CN106416192B - Method and device for configuring embedded universal integrated circuit card - Google Patents

Abstract

An embodiment of the present invention proposes a method for configuring an eUICC, including: the eUICC receives a first message sent by a PM, the first message includes an update profile and an ID of a PD; the eUICC installs the update profile in the In the PD, the first profile profile in the PD is updated to a second profile, wherein the first profile is a configuration profile; the eUICC modifies the attribute of the second profile to a running attribute or a configuration attribute and run properties. In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the update profile from PPer via PM and send the first profile with configuration attributes The profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to assign parameters in the network access credential such as new IMSI and Ki to the second profile again.

Description

Method and device for configuring embedded universal integrated circuit card

technical field

Embodiments of the present invention relate to the communication field, and more specifically, to a method and device for configuring an embedded universal integrated circuit card.

Background technique

The existing subscriber identity module (Subscriber Identity Module, SIM) card or universal integrated circuit card (Universal Integrated Circuit Card, UICC) is generally ordered by the mobile network operator (Mobile Network Operator, MNO) from the card manufacturer, so before leaving the factory The subscription information required to access the mobile network has been downloaded to the card, and the user can directly insert the SIM card or UICC into the terminal to access the mobile network after purchasing the SIM card or UICC. Wherein, the subscription information may include an International Mobile Subscriber Identification Number (International Mobile Subscriber Identification Number, IMSI), an authentication key (Key identifier, Ki), an encryption algorithm, etc. necessary for accessing the mobile network.

However, the embedded UICC card (embedded UICC, eUICC) formed by embedding the traditional UICC card into the terminal by encapsulation or welding is inconvenient to plug and unplug, so it cannot be replaced at will like the traditional UICC card.

The eUICC is not necessarily purchased by the MNO, and may also be purchased by the terminal manufacturer and integrated into the terminal for sale. Therefore, before the eUICC leaves the factory, it is not known who will use it and where it will be used, so it may not contain a profile that can normally access the mobile network, but only a profile that can be accessed to the remote management platform. That is to say, the eUICC may only contain the configuration profile (Provisioning Profile, PP) whose attribute is the provisioning attribute (Provisioning) that is accessed to the Subscription Manager-SecureRouting (SM-SR), and does not include the normal The attribute of accessing the mobile network is an operational profile (Operational Profile, OP) of the operational (Operational) attribute. After the eUICC is embedded in the terminal, it is necessary to use remote management technology to download the profile with the Operational attribute to the eUICC through the subscription management-data preparation unit (Subscription Manager-Data Preparing, SM-DP) and SM-SR, and then the eUICC will The downloaded profile can be used to access the mobile network.

However, if the profile with the Operational attribute to be downloaded and the profile with the Provisioning attribute in the eUICC belong to the same operator, the use of the prior art will result in a waste of network access resources.

Contents of the invention

Embodiments of the present invention provide a method and device for configuring an embedded universal integrated circuit card, which can save network access resources when an operator downloads a profile.

In the first aspect, a method for configuring an embedded universal integrated circuit card eUICC is provided, including:

The eUICC receives a first message sent by the profile manager PM, where the first message includes updating the profile and the ID of the profile domain PD;

The eUICC installs the update profile in the PD, so as to update the first profile in the PD to a second profile, where the first profile is a configuration profile;

The eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the update profile includes a first instruction, and the eUICC modifies the attribute of the second profile to a running attribute or a configuration attribute and a running attribute, include:

The eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes according to the first instruction.

With reference to the first aspect, in the second possible implementation manner of the first aspect, before the eUICC modifies the attribute of the second profile to the running attribute or the configuration attribute and the running attribute, it further includes: the eUICC receiving a second instruction of the PM or the mobile network operator MNO;

The eUICC modifying the attributes of the second profile into running attributes or configuration attributes and running attributes includes: the eUICC modifies the attributes of the second profile into running attributes or configuration attributes and run properties.

With reference to the first aspect or any possible implementation manner of the first aspect above, in a third possible implementation manner of the first aspect, the eUICC installing the update profile in the PD includes:

The eUICC determines whether the size of the available storage space of the PD is sufficient to install the update profile;

If the eUICC determines that the size of the available storage space of the PD is sufficient to install the update profile, install the update profile in the PD;

If the eUICC determines that the size of the available storage space of the PD is not enough to install the update profile, the eUICC allocates a new storage space for the PD, and installs the update profile in the new storage space Or in the available storage space and the new storage space.

In combination with the first aspect or any possible implementation manner of the first aspect above, the fourth possible implementation manner of the first aspect further includes:

The eUICC sends a refresh (REFRESH) active command to the terminal where it is located, so that the terminal restarts the eUICC;

The eUICC uses the second profile to access a mobile network operator MNO.

With reference to the first aspect or any possible implementation manner of the first aspect above, in a fifth possible implementation manner of the first aspect, before the eUICC receives the first message sent by the PM, the method further includes:

The eUICC receives the request message sent by the PM;

The eUICC sends a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

With reference to the first aspect or any possible implementation manner of the first aspect above, in a sixth possible implementation manner of the first aspect, before the eUICC receives the first message sent by the PM, the method further includes:

The eUICC receives the profile download request message sent by the terminal, and the profile download request message includes the ID of the mobile network operator MNO;

When the eUICC determines that the MNO is the MNO to which the first profile belongs, the eUICC sends a second message to the PM according to the profile download request message, and the second message includes the ID of the eUICC and the information of the first profile.

With reference to the first aspect or any possible implementation manner of the first aspect above, in a seventh possible implementation manner of the first aspect, the information of the first profile includes:

The ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

With reference to the first aspect or any possible implementation manner of the first aspect above, in an eighth possible implementation manner of the first aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

In the second aspect, a method for configuring an embedded universal integrated circuit card eUICC is provided, including:

The profile manager PM receives the first message sent by the profile configurator, where the first message includes updating the profile, the identification ID of the eUICC, and the ID of the profile domain PD in the eUICC;

The PM sends a second message to the eUICC according to the ID of the eUICC, the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile on the In the PD, the first profile profile in the PD is updated to a second profile, and the attribute of the second profile is modified to a running attribute or a configuration attribute and a running attribute, wherein the first profile is a configuration profile ;

The PM receives the second response message sent by the eUICC;

The PM sends a first response message to the profile configurator.

In combination with the second aspect, the first possible implementation manner of the second aspect further includes:

The PM sends a first instruction to the eUICC, so that the eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes according to the first instruction.

With reference to the second aspect or the first possible implementation manner of the second aspect, in the second possible implementation manner of the second aspect, before the PM receives the first message sent by the profile configurator, the method further includes:

The PM receives a first request message sent by a mobile network operator MNO, where the first request message includes the ID of the eUICC and the ID of the MNO;

The PM acquires the information of the first profile according to the first request message;

The PM sends a third response message to the MNO, where the third response message includes the information of the first profile.

With reference to the second possible implementation manner of the second aspect, in a third possible implementation manner of the second aspect, the PM obtaining information about the first profile according to the first request message includes:

The PM sends a second request message to the eUICC according to the ID of the eUICC in the first request message;

The PM receives a fourth response message sent by the eUICC, where the fourth response message includes information about the first profile.

With reference to the second possible implementation of the second aspect, in a fourth possible implementation of the second aspect, the information of the first profile is stored in the eUICC information set EIS in the PM,

The PM obtains the information of the first profile according to the first request message, including:

The PM obtains the information of the first profile from the EIS.

With reference to any possible implementation manner of the second aspect, in a fifth possible implementation manner of the second aspect, the PM sends a third response message to the MNO, including:

When the PM determines that the MNO is the MNO to which the first profile belongs, the PM sends a third response message to the MNO.

With reference to the second aspect or the first possible implementation manner of the second aspect, in a sixth possible implementation manner of the second aspect, before the PM receives the first message sent by the profile configurator, the method further includes:

The PM receives a third request message sent by the eUICC, where the third request message includes the ID of the eUICC and information about the first profile;

The PM sends the third request message to the mobile network operator MNO to which the first profile belongs.

With reference to the sixth possible implementation manner of the second aspect, in a seventh possible implementation manner of the second aspect, the information of the first profile includes an ID of a profile configurator that downloaded the first profile;

The PM sends the third request message to the MNO to which the first profile belongs, including:

The PM sends the third request message to the profile configurator such that the profile configurator forwards the third request message to the MNO.

With reference to any possible implementation manner of the second aspect, in an eighth possible implementation manner of the second aspect, the information of the first profile includes:

The ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

With reference to any possible implementation manner of the second aspect, in a ninth possible implementation manner of the second aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

With reference to the second aspect or any possible implementation manner of the second aspect, in a tenth possible implementation manner of the second aspect, the second profile further has a configuration attribute.

In a third aspect, a method for configuring an embedded universal integrated circuit card eUICC is provided, including:

The equipment of the mobile network operator MNO receives the first message sent by the profile manager PM, where the first message includes information about the first profile in the eUICC, where the information about the first profile includes the first The identification ID of the profile and the ID of the profile domain PD where the first profile is located;

The device of the MNO determines the ID of the update profile according to the information of the first profile and updates the subscription information of the first profile in the home subscription server HSS;

The device of the MNO sends a second message to the profile configurator, wherein the second message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD, and the ID of the PM, so that the The profile configurator downloads the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile to the second profile second profile and modify the attributes of the second profile;

The device of the MNO receives the first response message sent by the profile configurator.

With reference to the third aspect, in a first possible implementation manner of the third aspect, after the MNO device receives the first response message sent by the profile configurator, the method further includes:

The MNO sends a second instruction to the eUICC, so that the eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes according to the second instruction.

With reference to the third aspect or the first possible implementation manner of the third aspect, in the second possible implementation manner of the third aspect, before the device of the MNO receives the first message sent by the PM, the method further includes:

The device of the MNO receives the subscription request of the user, and the subscription request includes the ID of the eUICC;

The MNO device sends a request message to the PM according to the subscription request;

The first message is a second response message corresponding to the request message.

With reference to the second possible implementation manner of the third aspect, in a third possible implementation manner of the third aspect, the subscription request further includes the ID of the PM.

With reference to the third aspect or the first possible implementation manner of the third aspect, in a fourth possible implementation manner of the third aspect, the MNO receiving the first message sent by the PM includes:

The device of the MNO receives the first message sent by the PM from the profile configurator.

With reference to the third aspect or any possible implementation manner of the third aspect above, in a fifth possible implementation manner of the third aspect, the first message further includes the ID of the PM and the ID of the eUICC .

With reference to the third aspect or any possible implementation manner of the third aspect above, in a sixth possible implementation manner of the third aspect, the second message further includes key information, so that the profile configuration The device uses the key to protect the transmission of the update profile.

With reference to the third aspect or any possible implementation manner of the third aspect above, in a seventh possible implementation manner of the third aspect, the information of the first profile further includes available storage of the PD where the first profile is located. The size of the space, the second message also includes the size of the available storage space of the PD where the first profile is located, so that the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient When installing the update profile, download the update profile to the PD of the eUICC through the PM.

With reference to the third aspect or any possible implementation manner of the third aspect above, in an eighth possible implementation manner of the third aspect, the information of the first profile further includes at least one of the following:

The ID of the MNO to which the first profile belongs, the attribute of the first profile, the ID of the profile configurator that downloads the first profile, and the size of the available storage space of the PD where the first profile is located.

In the fourth aspect, an embedded universal integrated circuit card eUICC is provided, including:

The receiving unit is configured to receive the first message sent by the profile manager PM, the first message includes updating the profile and the identification ID of the profile domain PD;

a processing unit, configured to install the update profile in the PD, so as to update the first profile in the PD to a second profile, wherein the first profile is a configuration profile;

The processing unit is further configured to modify the attributes of the second profile into running attributes or configuration attributes and running attributes.

With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the update profile includes a first instruction, and the processing unit is specifically configured to:

According to the first instruction, the attributes of the second profile are modified to run attributes or configuration attributes and run attributes.

With reference to the fourth aspect, in a second possible implementation manner of the fourth aspect, the receiving unit is further configured to receive a second instruction from the PM or a mobile network operator MNO;

The processing unit is specifically configured to, according to the second instruction, modify the attributes of the second profile to run attributes or configuration attributes and run attributes.

With reference to the fourth aspect or any possible implementation manner of the fourth aspect above, in a third possible implementation manner of the fourth aspect, the processing unit is specifically configured to:

judging whether the size of the available storage space of the PD is sufficient to install the update profile;

If it is determined that the size of the available storage space of the PD is sufficient to install the update profile, installing the update profile in the PD;

If it is determined that the size of the available storage space of the PD is not enough to install the update profile, allocate a new storage space for the PD, and install the update profile in the new storage space or the available storage space and in the new storage space.

With reference to the fourth aspect or any possible implementation manner of the fourth aspect above, in a fourth possible implementation manner of the fourth aspect, a sending unit is further included, and the sending unit is further configured to: send the terminal where the sending a refresh proactive command, so that the terminal restarts the eUICC;

The processing unit is further configured to use the second profile to access a mobile network operator MNO.

With reference to the fourth aspect or any possible implementation manner of the fourth aspect above, in a fifth possible implementation manner of the fourth aspect, a sending unit is further included, and the receiving unit is further configured to receive the PM transmission request message;

The sending unit is further configured to send a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

With reference to the fourth aspect or any possible implementation of the fourth aspect above, in a sixth possible implementation of the fourth aspect, the receiving unit is further configured to receive a profile download request message sent by the terminal, where , the profile download request message includes the identification ID of the mobile network operator MNO;

The sending unit is further configured to send a second message to the PM according to the profile download request message when it is determined that the MNO is the MNO to which the first profile belongs, and the second message includes the eUICC ID and information of the first profile.

With reference to the fourth aspect or any possible implementation manner of the fourth aspect above, in a seventh possible implementation manner of the fourth aspect, the information of the first profile includes:

The identification ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located.

With reference to the fourth aspect or any possible implementation manner of the fourth aspect above, in an eighth possible implementation manner of the fourth aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

In a fifth aspect, a device for configuring an embedded universal integrated circuit card eUICC is provided, the device is a profile manager PM, including:

a receiving unit, configured to receive a first message sent by the profile configurator, where the first message includes updating the profile, the identification ID of the eUICC, and the ID of the profile domain PD in the eUICC;

a sending unit, configured to send a second message to the eUICC according to the ID of the eUICC, where the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile in In the PD, the first profile in the PD is updated to a second profile, and the attribute of the second profile is modified to be an operation attribute or a configuration attribute and an operation attribute, wherein the first profile is a configuration contour;

The receiving unit is further configured to receive a second response message sent by the eUICC;

The sending unit is further configured to send a first response message to the profile configurator.

With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the sending unit is further configured to:

Sending a first instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to a running attribute or a configuration attribute and a running attribute according to the first instruction.

In combination with the fifth aspect or the first possible implementation manner of the fifth aspect, in the second possible implementation manner of the fifth aspect, a processing unit is further included:

The receiving unit is further configured to receive a first request message sent by a mobile network operator MNO, where the first request message includes the identification ID of the eUICC and the ID of the MNO;

The processing unit is configured to acquire the information of the first profile according to the first request message;

The sending unit is further configured to send a third response message to the MNO, where the third response message includes the information of the first profile.

