Patent Description:
An embedded universal integrated circuit card (embedded Universal Integrated Circuit Card, eUICC) may also be referred to as an embedded subscriber identity module (embedded Subscriber Identity Module, eSIM) card. The eUICC may be placed into a user terminal (such as a mobile phone or a tablet computer) through insertion/removal or welding.

In an actual application, after a profile (profile) provided by a communications operator is installed in the eUICC, the eUICC can access a communications operator network (such as a <NUM>/<NUM>/<NUM> network). Generally, the communications operator performs remote management on the profile in the eUICC, for example, activates the profile in the eUICC, deactivates the profile in the eUICC, deletes the profile in the eUICC, or audits a status of the eUICC.

<FIG> and <FIG> are schematic flowcharts of existing remote management. As shown in <FIG> and <FIG>, a procedure in which the communications operator performs remote management on the profile in the eUICC may generally include the following steps.

When the communications operator needs to perform remote management on the profile in the eUICC, the communications operator sends, to a subscription manager-data preparation (Subscription Manager-Data Preparation, SM-DP+) server, at least a remote profile management command (Remote profile Management Command) that is used to perform remote management on the profile, an eUICC identifier (eUICC-ID, EID), and an address that is of a subscription manager-discovery service (Subscription Manager-Discovery Service, SM-DS) server and that is corresponding to the profile.

After receiving the remote profile management command and the address of the SM-DS server, the SM-DP+ server generates an event identifier corresponding to the remote profile management command (the event identifier is used to identify a remote profile management event, and the event identifier may also be referred to as a notification identifier or a notification identifier), and establishes and stores at least a correspondence between the event identifier and the remote profile management command, the eUICC identifier, an address of the SM-DP+ server, and the address of the SM-DS server.

The SM-DP+ server establishes a connection to the SM-DS server according to the address of the SM-DS server.

After establishing the connection to the SM-DS server, the SM-DP+ server registers at least the event identifier, the address of the SM-DP+ server, and the eUICC identifier in the SM-DS server.

A local profile assistant (Local Profile Assistant, LPA) in the user terminal establishes a connection to the SM-DS server by using the address that is of the SM-DS server and that is provided by the eUICC.

After the LPA establishes the connection to the SM-DS server, the SM-DS server sends at least the event identifier, the eUICC identifier, and the address of the SM-DP+ server to the LPA.

The LPA establishes a connection to the SM-DP+ server according to the address of the SM-DP+ server.

After the LPA establishes the connection to the SM-DP+ server, the LPA sends at least the event identifier to the SM-DP+ server.

After the SM-DP+ server receives the event identifier, the SM-DP+ server sends, to the eUICC directly by using the LPA, the stored remote profile management command corresponding to the event identifier.

After receiving the remote management command, the eUICC executes the remote profile management command.

However, it is found from practice that in a process in which the SM-DP+ server sends the remote profile management command to the eUICC, the remote profile management command may be tampered with by an unauthorized device, so that the eUICC executes the tampered remote profile management command (for example, performs an operation such as unauthorized profile activation, unauthorized profile deactivation, or unauthorized profile deletion). Therefore, security of the foregoing remote management is not high. GSM ASSOCIATION, RSP Technical Specification Version <NUM>, provides a technical description of the GSMA's 'Remote Sim Provisioning (RSP) Architecture for consumer Devices'.

Embodiments of the present invention disclose a user terminal, to help improve security of remote management.

The present invention provides a user terminal having a local profile assistant (LPA) and an eUICC disposed therein, according to claim <NUM>. Further embodiments of the present invention are disclosed in the dependent claims.

Compared with the prior art, in the embodiments of the present invention, after receiving the first identifier sent by the LPA, the SM-DP+ server finds the remote profile management command corresponding to the first identifier; and the SM-DP+ server generates the first digital signature according to at least the remote profile management command and the first identifier, and sends at least the first digital signature and the remote profile management command to the eUICC by using the LPA. Therefore, after receiving the first digital signature and the remote profile management command, the eUICC can verify the first digital signature according to at least the first identifier and the public key in the digital certificate of the SM-DP+ that are sent by the LPA to the eUICC. The eUICC executes the remote profile management command only when the verification succeeds (which indicates that the remote profile management command is not tampered with by the unauthorized device). It can be seen that according to the embodiments of the present invention, the eUICC can determine whether the remote profile management command is tampered with by the unauthorized device, and execute the remote profile management command only when determining that the remote profile management command is not tampered with by the unauthorized device. Therefore, security of remote management is improved.

Compared with the prior art, in the embodiments of the present invention, the SM-DS server may generate the token according to at least the eUICC identifier and the address of the SM-DS server, and send at least the token to the LPA. In this way, the LPA can send the token to the SM-DP+ server. After receiving the token sent by the LPA, the SM-DP+ server verifies the token. After the verification succeeds, if the SM-DP+ server determines, through verification, that the address of the SM-DS server matches the address of the SM-DS server corresponding to the first identifier, and the eUICC identifier matches the eUICC identifier corresponding to the first identifier, the SM-DP+ server determines that the authentication on the identity of the eUICC succeeds. It can be seen that, in the embodiments of the present invention, the interaction procedure in the process in which the SM-DP+ server verifies the identity of the eUICC is simplified, so that the whole operation procedure is more simplified.

To describe the technical solutions in the embodiments of the present invention more clearly, the following briefly describes the accompanying drawings required for describing the embodiments. Apparently, the accompanying drawings in the following description show only some embodiments of the present invention, and a person of ordinary skill in the art may still derive other drawings from these accompanying drawings without creative efforts.

