Networking method, device and system based on NFC (Near Field Communication)

By storing encrypted information via an NFC tag, the eSIM device automatically connects to WiFi and redirects to the operator's interface, resolving the issue of separate steps for WiFi connection and profile download on the eSIM device. This simplifies the user experience and improves security and user experience.

CN121792986APending Publication Date: 2026-04-03BEIJING TSINGTENG MICROSYSTEM CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-15
Publication Date
2026-04-03

AI Technical Summary

Technical Problem

In existing technologies, connecting to WiFi and downloading a profile for eSIM devices require separate steps, increasing users' time costs and impacting user experience.

Method used

The device stores encrypted WiFi configuration information and carrier profile download information via an NFC tag. After detecting the tag, the device automatically connects to WiFi and redirects to the carrier's subscription page. Once the user completes the subscription, the profile download and activation will be triggered.

Benefits of technology

It integrates WiFi connection and profile download, eliminating the need for users to manually enter passwords or scan QR codes, simplifying the operation process and improving user experience and security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121792986A_ABST
    Figure CN121792986A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of mobile communication, and discloses an NFC-based networking method, device and system, and the method comprises the steps: reading tag data under the condition that an NFC tag is detected in a preset range; encrypted WiFi (Wireless Fidelity) configuration information and operator Profile downloading information are stored in the NFC label; connecting WiFi according to WiFi configuration information in the label data, and skipping to an operator ordering interface; and in response to an ordering operation of the user, downloading and activating the operator Profile according to the operator Profile downloading information in the tag data. A user can complete the whole process operation of networking and Profile activation only by approaching the equipment to the NFC label, WiFi connection and Profile downloading are integrated into single NFC interaction, and the pain point that the WiFi connection and the Profile downloading need to be operated step by step is solved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of mobile communication technology, such as an NFC-based networking method, apparatus, and system. Background Technology

[0002] Currently, eSIM (Embedded Subscriber Identity Module) technology can replace traditional physical SIM cards, addressing the shortcomings of physical SIM cards in terms of space occupation, flexibility, and automated management. With the widespread adoption of IoT devices and the development of mobile communication technology, eSIM technology is gradually becoming an important solution. Using an eSIM device requires downloading and activating the operator profile to enable eSIM functionality.

[0003] In related technologies, users need to connect to a WiFi network first, and then manually scan a QR code or enter a URL (Uniform Resource Locator) to trigger the profile download.

[0004] In the process of implementing the embodiments of this disclosure, at least the following problems were found in the related art: In related technologies, WiFi connection and profile download are performed separately. This step-by-step operation increases the user's time cost and affects the user experience.

[0005] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this application, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0006] To provide a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. This summary is not intended as a general commentary, nor is it intended to identify key / important components or describe the scope of protection of these embodiments, but rather as a prelude to the detailed description that follows.

[0007] This disclosure provides an NFC-based networking method, apparatus, and system to address the pain point of requiring separate steps for WiFi connection and profile download.

[0008] In some embodiments, the NFC-based networking method includes: when an NFC tag is detected within a preset range, reading tag data; the NFC tag stores encrypted WiFi configuration information and operator profile download information; connecting to WiFi according to the WiFi configuration information in the tag data and redirecting to the operator's subscription interface; and in response to the user's subscription operation, downloading and activating the operator profile according to the operator profile download information in the tag data.

[0009] Optionally, the process involves connecting to WiFi based on the WiFi configuration information in the tag data and redirecting to the operator's subscription interface, including: decrypting the WiFi configuration information in the tag data; calling the system WiFi API and using the decrypted WiFi configuration information to connect to the WiFi network; identifying the local operator based on the URL parameters and calling the target APP to load the local operator's subscription interface.

[0010] Optionally, the operator profile is downloaded and activated based on the operator profile download information in the tag data, including: parsing the operator profile download information to obtain the operator ID, profile download URL, and LPA certificate; if the operator ID and profile download URL match, an HTTPS request is sent to the SMDP+ server; the HTTPS request carries the LPA certificate and device identifier; and the operator profile is downloaded and activated based on the profile configuration file returned by the SMDP+ server.