With reference to the second possible implementation manner of the fifth aspect, in a third possible implementation manner of the fifth aspect, the processing unit is specifically configured to:

sending a second request message to the eUICC according to the ID of the eUICC in the first request message;

Receive a fourth response message sent by the eUICC, where the fourth response message includes information about the first profile.

With reference to the second possible implementation of the fifth aspect, in a fourth possible implementation of the fifth aspect, the information of the first profile is stored in the eUICC information set EIS in the PM,

The processing unit is specifically configured to: acquire the information of the first profile from the EIS.

With reference to any possible implementation manner of the fifth aspect, in a fifth possible implementation manner of the fifth aspect, the sending unit is specifically configured to:

When it is determined that the MNO is the MNO to which the first profile belongs, a third response message is sent to the MNO.

With reference to the fifth aspect or the first possible implementation manner of the fifth aspect, in a sixth possible implementation manner of the fifth aspect, the receiving unit is further configured to receive the third request message sent by the eUICC, The third request message includes the ID of the eUICC and the information of the first profile;

The sending unit is further configured to send the third request message to the mobile network operator MNO to which the first profile belongs.

With reference to the sixth possible implementation manner of the fifth aspect, in a seventh possible implementation manner of the fifth aspect, the information of the first profile includes an ID of a profile configurator that downloaded the first profile;

The sending unit is specifically used for:

sending the third request message to the profile configurator such that the profile configurator forwards the third request message to the MNO.

With reference to any possible implementation manner of the fifth aspect, in an eighth possible implementation manner of the fifth aspect, the information of the first profile includes:

The ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located.

With reference to any possible implementation manner of the fifth aspect, in a ninth possible implementation manner of the fifth aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

With reference to the fifth aspect or any possible implementation manner of the fifth aspect, in a tenth possible implementation manner of the fifth aspect, the second profile further has a configuration attribute.

In the sixth aspect, a device for configuring an embedded universal integrated circuit card eUICC is provided, the device is a device of a mobile network operator MNO, including:

a receiving unit, configured to receive a first message sent by a profile manager PM, where the first message includes information about a first profile in the eUICC, where the information about the first profile includes the first The identification ID of the profile and the ID of the profile domain PD where the first profile is located;

A processing unit, configured to determine the ID of the update profile and update the subscription information of the first profile in the home subscription server HSS according to the information of the first profile;

a sending unit, configured to send a second message to the profile configurator, where the second message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD, and the ID of the PM, so that the The profile configurator downloads the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile to the second profile second profile and modify the attributes of the second profile;

The receiving unit is further configured to receive the first response message sent by the profile configurator.

With reference to the sixth aspect, in a first possible implementation manner of the sixth aspect, the sending unit is further configured to send a second instruction to the eUICC, so that the eUICC sends the The attributes of the second profile are changed to run attributes or configuration attributes and run attributes.

With reference to the sixth aspect or the first possible implementation manner of the sixth aspect, in a second possible implementation manner of the sixth aspect, the receiving unit is further configured to receive a subscription request from a user, and the subscription request includes the ID of the eUICC;

The sending unit is further configured to send a request message to the PM according to the subscription request;

The first message is a second response message corresponding to the request message.

With reference to the second possible implementation manner of the sixth aspect, in a third possible implementation manner of the sixth aspect, the subscription request further includes the ID of the PM.

With reference to the sixth aspect or the first possible implementation manner of the sixth aspect, in a fourth possible implementation manner of the sixth aspect, the receiving unit is specifically configured to:

The first message sent by the PM is received from the profile configurator.

With reference to the sixth aspect or any possible implementation manner of the sixth aspect, in a fifth possible implementation manner of the sixth aspect, the first message further includes the ID of the PM and the ID of the eUICC.

With reference to the sixth aspect or any possible implementation manner of the sixth aspect, in a sixth possible implementation manner of the sixth aspect, the second message further includes key information, so that the profile configurator The transmission of the update profile is protected with the key.

With reference to the sixth aspect or any possible implementation manner of the sixth aspect, in a seventh possible implementation manner of the sixth aspect, the information of the first profile further includes the available storage space of the PD where the first profile is located The second message also includes the size of the available storage space of the PD where the first profile is located, so that the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient to install When updating the profile, download the updated profile to the PD of the eUICC through the PM.

With reference to the sixth aspect or any possible implementation manner of the sixth aspect, in an eighth possible implementation manner of the sixth aspect, the information of the first profile further includes at least one of the following:

The ID of the MNO to which the first profile belongs, the attribute of the first profile, the ID of the profile configurator that downloads the first profile, and the size of the available storage space of the PD where the first profile is located.

In the seventh aspect, an embedded universal integrated circuit card eUICC is provided, including:

The receiver is configured to receive the first message sent by the profile manager PM, the first message includes updating the profile and the identification ID of the profile domain PD;

A processor, configured to install the updated profile in the PD according to the first message received by the receiver, so as to update the first profile in the PD to a second profile, wherein the The first profile is a configuration profile; it is also used to modify the attributes of the second profile into running attributes or configuration attributes and running attributes.

With reference to the seventh aspect, in a first possible implementation manner of the seventh aspect, the update profile includes a first instruction, and the processor is specifically configured to:

According to the first instruction, the attributes of the second profile are modified to run attributes or configuration attributes and run attributes.

With reference to the seventh aspect, in a second possible implementation manner of the seventh aspect, the receiver is further configured to receive a second instruction from the PM or a mobile network operator MNO;

The processor is specifically configured to, according to the second instruction, modify the attributes of the second profile to run attributes or configuration attributes and run attributes.

With reference to the seventh aspect or any possible implementation manner of the seventh aspect above, in a third possible implementation manner of the seventh aspect, the processor is specifically configured to:

judging whether the size of the available storage space of the PD is sufficient to install the update profile;

If it is determined that the size of the available storage space of the PD is sufficient to install the update profile, installing the update profile in the PD;

If it is determined that the size of the available storage space of the PD is not enough to install the update profile, allocate a new storage space for the PD, and install the update profile in the new storage space or the available storage space and in the new storage space.

With reference to the seventh aspect or any possible implementation manner of the seventh aspect above, in a fourth possible implementation manner of the seventh aspect, the transmitter is configured to: send a refresh active command to the terminal where it is located, making the terminal restart the eUICC;

The processor is further configured to use the second profile to access a mobile network operator MNO.

With reference to the seventh aspect or any possible implementation manner of the seventh aspect above, in a fifth possible implementation manner of the seventh aspect, the receiver is further configured to receive the request message sent by the PM;

The sender is configured to send a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

With reference to the seventh aspect or any possible implementation of the seventh aspect above, in a sixth possible implementation of the seventh aspect, the receiver is further configured to receive a profile download request message sent by the terminal, where , the profile download request message includes the identification ID of the mobile network operator MNO;

The sender is further configured to send a second message to the PM according to the profile download request message when it is determined that the MNO is the MNO to which the first profile belongs, and the second message includes the eUICC ID and information of the first profile.

With reference to the seventh aspect or any possible implementation manner of the seventh aspect above, in a seventh possible implementation manner of the seventh aspect, the information of the first profile includes:

The identification ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located.

With reference to the seventh aspect or any possible implementation manner of the seventh aspect above, in an eighth possible implementation manner of the seventh aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

In an eighth aspect, a device for configuring an embedded universal integrated circuit card eUICC is provided, the device is a profile manager PM, including:

a receiver, configured to receive a first message sent by a profile configurator, where the first message includes an update profile, an identification ID of the eUICC, and an ID of a profile domain PD in the eUICC;

a sender, configured to send a second message to the eUICC according to the ID of the eUICC, where the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile in In the PD, the first profile in the PD is updated to a second profile, and the attribute of the second profile is modified to be an operation attribute or a configuration attribute and an operation attribute, wherein the first profile is a configuration contour;

The receiver is further configured to receive a second response message sent by the eUICC;

The sender is further configured to send a first response message to the profile configurator.

With reference to the eighth aspect, in a first possible implementation manner of the eighth aspect, the transmitter is further configured to:

Sending a first instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to a running attribute or a configuration attribute and a running attribute according to the first instruction.

In combination with the eighth aspect or the first possible implementation manner of the eighth aspect, in the second possible implementation manner of the eighth aspect, the processor further includes:

The receiver is further configured to receive a first request message sent by a mobile network operator MNO, where the first request message includes the identification ID of the eUICC and the ID of the MNO;

The processor is configured to acquire the information of the first profile according to the first request message;

The sender is further configured to send a third response message to the MNO, where the third response message includes the information of the first profile.

With reference to the second possible implementation manner of the eighth aspect, in a third possible implementation manner of the eighth aspect, the processor is specifically configured to:

sending a second request message to the eUICC according to the ID of the eUICC in the first request message;

Receive a fourth response message sent by the eUICC, where the fourth response message includes information about the first profile.

With reference to the second possible implementation manner of the eighth aspect, in a fourth possible implementation manner of the eighth aspect, the information of the first profile is stored in the eUICC information set EIS in the PM,

The processor is specifically configured to: acquire the information of the first profile from the EIS.

With reference to any possible implementation manner of the eighth aspect, in a fifth possible implementation manner of the eighth aspect, the transmitter is specifically configured to:

When it is determined that the MNO is the MNO to which the first profile belongs, a third response message is sent to the MNO.

With reference to the eighth aspect or the first possible implementation manner of the eighth aspect, in a sixth possible implementation manner of the eighth aspect, the receiver is further configured to receive the third request message sent by the eUICC, The third request message includes the ID of the eUICC and the information of the first profile;

The sender is further configured to send the third request message to the mobile network operator MNO to which the first profile belongs.

With reference to the sixth possible implementation manner of the eighth aspect, in a seventh possible implementation manner of the eighth aspect, the information of the first profile includes an ID of a profile configurator that downloaded the first profile;

The transmitter is specifically used for:

sending the third request message to the profile configurator such that the profile configurator forwards the third request message to the MNO.

With reference to any possible implementation manner of the eighth aspect, in an eighth possible implementation manner of the eighth aspect, the information of the first profile includes:

The ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located.

With reference to any possible implementation manner of the eighth aspect, in a ninth possible implementation manner of the eighth aspect, the information of the first profile further includes at least one of the following:

The attributes of the first profile, the ID of the profile configurator that downloaded the first profile, and the size of the available storage space of the PD where the first profile is located.

With reference to the eighth aspect or any possible implementation manner of the eighth aspect, in a tenth possible implementation manner of the eighth aspect, the second profile further has a configuration attribute.

In the ninth aspect, a device for configuring an embedded universal integrated circuit card eUICC is provided, the device is a device of a mobile network operator MNO, including:

a receiver, configured to receive a first message sent by a profile manager PM, where the first message includes information about a first profile in the eUICC, where the information about the first profile includes the first The identification ID of the profile and the ID of the profile domain PD where the first profile is located;

A processor, configured to determine the ID of the update profile and update the subscription information of the first profile in the home subscription server HSS according to the information of the first profile;

a transmitter, configured to send a second message to a profile configurator, wherein the second message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD, and the ID of the PM, so that the The profile configurator downloads the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile to the second profile second profile and modify the attributes of the second profile;

The receiver is further configured to receive the first response message sent by the profile configurator.

With reference to the ninth aspect, in a first possible implementation manner of the ninth aspect, the transmitter is further configured to send a second instruction to the eUICC, so that the eUICC transmits the The attributes of the second profile are changed to run attributes or configuration attributes and run attributes.

With reference to the ninth aspect or the first possible implementation manner of the ninth aspect, in a second possible implementation manner of the ninth aspect, the receiver is further configured to receive a subscription request from a user, and the subscription request includes the ID of the eUICC;

The sender is further configured to send a request message to the PM according to the subscription request;

The first message is a second response message corresponding to the request message.

With reference to the second possible implementation manner of the ninth aspect, in a third possible implementation manner of the ninth aspect, the subscription request further includes the ID of the PM.

With reference to the ninth aspect or the first possible implementation manner of the ninth aspect, in a fourth possible implementation manner of the ninth aspect, the receiver is specifically configured to:

The first message sent by the PM is received from the profile configurator.

With reference to the ninth aspect or any possible implementation manner of the ninth aspect, in a fifth possible implementation manner of the ninth aspect, the first message further includes the ID of the PM and the ID of the eUICC.

With reference to the ninth aspect or any possible implementation manner of the ninth aspect, in a sixth possible implementation manner of the ninth aspect, the second message further includes key information, so that the profile configurator The transmission of the update profile is protected with the key.

With reference to the ninth aspect or any possible implementation manner of the ninth aspect, in a seventh possible implementation manner of the ninth aspect, the information of the first profile further includes the available storage space of the PD where the first profile is located The second message also includes the size of the available storage space of the PD where the first profile is located, so that the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient to install When updating the profile, download the updated profile to the PD of the eUICC through the PM.

With reference to the ninth aspect or any possible implementation manner of the ninth aspect, in an eighth possible implementation manner of the ninth aspect, the information of the first profile further includes at least one of the following:

The ID of the MNO to which the first profile belongs, the attribute of the first profile, the ID of the profile configurator that downloads the first profile, and the size of the available storage space of the PD where the first profile is located.

In a tenth aspect, a method for configuring an eUICC is provided, including: a profile configurator PPer receiving a request message sent by a device of the MNO, wherein the request message includes the ID of the eUICC, the ID of updating the profile, and the ID in the eUICC. The ID of the PD and the ID of the PM, wherein the first profile in the PD in the eUICC is a configuration profile;

The PPer determines the update profile according to the ID of the update profile;

The PPer sends a first message to the PM according to the ID of the PM, the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that the PM sending the update profile to the eUICC, and the eUICC updates the first profile in the PD to the second profile according to the update profile. Wherein, the second profile has a running attribute;

The PPer receives the first response message sent by the PM;

The PPer sends a second response message to the device of the MNO.

In an eleventh aspect, a device for configuring eUICC is provided, the device is PPer, including:

The receiving unit is configured to receive a request message sent by a device of a mobile network operator MNO, wherein the request message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD in the eUICC, and the ID of the PM. Wherein, the first profile in the PD in the eUICC is a configuration profile;

a processing unit, configured to determine the updated profile according to the ID of the updated profile;

a sending unit, configured to send a first message to the PM according to the ID of the PM, where the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that all The PM sends the update profile to the eUICC, and the eUICC updates the first profile in the PD to a second profile according to the update profile, where the second profile has a running attribute;

a receiving unit, further configured to receive the first response message sent by the PM;

The sending unit is further configured to send a second response message to the device of the MNO.

In a twelfth aspect, a device for configuring eUICC is provided, the device is PPer, including:

The receiver is configured to receive a request message sent by a device of a mobile network operator MNO, where the request message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD in the eUICC, and the ID of the PM. Wherein, the first profile in the PD in the eUICC is a configuration profile;

a processor, configured to determine the update profile according to the ID of the update profile;

a sender, configured to send a first message to the PM according to the ID of the PM, where the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that all The PM sends the update profile to the eUICC, and the eUICC updates the first profile in the PD to a second profile according to the update profile, where the second profile has a running attribute;

a receiver, further configured to receive the first response message sent by the PM;

The sender is further configured to send a second response message to the device of the MNO.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the update profile from PPer via PM and send the first profile with configuration attributes The profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to assign parameters in the network access credential such as new IMSI and Ki to the second profile again.

