[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

WO2019119267A1 - 配置文件管理的方法、嵌入式通用集成电路卡和终端 - Google Patents

配置文件管理的方法、嵌入式通用集成电路卡和终端 Download PDF

Info

Publication number
WO2019119267A1
WO2019119267A1 PCT/CN2017/117172 CN2017117172W WO2019119267A1 WO 2019119267 A1 WO2019119267 A1 WO 2019119267A1 CN 2017117172 W CN2017117172 W CN 2017117172W WO 2019119267 A1 WO2019119267 A1 WO 2019119267A1
Authority
WO
WIPO (PCT)
Prior art keywords
configuration file
message
euicc
processing module
lpa
Prior art date
Application number
PCT/CN2017/117172
Other languages
English (en)
French (fr)
Inventor
于小博
范姝男
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to CN202111196157.2A priority Critical patent/CN114095916A/zh
Priority to US16/954,971 priority patent/US11516672B2/en
Priority to EP21194997.9A priority patent/EP4009680A1/en
Priority to EP17935367.7A priority patent/EP3703400B1/en
Priority to PCT/CN2017/117172 priority patent/WO2019119267A1/zh
Priority to CN201780082876.7A priority patent/CN110169100B/zh
Publication of WO2019119267A1 publication Critical patent/WO2019119267A1/zh
Priority to US17/973,088 priority patent/US12041456B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/183—Processing at user equipment or user record carrier
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/77—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in smart cards
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/30—Security of mobile devices; Security of mobile applications
    • H04W12/37—Managing security policies for mobile devices or for controlling mobile applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/20—Transfer of user or subscriber data
    • H04W8/205—Transfer to or from user equipment or user record carrier
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities

Definitions

  • the present application relates to the field of eUICC management, and in particular, to a method for configuring a profile management, an embedded universal integrated circuit card eUICC, and a terminal.
  • the embedded universal integrated circuit card is a third-generation telecommunications smart card, and the term eUICC is derived from an embedded UICC.
  • the eUICC can be embedded in the terminal device in a single chip form, or can be set in the terminal device as part of other single chips, but does not mean that the eUICC must be embedded in the terminal device and cannot be moved.
  • the eUICC can be a removable card form, like a user. The same is the same as the subscriber identification module (SIM) card, MicroSIM card or NanoSIM card.
  • SIM subscriber identification module
  • the eUICC can activate the configuration file to access the carrier network (such as a 2G/3G/4G network, etc.).
  • the eUICC can perform local configuration file management by using a Remote SIM Provisioning (RSP) server, such as configuration file activation, deactivation or deletion triggered by the terminal device user, but the configuration file management in the prior art RSP server is usually It is a configuration file that is installed under the same chip operating system (COS) and cannot be applied to multiple configuration files on multiple COSs.
  • COS chip operating system
  • OS operating system
  • the invention provides a configuration file management method, an embedded universal integrated circuit card eUICC and a terminal, which solves the problem that the existing RSP server cannot perform local configuration file management in a multi-OS multi-configuration file scenario.
  • an embedded universal integrated circuit card eUICC includes a main platform and at least one image package installed.
  • the main platform is a hardware platform, and each image package includes at least one configuration file and an operating system OS.
  • processing module is used to:
  • the first message is an operation instruction input by the user
  • Management of configuration files between different OSs is implemented by a processing module disposed in the eUICC main platform.
  • the processing module such as ISD-R, may also be added to the main platform, and the main platform performs operations similar to ISD-R.
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, and the ICCID is used to identify the configuration file; Get the message of the profile policy rule.
  • the sending by the at least one OS corresponding to the at least one image packet, the second message, respectively:
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information
  • the indication information is used to indicate that the running configuration file on the at least one OS in the eUICC is deleted
  • the second indication information is used to indicate that the running configuration file is deleted
  • the first indication information is used to indicate that the test configuration file on the at least one OS in the eUICC is deleted.
  • the second indication information is used to indicate the deletion of the test configuration file.
  • the first message further includes third indication information, where the third indication information is used to indicate that the deletion is at least An OS; after sending the second message to the at least one OS corresponding to the at least one image package, the processing module is further configured to:
  • deleting the at least one OS comprises deleting at least one non-default OS or deleting at least one test OS.
  • the processing module before the ISD-R receives the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • each image package includes an OS in at least one OS and at least one configuration file
  • the configuration file list includes at least one OS identifier and at least one OS installed at least The ICCID corresponding to a configuration file.
  • the processing module before receiving the first message sent by the local profile assistant LPA, is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the processing module is the issuer security domain-root ISD-R.
  • an embedded universal integrated circuit card eUICC in a second aspect, includes a local configuration file assistant LPA, and the LPA is used to:
  • the LPA Determining that the first configuration file is installed in the first operating system OS, and executing the configuration file policy rule PPR of the currently activated activated second configuration file, when the PPR is not allowed to be deactivated, the LPA displays that the first configuration file cannot be The activated information, wherein the second configuration file is installed on the second OS.
  • the LPA eUICC is further used to: before receiving an operation instruction of the user-initiated activation of the first configuration file:
  • the first image package includes the first OS and the first configuration file;
  • the configuration file list includes the identifier of the at least one OS installed by the eUICC, and is installed in the The integrated circuit card identifier ICCID corresponding to the at least one OS configuration file.
  • the LPA eUICC is further used to: before receiving an operation instruction input by the user to activate the first configuration file:
  • the second image package includes a second OS and a second configuration file
  • the configuration file list includes the second OS and is installed in the second OS
  • the integrated circuit card identifier ICCID corresponding to the second configuration file
  • the LPA When the LPA receives the operation instruction of the activation second configuration file input by the user, the LPA sends a command to activate the second configuration file to the second OS, and the command to activate the configuration file includes the ICCID corresponding to the second configuration file;
  • an embedded universal integrated circuit card eUICC includes a local configuration file assistant LPA, a main platform, and an installed image package.
  • the main platform is a hardware platform, and the image package includes a configuration file and a first operating system OS.
  • the main platform includes a processing module, and the LPA is used to:
  • the LPA is also used to: Before receiving an operational instruction entered by the user:
  • the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC includes a main platform and an image package.
  • the main platform is a hardware platform, and the image package includes a configuration file and a first operating system OS.
  • the main platform includes a processing module and a processing module. Used for:
  • the local profile assistant LPA Receiving a first message sent by the local profile assistant LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the processing module After receiving the feedback information sent by the first OS, the processing module sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the configuration file list is updated according to the image package downloaded and installed by the eUICC, and the image package includes the first OS and the configuration file.
  • processing module is also used to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the processing module is the issuer security domain-root ISD-R.
  • an embedded universal integrated circuit card eUICC includes a main platform and at least one image package installed.
  • the main platform is a hardware platform, and each image package includes at least one configuration file and an operating system OS.
  • processing module is used to:
  • the first message includes first indication information, where the first indication information is used to obtain information about all configuration files in the at least one OS corresponding to the at least one image package installed by the eUICC;
  • the acquisition of configuration file information between different OSs is implemented by the ISD-R set in the eUICC main platform.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the image package includes at least one OS and a configuration file installed in the at least one OS, where the configuration file list includes at least one OS identifier and at least one configuration file installed under the OS.
  • the integrated circuit card identifies the ICCID.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the processing module is the issuer security domain-root ISD-R.
  • the embedded universal integrated circuit card eUICC includes a main platform, the main platform is a hardware platform, and the main platform includes a processing module, and the method includes:
  • the processing module receives the first message sent by the local profile assistant LPA, and the first message is an operation instruction input by the user;
  • the processing module sends a second message to the at least one operating system OS installed by the eUICC, where the second message is used to instruct the at least one OS to perform a corresponding operation.
  • Management of configuration files between different OSs is implemented by a processing module disposed in the eUICC main platform. It is also possible to add no processing modules to the main platform.
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, and the ICCID is used to identify the configuration file; Get the message of the profile policy rule.
  • Activation of the configuration file across the OS is implemented by a processing module disposed within the eUICC main platform.
  • the processing module separately sends the second message to the at least one operating system OS installed by the eUICC, including:
  • the processing module sends a second message to the OS where the activated configuration file is located, where the at least one OS includes an OS where the activated configuration file is located;
  • the processing module receives a profile policy rule of the activated profile sent by the OS;
  • the processing module executes the profile policy rule according to the profile policy rule and the rule authorization list RAT preset by the processing module;
  • the processing module sends an error message to the LPA.
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information
  • the indication information is used to indicate that the running configuration file on the at least one OS in the eUICC is deleted
  • the second indication information is used to indicate that the running configuration file is deleted
  • the first indication information is used to indicate that the test configuration file on the at least one OS in the eUICC is deleted.
  • the second indication information is used to indicate the deletion of the test configuration file.
  • the first message further includes third indication information, where the third indication information is used to indicate that the deletion is at least An OS; after the processing module sends the second message to the at least one operating system OS installed by the eUICC, the method further includes:
  • the processing module sends a third message to the at least one OS, where the third message includes the third indication information.
  • deleting the at least one OS includes deleting at least one non-default OS or deleting at least one test OS.
  • the method before the processing module receives the first message sent by the local profile assistant LPA, the method further includes:
  • the processing module updates the configuration file list according to at least one image package downloaded and installed by the eUICC; each image package includes at least one OS in the OS and at least one configuration file, and the configuration file list includes the identifier of the at least one OS and the at least one OS is installed. At least one profile corresponds to the ICCID.
  • the method before the processing module receives the first message sent by the local configuration file assistant LPA, the method further includes:
  • the processing module sends ISD-R mode information to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the processing module can be the issuer security domain-root ISD-R.
  • a method for local management of a configuration file may include:
  • the local profile assistant LPA receives an operation instruction input by the user to activate the first configuration file
  • the LPA determines that the first configuration file is installed in the first operating system OS, and executes the configuration file policy rule PPR of the currently activated activated second configuration file. When the PPR is not allowed to be deactivated, the LPA displays that the first configuration file cannot be The information that is activated.
  • the method before the local profile assistant LPA receives the operation instruction of the user-initiated activation of the first configuration file, the method further includes:
  • the LPA updates the configuration file list according to the first image package downloaded and installed by the embedded universal integrated circuit card eUICC, the first image package includes the first OS and the first configuration file; the configuration file list includes the identifier and installation of the at least one OS installed by the eUICC The integrated circuit card identifier ICCID corresponding to the configuration file at the at least one OS.
  • the method before the local profile assistant LPA receives the operation instruction of the user-initiated activation of the first configuration file, the method further includes:
  • the LPA updates the configuration file list according to the second installation image package downloaded and installed by the embedded universal integrated circuit card eUICC, the second image package includes the second OS and the second configuration file, the configuration file list includes the second OS and is installed in the second The integrated circuit card identifier ICCID corresponding to the second configuration file in the OS;
  • the LPA When the LPA receives the operation instruction of the activation second configuration file input by the user, the LPA sends a command to activate the second configuration file to the second OS, and the command to activate the configuration file includes the ICCID corresponding to the second configuration file;
  • the LPA receives the PPR of the second configuration file sent by the second OS.
  • the eighth aspect provides a method for local management of a configuration file.
  • the embedded universal integrated circuit card eUICC includes a main platform, the main platform is a hardware platform, and the main platform includes a processing module, and the method may include:
  • the local profile assistant LPA receives an operation instruction input by the user, and the operation instruction is used to activate or delete the configuration file;
  • the LPA determines that the configuration file is installed in the first operating system OS, and the first OS is not activated;
  • the LPA sends a first message to the processing module, where the first message is used by the processing module to execute an operation instruction, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first OS.
  • the processing module can be a publisher security domain-root ISD-R.
  • the management of configuration files between different OSs is implemented by the ISD-R set in the main platform of the eUICC.
  • the method before the local profile assistant LPA receives the operation instruction input by the user, the method further includes:
  • the LPA receives the ISD-R mode information sent by the processing module, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • a ninth aspect provides a method for local management of a configuration file.
  • the embedded universal integrated circuit card eUICC includes a main platform, the main platform is a hardware platform, and the main platform includes a processing module, and the method may include:
  • the processing module receives the first message sent by the local configuration file assistant LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the processing module sends a second message to the OS corresponding to the identifier of the first OS, where the second message includes a command to activate the first OS;
  • the processing module After the processing module receives the feedback information sent by the first OS, the processing module sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processing module can be a publisher security domain-root ISD-R.
  • the activation or deletion of configuration files between different OSs is implemented by the ISD-R set in the main platform of the eUICC.
  • the method before the ISD-R receives the first message sent by the local profile assistant LPA, the method further includes:
  • the processing module updates the configuration file list according to the image package downloaded and installed by the eUICC, and the image package includes the first OS and the configuration file.
  • the method further includes:
  • the processing module sends ISD-R mode information to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the embedded universal integrated circuit card eUICC includes a main platform, the main platform is a hardware platform, and the main platform includes a processing module, and the method may include:
  • the processing module receives the first message sent by the local configuration file assistant LPA, where the first message includes first indication information, where the first indication information is used to indicate that information about all configuration files in the at least one operating system OS installed by the eUICC is acquired;
  • the processing module sends a second message to the at least one OS, where the second message includes second indication information, where the second indication information is used to indicate that the information of the configuration file is obtained;
  • the processing module receives at least one third message sent by the at least one OS, where the third message includes configuration file list information;
  • the processing module sends a fourth message to the LPA, where the fourth message includes configuration file list information sent by at least one OS.
  • the processing module can be a publisher security domain-root ISD-R.
  • the acquisition of configuration file information between different OSs is implemented by the ISD-R set in the eUICC main platform.
  • the method before the processing module receives the first message sent by the local profile assistant LPA, the method further includes:
  • the processing module updates the configuration file list according to the image package downloaded and installed by the eUICC.
  • the image package includes at least one OS and a configuration file installed in the at least one OS, where the configuration file list includes at least one OS identifier and at least one configuration file installed under the OS.
  • the corresponding integrated circuit card identifies the ICCID.
  • the method before the processing module receives the first message sent by the local profile assistant LPA, the method further includes:
  • the processing module sends the ISD-R mode information to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC is provided.
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform, and the processing module includes:
  • a receiving unit configured to receive a first message sent by the LPA, where the first message is an operation instruction input by the user;
  • a sending unit configured to separately send a second message to the at least one operating system OS installed by the eUICC, where the second message is used to instruct the at least one OS to perform a corresponding operation.
  • the management of configuration files between different OSs is realized by the ISD-R set in the main platform of the eUICC.
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, and the ICCID is used to identify the configuration file;
  • the message is a message that gets the profile policy rule.
  • the processing module can be the issuer security domain-root ISD-R.
  • the activation of the configuration file across the OS is implemented by the ISD-R set in the main platform of the eUICC.
  • the processing module further includes a processing unit; the sending unit is configured to install at least the eUICC respectively An operating system OS sends a second message, including:
  • the sending unit sends a second message to the OS where the activated configuration file is located, and the at least one OS includes the OS where the activated configuration file is located;
  • Receiving unit receives a profile policy rule of an activated profile sent by the OS
  • a processing unit configured to execute a profile policy rule according to the profile policy rule and the rule authorization list RAT preset by the processing module;
  • the sending unit sends an error message to the LPA.
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information
  • the first indication information is used to indicate that the running configuration file on the at least one OS in the eUICC is deleted
  • the second indication information is used to indicate that the running configuration file is deleted
  • the first indication information is used to indicate that the test configuration file on the at least one OS in the eUICC is deleted.
  • the second indication information is used to indicate that the test configuration file is deleted.
  • the first message further includes third indication information, where the third indication information is used Instructing to delete at least one OS;
  • the sending unit is further configured to separately send a third message to the at least one OS, where the third message includes the third indication information.
  • deleting the at least one OS comprises deleting at least one non-default OS or deleting at least one test OS.
  • the processing unit of the processing module updates the configuration file list according to at least one image package downloaded and installed by the eUICC; each image package includes an OS in at least one OS and at least one configuration file, the configuration file list includes an identifier of the at least one OS and at least one OS The ICCID corresponding to at least one configuration file installed.
  • the sending unit is further configured to send ISD-R mode information to the LPA, the ISD-R The mode information is used to instruct the LPA to send a first message to the processing module when receiving an operation instruction input by the user.
  • a terminal where the terminal includes a local profile assistant LPA, and the LPA includes:
  • a receiving unit configured to receive an operation instruction input by the user to activate the first configuration file
  • a processing unit configured to determine that the first configuration file is installed in the first operating system OS, and execute a profile policy rule PPR of the currently activated activated second configuration file, and when the PPR is not allowed to be deactivated, the LPA displays the first A profile cannot be activated. Management of configuration files across OS through LPA.
  • the processing unit is further configured to: update the configuration file list according to the first image package downloaded and installed by the eUICC, where the first image package includes the first OS and the first configuration file; and the configuration file list includes the eUICC installation.
  • the LPA further includes a sending unit
  • the processing unit is further configured to update the configuration file list according to the second installation image package downloaded and installed by the embedded universal integrated circuit card eUICC, where the second image package includes the second OS and the second configuration file, where the configuration file list includes the second OS.
  • the sending unit sends a command for activating the second configuration file to the second OS, where the command for activating the configuration file includes the ICCID corresponding to the second configuration file;
  • the receiving unit receives the PPR of the second configuration file sent by the second OS.
  • the thirteenth aspect provides a terminal, where the terminal includes a local configuration file assistant LPA and an embedded universal integrated circuit card eUICC.
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform, and the LPA includes:
  • a receiving unit configured to receive an operation instruction input by the user, where the operation instruction is used to activate or delete the configuration file
  • a processing unit configured to determine that the configuration file is installed in the first operating system OS, and the first OS is not activated
  • a sending unit configured to send a first message to the processing module, where the first message is used by the ISD-R to execute an operation instruction, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first OS.
  • the processing module is the issuer security domain-root ISD-R.
  • the management of configuration files between different OSs is implemented by the ISD-R set in the main platform of the eUICC.
  • the receiving unit is further configured to receive the ISD-R mode information sent by the processing module, where the ISD-R mode information is used to indicate that the LPA sends the first message to the processing module when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC is provided.
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform, and the processing module includes:
  • a receiving unit configured to receive a first message sent by the LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • a sending unit configured to send a second message to the OS corresponding to the identifier of the first OS, where the second message includes a command to activate the first OS
  • the processing module After the receiving unit receives the feedback information sent by the first OS, the processing module sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processing module is the issuer security domain-root ISD-R.
  • the activation or deletion of configuration files between different OSs is implemented by the ISD-R set in the main platform of the eUICC.
  • the processing module further includes a processing unit, configured to update the configuration file list according to the image package downloaded and installed by the eUICC, where the image package includes the first OS and the configuration file.
  • the sending unit is further configured to send ISD-R mode information to the LPA, where the ISD-R mode information is used to indicate that the LPA sends the first message to the processing module when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC is provided.
  • the main platform of the eUICC includes a processing module, where the main platform is a hardware platform, and the processing module includes:
  • a receiving unit configured to receive a first message sent by the LPA, where the first message includes first indication information, where the first indication information is used to indicate that information about all configuration files in the at least one operating system OS installed by the eUICC is obtained;
  • a sending unit configured to send a second message to the at least one OS, where the second message includes second indication information, where the second indication information is used to indicate that the information of the configuration file is obtained;
  • the receiving unit is further configured to receive at least one third message sent by the at least one OS, where the third message includes configuration file list information;
  • the sending unit is further configured to send a fourth message to the LPA, where the fourth message includes configuration file list information sent by the at least one OS.
  • the processing module is the issuer security domain-root ISD-R.
  • the acquisition of configuration file information between different OSs is implemented by the ISD-R set in the eUICC main platform.
  • the processing module further includes a processing unit, configured to update the configuration file list according to the image package downloaded and installed by the eUICC, where the image package includes at least one OS and a configuration file installed in the at least one OS, the configuration file list The integrated circuit card identifier ICCID corresponding to the identifier of the at least one OS and the configuration file installed under the at least one OS.
  • the sending unit is further configured to send the ISD-R mode information to the LPA, where the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC including a memory, a processor, and a computer program stored on the memory and operable on the processor, when the processor executes the program:
  • the first message is an operation instruction input by the user
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, and the ICCID is used to identify the configuration file;
  • the message is a message that gets the profile policy rule.
  • the second message is sent to the at least one OS installed by the eUICC, respectively, including:
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information
  • the first indication information is used to indicate that the running configuration file on the at least one OS in the eUICC is deleted
  • the second indication information is used to indicate that the running configuration file is deleted
  • the first indication information is used to indicate that the test configuration file on the at least one OS in the eUICC is deleted.
  • the second indication information is used to indicate that the test configuration file is deleted.
  • the first message further includes third indication information, where the third indication information is used to indicate Deleting at least one OS; after transmitting the second message to the at least one OS corresponding to the at least one image package, the processor is further configured to:
  • deleting the at least one OS comprises deleting at least one non-default OS or deleting at least one test OS.
  • the processor before the ISD-R receives the first message sent by the local profile assistant LPA, the processor further uses to:
  • each image package includes an OS in at least one OS and at least one configuration file
  • the configuration file list includes at least one OS identifier and at least one OS installed at least The ICCID corresponding to a configuration file.
