Configuration method and apparatus for carrier lock, and storage medium and electronic device

Abstract

Disclosed are a configuration method and apparatus for a carrier lock, and a storage medium and an electronic device. The configuration method for a carrier lock comprises: generating payload data on the basis of contract information signed by a contract phone and a carrier, sending the payload data to the contract phone, and configuring a carrier lock for a first communication module of the contract phone, wherein the payload data comprises a first identity code of the first communication module of the contract phone, a device serial number of the contract phone, and a first public land mobile network of the carrier; acquiring state information reported by a second communication module of the contract phone after an identity identification card is inserted into the contract phone and the contract phone performs network registration and dialing, wherein the state information comprises a second identity code of the second communication module of the contract phone, the device serial number of the contract phone, a second public land mobile network of the identity identification card, and an on / off state of the carrier lock; verifying the state information and the payload data; and when the first identity code and the second identity code are not successfully verified, regenerating payload data on the basis of the second identity code, sending the payload data to the contract phone, and configuring a carrier lock for the second communication module of the contract phone.

Description

Method and device for configuring an operator lock, storage medium and electronic device

[0001] REFERENCE TO RELATED APPLICATION

[0002] The present disclosure claims the full right of priority of the Chinese Invention Patent Application No. 202410994669.0, filed on July 23, 2024, with the State Intellectual Property Office of the People's Republic of China, and the title of which is "Method and device for configuring an operator lock, storage medium and electronic device", and the entire contents of which are incorporated herein by reference.

[0003] TECHNICAL FIELD

[0004] The present disclosure relates to the field of computer, and in particular, to a method and device for configuring an operator lock, a storage medium and an electronic device.

[0005] BACKGROUND

[0006] Carrier SIM Lock is a technical means to restrict mobile devices (such as smartphones or Modems) to use in a specific carrier network. This lock is usually implemented by device manufacturers in cooperation with a specific carrier to ensure that the device can only work in the network of that carrier, preventing users from using the device in the network of other carriers. The implementation process of the existing configuration scheme of the operator lock: the Modem of the mobile device already supports the Carrier SIM Lock function; the encrypted and decrypted Payload file (a file or data packet carrying valid data or payload) generated by the server; supporting MBIM (Mobile Broadband Interface Model, a standard interface model for mobile broadband device communication) to issue the Payload file to the Modem; the Modem internally parses the Payload file to generate the corresponding Carrier SIM Lock rule; the Modem has imported the public password of the server, and double-checks the legitimacy of the Payload file. The existing technical solution has certain defects, only considering the legality verification of the Payload file and the parsing and issuance of the Payload file, and the Carrier SIM Lock function can take effect after issuance, but for mobile devices within the contract period, if the Modem fails, the Carrier SIM Lock function will be invalid, and there is no protection measure, which does not meet the needs of Carrier SIM Lock customized machines.

[0007] SUMMARY

[0008] In a first aspect, the disclosure provides a configuration method of an operator lock, comprising: generating Payload data according to contract information of a contract machine signed with an operator, and sending the Payload data to the contract machine to configure an operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator; obtaining state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network registration dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, the device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock; checking the state information and the Payload data; and in the case that the first identity code and the second identity code are not verified successfully, generating Payload data according to the second identity code and sending the Payload data to the contract machine to configure an operator lock for the second communication module of the contract machine.

[0009] In a second aspect, the disclosure provides a configuration device of an operator lock, comprising: a first processing module configured to generate Payload data according to contract information of a contract machine signed with an operator, and send the Payload data to the contract machine to configure an operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator; an obtaining module configured to obtain state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network registration dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, the device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock; a checking module configured to check the state information and the Payload data; and a second processing module configured to, in the case that the first identity code and the second identity code are not verified successfully, generate Payload data according to the second identity code and send the Payload data to the contract machine to configure an operator lock for the second communication module of the contract machine.

[0010] In some embodiments, the verification module of the present disclosure comprises: an acquisition unit configured to acquire the contract period of the contract machine in the Payload data and determine the remaining contract time of the contract machine; a first comparison unit configured to compare the second identity code of the second communication module in the state information with the first identity code of the first communication module in the Payload data; a second comparison unit configured to compare the second public land mobile network of the identity recognition card in the state information with the first public land mobile network of the operator in the Payload data; and a third comparison unit configured to compare the device serial number of the contract machine in the state information with the device serial number of the contract machine in the Payload data.

[0011] In some embodiments, the device of the present disclosure further comprises: a third processing module configured to, after verifying the state information and the Payload data, lock the second communication module to make the second communication module unable to perform the network dialing operation in the case that the contract machine is determined to be invalid in the contract with the operator according to the remaining contract time.

[0012] In some embodiments, the device of the present disclosure further comprises: a fourth processing module configured to, after locking the second communication module to make the second communication module unable to perform the network dialing operation in the case that the device serial number of the contract machine in the state information and the device serial number of the contract machine in the Payload data are not verified successfully, make the contract machine obtain the network dialing qualification by re-signing a contract with the operator.