Description of drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some of the present invention. Embodiments, for those of ordinary skill in the art, other drawings can also be obtained according to these drawings without paying creative labor.

Figure 1 is a schematic diagram of the logical architecture of the eUICC.

Fig. 2 is an interaction diagram of a method for configuring an eUICC according to an embodiment of the present invention.

Fig. 3 is an interaction diagram of a method for configuring an eUICC according to another embodiment of the present invention.

Fig. 4 is an interaction diagram of a method for configuring an eUICC according to another embodiment of the present invention.

Fig. 5 is a flowchart of a method for configuring an eUICC according to an embodiment of the present invention.

Fig. 6 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention.

Fig. 7 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention.

Fig. 8 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention.

Fig. 9 is a structural block diagram of an eUICC according to an embodiment of the present invention.

Fig. 10 is a structural block diagram of a device for configuring eUICC according to an embodiment of the present invention.

Fig. 11 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention.

Fig. 12 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention.

Fig. 13 is a structural block diagram of an eUICC according to another embodiment of the present invention.

Fig. 14 is a structural block diagram of a device for configuring eUICC according to an embodiment of the present invention.

Fig. 15 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention.

Fig. 16 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In the embodiment of the present invention, the SM-SR can also be called a profile manager (Profile Manager, PM), which is used to establish a secure communication channel to the eUICC, and can manage the profile on the eUICC, such as profile transmission, activation, deactivation, delete etc. And the descriptions of subsequent embodiments of the present invention all use PM to represent SM-SR.

In the embodiment of the present invention, the SM-DP can also be called a profile provisioner (Profile Provisioner, PPer), which can generate a profile that can be downloaded to the eUICC according to the information provided by the MNO, and download the profile to the eUICC. In addition, in the descriptions of subsequent embodiments of the present invention, PPer is used to represent SM-DP.

In the embodiment of the present invention, profile refers to a collection of file structures, data and application programs configured or stored in the eUICC, and may include one or more network access applications and corresponding network access credentials. For example, the network access credentials include IMSI, Ki, and so on. Optionally, a profile may also be called a user information set, which is not limited in the present invention.

In this embodiment of the present invention, a profile may have a configuration (Provisioning) attribute and/or an operation (Operational) attribute.

Among them, the configuration profile can be understood as a profile whose attribute is the Provisioning attribute, and the operation profile can be understood as a profile whose attribute is the Operational attribute. Or, it can also be said that the configuration profile is a profile with the Provisioning attribute, and the running profile is a profile with the Operational attribute.

The configuration profile can include one or more network access applications and corresponding network access credentials, which are mainly used to provide communication capabilities between eUICC and PM for eUICC and profile management (such as for PM to download new profiles, activate , deactivate, delete profile, etc.).

The running profile can include one or more network access applications and corresponding network access credentials. The terminal and eUICC can use the running profile to access all the networks allowed by the profile contract. Its function is similar to that of the existing UICC card.

However, it should be noted that a certain profile can also have Provisioning attributes and Operational attributes at the same time.

Then, it can be understood that the profile with the Provisioning attribute may be a configuration profile, or it may be a profile with both the Provisioning attribute and the Operational attribute. A profile with an Operational attribute may be a running profile, or a profile with both a Provisioning attribute and an Operational attribute.

In addition, in this embodiment of the present invention, an attribute may also be called a type or a category (type). For example, the configuration profile may be a profile whose category is Provisioning, and the running profile may be a profile whose category is Operational. Subsequent embodiments of the present invention use attributes to represent attributes or types or categories.

In addition, in the embodiments of the present invention, a terminal (Terminal) may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a mobile terminal, a wireless communication device, a user Proxy, user device or user equipment (User Equipment, UE). For example, a terminal may be a cellular phone, a cordless phone, a Session Initiation Protocol (Session Initiation Protocol, SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA), a capable handheld, computing, or other processing device connected to a wireless modem. The present invention is not limited thereto.

Figure 1 is a schematic diagram of the logical architecture of the eUICC. The eUICC 10 shown in FIG. 1 includes at least one profile domain (Profile Domain, PD) 101 , and profiles are stored in the PD 101 . The eUICC 10 also includes an eUICC PM 102, which stores some security keys for secure communication with the PM, and establishes secure communication with the PM. The eUICC 10 also includes an operating system (Operating System, OS) 103 .

Wherein, the profile stored in the PD 101 may belong to the MNO 20, and the profile may be acquired from the PPer 30 via the PM40.

Fig. 2 is an interaction diagram of a method for configuring an eUICC according to an embodiment of the present invention. FIG. 2 includes eUICC 10 , MNO 20 , PPer 30 and PM 40 .

Wherein, the PM 40 may be located at the network side, or the PM 40 may also be located at the terminal, which is not limited in the present invention.

Wherein, PPer 30 is located at the network side.

In addition, the eUICC 10 stores a first profile, the first profile has a Provisioning attribute, and the first profile is a configuration profile, and the MNO to which the first profile belongs is the MNO 20 .

201. The MNO 20 receives a subscription request from a user. Wherein, the subscription request includes an identification (ID) of the eUICC.

For example, the user can provide the ID of the eUICC to the MNO 20 through the official website of the MNO, so as to request the MNO to download a profile capable of accessing the operator's network to the terminal where the eUICC is located.

For another example, the user may use the terminal where the eUICC 10 is located to send a specific message to the MNO 20 to request the MNO to download a profile capable of accessing the operator's network to the terminal where the eUICC is located.

As an example, the MNO 20 may determine the ID of the PM according to the ID of the eUICC provided by the user.

Or, as another example, the user may also provide the ID of the PM while providing the ID of the eUICC. That is, the subscription request may also include the ID of the PM. The PM is the PM currently managing the eUICC.

Optionally, the user can also provide the MNO 20 with information such as the ID of the PM and the address of the PM.

It can be understood that, in the embodiment of the present invention, the user's subscription request is made to the MNO to which the first profile belongs. That is to say, the embodiment of the present invention is applied to a scenario where the profile that the user wants to download and the first profile stored in the eUICC belong to the same operator.

202. The MNO 20 sends a first request message to the PM 40. Wherein, the first request message includes the ID of the eUICC and the ID of the MNO 20 .

Wherein, the ID of the eUICC included in the first request message is obtained from the subscription request in 201 .

Specifically, in the embodiment of the present invention, the first request message is used to request to acquire profile information in the eUICC.

It can be understood that in 201, the MNO 20 may obtain the ID of the PM from the subscription request, or the MNO 20 may determine the ID of the PM according to the ID of the eUICC in the subscription request. Then, the PM 40 in 202 is the PM corresponding to the ID of the PM obtained or determined in 201 .

It can be understood that, in 202, the MNO 20 generates a first request message according to the subscription request, and sends the first request message to the PM 40 . And the ID of the PM 40 may be included in the subscription request, or may be determined by the MNO 20 according to the eUICC ID in the subscription request.

203. The PM 40 sends a second request message to the eUICC 10.

Specifically, the second request message is used to request to acquire profile information in the eUICC.

Specifically, the PM 40 can communicate with the eUICC PM in the eUICC 10 . That is, the PM 40 may send the second request message to the eUICC PM in the eUICC 10 .

It should be noted that before 203, mutual authentication can be performed between PM 40 and eUICC 10 . For example, a symmetric key authentication method may be used for two-way authentication, or an authentication method based on a public key infrastructure (Public Key Infrastructure, PKI), or other authentication methods may be used, which is not limited in the present invention.

204, the eUICC 10 sends the second response message to the PM 40. The second response message includes information about the first profile.

Specifically, after receiving the second request message, the eUICC PM in the eUICC 10 can acquire the information of the first profile from the PD in the eUICC 10 .

Wherein, the information of the first profile may include the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

Optionally, the information of the first profile may also include at least one of the following: the attribute of the first profile, the ID of the PPer that downloaded the first profile, and the size of the storage space of the PD where the first profile is located . Wherein, the first profile is previously downloaded from the PPer.

It can be understood that the attribute of the first profile is a Provisioning attribute, that is, the first profile is a configuration profile.

It can be understood that, in 204, the eUICC 10 generates a second response message according to the second request message, and sends the second response message to the PM 40 . Wherein, the second response message includes the information of the first profile.

205. The PM 40 judges whether the MNO 20 is the MNO to which the first profile belongs. If PM 40 determines that MNO 20 is the MNO to which the first profile belongs, PM 40 sends a first response message to MNO 20 . The first response message includes information about the first profile.

Specifically, the first request message received by the PM 40 in 202 includes the ID of the MNO 20, which may be recorded as the first ID here. The second response message received by the PM 40 in 204 includes the ID of the MNO to which the first profile belongs, which may be recorded as the second ID here.

Then, in 205, the PM 40 judges whether the first ID is the same as the second ID. If they are the same, PM 40 determines that MNO20 is the MNO to which the first profile belongs.

206. The MNO 20 determines the ID of the update profile (update profile) and updates the subscription of the first profile in the home subscription server (Home Subscriber Server, HSS) according to the ID of the first profile and the subscription request in the information of the first profile. information.

It should be noted that in the embodiment of the present invention, updating a profile (update profile) may include updating a configuration profile to a collection of file structures, data and application programs required to run the profile, generally excluding network access applications and corresponding network interface into the letter of trust.

Specifically, the MNO 20 judges whether the first profile can be updated according to the subscription request in 201 and the information of the first profile. If the MNO 20 determines that the first profile can be updated, the MNO 20 further determines which update profile to use according to the subscription request of the user, that is, determines the ID of the update profile. And further update the subscription information corresponding to the first profile in the HSS. For example, the MNO 20 may update the subscription data in the HSS, where the updated subscription data may be voice service activation, access point name (Access Point Name, APN) modification, and so on.

For example, a subscription code may be included in the subscription request. The MNO 20 may store the corresponding relationship between the ID of the Profile, the subscription code, and the ID of the updated profile. Then, the MNO 20 can search the corresponding relationship to determine the ID of the updated profile corresponding to both the ID of the first profile and the subscription code.

207. The MNO 20 sends a third request message to the PPer 30. The third request message includes the ID of the eUICC10, the ID of the PM40, the ID of the updated profile, and the ID of the PD where the first profile is located.

For example, the MNO 20 may store the correspondence between the ID of the updated profile and the ID of the PPer, then the MNO 20 may send the third request message to the corresponding PPer according to the ID of the updated profile.

In addition, the third request message may also include key information, so that the PPer 30 uses the key to protect the transmission of the update profile. For example, the MNO 20 may also store the corresponding relationship between profile IDs and keys. In this way, the MNO 20 can determine the key information according to the ID of the first profile.

Wherein, the key may be obtained by the MNO 20 from another PPer responsible for downloading the first profile to the eUICC 10 previously. Specifically, when the first profile is downloaded to the eUICC 10, a key is negotiated between the other PPer and the eUICC 10 to protect the transmission of the first profile. Here, the key used when downloading the first profile is referred to as an old key. After completing the download of the first profile, the other PPer can save the old key; or the other PPer can also send the old key to the MNO 20 and delete the old key.

It should be noted that in the embodiment of the present invention, the other PPer and the PPer 30 may be the same PPer, or may be two different PPer, which is not limited in the present invention.

Then, correspondingly, it can be understood that the key information included in the third request message may be the old key information.

Optionally, if the information of the first profile in the second response message and the first response message includes the size of the available storage space of the PD where the first profile is located, then the third request message may also include the The size of the available storage space of the PD where the first profile is located.

Optionally, the third request message may also include the ID of the first profile.

208. The PPer 30 determines the update profile according to the update profile ID in the third request message.

Specifically, the PPer 30 may select an update profile corresponding to the update profile ID from multiple update profiles stored in the PPer 30 according to the update profile ID.

It should be noted that before the embodiment of the present invention, the update profile generated according to the operator's request may be stored on the PPer 30 .

For example, operator A has profile A with configuration attributes, profile B with operation attributes, and profile C with operation attributes. Then, the update profile corresponding to operator A may include two. For example, a first update profile from profile A to profile B and a second update profile from profile A to profile C may be included.

209. The PPer 30 sends the first message to the PM 40 according to the ID of the PM in the third request message. Wherein, the first message includes the updated profile, the ID of the eUICC, and the ID of the PD where the first profile is located.

Optionally, the update profile may include a first instruction for instructing the eUICC 10 to modify the attributes of the profile in the PD.

Optionally, if the third request message includes the size of the available storage space of the PD where the first profile is located, then the PPer 30 may first determine the size of the updated profile. And it is judged whether the size of the available storage space of the PD where the first profile is located can accommodate the updated profile. When the PPer 30 determines that the size of the available storage space of the PD where the first profile resides can accommodate the updated profile, it sends the first message to the PM 40 . For example, when the PPer 30 determines that the size of the available storage space of the PD where the first profile is located is sufficient to install the updated profile, the first message is sent to the PM 40 . Further, the first message may include indication information, which is used to indicate that the size of the available storage space of the PD where the first profile is determined by the PPer 30 can accommodate the updated profile.

Optionally, as an example, if the PPer 30 is the PPer that previously downloaded the first profile, and the old key is stored in the PPer 30, then the PPer 30 may use the old key to protect the transmission of the updated profile. That is, the update profile can be encrypted with the old key.

Optionally, as another example, if the PPer 30 is the PPer that previously downloaded the first profile and the old key is not saved in the PPer 30, or if the PPer 30 is not the PPer that downloaded the first profile previously, then the PPer 30 can first A new key is negotiated with the eUICC 10 and used to protect the transmission of the update profile. That is, the update profile can be encrypted with this new key.

Optionally, as another example, if the PPer 30 is the PPer that previously downloaded the first profile and the old key is not stored in the PPer 30, or if the PPer 30 is not the PPer that downloaded the first profile previously, and the third request message If the key information is included, then the PPer 30 can protect the transmission of the update profile with the key in the third request message. That is, the update profile can be encrypted with the old key.

It can be understood that the update profile included in the first message in 209 is an encrypted update profile.

Optionally, when the PPer 30 determines that the size of the available storage space of the PD where the first profile is located cannot accommodate updating the profile, the PPer 30 may send an error message to the MNO 20 .

210. The PM 40 sends a second message to the eUICC 10 according to the eUICC ID included in the first message. The second message includes the update profile and the ID of the PD where the first profile is located. Wherein, the update profile is the encrypted update profile received at 209 .

Optionally, if the first message includes indication information, it is used to indicate that the size of the available storage space of the PD where the first profile is determined by the PPer 30 can accommodate the updated profile. Then, the second message may also include the indication information.

211. The eUICC 10 installs the updated profile in the PD according to the second message, so as to update the first profile in the PD to the second profile. Wherein, the first profile is a configuration profile.

Optionally, after receiving the second message, the eUICC 10 may first determine the size of the available storage space of the PD corresponding to the ID of the PD in the second message.

Specifically, 211 may include:

eUICC 10 determines whether the size of the available storage space of the PD is sufficient to install the update profile;

If the eUICC 10 determines that the size of the available storage space of the PD is sufficient to install the update profile, install the update profile in the PD;

If the eUICC 10 determines that the size of the available storage space of the PD is not enough to install the update profile, the eUICC 10 allocates a new storage space for the PD, and installs the update profile in the new storage space or the available storage space and the new storage space.