  • the processor before the ISD-R receives the first message sent by the local profile assistant LPA, the processor further uses to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • a terminal comprising: a memory, a processor, and a computer program stored on the memory and operable on the processor, the processor executing the program:
  • the LPA Determining that the first configuration file is installed in the first operating system OS, and executing the configuration file policy rule PPR of the currently activated activated second configuration file, when the PPR is not allowed to be deactivated, the LPA displays that the first configuration file cannot be Activated information.
  • the management of configuration files between different OSs is realized.
  • the processor before receiving an operation instruction of the user input to activate the first configuration file, the processor is further configured to:
  • the first image package includes the first OS and the first configuration file;
  • the configuration file list includes the identifier of the at least one OS installed by the eUICC, and is installed in the The integrated circuit card identifier ICCID corresponding to the at least one OS configuration file.
  • the processor before receiving an operation instruction of the user input to activate the first configuration file, the processor is further configured to:
  • the second image package includes a second OS and a second configuration file
  • the configuration file list includes the second OS and is installed in the second OS
  • the integrated circuit card identifier ICCID corresponding to the second configuration file
  • the LPA When the LPA receives the operation instruction of the activation second configuration file input by the user, the LPA sends a command to activate the second configuration file to the second OS, and the command to activate the configuration file includes the ICCID corresponding to the second configuration file;
  • a terminal including a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor executing the program:
  • the management of configuration files between different OSs is realized.
  • the processor before receiving the operation instruction input by the user, the processor is further configured to:
  • the ISD-R mode information sent by the ISD-R is received, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC including a memory, a processor, and a computer program stored on the memory and operable on the processor, wherein the processor executes the program:
  • the local profile assistant LPA Receiving a first message sent by the local profile assistant LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the ISD-R sends a second message to the OS corresponding to the identifier of the first OS, where the second message includes a command to activate the first OS;
  • the ISD-R After the ISD-R receives the feedback information sent by the first OS, the ISD-R sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the management of configuration files between different OSs is realized.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the configuration file list is updated according to the image package downloaded and installed by the eUICC, and the image package includes the first OS and the configuration file.
  • the processor is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • an embedded universal integrated circuit card eUICC including a memory, a processor, and a computer program stored on the memory and operable on the processor, when the processor executes the program:
  • the first message includes first indication information, where the first indication information is used to indicate that information about all configuration files in the at least one operating system OS installed by the eUICC is obtained;
  • the ISD-R sends a second message to the at least one OS, where the second message includes the second indication information, where the second indication information is used to indicate that the information of the configuration file is obtained;
  • the ISD-R receives at least one third message sent by the at least one OS, where the third message includes configuration file list information;
  • the ISD-R sends a fourth message to the LPA, and the fourth message includes configuration file list information sent by at least one OS.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the image package includes at least one OS and a configuration file installed in the at least one OS, where the configuration file list includes at least one OS identifier and at least one configuration file installed under the OS.
  • the integrated circuit card identifies the ICCID.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the ISD-R may also be referred to as another name, such as a processing module.
  • a twenty-first aspect a computer readable storage medium comprising instructions that, when run on a device, cause the device to perform, as in any of the sixth to tenth aspects, or any one of the sixth aspects The method of any one of the possible implementations of the tenth aspect.
  • a computer program product comprising instructions which, when run on a computer, cause the computer to perform the method of any of the sixth to tenth aspects.
  • the embedded universal integrated circuit card eUICC and the terminal Based on the provided one of the configuration file management methods, the embedded universal integrated circuit card eUICC and the terminal, the multi-OS multi-configuration is realized by the LPA in the terminal or the ISD-R in the eUICC in the prior art is sinked into the PP. Local management of files.
  • FIG. 1 is a schematic diagram of a system according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram of a layer architecture of an eUICC software according to an embodiment of the present invention
  • FIG. 3 is a schematic diagram of a scenario according to an embodiment of the present disclosure.
  • FIG. 4 is a schematic diagram of another scenario according to an embodiment of the present disclosure.
  • FIG. 5 is a schematic diagram of still another scenario according to an embodiment of the present disclosure.
  • FIG. 6 is a flowchart of a method for local management of a configuration file according to an embodiment of the present invention.
  • FIG. 7 is a flowchart of a method for local management of a configuration file according to an embodiment of the present invention.
  • FIG. 8 is a flowchart of a method for resetting a memory according to an embodiment of the present invention.
  • FIG. 9 is a flowchart of another method for resetting a memory according to an embodiment of the present invention.
  • FIG. 10 is a flowchart of still another method for memory reset according to an embodiment of the present invention.
  • FIG. 11 is a flowchart of a method for local management of a configuration file according to an embodiment of the present invention.
  • FIG. 12 is a flowchart of another method for configuring file management according to an embodiment of the present invention.
  • FIG. 13 is a flowchart of a method for managing a configuration file according to an embodiment of the present invention.
  • FIG. 14 is a flowchart of a management method according to an embodiment of the present invention.
  • FIG. 15 is a flowchart of another management method according to an embodiment of the present invention.
  • FIG. 16 is a schematic structural diagram of an eUICC according to an embodiment of the present disclosure.
  • FIG. 17 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure.
  • FIG. 18 is a schematic structural diagram of another eUICC according to an embodiment of the present disclosure.
  • FIG. 19 is a schematic structural diagram of another terminal according to an embodiment of the present invention.
  • the eUICC may be an IUICC (Integrated Universal Integrated Circuit Card).
  • eUICC and iUICC are two different forms.
  • the eUICC can be a single chip.
  • the eUICC can be installed on the terminal in a pluggable or non-pluggable form.
  • the eUICC is connected to a modem through an interface.
  • iUICC refers to a part of the packaged in the modem chip.
  • the hardware bearer of the iUICC can be a Secure Element.
  • the iUICC is connected to other components inside the chip through a bus or a high-speed bus (bus) inside the chip.
  • the iUICC can also be implemented by embedding a module corresponding to the SIM into another chip, for example, an application processor chip.
  • Each eUICC has an identifier (eUICC-ID, EID) that uniquely identifies the eUICC.
  • EID identifier
  • Each eUICC can download and install a bundle package provided by different operators.
  • the image package includes a chip operating system (COS) and a profile.
  • COS chip operating system
  • the Bundle here can also be called image.
  • the image package provided by different operators may be an RSPBundle or/and a Bundle.
  • the RSPBundle may continue to download and install the COS and the configuration file, and the Bundle can no longer download and install the COS.
  • COS may also be referred to as OS.
  • Each profile has an integrated circuit card ID (ICCID) that uniquely identifies the profile, which may also be referred to as a profileID.
  • ICCID integrated circuit card ID
  • a profile is a collection of carrier data and applications, usually including configuration file metadata, network access application parameters, and other elements in the file system.
  • the configuration file metadata includes profile policy rules (PPR).
  • the PPR has two definitions: 1. The configuration file is not allowed to be disabled; 2. The configuration file is not allowed to be deleted (delete).
  • the network access application parameters include: user key Ki, international mobile subscriber identity (IMSI), mobile network operator-Security domain (MNO-SD), supplementary security domains (supplementary security domains) , SSD), control authority security domain (CASD), application (eg NFC application, etc.), JAVAcard program, etc.
  • IMSI international mobile subscriber identity
  • MNO-SD mobile network operator-Security domain
  • supplementary security domains supplementary security domains
  • SSD control authority security domain
  • application eg NFC application, etc.
  • JAVAcard program etc.
  • the correspondence between the IMSI and the Ki is used to identify the identity of the user requesting network authentication.
  • the files and applications in the terminal can be selected through the eUICC interface of the terminal. That is, the files and applications on the terminal can be used after the configuration file is activated.
  • FIG. 1 is a schematic structural diagram of a system according to an embodiment of the present invention.
  • the system may include a terminal 110, a subscription manager-data preparation (SM-DP+) server 120, a mobile network operator (MNO) server 130, and a subscription management discovery server.
  • SM-DP+ subscription manager-data preparation
  • MNO mobile network operator
  • EUM eUICC manufacturer
  • the terminal 110 may include an eUICC 111, a local profile assistant (LPA) 112, and a modem (not shown in FIG. 1).
  • the eUICC 111 is connected to the LPA 112 via a modem.
  • the LPA plays the role of interaction with the eUICC 111 inside the terminal 110, and its functions include signing file downloading, service discovery, providing a UI interface for the user, and the like.
  • the user can also download the configuration file (eprofile) on the eUICC through the LPA management, such as activation, deactivation, and deletion of the configuration file.
  • a terminal herein may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a mobile terminal, a wireless communication device, a user agent, a user device, or a user.
  • UE User equipment
  • the terminal can be a cellular phone, a cordless phone, a smart watch, a wearable device, a tablet device, a drone, a vending machine, a sensor device, a session initiation protocol (SIP) phone, a wireless local loop (wireless local Loop, WLL) station, personal digital assistant (PDA), handheld device with wireless communication capabilities, computing device, in-vehicle communication module, smart meter, smart home device or other processing device connected to the wireless modem.
  • SIP session initiation protocol
  • WLL wireless local Loop
  • PDA personal digital assistant
  • the SM-DP+ server 120 is configured to generate a configuration file that can be downloaded to the eUICC 111 according to basic information (such as an international mobile subscriber identity (IMSI)) provided by the MNO server 130.
  • the SM-DP+ server 120 can also be called Download the server for the profile.
  • the SM-DP+ server 120 is also used for remote profile management, that is, executing a remote management request of the operator, sending a remote management request to the eUICC that downloads the configuration file, and the eUICC 111 performs a remote management request for remote management, and the remote management request includes activation. , deactivate, delete, ask eUICC status, and so on.
  • the SM-DS 140 is used to provide a mechanism for the remote server 120 to contact the LPA 112, and the LPA 112 contacts the SM-DS 140 to obtain the address of the remote server 120 in order to obtain a correspondence from the remote server corresponding to the address of the remote server 120.
  • event can be a remote profile management event or a profile download event.
  • the CI server 150 is configured to sign and issue certificates for the SM-DP+ server 120, the SM-DS 140, and the EUM server 160, respectively.
  • the EUM server 160 signs and issues certificates for the eUICC.
  • EUM is an eUICC manufacturer that produces and sells eUICC cards.
  • the certificate issuing center (certificateissuer, CI) is used to issue certificates for other entities, such as download servers.
  • the SM-DP+ server 120 and the MNO server 130 can communicate through the ES2+ interface; the MNO server 130 and the eUICC 111 can communicate through the ES6 interface; the remote server 120 and the LPA 112 can communicate through the ES9+ interface; the LPA 112 and the eUICC 111 Communication can be performed through interfaces such as ES10a, ES10b, and ES10c; remote server 120 and eUICC 111 can communicate via ES8+ interface; remote server 120 and SM-DS 140 can communicate via ES12 interface; between SM-DS 140 Communication can be via the ES15 interface; the SM-DS 140 and LPA 112 can communicate via the ES11 interface. See the standard GSMA SGP.22 for details.
  • FIG. 2 is a schematic diagram of a layer architecture of an eUICC software according to an embodiment of the present invention.
  • the eUICC includes an issuer security domain-associated domain profile (ISD-P) part and an eUICC operating system (OS) structure.
  • the eUICC OS includes an eUICC operating system and an eUICC OS low level components.
  • the upper part of the eUICC OS mainly includes: LPA service (LPA in eUICC, LPAe), LPA service (LPA services), and telecommunication framework (Telecom Framework). ), profile package interpreter, profile policy enabler.
  • the bottom part of eUICCOS mainly includes: issuer security domain root (ISD-R), elliptic curve cryptography digital signature algorithm (ECASD) and encryption algorithm.
  • ISD-R issuer security domain root
  • ECASD elliptic curve cryptography digital signature algorithm
  • ISD-P also known as the profile domain, is the space for storing profiles and for decrypting and installing profiles. And a key for secure communication with the SM-DP+ server outside the eUICC is stored.
  • ISD-R is mainly used to create new ISD-Ps and is responsible for the lifecycle management of all ISD-Ps. There is only one ISD-R in each eUICC. ISD-R is installed and personalized by EUM during the eUICC production process. ISD-R cannot be deleted or disabled.
  • the ISD-R has a profile policy management (profile policy), and may include a Rule Authorisation Table (RAT) and a Profile Policy Enabler (PPE).
  • profile policy may include a Rule Authorisation Table (RAT) and a Profile Policy Enabler (PPE).
  • RAT Rule Authorisation Table
  • PPE Profile Policy Enabler
  • ECASD is mainly used to securely store certificates and keys to support the security domain on the eUICC. There is only one ECASD on each eUICC. In the eUICC production process, EUM needs to install and personalize ECASD.
  • ECASD can include:
  • the eUICC private key (SK.EUICC.ECDSA), the eUICC private key is used to establish the signature of the ECDSA.
  • eUICC certificate (CERT.EUICC.ECDSA), eUICC certificate for eUICC authentication, eUICC certificate includes eUICC public key (PK.EUICC.ECDSA), GSA certificate issuer (CI) public key (PK.CI.ECDSA), The public key is used to verify the certificate of the network element (such as SM-DP+ server) outside the eUICC.
  • ECASD may contain multiple public keys of the same or different GSMACI.
  • EUM certificate (CERT.EUM.ECDSA). The EUM key set, which is used to make secret keys and update certificates.
  • ECASD is required to provide the following services to ISD-R:
  • eUICC signature based on information provided by the ISD-R; verification by a network element (e.g., SM-DP+ server) other than the eUICC by the CI public key (PK.CI.ECDSA).
  • a network element e.g., SM-DP+ server
  • CI public key PK.CI.ECDSA
  • Each profile further includes: a file system, at least one NAA, applets, MNO-SD, SSD, and CASD.
  • the switching of the configuration file shown in FIG. 3 can be implemented. Switching here means deactivating the configuration file that the current eUICC is running and activating another activated configuration file.
  • the eUICC installs the RSP image package.
  • Each image package can include an OS and at least one configuration file.
  • the configuration file can be switched through the ISD-R under the same OS.
  • the configuration file switching between different OSs cannot be implemented, as shown in FIG. 4 and FIG.
  • the RSP image package can include only one OS or only one profile.
  • the ISD-R of the lower part of the eUICC OS in FIG. 2 is set in the primary platform (PrimaryPlatform) of the eUICC.
  • the main platform here is a hardware platform in eUICC, including a bootloader. When the terminal is turned on, the bootloader will guide some operations.
  • the ISD-R may not be added to the main platform, and the main platform performs operations similar to ISD-R. ISD-R can also exist in other software modules.
  • FIG. 4 and FIG. 5 are schematic diagrams of two different scenarios according to an embodiment of the present invention.
  • each image package (Bundle, or may also be referred to as a data packet, a file package) that allows the eUICC to be installed may include an operating system OS and at least one configuration file, and the ISD is set in the primary platform (PrimaryPlatform) of the eUICC. -R. Since the configuration file is in different OSs, when the configuration needs to be switched, the configuration file can be switched by setting the ISD-R in the main platform.
  • FIG. 5 a plurality of RSP image packages that are allowed to be installed by the eUICC and a plurality of image packages shown in FIG. 4, that is, the scenario of FIG. 5 includes the scenario shown in FIG. 3 and the scenario shown in FIG. 4, and the main platform of the eUICC ( Set ISD-R in PrimaryPlatform).
  • the configuration file to be switched is in the same OS, the configuration file can be switched through the ISD-R set in the main platform.
  • a profile policy enabler may be added to the LPA to enable the LPA to implement the PPR function to complete the switching of configuration files in different OSs.
  • the ISD-R is set in the primary platform (PrimaryPlatform) of the eUICC.
  • ISD-R can also be called a processing module.
  • FIG. 6 is a schematic diagram of a method for managing a configuration file according to an embodiment of the present invention. As shown in FIG. 6, the method may include the following steps:
  • the ISD-R receives the first message sent by the LPA.
  • the first message is an operation instruction input by the user received by the LPA, and the operation instruction may be an operation instruction for activating a configuration file or a command of an eUICC memory reset.
  • the eUICC memory reset command may include indication information for indicating deletion of at least one OS on the eUICC (delete operation profiles on all OS), or for indicating deletion of the test configuration file (delete Field Test Profiles).
  • the Delete field test profile actually deletes the factory-preset test profile.
  • deleting the test configuration file refers to deleting the factory preset test configuration file.
  • the ISD-R sends a second message to the at least one OS installed by the eUICC.
  • the second message is used by the OS to receive the message to perform a corresponding operation to implement switching of configuration files between different OSs.
  • eUICC is installed as an example.
  • Two eUICCs are installed with OS1 and OS2.
  • One configuration file is installed on OS1 and OS2 as an example.
  • Configuration file 1 (profile1) is installed on OS1.
  • configuration file 2 (profile2) is installed in OS2.
  • two image packages installed by eUICC have two cases: 1. Both image packages are downloaded and installed from the SM-DP+ server (as shown in Figure 7 and Figure 8); 2.
  • One image package is in eUICC.
  • the iUICC defaults to the factory default (default), the default image package can only include one OS.
  • the configuration file can be downloaded to the default OS and run by over-the-air download.
  • Another image package is downloaded and installed from the SM-DP+ server (as shown in Figures 9 and 10).
  • FIG. 7 is a schematic flowchart of a method for activating a configuration file according to an embodiment of the present invention. As shown in FIG. 7, the method may include the following steps:
  • PPR1 and PPR2 are included in the RAT.
  • the PPR1 profile cannot be deactivated; the PPR2 profile cannot be deleted.
  • Whether the PPR included in the specific configuration file is PPR1 or PPR2 is determined by the operator.
  • the ISD-R sends the ISD-R mode (ISD-R mode) information to the LPA.
  • the eUICC When the terminal is powered on, the eUICC includes the ppISDRCapability in the second eUICC information (euiccinfo2) and sends it to the LPA during the two-way authentication process between the SM-DP+ server and the eUICC.
  • the information of sending eucicinfo2 may be an authentication client (AuthenticateClient) message sent to the SM-DP+ server in the two-way authentication, where ppISDRCapability is ISD-R mode information, that is, when the LPA starts working, the LPA receives the eUICC in the main platform.
  • AuthenticateClient authentication client
  • the ISD-R mode information sent by the ISD-R is used to instruct the LPA to send a corresponding message to the ISD-R when receiving the operation instruction input by the user, for example, the user inputs an operation instruction for activating the configuration file, LPA
  • an operation instruction of the activation profile input by the user is received, a command to activate the configuration file is sent to the ISD-R in the main platform.
  • the ISD-R mode information is to tell the LPAeUICC that there is also an ISD-R in the main platform, so that when the LPA receives the local configuration file management command, the LPA sends a corresponding command to the ISD-R in the main platform.
  • the eUICC downloads and installs the image package 1 (image1).
  • the eUICC downloads and installs the image package 1 from the SM-DP+ server through the LPA, and the image package 1 includes the OS1 and the configuration file 1.
  • the ISD-R updates the configuration file list according to the image package 1.
  • the profile list includes the OS ID of the OS and the ICCID corresponding to the profile installed under the OS.
  • the ISD-R updates the configuration file list according to the OS1 and the configuration file 1 included in the image package, and saves the identifier of the OS1 and the ICCID1 corresponding to the configuration file 1 in the configuration file list.
  • the LPA receives an operation instruction of the activation profile 1 input by the user.
  • the user can select the activation profile 1 through the Primary Platform Interface, that is, input the operation instruction of the activation profile 1.
  • the operation instruction includes the ICCID1 corresponding to the configuration file 1.
  • the LPA sends an activation command to the ISD-R.
  • the activation command includes ICCID1.
  • the ISD-R sends an activation command to the OS1 according to the configuration file list.
  • the activation command includes ICCID1. After receiving the activation command, OS1 executes S311.
  • the OS1 sends an activation completion confirmation message to the LPA.
  • the eUICC downloads and installs the image package 2 from the SM-DP+ server through the LPA, and the image package 2 includes the OS2 and the configuration file 2.
  • the ISD-R updates the configuration file list according to the image package 2.
  • the profile list includes the OS ID of the OS and the ICCID corresponding to the profile installed under the OS.
  • the ISD-R updates the configuration file list according to the OS2 and the configuration file included in the image package, and saves the identifier of the OS2 and the ICCID2 corresponding to the configuration file 2 in the configuration file list.
  • the order in which the eUICC downloads and installs the image package 1 and the image package 2 is not limited. You can download and install image package 2 before downloading and installing image package 1, or download and install image package 1 and image package 2. Profile 1 is activated after image package 1 is downloaded and installed.
  • the LPA receives an operation instruction of an activation profile input by the user.
  • OS1 and OS2 When eUICC downloaded and installed the OS: OS1 and OS2, and activated the configuration file 1 installed on OS1.
  • the user can select the activation profile 2 through the Primary Platform Interface, that is, input the operation instruction of the activation profile 2.
  • the LPA sends an Activation Profile 2 command to the ISD-R.
  • the activation profile command includes ICCID2 corresponding to profile 2. After receiving the command to activate the profile 2, the ISD-R executes S314.
  • the ISD-R sends a message for acquiring a profile policy rule (GetPPR) to the OS1.
  • GetPPR profile policy rule
  • the message for obtaining the profile policy rule includes the ICCID1 corresponding to the profile 1.
  • the ISD-R is a message for sending a configuration file policy rule to the OS where the activated configuration file is located. If there are multiple activated configuration files in the embodiment, the activated multiple configuration files are used. The corresponding OS sends a message for obtaining a profile policy rule to obtain a profile policy rule of multiple activated profiles.