[0013] In some embodiments, the device of the present disclosure further comprises: a fifth processing module configured to, after verifying the state information and the Payload data, lock the second communication module to make the second communication module unable to perform the network dialing operation in the case that the first public land mobile network and the second public land mobile network are not verified successfully.

[0014] In some embodiments, the device of the present disclosure further comprises: a sixth processing module configured to, after verifying the state information and the Payload data, lock the second communication module to make the second communication module unable to perform the network dialing operation in the case that the device serial number of the contract machine in the state information and the device serial number of the contract machine in the Payload data are not verified successfully.

[0015] In some embodiments, the second processing module of the present disclosure comprises: a modification unit configured to modify the first identity code in the Payload data to the second identity code to obtain updated Payload data; a sending unit configured to send the updated Payload data to the contract machine; and a configuration unit configured to configure the second communication module according to the updated Payload data.

[0016] In a third aspect, the present disclosure provides a storage medium having stored therein a computer program, wherein the computer program, when executed by a processor, performs the configuration method of the operator lock.

[0017] In a fourth aspect, the present disclosure provides an electronic device comprising a memory having stored therein a computer program and a processor configured to execute the configuration method of the operator lock by means of the computer program.

[0018] In some embodiments, for the contract machine within the contract period, if the communication module needs to be replaced due to a fault, the identity code of the communication module will be changed, at which time the contract period of the contract machine will be verified according to the second identity code of the second communication module, new Payload data will be regenerated and reissued to the contract machine to restore the operator lock function and ensure the contract to take effect. Thus, the purpose of increasing the security of the operator lock is achieved, and the technical problem of contract failure caused by abnormal communication module of the contract machine is solved.

[0019] BRIEF DESCRIPTION OF DRAWINGS

[0020] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and serve to explain the principles of the present disclosure, together with the description.

[0021] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required by the embodiments will be briefly introduced as follows: obviously, for those skilled in the art, other drawings can also be obtained from these drawings without creative labor.

[0022] One or more embodiments are exemplarily illustrated by the pictures in the drawings corresponding thereto, and these exemplary illustrations do not constitute a limitation on the embodiments, and elements with the same reference numerals in the drawings represent similar elements, unless otherwise specified, and the drawings do not constitute a proportional limitation.

[0023] FIG. 1 is a flowchart of a configuration method of an operator lock according to an embodiment of the present disclosure;

[0024] FIG. 2 is a specific implementation flow chart of a configuration method of an operator lock according to an embodiment of the present disclosure;

[0025] FIG. 3 is a structural schematic diagram of a configuration device of an operator lock according to an embodiment of the present disclosure; and

[0026] FIG. 4 is a schematic diagram of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0027] In order to make the objects, technical solutions and advantages of the embodiments of the present disclosure clearer, the technical solutions in the embodiments of the present disclosure will be described clearly and completely below with reference to the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure. Based on the embodiments in the present disclosure, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present disclosure.

[0028] The following disclosure provides many different embodiments, or examples, for implementing different structures of the present disclosure. For the purpose of simplicity, the components and arrangements of the various examples are shown in the following description. These are, of course, merely examples and are not intended to limit the present disclosure. Moreover, the present disclosure can be practiced with other structures, for example, different examples can be practiced without departing from the scope of the present disclosure. Also, the present disclosure can be repeated with either the same or different elements in different examples. Such repetitions are not to be considered as boring and are within the scope of the present disclosure.

[0029] According to a first aspect of the present disclosure, a configuration method of an operator lock is provided. In some embodiments, as shown in FIG. 1, the above-mentioned method comprises:

[0030] S102, generating Payload data according to contract information of a contract between a contract machine and an operator, and sending the Payload data to the contract machine to configure an operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator;

[0031] S104, obtaining state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network access dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, the device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock;

[0032] S106, checking the state information and the Payload data; and

[0033] S108, in the case that the first identity code and the second identity code are not verified successfully, re-generate the Payload data according to the second identity code and send it to the contract machine, and configure the operator lock for the second communication module of the contract machine.

[0034] In some embodiments, Payload data, a file or data packet carrying valid data or payload, a file in a specific format, is used to transfer data or configuration information between software or systems. The communication module, i.e. the Modem module, is a device configured to convert digital signals into analog signals (modulation) for transmission over communication lines, and convert analog signals into digital signals (demodulation). In computer networks and communications, modems are configured to transmit data between computers or other digital devices. In mobile communications, modems are usually configured to convert digital data into signals suitable for transmission in mobile networks, such as through radio waves. In mobile phones, modems are usually configured to handle tasks such as phone calls, send text messages, and connect to mobile data networks, etc.