For example, 211 may include: the eUICC 10 judging whether the size of the available storage space of the PD is greater than the size of the update profile;

Installing the update profile in the PD when the eUICC 10 determines that the size of the available storage space of the PD is greater than the size of the update profile;

When the eUICC 10 determines that the size of the available storage space of the PD is smaller than the size of the update profile, the eUICC 10 expands the available storage space of the PD, and installs the update profile in the expanded PD.

It can be understood that the eUICC 10 may install the update profile in the new storage space; or, the eUICC 10 may install a part of the update profile in the original available storage space, and install another part of the update profile in the new storage space, The present invention is not limited thereto.

Optionally, as another embodiment, if the first message generated by PPer 30 includes indication information, and correspondingly, the second message also includes indication information, then eUICC 10 knows that PPer 30 has determined that the PD is available. The size of the storage space is sufficient to accommodate the update profile, then, in 211, the eUICC 10 does not perform judgment on the size of the available storage space of the PD, and installs the update profile in the PD.

Or, 211 can also be understood as, the eUICC 10 implements the profile upgrade in the PD by using the installation update profile, specifically, upgrades the original first profile to the second profile.

In this way, after the update profile is installed in the PD, the profile in the PD includes the first profile and the installed update profile, and it can also be understood that the second profile includes the first profile and the installed update profile.

212. The eUICC 10 modifies the attributes of the second profile to run attributes or configuration attributes and run attributes.

Optionally, if the update profile includes the first instruction, then, in 212, the eUICC 10 may modify the attribute of the second profile according to the first instruction.

Specifically, the eUICC 10 may modify the profile attribute in the PD to the Operational attribute according to the first instruction. That is, before the update, the profile in the PD is the first profile, and the attribute is the Provisioning attribute. After the update, the profile in the PD is the second profile, and its attribute is changed to the Operational attribute.

Or, specifically, the eUICC 10 may modify the attributes of the profile in the PD to the Operational attribute and the Provisioning attribute according to the first instruction. That is, before the update, the profile in the PD is the first profile, and the attribute is the Provisioning attribute. After the update, the profile in the PD is the second profile, and its attribute is added with the Operational attribute on the basis of the Provisioning attribute. That is to say, the second profile has both the Operational attribute and the Provisioning attribute.

It can be understood that there may be a file or data object or field in the PD to represent the attributes of the profile in the PD. Before 211, this field can be Provisioning. Then, the eUICC 10 can modify the field from Provisioning to Operational according to the first instruction. Alternatively, the eUICC10 may add Operational to the provisioning field according to the first instruction.

That is to say, in this embodiment of the present invention, the second profile may only have the Operational attribute; or, the second profile may have both the Operational attribute and the Provisioning attribute.

It should be noted that in the embodiment of the present invention, after receiving the second message, the eUICC 10 may simultaneously execute the process of installing the updated profile and modifying the attributes when loading (installing) the updated profile. That is, in this embodiment of the present invention, 211 and 212 may be executed simultaneously. Or it can also be understood that the eUICC 10 simultaneously executes the modified instruction during the installation process. That is, if the first instruction is included in the update profile, then execution of the installation of 211 includes executing the first instruction, ie including 212 .

Of course, 212 can also be executed after 211. That is, if the update profile includes the first instruction, the execution of the installation at 211 does not include executing the first instruction, but is performed at 212 .

213 , the eUICC 10 generates a third response message and sends the third response message to the PM 40 .

It can be understood that the third response message is a response message corresponding to the second message in 210 .

214 , PM 40 generates a fourth response message and sends the fourth response message to PPer 30 .

It can be understood that the fourth response message is a response message corresponding to the first message in 209 .

215. The PPer 30 generates a fifth response message and sends the fifth response message to the MNO 20.

It can be understood that the fifth response message is a response message corresponding to the third request message in 207 .

Optionally, if the update profile in the first message of the aforementioned 209 does not include the first instruction, that is, before 215 , if the eUICC 10 does not execute 212 . Then, after 215, the MNO 20 may send a second instruction to the eUICC 10, so that the eUICC 10 modifies the attribute of the second profile according to the second instruction.

Specifically, the MNO 20 may use an Over The Air (OTA) mechanism to send the second instruction to the eUICC 10 .

Further, the eUICC 10 may execute 212 after 215 and after receiving the second instruction sent by the MNO 20 .

Optionally, the MNO 20 may send the second instruction to the PM 40, and then the PM 40 forwards the second instruction to the eUICC 10. That is to say, 212 may be executed after the eUICC 10 receives the second instruction sent by the MNO 20 or PM 40 .

Specifically, the eUICC 10 may modify the attributes of the second profile into running attributes or configuration attributes and running attributes according to the second instruction. Specifically, the process of the eUICC 10 modifying the attributes of the second profile according to the second instruction is similar to the process of modifying the attributes of the second profile according to the first instruction. Please refer to the description about the first instruction in 212 above. To avoid repetition, I won't go into details here.

It can be understood that, in this embodiment of the present invention, 212 may be performed simultaneously with 211 , or 212 may be performed after 211 , or 212 may be performed after 215 . That is to say, the size of the serial number cannot be used as a limitation on the execution order.

Further, after 212, it may also include:

216. The eUICC 10 may also send a refresh (REFRESH) proactive command to the terminal where it is located, so that the terminal restarts the eUICC.

Wherein, the mode of the REFRESH active command may be UICC reset (REFRESH command with mode "UICC Reset").

In this way, after restarting, the eUICC 10 can use the second profile to access the MNO 20 .

In this way, in the embodiment of the present invention, when the existing profile with the configuration attribute in the eUICC and the profile with the running attribute to be downloaded belong to the same operator, the eUICC can obtain the update profile from the PPer via the PM and transfer the profile with the configuration attribute The first profile is updated to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

It should be noted that the MNO 20 in the embodiment of the present invention may refer to a server where the operator is located, or may be a device of the MNO, which is not limited in the present invention.

Fig. 3 is an interaction diagram of a method for configuring an eUICC according to another embodiment of the present invention. FIG. 3 includes eUICC 10 , MNO 20 , PPer 30 and PM 40 .

Wherein, the PM 40 may be located at the network side, or the PM 40 may also be located at the terminal, which is not limited in the present invention. Wherein, PPer 30 is located at the network side. In addition, the eUICC 10 stores a first profile, the first profile has a Provisioning attribute, and the first profile is a configuration profile, and the MNO to which the first profile belongs is the MNO 20 .

Moreover, in the embodiment of the present invention, the eUICC Information Set (eUICC Information Set, EIS) in the PM 40 stores the information of the first profile in the eUICC 10 .

The method shown in FIG. 3 may include 201 to 202,

203', the PM 40 obtains the information of the first profile from the EIS according to the first request message.

Wherein, the information of the first profile may include: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

Optionally, the information of the first profile may also include at least one of the following: the attribute of the first profile, the ID of the PPer that downloaded the first profile, and the size of the storage space of the PD where the first profile is located . Wherein, the first profile is previously downloaded from the PPer.

It can be understood that the attribute of the first profile is the Provisioning attribute.

205 to 216,

217. The eUICC 10 sends the updated profile information to the PM 40.

It can be understood that, here, the updated profile is the second profile. The updated profile information may include the ID of the second profile, the attributes of the second profile, the size of the available storage space of the PD where the second profile is located, and the like. Here, the attributes of the second profile are running attributes, or, the attributes of the second profile are running attributes and configuration attributes.

218, PM 40 update EIS.

Specifically, the PM 40 updates the information of the first profile in the eUICC 10 stored in the EIS to the information of the second profile according to the received updated profile information.

It should be noted that for 201 to 202 and 205 to 216 in FIG. 3 , reference may be made to the description of steps with the same serial numbers in the embodiment of FIG. 2 , and to avoid repetition, details are not repeated here.

In this way, in the embodiment of the present invention, the EIS of the PM stores the existing profile information in the eUICC. When the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the updated profile from the PPer via PM and update the first profile to the second profile, and the second profile The second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Fig. 4 is an interaction diagram of a method for configuring an eUICC according to another embodiment of the present invention. FIG. 4 includes eUICC 10 , MNO 20 , PPer 30 and PM 40 .

Wherein, the PM 40 may be located at the network side, or the PM 40 may also be located at the terminal, which is not limited in the present invention. Wherein, PPer 30 is located at the network side. In addition, the eUICC 10 stores a first profile, the first profile has a Provisioning attribute, and the first profile is a configuration profile, and the MNO to which the first profile belongs is the MNO 20 .

The method shown in Figure 4 may include:

401. The eUICC 10 receives a profile download request message sent by a terminal. The profile download request message includes the ID of the MNO.

In addition, the profile download request message may also include a subscription code and the like.

It can be understood that before step 401, the user can select an MNO and a corresponding subscription on the terminal. For example, there could be an application on the terminal that provides a selection interface. Or, for example, the user can log in to a specific webpage through the terminal to select an MNO and sign up. Alternatively, there is an application in eUICC 10 that can display a selection interface on the terminal's HMI.

For example, the contract code may be the ID of the package selected by the user, etc., which is not limited in the present invention.

For example, the MNO selected by the user on the terminal is MNO 20 . Then, the ID of the MNO in the profile download request in 401 is the ID of the MNO 20 .

In addition, the terminal may generate a profile download request message according to the user's selection.

It can be understood that the eUICC 10 is installed (or embedded) on the terminal. The eUICC 10 can acquire the user's choice on the terminal, that is, the eUICC 10 can acquire the profile download request message.

402. The eUICC 10 generates a fourth request message according to the profile download request message. And the eUICC10 sends the fourth request message to the PM40. Wherein, the fourth request message includes the ID of the eUICC 10 and the information of the first profile.

Optionally, the fourth request message may include a subscription code.

It can be understood that, according to the profile download request message, the eUICC 10 generates the fourth request message after obtaining the information of the first profile therein.

Wherein, the information of the first profile may include: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

Optionally, the information of the first profile may also include at least one of the following: the attribute of the first profile, the ID of the PPer that downloaded the first profile, and the size of the storage space of the PD where the first profile is located . Wherein, the first profile is previously downloaded from the PPer.

It can be understood that the attribute of the first profile is the Provisioning attribute.

Specifically, when the eUICC 10 determines that the MNO selected by the user and the first profile in the eUICC 10 belong to the same operator, the fourth request message is generated.

For example, assume that the ID of the MNO in the profile download request in step 401 is the first ID. A PD of the eUICC 10 stores the first profile, and the eUICC 10 can acquire the ID of the MNO to which the first profile belongs, assuming that the ID of the MNO to which the first profile belongs is the second ID. If the first ID is the same as the second ID, it means that the MNO selected by the user and the first profile in the eUICC 10 belong to the same operator.

403. The PM 40 sends the fourth request message to the MNO 20.

Optionally, PM 40 may send the fourth request message to MNO 20 according to the ID of the MNO in the fourth request message.

Or, optionally, if the information of the first profile includes the ID of the PPer, then the PM 40 can send the fourth request message to the PPer 30 according to the ID of the PPer, and then the fourth request message is sent to the PPer 30 by the PPer 30. MNO 20.

206 to 216.

It should be noted that for 206 to 216 in FIG. 4 , reference may be made to the description of steps with the same serial numbers in the embodiment of FIG. 2 , and to avoid repetition, details are not repeated here.

Wherein, in 206, the MNO 20 may determine the ID of the updated profile according to the first profile information and the subscription ID included in the fourth request message.

It should be noted that in the embodiment shown in FIG. 2 or FIG. 3 , the contents included in the third request message, the first message, and the second message in 206 to 216 may be related to the contents included in the first response message in 205 . Correspondingly, in the embodiment shown in FIG. 4 , the content included in the third request message, the first message, and the second message in 206 to 216 may be related to the content included in the fourth request message in 403 . That is to say, in the embodiment shown in FIG. 4 , the first response message involved in steps 206 to 216 may be replaced with the fourth request message in the embodiment shown in FIG. 4 .

In this way, in the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the user can send a profile download request message to the eUICC through the terminal, and the eUICC can further The updated profile is obtained from the PPer via the PM and the first profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Fig. 5 is a flowchart of a method for configuring an eUICC according to an embodiment of the present invention. The methods shown in Figure 5 include:

501. The eUICC receives a first message sent by a PM, where the first message includes updating a profile and an ID of a PD.

502. The eUICC installs an update profile in the PD, so as to update the first profile in the PD to a second profile, where the first profile is a provisioning profile (Provisioning Profile, PP).

503. The eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the update profile from PPer via PM and transfer the first profile with configuration attributes The profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

It can be understood that in step 502, the eUICC installs the update profile in the PD according to the ID of the PD. In addition, the profile originally stored in the PD is the first profile.

In the embodiment of the present invention, the first message in 501 is also the second message in 210 in the foregoing embodiments of FIG. 2 to FIG. 4 . Specifically, for 501, reference may be made to the description of 210 in the foregoing embodiments of FIG. 2 to FIG. 4 , and details are not repeated here to avoid repetition.

In 501, the updated profile may be received by the PM from the PPer, and the updated profile may be the encrypted updated profile of the PPer.

Optionally, as an example, if the PPer is a PPer that previously downloaded the first profile, and the PPer stores an old key, then the PPer may use the old key to protect the transmission of the updated profile. That is, the update profile can be encrypted with the old key.

Optionally, as another example, if the PPer is the PPer that downloaded the first profile previously and the old key is not saved in the PPer, or if the PPer is not the PPer that downloaded the first profile previously, then the PPer can first Negotiate a new key with the eUICC and use this new key to protect the transmission of the update profile. That is, the update profile can be encrypted with this new key.

Optionally, as another example, if the PPer is the PPer that previously downloaded the first profile and the old key is not saved in the PPer, or if the PPer is not the PPer that downloaded the first profile previously, and the PPer receives the If there is keyed information, then the PPer can use the key received from the MNO to protect the transmission of the update profile. That is, the update profile can be encrypted with this key.

Specifically, for the description of the key, refer to the description of the key in 207 in the embodiments of FIGS. 2 to 4 , and to avoid repetition, details are not repeated here.

In 501, the eUICC PM in the eUICC may receive the first message sent by the PM.

In the embodiment of the present invention, for 502, refer to the description of 211 in the foregoing embodiments of FIG. 2 to FIG. 4 .

Wherein, as an example, in 502, the eUICC may determine whether the size of the available storage space of the PD is sufficient to install the update profile;

If the eUICC determines that the size of the available storage space of the PD is sufficient to install the update profile, install the update profile in the PD;

If the eUICC determines that the size of the available storage space of the PD is not enough to install the update profile, the eUICC allocates a new storage space for the PD, and installs the update profile in the new storage space or In the available storage space and the new storage space.

In the embodiment of the present invention, for 503, refer to the description of 212 in the foregoing embodiments of FIG. 2 to FIG. 4 .

Optionally, as an embodiment, updating the profile may include the first instruction, then, 503 may include:

The eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes according to the first instruction.

It can be understood that there may be a field in the PD to indicate the attribute of the profile in the PD. Before 502, this field can be Provisioning. Then, the eUICC may modify the field from Provisioning to Operational according to the first instruction. Alternatively, the eUICC may add Operational to the Provisioning field according to the first instruction.