  • the OS1 sends a profile policy rule PPR1 to the ISD-R.
  • the ISD-R executes the profile policy rule PPR1.
  • the ISD-R After the ISD-R receives the PPR1 sent by the OS1, the PPR1 is compared with a Profile Policy Authorisation Rules (PPAR) in the RAT, where the RAT is preset in the ISD-R.
  • PPAR Profile Policy Authorisation Rules
  • the ISD-R performs PPR1.
  • the ISD-R sends an error message to the LPA.
  • the activation of the configuration file under the same OS or the activation of the configuration file under different OS can be implemented by the method provided by the embodiment of the present invention.
  • FIG. 8 is a flowchart of a method for restoring a memory according to an embodiment of the present invention. As shown in FIG. 8, the method may include the following steps:
  • the LPA receives an operation instruction of a user-inputted eUICC memory reset.
  • the user can select the eUICC memory reset command through the Primary Platform Interface, that is, input the operation command of the eUICC memory reset.
  • the LPA sends an eUICC memory reset command to the ISD-R.
  • the eUICC memory reset command includes indication information for instructing deletion of an operational profile on all OSs installed by the eUICC. After receiving the eUICC memory reset command, the ISD-R executes S403.
  • the ISD-R sends an eUICC memory reset command to the OS1.
  • the eUICC memory reset command includes indication information for instructing deletion of the running configuration file.
  • the OS1 deletes the running configuration file 1 and the corresponding profile metadata, and restores the address of the SM-DP+ server to the initial address.
  • the configuration file metadata corresponding to the configuration file 1 includes the PPR of the configuration file 1.
  • OS1 deletes all running configuration files in OS1 according to the received eUICC memory reset command.
  • the configuration file metadata is stored in the configuration file, and deleting the configuration file is to delete the configuration file metadata therein.
  • the OS1 sends a deletion completion confirmation message to the ISD-R.
  • the ISD-R sends an eUICC memory reset command to the OS2.
  • the eUICC memory reset command includes information for deleting the running configuration file.
  • the OS2 deletes the running configuration file 2 and the corresponding profile metadata, and restores the address of the SM-DP+ server to the initial address.
  • the configuration file metadata corresponding to the configuration file 2 includes the PPR of the configuration file 2.
  • the OS2 deletes all running configuration files in the OS2 according to the received eUICC memory reset command.
  • the OS2 sends a deletion completion confirmation message to the ISD-R.
  • the order in which the ISD-R sends the eUICC memory reset command to the OS1 and the OS2 may be not limited, or the ISD-R may simultaneously send the eUICC memory reset command to the OS1 and the OS2.
  • the ISD-R after the ISD-R receives the deletion completion confirmation message sent by all the OSs installed by the eUICC, the ISD-R sends a deletion completion confirmation message to the LPA.
  • the ISD-R sends an update (REFRESH) command to the modem.
  • REFRESH update
  • the method before the terminal is turned on, the method may further include: before the LPA sends the eUICC memory reset command to the ISD-R, the method may further include:
  • the LPA receives the ISD-R mode information sent by the ISD-R.
  • the ISD-R mode information is used to instruct the LPA to send a corresponding message to the ISD-R when receiving an operation instruction input by the user.
  • the eUICC downloads and installs the image package 1 from the SM-DP+ server through the LPA.
  • the image package 1 includes OS1 and configuration file 1, and the configuration file 1 includes PPR1.
  • the ISD-R updates the configuration file list according to the image package 1.
  • Image package 2 includes OS2 and configuration file 2, and configuration file 2 includes PPR2.
  • the ISD-R updates the configuration file list according to the image package 2.
  • the process of updating the configuration file list in the embodiment of the present invention is the same as the process of updating the configuration file list in FIG. 7 , and is not described here.
  • FIG. 9 is a flowchart of another method for memory reset according to an embodiment of the present invention.
  • OS1 is preset on the eUICC.
  • the ISD-R After receiving the eUICC memory reset command, the ISD-R deletes the configuration files on multiple OSs and deletes the non-default OS.
  • the non-default OS here refers to an OS other than the OS preset on the eUICC. For example, delete eUICC to download and install OS2 corresponding to image package 2.
  • the method may include the following steps:
  • the LPA receives the ISD-R mode information sent by the ISD-R.
  • the eUICC downloads the image package 2 from the SM-DP+ server through the LPA, and the image package 2 includes the OS2 and the configuration file 2.
  • ISD-R updates the configuration file list.
  • the ISD-R updates the configuration file list according to the image package 2, and stores the identifier of the OS in the image package 2 and the ICCID2 corresponding to the configuration file 2 installed in the OS 2 in the configuration file list.
  • the LPA receives an operation instruction input by the user.
  • the LPA sends an eUICC memory reset command to the IPDA-R to the LPA.
  • the eUICC memory reset command includes indication information (DeleteBundles and DeleteOperational Profile) for instructing deletion of an operation profile on all OSs installed by the eUICC, and deleting the image package (DeleteBundles), the information of the deleted image package. Used to indicate the deletion of a non-default OS.
  • the ISD-R sends an eUICC memory reset command to the OS1.
  • the ISD-R After receiving the eUICC memory reset command, the ISD-R sends an eUICC memory reset command to the OS1.
  • the eUICC memory reset command includes information for deleting the operation profile (DeleteOperationalProfile).
  • OS1 deletes the running configuration file 1 and the corresponding profile metadata, and restores the address of the SM-DP+ server to the initial address.
  • the configuration file metadata corresponding to the configuration file 1 includes the PPR of the configuration file 1.
  • the OS1 deletes all running configuration files in the OS1 according to the received eUICC memory reset command.
  • the OS1 sends a deletion completion confirmation message to the ISD-R.
  • the ISD-R sends an eUICC memory reset command to the OS2.
  • the eUICC memory reset command includes information for deleting a mirror packet (DeleteBundles) for indicating deletion of a non-default OS.
  • OS2 deletes configuration file 2, and deletes OS2.
  • the OS2 when multiple configuration files are installed on the OS2, the OS2 deletes multiple configuration files on the OS2 and deletes the OS2. Deleting multiple configuration files here means deleting all the operating profiles (Operational Profiles) on OS2.
  • the ISD-R detects that the OS2 has been deleted, the ISD-R sends an eUICC memory reset complete message to the LPA.
  • ISD-R sends an update (REFRESH) command to the modem.
  • FIG. 10 is a flowchart of still another method for memory reset according to an embodiment of the present invention.
  • FIG. 10 The difference between FIG. 10 and FIG. 8 is that the memory reset in FIG. 8 is to delete the running configuration file installed in the OS, and FIG. 10 is to delete the delete field test profile (delete field test profile), and the Delete field test profile actually That is, the factory preset test profile will be deleted.
  • steps S601 to S612 of FIG. 10 are similar to the processes of S501 to S412 of FIG. 9, and the specific process is as follows:
  • the LPA receives an operation instruction of the eUICC memory reset input by the user.
  • the LPA sends an eUICC memory reset command to the ISD-R.
  • the eUICC memory reset command includes information for deleting the Delete Field Test Profiles of all OSs installed by the eUICC.
  • the ISD-R sends an eUICC memory reset command to the OS1.
  • the ISD-R After receiving the eUICC memory reset command, the ISD-R sends an eUICC memory reset command to the OS1.
  • the eUICC memory reset command includes information for deleting the test configuration file.
  • the OS1 deletes the running configuration file 1 and the corresponding profile metadata.
  • the OS1 deletes the test configuration file in at least one of the all ISD-Ps in the OS1 according to the received eUICC memory reset command.
  • the OS1 sends a deletion completion confirmation message to the ISD-R.
  • the ISD-R sends an eUICC memory reset command to the OS2.
  • the eUICC memory reset command includes information for deleting the test configuration file.
  • the OS2 deletes the running configuration file 2 and the corresponding profile metadata.
  • the OS2 deletes all test configuration files in the OS2 according to the received eUICC memory reset command.
  • the OS2 sends a deletion completion confirmation message to the ISD-R.
  • the order in which the ISD-R sends the eUICC memory reset command to the OS1 and the OS2 may be not limited, or the ISD-R may simultaneously send the eUICC memory reset command to the OS1 and the OS2.
  • the ISD-R sends an update (REFRESH) command to the modem.
  • REFRESH update
  • the method before the LPA receives the operation instruction of the eUICC memory reset input by the user, the method further includes S610 to S612.
  • the processes of S610 to S612 in FIG. 10 are the same as the processes of S501 to S503 in FIG. 9, and are not described herein for brevity.
  • the eUICC memory reset can also be implemented by deleting the test configuration file and the non-default OS, and the process can be similar to deleting the running configuration file on all OSs and deleting the default in FIG.
  • the process of the OS is not described here for the sake of brevity.
  • FIG. 6 to FIG. 10 show that the ISD-R is set in the main platform of the eUICC to implement configuration file management across the OS.
  • the configuration of the configuration file across the OS through the LPA will be described below with reference to FIG.
  • the LPA has a function of performing PPR.
  • LPA has the function of implementing PPR.
  • PPE Profile Policy Enabler
  • eUICC downloads and installs two image packages as an example, that is, eUICC installs OS1 and OS2, and OS1 and OS2 respectively install a configuration file as an example for description, and configuration file 1 (profile1) is installed in OS1. , profile 2 (profile2) is installed in OS2.
  • first and second are only used to distinguish information, mirrored packets, or configuration files, and do not limit information, image packages, or configuration files themselves.
  • FIG. 11 is a flowchart of a method for local management of a configuration file according to an embodiment of the present invention. As shown in FIG. 11, the method may include the following steps:
  • the LPA receives an operation instruction input by the user to activate the first configuration file.
  • the LPA determines that the first configuration file is installed in the first operating system OS, and executes a profile policy rule PPR of the currently activated activated second configuration file. When the PPR is not allowed to be deactivated, the LPA displays the first configuration. The information that the file cannot be activated.
  • the first configuration file may be considered as profile 2 (profile 2), the first operating system is OS 2, and the second configuration file is profile 1 (profile 1).
  • the eUICC downloads and installs the image package 1 (image1) and the image package 2 (image2), and updates the configuration file list according to the image package 1 and the image package 2, and activates the configuration file 1.
  • the LPA receives the operation instruction of the activation profile 2 input by the user, determines the target configuration file that needs to be activated, that is, which OS the configuration file 2 is installed on, when it is determined that the configuration file 2 is installed on the OS2, and the execution is currently running.
  • PPR1 of profile 1 on OS1 when PPR1 is not allowed to be deactivated, displays to the user information that profile 2 cannot be activated or cannot be switched.
  • the currently running configuration file 1 is installed on the OS 1.
  • the switching of the configuration file across the OS is implemented by the method provided by the embodiment of the present invention.
  • the method before the LPA receives an operation instruction of the user-initiated activation of the first configuration file, the method further includes:
  • the image package 1 includes OS1 and configuration file 1, and the configuration file 1 includes PPR1.
  • the LPA updates the configuration file list.
  • the LPA receives an operation instruction input by the user.
  • the LPA sends an activation command to the OS1.
  • the activation command includes ICCID1 corresponding to profile 1.
  • the OS1 sends an activation completion confirmation message to the LPA.
  • the LPA sends a new activation profile command to the modem.
  • the modem attaches to the network according to the newly activated profile 1.
  • Image package 2 includes OS2 and configuration file 2.
  • FIG. 12 is a flowchart of another method for configuring file management according to an embodiment of the present invention.
  • the ISD-R is set in the primary platform of the eUICC. It should be noted that, in the embodiment of the present invention, “first” and “second” are only used to distinguish messages, and the message itself is not limited.
  • the method may include the following steps:
  • the LPA receives an operation instruction input by a user.
  • the operation instruction may be used to activate or delete an operation instruction of the configuration file.
  • the configuration file 2 installed on the OS 2 is activated or deleted as an example for description.
  • the LPA determines that the configuration file 2 is installed in the operating system OS2, and the operating system OS2 is not activated.
  • the LPA sends a first message to the ISD-R.
  • the first message is used by the ISD-R to execute an operation instruction.
  • the first message includes an integrated circuit card identifier ICCID2 corresponding to the configuration file and an identifier of the operating system OS2.
  • the ISD-R sends a second message to the operating system OS2.
  • the second message may be a command to activate the operating system OS2.
  • the ISD-R after receiving the feedback information sent by the OS2, the ISD-R sends a third message to the OS2, where the third message includes the ICCID2 corresponding to the configuration file 2, so that the first operating system performs the corresponding operation after receiving the third message.
  • the third message corresponds to the operation instruction, and the third message may be an activation command for activating the configuration file 2, or may be a deletion command for deleting the configuration file 2.
  • the switching of the configuration file across the operating system can be implemented by the ISD-R in the main platform in the eUICC.
  • the method may further include:
  • the LPA receives the ISD-R mode information sent by the ISD-R.
  • the image package 1 includes the operating system OS1 and the configuration file 1.
  • the image package 2 includes an operating system OS2 and a configuration file 2.
  • the activation completion confirmation message is sent to the ISD-R.
  • the ISD-R sends an activation completion confirmation message to the LPA.
  • the LPA then sends a new activation profile message to the modem.
  • FIG. 13 is a flowchart of a method for managing a configuration file according to an embodiment of the present invention.
  • the ISD-R is set in the primary platform of the eUICC. It should be noted that, in the embodiment of the present invention, “first”, “second”, “third”, and “fourth” are only used to distinguish information, image packages, or configuration files, and are not for information, image packages, or configurations. The file itself is limited.
  • the method may include the following steps:
  • the ISD-R receives the first message sent by the LPA.
  • the first message includes first indication information, where the first indication information is used to indicate that information (profileinfo) of all configuration files in the at least one OS installed by the eUICC is obtained.
  • the first message may be the configuration file information
  • the configuration file information may include the identifiers of all the image bundles (AllBundles) to obtain the information of the configuration files installed in the OS corresponding to all the image packages.
  • the ISD-R sends a second message to the at least one OS.
  • the second message includes second indication information, and the second indication information is used to indicate information of acquiring the configuration file.
  • the ISD-R After receiving the first message sent by the LPA, the ISD-R sends a second message to all the OSs.
  • the second message may be a message for acquiring the profile information to obtain information about the configuration file installed in the target OS.
  • the ISD-R receives at least one third message sent by at least one OS.
  • the third message includes list information of the configuration file.
  • the ISD-R sends a fourth message to the LPA.
  • the fourth message includes list information of at least one configuration file sent by the OS.
  • the LPA displays list information of the configuration file.
  • the method may further include:
  • the ISD-R updates the configuration file list according to the image package downloaded and installed by the eUICC.
  • the image package includes an OS and a configuration file.
  • the configuration file list includes an identifier of the at least one OS and an identifier of the integrated circuit card corresponding to the at least one configuration file installed under the OS. .
  • the method before the ISD-R receives the first message sent by the local profile assistant LPA, the method further includes:
  • the ISD-R sends ISD-R mode information to the LPA.
  • eUICC installs two image packages, image package 1 and image package 2.
  • Image package 1 includes OS1 and configuration file 1
  • image package 2 includes OS2 and configuration file 2.
  • the method can be specifically as shown in FIG. As shown in FIG. 14, the method can be specifically:
  • the LPA receives the ISD-R mode information sent by the ISD-R.
  • the eUICC downloads and installs the image package 1 from the SM-DP+ server through the LPA, and the image package 1 includes the OS1 and the configuration file 1.
  • the eUICC downloads and installs the image package 2 from the SM-DP+ server through the LPA, and the image package 2 includes the OS2 and the configuration file 2.
  • the LPA receives an operation instruction input by the user.
  • S1007 The LPA sends a message to the ISD-R to obtain profile information.
  • the message for obtaining the profile information includes the identifiers of all the image packets, that is, the identifier of the image package 1 and the image of the image package 2.
  • the ISD-R sends a message for acquiring profile information to the OS1.
  • the OS1 sends a configuration file list to the ISD-R.
  • the ISD-R sends a message for acquiring configuration file information to the OS2.
  • OS2 sends a configuration file list to the ISD-R.
  • S1012 The ISD-R sends a list of configuration files of all image packages to the LPA.
  • LPA displays a list of configuration files for all image packages.
  • a list of configuration files of the current image package (List Profile in Current Bundle) can be obtained through the ISD-R set on the main platform of the eUICC, and a list of configuration files of all the image packages can also be obtained. Profile in All Bundle).
  • the stored profile list may also be directly presented to the user via the LPA.
  • the LPA may include an ISD-R list on at least one OS.
  • the LPA sequentially sends the GetProfilesInfo information of the obtained configuration file to the ISD-R in all the OSs, and obtains a list of the configuration files from the corresponding OS (List of Profiles)
  • the embodiment of the invention further provides a management method for setting or modifying a default SM-DP+ server address.
  • the user can download the configuration file through the SM-DP+ server in an activation code.
  • the terminal will pop up a prompt message to prompt the user whether to set the address of the SM-DP+ server as the default SM-DP+ server address.
  • the method can include the following steps:
  • the LPA receives an operation command input by the user to set the SM-DP+ server address.
  • the user can select according to whether the SM-DP+ server address is set as the default SM-DP+ server address prompt information display, and the operation instruction is input when the user selects.
  • the LPA sends a message for setting the SM-DP+ server address to the at least one OS. .
  • the message setting the SM-DP+ server address includes the address of the default SM-DP+ server.
  • the current SM-DP+ server address is set or modified to the default SM-DP+ server address.
  • the LPA can complete the setting or modification of the SM-DP+ server address across the OS through the ISD-R set in the eUICC main platform.
  • FIG. 15 is a flowchart of another management method according to an embodiment of the present invention. As shown in FIG. 15, the method may include the following steps:
  • the LPA receives an operation instruction input by the user to set the SM-DP+ server address.
  • the user can select according to whether the SM-DP+ server address is set as the default SM-DP+ server address prompt information display, and the operation instruction is input when the user selects.
  • S1102 is executed.
  • the LPA sends a message to the ISD-R to set the SM-DP+ server address.
  • the message setting the SM-DP+ server address may include the identity of the image package and the address of the default SM-DP+ server.
  • the ISD-R sends a message for setting the SM-DP+ server address to the at least one OS, respectively.
  • the ISD-R forwards the message of setting the SM-DP+ server address to all the OSs in the image package corresponding to the identifier of the image package.
  • S1104 The at least one OS sets or modifies the current SM-DP+ server address to be the default SM-DP+ server address.
  • the default SM-DP+ server address may be the first SM-DP+ server address; the current SM-DP+ server address may be referred to as the second SM-DP+ server address.
  • the embodiment of the present invention provides an embedded universal integrated circuit card eUICC.
  • the eUICC includes a main platform and at least one image package installed.
  • the main platform is a hardware platform, and each image package includes at least one configuration file and an operating system OS.
  • processing module is used to:
  • the first message is an operation instruction input by the user
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, the ICCID is used to identify the configuration file, and the second message is a message for obtaining a configuration file policy rule.
  • sending the second message to the at least one OS corresponding to the at least one image package, respectively includes:
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information
  • the first indication information is used to indicate deletion.
  • a running configuration file on the at least one OS of the eUICC where the second indication information is used to indicate the deletion of the running configuration file; or the first indication information is used to indicate that the test configuration file on the at least one OS of the eUICC is deleted, and the second indication information is used to indicate Delete the test configuration file.
  • the first message further includes third indication information, where the third indication information is used to indicate deletion of the at least one OS, and the second information is sent to the at least one OS corresponding to the at least one image package respectively.
  • the processing module is also used to:
  • deleting the at least one OS includes deleting at least one non-default OS or deleting at least one test OS.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • each image package includes an OS in at least one OS and at least one configuration file
  • the configuration file list includes at least one OS identifier and at least one OS installed at least The ICCID corresponding to a configuration file.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the processing module is a publisher security domain-root ISD-R.
  • the embodiment of the invention further provides an embedded universal integrated circuit card eUICC, and the eUICC includes a local configuration file assistant LPA, and the LPA is used for:
  • the LPA Determining that the first configuration file is installed in the first operating system OS, and executing the configuration file policy rule PPR of the currently activated activated second configuration file, when the PPR is not allowed to be deactivated, the LPA displays that the first configuration file cannot be The activated information, wherein the second configuration file is installed on the second OS.
  • the LPA eUICC before receiving an operation instruction input by the user to activate the first configuration file, is further configured to:
  • the first image package includes the first OS and the first configuration file;
  • the configuration file list includes the identifier of the at least one OS installed by the eUICC, and is installed in the The integrated circuit card identifier ICCID corresponding to the at least one OS configuration file.
  • the LPA eUICC before receiving an operation instruction input by the user to activate the first configuration file, is further configured to:
  • the second image package includes a second OS and a second configuration file
  • the configuration file list includes the second OS and is installed in the second OS
  • the integrated circuit card identifier ICCID corresponding to the second configuration file
  • the LPA When the LPA receives the operation instruction of the activation second configuration file input by the user, the LPA sends a command to activate the second configuration file to the second OS, and the command to activate the configuration file includes the ICCID corresponding to the second configuration file;
  • the embodiment of the present invention further provides an embedded universal integrated circuit card eUICC.
  • the eUICC includes a local configuration file assistant LPA, a main platform, and an installed image package.
  • the main platform is a hardware platform, and the image package includes a configuration file and a first operating system OS.
