A communication processing method for remote handling of convenient services of a smart card in a mobile network environment

Abstract

The application discloses a kind of mobile network environment under intelligent card convenient business remote handling communication processing method, it is related to mobile network intelligent card service communication processing field, in response to the request of intelligent card convenient business remote handling initiated by user, by access network side edge computing node, current mobile network real-time transmission quality parameter is collected, the exclusive communication link connecting user terminal built-in security unit, card end service platform, service verification platform is constructed, and link is connected using three-end two-way identity authentication mechanism;The service handling instruction set to be transmitted is completed fragmentation encapsulation according to signaling priority, and the length of fragmentation and retransmission window threshold are adaptively adjusted based on real-time transmission quality parameter, and link transmission state is continuously monitored in service handling process.The application effectively improves the communication security level of intelligent card remote handling, adapts the characteristics of mobile network air interface quality fluctuation, cross base station switching is easy to interrupt, greatly improves the service handling success rate in weak coverage area, user mobile scene.

Description

Technical Field

[0001] This invention relates to the field of communication processing technology for mobile network smart card services, and in particular to a communication processing method for remote processing of convenient smart card services in a mobile network environment. Background Technology

[0002] The digital transformation of government services is progressing steadily. High-frequency services that rely on smart cards, such as social security card activation, transportation card top-up, and water, electricity, and gas card information updates, are gradually shifting from offline window processing to remote processing via mobile networks. The ubiquitous nature of mobile network access allows users to initiate service requests anytime, anywhere, significantly lowering the barriers to accessing services and improving the coverage of government services.

[0003] Currently, most mainstream smart card remote processing communication solutions in the industry adopt an end-to-end transparent transmission architecture in the core network. The user terminal establishes a communication link directly with the smart card service platform through the public data network. The government business verification platform only asynchronously returns the verification result during the business review stage and does not participate in the establishment and transmission scheduling of the communication link. This solution has simple communication logic, does not require modification of the existing mobile network core architecture, has low deployment costs, and can quickly launch standardized remote processing services, adapting to the business processing needs in fixed locations with good network environments. However, this solution only uses a two-way identity authentication mechanism between the user terminal and the card service platform. The government verification platform cannot perceive the identity and legitimacy of the link access party, which poses a risk that sensitive signaling may be intercepted and tampered with by man-in-the-middle attacks. At the same time, the signaling fragment length and retransmission window are statically configured, which cannot adapt to the dynamic fluctuations in air interface quality of mobile networks and the easy interruption of cross-base station handover. When the user is in a mobile state or in a weak coverage area, signaling transmission timeouts and link interruptions are likely to occur. After the service is interrupted, the user needs to re-initiate the full processing process and resubmit identity verification materials, resulting in a poor user experience and even the possibility of functional abnormalities caused by half-written data in the smart card.

[0004] In some other regions, SMS / USSD dedicated channels are used to transmit card writing signaling. This relies on the high reliability of the operator's mobile signaling channel to ensure the success rate of instruction transmission, without relying on public data network access. However, this solution has extremely low transmission bandwidth, only supporting small-payload instruction transmission. It cannot support complex public services such as face verification and electronic material uploading. Furthermore, the signaling transmission latency is unstable, which can easily lead to out-of-order instructions and asynchronous business statuses across the three terminals. At the same time, the cost of using dedicated channels is high, making it difficult to support the widespread promotion of large-scale public services.

[0005] As the types of convenient services carried by smart cards continue to expand and users' demand for mobile processing across different scenarios continues to increase, existing communication solutions cannot simultaneously meet the requirements of transmission security, weak network adaptability, and business processing continuity, becoming the core bottleneck restricting the large-scale promotion of remote processing mode of convenient smart card services. Summary of the Invention

[0006] This invention proposes a communication processing method for remote processing of smart card convenience services in a mobile network environment, in order to solve the problems mentioned in the prior art, such as poor mobile network adaptability, insufficient communication security, and the need to re-process services due to service interruption.

[0007] To achieve the above objectives, the present invention adopts the following technical solution: a communication processing method for remote handling of convenient smart card services in a mobile network environment, comprising the following steps: In response to a user terminal's request for remote processing of smart card services, an edge computing node deployed on the access network base station side collects real-time transmission quality parameters of the current mobile network air interface link. This constructs a dedicated communication link for service processing, covering the user terminal's built-in hardware security unit, the card service platform, and the government service verification platform. During the link establishment phase, a three-terminal two-way identity authentication signaling interaction mechanism is adopted to prevent unauthorized nodes from accessing the communication link.

[0008] For the full set of service processing instructions to be transmitted, fragmentation and encapsulation are performed according to signaling security priority. Each fragmented signaling instruction carries a globally unique link timing identifier, an integrity verification field generated by the national cryptographic algorithm, and a dynamically negotiated session key identifier. The fragmented payload length and retransmission window threshold are adaptively adjusted based on real-time transmission quality parameters. The fragmented payload length is determined by the following formula: In the formula, The payload length of a single signaling fragment. This is the maximum transmission unit value at the air interface link layer. This represents the real-time packet loss rate of the current link. To match the weighting coefficients of signaling priority, This represents the maximum allowable delay threshold for single-fragment transmission. For the current link signaling round-trip delay, The above calculation logic is adapted to the mobile network air interface quality fluctuation scenario, which is the current link latency jitter value. It balances the signaling transmission overhead and the single transmission success rate, and avoids the problem of increased transmission failure probability caused by excessively large fragments and excessive signaling overhead caused by excessively small fragments.