[0035] In some embodiments, the method is implemented on the Google server side, and a cloud management platform is added to manage the validity of the contract of the contract machine, manage the running state of the Modem module Payload based on the operation and maintenance state, manage the backup of the Payload data and dynamically calculate the remaining contract time, and re-generate new Payload data and issue it to the Modem module through MBIM.

[0036] In some embodiments, after the contract machine signs a contract with the operator, according to the contract information, the Payload data containing the first identity code of the first communication module at the time of signing the contract of the contract machine, the device serial number of the contract machine, and the public land mobile network of the operator is generated. The generated Payload data is sent to the contract machine to configure the operator lock of the first communication module. The contract machine inserts the identity recognition card and attempts to connect to the network, at which time the second communication module being used by the contract machine starts to work. The second communication module reports state information containing the second identity code of the second communication module, the device serial number of the contract machine, the public land mobile network of the identity recognition card, and the switch state of the operator lock. The reported state information and the previously sent Payload data are time-checked to ensure their consistency and legality. If the first identity code and the second identity code do not pass the verification, that is, the first communication module of the contract machine has been replaced by the second communication module due to abnormality within the contract period, the Payload data is re-generated, containing the second identity code of the second communication module of the contract machine, and is sent to the contract machine. After receiving the re-generated Payload data, the contract machine uses the information in it to configure the operator lock of the second communication module, to ensure that the second communication module of the contract machine can also work normally.

[0037] In some embodiments, for the contract machine within the contract period, if the communication module needs to be replaced due to failure, the identity code of the communication module will be changed, at this time, according to the second identity code of the replaced second communication module, the contract period of the contract machine is verified, the new Payload data is regenerated, and is reissued to the contract machine, the operator lock function is restored, and the contract is effective. Thus, it is realized to ensure that the user can only enjoy the corresponding service on the corresponding product within the contract period, increase the security of the operator lock, and further solve the technical problem that the operator lock fails to sign due to the abnormality of the communication module of the contract machine.

[0038] In some embodiments, the verification of the state information and the Payload data includes:

[0039] Obtaining the contract period of the contract machine in the Payload data, and determining the remaining contract time of the contract machine;

[0040] Comparing the second identity code of the second communication module in the state information with the first identity code of the first communication module in the Payload data;

[0041] Comparing the second public land mobile network of the identity recognition card in the state information with the first public land mobile network of the operator in the Payload data;

[0042] Comparing the device serial number of the contract machine in the state information with the device serial number of the contract machine in the Payload data.

[0043] In some embodiments, when checking the status information and the Payload data, the contract period of the contract machine, the second identity code of the second communication module and the first identity code of the first communication module, the second public land mobile network of the identity recognition card and the first public land mobile network of the operator, and the device serial number of the contract machine are checked respectively. Specifically, the contract period information of the contract machine, such as the signing date and the expiration date of the contract, is extracted from the Payload data, and then the remaining contract time is calculated by the current date and the expiration date. The second identity code of the second communication module is obtained from the status information, and the first identity code of the first communication module is obtained from the Payload data, and then the two identity codes are compared to ensure that they match. If they do not match, it is determined that the first identity code and the second identity code are not checked successfully. The public land mobile network of the identity recognition card is obtained from the status information, and the public land mobile network of the operator is obtained from the Payload data, and then the two networks are compared to ensure that they are consistent. If they are not consistent, it is determined that the first public land mobile network and the second public land mobile network are not checked successfully. The device serial number of the contract machine is obtained from the status information, and the device serial number of the contract machine is obtained from the Payload data. Then, the two serial numbers are compared to ensure that they match. If they do not match, it is determined that the device serial number is not checked successfully.

[0044] In some embodiments, after the status information and the Payload data are checked, the above method further comprises:

[0045] In the case where it is determined that the contract machine is invalid in the contract with the operator according to the remaining contract time, the second communication module is locked so that the second communication module cannot perform the network dialing operation.

[0046] In some embodiments, after the device serial number of the contract machine in the status information and the device serial number of the contract machine in the Payload data are not checked successfully, the above method further comprises:

[0047] The contract machine obtains the network dialing qualification by re-signing the contract with the operator.

[0048] In some embodiments, by comparing the current date and the contract expiration date in the contract, it can be determined whether the contract between the contract machine and the operator has expired. If the current date has exceeded the contract expiration date, the contract has expired. Once it is determined that the contract between the contract machine and the operator has expired, the second communication module needs to be locked to prevent it from performing the network dialing operation. This can be achieved by modifying the device configuration or software settings so that the second communication module cannot connect to the network. Once the contract machine is locked, it needs to re-sign a contract with the operator to obtain a new network dialing qualification. Once the contract machine re-signs a contract with the operator and obtains a new network dialing qualification, the second communication module needs to be unlocked to allow it to reconnect to the network and restore the operator lock function. By performing the above method, it can be ensured that when the contract expires, the contract machine cannot connect to the network and needs to re-sign a contract with the operator to obtain a new service right.

