile Subscriber Identity (IMSI) and the Integrated Circuit Card Identity (ICCID) in the eSIM plug-in card to the cloud server.

[0014] In some embodiments, the method for using an eSIM card to perform cloud card device authentication further includes:

[0015] In response to the file processing instruction issued by the cloud server, the local profile assistant LPA executes the instruction on the profile file corresponding to the file processing instruction. The local profile assistant LPA synchronously uploads the execution process information of the instruction to the SM-DP+ platform and uploads the execution result information of the instruction to the cloud server. The file processing instruction includes activation instruction, deactivation instruction, and deletion instruction.

[0016] The present invention also discloses a device for cloud card device authentication using an eSIM card, comprising the following modules:

[0017] A network module, configured to maintain a communication connection with the cloud server and the SM-DP+ platform in response to a download instruction issued by the cloud server, wherein the download instruction includes an access address of a profile file related to the eSIM card and an AC activation code;

[0018] An LPA module is configured to download the profile file from the SM-DP+ platform according to the access address and the AC activation code;

[0019] A main control module, configured to write the profile file into the corresponding eSIM plug-in card, activate the profile file, and upload the card information of the eSIM plug-in card to the cloud server;

[0020] The authentication module is used to respond to the authentication request issued by the cloud server to authenticate the cloud card. The eSIM plug-in card calculates the authentication response value based on the authentication request, uploads the authentication response value to the cloud server, and completes the cloud card device authentication through the cloud server.

[0021] In some embodiments, the main control module is further used to check whether the storage space of the eSIM plug-in card is sufficient. If the storage space of the eSIM plug-in card is sufficient, the profile file is downloaded from the SM-DP+ platform. If the storage space of the eSIM plug-in card is insufficient, an error message is generated and sent to the cloud server, and the download of the profile file from the SM-DP+ platform is stopped.

[0022] The present invention also discloses a communication terminal, including at least one processor and a memory, wherein the memory stores a computer program, and the at least one processor executes the computer program stored in the memory, so that the at least one processor executes the above-mentioned method of using an eSIM card for cloud card device authentication.

[0023] The present invention also discloses a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, it is used to implement the above-mentioned method of using an eSIM card to authenticate a cloud card device.

[0024] Compared with the prior art, the present invention has the following beneficial effects:

[0025] 1. The present invention downloads the profile file to the card management device through the SM-DP+ platform and writes the eSIM into the eSIM plug-in card, so that cloud card devices that do not support eSIM can use the eSIM plug-in card to complete the authentication response value calculation, and then send the authentication response value to the cloud card device through the cloud server, thereby realizing remote authentication of the cloud card device.

[0026] 2. The present invention writes a profile file to the eSIM plug-in card through LPA, and only writes the international mobile subscriber identity code IMSI, integrated circuit card identification code ICCID, authentication key KI and operation key OPC in the file to the eSIM plug-in card, which greatly saves the card storage space of the eSIM plug-in card and effectively increases the number of profile files stored on a single card.

[0027] 3. The present invention integrates LPA in the card management device to manage eSIM plug-in and plug-out cards in batches, and collaboratively allocates cloud card resources through the cloud server.

[0028] 4. The present invention effectively solves the problem of eSIM resource waste by converting eSIM into a cloud card, and adapts to the low-cost IoT device market.

[0029] The concept, specific structure and technical effects of the present invention will be further described below in conjunction with the accompanying drawings to fully understand the purpose, characteristics and effects of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 It is a flow chart of the authentication method of the cloud card device in the present invention.

[0031] Figure 2 It is the network connection relationship between the cloud server, cloud card device, SM-DP+ platform and card management device in the present invention.

[0032] Figure 3 It is a structural diagram of the authentication device of the cloud card device in the present invention. DETAILED DESCRIPTION

[0033] In order to make the technical means, creative features, objectives and effects of the invention easier to understand, the invention is further described below with reference to specific diagrams. However, the invention is not limited to the following implementation cases.