[0009] During the business processing, the bidirectional link transmission status is continuously monitored. When a link interruption is detected, the maximum timing identifier corresponding to the fragment that has been jointly confirmed and received by the three ends is cached as the breakpoint information. After the link is restored, the incomplete signaling fragments are resumed from the breakpoint position based on the breakpoint information, without the need to reset the entire business processing process.

[0010] After the full signaling fragment transmission is completed, the three terminals synchronously complete the consistency verification of the service processing status. After the verification is successful, a communication receipt confirming the successful service processing is sent to the user terminal, and the dedicated communication link resources allocated for this service are released simultaneously.

[0011] Furthermore, the signaling interaction mechanism for three-terminal two-way identity authentication is as follows: the user terminal's built-in hardware security unit generates a first random number, which is encrypted using the card-side public key stored in the terminal and sent to the card-side service platform. The card-side service platform decrypts the first random number and generates a second random number, which, along with its own hardware-signed authentication certificate, is sent to the government business verification platform. The government business verification platform verifies the legality of both parties' certificates and generates session negotiation parameters, which are then encrypted using the public keys of each of the three terminals and sent back to the user terminal and the card-side service platform, respectively. During the authentication process, the temporary random number is not transmitted across nodes. The total signaling interaction latency of the entire authentication process matches the minimum latency requirement of air interface scheduling, without adding extra link establishment waiting time. This effectively prevents man-in-the-middle spoofing attacks, compensates for the vulnerability of the verification platform in the traditional two-terminal authentication mode that cannot perceive the legality of the link access party's identity, and avoids the illegal interception of sensitive signaling.

[0012] Furthermore, real-time transmission quality parameters include four core parameters: air interface reference signal received power, signaling transmission round-trip time, air interface packet loss rate, and link delay jitter. Edge computing nodes directly read these parameters from the air interface physical layer measurement report. The parameter update cycle is synchronized with the base station scheduling cycle, without needing to be forwarded and collected by the core network. During the parameter collection process, abnormally fluctuating parameter values ​​are processed by sliding window filtering to eliminate abnormal measurement values ​​caused by sudden interference, avoiding frequent adjustments to the transmission strategy caused by parameter misjudgment, ensuring the accuracy of transmission strategy adjustments, and solving the problem of transmission strategy mismatch caused by the deviation between the link parameters statistically obtained by the core network and the actual air interface quality of the user.

[0013] Furthermore, signaling priorities are divided according to the security level and irreversibility of the business instructions. Signaling involving the writing of sensitive information in the card and the confirmation of real-name identity verification results has the highest priority, while signaling involving business information query and processing progress push has the second priority. Signaling of different priorities is fragmented and allocated to independent transmission logical channels. The highest priority signaling occupies the pre-configured air interface guaranteed bandwidth resources and adopts an absolute priority scheduling mechanism to ensure that core signaling does not time out and fail in network congestion scenarios. Secondary priority signaling employs a weighted fair scheduling mechanism, dynamically adjusting the transmission rate according to the proportion of remaining bandwidth on the link. This fully utilizes idle link resources without affecting core signaling transmission, thereby improving overall signaling transmission efficiency. The weighting coefficient α for matching signaling priorities is set to 0.3 for the highest priority signaling and 0.7 for the secondary priority signaling, ensuring that the fragment length of high-priority signaling remains relatively stable despite fluctuations in link quality.

[0014] Furthermore, the integrity verification field is generated using SM3 hashing based on the payload content, link timing identifier, and session key identifier of the current fragmented signaling. The verification field has a fixed length, and a dynamic salt value of the current session is introduced during the hashing process. The salt value is synchronously negotiated and generated with the session key, preventing attackers from forging legitimate verification fields using known message content, thus further enhancing the anti-tampering capability of signaling transmission. After receiving the fragmented signaling, the receiving end first performs integrity verification. Fragments that fail verification directly trigger the fast retransmission mechanism, returning a negative acknowledgment frame carrying the abnormal fragment timing identifier to the sending end without waiting for the retransmission window timer to expire. The fast retransmission signaling has a higher priority than regular pending signaling, ensuring that abnormal fragments can be retransmitted as soon as possible, effectively reducing the waiting latency of erroneous fragments.

[0015] Furthermore, the link transmission status monitoring adopts a two-way lightweight heartbeat detection mechanism. The user terminal and the card service platform exchange heartbeat signaling according to the negotiated heartbeat interval. The heartbeat signaling payload only carries the latest signaling timing identifier. The heartbeat interval is dynamically adjusted according to the current link quality. When the link quality is good, the heartbeat interval is appropriately lengthened to reduce signaling overhead. When the link quality fluctuates greatly, the heartbeat interval is shortened to improve the sensitivity of interruption detection.

[0016] When no heartbeat response is received from the peer for three consecutive times, it is determined that the link is interrupted and the breakpoint caching mechanism is immediately triggered. The breakpoint information is stored in the non-volatile cache space of the edge computing node. The breakpoint information stored in the non-volatile cache space is set with an expiration period, which is consistent with the maximum allowed time for a single business transaction. Breakpoint information that has exceeded the expiration period is automatically cleared to avoid invalid cache occupying storage space. It supports the synchronization of breakpoint information in scenarios where users move between cells to avoid loss of processing progress during the movement.