The following clearly and completely describes the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are only some but not all of the embodiments of the present invention. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

In the specification, claims, and accompanying drawings of the present invention, the terms "first", "second", and so on are intended to distinguish between different objects but do not indicate a particular order. In addition, the terms "include", "have", and any other variant thereof, are intended to cover a non-exclusive inclusion. For example, a process, a method, a system, a product, or a device that includes a series of steps or units is not limited to the listed steps or units, but optionally further includes an unlisted step or unit, or optionally further includes another step or unit inherent to the process, the method, the product, or the device.

In an existing remote management process, when an SM-DP+ server sends a remote profile management command to an eUICC, the remote profile management command may be tampered with by an unauthorized device, so that the eUICC executes the tampered remote profile management command (for example, performs an operation such as unauthorized profile activation, unauthorized profile deactivation, or unauthorized profile deletion). Therefore, security of the existing remote management is not high.

To improve the security of the remote management, the embodiments of the present invention disclose a remote management method and a device. The method and the device are based on a same invention concept. Because problem-resolving principles of the method and the device are similar, for implementation of the device and the method, refer to the device and the method mutually. No repeated description is provided.

To clearly describe the solutions in the embodiments of the present invention, a service scenario and a system architecture that are possibly used in the embodiments of the present invention are described below with reference to <FIG>.

Referring to <FIG> is a possible diagram of a system architecture according to an embodiment of the present invention. As shown in <FIG>, the system architecture includes a user terminal, an SM-DP+ server, and an SM-DS server.

The user terminal may include various electronic devices, such as a mobile phone, a tablet computer, a personal digital assistant (Personal Digital Assistant, PDA), a television, an in-vehicle device, a machine-to-machine (Machine to Machine, M2M) device, a mobile Internet device (Mobile Internet Device, MID), and an intelligent wearable device (such as a smartwatch and a smart band). According to the invention, an eUICC and an LPA are disposed in the user terminal. The LPA is deployed in the eUICC, or the LPA and the eUICC are deployed independently.

Optionally, the LPA may include a local profile download (Local Profile Download, LPD) module, a local user interface (Local User Interface, LUI) module, and a local discovery service (Local Discovery Service, LDS) module. Generally, the LPA in the user terminal is responsible for interaction between the user terminal and the eUICC, the LPD module is mainly responsible for profile download, the LDS module is mainly responsible for service discovery, and the LUI module provides a user with a UI interface. The user may manage, by using the LPA, a profile downloaded to the eUICC, for example, perform an operation such as profile activation, deactivation, or deletion.

In the system architecture shown in <FIG>, the SM-DP+ server may send a remote profile management command to the eUICC by using the LPA, so that the eUICC executes the remote profile management command, to implement remote management. Remote profile management includes profile activation, profile deactivation, profile deletion, eUICC status audit, and the like.

A main function of the SM-DS server is to provide a mechanism for enabling the SM-DP+ server to communicate with the LPA. The LPA may obtain an address of the SM-DP+ server from the SM-DS server, so that the LPA can communicate with the SM-DP+ server. The SM-DS server in this specification may be a specific SM-DS server, or may be a collective term for multi-level SM-DS servers.

In the system architecture shown in <FIG>, when a communications operator needs to perform a remote operation on a profile (for example, download a profile to the eUICC or perform remote management on a profile in the eUICC), the communications operator sends, to the SM-DP+ server, an operation command (for example, a profile download command or a remote profile management command), an eUICC identifier (which is used to identify the eUICC), and an address that is of an SM-DS server and that is corresponding to the profile. After receiving the operation command, the eUICC identifier, and the address of the SM-DS server, the SM-DP+ server generates an event identifier corresponding to the operation command. The identifier may also be referred to as a notification identifier or a notification identifier. The event identifier is used to identify an event, and the event includes a profile download event and a remote profile management event. For example, if the event is a profile download event, the SM-DP+ server generates an identifier of the profile download event. If the event is a remote profile management event, the SM-DP+ server generates an identifier of the remote profile management. The SM-DP+ server establishes at least a correspondence between the event identifier and the operation command, the eUICC identifier, the address of the SM-DP+ server, and the address of the SM-DS server, and stores the correspondence.

In the system architecture shown in <FIG>, after generating the event identifier corresponding to the operation command, the SM-DP+ server sends, according to the address of the SM-DS server, at least the event identifier, the eUICC identifier, and the address of the SM-DP+ server to the SM-DS server for registering.

In the system architecture shown in <FIG>, the eUICC stores the address of the SM-DS server, and the LPA connects to the SM-DS server according to the address that is of the SM-DS server and that is provided by the eUICC. Optionally, after the LPA establishes a connection to the SM-DS server, the SM-DS server and the eUICC may perform mutual authentication by using the LPA (that is, the eUICC performs authentication on an identity of the SM-DS server, and the SM-DS server performs authentication on an identity of the eUICC). After the mutual authentication succeeds, the SM-DS server sends, to the LPA, at least the event identifier, the eUICC identifier, and the address of the SM-DP+ server that are registered by the SM-DP+ server.

It can be understood that the system architecture and the service scenario described in the embodiments of the present invention are intended to describe the technical solutions in the embodiments of the present invention more clearly, and impose no limitation on the technical solutions provided in the embodiments of the present invention. A person of ordinary skill in the art may know that, with evolution of the system architecture and emergence of a new service scenario, the technical solutions provided in the embodiments of the present invention are also applicable to a similar technical issue.

Based on foregoing common aspects included in the embodiments of the present invention, the following further describes the embodiments of the present invention in detail.

Referring to <FIG> is a schematic flowchart of a remote management method according to an embodiment of the present invention. As shown in <FIG>, the remote management method may include steps <NUM> to <NUM>.

An LPA sends at least a first identifier to an SM-DP+ server.