[0011] Optionally, the NFC-based networking method also includes: performing biometric identification on the user before downloading the operator profile for the first time; and downloading the operator profile after successful biometric authorization.

[0012] In some embodiments, an NFC-based networking device includes a processor and a memory storing program instructions, the processor being configured to execute the NFC-based networking method described above when the program instructions are executed.

[0013] In some embodiments, the NFC-based networking system includes: an NFC tag storing encrypted WiFi configuration information and operator profile download information; an eSIM device equipped with the NFC-based internet access device described above; and an operator server communicating with the eSIM device.

[0014] Optionally, the WiFi configuration information includes the encrypted SSID, WiFi password, and authentication method; the Profile download information includes the carrier ID, Profile download URL, and LPA certificate hash value; the Profile download URL includes geofencing parameters.

[0015] Optionally, the Profile download URL may contain an embedded MCC / MNC code, allowing the Profile to be activated within a specified geographic region.

[0016] Optionally, the NFC tag also stores a digital signature, which is used to sign the WiFi password and URL to ensure data integrity.

[0017] Optionally, the hardware modules of the eSIM device include an NFC controller, a WiFi module, an eUICC chip, and a security chip.

[0018] The NFC-based networking method, apparatus, and system provided in this disclosure can achieve the following technical effects: In this embodiment, the NFC tag stores encrypted WiFi configuration information. Upon reading this information, the device automatically connects to the WiFi network without requiring the user to manually enter the WiFi password. The tag also contains entry information for downloading the operator's profile, allowing the device to directly redirect to the operator's page. After the user completes their subscription, the operator's profile download and activation are triggered. Users do not need to manually scan QR codes or enter complex URLs; they can complete the entire process of network connection and profile activation simply by bringing the device close to the NFC tag. This integrates WiFi connection and profile download into a single NFC interaction, solving the pain point of requiring separate steps for WiFi connection and profile download.

[0019] The above general description and the description below are exemplary and illustrative only and are not intended to limit this application. Attached Figure Description

[0020] One or more embodiments are illustrated by way of example with reference to the accompanying drawings. These illustrations and drawings do not constitute a limitation on the embodiments. Elements having the same reference numerals in the drawings are shown as similar elements. The drawings are not to be scaled. And wherein: Figure 1 This is a schematic diagram of an NFC-based networking method provided in an embodiment of this disclosure; Figure 2 This is a schematic diagram of another NFC-based networking method provided in an embodiment of this disclosure; Figure 3 This is a schematic diagram of another NFC-based networking method provided in an embodiment of this disclosure; Figure 4 This is a schematic diagram of an NFC-based networking device provided in an embodiment of this disclosure; Figure 5 This is a schematic diagram of an NFC-based networking system provided in an embodiment of this disclosure; Figure 6 This is a schematic diagram of a software module of an eSIM device provided in an embodiment of this disclosure. Detailed Implementation

[0021] To provide a more detailed understanding of the features and technical content of the embodiments of this disclosure, the implementation of the embodiments of this disclosure will be described in detail below with reference to the accompanying drawings. The accompanying drawings are for illustrative purposes only and are not intended to limit the embodiments of this disclosure. In the following technical description, for ease of explanation, several details are used to provide a full understanding of the disclosed embodiments. However, one or more embodiments may still be implemented without these details. In other cases, well-known structures and devices may be simplified in their depiction to simplify the drawings.

[0022] The terms "first," "second," etc., used in the technical solutions described in this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this disclosure described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion.

[0023] Unless otherwise stated, the term "multiple" means two or more.

[0024] In this embodiment of the disclosure, the character " / " indicates that the objects before and after it are in an "or" relationship. For example, A / B means: A or B.

[0025] The term "and / or" describes an association between objects, indicating that three relationships can exist. For example, A and / or B means: A or B, or A and B.

[0026] The term "correspondence" can refer to an association or binding relationship. The correspondence between A and B means that there is an association or binding relationship between A and B.