  • the main platform includes a processing module, and the LPA is used to:
  • the LPA is further used to: before receiving an operation instruction input by the user:
  • the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the processing module is a publisher security domain-root ISD-R.
  • the embodiment of the present invention further provides an embedded universal integrated circuit card eUICC.
  • the eUICC includes a main platform and an image package.
  • the main platform is a hardware platform, and the image package includes a configuration file and a first operating system OS.
  • the main platform includes a processing module and processes. The module is used to:
  • the local profile assistant LPA Receiving a first message sent by the local profile assistant LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the processing module After receiving the feedback information sent by the first OS, the processing module sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the configuration file list is updated according to the image package downloaded and installed by the eUICC, and the image package includes the first OS and the configuration file.
  • the processing module is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the processing module when receiving the operation instruction input by the user.
  • the processing module is a publisher security domain-root ISD-R.
  • the embodiment of the present invention further provides an embedded universal integrated circuit card eUICC.
  • the eUICC includes a main platform and at least one image package installed.
  • the main platform is a hardware platform, and each image package includes at least one configuration file and an operating system OS.
  • the platform includes a processing module, and the processing module is used to:
  • the first message includes first indication information, where the first indication information is used to obtain information about all configuration files in the at least one OS corresponding to the at least one image package installed by the eUICC;
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the image package includes at least one OS and a configuration file installed in the at least one OS, where the configuration file list includes at least one OS identifier and at least one configuration file installed under the OS.
  • the integrated circuit card identifies the ICCID.
  • the processing module before receiving the first message sent by the local profile assistant LPA, the processing module is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the primary platform when receiving the operation instruction input by the user.
  • the processing module is a publisher security domain-root ISD-R.
  • FIG. 6 to FIG. 15 illustrate a method for local management of a configuration file.
  • the eUICC and the terminal provided by the embodiment of the present invention are described below with reference to FIG. 16 to FIG.
  • FIG. 16 is a schematic structural diagram of an eUICC according to an embodiment of the present invention.
  • the eUICC includes a main platform, the main platform is a hardware platform, and the main platform includes a processing module.
  • the processing module includes a receiving unit 1601 and a sending unit 1602.
  • the receiving unit 1601 is configured to receive a first message sent by the LPA, where the first message is an operation instruction input by the user;
  • the sending unit 1602 is configured to send a second message to the at least one operating system OS installed by the eUICC, where the second message is used to instruct the at least one OS to perform a corresponding operation.
  • the processing module may be an issuer security domain-root ISD-R.
  • the ISD-R is set in the main platform of the eUICC to implement local management of configuration files between different OSs.
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, the ICCID is used to identify the configuration file, and the second message is a message for obtaining a configuration file policy rule.
  • the processing module further includes a processing unit 1603.
  • the sending unit 1602 is configured to send a second message to the at least one operating system OS installed by the eUICC, respectively, including:
  • the sending unit 1602 sends a second message to the OS where the activated configuration file is located, where the at least one OS includes an OS where the activated configuration file is located;
  • the receiving unit 1601 receives a profile policy rule of the activated profile sent by the OS;
  • the processing unit 1603 is configured to execute a profile policy rule according to the profile policy rule and the rule authorization list RAT preset by the processing module;
  • the sending unit 1602 sends an error message to the LPA.
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information, where the first indication information is used to indicate And deleting the running configuration file on the at least one OS of the eUICC, where the second indication information is used to indicate the deletion of the running configuration file; or the first indication information is used to indicate that the test configuration file on the at least one OS in the eUICC is deleted, and the second indication information is used to Indicates to delete the test configuration file.
  • the first message further includes third indication information, where the third indication information is used to indicate that the at least one OS is deleted.
  • the sending unit 1602 is further configured to send a third message to the at least one OS, where the third message includes the third indication information.
  • deleting the at least one OS includes deleting at least one non-default OS or deleting at least one test OS.
  • the processing unit 1603 of the processing module updates the configuration file list according to at least one image package downloaded and installed by the eUICC; each image package includes an OS and at least one configuration file in the at least one OS.
  • the profile list includes an identifier of the at least one OS and an ICCID corresponding to the at least one profile installed in the at least one OS.
  • the sending unit 1602 is further configured to send ISD-R mode information to the LPA, where the ISD-R mode information is used to indicate that the LPA receives the operation instruction input by the user to the processing module. Send the first message.
  • the processing module may further include a storage unit 1604 for storing an instruction, and performing a corresponding operation when the processing unit 1603 invokes an instruction of the storage unit.
  • the functions of the functional units of the processing module disposed in the main platform in the eUICC can be implemented by the steps performed by the ISD-R in the embodiment shown in FIG. 6 to FIG. 10, and therefore, the embodiment of the present invention The specific working process of the provided ISD-R will not be repeated here.
  • FIG. 17 is a schematic structural diagram of a terminal according to an embodiment of the present invention.
  • the terminal includes a local profile assistant LPA, and the LPA may include a receiving unit 1701 and a processing unit 1702.
  • the receiving unit 1701 is configured to receive an operation instruction that is activated by the user to activate the first configuration file.
  • the processing unit 1702 is configured to determine that the first configuration file is installed in the first operating system OS, and execute a profile policy rule PPR of the currently activated activated second configuration file, and when the PPR is not allowed to be deactivated, the LPA displays The first profile cannot be activated.
  • the LPA in the terminal can implement the function of performing PPR, and implement activation of configuration files between different OSs.
  • the processing unit 1702 is further configured to: update the configuration file list according to the first image package downloaded and installed by the eUICC, where the first image package includes the first OS and the first configuration file;
  • the file list includes an identifier of at least one OS installed by the eUICC and an integrated circuit card identifier ICCID corresponding to the configuration file installed in the at least one OS.
  • the LPA further includes a sending unit 1703.
  • the processing unit 1702 is further configured to: update the configuration file list according to the second installation image package downloaded and installed by the embedded universal integrated circuit card eUICC, where the second image package includes the second OS and the second configuration file, and the configuration file list includes the second An integrated circuit card identifier ICCID corresponding to the OS and the second configuration file installed in the second OS;
  • the sending unit 1703 sends a command for activating the second configuration file to the second OS, where the command for activating the configuration file includes the ICCID corresponding to the second configuration file;
  • the receiving unit 1701 receives the PPR of the second configuration file sent by the second OS.
  • the LPA may further include a storage unit 1704, configured to store an instruction, and perform a corresponding operation when the processing unit 1702 invokes an instruction of the storage unit.
  • a storage unit 1704 configured to store an instruction, and perform a corresponding operation when the processing unit 1702 invokes an instruction of the storage unit.
  • the functions of the functional units of the LPA in the terminal can be implemented by the steps performed by the LPA in the embodiment shown in FIG. 11. Therefore, the specific working process of the LPA provided by the embodiment of the present invention is not described herein. .
  • the embodiment of the present invention further provides a terminal, and a schematic structural diagram of the terminal can be seen in FIG. 17.
  • the terminal includes a local profile assistant LPA and an embedded universal integrated circuit card eUICC.
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform.
  • the LPA may include:
  • the receiving unit 1701 is configured to receive an operation instruction input by the user, where the operation instruction is used to activate or delete the configuration file;
  • the processing unit 1702 is configured to determine that the configuration file is installed in the first operating system OS, and the first OS is not activated.
  • the sending unit 1703 is configured to send a first message to the processing module, where the first message is used by the processing module to execute an operation instruction, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first OS.
  • the processing module may be an issuer security domain-root ISD-R.
  • setting the ISD-R in the main platform of the eUICC implements activation or deletion of the configuration file across the OS, and implements local management of the configuration file across the OS.
  • the receiving unit 1701 is further configured to receive the ISD-R mode information sent by the processing module, where the ISD-R mode information is used to indicate that the LPA sends the operation instruction input by the user to the processing module.
  • the first message is further configured to receive the ISD-R mode information sent by the processing module, where the ISD-R mode information is used to indicate that the LPA sends the operation instruction input by the user to the processing module. The first message.
  • the functions of the functional units of the LPA in the terminal can be implemented by the steps performed by the LPA in the embodiment shown in FIG. 12. Therefore, the specific working process of the LPA provided by the embodiment of the present invention is not described herein. .
  • An embodiment of the present invention further provides an eUICC.
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform, and the processing module may include:
  • the receiving unit 1601 is configured to receive the first message sent by the LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the sending unit 1602 is configured to send a second message to the OS corresponding to the identifier of the first OS, where the second message includes a command to activate the first OS.
  • the sending unit 1602 sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processing module may be an issuer security domain-root ISD-R.
  • the activation or deletion of the configuration file across the OS is implemented by the ISD-R set in the main platform.
  • the processing unit 1603 is configured to update the configuration file list according to the image package downloaded and installed by the eUICC, where the image package includes the first OS and the configuration file.
  • the sending unit 1602 is further configured to send ISD-R mode information to the LPA, where the ISD-R mode information is used to indicate that the LPA sends the first message to the processing module when receiving the operation instruction input by the user. .
  • each functional unit of the processing module in the main platform in the eUICC can be implemented by the steps performed by the ISD-R in the embodiment shown in FIG. 12, and therefore, the ISD-provided by the embodiment of the present invention The specific working process of R will not be repeated here.
  • the embodiment of the present invention further provides an embedded universal integrated circuit card (eUICC).
  • eUICC embedded universal integrated circuit card
  • the main platform of the eUICC includes a processing module, and the main platform is a hardware platform, and the processing module may include:
  • the receiving unit 1601 is configured to receive a first message sent by the LPA, where the first message includes first indication information, where the first indication information is used to indicate that information about all configuration files in the at least one operating system OS installed by the eUICC is acquired;
  • the sending unit 1602 is configured to send a second message to the at least one OS, where the second message includes second indication information, where the second indication information is used to indicate that the information of the configuration file is obtained;
  • the receiving unit 1601 is further configured to receive, by the at least one OS, at least one third message, where the third message includes configuration file list information;
  • the sending unit 1602 is further configured to send a fourth message to the LPA, where the fourth message includes configuration file list information sent by the at least one OS.
  • the processing unit 1603 is configured to update the configuration file list according to the image package downloaded and installed by the eUICC, where the image package includes at least one OS and a configuration file installed in the at least one OS, the configuration file list.
  • the integrated circuit card identifier ICCID corresponding to the identifier of the at least one OS and the configuration file installed under the at least one OS.
  • the sending unit 1602 is further configured to send, to the LPA, processing module mode information, where the ISD-R mode information is used to indicate that the LPA sends the first instruction to the ISD-R when receiving the operation instruction input by the user. Message.
  • the processing module may be an issuer security domain-root ISD-R.
  • each functional unit of the processing module in the main platform in the eUICC can be implemented by the steps performed by the ISD-R in the embodiment shown in FIG. 13, and therefore, the ISD-provided by the embodiment of the present invention The specific working process of R will not be repeated here.
  • the LPA of the terminal in FIG. 17 can also perform the method/step performed by the LPA in the management method shown in FIG. 14 for brevity, and details are not described herein again.
  • the processing module in the eUICC shown in FIG. 16 can also perform the method/step of the ISD-R in the management method shown in FIG. 15 for brevity description, and details are not described herein again.
  • FIG. 18 is a schematic structural diagram of another eUICC according to an embodiment of the present invention.
  • the eUICC may include a computer program including a memory, a processor, and a computer program stored on the memory and executable on the processor, and the processor executes the program:
  • the first message is an operation instruction input by the user
  • the first message is an activation profile command, where the first message includes an integrated circuit card identifier ICCID, the ICCID is used to identify the configuration file, and the second message is used to obtain a configuration file policy rule. Message.
  • the second message is sent to the at least one OS installed by the eUICC, respectively, including:
  • the first message is an eUICC memory reset command
  • the first message includes first indication information
  • the second message includes second indication information, where the first indication information is used.
  • the second indication information is used to indicate the deletion of the running configuration file; or the first indication information is used to indicate that the test configuration file on the at least one OS of the eUICC is deleted, and the second indication information is used by the second indication information.
  • the test configuration file is deleted as indicated.
  • the first message further includes third indication information, where the third indication information is used to indicate deletion of the at least one OS, and the second information is sent to the at least one OS corresponding to the at least one image package respectively.
  • the processor is also used to:
  • deleting the at least one OS includes deleting at least one non-default OS or deleting at least one test OS.
  • the processor before the ISD-R receives the first message sent by the local profile assistant LPA, the processor is further configured to:
  • each image package includes an OS in at least one OS and at least one configuration file
  • the configuration file list includes at least one OS identifier and at least one OS installed at least The ICCID corresponding to a configuration file.
  • the processor before the ISD-R receives the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the eUICC may further include a communication unit that communicates with other devices, and a device such as an input/output interface.
  • FIG. 19 is a schematic structural diagram of another terminal according to an embodiment of the present invention.
  • the terminal can include a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor executing the program:
  • the LPA Determining that the first configuration file is installed in the first operating system OS, and executing the configuration file policy rule PPR of the currently activated activated second configuration file, when the PPR is not allowed to be deactivated, the LPA displays that the first configuration file cannot be Activated information.
  • the processor before receiving an operation instruction of the user input to activate the first configuration file, the processor is further configured to:
  • the first image package includes the first OS and the first configuration file;
  • the configuration file list includes the identifier of the at least one OS installed by the eUICC, and is installed in the The integrated circuit card identifier ICCID corresponding to the at least one OS configuration file.
  • the processor before receiving an operation instruction of the user input to activate the first configuration file, the processor is further configured to:
  • the second image package includes a second OS and a second configuration file
  • the configuration file list includes the second OS and is installed in the second OS
  • the integrated circuit card identifier ICCID corresponding to the second configuration file
  • the LPA When the LPA receives the operation instruction of the activation second configuration file input by the user, the LPA sends a command to activate the second configuration file to the second OS, and the command to activate the configuration file includes the ICCID corresponding to the second configuration file;
  • the terminal may further include a communication unit that communicates with other devices, and a device such as an input/output interface.
  • the embodiment of the present invention further provides a terminal.
  • the schematic diagram of the structure of the terminal can be seen in the schematic diagram of the terminal structure shown in FIG. 19, where the terminal includes a memory, a processor, and a computer stored on the memory and operable on the processor.
  • the processor before receiving the operation instruction input by the user, the processor is further configured to:
  • the ISD-R mode information sent by the ISD-R is received, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the ISD-R may also be referred to as another name, such as a processing module.
  • the embodiment of the invention also provides an embedded universal integrated circuit card eUICC.
  • the structure diagram of the eUICC can be seen as a schematic diagram of the structure of the eUICC shown in FIG. 18.
  • the eUICC includes a memory, a processor, and a computer program stored on the memory and executable on the processor, and the processor executes the program:
  • the local profile assistant LPA Receiving a first message sent by the local profile assistant LPA, where the first message includes an integrated circuit card identifier ICCID corresponding to the configuration file and an identifier of the first operating system OS, where the configuration file is installed in the first OS;
  • the ISD-R sends a second message to the OS corresponding to the identifier of the first OS, where the second message includes a command to activate the first OS;
  • the ISD-R After the ISD-R receives the feedback information sent by the first OS, the ISD-R sends a third message to the first OS, where the third message includes an ICCID corresponding to the configuration file;
  • the first message and the third message are used to activate or delete the configuration file.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the configuration file list is updated according to the image package downloaded and installed by the eUICC, and the image package includes the first OS and the configuration file.
  • the processor is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the ISD-R may also be referred to as another name, such as a processing module.
  • the embodiment of the invention also provides an embedded universal integrated circuit card eUICC.
  • the structure diagram of the eUICC can be seen as a schematic diagram of the structure of the eUICC shown in FIG. 18.
  • the eUICC includes a memory, a processor, and a computer program stored on the memory and executable on the processor, and the processor executes the program:
  • the first message includes first indication information, where the first indication information is used to indicate that information about all configuration files in the at least one operating system OS installed by the eUICC is obtained;
  • the ISD-R sends a second message to the at least one OS, where the second message includes the second indication information, where the second indication information is used to indicate that the information of the configuration file is obtained;
  • the ISD-R receives at least one third message sent by the at least one OS, where the third message includes configuration file list information;
  • the ISD-R sends a fourth message to the LPA, and the fourth message includes configuration file list information sent by at least one OS.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the image package includes at least one OS and a configuration file installed in the at least one OS, where the configuration file list includes at least one OS identifier and at least one configuration file installed under the OS.
  • the integrated circuit card identifies the ICCID.
  • the processor before receiving the first message sent by the local profile assistant LPA, the processor is further configured to:
  • the ISD-R mode information is sent to the LPA, and the ISD-R mode information is used to instruct the LPA to send the first message to the ISD-R when receiving the operation instruction input by the user.
  • the ISD-R may also be referred to as another name, such as a processing module.
  • Embodiments of the present invention also provide a computer readable storage medium comprising instructions that, when executed on a device, cause the device to perform the methods/steps of FIGS. 6-15.
  • Embodiments of the present invention also provide a computer program product comprising instructions that, when executed on a computer, cause the computer to perform the methods/steps of Figures 6-15.
  • the present invention may be implemented in whole or in part by software, hardware, firmware, or any combination thereof.
  • software it may be implemented in whole or in part in the form of a computer program product.
  • the computer program product includes one or more computer instructions.
  • the computer program instructions When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with embodiments of the present invention are generated in whole or in part.
  • the computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable device.
  • the computer instructions can be stored in a computer readable storage medium or transferred from one computer readable medium to another computer readable medium, for example, the computer instructions can be wired from a website site, computer, server or data center (for example, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (eg infrared, wireless, microwave, etc.) to another website site, computer, server or data center.
  • the computer readable storage medium can be any available media that can be accessed by a computer or a data storage device such as a server, data center, or the like that includes one or more available media.