That is to say, in this embodiment of the present invention, the second profile may only have the Operational attribute; or, the second profile may have both the Operational attribute and the Provisioning attribute.

Or, optionally, as another embodiment, before 503, the eUICC may send the first response message to the PM. Further, 503 may include:

The eUICC can also receive the second instruction from PM or MNO;

The eUICC modifies the attributes of the second profile into running attributes or configuration attributes and running attributes according to the second instruction.

Specifically, reference may be made to the description of the second instruction after 215 in the foregoing embodiments in FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

Optionally, after the method shown in FIG. 5 , it may further include: the eUICC sends a refresh active command to the terminal where it is located, so that the terminal restarts the eUICC; the eUICC adopts the second The profile is connected to the MNO. Specifically, reference may be made to the description of 216 in the foregoing embodiments in FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

In addition, before 501, you can also include:

The eUICC receives the request message sent by the PM;

The eUICC sends a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

The request message in the embodiment of the present invention is also the second request message in 203 in the aforementioned embodiment of FIG. 2 , and the second response message in the embodiment of the present invention is also the second response message in the aforementioned embodiment 204 of FIG. 2 , therefore, reference may be made to the description of 203-204 in the foregoing embodiment of FIG. 2 , and details are not repeated here to avoid repetition.

Or, before the 501, you can also include:

The eUICC receives the profile download request message sent by the terminal, wherein the profile download request message includes the identification ID of the mobile network operator MNO;

When the eUICC determines that the MNO is the MNO to which the first profile belongs, the eUICC sends a second message to the PM according to the profile download request message, and the second message includes the ID of the eUICC and the information of the first profile.

The profile download request message in the embodiment of the present invention is also the profile download request message in the aforementioned embodiment 401 of FIG. 4 , and the second message in the embodiment of the present invention is also the fourth request message in the aforementioned embodiment 402 of FIG. 4 , therefore, reference may be made to the description of 401-402 in the embodiment of FIG. 4 above, and to avoid repetition, details are not repeated here.

In the embodiment of the present invention, the information of the first profile may include: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

Optionally, the information of the first profile may also include at least one of the following: the attribute of the first profile, the ID of the profile configurator that downloaded the first profile, and the availability of the PD where the first profile is located. The size of the storage space.

It can be understood that the attribute of the first profile is the Provisioning attribute.

Fig. 6 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention. The methods shown in Figure 6 include:

601. The PM receives a first message sent by a profile configurator, where the first message includes an update profile, an ID of the eUICC, and an ID of a PD in the eUICC.

602. The PM sends a second message to the eUICC according to the ID of the eUICC, where the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile in In the PD, the first profile in the PD is updated to a second profile, and the attributes of the second profile are modified to run attributes or configuration attributes and run attributes, wherein the first profile is Configure the outline.

603. Receive the second response message sent by the eUICC.

604. The PM sends a first response message to the profile configurator.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the PM can send the updated profile received from PPer to the eUICC, so that the eUICC The first profile with the configuration attribute is updated to the second profile, and the second profile has the operation attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

It can be understood that the second profile may only have the Operational attribute; or, the second profile may have both the Operational attribute and the Provisioning attribute.

In the embodiment of the present invention, the first message in 601 is the first message in 209 in the above-mentioned embodiment of FIG. 2 to FIG. The second message; the second response message in 603 is the third response message in 213 in the embodiment of the aforementioned FIGS. The fourth response message for . Therefore, for 601, refer to the description of 209 in the aforementioned embodiment of FIGS. 2 to 4 , for 602, refer to the description of 210 in the aforementioned embodiment of FIGS. For the description of 604, reference may be made to the description of 214 in the foregoing embodiments of FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

Optionally, after 603, it may further include: the PM sending a first instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to the running attribute or the configuration attribute and the running attribute according to the first instruction. Attributes.

Optionally, as an embodiment, before 601, may include:

The PM receives a first request message sent by the MNO, where the first request message includes the ID of the eUICC and the ID of the MNO;

The PM acquires the information of the first profile according to the first request message;

The PM sends a third response message to the MNO, where the third response message includes the information of the first profile.

The first request message in the embodiment of the present invention is the first request message in 202 in the aforementioned embodiment of Figure 2 or Figure 3, and the third response message in the embodiment of the present invention is the aforementioned embodiment of Figure 2 or Figure 3 The first response message in 205. Therefore, reference may be made to the descriptions of 202 and 205 in the foregoing embodiments, and details are not repeated here to avoid repetition.

Wherein, the PM sending the third response message to the MNO includes: when the PM determines that the MNO is the MNO to which the first profile stored in the eUICC belongs, sending the third response message to the MNO. Refer to the description of 205 in FIG. 2 or FIG. 3 .

Optionally, as an embodiment, the PM obtaining the first profile information according to the first request message may include:

The PM sends a second request message to the eUICC according to the ID of the eUICC in the first request message;

The PM receives a fourth response message sent by the eUICC, where the fourth response message includes information about the first profile.

The second request message in this embodiment is the second request message in 203 in the aforementioned embodiment of FIG. 2 , and the fourth response message in this embodiment is the second response message in 204 in the aforementioned embodiment of FIG. 2 . Therefore, reference may be made to the descriptions of 203 to 204 in the foregoing embodiments, and details are not repeated here to avoid repetition.

Optionally, as another embodiment, the acquiring, by the PM, the information of the first profile according to the first request message may include: acquiring, by the PM, the information of the first profile from the EIS. It can be understood that the information of the first profile is stored in the eUICC information set EIS in the PM. For details, refer to the description of 203' in the embodiment of FIG. 3 , and to avoid repetition, details are not repeated here.

Optionally, as another embodiment, before 601, may include:

The PM receives a third request message sent by the eUICC, where the third request message includes the ID of the eUICC and information about the first profile;

The PM sends the third request message to the MNO to which the first profile belongs.

The third request message in the embodiment of the present invention is the fourth request message in the aforementioned embodiment 402 of FIG. 4 . Therefore, reference may be made to the description of 402 in the aforementioned embodiment of FIG. 4 , and details are not repeated here to avoid repetition.

Wherein, if the information of the first profile in the fourth request message includes the ID of the profile configurator who downloaded the first profile, then the PM can send the third request message to the profile configurator so that the profile The configurator forwards the third request message to the MNO.

In the embodiment of the present invention, the information of the first profile may include: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the PD where the first profile is located.

Optionally, the information of the first profile may also include at least one of the following: the attribute of the first profile, the ID of the profile configurator that downloaded the first profile, and the availability of the PD where the first profile is located. The size of the storage space.

Fig. 7 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention. The methods shown in Figure 7 include:

701. The device of the MNO receives a first message sent by a PM, where the first message includes information about a first profile in the eUICC, where the information about the first profile includes an identification ID of the first profile and the first profile information. ID of the profile domain PD where the first profile is located.

702. The device of the MNO determines the ID of the update profile according to the information of the first profile and updates the subscription information of the first profile in the home subscription server HSS.

703. The MNO device sends a second message to the profile configurator, where the second message includes the ID of the eUICC, the ID of the update profile, the ID of the PD, and the ID of the PM, to making the profile configurator download the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile Create a second profile and modify the attributes of the second profile.

704. The device of the MNO receives the first response message sent by the profile configurator.

In the embodiment of the present invention, when the existing profile with the configuration attribute in the eUICC and the profile with the running attribute to be downloaded belong to the same operator, the MNO can determine the ID of the updated profile according to the information of the first profile with the configuration attribute , and instruct the PPer to download the updated profile for the eUICC, so that the eUICC updates the first profile to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Optionally, in this embodiment of the present invention, 701 may be that the device of the MNO receives the first message sent by the PM from the PPer. That is to say, it may be a device where the PM sends the first message to the PPer, and the PPer forwards the first message to the MNO.

Optionally, the first message may also include the ID of the MNO.

Optionally, the first message may also include the ID of the PPer.

Optionally, as an embodiment, in the embodiment of the present invention, the first message in 701 may be the first response message in 205 in the aforementioned embodiment of FIG. 2 or FIG. 3 , then, before 701, further include:

The device of the MNO receives the subscription request of the user, and the subscription request includes the ID of the eUICC;

The MNO device sends a request message to the PM according to the subscription request;

Wherein, the first message is a second response message corresponding to the request message.

Wherein, the subscription request may include the ID of the PM, and for a description of the subscription request, refer to 201 in the embodiment of FIG. 2 or FIG. 3 .

Specifically, in 702, the device of the MNO may determine the ID of the updated profile according to the information of the first profile and the subscription request.

Then, in this embodiment, the request message is the first request message of 202 in the embodiment of FIG. 2 or 3. Correspondingly, the first message in the embodiment of the present invention is 205 first response message. Therefore, for 701, reference may be made to the description of 205 in the embodiment of FIG. 2 or FIG. 3 , and details are not repeated here to avoid repetition.

Optionally, as another embodiment, the first message in 701 may be the fourth request message in the foregoing embodiment 403 in FIG. 4 . The first message may include a subscription ID. Specifically, in 702, the device of the MNO may determine the ID of the update profile according to the first profile information and the subscription ID. Therefore, for 701, reference may be made to the description of 403 in the embodiment of FIG. 4 , and details are not repeated here to avoid repetition.

Optionally, the first message in 701 may also include the ID of the PM and the ID of the eUICC.

In the embodiment of the present invention, for 702, refer to the description of 206 in the foregoing embodiments in FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

In the embodiment of the present invention, the second message in 703 is the third request message in 207 in the aforementioned embodiments of FIGS. 2 to 4; the first response message in 704 is the 215 in the aforementioned embodiments of FIGS. The fifth response message in . Therefore, for 703, refer to the description of 207 in the foregoing embodiments of FIGS. 2 to 4 , and for 704, refer to the description of 214 in the foregoing embodiments of FIGS. 2 to 4 .

Wherein, the second message may further include key information, so that the profile configurator uses the key to protect the transmission of the updated profile.

Optionally, after 704, it may further include: the device of the MNO sends a second instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to a running attribute or a configuration attribute according to the second instruction and run properties.

Specifically, reference may be made to the description of the second instruction after 215 in the foregoing embodiments in FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

Optionally, the information of the first profile also includes the size of the available storage space of the PD where the first profile is located, and the second message also includes the size of the available storage space of the PD where the first profile is located, so that When the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient to install the updated profile, download the updated profile to the PD of the eUICC through the PM.

In the embodiment of the present invention, the information of the first profile may also include at least one of the following:

The ID of the MNO to which the first profile belongs, the attribute of the first profile, the ID of the profile configurator that downloads the first profile, and the size of the available storage space of the PD where the first profile is located.

Optionally, in this embodiment of the present invention, the device of the MNO may be a server of the MNO.

Fig. 8 is a flowchart of a method for configuring an eUICC according to another embodiment of the present invention. The methods shown in Figure 8 include:

801. The profile configurer PPer receives a request message sent by an MNO device, where the request message includes the ID of the eUICC, the ID of the update profile, the ID of the PD in the eUICC, and the ID of the PM. Wherein, the first profile in the PD in the eUICC is a configuration profile.

802. The PPer determines the update profile according to the ID of the update profile.

803. The PPer sends a first message to the PM according to the ID of the PM, where the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that all The PM sends the update profile to the eUICC, and the eUICC updates the first profile in the PD to the second profile according to the update profile. Wherein, the second profile has the running attribute.

804. The PPer receives the first response message sent by the PM.

805. The PPer sends a second response message to the device of the MNO.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, PPer can determine the update profile according to the ID of the update profile sent by the MNO, and send the profile The updated profile is sent to the eUICC via the PM, so that the eUICC updates the first profile with the configuration attribute to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

In the embodiment of the present invention, the request message in 801 is the third request message in 207 in the foregoing embodiments of FIGS. To avoid repetition, I won't go into details here.

Optionally, the third request message may include key information, so that the PPer can use the key to protect the transmission of the update profile. That is to say, the update profile in the first message may be an encrypted update profile.

In the embodiment of the present invention, for 802, refer to the description of 208 in the foregoing embodiments in FIGS. 2 to 4 , and details are not repeated here to avoid repetition.

Optionally, as an embodiment, if the request message includes the size of the available storage space of the PD, then 803 may include: when the PPer determines that the size of the available storage space of the PD where the first profile is located can be When accommodating the updated profile, the PPer sends a first message to the PM.

Wherein, the updating profile may include an instruction for instructing the eUICC to modify the attributes of the profile in the PD.

The first message in 803 in the embodiment of the present invention is the first message in the embodiment 209 in the aforementioned Figures 2 to 4; the first response message in 804 is the first message in the embodiment 214 in the aforementioned Figures 2 to 4 Four response messages; the second response message in 805 is the fifth response message in the embodiment 215 in FIG. 2 to FIG. 4 . Therefore, for 803, refer to the description of 209 in the aforementioned embodiment of FIGS. 2 to 4 , for 804, refer to the description of 214 in the aforementioned embodiment of FIGS. In order to avoid repetition, the description will not be repeated here.

It can be understood that the update profile is pre-stored in the PPer.

It should be noted that before the embodiment of the present invention, the update profile generated according to the operator's request may be stored on the PPer 30 .

For example, operator A has profile A with configuration attributes, profile B with operation attributes, and profile C with operation attributes. Then, the update profile corresponding to operator A may include two. For example, a first update profile from profile A to profile B and a second update profile from profile A to profile C may be included.

Fig. 9 is a structural block diagram of an eUICC according to an embodiment of the present invention. The eUICC 10 shown in FIG. 9 includes a receiving unit 110 , a processing unit 120 and a sending unit 130 .

The receiving unit 110 is configured to receive a first message sent by the profile manager PM, where the first message includes updating the profile and the ID of the profile domain PD;

The processing unit 120 is configured to install the update profile in the PD, so as to update the first profile in the PD to a second profile, where the first profile is a configuration profile;

The processing unit 120 is further configured to modify the attributes of the second profile to run attributes or configuration attributes and run attributes.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the update profile from PPer via PM and transfer the first profile with configuration attributes The profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Optionally, as an embodiment, the update profile includes a first instruction, and the processing unit 120 is specifically configured to: modify the attribute of the second profile to a running attribute or a configuration attribute according to the first instruction and run properties.

Optionally, as another embodiment,

The receiving unit 110 is further configured to receive a second instruction from the PM or the mobile network operator MNO;

The processing unit 120 is specifically configured to, according to the second instruction, modify the attributes of the second profile to run attributes or configuration attributes and run attributes.

Optionally, as another embodiment, the processing unit 120 is specifically configured to:

judging whether the size of the available storage space of the PD is sufficient to install the update profile;

If it is determined that the size of the available storage space of the PD is sufficient to install the update profile, installing the update profile in the PD;

If it is determined that the size of the available storage space of the PD is not enough to install the update profile, allocate a new storage space for the PD, and install the update profile in the new storage space or the available storage space and in the new storage space.

Optionally, as another embodiment, the sending unit 130 is configured to: send a refresh active command to the terminal where it is located, so that the terminal restarts the eUICC;

The processing unit 120 is further configured to use the second profile to access a mobile network operator MNO.