[0027] Combination Figure 1 As shown, this disclosure provides a networking method based on NFC (Near Field Communication). The executing entity of this networking method can be the processor of an eSIM device, and the networking method includes: S101: When the processor detects an NFC tag within a preset range, it reads the tag data.

[0028] The NFC tag stores encrypted WiFi configuration information and carrier profile download information.

[0029] S102, the processor connects to WiFi based on the WiFi configuration information in the tag data and redirects to the operator's subscription interface.

[0030] S103, the processor responds to the user's subscription operation by downloading and activating the carrier profile based on the carrier profile download information in the tag data.

[0031] In this embodiment, the NFC tag stores encrypted WiFi configuration information. Upon reading this information, the device automatically connects to the WiFi network without requiring the user to manually enter the WiFi password. The tag also contains entry information for downloading the operator's profile, allowing the device to directly redirect to the operator's page. After the user completes their subscription, the operator's profile download and activation are triggered. Users do not need to manually scan QR codes or enter complex URLs; they can complete the entire process of network connection and profile activation simply by bringing the device close to the NFC tag. This integrates WiFi connection and profile download into a single NFC interaction, solving the pain point of requiring separate steps for WiFi connection and profile download.

[0032] Optionally, the preset range is 10 cm.

[0033] Optionally, the WiFi configuration information includes the encrypted SSID (Service Set Identifier), WiFi password, and authentication method; the Profile download information includes the carrier ID, Profile download URL, and LPA (Local Profile Assistant) certificate hash value; the Profile download URL includes geofencing parameters.

[0034] Optionally, the WiFi authentication method includes: WPA2-PSK (Wi-Fi Protected Access II - Pre-Shared Key).

[0035] In this embodiment, WPA2-PSK uses the AES (Advanced Encryption Standard) symmetric encryption algorithm, which provides very high security. WPA2-PSK uses a pre-shared key for authentication.

[0036] Optionally, the Profile download URL may include an MCC / MNC (Mobile Country Code / Mobile Network Code) code, allowing the Profile to be activated within a specified geographic area.

[0037] In this embodiment, by embedding MCC / MNC codes, geofencing restrictions can be implemented to ensure that the Profile can only be activated within a specified geographical area, preventing cross-regional theft.

[0038] Optionally, the NFC tag also stores a digital signature, which is used to sign the WiFi password and URL to ensure data integrity.

[0039] In this embodiment, RSA-2048 can be used to sign the WiFi password and URL to ensure data integrity.

[0040] Optionally, the process involves connecting to WiFi based on the WiFi configuration information in the tag data and redirecting to the operator's subscription interface, including: decrypting the WiFi configuration information in the tag data; calling the system WiFi API and using the decrypted WiFi configuration information to connect to the WiFi network; identifying the local operator based on the URL parameters and calling the target APP to load the local operator's subscription interface.

[0041] Combination Figure 2 As shown, this disclosure provides another NFC-based networking method, including: S201, when the processor detects an NFC tag within a preset range, it reads the tag data.

[0042] S202, the processor decrypts the WiFi configuration information in the tag data.

[0043] S203, the processor calls the system WiFi API and uses the decrypted WiFi configuration information to connect to the WiFi network.

[0044] S204, the processor identifies the local carrier based on the URL parameters and calls the target APP to load the local carrier's subscription interface.

[0045] S205, the processor responds to the user's subscription operation by downloading and activating the carrier profile based on the carrier profile download information in the tag data.

[0046] In this embodiment, the eSIM device can automatically read the WiFi configuration information from the NFC tag to connect to the WiFi network without requiring the user to manually enter the WiFi password or perform complex settings. After connecting to the WiFi network, it can automatically identify the local operator based on the URL parameters in the tag and redirect the user to the operator's subscription page, guiding the user to subscribe to operator services. The entire process ensures the security of data transmission and user operations through encryption and security mechanisms, while automation reduces human error and improves reliability.