[0017] Furthermore, the resume transmission process after link recovery is as follows: when the edge computing node detects that the user terminal has re-accessed the mobile network, it actively sends a link recovery notification to the user terminal and the card service platform, carrying the cached breakpoint information. The three terminals first complete the consistency comparison of the breakpoint information, and calibrate the breakpoint position based on the timing identifier corresponding to the signaling that has been successfully written to the smart card stored in the card service platform. After confirming that the status is consistent, the transmission continues from the signaling fragment corresponding to the next timing identifier of the breakpoint, so as to avoid duplicate or missed writing of signaling.

[0018] During the reconnection process, the session key negotiated by the previous link is retained, and there is no need to re-execute the complete three-terminal authentication process, which shortens the service reconnection latency after the link is restored. When a user accesses the network across edge nodes, the original access node will synchronize the cached breakpoint information to the newly accessed edge node in real time through the core network user plane function tunnel, ensuring that the reconnection process is seamless during the user's movement.

[0019] Furthermore, the consistency verification of the three-terminal business processing status is as follows: After the full signaling fragment transmission is completed, the card-end service platform sends the business status information finally written to the smart card to the government business verification platform and the user terminal after hardware signature encryption. The user terminal reads the business processing interaction status recorded in the local hardware security unit and performs a three-way comparison with the business review status stored in the government business verification platform and the card writing status fed back by the card-end service platform. During the three-way comparison, the temporal consistency of the status information is verified to ensure that the status information stored in each node corresponds to the same business processing process, preventing verification misjudgment caused by the residue of historical business status. End-to-end encryption is used during the status information transmission process. The edge nodes are only responsible for forwarding messages and do not parse the plaintext content of the status information to ensure the transmission security of business status data. If the three-way status is completely consistent, the verification is deemed to have passed, solving the problem of abnormal business processing results caused by the asynchronous status of multiple terminals.

[0020] Furthermore, when the consistency verification of the three-terminal status fails, the earliest abnormal signaling fragment with status deviation is located based on the time sequence identifier. A communication-level state rollback is performed on the business operation corresponding to the abnormal fragment. During the rollback process, an operation cancellation command is simultaneously sent to the card-end service platform to ensure that the abnormal operation already written to the card can be restored to its pre-operation state, guaranteeing the consistency of data within the smart card. The rollback process only clears the status records of the corresponding abnormal fragment and subsequent unconfirmed fragments on all three terminals, retaining the business status corresponding to the verified fragments. Signaling fragments starting from the abnormal position are retransmitted without needing to revert to the initial business processing stage, reducing signaling transmission overhead in abnormal scenarios. After the rollback is completed, a rapid link quality check is automatically triggered, adjusting the fragment length and retransmission window based on the latest link parameters to improve the success rate of retransmission and avoid repeated transmission anomalies at the same location.

[0021] Furthermore, the communication link resource release process specifically involves the following steps: After the successful transmission of the service processing receipt, the edge computing node reclaims the guaranteed bandwidth and cache space resources allocated for this service, and simultaneously releases the memory resources and session handles allocated to this service by the three terminals, avoiding invalid resource occupation and reducing system processing capacity. During the resource release phase, the dynamic session key and authentication temporary parameters generated for this session are immediately cleared, and no temporary data involving sensitive user information is retained. Simultaneously, the anonymized communication quality statistics for this service are uploaded to the network operation and maintenance platform. These statistics only include network-level indicators such as link parameters, transmission success rate, and fragment length adaptation effect, and are not associated with any user identity information or service processing content information, complying with user data privacy protection requirements. They are used for parameter iteration and optimization of the fragment scheduling algorithm. The weight coefficient α and retransmission window calculation rules are periodically adjusted based on the statistical data to continuously adapt to the characteristics of mobile networks in different regions and scenarios, improving resource utilization efficiency while ensuring user data security.

[0022] Compared with existing technologies, the beneficial effects of this invention are: This invention employs a three-terminal two-way identity authentication and national cryptographic algorithm signaling integrity verification technique to simultaneously verify the identity and legitimacy of the user terminal, card service platform, and business verification platform during the link establishment phase. It also adds dynamic salt value hash verification to the entire signaling transmission process. This effectively solves the shortcomings of existing technologies where the verification platform cannot perceive the identity of the access node and signaling is easily tampered with and intercepted under the two-terminal authentication mode. This significantly improves the security level of the business communication process and avoids the risks of sensitive business data leakage and unauthorized writing to smart cards.

[0023] This invention utilizes real-time acquisition of air interface quality parameters from edge nodes on the access network side, adaptive dynamic adjustment of signaling fragment length and retransmission window, and breakpoint caching and seamless resumption of transmission after link interruption. It adapts to the characteristics of fluctuating air interface quality and easy interruption during cross-base station handover in mobile networks. This effectively solves the shortcomings of existing technologies where static transmission strategies cannot adapt to dynamic network environments and where a full reprocessing of services is required after link interruption. It significantly improves the success rate of service processing in weak coverage areas and user mobility scenarios. Users do not need to repeatedly submit identity verification materials, the process is seamless, and user operating costs are significantly reduced.