  • the usable medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state hard disk) or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Physics (AREA)
  • Telephone Function (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)

Abstract

本发明实施例提供了一种配置文件本地管理的方法、嵌入式通用集成卡和终端，嵌入式通用集成电路卡eUICC包括主平台和安装的至少一个镜像包，主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，主平台包括处理模块，处理模块用于：接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；分别向至少一个镜像包对应的至少一个OS发送第二消息，第二消息用于至少一个OS执行相应操作，通过设置在eUICC的主平台中的处理模块实现了不同OS间配置文件的本地管理。

Description

配置文件管理的方法、嵌入式通用集成电路卡和终端 技术领域
本申请涉及eUICC管理领域，尤其涉及一种配置文件管理的方法、嵌入式通用集成电路卡eUICC和终端。
背景技术
嵌入式通用集成电路卡(embedded universal integrated circuit card，eUICC)是第三代电信智能卡，eUICC一词源自嵌入式(embedded)UICC。eUICC可以单个芯片形态嵌入在终端设备中，也可以作为其他单个芯片的一部分设置在终端设备中，但不意味着eUICC必须嵌入在终端设备中不可移动，eUICC可以是可移动的卡片形态，像用户身份识别(subscriber identification module，SIM)卡、MicroSIM卡或NanoSIM卡一样。在实际应用中，eUICC下载并安装运营商所提供的配置文件之后，eUICC可激活配置文件，从而接入运营商网络(如2G/3G/4G网络等)。
eUICC能够以远程SIM提供(Remote SIM Provisioning,RSP)服务器执行本地配置文件的管理，比如终端设备用户触发的配置文件激活、去激活或删除等，但现有技术RSP服务器中配置文件的管理，通常是管理安装在同一个芯片操作系统(ChipOperating System，COS)下的配置文件，无法适用于多个COS上的多配置文件的场景,其中COS可以称为操作系统(Operating System，OS)。
发明内容
本发明提供了一种配置文件管理的方法、嵌入式通用集成电路卡eUICC和终端，解决了现有RSP服务器无法在多OS多配置文件场景下执行本地配置文件管理的问题。
第一方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和安装的至少一个镜像包，主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；
分别向至少一个镜像包对应的至少一个OS发送第二消息，第二消息用于至少一个OS执行相应操作。
通过设置在eUICC主平台中的处理模块实现了不同OS之间配置文件的管理。主平台中也可以不增加处理模块，例如ISD-R，主平台执行类似ISD-R的操作。
结合第一方面，在第一方面的第一种可能实现的方式中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
结合第一方面或者第一方面的第一种可能实现的方式，在第一方面的第二种可能实现的方式中，分别向至少一个镜像包对应的至少一个OS发送第二消息，包括：
向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收OS发送的已激活配置文件的配置文件策略规则；
根据配置文件策略规则和处理模块预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，向LPA发送错误消息。
结合第一方面，在第一方面的第三种可能实现的方式中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
结合第一方面或者第一方面的第三种可能实现的方式，在第一方面的第四种可能实现的方式中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；在分别向至少一个镜像包对应的至少一个OS发送第二消息之后，处理模块还用于：
分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
结合第一方面的第四种可能实现的方式，在第一方面的第五种可能实现的方式中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
结合第一方面或者上述任一可能实现的方式，在第一方面的第六种可能实现的方式中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
结合第一方面或者上述任一可能实现的方式，在第一方面的第七种可能实现的方式中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
在一个可能实现的方式中，处理模块为发行者安全域-根ISD-R。
第二方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC包括本地配置文件助手LPA，LPA用于：
接收用户输入的激活第一配置文件的操作指令；
确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息，其中，第二配置文件安装在第二OS上。
通过LPA实现跨OS的配置文件的管理。
在一种可能实现的方式中，在接收用户输入的激活第一配置文件的操作指令之前，LPA eUICC还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
在另一种可能实现的方式中，在接收用户输入的激活第一配置文件的操作指令之前，LPA eUICC还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当LPA接收到用户输入的激活第二配置文件的操作指令时，LPA向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收第二OS发送的第二配置文件的PPR。
第三方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC包括本地配置文件助手LPA、主平台和安装的镜像包，主平台为硬件平台，镜像包包括配置文件和第一操作系统OS，主平台包括处理模块，LPA用于：
接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
确定配置文件安装在第一操作系统OS中，且第一OS未激活；
向处理模块发送第一消息，第一消息用于处理模块执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
在一个可能的实现中，在接收用户输入的操作指令之前，LPA还用于：
接收处理模块发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第四方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和镜像包，主平台为硬件平台，镜像包包括配置文件和第一操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当处理模块接收到第一OS发送的反馈信息后，向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
在一个可能的实现中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
在一个可能的实现中，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
在一个可能实现的方式中，处理模块为发行者安全域-根ISD-R。
第五方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和安装 的至少一个镜像包，主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个镜像包对应的至少一个OS中所有配置文件的信息；
向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
通过设置在eUICC主平台中的ISD-R实现了不同OS间配置文件信息的获取。
在一个可能实现的方式中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
在一个可能实现的方式中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在一个可能实现的方式中，处理模块为发行者安全域-根ISD-R。
第六方面，提供了一种配置文件本地管理的方法，嵌入式通用集成电路卡eUICC包括主平台，主平台为硬件平台，主平台包括处理模块，方法包括：
处理模块接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；
处理模块分别向eUICC安装的至少一个操作系统OS发送第二消息，第二消息用于指示至少一个OS执行相应操作。
通过设置在eUICC主平台中的处理模块实现了不同OS之间配置文件的管理。主平台中也可以不增加处理模块。
结合第六方面，在第六方面的第一种可能实现的方式中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
通过设置在eUICC主平台内的处理模块实现了跨OS的配置文件的激活。
结合第六方面或者第六方面的第一种可能实现的方式，在第六方面的第二种可能实现的方式中，处理模块分别向eUICC安装的至少一个操作系统OS发送第二消息，包括：
处理模块向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
处理模块接收OS发送的已激活配置文件的配置文件策略规则；
处理模块根据配置文件策略规则和处理模块预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，处理模块向LPA发送错误消息。
结合第六方面，在第六方面的第三种可能实现的方式中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
结合第六方面或者第六方面的第三种可能实现的方式，在第六方面的第四种可能实现的方式中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；在处理模块分别向eUICC所安装的至少一个操作系统OS发送第二消息之后，方法还包括：
处理模块分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
结合第六方面的第四种可能实现的方式，在第六方面的第五种可能实现的方式中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
结合第六方面或者上述任一可能实现的方式，在第六方面的第六种可能实现的方式中，在处理模块接收本地配置文件助手LPA发送的第一消息之前，方法还包括：
处理模块根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
结合第六方面或者上述任一可能实现的方式，在第六方面的第七种可能实现的方式中，在处理模块接收本地配置文件助手LPA发送的第一消息之前，方法还包括：
处理模块向LPA发送ISD-R模式(mode)信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在一个可能实现的方式中，处理模块可以为发行者安全域-根ISD-R。
第七方面，提供了一种配置文件本地管理的方法，该方法可以包括：
本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令；
LPA确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。
通过LPA实现跨OS的配置文件的管理。
在一种可能实现的方式中，在本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令之前，方法还包括：
LPA根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
在另一种可能实现的方式中，在本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令之前，方法还包括：
LPA根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当LPA接收到用户输入的激活第二配置文件的操作指令时，LPA向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
LPA接收第二OS发送的第二配置文件的PPR。
第八方面，提供了一种配置文件本地管理的方法，嵌入式通用集成电路卡eUICC包括主平台，主平台为硬件平台，主平台包括处理模块，该方法可以包括：
本地配置文件助手LPA接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
LPA确定配置文件安装在第一操作系统OS中，且第一OS未激活；
LPA向处理模块发送第一消息，第一消息用于处理模块执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
在一个可能实现的方式中，所述处理模块可以为发行者安全域-根ISD-R。
通过设置在eUICC的主平台内的ISD-R实现不同OS间配置文件的管理。
在一个可能的实现中，在本地配置文件助手LPA接收用户输入的操作指令之前，该方法还包括：
LPA接收处理模块发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第九方面，提供了一种配置文件本地管理的方法，嵌入式通用集成电路卡eUICC包括主平台，主平台为硬件平台，主平台包括处理模块，该方法可以包括：
处理模块接收本地配置文件助手LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
处理模块向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当处理模块接收到第一OS发送的反馈信息后，处理模块向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
在一个可能实现的方式中，所述处理模块可以为发行者安全域-根ISD-R。
通过设置在eUICC的主平台中的ISD-R实现了不同OS间配置文件的激活或删除。
在一个可能的实现中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，该方法还包括：
处理模块根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
在一个可能的实现中，该方法还包括：
处理模块向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用 户输入的操作指令时向处理模块发送第一消息。
第十方面，提供了一种配置文件本地管理的方法，嵌入式通用集成电路卡eUICC包括主平台，主平台为硬件平台，主平台包括处理模块，该方法可以包括：
处理模块接收本地配置文件助手LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个操作系统OS中所有配置文件的信息；
处理模块向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
处理模块接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
处理模块向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
在一个可能实现的方式中，所述处理模块可以为发行者安全域-根ISD-R。
通过设置在eUICC主平台中的ISD-R实现了不同OS间配置文件信息的获取。
在一个可能实现的方式中，在处理模块接收本地配置文件助手LPA发送的第一消息之前，方法还包括：
处理模块根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
在一个可能实现的方式中，在处理模块接收本地配置文件助手LPA发送的第一消息之前，方法还包括：
处理模块向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第十一方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC的主平台包括处理模块，主平台为硬件平台，处理模块包括：
接收单元，用于接收LPA发送的第一消息，第一消息为用户输入的操作指令；
发送单元，用于分别向eUICC安装的至少一个操作系统OS发送第二消息，第二消息用于指示至少一个OS执行相应操作。
通过设置在eUICC主平台中的ISD-R实现了不同OS间配置文件的管理。
结合第十一方面，在第十一方面的第一种可能实现的方式中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
在一个可能实现的方式中，处理模块可以为发行者安全域-根ISD-R。
通过设置在eUICC主平台内的ISD-R实现了跨OS的配置文件的激活。
结合第十一方面或者第六方面的第一种可能实现的方式，在第十一方面的第二种可能实现的方式中，处理模块还包括处理单元；发送单元用于分别向eUICC安装的至少一个操作系统OS发送第二消息，包括：
发送单元向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收单元接收OS发送的已激活配置文件的配置文件策略规则；
处理单元，用于根据配置文件策略规则和处理模块预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，发送单元向LPA发送错误消息。
结合第十一方面，在第十一方面的第三种可能实现的方式中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
结合第十一方面或者第十一方面的第三种可能实现的方式，在第十一方面的第四种可能实现的方式中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；
发送单元，还用于分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
结合第十一方面的第四种可能实现的方式，在第十一方面的第五种可能实现的方式中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
结合第十一方面或者上述任一可能实现的方式，在第十一方面的第六种可能实现的方式中，
处理模块的处理单元根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
结合第十一方面或者上述任一可能实现的方式，在第十一方面的第七种可能实现的方式中，发送单元，还用于向LPA发送ISD-R模式(mode)信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第十二方面，提供了一种终端，终端包括本地配置文件助手LPA，LPA包括：
接收单元，用于接收用户输入的激活第一配置文件的操作指令；
处理单元，用于确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。通过LPA实现跨OS的配置文件的管理。
在一种可能实现的方式中，处理单元，还用于根据eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
在另一种可能实现的方式中，LPA还包括发送单元；
处理单元，还用于根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括 第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当接收单元接收到用户输入的激活第二配置文件的操作指令时，发送单元向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收单元接收第二OS发送的第二配置文件的PPR。
第十三方面，提供了一种终端，终端包括本地配置文件助手LPA和嵌入式通用集成电路卡eUICC，eUICC的主平台包括处理模块，主平台为硬件平台，LPA包括：
接收单元，用于接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
处理单元，用于确定配置文件安装在第一操作系统OS中，且第一OS未激活；
发送单元，用于向处理模块发送第一消息，第一消息用于ISD-R执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
在一个可能的实现中，处理模块为发行者安全域-根ISD-R。
通过设置在eUICC的主平台内的ISD-R实现不同OS间配置文件的管理。
在一个可能的实现中，接收单元，还用于接收处理模块发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第十四方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC的主平台包括处理模块，主平台为硬件平台，处理模块包括：
接收单元，用于接收LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
发送单元，用于向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当接收单元接收到第一OS发送的反馈信息后，处理模块向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
在一个可能的实现中，处理模块为发行者安全域-根ISD-R。
通过设置在eUICC的主平台中的ISD-R实现了不同OS间配置文件的激活或删除。
在一个可能的实现中，处理模块还包括处理单元，用于根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
在一个可能的实现中，发送单元，还用于向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第十五方面，提供了一种嵌入式通用集成电路卡eUICC，eUICC的主平台包括处理模块，所述主平台为硬件平台，处理模块包括：
接收单元，用于接收LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个操作系统OS中所有配置文件的信息；
发送单元，用于向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
接收单元，还用于接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
发送单元，还用于向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
在一个可能的实现中，处理模块为发行者安全域-根ISD-R。
通过设置在eUICC主平台中的ISD-R实现了不同OS间配置文件信息的获取。
在一个可能实现的方式中，处理模块还包括处理单元，用于根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
在一个可能实现的方式中，发送单元，还用于向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
第十六方面，提供了一种嵌入式通用集成电路卡eUICC，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；
分别向eUICC安装的至少一个操作系统OS发送第二消息，第二消息用于指示至少一个OS执行相应操作。实现了不同OS间配置文件的管理。
结合第十六方面，在第十六方面的第一种可能实现的方式中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
结合第十六方面或者第十六方面的第一种可能实现的方式，分别向eUICC安装的至少一个OS发送第二消息，包括：
向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收OS发送的已激活配置文件的配置文件策略规则；
根据配置文件策略规则和ISD-R预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，向LPA发送错误消息。
结合第十六方面，在第十六方面的第三种可能实现的方式中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
结合第十六方面或者第六方面的第三种可能实现的方式，在第十六方面的第四种可能实现的方式中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；在分别向至少一个镜像包对应的至少一个OS发送第二消息之后，处理器还用于：
分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
结合第十六方面的第四种可能实现的方式，在第十六方面的第五种可能实现的方 式中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
结合第十六方面或者上述任一可能实现的方式，在第十六方面的第六种可能实现的方式中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
结合第十六方面或者上述任一可能实现的方式，在第十六方面的第七种可能实现的方式中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
第十七方面，提供了一种终端，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收用户输入的激活第一配置文件的操作指令；
确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。实现了不同OS间配置文件的管理。
可选地，在一个可能实现的方式中，在接收用户输入的激活第一配置文件的操作指令之前，处理器还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
可选地，在一个可能实现的方式中，在接收用户输入的激活第一配置文件的操作指令之前，处理器还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当LPA接收到用户输入的激活第二配置文件的操作指令时，LPA向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收第二OS发送的第二配置文件的PPR。
第十八方面，提供了一种终端，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
确定配置文件安装在第一操作系统OS中，且第一OS未激活；
向ISD-R发送第一消息，第一消息用于ISD-R执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。实现了不同OS间配置文件的管理。
可选地，在一个可能的实现中，在接收用户输入的操作指令之前，处理器还用于：
接收ISD-R发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输 入的操作指令时向ISD-R发送第一消息。
第十九方面，提供了一种嵌入式通用集成电路卡eUICC，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
ISD-R向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当ISD-R接收到第一OS发送的反馈信息后，ISD-R向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。实现了不同OS间配置文件的管理。
可选地，在一个可能的实现中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
可选地，在一个可能的实现中，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
第二十方面，提供了一种嵌入式通用集成电路卡eUICC，包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个操作系统OS中所有配置文件的信息；
ISD-R向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
ISD-R接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
ISD-R向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
可选地，在一个可能的实现中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
可选地，在一个可能的实现中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在第十六方面、第十八方面、第十九方面以及第二十方面中，ISD-R还可以称为 其他名称，例如处理模块。