Optionally, as another embodiment,

The receiving unit 110 is further configured to receive the request message sent by the PM;

The sending unit 130 is configured to send a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

Optionally, as another embodiment,

The receiving unit 110 is further configured to receive a profile download request message sent by the terminal, wherein the profile download request message includes the identification ID of the mobile network operator MNO;

The sending unit 130 is further configured to send a second message to the PM according to the profile download request message when it is determined that the MNO is the MNO to which the first profile belongs, and the second message includes the eUICC's ID and information about the first profile.

Optionally, as another embodiment, the information of the first profile includes: the identification ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located. ID.

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the attribute of the first profile, the ID of the profile configurator who downloaded the first profile, and the first profile The size of the available storage space of the PD where it resides.

The eUICC 10 shown in FIG. 9 can realize the processes implemented by the eUICC in the aforementioned method embodiments, and to avoid repetition, details are not repeated here.

Fig. 10 is a structural block diagram of a device for configuring eUICC according to an embodiment of the present invention. The device shown in FIG. 10 is PM 40 , which includes a receiving unit 410 , a processing unit 420 and a sending unit 430 .

The receiving unit 410 is configured to receive a first message sent by the profile configurator, where the first message includes updating the profile, the identification ID of the eUICC, and the ID of the profile domain PD in the eUICC;

The sending unit 430 is configured to send a second message to the eUICC according to the ID of the eUICC, where the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile In the PD, the first profile in the PD is updated to a second profile, and the attribute of the second profile is modified to an operation attribute or a configuration attribute and an operation attribute, wherein the first profile is Configure the outline.

The receiving unit 410 is further configured to receive the second response message sent by the eUICC.

The sending unit 430 is further configured to send a first response message to the profile configurator.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the PM can send the updated profile received from PPer to the eUICC, so that the eUICC The first profile with the configuration attribute is updated to the second profile, and the second profile has the operation attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Optionally, as an embodiment, the sending unit 430 is further configured to: send a first instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to a running attribute or Configuration properties and run properties.

Optionally, as another embodiment, the receiving unit 410 is further configured to receive a first request message sent by a mobile network operator MNO, where the first request message includes the identification ID of the eUICC and the ID of the MNO;

a processing unit 420, configured to acquire the information of the first profile according to the first request message;

The sending unit 430 is further configured to send a third response message to the MNO, where the third response message includes the information of the first profile.

Optionally, as another embodiment, the processing unit 420 is specifically configured to: send a second request message to the eUICC according to the ID of the eUICC in the first request message; receive the second request message sent by the eUICC; Four response messages, the fourth response message includes the information of the first profile.

Optionally, as another embodiment, the information of the first profile is stored in the eUICC information set EIS in the PM. The processing unit 420 is specifically configured to: acquire the information of the first profile from the EIS.

Optionally, as another embodiment, the sending unit 430 is specifically configured to: send a third response message to the MNO when it is determined that the MNO is the MNO to which the first profile belongs.

Optionally, as another embodiment, the receiving unit 410 is further configured to receive a third request message sent by the eUICC, where the third request message includes the identification ID of the eUICC and information about the first profile. The sending unit 430 is further configured to send the third request message to the mobile network operator MNO to which the first profile belongs.

Optionally, as another embodiment, the information of the first profile includes an ID of a profile configurator that downloaded the first profile. The sending unit 430 is specifically configured to: send the third request message to the profile configurator, so that the profile configurator forwards the third request message to the MNO.

Optionally, as another embodiment, the information of the first profile includes an ID of a profile configurator that downloaded the first profile; the sending unit 430 is specifically configured to: send the third request message to the a profile configurator, such that the profile configurator forwards the third request message to the MNO.

Optionally, as another embodiment, the information of the first profile includes: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located .

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the attribute of the first profile, the ID of the profile configurator who downloaded the first profile, and the first profile The size of the available storage space of the PD where it resides.

Optionally, as another embodiment, the second profile also has configuration attributes.

The PM 40 shown in FIG. 10 can embody the processes implemented by the PM in the foregoing method embodiments, and to avoid repetition, details are not repeated here.

Fig. 11 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention. The device shown in FIG. 11 is the device of the MNO 20 and includes a receiving unit 230 , a processing unit 240 and a sending unit 250 .

The receiving unit 230 is configured to receive a first message sent by the profile manager PM, where the first message includes information about a first profile in the eUICC, where the information about the first profile includes the first profile An identification ID of a profile and an ID of a profile domain PD where the first profile is located;

The processing unit 240 is configured to determine the ID of the update profile and update the subscription information of the first profile in the home subscription server HSS according to the information of the first profile;

A sending unit 250, configured to send a second message to the profile configurator, where the second message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD, and the ID of the PM, so that The profile configurator downloads the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile to the second profile and modify the attributes of the second profile;

The receiving unit 230 is further configured to receive the first response message sent by the profile configurator.

In the embodiment of the present invention, when the existing profile with the configuration attribute in the eUICC and the profile with the running attribute to be downloaded belong to the same operator, the MNO can determine the ID of the updated profile according to the information of the first profile with the configuration attribute , and instruct the PPer to download the updated profile for the eUICC, so that the eUICC updates the first profile to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Optionally, as an embodiment, the sending unit 250 is further configured to send a second instruction to the eUICC, so that the eUICC modifies the attribute of the second profile according to the second instruction.

Optionally, as another embodiment, the receiving unit 230 is further configured to receive a user's subscription request, where the subscription request includes the ID of the eUICC;

The sending unit 250 is further configured to send a request message to the PM according to the subscription request;

The first message is a second response message corresponding to the request message.

Optionally, as another embodiment, the subscription request further includes the ID of the PM.

Optionally, as another embodiment, the receiving unit 230 is specifically configured to: receive the first message sent by the PM from the profile configurator.

Optionally, as another embodiment, the first message further includes the ID of the PM and the ID of the eUICC.

Optionally, as another embodiment, the second message further includes key information, so that the profile configurator uses the key to protect transmission of the updated profile.

Optionally, as another embodiment, the information of the first profile also includes the size of the available storage space of the PD where the first profile is located, and the second message also includes the available storage space of the PD where the first profile is located. The size of the space, so that when the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient to install the updated profile, download the updated profile to all the eUICCs through the PM described in the PD.

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the ID of the MNO to which the first profile belongs, the attributes of the first profile, and the user who downloaded the first profile. The ID of the profile configurator and the size of the available storage space of the PD where the first profile is located.

Optionally, as another embodiment, the device of the MNO is the server of the MNO.

The equipment of the MNO 20 shown in FIG. 11 can embody the processes implemented by the MNO in the aforementioned method embodiments. To avoid repetition, details are not repeated here.

Fig. 12 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention. The device shown in FIG. 12 is PPer 30 , which includes a receiving unit 310 , a processing unit 320 and a sending unit 330 .

The receiving unit 310 is configured to receive a request message sent by a device of a mobile network operator MNO, wherein the request message includes the ID of the eUICC, the ID of the update profile, the ID of the PD in the eUICC, and the ID of the PM. Wherein, the first profile in the PD in the eUICC is a configuration profile.

The processing unit 320 is configured to determine the update profile according to the ID of the update profile.

The sending unit 330 is configured to send a first message to the PM according to the ID of the PM, where the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that The PM sends the update profile to the eUICC, and the eUICC updates the first profile in the PD to the second profile according to the update profile. Wherein, the second profile has the running attribute.

The receiving unit 310 is further configured to receive the first response message sent by the PM.

The sending unit 330 is further configured to send a second response message to the MNO.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, PPer can determine the update profile according to the ID of the update profile sent by the MNO, and send the profile The updated profile is sent to the eUICC via the PM, so that the eUICC updates the first profile with the configuration attribute to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Optionally, as an embodiment, the third request message may include key information, so that the processing unit 320 may use the key to protect transmission of the update profile. That is to say, the update profile in the first message may be an encrypted update profile.

Optionally, as another embodiment, if the request message includes the size of the available storage space of the PD, then the sending unit 330 is specifically configured to: when determining the size of the available storage space of the PD where the first profile is located When the updated profile can be accommodated, sending a first message to the PM.

Wherein, the updating profile may include an instruction for instructing the eUICC to modify the attributes of the profile in the PD.

It can be understood that the PPer 30 may also include a storage unit for storing the update profile. Specifically, the update profile generated according to the operator's request may be stored.

For example, operator A has profile A with configuration attributes, profile B with operation attributes, and profile C with operation attributes. Then, the update profile corresponding to operator A may include two. For example, the storage unit may store a first updated profile from profile A to profile B, and a second updated profile from profile A to profile C.

The PPer 30 shown in FIG. 12 can realize the process implemented by the PPer in the foregoing method embodiments, and to avoid repetition, details are not repeated here.

Fig. 13 is a structural block diagram of an eUICC according to another embodiment of the present invention. The eUICC 10 shown in FIG. 13 includes: a receiver 1101 , a processor 1201 , a transmitter 1301 and a memory 1401 .

The receiver 1101 is configured to receive a first message sent by the profile manager PM, where the first message includes updating the profile and the identification ID of the profile domain PD;

The processor 1201 is configured to install the update profile in the PD according to the first message received by the receiver 1101, so as to update the first profile in the PD to a second profile, wherein the The first profile is a configuration profile; it is also used to modify the attributes of the second profile into running attributes or configuration attributes and running attributes.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the eUICC can obtain the update profile from PPer via PM and transfer the first profile with configuration attributes The profile is updated to a second profile, and the second profile has a running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Various components in the eUICC 10 are coupled together through a bus system 1501, wherein the bus system 1501 includes not only a data bus, but also a power bus, a control bus, and a status signal bus. However, the various buses are labeled as bus system 1501 in FIG. 13 for clarity of illustration.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 1201 or implemented by the processor 1201 . The processor 1201 may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the above method may be implemented by an integrated logic circuit of hardware in the processor 1201 or instructions in the form of software. The above-mentioned processor 1201 may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), an off-the-shelf programmable gate array (Field Programmable Gate Array, FPGA) or other available Program logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 1401, and the processor 1201 reads the information in the memory 1401, and completes the steps of the above method in combination with its hardware.

It can be understood that the memory 1401 in this embodiment of the present invention may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Wherein, the non-volatile memory may be a read-only memory (Read-Only Memory, ROM), a programmable read-only memory (Programmable ROM, PROM), an erasable programmable read-only memory (Erasable PROM, EPROM), an electronically programmable Erase Programmable Read-Only Memory (Electrically EPROM, EEPROM) or Flash. The volatile memory can be Random Access Memory (RAM), which acts as an external cache. By way of illustration and not limitation, many forms of RAM are available such as Static RAM (SRAM), Dynamic RAM (DRAM), Synchronous DRAM (Synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (Double DataRate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (Enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (Synchlink DRAM, SLDRAM) And direct memory bus random access memory (Direct Rambus RAM, DR RAM). Memory 1401 of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

It should be understood that the embodiments described herein may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, the processor 1201 can be implemented in one or more application specific integrated circuits (Application Specific Integrated Circuits, ASIC), digital signal processor (Digital Signal Processing, DSP), digital signal processing device (DSP Device, DSPD), programmable Logic device (ProgrammableLogic Device, PLD), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA), general-purpose processor, controller, microcontroller, microprocessor, other electronic devices for performing the functions described in this application unit or its combination.

When the embodiments are implemented in software, firmware, middleware or microcode, program code or code segments, they may be stored on a machine-readable medium such as a memory component. A code segment may represent a procedure, function, subroutine, program, routine, subroutine, module, software grouping, class, or any combination of instructions, data structures, or program statements. A code segment can be coupled to another code segment or a hardware circuit by passing and/or receiving information, data, arguments, parameters, or memory contents. Information, arguments, parameters, data, etc. may be passed, forwarded, or sent using any suitable means, including memory sharing, message passing, token passing, network transmission, and the like.

For a software implementation, the techniques described herein can be implemented through modules (eg, procedures, functions, and so on) that perform the functions described herein. The software codes may be stored in memory units and executed by processors. The memory unit can be implemented within the processor or external to the processor, in which case the memory unit can be communicatively coupled to the processor via various means as is known in the art.

Optionally, as an embodiment, the update profile includes a first instruction, and the processor 1201 is specifically configured to: according to the first instruction, modify the attribute of the second profile to a running attribute or a configuration attribute and a running attribute. Attributes.

Optionally, as another embodiment,

The receiver 1101 is further configured to receive a second instruction from the PM or the mobile network operator MNO;

The processor 1201 is specifically configured to, according to the second instruction, modify the attributes of the second profile to run attributes or configuration attributes and run attributes.

Optionally, as another embodiment, the processor 1201 is specifically configured to:

judging whether the size of the available storage space of the PD is sufficient to install the update profile;

If it is determined that the size of the available storage space of the PD is sufficient to install the update profile, installing the update profile in the PD;

If it is determined that the size of the available storage space of the PD is not enough to install the update profile, allocate a new storage space for the PD, and install the update profile in the new storage space or the available storage space and in the new storage space.

Optionally, as another embodiment, the transmitter 1301 is configured to: send a refresh active command to the terminal where it is located, so that the terminal restarts the eUICC;

The processor 1201 is further configured to use the second profile to access a mobile network operator MNO.

Optionally, as another embodiment,

The receiver 1101 is further configured to receive the request message sent by the PM;

The sender 1301 is configured to send a second response message to the PM according to the request message, where the second response message includes the information of the first profile.

Optionally, as another embodiment,

The receiver 1101 is further configured to receive a profile download request message sent by the terminal, wherein the profile download request message includes the identification ID of the mobile network operator MNO;

The sender 1301 is further configured to send a second message to the PM according to the profile download request message when it is determined that the MNO is the MNO to which the first profile belongs, and the second message includes the eUICC's ID and information about the first profile.

Optionally, as another embodiment, the information of the first profile includes: the identification ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located. ID.

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the attribute of the first profile, the ID of the profile configurator who downloaded the first profile, and the first profile The size of the available storage space of the PD where it resides.

The eUICC 10 shown in FIG. 13 can realize the processes implemented by the eUICC in the foregoing method embodiments, and to avoid repetition, details are not repeated here.

Fig. 14 is a structural block diagram of a device for configuring eUICC according to an embodiment of the present invention. The device shown in FIG. 14 is a PM 40 including a receiver 4101 , a processor 4201 , a transmitter 4301 and a memory 4401 .

The receiver 4101 is configured to receive the first message sent by the profile configurator, where the first message includes updating the profile, the identification ID of the eUICC, and the ID of the profile domain PD in the eUICC;

The sender 4301 is configured to send a second message to the eUICC according to the ID of the eUICC, where the second message includes the update profile and the ID of the PD, so that the eUICC installs the update profile In the PD, the first profile in the PD is updated to a second profile, and the attribute of the second profile is modified to an operation attribute or a configuration attribute and an operation attribute, wherein the first profile is Configure the outline.

The receiver 4101 is further configured to receive the second response message sent by the eUICC.

The sender 4301 is further configured to send a first response message to the profile configurator.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, the PM can send the updated profile received from PPer to the eUICC, so that the eUICC The first profile with the configuration attribute is updated to the second profile, and the second profile has the operation attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Various components in the PM 40 are coupled together through a bus system 4501, wherein the bus system 4501 includes not only a data bus, but also a power bus, a control bus and a status signal bus. However, the various buses are labeled as bus system 4501 in FIG. 14 for clarity of illustration.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 4201 or implemented by the processor 4201 . The processor 4201 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 4201 or instructions in the form of software. The aforementioned processor 4201 may be a general processor, DSP, ASIC, FPGA or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 4401, and the processor 4201 reads the information in the memory 4401, and completes the steps of the above method in combination with its hardware.