[0034] It should be noted that the structures, proportions, sizes, etc. illustrated in the drawings in this specification are only used to match the contents disclosed in the specification so that people familiar with this technology can understand and read them. They are not used to limit the conditions under which the present invention can be implemented. Therefore, they have no substantive technical significance. Any modification of the structure, change in the proportion relationship or adjustment of the size should still fall within the scope of the technical content disclosed in the present invention without affecting the efficacy and purpose that can be achieved by the present invention.

[0035] A cloud card device is a new type of communication device based on virtual SIM (VSIM) or cloud-based SIM card technology. Its core feature is to dynamically allocate network resources through software or the cloud, replacing traditional physical SIM cards and enabling flexible network connection and management. However, the cloud card in the cloud card device does not contain security-related data or sensitive information, making it incapable of local authentication and other operations. It requires the use of another local SIM card or seed card to establish a data channel to retrieve data from the server. For example, patent document CN114245366A discloses a unified cloud card issuance method, a hybrid cloud card service system, and system equipment. These support cloud card allocation for different device terminals, determine a card allocation strategy based on terminal type and cloud card type, and enable unified access and issuance for multiple terminals of different terminal types. This allows for unified management and scheduling of different terminal types and card resources. This technical solution can address the issue of diverse cloud card usage across different terminal devices, but it only distinguishes corresponding card allocation strategies based on terminal type, requiring the cloud card device to simultaneously support multiple authentication modes and communication methods. This technical solution cannot be used for authentication if the cloud card device itself does not support eSIM cards.

[0036] An eSIM card is a virtual SIM card embedded directly into a device, eliminating the need for a physical card. It replaces the traditional plug-in and unplug-in method of a physical SIM card and can be remotely activated without replacing the physical card. It can also store multiple carrier profiles for flexible carrier switching, saving internal device space. Due to the advantages of using eSIM cards, telecom companies involved in eSIM services typically purchase large quantities of eSIM resources each month. This often leads to a large amount of unused remaining card resources when orders expire, among other reasons. Since these eSIM cards can only be used on devices that support eSIM functionality, there are limitations on resource utilization.

[0037] Currently, cloud card devices can only use cloud cards and do not support eSIM cards. Research has found that the reason why cloud card devices do not support eSIM is due to many factors such as technical architecture, business model, policy restrictions and device design, which makes cloud card devices incompatible with eSIM technology. Taking technical architecture as an example, cloud cards rely on seed cards or virtualization technology to dynamically allocate operator configurations and switch networks through cloud services. Cloud cards use hardware encryption based on physical SIM cards as seed cards to achieve identity authentication. For example, GlocalMe portable WiFi requires the insertion of a physical SIM card as the basis for identity authentication, and then allocates local traffic packages through the cloud. eSIM is completely virtualized. The eSIM is directly embedded in the device motherboard and the operator profile is downloaded through software. No physical card support is required. This method lacks the security anchor of the physical card, making it incompatible with the cloud card in the authentication process.

[0038] Cloud card devices that don't support eSIM functionality generally can't use eSIM resources, which is also reflected in hardware and software limitations. Hardware limitations primarily manifest in three areas: chip incompatibility, lack of necessary circuitry, and design and cost. Chip incompatibility means that eSIM functionality requires the device's chip to support relevant communication protocols and interface standards. Some cloud card device chips may not have been designed with eSIM support in mind, making it impossible to properly communicate and interact with the eSIM, thus preventing eSIM functionality. Lack of necessary circuitry means that eSIM operation requires specific circuitry for data transmission, encryption, and decryption. If the cloud card device hardware design doesn't include or integrate these necessary circuits, it won't support eSIM functionality. For example, some early cloud card devices may have omitted eSIM-related circuitry modules to control cost and size. Software limitations manifest in operating system support and application incompatibility. Operating system support means the device's operating system must have the appropriate drivers and software interfaces to support eSIM functionality. If the cloud card device's operating system hasn't been developed and optimized, or is outdated, it won't be able to recognize and manage the eSIM. For example, some customized operating systems may not integrate eSIM functionality into their functional architecture. Application incompatibility manifests itself in that, even if a device's hardware and operating system meet certain requirements, if the relevant application isn't developed and adapted for eSIM, the eSIM functionality won't function properly. For example, some communication applications on cloud card devices may not support eSIM configuration and usage, rendering the eSIM inoperable on those devices. Application incompatibility, for example, primarily manifests itself in differences in market positioning and cost control considerations. Differences in market positioning manifest themselves in that some cloud card devices are designed for specific market needs or application scenarios, where eSIM functionality isn't essential. For example, some specialized cloud card devices for specific industries primarily focus on meeting specific communication and data transmission requirements, with a lower demand for eSIM functionality. Therefore, eSIM support wasn't considered during design. Cost control considerations manifest themselves in that supporting eSIM functionality requires additional hardware and software costs, including chip upgrades, circuit design improvements, software development, and testing. To reduce costs and improve product competitiveness, some cloud card device manufacturers may choose not to support eSIM functionality, instead focusing resources on optimizing other core functions.