第二十一方面，提供了一种计算机可读存储介质，包括指令，当其在设备上运行时，使得该设备执行如第六方面至第十方面，或者第六方面的任一种可能实现的方式至第十方面的任一种可能实现方式中的任一实现方式的方法。
第二十二方面，提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行第六方面至第十方面的任一项可实现的方法。
基于提供的一种配置文件管理的方法、嵌入式通用集成电路卡eUICC和终端，通过终端中的LPA或者将现有技术中eUICC中的ISD-R下沉到PP中，实现了多OS多配置文件的本地管理。
附图说明
图1为本发明实施例提供的一种系统示意图；
图2为本发明实施例提供的一种eUICC软件层面架构示意图；
图3为本发明实施例提供的一种场景示意图；
图4为本发明实施例提供的另一种场景示意图；
图5为本发明实施例提供的又一种场景示意图；
图6为本发明实施例提供的一种配置文件本地管理的方法流程图；
图7为本发明实施例提供的一种配置文件本地管理的方法流程图；
图8为本发明实施例提供的一种内存重置的方法流程图；
图9为本发明实施例提供的另一种内存重置的方法流程图；
图10为本发明实施例提供的又一种内存重置的方法流程图；
图11为本发明实施例提供的一种配置文件本地管理的方法流程图；
图12为本发明实施例提供的另一种配置文件管理的方法流程图；
图13为本发明实施例提供的一种配置文件管理的方法流程图；
图14为本发明实施例提供的一种管理方法流程图；
图15为本发明实施例提供的另一种管理方法流程图；
图16为本发明实施例提供的一种eUICC的结构示意图；
图17为本发明实施例提供的一种终端结构示意图；
图18为本发明实施例提供的另一种eUICC的结构示意图；
图19为本发明实施例提供的另一种终端的结构示意图。
具体实施方式
在本发明实施例中，eUICC可以是IUICC(Integrated Universal Integrated Circuit Card)。eUICC和iUICC是两种不同的形态，eUICC可以是一个单独的芯片，该eUICC可以以可插拔或不可插拔的形式安装在终端上，eUICC通过接口与调制解调器(modem)相连接。iUICC指的是封装在调制解调器芯片中的一部分。iUICC的硬件承载可以是一个安全单元(Secure Element)。iUICC通过芯片内部的总线(bus)或者高速总线(bus)和芯片内部的其他元器件相连。iUICC也可以通过把SIM对应的模块嵌入到其他芯片当中来实现，例 如，应用处理器芯片。
每个eUICC有一个唯一标识eUICC的标识(eUICC-ID，EID)。每个eUICC可以下载和安装多个不同运营商提供的镜像(Bundle)包，镜像包包括芯片操作系统(Chip Operating System，COS)和配置文件(profile)。这里的Bundle也可以称为image。
在本发明实施例中，不同运营商提供的镜像包可以为RSPBundle或/和Bundle，RSPBundle可以继续下载和安装COS和配置文件，而Bundle不能再下载和安装COS。在本发明实施例中，也可以称COS为OS。
每个配置文件有一个唯一标识该配置文件的集成电路卡识别码(integrated circuit card ID，ICCID)，该ICCID还可称为profileID。
配置文件(profile)指运营商数据以及应用的集合，通常包括配置文件元数据、网络接入应用参数、文件系统中的其他元素等。配置文件元数据中包括配置文件策略规则(profile policy rules，PPR)，PPR有两种定义：1、配置文件不允许去激活(disable)；2、配置文件不允许被删除(delete)。网络接入应用参数包括：用户密钥Ki，国际移动用户识别码(international mobile subscriber identity，IMSI)、运营商安全域(mobile network operator-Security domain，MNO-SD)、补充安全域(supplementary security domains，SSD)、控制权安全域(controlling authority security domain，CASD)、应用(例如NFC应用等)、JAVAcard程序等。其中，IMSI和Ki的对应关系用于识别请求网络鉴权的用户的身份。
eUICC下载、安装并激活配置文件，激活配置文件(enabledprofile)后，终端内部的文件和应用才可以通过终端的eUICC接口选择，即配置文件被激活之后终端上的文件和应用才可以被使用。
下面通过图1简单介绍一下eUICC所处的环境。图1为本发明实施例提供的一种系统架构示意图。
如图1所示，该系统可以包括终端110、签约管理-数据准备(subscription manager-data preparation，SM-DP+)服务器120、移动网络运营商(mobile network operator，MNO)服务器130、签约管理发现服务器(subscription manager-discovery service，SM-DS)140，以及CI服务器150和eUICC制造商(eUICCmanufacturer，EUM)服务器160。
终端110中可以包括eUICC 111、本地配置文件助理(local profile assistant，LPA)112和调制解调器(Modem)(未在图1中示出)。eUICC 111通过调制解调器与LPA112连接。LPA在终端110内部承担与eUICC 111之间交互的作用，其功能包括签约文件下载，业务发现，为用户提供UI界面等。用户还可以通过LPA管理下载到eUICC上的配置文件(profile)，如对配置文件进行激活，去激活、删除等操作。
这里的终端(terminal)也可以称为系统、用户单元、用户站、移动站、移动台、远方站、远程终端、移动设备、用户终端、移动终端、无线通信设备、用户代理、用户装置或用户设备(user equipment，UE)。例如，终端可以是蜂窝电话、无绳电话、智能手表，可穿戴设备，平板设备，无人机，售货机，传感器设备，会话启动协议(session initiation protocol，SIP)电话、无线本地环路(wireless local loop，WLL)站、个人数字助手(personal digital assistant，PDA)、具备无线通信功能的手持设备、计算设备、车载通信模块、智能电表、智能家庭设备或连接到无线调制解调器的其它处理设备。
SM-DP+服务器120用于根据MNO服务器130提供的基本信息(如国际移动用户识别码(international mobile subscriber identity，IMSI)等)生成可以下载到eUICC111上的配置文件，SM-DP+服务器120也可以称为profile下载服务器。SM-DP+服务器120还用于远程配置文件管理，即执行运营商的远程管理请求，向下载安装了配置文件的eUICC发送远程管理请求，eUICC 111执行远程管理请求实现远程管理，远程管理请求包括激活、去激活、删除、询问eUICC状态等。
SM-DS 140用于提供一种机制让远程服务器120能与LPA 112联系，LPA 112联系SM-DS 140可以获得远程服务器120的地址，以便于从远程服务器120的地址对应的远程服务器中获取对应的事件。事件可以是一个远程配置文件管理事件，也可是一个配置文件下载事件。
CI服务器150，用于分别为SM-DP+服务器120、SM-DS 140、EUM服务器160签名和颁发证书。EUM服务器160为eUICC签名和颁发证书。
EUM为eUICC制造商，生产和销售eUICC卡。证书发布中心(certificateissuer，CI)用于为其他实体，如下载服务器等发布证书。
其中，SM-DP+服务器120与MNO服务器130可通过ES2+接口通信；MNO服务器130和eUICC 111之间可通过ES6接口通信；远程服务器120与LPA 112之间可以通过ES9+接口通信；LPA 112与eUICC 111可以通过ES10a、ES10b以及ES10c等接口进行通信；远程服务器120与eUICC 111之间可以通过ES8+接口进行通信；远程服务器120与SM-DS 140之间可以通过ES12接口进行通信；SM-DS 140之间可以通过ES15接口进行通信；SM-DS 140与LPA 112可以通过ES11接口进行通信。具体可参见标准GSMA SGP.22。
图2为本发明实施例提供的一种eUICC软件层面架构示意图。如图2所示，eUICC包括发行者安全域-签约信息集(Issuer Security Domain Profile，ISD-P)部分以及eUICC操作系统(Operating System，OS)结构。eUICC OS包含上层部分(eUICC operating system)以及底层部分(eUICC OS low level components)，eUICC OS上层部分主要包括：LPA服务(LPA in eUICC，LPAe)，LPA服务(LPA services)，电信框架(Telecom Framework)，配置文件数据包解析器(profile package interpreter)，策略规则执行单元(profile policy enabler)。eUICCOS底层部分主要包括：发行者安全域-根(issuer security domain root，ISD-R)，椭圆曲线密码系统数字签名算法(elliptic curve cryptography digital signature algorithm，ECASD)以及加密算法等。
ISD-P又称为profile域，为用于存放profile的空间，以及用于解密和安装配置文件(profile)。并且保存有和eUICC外的SM-DP+服务器进行安全通信的密钥。
ISD-R主要用来创建新的ISD-P，并且负责所有ISD-P的生命周期管理。每个eUICC中只有一个ISD-R。ISD-R是在eUICC生产过程中由EUM安装以及个性化的。ISD-R不能被删除或者去激活(disable)。
在本发明实施例中，ISD-R具有配置文件策略管理(profilepolicymanagement)功能，可以包括规则授权列表(Rules Authorisation Table，RAT)和配置文件策略激活器(ProfilePolicyEnabler，PPE)。
ECASD主要用来安全存储证书以及密钥来支持eUICC上面的安全域。每个eUICC上 面只有一个ECASD。在eUICC生产过程中，EUM需要安装以及个性化ECASD。
ECASD可以包括：
eUICC私钥(SK.EUICC.ECDSA)，eUICC私钥用来建立ECDSA的签名。
eUICC证书(CERT.EUICC.ECDSA)，eUICC证书为了eUICC鉴权，eUICC证书中包括eUICC公钥(PK.EUICC.ECDSA)，GSMA证书颁发者(CI)的公钥(PK.CI.ECDSA)，公钥用于验证eUICC之外网元(例如SM-DP+服务器)的证书。ECASD可能含有同一个或者不同GSMACI的多个公钥。EUM的证书(CERT.EUM.ECDSA)。EUM密钥集，秘钥集用来做秘钥以及证书的更新。
ECASD需要提供给ISD-R以下服务：
基于ISD-R提供的信息所进行的eUICC签名的生成；利用CI公钥(PK.CI.ECDSA)进行的eUICC之外的网元(例如SM-DP+服务器)验证。
图2中示出了两个profile，一个为激活的profile，一个为未激活的profile。每个profile又进一步包括：文件系统、至少一个NAA、小应用程序(applets)、MNO-SD、SSD和CASD。
在图2所示的结构示意图中，可以实现图3所示的配置文件的切换。这里的切换是指将当前eUICC正在运行的配置文件去激活，并且激活另一个已激活的配置文件。如图3所示，eUICC安装RSP镜像包，每个镜像包可以包括一个OS和至少一个配置文件，当配置文件需要切换时，可以通过同一个OS下的ISD-R来实现配置文件的切换。但不能实现不同OS下配置文件的切换，如图4和图5所示的场景。RSP镜像包可以只包括一个OS，或者只包括一个配置文件(profile)。
为了解决本发明实施例中RSP服务器本地配置文件管理无法适用于多个OS中的多配置文件的场景问题，将图2中eUICC OS底层部分的ISD-R设置在eUICC的主平台(PrimaryPlatform)中，换句话讲，在主平台中增加ISD-R。这里的主平台是eUICC中的一个硬件平台，包括一个引导程序(Bootloader)，当终端开启时，这个引导程序会引导执行一些操作。主平台中也可以不增加ISD-R，主平台执行类似ISD-R的操作。ISD-R也可以是其他的软件模块形式存在。
图4和图5为本发明实施例提供的两种不同的场景示意图。
在图4中，允许eUICC安装的每个镜像包(Bundle，或者也可以称为数据包、文件包)中可以包括一个操作系统OS和至少一个配置文件，eUICC的主平台(PrimaryPlatform)中设置ISD-R。由于配置文件在不同的OS中，当配置需要切换时，可以通过设置在主平台中的ISD-R来完成配置文件的切换。
在图5中，允许eUICC安装的多个RSP镜像包和多个图4所示的镜像包，即图5的场景包括图3所示的场景和图4所示的场景，eUICC的主平台(PrimaryPlatform)中设置ISD-R。在该场景中，无论需要切换的配置文件是否在同一个OS中，均可以通过设置在主平台中的ISD-R来完成配置文件的切换。
在本发明实施例中，还可以在LPA中增加一个配置文件策略激活器(Profile Policy Enabler，PPE)，使LPA实现执行PPR的功能，以完成不同OS中配置文件的切换。
下面结合附图6至附图10对本发明实施例提供的配置文件管理的方法进行说明。图6至图10的方案中，是将ISD-R设置在eUICC的主平台(PrimaryPlatform)中。其 中，ISD-R也可以称为处理模块。
图6为本发明实施例提供的一种配置文件管理的方法。如图6所示，该方法可以包括以下步骤：
S201，ISD-R接收LPA发送的第一消息。
第一消息为LPA接收到的用户输入的操作指令，该操作指令可以为激活配置文件的操作指令，或者eUICC内存重置(eUICC memory reset)的命令。eUICC内存重置的命令可以包括指示信息，用于指示删除eUICC中至少一个OS上的运行配置文件(delete operation profiles on all OS)，或者用于指示删除测试配置文件(delete Field Test Profiles)这里的Delete field test profile实际上就是删除出厂预置的测试配置文件(test profile)。在本发明方案中，删除测试配置文件均是指删除出厂预置的测试配置文件。
S202，ISD-R向eUICC安装的至少一个OS发送第二消息。
第二消息用于OS接收到该消息执行相应的操作，以实现不同OS间配置文件的切换。
下面以激活配置文件、eUICC内存重置为例，对本发明实施例的配置文件管理的方法进行描述。如图7至10所示。
图7至图10中，以eUICC安装了两个镜像包为例，即eUICC安装了OS1和OS2，OS1和OS2下分别安装了一个配置文件为例进行说明，配置文件1(profile1)安装在OS1中，配置文件2(profile2)安装在OS2中。其中，eUICC安装的两个镜像包有两种情况：1、两个镜像包都是从SM-DP+服务器下载并安装的(如图7和图8所示)；2、一个镜像包是在eUICC或者iUICC出厂时默认(default)预置的，默认镜像包可以只包括一个OS。配置文件可以通过空中下载的方式下载到该默认OS上并且运行。另一个镜像包是从SM-DP+服务器下载并安装的(如图9和图10所示)。
图7为本发明实施例提供的一种激活配置文件的方法流程示意图。如图7所示，该方法可以包括以下步骤：
S301，ISD-R预制RAT。
RAT中包括PPR1和PPR2。在本发明实施例中，PPR1为配置文件(profile)不能被去激活；PPR2为配置文件(profile)不能被删除。具体的配置文件中包括的PPR是PPR1还是PPR2由运营商决定。
S302，ISD-R向LPA发送ISD-R模式(ISD-R mode)信息。
当终端开机后时，在SM-DP+服务器与eUICC进行双向鉴权过程中，eUICC将ppISDRCapability包含在第二eUICC信息(euiccinfo2)中，并发送给LPA。具体的，发送euiccinfo2的信息可以是双向鉴权当中的认证客户端(AuthenticateClient)消息发送给SM-DP+服务器其中，ppISDRCapability为ISD-R模式信息，即LPA开始工作时，LPA接收eUICC的主平台内ISD-R发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送相应的消息，例如用户输入的是激活配置文件的操作指令，LPA接收到用户输入的激活配置文件的操作指令时，向主平台中的ISD-R发送激活配置文件的命令。换句话讲，ISD-R模式信息是为了告诉LPAeUICC的主平台中也有ISD-R，这样LPA在收到本地配置文件管理命令时，向主平台中的ISD-R发送相应的命令。
S303，eUICC下载并安装镜像包1(image1)。
eUICC通过LPA从SM-DP+服务器下载并安装镜像包1，镜像包1中包括OS1和配置文件1。
S304，ISD-R根据镜像包1更新配置文件列表。
配置文件列表包括OS的标识OSID，以及安装在OS下的配置文件对应的ICCID。当eUICC下载并安装了镜像包1时，ISD-R根据镜像包中包括的OS1和配置文件1更新配置文件列表，将该OS1的标识与配置文件1对应的ICCID1保存在配置文件列表中。
S305，LPA接收用户输入的激活配置文件1的操作指令。
用户可以通过主平台界面(Primary Platform Interface)选择激活配置文件1，即输入激活配置文件1的操作指令。该操作指令中包括配置文件1对应的ICCID1。
S306，LPA向ISD-R发送激活命令。该激活命令包括ICCID1。
S307，ISD-R根据配置文件列表向OS1发送激活命令。
该激活命令包括ICCID1。OS1接收该激活命令后执行S311。
S308，激活配置文件1。
S309，OS1向LPA发送激活完成确认消息。
S310，eUICC下载并安装镜像包2(image2)。
eUICC通过LPA从SM-DP+服务器下载并安装镜像包2，镜像包2中包括OS2和配置文件2。
S311，ISD-R根据镜像包2更新配置文件列表。
配置文件列表包括OS的标识OSID，以及安装在OS下的配置文件对应的ICCID。当eUICC下载并安装了镜像包2时，ISD-R根据镜像包中包括的OS2和配置文件更新配置文件列表，将该OS2的标识与配置文件2对应的ICCID2保存在配置文件列表中。
在本发发明实施例中，eUICC下载并安装镜像包1和镜像包2的先后顺序不作限定。可以先下载并安装镜像包2再下载并安装镜像包1，或者同时下载并安装镜像包1和镜像包2。下载并安装了镜像包1后激活配置文件1。
S312，LPA接收用户输入的激活配置文件的操作指令。
当eUICC下载并安装了OS：OS1和OS2，并激活了OS1上安装的配置文件1。
用户可以通过主平台界面(Primary Platform Interface)选择激活配置文件2，即输入激活配置文件2的操作指令。
S313，LPA向ISD-R发送激活配置文件2命令。
该激活配置文件命令中包括配置文件2对应的ICCID2。ISD-R接收到激活配置文件2的命令后，执行S314。
S314，ISD-R向OS1发送获取配置文件策略规则(GetPPR)的消息。
该获取配置文件策略规则的消息中包括配置文件1对应的ICCID1。
在本发明实施例中，ISD-R是向已激活配置文件所在的OS发送获取配置文件策略规则的消息，若该实施例中存在多个已激活配置文件，则向已激活的多个配置文件对应的OS发送获取配置文件策略规则的消息，以获取多个已激活配置文件的配置文件策略规则。
S315，OS1向ISD-R发送配置文件策略规则PPR1。
S316，ISD-R执行配置文件策略规则PPR1。
当ISD-R接收到OS1发送的PPR1后，将PPR1与RAT中的配置文件授权规则(Profile Policy Authorisation Rules，PPAR)进行对比，其中，RAT预设置在ISD-R中。当PPAR中包括PPR1时，ISD-R执行PPR1。
当ISD-R确定PPR1为不允许被去激活，或者说当ISD-R确定PPR1对应的配置文件1是不允许被去激活状态，换句话讲，当ISD-R确定当前加载的配置文件1是不允许被去激活时，执行S317。
S317，ISD-R向LPA发送错误消息。
通过本发明实施例提供的方法，可以实现相同OS下配置文件的激活，或者不同OS下配置文件的激活。
图8为本发明实施例提供的一种内存重置的方法流程图。如图8所示，该方法可以包括以下步骤：
S401，LPA接收用户输入的eUICC内存重置的操作指令。
当eUICC下载并安装了OS：OS1和OS2后，用户可以通过主平台界面(Primary Platform Interface)选择eUICC内存重置(eUICC memory reset)指令，即输入eUICC内存重置的操作指令。
S402，LPA向ISD-R发送eUICC内存重置命令。
该eUICC内存重置命令中包括指示信息，用于指示删除eUICC安装的所有OS上的运行配置文件(operational profile)。ISD-R接收到eUICC内存重置命令后，执行S403。
S403，ISD-R向OS1发送eUICC内存重置命令。
eUICC内存重置命令中包括指示信息，用于指示删除运行配置文件的信息。
S404，OS1删除运行配置文件1和相应的配置文件元数据(profile metadata)，并恢复SM-DP+服务器的地址为初始地址。
在本发明实施例中，配置文件1相应的配置文件元数据中包括配置文件1的PPR。OS1根据接收到的eUICC内存重置命令删除OS1中所有的运行配置文件。
在本发明实施例中，配置文件元数据存放在配置文件中，删除配置文件也就是删除了其中的配置文件元数据。
S405，OS1向ISD-R发送删除完成确认消息。
S406，ISD-R向OS2发送eUICC内存重置命令。
eUICC内存重置命令中包括删除运行配置文件的信息。
S407，OS2删除运行配置文件2和相应的配置文件元数据(profile metadata)，并恢复SM-DP+服务器的地址为初始地址。
其中，配置文件2相应的配置文件元数据中包括配置文件2的PPR。
在本发明实施例中，OS2根据接收到的eUICC内存重置命令删除OS2中所有的运行配置文件。
S408，OS2向ISD-R发送删除完成确认消息。
在本发明实施例中，ISD-R向OS1和OS2发送eUICC内存重置命令的先后顺序可以不做限制，或者ISD-R可以分别同时向OS1和OS2发送eUICC内存重置命令。
S409，当ISD-R接收到eUICC安装的所有的OS发送的删除完成确认消息后，ISD-R向LPA发送删除完成确认消息。
S410，ISD-R向调制解调器(modem)发送更新(REFRESH)命令。
可选地，如图8所示，在LPA向ISD-R发送eUICC内存重置命令之前，终端开启之后，该方法还可以包括：
S411，LPA接收ISD-R发送的ISD-R模式信息。
ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送相应的消息。
S412，eUICC下载并安装镜像包1(image1)。
eUICC通过LPA从SM-DP+服务器下载并安装镜像包1，镜像包1中包括OS1和配置文件1，配置文件1中包括PPR1。
S413，ISD-R根据镜像包1更新配置文件列表。
S414，eUICC下载并安装镜像包2(image2)。
镜像包2中包括OS2和配置文件2，配置文件2中包括PPR2。
S415，ISD-R根据镜像包2更新配置文件列表。
本发明实施例中更新配置文件列表的过程与图7中更新配置文件列表的过程相同，为简洁描述，在此不再赘述。
图9为本发明实施例提供的另一种内存重置的方法流程图。
图9与图8不同的是，OS1预置在eUICC上。ISD-R接收到eUICC内存重置命令后，将多个OS上的配置文件删除，并删除非默认(default)的OS。这里的非默认的OS是指除出厂预置在eUICC上的OS以外的OS。例如，删除eUICC下载并安装镜像包2对应的OS2。
如图9所示，该方法可以包括以下步骤：
S501，LPA接收ISD-R发送的ISD-R模式信息。
S502，eUICC下载并安装镜像包2。
eUICC通过LPA从SM-DP+服务器下载镜像包2，镜像包2中包括OS2和配置文件2。
S503，ISD-R更新配置文件列表。
ISD-R根据镜像包2更新配置文件列表，将镜像包2中的OS的标识以及安装在OS2中的配置文件2对应的ICCID2存储到配置文件列表中。
S504，LPA接收用户输入的操作指令。
S505，LPA向LPA向ISD-R发送eUICC内存重置命令。
该eUICC内存重置命令中包括指示信息(DeleteBundles以及DeleteOperational Profile)，用于指示删除eUICC安装的所有OS上的运行配置文件(operational profile)，以及删除镜像包(DeleteBundles)，该删除镜像包的信息用于指示删除非默认OS。
S506，ISD-R向OS1发送eUICC内存重置命令。
ISD-R接收到eUICC内存重置命令后，向OS1发送eUICC内存重置命令，eUICC内存重置命令中包括删除运行配置文件(DeleteOperationalProfile)的信息。
S507，OS1删除运行配置文件1和相应的配置文件元数据(profile metadata)，并恢复SM-DP+服务器的地址为初始地址。
其中，配置文件1相应的配置文件元数据中包括配置文件1的PPR。
在本发明实施例中，OS1根据接收到的eUICC内存重置命令删除OS1中所有的运行配置文件。
S508，OS1向ISD-R发送删除完成确认消息。
S509，ISD-R向OS2发送eUICC内存重置命令。
该eUICC内存重置命令包括删除镜像包(DeleteBundles)的信息，用于指示删除非默认OS。
S510，OS2删除配置文件2，并删除OS2。
可选地，当OS2上安装了多个配置文件时，OS2删除OS2上多个配置文件，并删除OS2。这里的删除多个配置文件是指删除OS2上所有的运行配置文件(Operational Profile)。
S511，当ISD-R检测到OS2已经删除时，ISD-R向LPA发送eUICC内存重置完成消息。
S512，ISD-R向调制解调器发送更新(REFRESH)命令。
图10为本发明实施例提供的又一种内存重置的方法流程图。
图10与图8的不同在于，图8中的内存重置是删除安装在OS中的运行配置文件，而图10是删除OS中测试配置文件(delete Field Test Profiles)，Delete field test profile实际上就是将删除出厂预置的测试配置文件(test profile)。除此外，图10的步骤S601至S612的过程与图9中S501至S412的过程相似，具体过程如下：
SS601，LPA接收用户输入的eUICC内存重置的操作指令。
S602，LPA向ISD-R发送eUICC内存重置命令。
该eUICC内存重置命令中包括删除eUICC安装的所有OS上的测试配置文件(delete Field Test Profiles)的信息。ISD-R接收到eUICC内存重置命令后，
S603，ISD-R向OS1发送eUICC内存重置命令。
ISD-R接收到eUICC内存重置命令后，向OS1发送eUICC内存重置命令，eUICC内存重置命令中包括删除测试配置文件的信息。
S604，OS1删除运行配置文件1和相应的配置文件元数据(profile metadata)。
在本发明实施例中，OS1根据接收到的eUICC内存重置命令删除OS1中至少一个所有ISD-P内的测试配置文件。
S605，OS1向ISD-R发送删除完成确认消息。
S606，ISD-R向OS2发送eUICC内存重置命令。
eUICC内存重置命令中包括删除测试配置文件的信息。
S607，OS2删除运行配置文件2和相应的配置文件元数据(profile metadata)。
在本发明实施例中，OS2根据接收到的eUICC内存重置命令删除OS2中所有测试配置文件。
S608，OS2向ISD-R发送删除完成确认消息。
在本发明实施例中，ISD-R向OS1和OS2发送eUICC内存重置命令的先后顺序可以不做限制，或者ISD-R可以分别同时向OS1和OS2发送eUICC内存重置命令。
S609，ISD-R向调制解调器发送更新(REFRESH)命令。
可选地，在本发明实施例中，在LPA接收用户输入的eUICC内存重置的操作指令之前，该方法还包括S610至S612。图10中的S610至S612的过程与图9中S501至S503的过程相同，为简洁描述，在此不再赘述。
可选地，在本发明的一个实施例中，还可以通过删除测试配置文件，以及非默认OS来实现eUICC内存重置，该过程可以类似与图9中删除所有OS上运行配置文件以及删除默认OS的过程，为简洁描述在此不再赘述。
图6至图10为将ISD-R设置在eUICC的主平台中实现跨OS的配置文件管理。下面结合图11描述一下通过LPA来实现跨OS的配置文件本地管理。
在本发明实施例中，LPA具有执行PPR的功能。LPA具有实现执行PPR功能可以通过在LPA中增加一个配置文件策略激活器(Profile Policy Enabler，PPE)，使LPA实现执行PPR的功能，以完成不同OS中配置文件的切换。
本发明实施例以eUICC下载并安装了两个镜像包为例，即eUICC安装了OS1和OS2，OS1和OS2下分别安装了一个配置文件为例进行说明，配置文件1(profile1)安装在OS1中，配置文件2(profile2)安装在OS2中。
还需说明，在本发明实施例中，“第一”、“第二”仅仅用于区分信息、镜像包或者配置文件，并不对信息、镜像包或者配置文件本身进行限制。
图11为本发明实施例提供的一种配置文件本地管理的方法流程图。如图11所示，该方法可以包括以下步骤：
S701，LPA接收用户输入的激活第一配置文件的操作指令。
S702，LPA确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。