[0047] In one specific embodiment, the URL parameter is: https: / / smdp.example.com / ?mcc=460&mnc=00. Here, https: / / smdp.example.com / represents the address of the operator's SMDP+ (Subscription Manager Data Preparation Plus) server. The SMDP+ server is used to manage eSIM profile download and activation. https indicates that the connection uses an encrypted transport layer security protocol to ensure data transmission security. ?mcc=460&mnc=00 represents the query parameter part of the URL, used to pass additional information. mcc=460 represents the mobile country code, where 460 represents a specific country. mnc=00 represents the mobile network code, where 00 represents a specific operator network.

[0048] Optionally, the target app may include a built-in browser or a dedicated app. A dedicated app could be "eSIM Assistant".

[0049] Optionally, the operator profile is downloaded and activated based on the operator profile download information in the tag data, including: parsing the operator profile download information to obtain the operator ID, profile download URL, and LPA certificate; if the operator ID and profile download URL match, an HTTPS request is sent to the SMDP+ server; the HTTPS request carries the LPA certificate and device identifier; and the operator profile is downloaded and activated based on the profile configuration file returned by the SMDP+ server.

[0050] Combination Figure 3 As shown, this disclosure provides another NFC-based networking method, including: S301: When the processor detects an NFC tag within a preset range, it reads the tag data.

[0051] S302: The processor connects to WiFi based on the WiFi configuration information in the tag data and redirects to the operator's subscription interface.

[0052] The S303 processor responds to the user's subscription operation by parsing the carrier profile download information and obtaining the carrier ID, profile download URL, and LPA certificate.

[0053] S304: If the carrier ID and the profile download URL both match, the processor initiates an HTTPS request to the SMDP+ server.

[0054] The S305 processor downloads and activates the carrier profile based on the profile configuration file returned by the SMDP+ server.

[0055] In this embodiment, the eSIM device can automatically parse the operator profile download information from the NFC tag and, if conditions match, complete the profile download and activation without manual user intervention. Multiple verification mechanisms and encrypted transmission ensure the security of the profile download and activation process, preventing unauthorized access and data leakage. Operators can flexibly manage profile distribution and activation through the SMDP+ server, supporting dynamic configuration and updates. By simplifying user operations and enhancing security, user acceptance and usage of operator services are improved.

[0056] Optionally, the NFC-based networking method also includes: performing biometric identification on the user before downloading the operator profile for the first time; and downloading the operator profile after successful biometric authorization.

[0057] In this embodiment, biometric technologies (such as fingerprints and facial recognition) are used to authenticate users, ensuring that only authorized users can download and activate the carrier profile. Biometric technology simplifies the user authorization process while enhancing users' trust in device security. Biometric verification prevents unauthorized users from subscribing to carrier services, reducing malicious subscriptions and fraudulent activities.

[0058] The NFC-based networking method provided in this disclosure enables eSIM devices to automatically connect to the internet and dynamically download profiles. This is suitable for scenarios requiring rapid activation of cellular network services, such as IoT terminals, wearable devices, and smartphones. By integrating WiFi configuration and operator profile download access information through an NFC tag, the device automatically completes WiFi connection, redirects to the operator's interface, and triggers profile subscription and download upon touching the tag, achieving a seamless "tap-to-play" service. Integrating WiFi connection and profile download into a single NFC interaction solves the pain points of traditional step-by-step operations. Furthermore, restricting the profile activation range based on MCC / MNC codes prevents cross-regional misuse.

[0059] In one specific embodiment, the NFC-based networking method provided in this disclosure enables smartwatches to activate eSIM internet access. The user brings the smartwatch close to an NFC tag at a mobile carrier's store; the tag contains the Wi-Fi password and a link to download the local carrier's profile. The watch automatically connects to the Wi-Fi and redirects to the carrier's page displaying a "5G Enjoy Package," which the user clicks to subscribe. The device verifies its identity with the SMDP+ server using an LPA certificate, downloads the profile, and activates the device, immediately giving the watch call and internet access capabilities.

[0060] In another specific embodiment, the NFC-based networking method provided in this disclosure enables shared devices to quickly connect to the internet. The shared bicycle has a built-in NFC tag. After scanning the code and touching the tag, the device automatically connects to WiFi and displays a carrier subscription interface. The user selects a "1-hour internet package," completes payment, and their profile is downloaded. The shared bicycle's electronic lock then responds to the unlocking command via eSIM network connection.