[0024] This invention uses three-terminal service status consistency verification and dynamic link resource recycling and scheduling techniques to synchronously verify the service status of all three parties after the full signaling transmission is completed, and immediately reclaim dedicated bandwidth and cache resources after the service is completed. This effectively solves the defects of existing technologies, such as smart card data anomalies caused by multi-terminal status asynchrony and insufficient system concurrency caused by invalid resource occupation. While ensuring the consistency of service processing results, it improves the utilization rate of communication resources and reduces system operating costs.

[0025] This invention requires no modification to the existing smart card hardware structure or mobile network core architecture. It can be directly deployed at the edge nodes of existing 5G / 4G access networks, adapts to remote processing services for various smart cards, and covers various mobile network scenarios such as densely populated urban areas, rail transit, and rural areas with weak coverage. It has extremely high feasibility and promotional value, and can effectively support the demand for the digitalization of government and public services. Attached Figure Description

[0026] Figure 1 This is a flowchart illustrating the overall communication process for remote processing of convenient smart card services proposed in this invention. Figure 2 This is a flowchart of the three-terminal two-way identity authentication and link establishment process of the present invention; Figure 3 This is a flowchart illustrating the signaling fragmentation encapsulation and priority transmission scheduling process of the present invention. Figure 4 This is a flowchart of the link status monitoring and breakpoint resumption process of the present invention; Figure 5 This is a flowchart of the business status consistency verification and resource release process of this invention. Detailed Implementation

[0027] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0028] Reference Figures 1 to 5 This invention discloses a communication processing method for remote handling of convenient smart card services in a mobile network environment. It runs on a distributed communication architecture consisting of an edge computing node co-located with a mobile communication base station, a user terminal built-in hardware security unit, a smart card remote service platform, and a government service verification platform. The entire process does not change the existing smart card hardware structure or the core network core forwarding logic. The reliability of service handling is improved only through communication scheduling optimization on the edge side of the access network. It covers various remote handling scenarios of convenient services carried by smart cards, such as social security card function activation, transportation card recharge, gas card payment, and electricity card information update.

[0029] The method first responds to the user's request for remote processing of smart card public services initiated through the government service client on the terminal side. The edge computing node directly collects the real-time transmission quality parameters of the current mobile network link from the physical layer and MAC layer of the base station air interface. It constructs a dedicated communication link covering the user terminal's built-in hardware security unit, the card service platform, and the government service verification platform. This changes the traditional architecture defect of passively transmitting messages between the user terminal and the card platform and the verification platform. During the link establishment phase, a three-terminal two-way identity authentication signaling interaction mechanism is adopted to perform two-way verification of the identity of all nodes accessing the link, preventing unauthorized nodes from impersonating and accessing the link from the link access level.

[0030] After the link is established, the instruction set for the full range of services to be transmitted is segmented and encapsulated according to the signaling security priority and the degree of irreversibility of the operation. Each segmented signaling carries a globally unique link timing identifier, an integrity verification field generated by a cryptographic algorithm, and a dynamically negotiated session key identifier. Based on the real-time collected transmission quality parameters, the effective payload length of the segment and the retransmission window threshold are adaptively adjusted to replace the static scheduling logic of fixed segment length and fixed retransmission window in the traditional method, thus adapting to the dynamic fluctuation characteristics of the air interface quality of the mobile network.

[0031] Throughout the entire signaling transmission process of business processing, the bidirectional link transmission status is continuously monitored. When a link interruption is detected due to reasons such as air interface signal obstruction or cross-base station handover, the maximum timing identifier corresponding to the fragment that has been jointly confirmed and received by the three ends is immediately cached as breakpoint information. The breakpoint information is stored in the non-volatile storage medium of the edge node to avoid the loss of breakpoint due to node power failure. Once the user terminal reconnects to the mobile network and the link is restored, the incomplete signaling fragments are resumed from the corresponding breakpoint position based on the pre-cached breakpoint information. This eliminates the need to reset the entire service processing procedure, and users do not need to submit materials or complete identity verification repeatedly. After the full signaling fragment transmission is completed, the consistency verification of the service processing status is completed synchronously by all three terminals. This overcomes the logical flaw of traditional methods that only verify the status of two terminals, ensuring complete matching of status across all terminals. Upon successful verification, a communication receipt confirming successful service processing is sent to the user terminal, and the dedicated communication link resources allocated for this service are released simultaneously, avoiding unnecessary resource occupation.

[0032] In the adaptive fragment length calculation process, the effective payload length of a single signaling fragment is determined using the following formula: The dimensions of all parameters in the formula have been uniformly calibrated. The payload length of a single signaling fragment, in bytes; This is the maximum transmission unit value at the air interface link layer, in bytes. The value is matched to the frame structure configuration of the current access network. In the 5G SA networking scenario, the default value is 1400 bytes. This represents the real-time air interface packet loss rate of the current link, with a value ranging from 0 to 1 and being dimensionless. The weighting coefficients for matching signaling priorities are dimensionless and take fixed configuration values ​​based on the signaling priority. This is the maximum allowable latency threshold for single-segment transmission, in milliseconds, and is set to 100 milliseconds based on the timeout requirement for remote card writing operations of the smart card. J represents the current link air interface signaling round-trip time, in milliseconds; J represents the current link delay jitter value, taken from 10 consecutive values. The standard deviation of the measured values, in milliseconds. During the formula calculation process, The term is used to reflect the impact of packet loss rate on fragment transmission success rate. The higher the packet loss rate, the smaller the calculated fragment length, and the lower the retransmission overhead of a single fragment transmission failure. This item reflects the constraint of link latency characteristics on fragment length. The higher the latency and the greater the jitter, the smaller the fragment length should be to avoid the transmission time of a single fragment exceeding the maximum allowable latency threshold.