It can be understood that the memory 4401 in the embodiment of the present invention may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Wherein, the non-volatile memory may be ROM, PROM, EPROM, EEPROM or flash memory. Volatile memory can be RAM, which acts as external cache memory. By way of example and not limitation, many forms of RAM are available such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM, and DRRAM. Memory 4401 of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

It should be understood that the embodiments described herein may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, processor 4201 may be implemented in one or more ASICs, DSPs, DSPDs, PLDs, FPGAs, general purpose processors, controllers, microcontrollers, microprocessors, other electronic devices for performing the functions described herein. unit or its combination.

When the embodiments are implemented in software, firmware, middleware or microcode, program code or code segments, they may be stored on a machine-readable medium such as a memory component. A code segment may represent a procedure, function, subroutine, program, routine, subroutine, module, software grouping, class, or any combination of instructions, data structures, or program statements. A code segment can be coupled to another code segment or a hardware circuit by passing and/or receiving information, data, arguments, parameters, or memory contents. Information, arguments, parameters, data, etc. may be passed, forwarded, or sent using any suitable means, including memory sharing, message passing, token passing, network transmission, and the like.

For a software implementation, the techniques described herein can be implemented through modules (eg, procedures, functions, and so on) that perform the functions described herein. The software codes may be stored in memory units and executed by processors. The memory unit can be implemented within the processor or external to the processor, in which case the memory unit can be communicatively coupled to the processor via various means as is known in the art.

Optionally, as an embodiment, the sender 4301 is further configured to: send a first instruction to the eUICC, so that the eUICC modifies the attribute of the second profile to a running attribute or configuration according to the first instruction properties and runtime properties.

Optionally, as another embodiment, the receiver 4101 is further configured to receive a first request message sent by a mobile network operator MNO, where the first request message includes the identification ID of the eUICC and the ID of the MNO;

The processor 4201 is further configured to acquire the information of the first profile according to the first request message;

The sender 4301 is further configured to send a third response message to the MNO, where the third response message includes the information of the first profile.

Optionally, as another embodiment, the processor 4201 is specifically configured to: send a second request message to the eUICC according to the ID of the eUICC in the first request message; receive the second request message sent by the eUICC; Four response messages, the fourth response message includes the information of the first profile.

Optionally, as another embodiment, the information of the first profile is stored in the eUICC information set EIS in the PM. The processor 4201 is specifically configured to: acquire the information of the first profile from the EIS.

Optionally, as another embodiment, the sender 4301 is specifically configured to: send a third response message to the MNO when it is determined that the MNO is the MNO to which the first profile belongs.

Optionally, as another embodiment, the receiver 4101 is further configured to receive a third request message sent by the eUICC, where the third request message includes the identification ID of the eUICC and information about the first profile. The sender 4301 is further configured to send the third request message to the mobile network operator MNO to which the first profile belongs.

Optionally, as another embodiment, the information of the first profile includes an ID of a profile configurator that downloaded the first profile. The sender 4301 is specifically configured to: send the third request message to the profile configurator, so that the profile configurator forwards the third request message to the MNO.

Optionally, as another embodiment, the information of the first profile includes the ID of the profile configurator that downloaded the first profile; the sender 4301 is specifically configured to: send the third request message to the a profile configurator, such that the profile configurator forwards the third request message to the MNO.

Optionally, as another embodiment, the information of the first profile includes: the ID of the first profile, the ID of the MNO to which the first profile belongs, and the ID of the profile domain PD where the first profile is located .

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the attribute of the first profile, the ID of the profile configurator who downloaded the first profile, and the first profile The size of the available storage space of the PD where it resides.

Optionally, as another embodiment, the second profile also has configuration attributes.

The PM 40 shown in FIG. 14 can embody the processes implemented by the PM in the foregoing method embodiments, and details are not repeated here to avoid repetition.

Fig. 15 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention. The device shown in FIG. 15 is the MNO 20 , including a receiver 2301 , a processor 2401 , a transmitter 2501 and a memory 2601 .

The receiver 2301 is configured to receive a first message sent by a profile manager PM, where the first message includes information about a first profile in the eUICC, where the information about the first profile includes the first profile An identification ID of a profile and an ID of a profile domain PD where the first profile is located;

Processor 2401, configured to determine the ID of the update profile and update the subscription information of the first profile in the home subscription server HSS according to the information of the first profile;

The sender 2501 is configured to send a second message to the profile configurator, where the second message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD, and the ID of the PM, so that The profile configurator downloads the update profile to the PD of the eUICC through the PM, further causing the eUICC to install the update profile in the PD, and update the first profile to the second profile and modify the attributes of the second profile;

The receiver 2301 is further configured to receive the first response message sent by the profile configurator.

In the embodiment of the present invention, when the existing profile with the configuration attribute in the eUICC and the profile with the running attribute to be downloaded belong to the same operator, the MNO can determine the ID of the updated profile according to the information of the first profile with the configuration attribute , and instruct the PPer to download the updated profile for the eUICC, so that the eUICC updates the first profile to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Various components in the MNO 20 are coupled together through the bus system 2701, wherein the bus system 2701 includes not only a data bus, but also a power bus, a control bus, and a status signal bus. However, the various buses are labeled bus system 2701 in FIG. 15 for clarity of illustration.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 2401 or implemented by the processor 2401 . The processor 2401 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 2401 or instructions in the form of software. The aforementioned processor 2401 may be a general processor, DSP, ASIC, FPGA or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 2601, and the processor 2401 reads the information in the memory 2601, and completes the steps of the above method in combination with its hardware.

It can be understood that the memory 2601 in this embodiment of the present invention may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Wherein, the non-volatile memory may be ROM, PROM, EPROM, EEPROM or flash memory. Volatile memory can be RAM, which acts as external cache memory. By way of example and not limitation, many forms of RAM are available such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM, and DRRAM. The memory 2601 of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

It should be understood that the embodiments described herein may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, processor 2401 may be implemented in one or more ASICs, DSPs, DSPDs, PLDs, FPGAs, general purpose processors, controllers, microcontrollers, microprocessors, other electronic devices for performing the functions described herein. unit or its combination.

When the embodiments are implemented in software, firmware, middleware or microcode, program code or code segments, they may be stored on a machine-readable medium such as a memory component. A code segment may represent a procedure, function, subroutine, program, routine, subroutine, module, software grouping, class, or any combination of instructions, data structures, or program statements. A code segment can be coupled to another code segment or a hardware circuit by passing and/or receiving information, data, arguments, parameters, or memory contents. Information, arguments, parameters, data, etc. may be passed, forwarded, or sent using any suitable means, including memory sharing, message passing, token passing, network transmission, and the like.

For a software implementation, the techniques described herein can be implemented through modules (eg, procedures, functions, and so on) that perform the functions described herein. The software codes may be stored in memory units and executed by processors. The memory unit can be implemented within the processor or external to the processor, in which case the memory unit can be communicatively coupled to the processor via various means as is known in the art.

Optionally, as an embodiment, the sender 2501 is further configured to send a second instruction to the eUICC, so that the eUICC modifies the attribute of the second profile according to the second instruction.

Optionally, as another embodiment,

The receiver 2301 is further configured to receive a user's subscription request, where the subscription request includes the ID of the eUICC;

The sender 2501 is further configured to send a request message to the PM according to the subscription request;

The first message is a second response message corresponding to the request message.

Optionally, as another embodiment, the subscription request further includes the ID of the PM.

Optionally, as another embodiment, the receiver 2301 is specifically configured to: receive the first message sent by the PM from the profile configurator.

Optionally, as another embodiment, the first message further includes the ID of the PM and the ID of the eUICC.

Optionally, as another embodiment, the second message further includes key information, so that the profile configurator uses the key to protect transmission of the updated profile.

Optionally, as another embodiment, the information of the first profile also includes the size of the available storage space of the PD where the first profile is located, and the second message also includes the available storage space of the PD where the first profile is located. The size of the space, so that when the profile configurator determines that the size of the available storage space of the PD where the first profile is located is sufficient to install the updated profile, download the updated profile to all the eUICCs through the PM described in the PD.

Optionally, as another embodiment, the information of the first profile further includes at least one of the following: the ID of the MNO to which the first profile belongs, the attributes of the first profile, and the user who downloaded the first profile. The ID of the profile configurator and the size of the available storage space of the PD where the first profile is located.

The MNO 20 shown in FIG. 15 can embody the processes implemented by the MNO in the foregoing method embodiments, and details are not repeated here to avoid repetition.

Fig. 16 is a structural block diagram of a device for configuring an eUICC according to another embodiment of the present invention. The device shown in FIG. 16 is PPer 30 , which includes a receiver 3101 , a processor 3201 , a transmitter 3301 and a memory 3401 .

The receiver 3101 is configured to receive a request message sent by a device of a mobile network operator MNO, where the request message includes the ID of the eUICC, the ID of the updated profile, the ID of the PD in the eUICC, and the ID of the PM. Wherein, the first profile in the PD in the eUICC is a configuration profile.

Processor 3201, configured to determine the update profile according to the ID of the update profile.

The sender 3301 is configured to send a first message to the PM according to the ID of the PM, where the first message includes the update profile, the ID of the eUICC, and the ID of a PD in the eUICC, so that The PM sends the update profile to the eUICC, and the eUICC updates the first profile in the PD to the second profile according to the update profile. Wherein, the second profile has the running attribute.

The receiver 3101 is further configured to receive the first response message sent by the PM.

The sender 3301 is further configured to send a second response message to the device of the MNO.

In the embodiment of the present invention, when the existing profile with configuration attributes in the eUICC and the profile with running attributes to be downloaded belong to the same operator, PPer can determine the update profile according to the ID of the update profile sent by the MNO, and send the profile The updated profile is sent to the eUICC via the PM, so that the eUICC updates the first profile with the configuration attribute to the second profile, and the second profile has the running attribute. In this way, network resources when downloading profiles can be saved. Moreover, at the same time, the network access resources of the operator can be saved. For example, the operator does not need to allocate parameters in the network access credential such as new IMSI and Ki to the second profile again.

Various components in the PPer 30 are coupled together through a bus system 3501, where the bus system 3501 includes not only a data bus, but also a power bus, a control bus, and a status signal bus. However, the various buses are labeled as bus system 3501 in FIG. 16 for clarity of illustration.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 3201 or implemented by the processor 3201 . The processor 3201 may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 3201 or instructions in the form of software. The aforementioned processor 3201 may be a general processor, DSP, ASIC, FPGA or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 3401, and the processor 3201 reads the information in the memory 3401, and completes the steps of the above method in combination with its hardware.

It can be understood that the memory 3401 in this embodiment of the present invention may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Wherein, the non-volatile memory may be ROM, PROM, EPROM, EEPROM or flash memory. Volatile memory can be RAM, which acts as external cache memory. By way of example and not limitation, many forms of RAM are available such as SRAM, DRAM, SDRAM, DDR SDRAM, ESDRAM, SLDRAM, and DRRAM. The memory 3401 of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

It should be understood that the embodiments described herein may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, the processor 3201 can be implemented in one or more ASIC, DSP, DSPD, PLD, FPGA, general purpose processor, controller, microcontroller, microprocessor, other electronic devices for performing the functions described in this application. unit or its combination.

When the embodiments are implemented in software, firmware, middleware or microcode, program code or code segments, they may be stored on a machine-readable medium such as a memory component. A code segment may represent a procedure, function, subroutine, program, routine, subroutine, module, software grouping, class, or any combination of instructions, data structures, or program statements. A code segment can be coupled to another code segment or a hardware circuit by passing and/or receiving information, data, arguments, parameters, or memory contents. Information, arguments, parameters, data, etc. may be passed, forwarded, or sent using any suitable means, including memory sharing, message passing, token passing, network transmission, and the like.

For a software implementation, the techniques described herein can be implemented through modules (eg, procedures, functions, and so on) that perform the functions described herein. The software codes may be stored in memory units and executed by processors. The memory unit can be implemented within the processor or external to the processor, in which case the memory unit can be communicatively coupled to the processor via various means as is known in the art.

Optionally, as an embodiment, the third request message may include key information, so that the processor 3201 may use the key to protect transmission of the update profile. That is to say, the update profile in the first message may be an encrypted update profile.

Optionally, as another embodiment, if the request message includes the size of the available storage space of the PD, then the sender 3301 is specifically configured to: when determining the size of the available storage space of the PD where the first profile is located When the updated profile can be accommodated, sending a first message to the PM.

Wherein, the updating profile may include an instruction for instructing the eUICC to modify the attributes of the profile in the PD.

It can be understood that the memory 3401 is used to store the update profile. Specifically, the update profile generated according to the operator's request may be stored.

For example, operator A has profile A with configuration attributes, profile B with operation attributes, and profile C with operation attributes. Then, the update profile corresponding to operator A may include two. For example, the memory 3401 may store a first updated profile from profile A to profile B, and a second updated profile from profile A to profile C.

The PPer 30 shown in FIG. 16 can realize the process implemented by the PPer in the foregoing method embodiments, and to avoid repetition, details are not repeated here.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other various media that can store program codes. .

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (60)

1. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

The eUICC receives the first message that profile manager PM is sent, and the first message includes updating profile and profile domain The mark ID of PD；

The update profile is mounted in the PD by the eUICC, and the first profile profile in the PD is updated to 2nd profile, wherein the first profile is configuration profile；

The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute by the eUICC.

2. the eUICC will the method according to claim 1, wherein the update profile includes the first instruction The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute, comprising:

The attribute modification of 2nd profile is that operation attribute or configuration belong to according to first instruction by the eUICC Property and operation attribute.

3. the method according to claim 1, wherein the attribute of the 2nd profile is repaired in the eUICC It is changed to before operation attribute or configuration attribute and operation attribute, further includes:

The eUICC receives the second instruction of the PM or Mobile Network Operator MNO；

The attribute modification of 2nd profile is operation attribute or configuration attribute and operation attribute, packet by the eUICC It includes:

The attribute modification of 2nd profile is that operation attribute or configuration belong to according to second instruction by the eUICC Property and operation attribute.

4. method according to any one of claims 1 to 3, which is characterized in that the eUICC installs the update profile In the PD, comprising:

The eUICC judges whether the size of the free memory of the PD installs the update profile enough；

If the eUICC determines that the size of the free memory of the PD installs the update profile enough, by the update Profile is mounted in the PD；

If the eUICC determines that the size of the free memory of the PD does not install the update profile, the eUICC enough It distributes new memory space for the PD, and the update profile is mounted in the new memory space or described is used In memory space and the new memory space.

5. method according to any one of claims 1 to 3, which is characterized in that further include:

The eUICC is sent to the terminal at place refreshes proactive command, so that the terminal restarts the eUICC；

The eUICC uses the 2nd profile access to mobile network operator MNO.

6. method according to any one of claims 1 to 3, which is characterized in that receive first that PM is sent in the eUICC Before message, further includes:

The eUICC receives the request message that the PM is sent；

The eUICC is according to the request message, and Xiang Suoshu PM sends the second response message, wherein the second response message packet Include the information of the first profile.