In this embodiment of the present invention, the first identifier is an event identifier. The first identifier is registered by the SM-DP+ server in an SM-DS server. After the SM-DS server and an eUICC perform mutual authentication, the first identifier is sent by the SM-DS server to the LPA. After the SM-DS server and the eUICC perform the mutual authentication, the SM-DS server further sends an address of the SM-DP+ server to the LPA. After receiving at least the address of the SM-DP+ server and the first identifier, the LPA connects to the SM-DP+ server according to the address of the SM-DP+ server, and sends at least the first identifier to the SM-DP+ server after establishing a connection to the SM-DP+ server.

The LPA sends at least the first identifier to an eUICC.

In this embodiment of the present invention, after the LPA sends at least the first identifier to the SM-DP+ server, the LPA sends at least the first identifier to the eUICC. Optionally, step <NUM> and step <NUM> are not performed in sequence, and step <NUM> may be performed first, or step <NUM> may be performed first.

The SM-DP+ server searches for a remote profile management command corresponding to the first identifier.

In this embodiment of the present invention, after the SM-DP+ server receives the first identifier, if the first identifier is an event identifier corresponding to a remote profile management event, the SM-DP+ server obtains the remote profile management command corresponding to the first identifier.

The SM-DP+ server generates a first digital signature according to at least the first identifier and the remote profile management command.

In this embodiment of the present invention, a specific implementation in which the SM-DP+ server generates the first digital signature according to at least the first identifier and the remote profile management command may be as follows: The SM-DP+ server generates a data structure according to at least the first identifier and the remote profile management command, and then calculates the first digital signature according to the data structure by using a private key of the SM-DP+ server.

Optionally, the SM-DP+ server may perform a hash operation on the first identifier and the remote profile management command, to obtain a message digest, and then encrypt the message digest by using a private key of the SM-DP+ server, to obtain the first digital signature.

The SM-DP+ server sends at least the first digital signature and the remote profile management command to the eUICC by using the LPA.

In this embodiment of the present invention, after generating the first digital signature, the SM-DP+ server sends at least the first digital signature and the remote profile management command to the LPA, so that the LPA sends at least the first digital signature and the remote profile management command to the eUICC.

The eUICC verifies the first digital signature according to at least the first identifier and the remote profile management command.

In this embodiment of the present invention, after receiving the first identifier, the remote profile management command, and the first digital signature that are sent by the LPA, the eUICC verifies the first digital signature by using at least the first identifier and the remote profile management command.

Optionally, a specific implementation in which the eUICC verifies the first digital signature by using at least the first identifier and the remote profile management command may be as follows: The eUICC decrypts the first digital signature by using a public key in a previously received digital certificate of the SM-DP+ server, to obtain a message digest, and then performs a hash operation on the first identifier and the remote profile management command, to obtain a new message digest; the eUICC compares the message digest, obtained after decryption, with the new message digest; and if the message digest obtained after decryption is consistent with the new message digest, the eUICC determines that the verification on the first digital signature succeeds, that is, the remote profile management command is not tampered with.

The eUICC executes the remote profile management command.

In this embodiment of the present invention, if the eUICC determines that the verification on the first digital signature succeeds, the eUICC executes the remote profile management command.

In the method described in <FIG>, after receiving the first identifier sent by the LPA, the SM-DP+ server obtains the remote profile management command corresponding to the first identifier; and the SM-DP+ server generates the first digital signature according to at least the remote profile management command and the first identifier, and sends at least the first digital signature and the remote profile management command to the eUICC by using the LPA. Therefore, after receiving the first digital signature and the remote profile management command, the eUICC can verify the first digital signature according to at least the first identifier and the public key in the digital certificate of the SM-DP+ that are sent by the LPA to the eUICC. The eUICC executes the remote profile management command only when the verification succeeds (which indicates that the remote profile management command is not tampered with by an unauthorized device). It can be seen that, in the embodiment described in <FIG>, the eUICC can determine whether the remote profile management command is tampered with by the unauthorized device, and execute the remote profile management command only when determining that the remote profile management command is not tampered with by the unauthorized device. Therefore, security of remote management is improved.

Referring to <FIG>, <FIG>, and <FIG>, <FIG>, <FIG>, and <FIG> are schematic flowcharts of another remote management method according to an embodiment of the present invention. As shown in <FIG>, <FIG>, and <FIG>, the remote management method may include steps <NUM> to <NUM>.

An LPA sends at least a first identifier and a first random number to an SM-DP+ server.

In this embodiment of the present invention, the first random number is sent by an eUICC to the LPA. After receiving an address of the SM-DP+ server, the first identifier, and an eUICC identifier that are sent by an SM-DS server, the LPA triggers the eUICC to generate the first random number. After generating the first random number, the eUICC sends the first random number to the LPA. After receiving the first random number, the LPA sends at least the first random number and the first identifier to the SM-DP+ server according to the address of the SM-DP+ server. After generating the first random number, the eUICC stores the first random number.

The SM-DP+ server checks whether the SM-DP+ server stores an event corresponding to the first identifier.

In this embodiment of the present invention, the event includes a remote profile management event and a profile download event. If the SM-DP+ server finds that the SM-DP+ server stores the event corresponding to the first identifier, the SM-DP+ server performs step <NUM>.

When the event corresponding to the first identifier is a remote profile management event, the SM-DP+ server does not generate an interaction identifier.

In this embodiment of the present invention, the interaction identifier is information used to identify interaction. When the event corresponding to the first identifier is a remote profile management event, no interaction identifier is generated, so that the interaction identifier can be replaced with the existing event identifier. This helps reduce a quantity of parameters.