[0033] This calculation logic can automatically balance signaling transmission overhead and single transmission success rate in scenarios with fluctuating air interface quality in mobile networks, avoiding the problems of increased transmission failure probability caused by excessively long fixed fragments and excessively high signaling overhead caused by excessively short fixed fragments.

[0034] This invention also discloses the specific implementation logic of three-terminal two-way identity authentication. The three-terminal two-way identity authentication process does not adopt a single-node centralized authentication mode. The user terminal's built-in hardware security unit first generates an 8-byte true random number as the first authentication factor. After being encrypted with its own pre-set SM2 public key, it is sent to the card-end service platform. The first random number is not transparently transmitted to third-party nodes to avoid leakage of authentication factors. After obtaining the first random number by decrypting it with its own SM2 private key, the card service platform generates an 8-byte true random number as the second authentication factor, and feeds it back to the government business verification platform along with its own remote card writing qualification certificate issued by the CA institution and hardware signature information. The government service verification platform first verifies the legality of the card-end service platform's qualification certificate and the validity of its signature through the CA root certificate. Then, it sends an authentication challenge request to the user terminal to verify the validity of the device certificate of the user terminal's built-in hardware security unit. The device certificate is bound to the user's real-name identity and the terminal's unique hardware identifier. After verifying that both ends are legal, the government service verification platform generates session key negotiation parameters. These parameters are encrypted using the SM2 public keys of the user terminal and the card-end service platform and then sent back to the corresponding nodes. The three ends generate a dedicated SM4 symmetric session key for this session based on the negotiation parameters.

[0035] The entire authentication process involves three round trips of air communication, which is only one additional interaction compared to traditional two-end authentication. It does not increase the user's perceptible link establishment waiting time, effectively preventing man-in-the-middle spoofing attacks and making up for the vulnerability of the verification platform in the traditional two-end authentication mode that cannot perceive the legitimacy of the link access party. It also prevents sensitive communication from being illegally intercepted or tampered with at the access level.

[0036] This invention also discloses the logic for acquiring and preprocessing real-time transmission quality parameters. The real-time transmission quality parameters specifically include four core parameters: air interface reference signal received power, signaling transmission round-trip time, air interface packet loss rate, and link delay jitter. All parameters are directly read from the measurement reports of the base station's MAC layer and physical layer by the edge computing nodes, without needing to be collected through the core network, thus avoiding the discrepancy between the network-wide average parameters statistically calculated by the core network and the actual air interface quality for users. The parameter update cycle is synchronized with the base station air interface scheduling cycle, and in the 5G SA scenario, the update cycle is 1 millisecond. During parameter acquisition, a sliding window filtering mechanism is used to handle abnormally fluctuating parameter values. The sliding window size is set to 5 measurement cycles. After removing the maximum and minimum values ​​within the window, the average of the remaining 3 measurements is taken as the current valid parameter value. This can effectively remove abnormal measurement values ​​caused by sudden electromagnetic interference and instantaneous signal blockage, avoid frequent adjustments to the transmission strategy caused by parameter misjudgment, ensure the accuracy of transmission strategy adjustments, and solve the transmission strategy mismatch problem caused by time delay and large error in traditional parameter acquisition methods.

[0037] This invention also discloses a signaling priority classification and scheduling logic based on business attributes. Signaling priorities are classified according to the security level and irreversibility of the business instructions. Signaling involving the writing of sensitive information to the card and confirmation of real-name identity verification results has the highest priority. The operations corresponding to these signals are irreversible; transmission failure could lead to data anomalies in the smart card. Therefore, an independent GBR (Guaranteed Bit Rate) logical channel is allocated to them, employing an absolute priority scheduling mechanism. Even if the base station air interface load reaches full capacity, fixed bandwidth resources are reserved for these signals to ensure that core signaling does not time out in network congestion scenarios. Signaling involving business information queries, processing progress pushes, and operation guidance display has a lower priority. The operations corresponding to these signals have no irreversible impact, and transmission delays will not cause business anomalies. Therefore, a non-GBR (Non-Guaranteed Bit Rate) logical channel is allocated to them, employing a weighted fair scheduling mechanism. The transmission rate is dynamically adjusted according to the proportion of remaining link bandwidth, fully utilizing idle link resources and improving overall signaling transmission efficiency without affecting core signaling transmission. The weighting coefficient α for matching signaling priorities is set to 0.3 for the highest priority signaling and 0.7 for the second highest priority signaling, ensuring that the fragment length of high priority signaling remains relatively stable when link quality fluctuates, thereby reducing the number of fragments and transmission overhead of core signaling.

[0038] This invention also discloses a signaling integrity verification and fast retransmission logic based on national cryptographic algorithms. The integrity verification field is generated using a hash operation based on the payload content of the current fragmented signaling, the link timing identifier, and the session key identifier, using the national cryptographic algorithm SM3. The verification field length is fixed at 32 bytes. A 4-byte dynamic salt value is introduced during the hash operation. This salt value is generated synchronously with the session key during the three-terminal authentication phase. The salt value for each session is globally unique, preventing attackers from forging legitimate verification fields using known message content, further enhancing the anti-tampering capability of signaling transmission. Upon receiving the fragmented signaling, the receiving end first performs integrity verification. Fragments that fail verification directly trigger the fast retransmission mechanism, returning a negative acknowledgment frame carrying the abnormal fragment timing identifier to the sending end, without waiting for the retransmission window timer to expire. After receiving a negative acknowledgment frame, the sending end inserts the abnormal fragment at the front of the queue to be sent and schedules it with priority. The signaling for fast retransmission has a higher priority than the signaling for regular transmission, ensuring that the abnormal fragment can be retransmitted as soon as possible, effectively reducing the waiting delay of erroneous fragments and solving the problems of insufficient security of traditional CRC check and long retransmission waiting time.