[0049] In some embodiments, after the status information and the Payload data are verified, the above method further comprises:

[0050] In the case that the first public land mobile network and the second public land mobile network are not verified successfully, the second communication module is locked to prevent it from performing the network dialing operation.

[0051] In some embodiments, if it is found in the verification process that the first public land mobile network and the second public land mobile network are not verified, it indicates that the network to which the second communication module of the contract machine attempts to connect does not match the network originally configured for the contract machine, and there may be an illegal network connection or configuration. Once it is found that the first public land mobile network and the second public land mobile network are not verified, the second communication module needs to be immediately locked to prevent it from performing the network dialing operation. This can be achieved by modifying the device configuration or software settings so that the second communication module cannot connect to the network. After the second communication module is locked, a communication module that matches the first public land mobile network of the operator needs to be replaced to restore the network dialing function of the contract machine. By the above method, it can be ensured that when the public land mobile network is not verified, the second communication module cannot connect to the network, thereby ensuring network security and legal use.

[0052] In some embodiments, after the status information and the Payload data are verified, the above method further comprises:

[0053] In the case that the device serial number of the contract machine in the status information and the device serial number of the contract machine in the Payload data are not verified successfully, the second communication module is locked to prevent it from performing the network dialing operation.

[0054] In some embodiments, when the device serial number of the contract machine in the status information does not match the device serial number in the Payload data, it indicates that there is a device information inconsistency or a possible device tampering situation. In the case where the device serial number fails the test, the second communication module should be immediately locked to ensure the safety of the contract machine and the legality of network use. Locking the second communication module can be achieved by modifying the device configuration or software settings to prevent it from performing network dialing operations. After locking the second communication module, further investigation is needed to identify the cause and take measures to resolve the problem. This includes checking the device information of the contract machine, verifying the authenticity of the device, contacting the manufacturer to confirm the device serial number, etc. Through the above methods, it can be ensured that when the device serial number fails the test, the second communication module cannot connect to the network, thereby ensuring network security and legal use of the device.

[0055] In some embodiments, the Payload data is regenerated according to the second identity code and sent to the contract machine to configure the operator lock for the second communication module of the contract machine, including:

[0056] modifying the first identity code in the Payload data to the second identity code to obtain updated Payload data;

[0057] sending the updated Payload data to the contract machine;

[0058] configuring the operator lock for the second communication module according to the updated Payload data.

[0059] In some embodiments, the second identity code of the second communication module is obtained from the status information and configured to update the Payload data. Specifically, the first identity code in the Payload data is modified to the second identity code to obtain updated Payload data. The updated Payload data is sent to the contract machine to configure the updated operator lock for the second communication module of the contract machine. After receiving the updated Payload data, the contract machine parses the information therein and configures the operator lock for the second communication module according to the updated Payload data. This ensures that the second communication module can only connect to the operator network corresponding to the operator in the contract. The Payload data can be regenerated according to the second identity code and sent to the contract machine to configure the updated operator lock for the second communication module. This ensures that the second communication module of the contract machine connects to the network according to the new Payload data configuration, thereby ensuring the security and legality of network connection.

[0060] In some embodiments, to solve the problem of contract machine modem module exception causing carrier lock failure, ensure that the payload data of the contract machine can always be effective during the contract period, and automatically cancel the contract after the contract expires, the present disclosure proposes a configuration method based on cloud service operator lock. This scheme is implemented on the cloud server side, increases a cloud management platform to manage the contract effectiveness of the contract machine based on the operation and maintenance state, manage the payload data running state of the modem module of the contract machine, manage the backup and dynamic calculation of the remaining contract time of the payload data, and regenerate new payload data, which is delivered to the modem module through MBIM (Mobile Broadband Interface Model).

[0061] Preconditions: (1) The modem module already supports the carrier lock function; the Modem Manager already supports the delivery of carrier lock commands. The Modem Manager is a background service in the Linux system for managing modems (Modem). It provides a unified way to manage and control various types of Modem devices, including mobile phones, data cards, etc.

[0062] In some embodiments, the implementation process is shown in FIG. 2:

[0063] Step one: the cloud server generates payload data according to the contract machine and the contract content of the operator, binds the IMEI (International Mobile Equipment Identity, which is the unique identification number of a mobile phone or other mobile device) of the Modem module, and customizes the PLMN (Public Land Mobile Network) of the operator. In mobile communication, PLMN refers to a network built and managed by one or more mobile communication operators to provide mobile communication services. In contract machine management, PLMN information is usually used to configure devices to specify the mobile networks they can access.