The SM-DP+ server generates a second random number, and generates a first digital signature according to at least the second random number and the first random number.

In this embodiment of the present invention, after the SM-DP+ server finds that the SM-DP+ server stores the event corresponding to the first identifier, the SM-DP+ server generates the second random number, and generates the first digital signature according to at least the second random number and the first random number. After generating the second random number, the SM-DP+ server stores the second random number.

In this embodiment of the present invention, a specific implementation in which the SM-DP+ server generates the first digital signature according to at least the second random number and the first random number may be: generating a data structure according to at least the second random number and the first random number, and then calculating the first digital signature according to the data structure by using a private key of the SM-DP+ server.

Optionally, a specific implementation in which the SM-DP+ server generates the first digital signature according to at least the second random number and the first random number may be as follows: The SM-DP+ server performs a hash operation on at least the second random number and the first random number, to obtain a message digest, and then encrypts the message digest by using a private key of the SM-DP+ server, to obtain the first digital signature.

The SM-DP+ server sends at least the second random number, the first digital signature, and a digital certificate of the SM-DP+ server to the LPA.

The LPA sends at least the first identifier, the second random number, the first digital signature, and the digital certificate of the SM-DP+ server to an eUICC.

The eUICC verifies the digital certificate of the SM-DP+ server, and verifies the first digital signature.

In this embodiment of the present invention, after receiving the first identifier, the second random number, the first digital signature, and the digital certificate of the SM-DP+ server, the eUICC verifies the digital certificate of the SM-DP+ server by using a public key of a certificate issuer (Certificate Issuer). After the verification on the digital certificate of the SM-DP+ server succeeds, the eUICC obtains a public key of the SM-DP+ server in the digital certificate of the SM-DP+ server, and verifies the first digital signature by using at least the public key of the SM-DP+ server, the second random number, and the first random number stored in the eUICC.

Optionally, a specific implementation in which the eUICC verifies the first digital signature by using at least the public key of the SM-DP+ server, the first random number, and the second random number may be as follows: The eUICC decrypts the first digital signature by using the public key of the SM-DP+ server, to obtain a message digest; performs a hash operation according to at least the second random number and the first random number that is previously generated by the eUICC and that is stored in the eUICC, to obtain a new message digest; compares the message digest, obtained after decryption, with the new message digest; and if the message digest obtained after decryption is consistent with the new message digest, determines that the verification on the first digital signature succeeds. If determining that the verification on the first digital signature succeeds, the eUICC performs step <NUM>.

The eUICC generates a second digital signature according to at least the first identifier and the second random number.

In this embodiment of the present invention, a specific implementation in which the eUICC generates the second digital signature according to at least the first identifier and the second random number may be: generating a data structure according to at least the first identifier and the second random number, and calculating the second digital signature according to the data structure by using a private key of the eUICC.

In this embodiment of the present invention, optionally, the eUICC performs a hash operation on the first identifier and the second random number, to obtain a message digest, and then encrypts the message digest by using a private key of the eUICC, to obtain the second digital signature.

The eUICC sends at least the second digital signature, a digital certificate of the eUICC, and a digital certificate of an eUICC manufacturer EUM to the SM-DP+ server by using the LPA.

In this embodiment of the present invention, after generating the second digital signature, the eUICC sends at least the second digital signature, the digital certificate of the eUICC, and the digital certificate of the EUM to the SM-DP+ server by using the LPA.

The SM-DP+ server verifies the digital certificate of the eUICC and the digital certificate of the EUM, and verifies the second digital signature by using at least the first identifier, the second random number, and a public key in the digital certificate of the eUICC.

In this embodiment of the present invention, after receiving the second digital signature and the digital certificate of the eUICC, the SM-DP+ server verifies the digital certificate of the EUM by using a public key of a certificate issuer (Certificate Issuer), and if the verification succeeds, determines that the verification on the digital certificate of the EUM succeeds. Then, the SM-DP+ server verifies the digital certificate of the eUICC by using a public key in the digital certificate of the EUM, and if the verification succeeds, determines that the verification on the digital certificate of the eUICC succeeds. After determining that the verification on the digital certificate of the eUICC succeeds, the SM-DP+ server verifies the second digital signature by using at least the second random number, the public key in the digital certificate of the eUICC, and the first identifier.

Optionally, a specific implementation in which the SM-DP+ server verifies the second digital signature by using at least the second random number, the public key in the digital certificate of the eUICC, and the first identifier may be as follows: The SM-DP+ server decrypts the second digital signature by using the public key in the digital certificate of the eUICC, to obtain a message digest, and then performs a hash operation according to at least the first identifier and the second random number that is previously generated by the SM-DP+ server and that is stored in the SM-DP+ server, to obtain a new message digest; the SM-DP+ server compares the message digest, obtained after decryption, with the new message digest; and if the message digest obtained after decryption is consistent the new message digest, the SM-DP+ server determines that the verification on the second digital signature succeeds. After the verification on the second digital signature succeeds, the SM-DP+ server performs step <NUM>.

In an actual application, the eUICC generates the second digital signature according to an interaction identifier. Correspondingly, the SM-DP+ server also verifies the second digital signature according to the interaction identifier. After steps <NUM> to <NUM> are performed, the eUICC generates the second digital signature by replacing the interaction identifier with the existing first identifier. Correspondingly, the SM-DP+ server verifies the second digital signature according to the first identifier stored in the SM-DP+ server. In this way, the interaction identifier is replaced with the first identifier, so that a quantity of parameters is reduced, and the parameters are simplified.

The SM-DP+ server generates a third digital signature according to at least the first identifier and the remote profile management command.