[0039] This invention also discloses a bidirectional heartbeat detection and breakpoint caching logic based on adaptive link quality adjustment. Link transmission status monitoring employs a bidirectional lightweight heartbeat detection mechanism. The user terminal and the card-side service platform exchange heartbeat signaling according to dynamically adjusted heartbeat intervals. The heartbeat signaling payload only carries the latest received signaling sequence identifier of the current node, and the message length is controlled within 16 bytes to minimize the air interface overhead and terminal power consumption of the heartbeat signaling. The heartbeat interval is dynamically adjusted according to the current link quality. When the received power of the air interface reference signal is greater than -100dBm, the signal quality is considered good, and the heartbeat interval is set to 10 seconds; when the received power of the air interface reference signal is between -110dBm and -100dBm, the signal quality is considered average, and the heartbeat interval is set to 5 seconds; when the received power of the air interface reference signal is less than -110dBm, the signal quality is considered poor, and the heartbeat interval is set to 2 seconds. If no heartbeat response is received from the peer three times consecutively, it is considered a link interruption, and the breakpoint caching mechanism is immediately triggered. The maximum fragment timing identifier, which has been jointly confirmed by the three ends, is used as breakpoint information and stored in the non-volatile cache space of the edge computing node. The breakpoint information is set to a 15-minute validity period, consistent with the maximum allowed duration of a single service transaction. Breakpoint information exceeding the validity period is automatically cleared to avoid invalid cache occupying storage space. Meanwhile, breakpoint information supports cross-edge node synchronization. When a user switches access base stations during movement, the source access node will synchronize the cached breakpoint information to the newly accessed edge node in real time through the core network user plane function tunnel, ensuring that the breakpoint information is not lost in the scenario of user movement across cells, and solving the problems of high overhead, insensitive interruption detection, and easy loss of breakpoints in the traditional fixed heartbeat mechanism.

[0040] This invention also discloses breakpoint calibration and seamless resume logic. When the edge computing node detects that the user terminal has reconnected to the mobile network, it actively sends a link recovery notification to the user terminal and the card service platform, carrying the locally cached breakpoint information. After receiving the link recovery notification, the three terminals first complete the breakpoint information consistency comparison, and calibrate the breakpoint position based on the timing identifier corresponding to the signaling successfully written to the smart card stored in the card service platform. That is, the breakpoint is taken as the minimum value among the confirmed timing identifiers reported by the three terminals, ensuring that all signaling before the breakpoint position has been successfully processed by the three terminals, avoiding duplicate or missed signaling writing.

[0041] After the breakpoint calibration is completed, transmission continues from the signaling fragment with the next timing identifier corresponding to the breakpoint. During the retransmission process, the session key negotiated by the previous link is continued, and there is no need to re-execute the complete three-terminal authentication process, which shortens the service reconnection latency after the link is restored. When a user accesses across edge nodes, the newly accessed edge node completes the retransmission scheduling based on the breakpoint information obtained in sync, ensuring that the retransmission process is seamless during the user's movement, and solving the problems of inaccurate breakpoint location and re-authentication required by traditional retransmission mechanisms, which lead to extended reconnection time.

[0042] This invention also discloses a three-terminal service status consistency verification logic. After the full signaling fragment transmission is completed, the traditional mode of only performing status verification at the user end and the card end is changed. The card end service platform concatenates all the signaling timing identifiers that have been successfully written to the smart card, calculates a 32-byte status hash value using the national cryptographic SM3 algorithm, and sends it to the government business verification platform and the user terminal after being encrypted by its own hardware signature. The government service verification platform concatenates the signaling sequence identifiers corresponding to all approved service operations and calculates its own status hash value. User terminals read all successfully interacted signaling sequence identifiers recorded in their local hardware security unit and calculate their own status hash value. The three terminals complete consistency verification by comparing status hash values. Compared to transmitting full status information, hash comparison significantly reduces the signaling overhead of the verification process. During verification, the session identifier corresponding to the status information is also verified to ensure that the status information stored on each node corresponds to the same service process, preventing misjudgments due to residual historical service status. End-to-end encryption is used during the transmission of status hash values. Edge nodes are only responsible for forwarding messages and do not parse the plaintext content of status information, ensuring the security of business status data transmission. Verification is only considered successful when the hash values ​​of the three parties are completely consistent, which solves the problems of asynchronous status of multiple terminals and abnormal business processing results in traditional two-end verification.

[0043] This invention also discloses a refined rollback and retransmission logic for abnormal scenarios. When the consistency verification of the three-terminal status fails, the location of the earliest abnormal signaling fragment with status deviation is first determined based on the processed timing identifiers reported by the three terminals, i.e., the fragment ID where the processed timing identifiers of the three terminals are inconsistent. Then, an atomic operation cancellation instruction is sent to the card-end service platform to perform a status rollback on the business operation corresponding to the abnormal fragment, restoring the data in the smart card to the state before the abnormal fragment operation, thus ensuring the consistency of the data in the smart card.