[0039] Based on the above technical problems, the first embodiment of the present invention provides an authentication method for a cloud card device. Figure 1 As shown, the method includes the following steps:

[0040] Step S1: In response to a download instruction issued by the cloud server, maintain a communication connection with the cloud server and the SM-DP+ platform, where the download instruction includes the access address of the Profile file related to the eSIM plug-in card and the AC activation code.

[0041] Specifically, the cloud server is the server that communicates with the cloud card device, which performs remote authentication and accesses cloud card resources through the cloud server. The SM-DP+ platform is the network service platform responsible for generating, storing, and providing profile files. The card management device can accommodate multiple eSIM cards. An eSIM card is a physical SIM card that can write or delete eSIM profile files. Multiple profile files can be stored on one eSIM card.

[0042] like Figure 2 Figure 1 shows the network connections between the cloud server, cloud card device, SM-DP+ platform, and card management device. The card management device communicates with the cloud server and SM-DP+ platform, respectively, while the cloud card device communicates with the cloud server via a seed card. The SM-DP+ platform stores a large number of eSIM-related profile resources, providing the card management device with eSIM-related profile files. The card management device, which contains a large number of plug-in eSIM cards, writes eSIM profile resources downloaded from the SM-DP+ platform to designated plug-in eSIM cards. It monitors eSIM card status changes in real time and reports them to the cloud server, assisting the cloud card device with remote authentication. The cloud server manages cloud card resources, allocates appropriate card resources to the cloud card device, and assists with remote authentication. The cloud card device downloads the cloud card from the cloud server using seed card traffic, registers and authenticates with the network (base station), and completes remote authentication. Once authenticated, it can access the network normally, allowing the user's other network devices to connect to the cloud card device via Wi-Fi.

[0043] When the cloud server needs to send a download instruction to the card management device, the user adds a configuration item on the cloud server to complete the configuration of the profile file access address and AC activation code. After the configuration is completed, the download instruction is manually sent to the card management device.

[0044] The card management device typically performs real-time checks through an interface to detect whether it has received a download instruction from the cloud server. When a download instruction is detected, it maintains communication with the cloud server and the SM-DP+ platform. The download instruction includes the access address of the profile file related to the eSIM card insertion and removal and the AC activation code.

[0045] Step S2: Download the Profile file from the SM-DP+ platform according to the access address and AC activation code.

[0046] Specifically, the profile file is downloaded from the SM-DP+ platform via the Local Profile Assistant (LPA). The Local Profile Assistant (LPA) is a software interface used to download, activate, deactivate, and delete profile files from the SM-DP+ platform. After receiving the download instruction, the profile file access address and AC activation code are obtained from the download instruction, the LPA is launched, and the profile file is downloaded from the SM-DP+ platform via the LPA.

[0047] In one example, the method further comprises the following steps:

[0048] Step S201: Check whether the storage space of the eSIM card is sufficient. If the storage space of the eSIM card is sufficient, execute step S2 to download the profile file from the SM-DP+ platform. If the storage space of the eSIM card is insufficient, execute step S202 to generate an error message and send it to the cloud server, and stop downloading the profile file from the SM-DP+ platform.