7. method according to any one of claims 1 to 3, which is characterized in that receive first that PM is sent in the eUICC Before message, further includes:

The eUICC receives the profile downloading request message that terminal is sent, and the profile downloading request message includes moving The ID of dynamic network operator MNO；

When the eUICC determines that the MNO is MNO belonging to the first profile, the eUICC is according to Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

8. according to the method described in claim 6, it is characterized in that, the information of the first profile includes:

The ID of MNO belonging to ID, the first profile of first profile and the institute where the first profile State the ID of PD.

9. the method according to the description of claim 7 is characterized in that the information of the first profile includes:

The ID of MNO belonging to ID, the first profile of first profile and the institute where the first profile State the ID of PD.

10. method according to claim 8 or claim 9, which is characterized in that the information of the first profile further includes following It is at least one:

The attribute of first profile, downloading the first profile profile configurator ID and described first The size of the free memory of PD where profile.

11. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

Profile manager PM receives the first message that profile configurator is sent, and the first message includes updating profile, described The ID of profile domain PD in the mark ID and eUICC of eUICC；

The PM is according to the ID of the eUICC, and Xiang Suoshu eUICC transmission second message, the second message includes the update The ID of profile and the PD, so that the update profile is mounted in the PD by the eUICC, by the PD One profile profile is updated to the 2nd profile, and is to run attribute or match by the attribute modification of the 2nd profile Set attribute and operation attribute, wherein the first profile is configuration profile；

The PM receives the second response message that the eUICC is sent；

The PM sends the first response message to the profile configurator.

12. according to the method for claim 11, which is characterized in that further include:

The PM sends the first instruction to the eUICC, so that the eUICC is instructed according to described first by described second The attribute modification of profile is operation attribute or configuration attribute and operation attribute.

13. according to the method for claim 11, which is characterized in that receive the transmission of profile configurator in the PM first disappears Before breath, further includes:

The PM receives the first request message that Mobile Network Operator MNO is sent, and first request message includes described The ID of the ID of eUICC and the MNO；

The PM obtains the information of the first profile according to first request message；

The PM sends third response message to the MNO, and the third response message includes the letter of the first profile Breath.

14. according to the method for claim 13, which is characterized in that the PM is according to first request message acquisition The information of first profile, comprising:

ID of the PM according to the eUICC in first request message, Xiang Suoshu eUICC the second request message of transmission；

The PM receives the 4th response message that the eUICC is sent, and the 4th response message includes the first profile Information.

15. according to the method for claim 13, which is characterized in that the information of the first profile is stored in the PM In eUICC information aggregate EIS in,

The PM obtains the information of the first profile according to first request message, comprising:

The PM obtains the information of the first profile from the EIS.

16. 3 to 15 described in any item methods according to claim 1, which is characterized in that the PM sends third to the MNO Response message, comprising:

When the PM determines that the MNO is MNO belonging to the first profile, Xiang Suoshu MNO sends third response and disappears Breath.

17. method according to claim 11 or 12, which is characterized in that receive that profile configurator is sent in the PM Before one message, further includes:

The PM receives the third request message that the eUICC is sent, the third request message include the eUICC ID and The information of first profile；

The third request message is sent to Mobile Network Operator MNO belonging to the first profile by the PM.

18. according to the method for claim 16, which is characterized in that the information of the first profile includes described in downloading The ID of the profile configurator of first profile；

The third request message is sent to MNO belonging to the first profile by the PM, comprising:

The third request message is sent to the profile configurator by the PM, so that the profile configurator is by described Three request messages are forwarded to the MNO.

19. 3 to 15,18 described in any item methods according to claim 1, which is characterized in that the information of the first profile Include:

The ID of MNO belonging to ID, the first profile of first profile and the institute where the first profile State the ID of PD.

20. according to the method for claim 19, which is characterized in that the information of the first profile further include with down toward Few one kind:

The attribute of first profile, downloading the first profile profile configurator ID and described first The size of the free memory of PD where profile.

21. method described in any one of 1 to 15,18,20 according to claim 1, which is characterized in that the 2nd profile Also there is configuration attribute.

22. a kind of method for configuring universal embedded integrated circuit card eUICC characterized by comprising

The equipment of Mobile Network Operator MNO receives the first message that profile manager PM is sent, and the first message includes institute State the information of the first profile profile in eUICC, wherein the information of the first profile includes described first The ID of profile domain PD where the mark ID and the first profile of profile；

The equipment of the MNO determines the ID for updating profile and updates home subscribed services according to the information of the first profile The signing information of first profile described in device HSS；

The equipment of the MNO to profile configurator send second message, wherein the second message include the eUICC ID, The ID of the ID and the PM of the ID for updating profile, the PD, so that the profile configurator will be described by the PM It updates profile to be downloaded in the PD of the eUICC, further such that described in the updates profile is mounted on by the eUICC In PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

The equipment of the MNO receives the first response message that the profile configurator is sent.

23. according to the method for claim 22, which is characterized in that receive the profile configurator in the equipment of the MNO After the first response message sent, further includes:

The equipment of the MNO sends the second instruction to the eUICC, so that the eUICC is instructed according to described second by institute The attribute modification of the 2nd profile is stated as operation attribute or configuration attribute and operation attribute.

24. according to the method for claim 22, which is characterized in that receive PM transmission in the equipment of the MNO first disappears Before breath, further includes:

The equipment of the MNO receives the subscription request of user, and the subscription request includes the ID of the eUICC；

The equipment of the MNO sends request message according to the subscription request, Xiang Suoshu PM；

The first message is the second response message corresponding with the request message.

25. according to the method for claim 24, which is characterized in that the subscription request further includes the ID of the PM.

26. according to the method for claim 22, which is characterized in that the equipment of the MNO receives the first message that PM is sent, Include:

The equipment of the MNO receives the first message that the PM is sent from the profile configurator.

27. according to the described in any item methods of claim 22 to 26, which is characterized in that the first message further includes the PM ID and the eUICC ID.

28. according to the described in any item methods of claim 22 to 26, which is characterized in that the second message further includes key Information, so that the profile configurator is using the transmission for updating profile described in the cryptographic key protection.

29. according to the described in any item methods of claim 22 to 26, which is characterized in that the information of the first profile further includes The size of the free memory of PD where first profile, the second message further include the first profile The size of the free memory of the PD at place, so that the profile configurator is where determining the first profile When the size of the free memory of PD installs the update profile enough, the update profile is downloaded to by institute by the PM It states in the PD of eUICC.

30. according to the described in any item methods of claim 22 to 26, which is characterized in that the information of the first profile is also It comprises at least one of the following:

The ID of MNO belonging to first profile, the attribute of the first profile, downloading the first profile The size of the free memory of PD where the ID of profile configurator and the first profile.

31. a kind of universal embedded integrated circuit card eUICC characterized by comprising

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes updating profile and wheel The mark ID of wide domain PD；

Processing unit, for the update profile to be mounted in the PD, more by the first profile profile in the PD It is newly the 2nd profile, wherein the first profile is configuration profile；

The processing unit is also used to the attribute modification of the 2nd profile be operation attribute or configuration attribute and fortune Row attribute.

32. eUICC according to claim 31, which is characterized in that the update profile includes the first instruction, the processing Unit is specifically used for:

It is operation attribute or configuration attribute and operation by the attribute modification of the 2nd profile according to first instruction Attribute.

33. eUICC according to claim 31, which is characterized in that

The receiving unit is also used to receive the second instruction of the PM or Mobile Network Operator MNO；

The processing unit is specifically used for according to second instruction, is that operation belongs to by the attribute modification of the 2nd profile Property or configuration attribute and operation attribute.

34. according to the described in any item eUICC of claim 31 to 33, which is characterized in that the processing unit is specifically used for:

Judge whether the size of the free memory of the PD installs the update profile enough；

If it is determined that the size of the free memory of the PD installs the update profile enough, the update profile is mounted on In the PD；

If it is determined that the size of the free memory of the PD does not install the update profile enough, deposited for PD distribution is new It stores up space, and the update profile is mounted on the new memory space or the free memory and described new is deposited It stores up in space.

35. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The transmission unit, is also used to: sending to the terminal at place and refreshes proactive command, so that the terminal is to described EUICC is restarted；

The processing unit is also used to using the 2nd profile access to mobile network operator MNO.

36. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The receiving unit is also used to receive the request message that the PM is sent；

The transmission unit is also used to according to the request message, and Xiang Suoshu PM sends the second response message, wherein described second Response message includes the information of the first profile.

37. according to the described in any item eUICC of claim 31 to 33, which is characterized in that it further include transmission unit,

The receiving unit is also used to receive the profile downloading request message of terminal transmission, the profile downloading request Message includes the mark ID of Mobile Network Operator MNO；

The transmission unit is also used to when determining the MNO is MNO belonging to the first profile, according to described Profile downloading request message, Xiang Suoshu PM send second message, and the second message includes the ID of the eUICC and described The information of first profile.

38. eUICC according to claim 36, which is characterized in that the information of the first profile includes:

Where ID, the first profile of MNO belonging to mark ID, the first profile of first profile Profile domain PD ID.

39. the eUICC according to claim 37, which is characterized in that the information of the first profile includes:

Where ID, the first profile of MNO belonging to mark ID, the first profile of first profile Profile domain PD ID.

40. the eUICC according to claim 38 or 39, which is characterized in that the information of the first profile further include with Lower at least one:

The attribute of first profile, downloading the first profile profile configurator ID and described first The size of the free memory of PD where profile.

41. a kind of equipment for configuring universal embedded integrated circuit card eUICC, which is characterized in that the equipment is profile Manager PM, comprising:

Receiving unit, for receiving the first message of profile configurator transmission, the first message includes updating profile, described The ID of profile domain PD in the mark ID and eUICC of eUICC；

Transmission unit sends second message for the ID according to the eUICC, Xiang Suoshu eUICC, and the second message includes institute The ID for updating profile and the PD is stated, so that the update profile is mounted in the PD by the eUICC, by the PD In first profile profile be updated to the 2nd profile, by the attribute modification of the 2nd profile be operation attribute or Person's configuration attribute and operation attribute, wherein the first profile is configuration profile；

The receiving unit is also used to receive the second response message that the eUICC is sent；

The transmission unit is also used to send the first response message to the profile configurator.

42. equipment according to claim 41, which is characterized in that the transmission unit is also used to:

The first instruction is sent to the eUICC, so that the eUICC is instructed according to described first by the 2nd profile Attribute modification be operation attribute or configuration attribute and operation attribute.

43. equipment according to claim 41, which is characterized in that further include processing unit:

The receiving unit, is also used to receive the first request message of Mobile Network Operator MNO transmission, and first request disappears The ID of mark ID and the MNO of the breath including the eUICC；

The processing unit, for obtaining the information of the first profile according to first request message；

The transmission unit is also used to send third response message to the MNO, and the third response message includes described first The information of profile.

44. equipment according to claim 43, which is characterized in that the processing unit is specifically used for:

The second request message is sent according to the ID of the eUICC in first request message, Xiang Suoshu eUICC；

The 4th response message that the eUICC is sent is received, the 4th response message includes the letter of the first profile Breath.

45. equipment according to claim 43, which is characterized in that the information of the first profile is stored in the PM In eUICC information aggregate EIS in,

The processing unit, is specifically used for: the information of the first profile is obtained from the EIS.

46. according to the described in any item equipment of claim 43 to 45, which is characterized in that the transmission unit is specifically used for:

When determining the MNO is MNO belonging to the first profile, Xiang Suoshu MNO sends third response message.

47. the equipment according to claim 41 or 42, it is characterised in that:

The receiving unit is also used to receive the third request message that the eUICC is sent, and the third request message includes institute State the information of the ID and the first profile of eUICC；

The transmission unit is also used to the third request message being sent to mobile network belonging to the first profile Operator MNO.

48. equipment according to claim 47, which is characterized in that the information of the first profile includes described in downloading The ID of the profile configurator of first profile；

The transmission unit, is specifically used for:

The third request message is sent to the profile configurator, so that the profile configurator requests the third Message is forwarded to the MNO.

49. according to claim 43 to 45,48 described in any item equipment, which is characterized in that the information of the first profile Include:

The ID and the wheel where the first profile of MNO belonging to ID, the first profile of first profile The ID of wide domain PD.

50. equipment according to claim 49, which is characterized in that the information of the first profile further include with down toward Few one kind:

The attribute of first profile, downloading the first profile profile configurator ID and described first The size of the free memory of PD where profile.

51. the equipment according to any one of claim 41 to 45,48,50, which is characterized in that the 2nd profile Also there is configuration attribute.

52. a kind of equipment for configuring universal embedded integrated circuit card eUICC, which is characterized in that the equipment is mobile network The equipment of operator MNO, comprising:

Receiving unit, for receiving the first message of profile manager PM transmission, the first message includes in the eUICC The information of first profile profile, wherein the information of the first profile includes the mark of the first profile The ID of profile domain PD where ID and the first profile；

Processing unit determines the ID for updating profile and updates home subscribed services for the information according to the first profile The signing information of first profile described in device HSS；

Transmission unit, for profile configurator send second message, wherein the second message include the eUICC ID, The ID of the ID and the PM of the ID for updating profile, the PD, so that the profile configurator will be described by the PM It updates profile to be downloaded in the PD of the eUICC, further such that described in the updates profile is mounted on by the eUICC In PD, the first profile is updated to the 2nd profile and modifies the attribute of the 2nd profile；

The receiving unit is also used to receive the first response message that the profile configurator is sent.

53. equipment according to claim 52, which is characterized in that the transmission unit is also used to send to the eUICC Second instruction, so that the attribute modification of the 2nd profile is operation attribute according to second instruction by the eUICC Or configuration attribute and operation attribute.

54. equipment according to claim 52, it is characterised in that:

The receiving unit, is also used to receive the subscription request of user, and the subscription request includes the ID of the eUICC；

The transmission unit is also used to according to the subscription request, and Xiang Suoshu PM sends request message；

The first message is the second response message corresponding with the request message.

55. equipment according to claim 54, which is characterized in that the subscription request further includes the ID of the PM.

56. equipment according to claim 52, which is characterized in that the receiving unit is specifically used for:

The first message that the PM is sent is received from the profile configurator.

57. according to the described in any item equipment of claim 52 to 56, which is characterized in that the first message further includes the PM ID and the eUICC ID.

58. according to the described in any item equipment of claim 52 to 56, which is characterized in that the second message further includes key Information, so that the profile configurator is using the transmission for updating profile described in the cryptographic key protection.

59. according to the described in any item equipment of claim 52 to 56, which is characterized in that the information of the first profile further includes The size of the free memory of PD where first profile, the second message further include the first profile The size of the free memory of the PD at place, so that the profile configurator is where determining the first profile When the size of the free memory of PD installs the update profile enough, the update profile is downloaded to by institute by the PM It states in the PD of eUICC.

60. according to the described in any item equipment of claim 52 to 56, which is characterized in that the information of the first profile is also It comprises at least one of the following:

The ID of MNO belonging to first profile, the attribute of the first profile, downloading the first profile The size of the free memory of PD where the ID of profile configurator and the first profile.