在本发明实施例中，第一配置文件可以认为是配置文件2(profile2)，第一操作系统为OS2，第二配置文件为配置文件1(profile1)。
在本发明实施例中，eUICC下载并安装了镜像包1(image1)和镜像包2(image2)，且根据镜像包1和镜像包2更新了配置文件列表，并激活了配置文件1。当LPA接收到用户输入的激活配置文件2的操作指令时，确定需要被激活的目标配置文件，即配置文件2安装在哪个OS上，当确定配置文件2安装在OS2上，且执行当前运行在OS1上的配置文件1的PPR1，当PPR1为不允许被去激活时，向用户显示配置文件2不能被激活或者不能被切换的信息。在本发明实施例中，当前运行的配置文件1安装在OS1上。
通过本发明实施例提供的方法，实现了跨OS的配置文件的切换。
可选地，如图11所示，在LPA接收用户输入的激活第一配置文件的操作指令之前，所述方法还包括：
S703，在LPA中预置RAT。
S704，eUICC下载并安装镜像包1(image1)。
镜像包1中包括OS1、配置文件1，配置文件1中包括PPR1。
S705，LPA更新配置文件列表。
S706，LPA接收用户输入的操作指令。
S707，LPA向OS1发送激活命令。
激活命令包括配置文件1对应的ICCID1。
S708，OS1激活配置文件1。
S709，OS1向LPA发送激活完成确认消息。
S710，LPA向调制解调器发送新激活配置文件命令。
S711，调制解调器根据新激活的配置文件1附着网络。
S712，eUICC下载并安装镜像包2(image2)。
镜像包2中包括OS2和配置文件2。
S713，LPA更新配置文件列表。之后执行S701。
图12为本发明实施例提供的另一种配置文件管理的方法流程图。
在本发明实施例中，ISD-R设置在eUICC的主平台(Primary Platform)中。还需说明，在本发明实施例中，“第一”、“第二”仅仅用于区分消息，并不对消息本身进行限制。
如图12所示，该方法可以包括以下步骤：
S801，LPA接收用户输入的操作指令。
在本发明实施例中，操作指令可以用于激活或者删除配置文件的操作指令。
在本发明实施例中，以激活或删除安装在OS2上的配置文件2为例进行说明。
S802，LPA确定配置文件2安装在操作系统OS2中，且操作系统OS2未激活。
S803，LPA向ISD-R发送第一消息。
第一消息用于ISD-R执行操作指令。第一消息中包括配置文件对应的集成电路卡标识ICCID2和操作系统OS2的标识。
S804，ISD-R向操作系统OS2发送第二消息。
第二消息可以为激活操作系统OS2的命令。
S805，当ISD-R接收到OS2发送的反馈信息后，向OS2发送第三消息，第三消息包括配置文件2对应的ICCID2，以便于第一操作系统接收到第三消息后执行相应的操作。
在本发明实施例中，第三消息对应操作指令，第三消息可以为激活配置文件2的激活命令，也可以为删除配置文件2的删除命令。
通过本发明实施例的方法，可以通过在eUICC中的主平台中的ISD-R实现跨操作系统的配置文件的切换。
可选地，如图12所示，在LPA接收用户输入的操作指令之前，该方法还可以包括：
S806，LPA接收ISD-R发送的ISD-R模式信息。
S807，eUICC下载并安装镜像包1。
镜像包1包括操作系统OS1和配置文件1。
S808，ISD-R更新配置文件列表。
S809，eUICC下载并安装镜像包2。
镜像包2包括操作系统OS2和配置文件2。
S810，ISD-R更新配置文件列表。之后执行S801。
在本发明实施例中，若操作指令时激活配置文件2的操作指令，则在OS2接收到第三消息后，根据第三消息激活配置文件2后，向ISD-R发送激活完成确认消息。ISD-R向LPA发送激活完成确认消息。然后LPA向调制解调器(modem)发送新激活配置文件消息。
图13为本发明实施例提供的一种配置文件管理的方法流程图。
在本发明实施例中，ISD-R设置在eUICC的主平台(Primary Platform)中。还需说明，在本发明实施例中，“第一”、“第二”、“第三”、“第四”仅仅用于区分信息、镜像包或者配置文件，并不对信息、镜像包或者配置文件本身进行限制。
如图13所示，该方法可以包括以下步骤：
S901，ISD-R接收LPA发送的第一消息。
第一消息中包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个OS中所有配置文件的信息(profileinfo)。
在本发明实施例中，第一消息可以为获取配置文件信息，获取配置文件信息可以包括所有镜像包(AllBundles)的标识，以获取所有镜像包对应的OS中安装的配置文件的信息。
S902，ISD-R向至少一个OS发送第二消息。
第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息。
ISD-R接收到LPA发送的第一消息后，向所有OS发送第二消息，第二消息可以为获取配置文件信息的消息，以获取目标OS中安装的配置文件的信息。
S903，ISD-R接收至少一个OS发送的至少一个第三消息。
第三消息包括配置文件的列表信息。
S904，ISD-R向LPA发送第四消息。
第四消息包括至少一个OS发送的配置文件的列表信息。
S905，LPA显示配置文件的列表信息。
可选地，在本发明实施例中，在ISD-R接收LPA发送的第一消息之前，还可以包括：
ISD-R根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括OS和配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡的标识ICCID。
可选地，在本发明实施例中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，该方法还包括：
ISD-R向LPA发送ISD-R模式信息。
例如eUICC安装了两个镜像包，镜像包1和镜像包2，镜像包1中包括OS1和配置文件1，镜像包2中包括OS2和配置文件2。该方法可以具体为如图14所示。如图14所示，该方法可以具体为：
S1001，LPA接收ISD-R发送的ISD-R模式信息。
S1002，eUICC下载并安装镜像包1(image1)。
eUICC通过LPA从SM-DP+服务器下载并安装镜像包1，镜像包1中包括OS1和配置文件1。
S1003，ISD-R更新配置文件列表。
S1004，eUICC下载并安装镜像包2(image2)。
eUICC通过LPA从SM-DP+服务器下载并安装镜像包2，镜像包2中包括OS2和配置文件2。
S1005，ISD-R更新配置文件列表。
S1006，LPA接收用户输入的操作指令。
S1007，LPA向ISD-R发送获取配置文件信息的消息。
该获取配置文件信息的消息中包括所有镜像包的标识，即包括镜像包1的标识和镜像包2的标识。
S1008，ISD-R向OS1发送获取配置文件信息的消息。
S1009，OS1向ISD-R发送配置文件列表。
S1010，ISD-R向OS2发送获取配置文件信息的消息。
S1011，OS2向ISD-R发送配置文件列表。
S1012，ISD-R向LPA发送所有镜像包的配置文件列表。
S1013，LPA显示所有镜像包的配置文件列表。
通过本发明实施例的方案，可以通过设置在eUICC主平台上的ISD-R获取当前镜像包的配置文件的列表(List Profile in Current Bundle)，也可以获取所有镜像包的配置文件的列表(List Profile in All Bundle)。
在本发明的另一实施例中，还可以通过LPA直接将存储的配置文件列表展现给用户。
可选地，在本发明的另一实施例中，LPA可以包括有至少一个OS上的ISD-R列表。LPA收到获取eUICC安装的至少一个操作系统OS中所有配置文件的信息时，依次向所有OS中的ISD-R发送获取配置文件的信息GetProfilesInfo，并且从对应的OS获取配置文件的列表(List of Profiles)
本发明实施例还提供了一种管理方法，用于设置或修改默认SM-DP+服务器地址。用户可以通过一个激活码中的SM-DP+服务器下载完成配置文件，终端会弹出一个提示信息，用于提示用户是否设置SM-DP+服务器的地址为默认SM-DP+服务器的地址。
该方法可以包括以下步骤：
LPA接收用户输入的设置SM-DP+服务器地址的操作指令。
用户可以根据是否设置SM-DP+服务器地址为默认SM-DP+服务器地址的提示信息显示进行选择，当用户选择时即输入操作指令。当用户根据终端显示的提示信息选择设置SM-DP+服务器地址为默认SM-DP+服务器地址，且eUICC安装的所有OS都已处于激活状态时，LPA向至少一个OS发送设置SM-DP+服务器地址的消息。
该设置SM-DP+服务器地址的消息包括默认SM-DP+服务器的地址。当每个OS接收到设置SM-DP+服务器地址的消息时，将当前的SM-DP+服务器地址设置或修改为默认的SM-DP+服务器地址。
在该场景下，LPA接收到用户输入的设置SM-DP+服务器地址的操作指令后，可以通过设置在eUICC主平台内的ISD-R完成跨OS的SM-DP+服务器地址的设置或修改。
下面结合附图15对本发明实施例进行说明。
图15为本发明实施例提供的另一种管理方法流程图。如图15所示，该方法可以包括以下步骤：
1101，LPA接收用户输入的设置SM-DP+服务器地址的操作指令。
用户可以根据是否设置SM-DP+服务器地址为默认SM-DP+服务器地址的提示信息显示进行选择，当用户选择时即输入操作指令。当用户根据终端显示的提示信息选择设置SM-DP+服务器地址为默认SM-DP+服务器地址时，执行S1102。
S1102，LPA向ISD-R发送设置SM-DP+服务器地址的消息。
该设置SM-DP+服务器地址的消息可以包括镜像包的标识和默认SM-DP+服务器的地址。
S1103，ISD-R分别向至少一个OS发送设置SM-DP+服务器地址的消息。
ISD-R分别向镜像包的标识对应镜像包内的所有OS转发设置SM-DP+服务器地址的消息。
S1104，至少一个OS设置或修改当前SM-DP+服务器地址为默认SM-DP+服务器地址。
需要说明的是，在本发明实施例中，默认SM-DP+服务器地址可以成为第一SM-DP+服务器地址；当前SM-DP+服务器地址可以称为第二SM-DP+服务器地址。
本发明实施例提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和安装的至少一个镜像包，主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；
分别向至少一个镜像包对应的至少一个OS发送第二消息，第二消息用于至少一个OS执行相应操作。
可选地，在本发明的一个实施例，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
在本发明实施例中，分别向至少一个镜像包对应的至少一个OS发送第二消息， 包括：
向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收OS发送的已激活配置文件的配置文件策略规则；
根据配置文件策略规则和处理模块预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，向LPA发送错误消息。
可选地，在本发明的一个实施例中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
可选地，在本发明的一个实施例中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；在分别向至少一个镜像包对应的至少一个OS发送第二消息之后，处理模块还用于：
分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
可选地，在本发明的一个实施例中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
可选地，在本发明的一个实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
可选地，在本发明的一个实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
可选地，在本发明的一个实施例中，处理模块为发行者安全域-根ISD-R。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC，eUICC包括本地配置文件助手LPA，LPA用于：
接收用户输入的激活第一配置文件的操作指令；
确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息，其中，第二配置文件安装在第二OS上。
可选地，在本发明的一个实施例中，在接收用户输入的激活第一配置文件的操作指令之前，LPA eUICC还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个 OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
可选地，在本发明的一个实施例中，在接收用户输入的激活第一配置文件的操作指令之前，LPA eUICC还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当LPA接收到用户输入的激活第二配置文件的操作指令时，LPA向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收第二OS发送的第二配置文件的PPR。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC，eUICC包括本地配置文件助手LPA、主平台和安装的镜像包，主平台为硬件平台，镜像包包括配置文件和第一操作系统OS，主平台包括处理模块，LPA用于：
接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
确定配置文件安装在第一操作系统OS中，且第一OS未激活；
向处理模块发送第一消息，第一消息用于处理模块执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
可选地，在本发明的一个实施例中，在接收用户输入的操作指令之前，LPA还用于：
接收处理模块发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
可选地，在本发明的一个实施例中，处理模块为发行者安全域-根ISD-R。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和镜像包，主平台为硬件平台，镜像包包括配置文件和第一操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当处理模块接收到第一OS发送的反馈信息后，向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
可选地，在本发明的一个实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
可选地，在本发明的一个实施例中，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
可选地，在本发明的一个实施例中，处理模块为发行者安全域-根ISD-R。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC，eUICC包括主平台和安装的至少一个镜像包，主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，主平台包括处理模块，处理模块用于：
接收本地配置文件助手LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个镜像包对应的至少一个OS中所有配置文件的信息；
向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
可选地，在本发明的一个实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
可选地，在本发明的一个实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理模块还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向主平台发送第一消息。
可选地，在本发明的一个实施例中，处理模块为发行者安全域-根ISD-R。
图6至图15描述了配置文件本地管理的方法，下面结合附图16至附图19描述一下本发明实施例提供的eUICC和终端。
图16为本发明实施例提供的一种eUICC的结构示意图。如图16所示，该eUICC包括主平台，主平台为硬件平台，主平台包括处理模块。其中，处理模块包括接收单元1601、发送单元1602。
接收单元1601，用于接收LPA发送的第一消息，第一消息为用户输入的操作指令；
发送单元1602，用于分别向eUICC安装的至少一个操作系统OS发送第二消息，第二消息用于指示至少一个OS执行相应操作。
可选地，在本发明实施例中，处理模块可以为发行者安全域-根ISD-R。
采用本发明实施例提供的eUICC，在eUICC的主平台中设置ISD-R实现了不同OS间配置文件的本地管理。
可选地，在本发明实施例中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
可选地，在本发明实施例中，处理模块还包括处理单元1603。发送单元1602用 于分别向eUICC安装的至少一个操作系统OS发送第二消息，包括：
发送单元1602向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收单元1601接收OS发送的已激活配置文件的配置文件策略规则；
处理单元1603，用于根据配置文件策略规则和处理模块预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，发送单元1602向LPA发送错误消息。
可选地，在本发明的另一个实施例中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
可选地，在本发明实施例中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS。
发送单元1602，还用于分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
可选地，在本发明实施例中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
可选地，在本发明的一个实施例中，处理模块的处理单元1603根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
可选地，在本发明实施例中，发送单元1602，还用于向LPA发送ISD-R模式(mode)信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
可选地，在本发明实施例中，处理模块还可以包括存储单元1604，用于存储指令，当处理单元1603调用存储单元的指令时执行相应的操作。
该eUICC中设置在主平台中的处理模块的各功能单元的功能，可以通过图6至图10图中所示实施例中的ISD-R所执行的各步骤来实现，因此，本发明实施例提供的ISD-R的具体工作过程，在此不复赘述。
图17为本发明实施例提供的一种终端结构示意图。如图17所示，终端包括本地配置文件助手LPA，LPA可以包括接收单元1701和处理单元1702。
接收单元1701，用于接收用户输入的激活第一配置文件的操作指令；
处理单元1702，用于确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。
通过本发明实施例提供的终端，终端中的LPA可以实现执行PPR的功能，实现 了不同OS间配置文件的激活。
可选地，在本发明的一个实施例中，处理单元1702，还用于根据eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
可选地，在本发明的实施例中，LPA还包括发送单元1703。
处理单元1702，还用于根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当接收单元接收到用户输入的激活第二配置文件的操作指令时，发送单元1703向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收单元1701接收第二OS发送的第二配置文件的PPR。
可选地，在本发明实施例中，LPA还可以包括存储单元1704，用于存储指令，当处理单元1702调用存储单元的指令时执行相应的操作。
该终端中LPA的各功能单元的功能，可以通过图11中所示实施例中的LPA所执行的各步骤来实现，因此，本发明实施例提供的LPA的具体工作过程，在此不复赘述。
本发明实施例还提供了一种终端，该终端的结构示意图可参见图17所示。终端包括本地配置文件助手LPA和嵌入式通用集成电路卡eUICC，eUICC的主平台包括处理模块，主平台为硬件平台，LPA可以包括：
接收单元1701，用于接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
处理单元1702，用于确定配置文件安装在第一操作系统OS中，且第一OS未激活；
发送单元1703，用于向处理模块发送第一消息，第一消息用于处理模块执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
可选地，在本发明实施例中，处理模块可以为发行者安全域-根ISD-R。
采用本实施例提供的终端，在eUICC的主平台中设置ISD-R实现了跨OS的配置文件的激活或删除，实现了跨OS的配置文件的本地管理。
可选地，在本发明实施例中，接收单元1701，还用于接收处理模块发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
该终端中LPA的各功能单元的功能，可以通过图12中所示实施例中的LPA所执行的各步骤来实现，因此，本发明实施例提供的LPA的具体工作过程，在此不复赘述。
本发明实施例还提供了一种eUICC。该eUICC的结构可以参见图16所示的eUICC结构示意图。eUICC的主平台包括处理模块，主平台为硬件平台，处理模块可以包括：
接收单元1601，用于接收LPA发送的第一消息，第一消息中包括配置文件对应的 集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
发送单元1602，用于向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当接收单元1601接收到第一OS发送的反馈信息后，发送单元1602向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
可选地，在本发明实施例中，处理模块可以为发行者安全域-根ISD-R。
采用本发明实施例提供的eUICC，通过设置在主平台中的ISD-R实现了跨OS的配置文件的激活或删除。
可选地，在本发明实施例中处理单元1603，用于根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
可选地，在本发明实施例中发送单元1602，还用于向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向处理模块发送第一消息。
该eUICC中设置在主平台中的处理模块的各功能单元的功能，可以通过图12中所示实施例中的ISD-R所执行的各步骤来实现，因此，本发明实施例提供的ISD-R的具体工作过程，在此不复赘述。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC，如图16所示，该eUICC的主平台包括处理模块，主平台为硬件平台，处理模块可以包括：
接收单元1601，用于接收LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个操作系统OS中所有配置文件的信息；
发送单元1602，用于向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
接收单元1601，还用于接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
发送单元1602，还用于向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
可选地，在本发明实施例中，处理单元1603，用于根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
可选地，在本发明实施例中，发送单元1602，还用于向LPA发送处理模块模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
可选地，在本发明实施例中，处理模块可以为发行者安全域-根ISD-R。
该eUICC中设置在主平台中的处理模块的各功能单元的功能，可以通过图13中所示实施例中的ISD-R所执行的各步骤来实现，因此，本发明实施例提供的ISD-R的具体工作过程，在此不复赘述。
在本发明实施例中，图17所述的终端的LPA还可以执行图14所示的管理方法中LPA所执行的方法/步骤，为简洁描述，在此不再赘述。
在本发明实施例中，图16所述的eUICC中的处理模块还可以执行图15所示的管理方法中ISD-R执行的方法/步骤，为简洁描述，在此不再赘述。
图18为本发明实施例提供的另一种eUICC的结构示意图。如图18所示，该eUICC可以包括包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息为用户输入的操作指令；
分别向eUICC安装的至少一个操作系统OS发送第二消息，第二消息用于指示至少一个OS执行相应操作。
可选地，在本发明的一个实施例中，第一消息为激活配置文件命令，第一消息中包括集成电路卡标识ICCID，ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
可选地，在本发明实施例中，分别向eUICC安装的至少一个OS发送第二消息，包括：
向已激活配置文件所在的OS发送第二消息，至少一个OS包括已激活配置文件所在的OS；
接收OS发送的已激活配置文件的配置文件策略规则；
根据配置文件策略规则和ISD-R预置的规则授权列表RAT执行配置文件策略规则；
当配置文件规则为不允许被去激活时，向LPA发送错误消息。
可选地，在本发明的另一种实施例中，第一消息为eUICC内存重置的命令，第一消息包括第一指示信息，第二消息包括第二指示信息；第一指示信息用于指示删除eUICC中至少一个OS上的运行配置文件，第二指示信息用于指示删除运行配置文件；或者第一指示信息用于指示删除eUICC中至少一个OS上的测试配置文件，第二指示信息用于指示删除测试配置文件。
可选地，在本发明的一个实施例中，第一消息还包括第三指示信息，第三指示信息用于指示删除至少一个OS；在分别向至少一个镜像包对应的至少一个OS发送第二消息之后，处理器还用于：
分别向至少一个OS发送第三消息，第三消息包括第三指示信息。
可选地，在本发明实施例中，删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
可选地，在本发明的一个实施例中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括至少一个OS中的OS和至少一个配置文件，配置文件列表包括至少一个OS的标识以及至少一个OS下所安装的至少一个配置文件对应的ICCID。
可选地，在本发明的一个实施例中，在ISD-R接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在本发明实施例中，如图18所示，eUICC还可以包括与其他装置通信的通信单元、以及输入输出接口等器件。
由于上述实施例中该eUICC各器件解决问题的实施方式以及有益效果可以参见图6至图10所示的方法实施方式以及有益效果，故在此不复赘述。
图19为本发明实施例提供的另一种终端的结构示意图。如图19所示，该终端可以包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收用户输入的激活第一配置文件的操作指令；
确定第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当PPR为不允许被去激活时，LPA显示第一配置文件不能被激活的信息。
可选地，在本发明的一个实施例中，在接收用户输入的激活第一配置文件的操作指令之前，处理器还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新配置文件列表，第一镜像包包括第一OS和第一配置文件；配置文件列表包括eUICC安装的至少一个OS的标识以及安装在至少一个OS下配置文件对应的集成电路卡标识ICCID。
可选地，在本发明的一个实施例中，在接收用户输入的激活第一配置文件的操作指令之前，处理器还用于：
根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，第二镜像包包括第二OS和第二配置文件,配置文件列表中包括第二OS和安装在第二OS中的第二配置文件对应的集成电路卡标识ICCID；
当LPA接收到用户输入的激活第二配置文件的操作指令时，LPA向第二OS发送激活第二配置文件的命令，激活配置文件的命令中包括第二配置文件对应的ICCID；
接收第二OS发送的第二配置文件的PPR。
在本发明实施例中，如图19所示，终端还可以包括与其他装置通信的通信单元、以及输入输出接口等器件。
由于上述实施例中该终端各器件解决问题的实施方式以及有益效果可以参见图11所示的方法实施方式以及有益效果，故在此不复赘述。
本发明实施例还提供了一种终端，该终端的结构示意图可参见图如图19所示的终端结构示意图，该终端包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收用户输入的操作指令，操作指令用于激活或者删除配置文件；