[0049] In one example, during the file download process, if a download failure occurs, an error message will be generated and sent to the cloud server, and the download of the Profile file from the SM-DP+ platform will be stopped.

[0050] Step S3: Write the Profile file into the corresponding eSIM plug-in card, activate the Profile file, and upload the card information of the eSIM plug-in card to the cloud server.

[0051] Specifically, after the Profile file is successfully downloaded, the International Mobile Subscriber Identity (IMSI), Integrated Circuit Card Identity (ICCID), Authentication Key (KI), and Operation Key (OPC) in the Profile file are written to the eSIM card. To save card storage space, other information contained in the Profile file, such as the Public Land Mobile Network (PLMN) and Service Provider Name (SPN), is not written to the eSIM card. Since multiple eSIM cards are inserted into the card management device in this embodiment, multiple Profile files need to be written to each eSIM card. However, the storage capacity of each eSIM card is fixed and limited. Writing only necessary information to the eSIM card can greatly save card storage space, allowing more Profile files to be written to a single eSIM card, increasing the number of Profile files stored on a single card by 50%, and effectively increasing the overall storage space of the card management device.

[0052] An eSIM plug-in card has the ability to store multiple eSIM Profile files, but only one Profile file can be activated and available at the same time. For multiple Profile files in the eSIM plug-in card, there are two states, namely activation state and deactivation state. Only Profile files in the activated state can be put into use normally. For the eSIM plug-in card, only one Profile file is allowed to be activated and enabled at the same time. In this embodiment, the cloud server sends a file processing instruction to the card management device. The file processing instruction is used to specify a Profile file in a certain state, such as specifying a Profile file in an activated state or a deactivated state, or deleting a Profile file.

[0053] After the cloud server issues a file processing instruction to the card management device, the card management device responds to the file processing instruction by executing the instruction on the profile file corresponding to the file processing instruction through the local profile assistant LPA. The local profile assistant LPA synchronously uploads the execution process information of the instruction to the SM-DP+ platform and uploads the execution result information of the instruction to the cloud server. The file processing instruction includes activation instructions, deactivation instructions, and deletion instructions. For example, the cloud server issues an instruction to the card management device to activate a certain profile file. After receiving the instruction, the card management device first queries the status of the target profile file through LPA. If the status of the target profile file is in the activated state, it continues to maintain the activated state. If the status of the target profile file is in the deactivated state, it queries whether there are other activated profile files. If there are activated profile files, the activated profile files are first modified to the deactivated state, and then the target profile file corresponding to the instruction is activated. If there is no activated profile file at this time, the target profile file corresponding to the instruction is directly activated.

[0054] It should be noted that the card management device completes the activation, deactivation and deletion of files through the LPA software, and will feedback the corresponding operation status during the processing to the SM-DP+ platform. If an error message is generated during the processing, the error message will be reported to the cloud server in a timely manner.

[0055] After writing the profile file to the corresponding eSIM card, the LPA software activates the profile file. The card management device uploads a message indicating the successful file download and write, along with the International Mobile Subscriber Identity (IMSI) and Integrated Circuit Card Identity (ICCID) in the eSIM card's card information, to the cloud server. At this point, the eSIM card can be used as a cloud card. In step S4, in response to an authentication request from the cloud server to authenticate the cloud card, the eSIM card calculates an authentication response value based on the authentication request and uploads it to the cloud server, completing cloud card device authentication via the cloud server.

[0056] Specifically, after the cloud card device is powered on, it sends an authentication request to the cloud server. In response, the cloud server sends the corresponding cloud card resources to the cloud card device. The cloud server then allocates a cloud card to the cloud card device using a card-splitting algorithm. The cloud card resources sent by the server to the cloud card device include the International Mobile Subscriber Identity (IMSI) and the Integrated Circuit Card Identifier (ICCID). These resources do not include the authentication key (KI) and operation key (OPC) used for authentication.