In this embodiment of the present invention, the third digital signature is the first digital signature in the embodiment shown in <FIG>. Step <NUM> is similar to step <NUM> in <FIG>. For step <NUM>, refer to descriptions of step <NUM> in <FIG>.

The SM-DP+ server sends at least the third digital signature and the remote profile management command to the eUICC by using the LPA.

In this embodiment of the present invention, step <NUM> is similar to step <NUM> in <FIG>. For step <NUM>, refer to descriptions of step <NUM> in <FIG>.

The eUICC verifies the third digital signature according to at least the first identifier and the remote profile management command.

The eUICC sends a first message to the LPA.

In this embodiment of the present invention, if the eUICC determines that the verification on the third digital signature succeeds, and the remote profile management command is a target command, the eUICC sends, to the LPA, the first message used to request for user confirmation. After receiving the first message, the LPA may present the user confirmation by using an LUI module. Optionally, the target command may include but is not limited to a profile activation command, a profile deactivation command, or a profile deletion command.

The LPA returns an execution confirmation message to the eUICC.

In this embodiment of the present invention, when the LPA receives an instruction that is used to confirm execution of the remote profile management command and that is entered by a user, the LPA returns the execution confirmation message to the eUICC.

In this embodiment of the present invention, after receiving the execution confirmation message, the eUICC executes the remote profile management command.

After steps <NUM> to <NUM> are performed, when a profile needs to be activated, deactivated, or deleted, confirmation is requested from the user, so that security of profile information in the eUICC can be effectively improved, and the user can know an operation that is performed on the profile by a remote device.

The eUICC generates a remote profile management result of the remote profile management command.

In this embodiment of the present invention, after executing the remote profile management command, the eUICC generates the remote profile management result of the remote profile management command. The remote profile management result includes at least the first identifier and a fourth digital signature generated according to the first identifier. Optionally, the remote profile management result may further include result code and the address of the SM-DP+ server. Optionally, the fourth digital signature may be generated according to the first identifier, the result code, and the address of the SM-DP+ server.

The eUICC sends, to the LPA, the remote profile management result that includes at least the first identifier and a fourth digital signature.

In this embodiment of the present invention, after generating the remote profile management result, the eUICC sends, to the LPA, the remote profile management result that includes at least the first identifier and the fourth digital signature. Optionally, if the remote profile management result further includes the result code and the address of the SM-DP+ server, the eUICC may further send the result code and the address of the SM-DP+ server to the LPA.

The LPA sends, to the SM-DP+ server, a second message that includes at least the first identifier and the fourth digital signature.

In this embodiment of the present invention, after receiving the remote profile management result, the LPA sends the second message to the SM-DP+ server. The second message includes at least the first identifier and the fourth digital signature that are in the remote profile management result.

Optionally, if the remote profile management result further includes the result code and the address of the SM-DP+ server, the second message may further include the result code and the address of the SM-DP+ server.

The SM-DP+ server sends a third message to an SM-DS server.

In this embodiment of the present invention, after the SM-DP+ server receives the second message, the SM-DS server sends the third message to the SM-DS server. The third message includes at least the address of the SM-DP+ server, the eUICC identifier, and the first identifier, and the third message is used by the SM-DS server to delete at least the address of the SM-DP+ server, the eUICC identifier, and the first identifier that are sent by the SM-DP+ server.

The SM-DS server deletes at least an address of the SM-DP+, an eUICC identifier, and the first identifier that are sent by the SM-DP+ server.

In this embodiment of the present invention, after receiving the third message, the SM-DS server deletes at least the address of the SM-DP+, the eUICC identifier, and the first identifier that are sent by the SM-DP+ server.

After the eUICC executes the remote profile management command, step <NUM> and step <NUM> are performed, and the SM-DS server can delete, in a timely manner, at least the address of the SM-DP+, the eUICC identifier, and the first identifier that are stored in the SM-DS server, so that storage space of the SM-DS server can be saved.

In the method described in <FIG>, <FIG>, and <FIG>, after receiving the first identifier sent by the LPA, the SM-DP+ server searches for the remote profile management command corresponding to the first identifier; and the SM-DP+ server generates the third digital signature according to at least the remote profile management command and the first identifier, and sends at least the third digital signature and the remote profile management command to the eUICC by using the LPA. Therefore, after receiving the third digital signature and the remote profile management command, the eUICC can verify the third digital signature according to at least the first identifier and the public key in the digital certificate of the SM-DP+ that are sent by the LPA to the eUICC. The eUICC executes the remote profile management command only when the verification succeeds (which indicates that the remote profile management command is not tampered with by an unauthorized device). It can be seen that security of remote management is improved by using the method described in <FIG>, <FIG>, and <FIG>.

Referring to <FIG> and <FIG>, <FIG> and <FIG> are schematic flowcharts of still another remote management method according to an embodiment of the present invention. As shown in <FIG> and <FIG>, the remote management method may include steps <NUM> to <NUM>.

An SM-DS server receives a first message sent by an SM-DP+ server.

In this embodiment of the present invention, the first message includes at least an eUICC identifier and a first identifier. Optionally, the first message may further include an address of the SM-DP+ server and eUICC information <NUM> (eUICCinfo1).

The SM-DS server generates a token after authentication performed by the SM-DS server on an identity of an eUICC succeeds.

In this embodiment of the present invention, the token is a digital signature that is generated by the SM-DS server according to at least the first identifier, the eUICC identifier, and an address of the SM-DS server.

In this embodiment of the present invention, a specific implementation in which the SM-DS server generates the digital signature according to at least the first identifier, the eUICC identifier, and the address of the SM-DS server may be as follows: The SM-DS server generates a data structure according to at least the first identifier, the eUICC identifier, and the address of the SM-DS server, and then calculates the digital signature according to the data structure by using a private key of the SM-DP+ server.