[0064] Step two: the cloud management platform controls the Modem Manager to deliver the payload data to the PC (contract machine) that binds the module Modem;

[0065] Step three: after inserting the PLMN SIM card of the corresponding binding characteristic operator into the PC, dial the network;

[0066] Step four: The modem module actively reports the IMEI of the modem module, the PLMN of the modem module, the SN (Serial Number, the serial number of the device, which is a unique combination of numbers or letters assigned by the device manufacturer to uniquely identify each device) of the machine, and the Carrier Lock state to the cloud server;

[0067] Step five: The cloud service will regularly check the status information reported by the modem module against the original Payload data rules;

[0068] Step six: If the check is unsuccessful, a permanent lock is generated, locking all operators from accessing the network; if the check is successful, the contract service is normal, and the user can normally enjoy and operator service;

[0069] Step seven: The user can only reapply for subscription to obtain operator network access qualification.

[0070] Through the database of the cloud management platform Carrier Lock and the addition of a regular check mechanism, the problem of Carrier Lock contract invalidation due to abnormalities can be more effectively solved, ensuring that the contract machine or contract module can only enjoy corresponding services on the corresponding product within the contract period, thereby increasing the security of Carrier Lock.

[0071] For operator customized machines, if the Payload data is invalid due to some external factors, the user's contract machine will become a full-network machine. The present disclosure can determine the occurrence of such problems by checking whether the PLMN is subscribed. If not, the user's network of all operators is directly locked. The user can apply to the cloud subscription server, which will generate valid Payload data based on the previously subscribed data and reissue it to the modem module to restore the Carrier Lock function and ensure contract effectiveness.

[0072] For customized machines within the contract period, if the modem module needs to be replaced due to failure, the IMEI of the modem module will be changed, and the user's network access to all operators will be locked. The contract period of the contract machine will be checked based on the IMEI and machine SN of the replaced modem module, new Payload data will be generated, and the modem module will be reissued to restore the Carrier Lock function and ensure contract effectiveness.

[0073] It should be noted that for the foregoing method embodiments, the acts described can be performed in any order, and are not necessary performed in the order described. Further, some of the acts can be performed simultaneously. Additionally, the methodologies described herein are not restricted to the order of acts described, as some acts can take place simultaneously or in an alternative order other than that described.

[0074] According to another aspect of the present disclosure, there is also provided a configuration device of an operator lock, as shown in FIG. 3, comprising:

[0075] A first processing module 302 is configured to generate Payload data according to contract information of a contract between the contract machine and the operator, and send the Payload data to the contract machine, to configure the operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator.

[0076] A obtaining module 304 is configured to obtain state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, a device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock.

[0077] A verification module 306 is configured to verify the state information and the Payload data.

[0078] A second processing module 308 is configured to regenerate the Payload data according to the second identity code and send it to the contract machine to configure the operator lock for the second communication module of the contract machine in the case that the first identity code and the second identity code are not verified successfully.

[0079] In some embodiments, Payload data, a file or data packet carrying valid data or payload, a file in a specific format, is used to transfer data or configuration information between software or systems. A communication module, i.e. a Modem module, is a device configured to convert digital signals into analog signals (modulation) for transmission over communication lines, and convert analog signals into digital signals (demodulation). In computer networks and communications, a modem is configured to transmit data between computers or other digital devices. In mobile communications, a modem is usually configured to convert digital data into signals suitable for transmission in a mobile network, such as through radio waves. In a mobile phone, a modem is usually configured to handle tasks such as phone calls, send text messages, and connect to a mobile data network.

[0080] In some embodiments, the method is implemented on a Google server side, and a cloud management platform is added to manage the contract machine contract, manage the modem module payload running state based on the operation and maintenance state, manage the backup of the payload data and dynamically calculate the remaining contract time, and regenerate new payload data and issue it to the modem module through MBIM.

[0081] In some embodiments, after the contract machine is contracted with the operator, the contract information is generated to include the first identity code of the first communication module at the time of contract machine signing, the device serial number of the contract machine, and the payload data of the public land mobile network of the operator. The generated payload data is sent to the contract machine to configure the operator lock of the first communication module. The contract machine inserts an identity recognition card and attempts to connect to the network, at which time the second communication module being used by the contract machine starts to work. The second communication module reports state information including the second identity code of the second communication module, the device serial number of the contract machine, the public land mobile network of the identity recognition card, and the switch state of the operator lock. The reported state information and the previously sent payload data are time checked to ensure their consistency and legality. If the first identity code and the second identity code do not pass the check, that is, the first communication module of the contract machine within the contract period has been replaced by the second communication module due to an abnormality, the payload data is regenerated to include the second identity code of the second communication module of the contract machine and is sent to the contract machine. After the contract machine receives the regenerated payload data, the information therein is used to configure the operator lock of the second communication module to ensure that the second communication module of the contract machine also works normally.

[0082] In some embodiments, for the contract machine within the contract period, if the communication module needs to be replaced due to a fault, the identity code of the communication module will be changed, at which time the second identity code of the replaced second communication module is used to check the contract period of the contract machine, regenerate new payload data, and reissue it to the contract machine to restore the operator lock function and ensure the contract to take effect. Thus, the purpose of ensuring that the user can only enjoy the corresponding service on the corresponding product within the contract period is achieved, the security of the operator lock is increased, and the technical problem of contract failure caused by abnormal communication module of the contract machine is solved.