[0057] After receiving the cloud card resources, the cloud card device writes them into the modem's virtual card application. After the write operation is complete, the cloud card device activates the cloud card and initiates a registration request with the cell base station. Upon receiving the registration request, the cell base station sends an authentication packet to the cloud card device for network authentication. This registration request indicates that the cloud card device is attempting to access the network, requiring network authentication. However, the cloud card itself lacks the authentication key KI and operation key OPC required for authentication, making it unable to complete local authentication. At this point, the cloud card device switches the data channel and, using the seed card network within the cloud card device, sends the authentication packet to the cloud server via the seed card network.

[0058] After receiving the authentication package sent by the cloud card device, the cloud server encapsulates the authentication package into an authentication request and sends the authentication request to the card management device, which eventually reaches the corresponding eSIM plug-in card, which has an activated Profile file.

[0059] The eSIM card calculates an authentication response based on the authentication request and uploads it to the cloud server. The cloud server then transmits the authentication response to the cloud card device over the network. Upon receiving the authentication response, the cloud card device sends it to the corresponding cell base station, completing network authentication for the cloud card device. Upon successful authentication, the eSIM card switches from the data card slot to the cloud card slot, enabling normal Internet access.

[0060] This embodiment downloads a profile file to the card management device via the SM-DP+ platform. When a cloud card device requires authentication, the card management device calculates an authentication response value by inserting and removing the eSIM card. The authentication response value is then sent to the cloud card device via the cloud server, enabling remote authentication of the cloud card device. For cloud card devices that do not support eSIM technology, a collaborative authentication mechanism between the card management device and the cloud server allows idle eSIM cards to be converted into cloud cards for use, effectively solving the problem of eSIM card resource waste and making it particularly suitable for the low-cost IoT device market.

[0061] The second embodiment of the present invention provides a device for cloud card device authentication using an eSIM card, such as Figure 3 As shown, the device includes a smart card resource module, a power module, a network module, an LPA module, a main control module and an authentication module.

[0062] The smart card resource module can be used to insert multiple eSIM cards, and the power module provides power for the device.

[0063] The network module is used to maintain a communication connection with the cloud server and the SM-DP+ platform in response to a download instruction issued by the cloud server, where the download instruction includes the access address and AC activation code of the Profile file related to the eSIM plug-in card.

[0064] The LPA module is used to download the Profile file from the SM-DP+ platform according to the access address and AC activation code.

[0065] The main control module is used to write the Profile file into the corresponding eSIM plug-in card, activate the Profile file, and upload the card information of the eSIM plug-in card to the cloud server.

[0066] The authentication module is used to respond to the authentication request issued by the cloud server to authenticate the cloud card. The eSIM plug-in card calculates the authentication response value based on the authentication request, uploads the authentication response value to the cloud server, and completes the cloud card device authentication through the cloud server.

[0067] In one example, the main control module is further used to check whether the storage space of the eSIM plug-in card is sufficient. If the storage space of the eSIM plug-in card is sufficient, the Profile file is downloaded from the SM-DP+ platform. If the storage space of the eSIM plug-in card is insufficient, an error message is generated and sent to the cloud server, and the download of the Profile file from the SM-DP+ platform is stopped.

[0068] Since the first embodiment and this embodiment correspond to each other, this embodiment can be implemented in conjunction with the first embodiment. The relevant technical details mentioned in the first embodiment are still valid in this embodiment, and the technical effects achieved in the first embodiment can also be achieved in this embodiment. To reduce repetition, they will not be repeated here. Accordingly, the relevant technical details mentioned in this embodiment can also be applied to the first embodiment.

[0069] The third embodiment of the present invention provides a communication terminal, comprising at least one processor and a memory, wherein the memory stores a computer program, and the at least one processor executes the computer program stored in the memory, so that the at least one processor executes the method for cloud card device authentication using an eSIM card as described in the first embodiment.

[0070] A fourth embodiment of the present invention provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, it is used to implement the method of using an eSIM card for cloud card device authentication as described in the first embodiment.