Optionally, a specific implementation in which the SM-DS server generates the token according to at least the first identifier, the eUICC identifier, and the address of the SM-DS server may be as follows: The SM-DS server performs a hash operation on the first identifier, the eUICC identifier, and the address of the SM-DS server, to obtain a message digest, and then encrypts the message digest by using a private key of the SM-DS server, to obtain the token.

The SM-DS server sends a second message to an LPA.

In this embodiment of the present invention, the second message includes at least the eUICC identifier, the first identifier, the token, the address of the SM-DP+ server, the address of the SM-DS server, and a digital certificate of the SM-DS server.

The LPA sends a third message to the SM-DP+ server.

In this embodiment of the present invention, after receiving the second message, the LPA sends the third message to the SM-DP+ server.

The third message includes at least the eUICC identifier, the first identifier, the token, the digital certificate of the SM-DS server, and the address of the SM-DS server that are in the second message.

Optionally, after receiving the second message, the LPA further triggers the eUICC to generate a random number. After generating the random number, the eUICC returns the random number to the LPA. The third message may further include the random number generated by the eUICC.

The SM-DP+ server verifies the token.

In this embodiment of the present invention, after receiving the third message, the SM-DP+ server verifies the token according to at least the eUICC identifier, the digital certificate of the SM-DS server, and the address of the SM-DS server.

Optionally, a specific implementation in which the SM-DP+ server verifies the token may be as follows: The SM-DP+ server verifies the digital certificate of the SM-DS server, and after the verification succeeds, obtains a public key of the SM-DS server from the digital certificate of the SM-DS server; the SM-DP+ server decrypts the token by using the public key of the SM-DS server, to obtain a message digest, and then performs a hash operation on the eUICC identifier and the address of the SM-DS server that are in the third message, to obtain a new message digest; the SM-DP+ server compares the message digest, obtained after decryption, with the new message digest; and if the message digest obtained after decryption is consistent with the new message digest, the SM-DP+ server determines that the verification on the token succeeds.

After determining that the verification on the token succeeds, the SM-DP+ server performs step <NUM>.

The SM-DP+ server verifies whether an address of the SM-DS server matches an address of an SM-DS server corresponding to a first identifier, and verifies whether an eUICC identifier matches an eUICC identifier corresponding to the first identifier.

In this embodiment of the present invention, the SM-DP+ server verifies whether the address of the SM-DS server in the third message matches the address that is of the SM-DS server corresponding to the first identifier and that is sent by a communications operator, and verifies whether the eUICC identifier in the third message matches the eUICC identifier that is sent by the communications operator and that is corresponding to the first identifier.

If the address of the SM-DS server in the third message matches the address that is of the SM-DS server corresponding to the first identifier and that is sent by the communications operator, and the eUICC identifier in the third message matches the eUICC identifier that is sent by the communications operator and that is corresponding to the first identifier, the SM-DP+ server performs step <NUM>.

The SM-DP+ server determines that authentication on the identity of the eUICC succeeds.

In the prior art, when the SM-DP+ server verifies the identity of the eUICC, the SM-DP+ server needs to generate a random number, and sends the random number to the eUICC by using the LPA. The eUICC generates a digital signature according to the random number, and sends, by using the LPA, a digital certificate of the eUICC and the digital signature to the SM-DP+ server for verification. If the verification performed by the SM-DP+ server on the digital signature according to a public key in the digital certificate of the eUICC succeeds, the SM-DP+ server determines that the verification on the identity of the eUICC succeeds. It can be seen that in the prior art, when the SM-DP+ server verifies the identity of the eUICC, the SM-DP+ server, the LPA, and the eUICC exchange a large amount of information, and an interaction procedure is extremely complex. After steps <NUM> to <NUM> shown in <FIG> are performed, the SM-DS server generates the token, and then sends the token to the SM-DP+ server by using the LPA, and the SM-DP+ server may accurately verify the identity of the eUICC according to the token. It can be seen that after steps <NUM> to <NUM> shown in <FIG> are performed, the interaction procedure in a process in which the SM-DP+ server verifies the identity of the eUICC is simplified, so that a whole operation procedure is more simplified.

The SM-DP+ server generates a first digital signature according to at least a random number and a remote profile management command corresponding to the first identifier.

In this embodiment of the present invention, when an event corresponding to the first identifier is a remote profile management event, after the SM-DP+ server determines that the authentication on the identity of the eUICC succeeds, the SM-DP+ server generates the first digital signature according to at least the random number included in the third message and the remote profile management command corresponding to the first identifier.

In this embodiment of the present invention, a specific implementation in which the SM-DP+ server generates the first digital signature according to at least the random number included in the third message and the remote profile management command corresponding to the first identifier may be as follows: The SM-DP+ server generates a data structure according to at least the random number included in the third message and the remote profile management command corresponding to the first identifier, and then calculates the first digital signature according to the data structure by using a private key of the SM-DP+ server.

Optionally, a specific implementation in which the SM-DP+ server generates the first digital signature according to at least the random number included in the third message and the remote profile management command corresponding to the first identifier may be as follows: The SM-DP+ server performs a hash operation on at least the random number included in the third message and the remote profile management command corresponding to the first identifier, to obtain a message digest, and then encrypts the message digest by using a private key of the SM-DP+ server, to obtain the first digital signature.

The SM-DP+ server sends at least the first digital signature, the remote profile management command, and a digital certificate of the SM-DP+ server to the eUICC by using the LPA.

The eUICC verifies the digital certificate of the SM-DP+ server, and verifies the first digital signature by using at least the random number, a public key in the digital certificate of the SM-DP+ server, and the remote profile management command.