[0083] In some embodiments, the verification module includes:

[0084] The acquisition unit is configured to acquire the contract period of the contract machine in the payload data and determine the remaining contract time of the contract machine;

[0085] a first comparison unit configured to compare the second identity code of the second communication module in the status information with the first identity code of the first communication module in the Payload data;

[0086] a second comparison unit configured to compare the second public land mobile network of the identity recognition card in the status information with the first public land mobile network of the operator in the Payload data; and

[0087] a third comparison unit configured to compare the device serial number of the contract machine in the status information with the device serial number of the contract machine in the Payload data.

[0088] In some embodiments, when the status information and the Payload data are checked, the contract term of the contract machine, the second identity code of the second communication module and the first identity code of the first communication module, the second public land mobile network of the identity recognition card and the first public land mobile network of the operator, and the device serial number of the contract machine are checked respectively. In some embodiments, the contract term information of the contract machine, such as the signing date and the expiration date of the contract, is extracted from the Payload data, and then the remaining contract time is calculated by the current date and the expiration date. The second identity code of the second communication module is obtained from the status information, and the first identity code of the first communication module is obtained from the Payload data, and then the two identity codes are compared to ensure that they match. If they do not match, it is determined that the first identity code and the second identity code are not verified successfully. The public land mobile network of the identity recognition card is obtained from the status information, and the public land mobile network of the operator is obtained from the Payload data, and then the two networks are compared to ensure that they are consistent. If they are not consistent, it is determined that the first public land mobile network and the second public land mobile network are not verified successfully. The device serial number of the contract machine is obtained from the status information, and the device serial number of the contract machine is obtained from the Payload data. Then, the two serial numbers are compared to ensure that they match. If they do not match, it is determined that the device serial number is not verified successfully.

[0089] In some embodiments, the apparatus of the present disclosure further comprises:

[0090] a third processing module configured to, after the status information and the Payload data are checked, lock the second communication module to make the second communication module unable to perform network dialing operation in the case that the contract machine is determined to be invalid in the contract with the operator according to the remaining contract time.

[0091] In some embodiments, the apparatus of the present disclosure further comprises:

[0092] The fourth processing module is configured to, in the case that the device serial number of the contract machine in the state information and the device serial number of the contract machine in the Payload data are not verified successfully, lock the second communication module so that the second communication module cannot perform the network dialing operation, and then the contract machine re-signs a contract with the operator to obtain the network dialing qualification.

[0093] In some embodiments, by comparing the current date and the contract expiration date in the contract, it can be determined whether the contract signed by the contract machine with the operator has expired. If the current date has exceeded the contract expiration date, the contract has expired. Once it is determined that the contract signed by the contract machine with the operator has expired, the second communication module needs to be locked to prevent it from performing the network dialing operation. This can be achieved by modifying the device configuration or software settings so that the second communication module cannot connect to the network. Once the contract machine is locked, it needs to re-sign a contract with the operator to obtain a new network dialing qualification. Once the contract machine re-signs a contract with the operator and obtains a new network dialing qualification, the second communication module needs to be unlocked so that it can reconnect to the network and restore the operator lock function. By performing the above method, it can be ensured that when the contract expires, the contract machine cannot connect to the network and needs to re-sign a contract with the operator to obtain new service permissions.

[0094] In some embodiments, the device of the present disclosure further comprises:

[0095] The fifth processing module is configured to, after verifying the state information and the Payload data, lock the second communication module in the case that the first public land mobile network and the second public land mobile network are not verified successfully, so that the second communication module cannot perform the network dialing operation.

[0096] In some embodiments, if it is found in the verification process that the first public land mobile network and the second public land mobile network have not passed the verification, it indicates that the network to which the second communication module of the contract machine attempts to connect does not match the network originally configured for the contract machine, and there may be an illegal network connection or configuration. Once it is found that the first public land mobile network and the second public land mobile network have not passed the verification, the second communication module needs to be immediately locked to prevent it from performing the network dialing operation. This can be achieved by modifying the device configuration or software settings so that the second communication module cannot connect to the network. After locking the second communication module, a communication module that matches the first public land mobile network of the operator needs to be replaced to restore the network dialing function of the contract machine. By the above method, it can be ensured that when the public land mobile network does not pass the verification, the second communication module cannot connect to the network, thereby ensuring network security and legal use.

[0097] In some embodiments, the device of the present disclosure further comprises:

[0098] The sixth processing module is configured to lock the second communication module after verifying the status information and payload data, in the event that the device serial number of the contract machine in the status information and the device serial number of the contract machine in the payload data fail to be verified, so that the second communication module cannot perform network registration dialing operations.