[0044] The rollback process only clears the status records of the abnormal fragments and subsequent unconfirmed fragments corresponding to the three ends, retains the service status corresponding to the verified fragments, and retransmits the signaling fragments starting from the abnormal position. It does not require rollback to the initial stage of service processing, which greatly reduces the signaling transmission overhead in abnormal scenarios. After the rollback is completed, a fast link quality test is automatically triggered. The fragment length and retransmission window threshold are recalculated based on the latest link parameters to improve the success rate of retransmission and avoid repeated transmission anomalies at the same position. This solves the problems of card data inconsistency and high overhead of full retransmission in traditional anomaly handling mechanisms.

[0045] This invention also discloses the logic for link resource release and algorithm iteration optimization. After the successful transmission of the service processing receipt, the edge computing node immediately reclaims the GBR guaranteed bandwidth and cache space resources allocated for this service, and simultaneously notifies the three terminals to release the memory resources and session handles allocated for this service, avoiding invalid resource occupation and reducing the system's concurrent processing capacity.

[0046] During the resource release phase, the dynamically generated session key and temporary authentication parameters generated for this session are immediately erased from memory and storage media, leaving no temporary data involving sensitive user information. Simultaneously, anonymized communication quality statistics for this service are uploaded to the network operation and maintenance platform. These anonymized statistics only include network-level indicators such as link parameters, transmission success rate, fragment length adaptation effect, and retransmission count, and are not associated with any user identity information or service processing content information, complying with user data privacy protection requirements. The operation and maintenance platform periodically iterates and adjusts the weight coefficient α, retransmission window calculation rules, and heartbeat interval configuration parameters in the fragment calculation formula based on the aggregated anonymized statistics. It generates differentiated parameter configurations for different coverage scenarios, continuously adapting to the characteristics of mobile networks in different regions and scenarios, solving the problems of traditional static parameters being unable to adapt to differentiated network characteristics and the privacy risks associated with retaining sensitive data.

[0047] Reference Figure 1 This method first responds to the user terminal's service request, collects network transmission quality parameters through edge computing nodes, and establishes an initial communication link using a three-terminal two-way authentication mechanism. Then, the service instruction set is fragmented and encapsulated according to priority, and the transmission strategy is adaptively adjusted based on real-time network conditions. During transmission, the link heartbeat is continuously monitored; if an interruption occurs, the breakpoint is buffered, and transmission seamlessly resumes after network recovery. After all signaling transmission is complete, a consistency verification of the three-party status is performed synchronously. If the verification is successful, a successful processing receipt is sent back, and link resources are released, completing the service communication loop.

[0048] Reference Figure 2This process demonstrates the security authentication details during the communication link establishment phase. The user terminal's built-in security unit first generates an encrypted random number and sends it to the card-side service platform. The card-side service platform decrypts the encrypted random number, appends its own generated random number and authentication certificate, and submits it to the business verification platform. After verifying the legitimacy of both parties' certificates, the business verification platform generates unified session negotiation parameters and encrypts and sends them back, thus simultaneously completing the mutual recognition of identities among the three parties and the negotiation of session keys. Meanwhile, edge computing nodes periodically collect parameters such as received power and link latency, collectively supporting the construction of a high-security initial communication link.

[0049] Reference Figure 3 Faced with the service commands to be transmitted, the system first prioritizes signaling according to the security level of the service, allocating independent logical channels and guaranteed bandwidth to high-priority signaling involving sensitive data. Each signaling command carries a link timing identifier, a dynamic session key identifier, and an integrity verification field generated based on a payload content hash operation during encapsulation. During transmission, the system adaptively adjusts the fragment size and retransmission window based on real-time transmission quality parameters fed back from edge nodes. The receiving end implements strict integrity verification, triggering a fast retransmission mechanism upon detecting corrupted fragments, thereby improving transmission efficiency.

[0050] Reference Figure 4 To address fluctuations in the mobile network environment, the system employs a two-way heartbeat mechanism to continuously monitor the connection status between the user terminal and the SIM card service platform. If no heartbeat response is received from the peer three times consecutively, the system determines that the link is interrupted and immediately triggers the breakpoint buffer, saving the maximum time sequence identifier of the confirmed reception to the edge computing node. When the edge computing node re-detects the terminal's network access, it actively broadcasts a link recovery notification carrying the breakpoint information. Based on this breakpoint information, the three terminals synchronize their signaling reception status and directly continue transmission from the next time sequence position corresponding to the breakpoint, avoiding the resource waste of resetting all services.

[0051] Reference Figure 5 After the full signaling fragment transmission is completed, the system enters the consistency verification phase. The card-side service platform distributes the final write status of the card to the verification platform and the user terminal. The terminal reads the recorded status of its local security unit and performs a strict three-way comparison with the verification platform's audit status and the card-side status. If the comparison is inconsistent, the system locates the abnormal fragment based on the timing identifier, performs communication rollback, and retransmits the data. If the three-way status is completely consistent, the system sends a successful processing receipt to the user. Subsequently, the edge computing node thoroughly cleans up the dynamic key and temporary authentication parameters, and releases the guaranteed bandwidth and cache space, realizing network resource reclamation.