In this embodiment of the present invention, after the verification on the digital certificate of the SM-DP+ server succeeds, the eUICC extracts the public key in the digital certificate of the SM-DP+ server, and verifies the first digital signature by using at least the random number, the public key in the digital certificate of the SM-DP+ server, and the remote profile management command.

Optionally, a specific implementation in which the eUICC verifies the first digital signature by using at least the random number, the public key in the digital certificate of the SM-DP+ server, and the remote profile management command may be as follows: The eUICC decrypts the first digital signature by using the public key in the digital certificate of the SM-DP+ server, to obtain a message digest, and then performs a hash operation on the random number and the remote profile management command, to obtain a new message digest; the eUICC compares the message digest, obtained after decryption, with the new message digest; and if the message digest obtained after decryption is consistent with the new message digest, the eUICC determines that the verification on the first digital signature succeeds.

If determining that the verification on the first digital signature succeeds, the eUICC performs step <NUM>.

After steps <NUM> to <NUM> described in <FIG> are performed, the SM-DP+ server generates the first digital signature according to at least the remote profile management command corresponding to the first identifier and the random number generated by the eUICC, and sends at least the first digital signature, the remote profile management command, and the digital certificate of the SM-DP+ server to the eUICC by using the LPA. The eUICC verifies the first digital signature, and after the verification succeeds, the eUICC determines that verification on an identity of the SM-DP+ server succeeds. In addition, because the first digital signature is generated according to at least the remote profile management command, when the verification on the first digital signature succeeds, the eUICC may further determine that the remote profile management command is not tampered with by an unauthorized device. Therefore, the first digital signature is generated according to at least the remote profile management command and the random number generated by the eUICC, and provided that the verification on the first digital signature succeeds, the eUICC can determine that the verification on the identity of the SM-DP+ server succeeds and that the remote profile management command is not tampered with by the unauthorized device, so that an operation procedure is simplified. In addition, the eUICC executes the remote profile management command only after determining that the remote profile management command is not tampered with by the unauthorized device, so that security of remote profile management is improved.

In an optional implementation, after the verification performed by the eUICC on the digital certificate and the digital signature succeeds, and before the eUICC executes the remote profile management command, the eUICC may further perform the following steps:.

In this implementation, after receiving the fourth message, the LPA may present the user confirmation by using an LUI module. Optionally, the target command may be a profile activation command, a profile deactivation command, or a profile deletion command.

After this implementation is executed, when a profile needs to be activated, deactivated, or deleted, confirmation is requested from a user, so that security of profile information in the eUICC can be effectively improved, and the user can know an operation that is performed on the profile by a remote device.

In an optional implementation, after the eUICC executes the remote profile management command, the eUICC may further perform the following steps:.

Correspondingly, after receiving the remote profile management result that is sent by the eUICC and that includes at least the result code and the digital signature generated according to at least the result code, the LPA sends, to the SM-DP+ server, a fifth message that includes at least the result code and the digital signature generated according to at least the result code.

Correspondingly, after the SM-DP+ server receives the fifth message, the SM-DP+ server may further perform the following steps:.

After the eUICC executes the remote profile management command, this implementation is executed, and the SM-DS server can delete, in a timely manner, the address of the SM-DP+, the eUICC identifier, and the first identifier that are stored in the SM-DS server, so that storage space of the SM-DS server can be saved.

The foregoing mainly describes the solutions provided in the embodiments of the present invention from a perspective of interaction between network elements. It can be understood that, to implement the foregoing functions, each network element such as the SM-DP+ server, the SM-DS server, the LPA, or the eUICC includes a corresponding hardware structure and/or software module for performing each function. A person skilled in the art may be easily aware that units and algorithm steps in the examples described with reference to the embodiments disclosed in this specification may be implemented in a form of hardware or a combination of hardware and computer software in the present invention. Whether a function is implemented by hardware or by computer software driving hardware depends on particular applications and design constraint conditions of the technical solutions.

In the embodiments of the present invention, the SM-DP+ server, the SM-DS server, the eUICC, and the like may be divided into function units according to the foregoing method examples. For example, each function unit may be obtained through division according to a corresponding function, or two or more functions may be integrated into one processing unit. It should be noted that the unit division in the embodiments of the present invention is an example, and is only logical function division. There may be another division manner in an actual implementation.

<FIG> shows a possible schematic structural diagram of the SM-DP+ server in the foregoing embodiments when an integrated unit is used. The SM-DP+ server <NUM> includes a processing unit <NUM> and a communications unit <NUM>. The processing unit <NUM> is configured to control and manage an action of the SM-DP+ server. For example, the processing unit <NUM> is configured to support the SM-DP+ server in performing processes <NUM>, <NUM>, and <NUM> in <FIG> and processes <NUM> to <NUM>, <NUM> to <NUM>, and <NUM> in <FIG> and <FIG>, and/or is configured to perform other technical processes described in this specification. Alternatively, the processing unit <NUM> is configured to support the SM-DP+ server in performing processes <NUM> to <NUM> in <FIG> and <FIG>, and/or is configured to perform other technical processes described in this specification. The communications unit <NUM> is configured to support the SM-DP+ server in communicating with another network entity, for example, communicating with the function module or the network entity shown in <FIG>. The SM-DP+ server may further include a storage unit <NUM>, configured to store program code and data of the SM-DP+ server.

The processing unit <NUM> may be a processor or a controller, for example, may be a central processing unit (Central Processing Unit, CPU), a general purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application-Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or another programmable logic component, a transistor logic component, a hardware component, or any combination thereof. The processing unit <NUM> may implement or perform various example logic blocks, modules, and circuits that are described with reference to content disclosed in the present invention. Alternatively, the processor may be a combination that implements a computation function, for example, a combination of one or more microprocessors, or a combination of a DSP and a microprocessor. The communications unit <NUM> may be a transceiver, a transceiver circuit, a communications interface, or the like. The storage unit <NUM> may be a memory.