[0099] In some implementations, a mismatch between the device serial number in the status information and the device serial number in the payload data indicates inconsistencies in device information or potential device tampering. If the device serial number fails verification, the secondary communication module should be immediately locked to ensure the security of the contract device and the legitimacy of network use. Locking the secondary communication module can be achieved by modifying device configuration or software settings to prevent it from making network registration and dialing operations. After locking the secondary communication module, further investigation is needed to determine the cause and take remedial measures. This includes checking the contract device information, verifying the device's authenticity, and contacting the manufacturer to confirm the device serial number. These methods ensure that the secondary communication module cannot connect to the network when the device serial number fails verification, thereby protecting network security and the legitimate use of the device.

[0100] In some implementations, the second processing module includes:

[0101] The unit is modified to change the first identification code in the payload data to the second identification code, thus obtaining the updated payload data.

[0102] The sending unit is configured to send the updated payload data to the contract machine;

[0103] The configuration unit is configured to configure a carrier lock for the second communication module based on the updated payload data.

[0104] In some implementations, a second identity code for the second communication module is obtained from the status information and used to update the payload data. Specifically, the first identity code in the payload data is modified to the second identity code, resulting in updated payload data. This updated payload data is sent to the contract device to configure an updated carrier lock for the contract device's second communication module. Upon receiving the updated payload data, the contract device parses the information and configures the carrier lock for the second communication module based on the updated payload data. This ensures that the second communication module can only connect to the network of the carrier corresponding to the carrier specified in the contract. The payload data can be regenerated based on the second identity code and sent to the contract device to configure the updated carrier lock for the second communication module. This ensures that the contract device's second communication module connects to the network according to the new payload data configuration, thereby guaranteeing the security and legitimacy of the network connection.

[0105] For other examples of this embodiment, please refer to the examples above, which will not be repeated here.

[0106] Figure 4 is a schematic diagram of an electronic device according to an embodiment of the present disclosure. As shown in Figure 4, it includes a processor 402, a communication interface 404, a memory 406, and a communication bus 408. The processor 402, the communication interface 404, and the memory 406 communicate with each other via the communication bus 408.

[0107] Memory 406 is configured to store computer programs;

[0108] When processor 402 is configured to execute a computer program stored in memory 406, it performs the following steps:

[0109] Payload data is generated based on the contract information between the contract phone and the operator, and the Payload data is sent to the contract phone to configure the operator lock for the first communication module of the contract phone. The Payload data includes the first identification code of the first communication module of the contract phone, the device serial number of the contract phone, and the first public land mobile network of the operator.

[0110] The status information reported by the second communication module of the contract phone after the identity card is inserted into the contract phone and the network registration dialing is performed is obtained. The status information includes the second identity code of the second communication module of the contract phone, the device serial number of the contract phone, the second public land mobile network of the identity card, and the on / off status of the operator lock.

[0111] Verify the status information and payload data; and

[0112] If the first and second identity codes fail to be verified, the payload data is regenerated based on the second identity code and sent to the contract device, and the carrier lock is configured for the second communication module of the contract device.

[0113] In some implementations, the aforementioned communication bus may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used in Figure 4, but this does not indicate that there is only one bus or one type of bus. The communication interface is configured for communication between the aforementioned electronic device and other devices.

[0114] The memory may include RAM or non-volatile memory, such as at least one disk storage device. In some embodiments, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0115] In some embodiments, the memory 406 may include, but is not limited to, the first processing module 302, the acquisition module 304, the verification module 306, and the second processing module 308 from the operator lock configuration device. Furthermore, it may include, but is not limited to, other module units from the operator lock configuration device, which will not be elaborated upon in this example.

[0116] The processor mentioned above can be a general-purpose processor, including but not limited to: CPU (Central Processing Unit), NP (Network Processor), etc.; it can also be DSP (Digital Signal Processor), ASIC (Application Specific Integrated Circuit), FPGA (Field-Programmable Gate Array) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0117] Specific examples in this embodiment can be found in the examples described in the above embodiments, and will not be repeated here.

[0118] The electronic device provided in one embodiment of this disclosure can be a module capable of communication functions or a terminal device containing such a module, which can be a mobile terminal or a smart terminal. In some embodiments, the mobile terminal can be at least one of a mobile phone, tablet computer, or laptop computer. In some embodiments, the smart terminal can be a smart car, smartwatch, shared bicycle, smart locker, or other terminal containing a wireless communication module. In some embodiments, the module can be a wireless communication module, such as any one of a 2G communication module, 3G communication module, 4G communication module, 5G communication module, or NB-IoT communication module. Those skilled in the art will understand that the structure shown in FIG4 is merely illustrative, and the device implementing the above-described operator lock configuration method can be a terminal device, such as a smartphone (e.g., Android phone, iOS phone), tablet computer, PDA, mobile Internet Device (MID), PAD, etc. FIG4 does not limit the structure of the above-described electronic device. In some embodiments, the electronic device may also include more or fewer components (e.g., network interface, display device, etc.) than shown in FIG4, or have a different configuration than shown in FIG4.