[0052] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A method for remote processing of convenient smart card services in a mobile network environment, characterized in that, Includes the following steps: In response to a user terminal’s request for remote processing of smart card services, the system collects real-time transmission quality parameters of the current mobile network link through the access network edge computing node, and constructs an initial communication link for service processing. The initial communication link connects three types of nodes: the user terminal’s built-in security unit, the card service platform, and the service verification platform. The link is established by a three-terminal two-way identity authentication signaling interaction mechanism. For the set of service processing instructions to be transmitted, the instructions are segmented and encapsulated according to the signaling priority. Each segmented signaling carries a link timing identifier, an integrity verification field, and a dynamically negotiated session key identifier. The segment size and retransmission window threshold are adaptively adjusted based on real-time transmission quality parameters. During the business processing, the link transmission status is continuously monitored. When a link interruption is detected, the maximum timing identifier corresponding to the currently confirmed received segmented signaling is cached as breakpoint information. After the link is restored, the incomplete signaling segments are resumed from the breakpoint position based on the breakpoint information, without needing to reset the entire business processing process. After the full signaling fragment transmission is completed, the three terminals synchronously complete the consistency verification of the service processing status. After the verification is successful, a communication receipt confirming the successful service processing is sent to the user terminal, and the communication link resources allocated for this service are released simultaneously.

2. The method for remote processing of smart card convenience services in a mobile network environment according to claim 1, characterized in that, The signaling interaction mechanism for the three-terminal two-way identity authentication is as follows: the user terminal's built-in security unit generates a first random number, encrypts it, and sends it to the card service platform. The card service platform decrypts the random number and generates a second random number, which, along with its own authentication certificate, is sent back to the business verification platform. The business verification platform verifies the legality of both certificates and generates session negotiation parameters, which are then encrypted and sent back to the user terminal and the card service platform, respectively, thus simultaneously completing the three-terminal two-way authentication and session key negotiation.

3. The method for remote processing of smart card convenience services in a mobile network environment according to claim 1, characterized in that, The real-time transmission quality parameters include four core parameters: access network side reference signal reception power, signaling transmission round-trip time, packet loss rate, and link jitter value. The edge computing node completes a parameter update once every preset signaling acquisition cycle and synchronizes the parameters to the link scheduling module for dynamic adjustment of the fragmented transmission strategy.

4. The method for remote processing of convenient smart card services in a mobile network environment according to claim 1, characterized in that, The signaling priority is divided according to the security level of the business instruction. Among them, the signaling involving the writing of sensitive information in the card and the identity verification result is the highest priority, and the signaling involving the query of business information and the push of handling guidance is the second priority. The signaling of different priorities is fragmented and allocated to independent transmission logical channels, and the highest priority signaling occupies the reserved guaranteed bandwidth resources for transmission.

5. The method for remote processing of convenient smart card services in a mobile network environment according to claim 1, characterized in that, The integrity verification field is generated by cryptographic hashing based on the payload content, timing identifier, and session key identifier of the current fragmented signaling. After receiving the fragmented signaling, the receiving end first completes the integrity verification. Fragments that fail the verification directly trigger the fast retransmission mechanism without waiting for the retransmission window to time out.

6. The method for remote processing of smart card convenience services in a mobile network environment according to claim 1, characterized in that, The link transmission status monitoring adopts a two-way heartbeat detection mechanism. The user terminal and the card service platform exchange heartbeat signaling according to the negotiated heartbeat interval. When no heartbeat response is received from the other end for three consecutive times, it is determined that the link is interrupted and the breakpoint caching mechanism is immediately triggered. The maximum time sequence identifier that has been confirmed to be received is stored as breakpoint information in the local cache space of the edge computing node.

7. The method for remote processing of smart card convenience services in a mobile network environment according to claim 6, characterized in that, The process of resuming incomplete signaling segments from the breakpoint location after link recovery is as follows: When the edge computing node detects that the user terminal has re-accessed the mobile network, it actively sends a link recovery notification to the user terminal and the card service platform, carrying the cached breakpoint information. The three terminals synchronize their respective signaling reception status based on the breakpoint information and continue transmission from the signaling segment with the next time sequence identifier corresponding to the breakpoint.

8. The method for remote processing of smart card convenience services in a mobile network environment according to claim 1, characterized in that, The consistency verification of the business processing status completed synchronously by the three terminals is as follows: After the full signaling fragment transmission is completed, the card terminal service platform encrypts the business status information finally written into the smart card and sends it to the business verification platform and the user terminal. The user terminal reads the business processing status recorded in the local security unit and compares it with the business review status stored in the business verification platform and the card writing status fed back by the card terminal service platform. If the three statuses are consistent, the verification is deemed to have passed.

9. The method for remote processing of smart card convenience services in a mobile network environment according to claim 8, characterized in that, When the consistency verification fails, the signaling fragment with abnormal transmission is located according to the timing identifier, the corresponding service operation is rolled back at the communication layer, the status records of the abnormal fragments at the three ends are cleared, and the signaling fragments from the abnormal position are retransmitted until the verification passes.

10. The method for remote processing of convenient smart card services in a mobile network environment according to claim 1, characterized in that, The communication link resource release process is as follows: after the successful transmission of the service processing receipt, the edge computing node reclaims the guaranteed bandwidth and cache space resources allocated for this service, clears the dynamic session key and authentication temporary parameters of this session, and schedules the reclaimed link resources to other public service communication links that are pending processing.

Images