[0061] In another specific embodiment, the NFC-based networking method provided in this disclosure enables rapid internet access at airport and subway stations. To facilitate quick internet access for foreign tourists at airport and subway station exits, and utilizing local operator networks, NFC tags are embedded in counters or walls. After scanning a code and touching the tag, the device automatically connects to WiFi and displays an operator subscription interface. Foreign users can then subscribe to a 5G-dedicated network package. The device verifies its identity with the SMDP+ server using an LPA certificate, downloads its profile, and activates the device, instantly giving the watch call and internet access capabilities.

[0062] Combination Figure 4 As shown, this disclosure provides an NFC-based networking device 400, including a processor 401 and a memory 402. Optionally, the device may further include a communication interface 403 and a bus 404. The processor 401, communication interface 403, and memory 402 can communicate with each other via the bus 404. The communication interface 403 can be used for information transmission. The processor 401 can call logical instructions in the memory 402 to execute the NFC-based networking method of the above embodiment.

[0063] Furthermore, the logical instructions in the aforementioned memory 402 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium.

[0064] The memory 402, as a computer-readable storage medium, can be used to store software programs and computer-executable programs, such as program instructions / modules corresponding to the methods in the embodiments of this disclosure. The processor 401 executes functional applications and data processing by running the program instructions / modules stored in the memory 402, thereby implementing the NFC-based networking method in the above embodiments.

[0065] The memory 402 may include a program storage area and a data storage area. The program storage area may store the operating system and applications required for at least one function; the data storage area may store data created based on the use of the terminal device. Furthermore, the memory 402 may include high-speed random access memory and may also include non-volatile memory.

[0066] Combination Figure 5 As shown, this disclosure provides an NFC-based networking system 500, including an NFC tag 501, an eSIM device 502, and an operator server 503. The NFC tag 501 stores encrypted WiFi configuration information and operator profile download information. The eSIM device 502 is equipped with the NFC-based internet access device described above. The operator server 503 is communicatively connected to the eSIM device 502. When the eSIM device 502 is brought close to the NFC tag 501, the eSIM device 502 triggers the NFC-based networking method provided in this disclosure, communicating with the operator server 503 to achieve WiFi connection and profile download.

[0067] Optionally, the hardware modules of the eSIM device 502 include an NFC controller, a WiFi module, an eUICC (embedded universal integrated circuit card) chip, and a security chip.

[0068] In this embodiment, the eSIM device 502 integrates an NFC controller, a WiFi module, an eUICC chip, and a security chip to support the NFC-based networking method provided in this disclosure. The NFC controller is the core component for communication between the device and the NFC tag 501, responsible for reading and parsing data in the NFC tag 501. The WiFi module is responsible for communication between the device and a wireless network, enabling the device to connect to a WiFi network. The eUICC chip is the core component of the eSIM, used to store and manage the eSIM profile. The security chip is the core of the device's security, used to store sensitive information and perform secure operations.

[0069] Optionally, combined Figure 6As shown, the software modules of eSIM device 502 include: NFC event manager 601, operator SDK 602, and eSIM agent 603. NFC event manager 601 is configured to parse tag data and trigger WiFi connection. Operator SDK 602 is configured to dynamically load the localized subscription page and perform certificate verification. eSIM agent 603 is configured to coordinate profile download and installation.

[0070] This disclosure provides a computer-readable storage medium storing computer-executable instructions configured to execute the above-described NFC-based networking method.

[0071] The technical solutions of this disclosure can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes one or more instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in this disclosure. The aforementioned storage medium can be a non-transitory storage medium, including: a USB flash drive, a portable hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and other media capable of storing program code.