[0119] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, ROM, RAM, disk or optical disk, etc.

[0120] According to another aspect of this disclosure, a computer-readable storage medium is also provided, wherein a computer program is stored therein, wherein the computer program is executed by a processor to perform the operator lock configuration method of this disclosure.

[0121] In some implementations, those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0122] The sequence numbers of the embodiments disclosed above are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0123] If the integrated units in the above embodiments are implemented as software functional units and sold or used as independent products, they can be stored in the aforementioned computer-readable storage medium. Based on this understanding, the technical solutions of this disclosure can essentially be embodied in part or all of the technical solutions in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause one or more computer devices (which may be personal computers, servers, or network devices, etc.) to execute all or part of the steps of the methods described in the various embodiments of this disclosure.

[0124] In the above embodiments of this disclosure, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0125] In the several embodiments provided in this disclosure, it should be understood that the disclosed client can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection between units or modules, and may be electrical or other forms.

[0126] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0127] Furthermore, the functional units in the various embodiments of this disclosure can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0128] The above description is only some embodiments of this disclosure. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principles of this disclosure, and these improvements and modifications should also be considered within the scope of protection of this disclosure.

Claims

1. A method for configuring an operator lock, comprising: generating Payload data according to contract information of a contract signed by a contract machine with an operator, and sending the Payload data to the contract machine to configure an operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator; obtaining state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network access dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, the device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock; verifying the state information and the Payload data; and in a case where the first identity code and the second identity code are not verified successfully, generating Payload data according to the second identity code and sending the Payload data to the contract machine to configure an operator lock for the second communication module of the contract machine. 2.The method of claim 1, wherein the verifying the state information and the Payload data comprises: obtaining a contract period of the contract machine in the Payload data, and determining a remaining contract time of the contract machine; comparing the second identity code of the second communication module in the state information with the first identity code of the first communication module in the Payload data; comparing the second public land mobile network of the identity recognition card in the state information with the first public land mobile network of the operator in the Payload data; and comparing the device serial number of the contract machine in the state information with the device serial number of the contract machine in the Payload data. 3.The method of claim 2, wherein after the verifying the state information and the Payload data, the method further comprises: in a case where it is determined that the contract machine is invalid according to the remaining contract time, locking the second communication module so that the second communication module cannot perform network access dialing. 4.The method of claim 3, wherein after the locking the second communication module so that the second communication module cannot perform network access dialing in a case where the device serial number of the contract machine in the state information and the device serial number of the contract machine in the Payload data are not verified successfully, the method further comprises: the contract machine obtains network access dialing qualification by signing a new contract with the operator. 5.The method of any one of claims 2 to 4, wherein after the verifying the state information and the Payload data, the method further comprises: ​ In a case that the first public land mobile network and the second public land mobile network are not verified successfully, the second communication module is locked to make the second communication module unable to perform network injection dialing operation.

6. The configuration method of the operator lock according to any one of claims 2 to 4, wherein after the state information and the Payload data are verified, the method further comprises: In a case that the device serial number of the contract machine in the state information and the device serial number of the contract machine in the Payload data are not verified successfully, the second communication module is locked to make the second communication module unable to perform network injection dialing operation.

7. The configuration method of the operator lock according to any one of claims 1 to 6, wherein the configuration of the operator lock for the second communication module of the contract machine according to the second identity code to regenerate Payload data and send to the contract machine comprises: modifying the first identity code in the Payload data to the second identity code to obtain updated Payload data; sending the updated Payload data to the contract machine; configuring the operator lock for the second communication module according to the updated Payload data.

8. A configuration device of an operator lock, comprising: a first processing module configured to generate Payload data according to contract information of a contract machine and an operator, and send the Payload data to the contract machine to configure an operator lock for a first communication module of the contract machine, wherein the Payload data comprises a first identity code of the first communication module of the contract machine, a device serial number of the contract machine, and a first public land mobile network of the operator; an acquisition module configured to acquire state information reported by a second communication module of the contract machine after the contract machine inserts an identity recognition card and performs network injection dialing, wherein the state information comprises a second identity code of the second communication module of the contract machine, the device serial number of the contract machine, a second public land mobile network of the identity recognition card, and a switch state of the operator lock; a verification module configured to verify the state information and the Payload data; and a second processing module configured to regenerate Payload data according to the second identity code and send to the contract machine to configure an operator lock for the second communication module of the contract machine in a case that the first identity code and the second identity code are not verified successfully.

9. A computer readable storage medium, the computer readable storage medium storing a computer program, wherein the computer program is executed by a processor to perform the configuration method of the operator lock according to any one of claims 1 to 7.

10. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, and the processor is configured to perform the configuration method of the operator lock according to any one of claims 1 to 7 by the computer program.

Images