[0071] The preferred embodiments of the present invention have been described in detail above. It should be understood that numerous modifications and variations based on the concepts of the present invention are possible without inventive effort by those skilled in the art. Therefore, any technical solution that can be derived by one skilled in the art through logical analysis, reasoning, or limited experimentation based on the concepts of the present invention and the prior art should be within the scope of protection defined by the claims.

Claims

1. A cloud card device authentication method, characterized in that: The following steps are involved: Maintain communication with the cloud server and the SM-DP+ platform in response to a download instruction from the cloud server, where the download instruction includes the access address of the profile file related to the eSIM card and the AC activation code; Download the Profile file from the SM-DP+ platform according to the access address and AC activation code; Writing the Profile file into the corresponding eSIM plug-in card, activating the Profile file, and uploading the card information of the eSIM plug-in card to the cloud server; In response to an authentication request issued by the cloud server to authenticate the cloud card, an authentication response value is calculated according to the authentication request, and the authentication response value is uploaded to the cloud server, and the cloud card device authentication is completed through the cloud server.

2. The authentication method of the cloud card device according to claim 1, characterized in that: The method further comprises: Check whether the storage space of the eSIM plug-in card is sufficient. If the storage space of the eSIM plug-in card is sufficient, download the profile file from the SM-DP+ platform. If the storage space of the eSIM plug-in card is insufficient, generate an error message and send it to the cloud server, and stop downloading the profile file from the SM-DP+ platform.

3. The authentication method of the cloud card device according to claim 1, characterized in that: Download the Profile file from the SM-DP+ platform through the Local Profile Assistant LPA.

4. The authentication method of the cloud card device according to claim 1, characterized in that: Writing the Profile file into the corresponding eSIM plug-in card specifically includes writing the International Mobile Subscriber Identity IMSI, Integrated Circuit Card Identity ICCID, Authentication Key KI and Operation Key OPC in the Profile file into the eSIM plug-in card.

5. The authentication method of the cloud card device according to claim 4, characterized in that: The uploading of the card information of the eSIM plug-in card to the cloud server specifically includes uploading the international mobile subscriber identity code IMSI and the integrated circuit card identification code ICCID in the eSIM plug-in card to the cloud server.

6. The authentication method of the cloud card device according to claim 1, characterized in that: The method further comprises: In response to the file processing instruction issued by the cloud server, the local profile assistant LPA executes the instruction on the profile file corresponding to the file processing instruction. The local profile assistant LPA synchronously uploads the execution process information of the instruction to the SM-DP+ platform and uploads the execution result information of the instruction to the cloud server. The file processing instruction includes activation instruction, deactivation instruction, and deletion instruction.

7. An authentication device for a cloud card device, characterized in that: Includes the following modules: A network module, configured to maintain a communication connection with the cloud server and the SM-DP+ platform in response to a download instruction issued by the cloud server, wherein the download instruction includes an access address of a profile file related to the eSIM card and an AC activation code; An LPA module is configured to download the profile file from the SM-DP+ platform according to the access address and the AC activation code; A main control module, configured to write the profile file into the corresponding eSIM plug-in card, activate the profile file, and upload the card information of the eSIM plug-in card to the cloud server; The authentication module is used to respond to the authentication request issued by the cloud server to authenticate the cloud card, calculate the authentication response value according to the authentication request, upload the authentication response value to the cloud server, and complete the cloud card device authentication through the cloud server.

8. The authentication device of the cloud card device according to claim 7, characterized in that: The main control module is further configured to check whether the storage space of the eSIM plug-in card is sufficient. If the storage space of the eSIM plug-in card is sufficient, the profile file is downloaded from the SM-DP+ platform. If the storage space of the eSIM plug-in card is insufficient, an error message is generated and sent to the cloud server, and the download of the profile file from the SM-DP+ platform is stopped.

9. A communication terminal, characterized in that: It includes at least one processor and a memory, the memory stores a computer program, and the at least one processor executes the computer program stored in the memory, so that the at least one processor executes the authentication method of the cloud card device as described in any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, which, when executed by a processor, is used to implement the authentication method for the cloud card device according to any one of claims 1 to 6.

Images