When the processing unit <NUM> is a processor, the communications unit <NUM> is a transceiver, and the storage unit <NUM> is a memory, the SM-DP+ server in this embodiment of the present invention may be an SM-DP+ server shown in <FIG>.

Referring to <FIG>, the SM-DP+ server <NUM> includes a processor <NUM>, a transceiver <NUM>, a memory <NUM>, and a bus <NUM>. The transceiver <NUM>, the processor <NUM>, and the memory <NUM> are interconnected by using the bus <NUM>. The bus <NUM> may be a peripheral component interconnect (peripheral component interconnect, PCI for short) bus, an extended industry standard architecture (extended industry standard architecture, EISA for short) bus, or the like. The bus <NUM> may be classified into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in <FIG> for representation, but it does not indicate that there is only one bus or one type of bus.

<FIG> shows a possible schematic structural diagram of the eUICC in the foregoing embodiments when an integrated unit is used. The eUICC <NUM> includes a processing unit <NUM> and a communications unit <NUM>. The processing unit <NUM> is configured to control and manage an action of the eUICC. For example, the processing unit <NUM> is configured to support the eUICC in performing processes <NUM> and <NUM> in <FIG> and processes <NUM>, <NUM>, and <NUM> to <NUM> in <FIG> and <FIG>, and/or is configured to perform other technical processes described in this specification. Alternatively, the processing unit <NUM> is configured to support the eUICC in performing processes <NUM> and <NUM> in <FIG>, and/or is configured to perform other technical processes described in this specification. The communications unit <NUM> is configured to support the eUICC in communicating with another network entity, for example, communicating with the function module or the network entity shown in <FIG>. The eUICC may further include a storage unit <NUM>, configured to store program code and data of the eUICC.

When the processing unit <NUM> is a processor, the communications unit <NUM> is a transceiver, and the storage unit <NUM> is a memory, the eUICC in this embodiment of the present invention may be an eUICC shown in <FIG>.

Referring to <FIG>, the eUICC <NUM> includes a processor <NUM>, a transceiver <NUM>, a memory <NUM>, and a bus <NUM>. The transceiver <NUM>, the processor <NUM>, and the memory <NUM> are interconnected by using the bus <NUM>. The bus <NUM> may be a peripheral component interconnect (peripheral component interconnect, PCI for short) bus, an extended industry standard architecture (extended industry standard architecture, EISA for short) bus, or the like. The bus <NUM> may be classified into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in <FIG> for representation, but it does not indicate that there is only one bus or one type of bus.

<FIG> shows a possible schematic structural diagram of the SM-DS server in the foregoing embodiments when an integrated unit is used. The SM-DS server <NUM> includes a processing unit <NUM> and a communications unit <NUM>. The processing unit <NUM> is configured to control and manage an action of the SM-DS server. For example, the processing unit <NUM> is configured to support the SM-DS server in performing processes <NUM> to <NUM> in <FIG>, and/or is configured to perform another process of the technology described in this specification. The communications unit <NUM> is configured to support the SM-DS server in communicating with another network entity, for example, communicating with the function module or the network entity shown in <FIG>. The SM-DS server may further include a storage unit <NUM>, configured to store program code and data of the SM-DS server.

When the processing unit <NUM> is a processor, the communications unit <NUM> is a transceiver, and the storage unit <NUM> is a memory, the SM-DS server in this embodiment of the present invention may be an SM-DS server shown in <FIG>.

Referring to <FIG>, the SM-DS server <NUM> includes a processor <NUM>, a transceiver <NUM>, a memory <NUM>, and a bus <NUM>. The transceiver <NUM>, the processor <NUM>, and the memory <NUM> are interconnected by using the bus <NUM>. The bus <NUM> may be a peripheral component interconnect (peripheral component interconnect, PCI for short) bus, an extended industry standard architecture (extended industry standard architecture, EISA for short) bus, or the like. The bus <NUM> may be classified into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in <FIG> for representation, but it does not indicate that there is only one bus or one type of bus.

It should be noted that, in the foregoing embodiments, the description of each embodiment has respective focuses. In addition, a person skilled in the art should also appreciate that all the embodiments described in this specification are example embodiments, and the related actions and modules are not necessarily mandatory to the present invention.

A sequence of the steps of the method in the embodiments of the present invention may be adjusted, and some steps may also be combined or deleted according to an actual requirement.

The modules in the terminal in the embodiments of the present invention may be combined, divided, or deleted according to an actual requirement.

The modules in the embodiments of the present invention may be implemented by a universal integrated circuit such as a CPU (Central Processing Unit, central processing unit), or an ASIC (Application Specific Integrated Circuit, application-specific integrated circuit).

Claim 1:
A user terminal, wherein a local profile assistant, LPA, and an embedded universal integrated circuit card, eUICC, (<NUM>, <NUM>) are disposed in the user terminal, wherein the LPA is deployed in the eUICC, or the LPA and the eUICC are deployed independently, and the eUICC comprises a processing unit and a communications unit, wherein
the processing unit is configured to receive, by using the communications unit, at least a first identifier sent by the local profile assistant LPA;
the processing unit is further configured to receive, by using the communications unit, at least a first digital signature and a remote profile management command that are sent by the LPA;
the processing unit is further configured to verify the first digital signature according to at least the first identifier and the remote profile management command; and
the processing unit is further configured to execute the remote profile management command when the verification on the first digital signature succeeds.