[0072] The foregoing description and accompanying drawings fully illustrate embodiments of this disclosure to enable those skilled in the art to practice them. Other embodiments may include structural, logical, electrical, procedural, and other changes. The embodiments represent only possible variations. Individual components and functions are optional unless explicitly required, and the order of operation may vary. Parts and features of some embodiments may be included in or replace parts and features of other embodiments. Moreover, the terminology used in this application is for describing embodiments only and is not intended to limit the technical solutions described herein. As used in the technical solutions described herein, the singular forms “a,” “an,” and “the” are intended to equally include the plural forms unless the context clearly indicates otherwise. Similarly, the term “and / or” as used herein refers to any and all possible combinations of one or more of the associated listed elements. Additionally, when used in this application, the term "comprise" and its variations "comprises" and / or "comprising" refer to the presence of stated features, integrals, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof. Without further limitations, an element defined by the phrase "comprises a..." does not exclude the presence of other identical elements in the process, method, or apparatus that includes said element. In this document, each embodiment may focus on the differences from other embodiments, and similar or identical parts between embodiments can be referred to mutually. For methods, products, etc., disclosed in the embodiments, if they correspond to the method section disclosed in the embodiments, the relevant parts can be referred to the description of the method section.

[0073] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the embodiments of this disclosure. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0074] The methods and products disclosed in the embodiments herein (including but not limited to devices and equipment) can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For instance, the division of units may be merely a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to implement this embodiment according to actual needs. In addition, the functional units in the embodiments of this disclosure may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0075] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than that shown in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. In the descriptions corresponding to the flowcharts and block diagrams in the accompanying drawings, the operations or steps corresponding to different blocks may also occur in a different order than disclosed in the description, and sometimes there is no specific order between different operations or steps. For example, two consecutive operations or steps may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. Each block in a block diagram and / or flowchart, and combinations of blocks in a block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

Claims

1. A networking method based on NFC, characterized in that, include: If an NFC tag is detected within a preset range, read the tag data; The NFC tag stores encrypted WiFi configuration information and carrier profile download information; Connect to WiFi based on the WiFi configuration information in the tag data, and be redirected to the operator's subscription page; In response to the user's subscription action, the operator profile is downloaded and activated based on the operator profile download information in the tag data.

2. The networking method according to claim 1, characterized in that, Connect to WiFi based on the WiFi configuration information in the tag data, and be redirected to the carrier's subscription page, including: Decrypt the WiFi configuration information in the tag data; Call the system WiFi API and use the decrypted WiFi configuration information to connect to the WiFi network; The local carrier is identified based on the URL parameters, and the target app is called to load the local carrier's subscription interface.

3. The networking method according to claim 1, characterized in that, Download and activate the carrier profile based on the carrier profile download information in the tag data, including: Parse the carrier profile download information to obtain the carrier ID, profile download URL, and LPA certificate; If the carrier ID and the Profile download URL both match, an HTTPS request is sent to the SMDP+ server; the HTTPS request carries the LPA certificate and device identifier. Download and activate the carrier profile based on the profile configuration file returned by the SMDP+ server.

4. The networking method according to any one of claims 1 to 3, characterized in that, Also includes: Biometric identification is performed on users before they download their carrier profile for the first time; After successful biometric authorization, download the operator's profile.

5. An NFC-based networking device, comprising a processor and a memory storing program instructions, characterized in that, The processor is configured to execute the NFC-based networking method as described in any one of claims 1 to 4 when running the program instructions.

6. An NFC-based networking system, characterized in that, include: The NFC tag stores encrypted WiFi configuration information and carrier profile download information; The eSIM device is equipped with an NFC-based internet access device as described in claim 5; The operator's server communicates with the eSIM device.

7. The networking system according to claim 6, characterized in that, WiFi configuration information includes the encrypted SSID, WiFi password, and authentication method; The profile download information includes the carrier ID, profile download URL, and LPA certificate hash value; the profile download URL includes geofencing parameters.

8. The networking system according to claim 7, characterized in that, The profile download URL contains an embedded MCC / MNC code, which allows the profile to be activated within a specified geographic region.

9. The networking system according to claim 7, characterized in that, NFC tags also store digital signatures, which are used to sign WiFi passwords and URLs to ensure data integrity.

10. The networking system according to any one of claims 6 to 9, characterized in that, The hardware modules of an eSIM device include an NFC controller, a WiFi module, an eUICC chip, and a security chip.