确定配置文件安装在第一操作系统OS中，且第一OS未激活；
向ISD-R发送第一消息，第一消息用于ISD-R执行操作指令，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一OS的标识。
可选地，在本发明实施例中，在接收用户输入的操作指令之前，处理器还用于：
接收ISD-R发送的ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在本发明实施例中，ISD-R还可以称为其他名称，例如处理模块。
由于上述实施例中该终端各器件解决问题的实施方式以及有益效果可以参见图12所示的方法实施方式以及有益效果，故在此不复赘述。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC。该eUICC的结构示意图可参见图如图18所示eUICC的结构示意图，该eUICC包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，配置文件安装在第一OS中；
ISD-R向第一OS的标识对应的OS发送第二消息，第二消息包括激活第一OS的命令；
当ISD-R接收到第一OS发送的反馈信息后，ISD-R向第一OS发送第三消息，第三消息包括配置文件对应的ICCID；
其中，第一消息和第三消息用于激活或者删除配置文件。
可选地，在本发明实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括第一OS和配置文件。
可选地，在本发明实施例中，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在本发明实施例中，ISD-R还可以称为其他名称，例如处理模块。
由于上述实施例中该eUICC各器件解决问题的实施方式以及有益效果可以参见图12所示的方法实施方式以及有益效果，故在此不复赘述。
本发明实施例还提供了一种嵌入式通用集成电路卡eUICC。该eUICC的结构示意图可参见图如图18所示eUICC的结构示意图，该eUICC包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行程序时实现：
接收本地配置文件助手LPA发送的第一消息，第一消息包括第一指示信息，第一指示信息用于指示获取eUICC安装的至少一个操作系统OS中所有配置文件的信息；
ISD-R向至少一个OS发送第二消息，第二消息包括第二指示信息，第二指示信息用于指示获取配置文件的信息；
ISD-R接收至少一个OS发送的至少一个第三消息，第三消息包括配置文件列表信息；
ISD-R向LPA发送第四消息，第四消息包括至少一个OS发送的配置文件列表信息。
可选地，在本发明实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
根据eUICC下载并安装的镜像包更新配置文件列表，镜像包包括至少一个OS和安装在至少一个OS中的配置文件，配置文件列表包括至少一个OS的标识和至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
可选地，在本发明实施例中，在接收本地配置文件助手LPA发送的第一消息之前，处理器还用于：
向LPA发送ISD-R模式信息，ISD-R模式信息用于指示LPA接收到用户输入的操作指令时向ISD-R发送第一消息。
在本发明实施例中，ISD-R还可以称为其他名称，例如处理模块。
由于上述实施例中该eUICC各器件解决问题的实施方式以及有益效果可以参见图13所示的方法实施方式以及有益效果，故在此不复赘述。
本发明实施例还提供了一种计算机可读存储介质，包括指令，当其在设备上运行时，使得该设备执行图6至图15中的方法/步骤。
本发明实施例还提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行图6至图15中的方法/步骤。
在上述各个本发明实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本发明实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读介质向另一个计算机可读介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(digital subscriber line，DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如，软盘、硬盘、磁带)、光介质(例如，DVD)、或者半导体介质(例如，固态硬盘)等。
以上所述，仅为本发明较佳的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到的变化或替换，都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应该以权利要求的保护范围为准。

Claims (72)

  1. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC包括主平台和安装的至少一个镜像包，所述主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，所述主平台包括处理模块，所述处理模块用于：
    接收本地配置文件助手LPA发送的第一消息，所述第一消息为用户输入的操作指令；
    分别向所述至少一个镜像包对应的至少一个OS发送第二消息，所述第二消息用于所述至少一个OS执行相应操作。
  2. 根据权利要求1所述的eUICC，其特征在于，所述第一消息为激活配置文件命令，所述第一消息中包括集成电路卡标识ICCID，所述ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
  3. 根据权利要求1或2所述的eUICC，其特征在于，分别向所述至少一个镜像包对应的至少一个OS发送第二消息，包括：
    向已激活配置文件所在的OS发送所述第二消息，所述至少一个OS包括所述已激活配置文件所在的OS；
    接收所述OS发送的已激活配置文件的配置文件策略规则；
    根据所述配置文件策略规则和所述处理模块预置的规则授权列表RAT执行所述配置文件策略规则；
    当所述配置文件规则为不允许被去激活时，向所述LPA发送错误消息。
  4. 根据权利要求1所述的eUICC，其特征在于，所述第一消息为所述eUICC内存重置的命令，所述第一消息包括第一指示信息，所述第二消息包括第二指示信息；所述第一指示信息用于指示删除所述eUICC中至少一个OS上的运行配置文件，所述第二指示信息用于指示删除运行配置文件；或者所述第一指示信息用于指示删除所述eUICC中至少一个OS上的测试配置文件，所述第二指示信息用于指示删除测试配置文件。
  5. 根据权利要求1或4所述的eUICC，其特征在于，所述第一消息还包括第三指示信息，所述第三指示信息用于指示删除至少一个OS；在所述分别向至少一个镜像包对应的至少一个OS发送第二消息之后，所述处理模块还用于：
    分别向所述至少一个OS发送第三消息，所述第三消息包括所述第三指示信息。
  6. 根据权利要求5所述的eUICC，其特征在于，所述删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
  7. 根据权利要求1至6任一项所述的eUICC，其特征在于，在所述接收本地配置文件助手LPA发送的第一消息之前，所述处理模块还用于：
    根据所述eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括所述至少一个OS中的OS和至少一个配置文件，所述配置文件列表包括所述至少一个OS的标识以及所述至少一个OS下所安装的至少一个配置文件对应的ICCID。
  8. 根据权利要求1至7任一项所述的eUICC，其特征在于，在所述接收本地配置文件助手LPA发送的第一消息之前，所述处理模块还用于：
    向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收 到用户输入的操作指令时向所述处理模块发送所述第一消息。
  9. 根据权利要求1至8任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  10. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC包括本地配置文件助手LPA，所述LPA用于：
    接收用户输入的激活第一配置文件的操作指令；
    确定所述第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当所述PPR为不允许被去激活时，所述LPA显示所述第一配置文件不能被激活的信息，其中，所述第二配置文件安装在第二OS上。
  11. 根据权利要求10所述的eUICC，其特征在于，在所述接收用户输入的激活第一配置文件的操作指令之前，所述LPA还用于：
    根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新所述配置文件列表，所述第一镜像包包括所述第一OS和所述第一配置文件；所述配置文件列表包括所述eUICC安装的至少一个OS的标识以及安装在所述至少一个OS下配置文件对应的集成电路卡标识ICCID。
  12. 根据权利要求10或11所述的eUICC，其特征在于，在所述接收用户输入的激活第一配置文件的操作指令之前，所述LPA还用于：
    根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，所述第二镜像包包括第二OS和第二配置文件,所述配置文件列表中包括所述第二OS和安装在所述第二OS中的第二配置文件对应的集成电路卡标识ICCID；
    当所述LPA接收到用户输入的激活所述第二配置文件的操作指令时，所述LPA向所述第二OS发送激活第二配置文件的命令，所述激活配置文件的命令中包括所述第二配置文件对应的ICCID；
    接收所述第二OS发送的所述第二配置文件的所述PPR。
  13. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC包括本地配置文件助手LPA、主平台和安装的镜像包，所述主平台为硬件平台，所述镜像包包括配置文件和第一操作系统OS，所述主平台包括处理模块，所述LPA用于：
    接收用户输入的操作指令，所述操作指令用于激活或者删除配置文件；
    确定所述配置文件安装在第一操作系统OS中，且所述第一OS未激活；
    向所述处理模块发送第一消息，所述第一消息用于所述处理模块执行所述操作指令，所述第一消息中包括所述配置文件对应的集成电路卡标识ICCID和所述第一OS的标识。
  14. 根据权利要求13所述的eUICC，其特征在于，在所述接收用户输入的操作指令之前，所述LPA还用于：
    接收所述处理模块发送的ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  15. 根据权利要求13或14所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  16. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC包括主平台和镜像包，所述主平台为硬件平台，所述镜像包包括配置文件和第一操作系统OS，所述主平台包括处理模块，所述处理模块用于：
    接收本地配置文件助手LPA发送的第一消息，所述第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，所述配置文件安装在所述第一OS中；
    向所述第一OS的标识对应的OS发送第二消息，第二消息包括激活所述第一OS的命令；
    当所述处理模块接收到所述第一OS发送的反馈信息后，向所述第一OS发送第三消息，所述第三消息包括所述配置文件对应的ICCID；
    其中，所述第一消息和所述第三消息用于激活或者删除所述配置文件。
  17. 根据权利要求16所述的eUICC，其特征在于，在所述接收本地配置文件助手LPA发送的第一消息之前，所述处理模块还用于：
    根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述第一OS和所述配置文件。
  18. 根据权利要求16或17所述的eUICC，其特征在于，所述处理模块还用于：
    向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  19. 根据权利要求16至18任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  20. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC包括主平台和安装的至少一个镜像包，所述主平台为硬件平台，每个镜像包包括至少一个配置文件和操作系统OS，所述主平台包括处理模块，所述处理模块用于：
    接收本地配置文件助手LPA发送的第一消息，所述第一消息包括第一指示信息，所述第一指示信息用于指示获取所述eUICC安装的至少一个镜像包对应的至少一个OS中所有配置文件的信息；
    向所述至少一个OS发送第二消息，所述第二消息包括第二指示信息，所述第二指示信息用于指示获取配置文件的信息；
    接收所述至少一个OS发送的至少一个第三消息，所述第三消息包括配置文件列表信息；
    向所述LPA发送第四消息，所述第四消息包括所述至少一个OS发送的所述配置文件列表信息。
  21. 根据权利要求20所述的eUICC，其特征在于，在接收本地配置文件助手LPA发送的第一消息之前，所述处理模块还用于：
    根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述至 少一个OS和安装在所述至少一个OS中的配置文件，所述配置文件列表包括所述至少一个OS的标识和所述至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
  22. 根据权利要求20或21所述的eUICC，其特征在于，在接收本地配置文件助手LPA发送的第一消息之前，所述处理模块还用于：
    向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述主平台发送所述第一消息。
  23. 根据权利要求20至22任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  24. 一种配置文件本地管理的方法，其特征在于，嵌入式通用集成电路卡eUICC包括主平台，所述主平台为硬件平台，所述主平台包括处理模块，所述方法包括：
    所述处理模块接收本地配置文件助手LPA发送的第一消息，所述第一消息为用户输入的操作指令；
    所述处理模块分别向所述eUICC安装的至少一个操作系统OS发送第二消息，所述第二消息用于所述至少一个OS执行相应操作。
  25. 根据权利要求24所述的方法，其特征在于，所述第一消息为激活配置文件命令，所述第一消息中包括集成电路卡标识ICCID，所述ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
  26. 根据权利要求24或25所述的方法，其特征在于，所述处理模块分别向所述eUICC安装的至少一个操作系统OS发送第二消息，包括：
    所述处理模块向已激活配置文件所在的OS发送所述第二消息，所述至少一个OS包括所述已激活配置文件所在的OS；
    所述处理模块接收所述OS发送的已激活配置文件的配置文件策略规则；
    所述处理模块根据所述配置文件策略规则和所述处理模块预置的规则授权列表RAT执行所述配置文件策略规则；
    当所述配置文件规则为不允许被去激活时，所述处理模块向所述LPA发送错误消息。
  27. 根据权利要求24所述的方法，其特征在于，所述第一消息为所述eUICC内存重置的命令，所述第一消息包括第一指示信息，所述第二消息包括第二指示信息；所述第一指示信息用于指示删除所述eUICC中至少一个OS上的运行配置文件，所述第二指示信息用于指示删除运行配置文件；或者所述第一指示信息用于指示删除所述eUICC中至少一个OS上的测试配置文件，所述第二指示信息用于指示删除测试配置文件。
  28. 根据权利要求24或27所述的方法，其特征在于，所述第一消息还包括第三指示信息，所述第三指示信息用于指示删除至少一个OS；在所述处理模块分别向所述eUICC所安装的至少一个操作系统OS发送第二消息之后，所述方法还包括：
    所述处理模块分别向所述至少一个OS发送第三消息，所述第三消息包括所述第三指示信息。
  29. 根据权利要求28所述的方法，其特征在于，所述删除至少一个OS包括删除 至少一个非默认OS或者删除至少一个测试OS。
  30. 根据权利要求24至29任一项所述的方法，其特征在于，在所述处理模块接收本地配置文件助手LPA发送的第一消息之前，所述方法还包括：
    所述处理模块根据所述eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括所述至少一个OS中的OS和至少一个配置文件，所述配置文件列表包括所述至少一个OS的标识以及所述至少一个OS下所安装的至少一个配置文件对应的ICCID。
  31. 根据权利要求24至30任一项所述的方法，其特征在于，在所述处理模块接收本地配置文件助手LPA发送的第一消息之前，所述方法还包括：
    所述处理模块向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  32. 根据权利要求24至31任一项所述的方法，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  33. 一种配置文件本地管理的方法，其特征在于，所述方法包括：
    本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令；
    所述LPA确定所述第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当所述PPR为不允许被去激活时，所述LPA显示所述第一配置文件不能被激活的信息，其中，所述第二配置文件安装在第二OS上。
  34. 根据权利要求33所述的方法，其特征在于，在所述本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令之前，所述方法还包括：
    所述LPA根据嵌入式通用集成电路卡eUICC下载并安装的第一镜像包更新所述配置文件列表，所述第一镜像包包括所述第一OS和所述第一配置文件；所述配置文件列表包括所述eUICC安装的至少一个OS的标识以及安装在所述至少一个OS下配置文件对应的集成电路卡标识ICCID。
  35. 根据权利要求33或34所述的方法，其特征在于，在所述本地配置文件助手LPA接收用户输入的激活第一配置文件的操作指令之前，所述方法还包括：
    所述LPA根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，所述第二镜像包包括第二OS和第二配置文件,所述配置文件列表中包括所述第二OS和安装在所述第二OS中的第二配置文件对应的集成电路卡标识ICCID；
    当所述LPA接收到用户输入的激活所述第二配置文件的操作指令时，所述LPA向所述第二OS发送激活第二配置文件的命令，所述激活配置文件的命令中包括所述第二配置文件对应的ICCID；
    所述LPA接收所述第二OS发送的所述第二配置文件的所述PPR。
  36. 一种配置文件本地管理的方法，其特征在于，嵌入式通用集成电路卡eUICC包括主平台，所述主平台为硬件平台，所述主平台包括处理模块，所述方法包括：
    本地配置文件助手LPA接收用户输入的操作指令，所述操作指令用于激活或者删 除配置文件；
    所述LPA确定所述配置文件安装在第一操作系统OS中，且所述第一OS未激活；
    所述LPA向所述处理模块发送第一消息，所述第一消息用于所述处理模块执行所述操作指令，所述第一消息中包括所述配置文件对应的集成电路卡标识ICCID和所述第一OS的标识。
  37. 根据权利要求36所述的方法，其特征在于，在所述本地配置文件助手LPA接收用户输入的操作指令之前，所述方法还包括：
    所述LPA接收所述处理模块发送的ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  38. 根据权利要求36或37所述的方法，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  39. 一种配置文件本地管理的方法，其特征在于，嵌入式通用集成电路卡eUICC包括主平台，所述主平台为硬件平台，所述主平台包括处理模块，所述方法包括：
    所述处理模块接收本地配置文件助手LPA发送的第一消息，所述第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，所述配置文件安装在所述第一OS中；
    所述处理模块向所述第一OS的标识对应的OS发送第二消息，第二消息包括激活所述第一OS的命令；
    当所述处理模块接收到所述第一OS发送的反馈信息后，所述处理模块向所述第一OS发送第三消息，所述第三消息包括所述配置文件对应的ICCID；
    其中，所述第一消息和所述第三消息用于激活或者删除所述配置文件。
  40. 根据权利要求39所述的方法，其特征在于，在所述处理模块接收本地配置文件助手LPA发送的第一消息之前，所述方法还包括：
    所述处理模块根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述第一OS和所述配置文件。
  41. 根据权利要求39或40所述的方法，其特征在于，所述方法包括：
    所述处理模块向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  42. 根据权利要求39至41任一项所述的方法，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  43. 一种配置文件本地管理的方法，其特征在于，嵌入式通用集成电路卡eUICC包括主平台，所述主平台为硬件平台，所述主平台包括处理模块，所述方法包括：
    所述处理模块接收本地配置文件助手LPA发送的第一消息，所述第一消息包括第一指示信息，所述第一指示信息用于指示获取所述eUICC安装的至少一个操作系统OS中所有配置文件的信息；
    所述处理模块向所述至少一个OS发送第二消息，所述第二消息包括第二指示信息，所述第二指示信息用于指示获取配置文件的信息；
    所述处理模块接收所述至少一个OS发送的至少一个第三消息，所述第三消息包括配置文件列表信息；
    所述处理模块向所述LPA发送第四消息，所述第四消息包括所述至少一个OS发送的所述配置文件列表信息。
  44. 根据权利要求43所述的方法，其特征在于，在所述处理模块接收本地配置文件助手LPA发送的第一消息之前，所述方法还包括：
    所述处理模块根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述至少一个OS和安装在所述至少一个OS中的配置文件，所述配置文件列表包括所述至少一个OS的标识和所述至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
  45. 根据权利要求43或44所述的方法，其特征在于，在处理模块接收本地配置文件助手LPA发送的第一消息之前，所述方法还包括：
    所述处理模块向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  46. 根据权利要求43至45任一项所述的方法，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  47. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC的主平台包括处理模块，所述主平台为硬件平台，所述处理模块包括：
    接收单元，用于接收所述LPA发送的第一消息，所述第一消息为用户输入的操作指令；
    发送单元，用于分别向所述eUICC安装的至少一个操作系统OS发送第二消息，所述第二消息用于所述至少一个OS执行相应操作。
  48. 根据权利要求47所述的eUICC，其特征在于，所述第一消息为激活配置文件命令，所述第一消息中包括集成电路卡标识ICCID，所述ICCID用于标识配置文件；第二消息为获取配置文件策略规则的消息。
  49. 根据权利要求47或48所述的eUICC，其特征在于，所述处理模块还包括处理单元；所述发送单元用于分别向所述eUICC安装的至少一个操作系统OS发送第二消息，包括：
    所述发送单元向已激活配置文件所在的OS发送所述第二消息，所述至少一个OS包括所述已激活配置文件所在的OS；
    所述接收单元接收所述OS发送的已激活配置文件的配置文件策略规则；
    所述处理单元，用于根据所述配置文件策略规则和所述处理模块预置的规则授权列表RAT执行所述配置文件策略规则；
    当所述配置文件规则为不允许被去激活时，所述发送单元向所述LPA发送错误消息。
  50. 根据权利要求47所述的eUICC，其特征在于，所述第一消息为所述eUICC内存重置的命令，所述第一消息包括第一指示信息，所述第二消息包括第二指示信息；所述第一指示信息用于指示删除所述eUICC中至少一个OS上的运行配置文件，所述 第二指示信息用于指示删除运行配置文件；或者所述第一指示信息用于指示删除所述eUICC中至少一个OS上的测试配置文件，所述第二指示信息用于指示删除测试配置文件。
  51. 根据权利要求47或50所述的eUICC，其特征在于，所述第一消息还包括第三指示信息，所述第三指示信息用于指示删除至少一个OS；
    所述发送单元，还用于分别向所述至少一个OS发送第三消息，所述第三消息包括所述第三指示信息。
  52. 根据权利要求51所述的eUICC，其特征在于，所述删除至少一个OS包括删除至少一个非默认OS或者删除至少一个测试OS。
  53. 根据权利要求47至52任一项所述的eUICC，其特征在于，
    所述处理模块的处理单元根据所述eUICC下载并安装的至少一个镜像包更新配置文件列表；每个镜像包包括所述至少一个OS中的OS和至少一个配置文件，所述配置文件列表包括所述至少一个OS的标识以及所述至少一个OS下所安装的至少一个配置文件对应的ICCID。
  54. 根据权利要求47至53任一项所述的eUICC，其特征在于，
    所述发送单元，还用于向所述LPA发送ISD-R模式(mode)信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  55. 根据权利要求47至54任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  56. 一种终端，其特征在于，所述终端包括本地配置文件助手LPA，所述LPA包括：
    接收单元，用于接收用户输入的激活第一配置文件的操作指令；
    处理单元，用于确定所述第一配置文件安装在第一操作系统OS中，且执行当前运行的已激活第二配置文件的配置文件策略规则PPR，当所述PPR为不允许被去激活时，所述LPA显示所述第一配置文件不能被激活的信息。
  57. 根据权利要求56所述的终端，其特征在于，
    所述处理单元，还用于根据所述eUICC下载并安装的第一镜像包更新所述配置文件列表，所述第一镜像包包括所述第一OS和所述第一配置文件；所述配置文件列表包括所述eUICC安装的至少一个OS的标识以及安装在所述至少一个OS下配置文件对应的集成电路卡标识ICCID。
  58. 根据权利要求56或57所述的终端，其特征在于，所述LPA还包括发送单元；
    所述处理单元，还用于根据嵌入式通用集成电路卡eUICC下载并安装的第二安装镜像包更新配置文件列表，所述第二镜像包包括第二OS和第二配置文件,所述配置文件列表中包括所述第二OS和安装在所述第二OS中的第二配置文件对应的集成电路卡标识ICCID；
    当所述接收单元接收到用户输入的激活所述第二配置文件的操作指令时，所述发送单元向所述第二OS发送激活第二配置文件的命令，所述激活配置文件的命令中包 括所述第二配置文件对应的ICCID；
    所述接收单元接收所述第二OS发送的所述第二配置文件的所述PPR。
  59. 一种终端，其特征在于，所述终端包括本地配置文件助手LPA和嵌入式通用集成电路卡eUICC，所述eUICC的主平台包括处理模块，所述主平台为硬件平台，所述LPA包括：
    接收单元，用于接收用户输入的操作指令，所述操作指令用于激活或者删除配置文件；
    处理单元，用于确定所述配置文件安装在第一操作系统OS中，且所述第一OS未激活；
    发送单元，用于向所述处理模块发送第一消息，所述第一消息用于所述ISD-R执行所述操作指令，所述第一消息中包括所述配置文件对应的集成电路卡标识ICCID和所述第一OS的标识。
  60. 根据权利要求59所述的终端，其特征在于，
    所述接收单元，还用于接收所述处理模块发送的ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  61. 根据权利要求59或60所述的终端，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  62. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC的主平台包括处理模块，所述主平台为硬件平台，所述处理模块包括：
    接收单元，用于接收所述LPA发送的第一消息，所述第一消息中包括配置文件对应的集成电路卡标识ICCID和第一操作系统OS的标识，其中，所述配置文件安装在所述第一OS中；
    发送单元，用于向所述第一OS的标识对应的OS发送第二消息，第二消息包括激活所述第一OS的命令；
    当所述接收单元接收到所述第一OS发送的反馈信息后，所述处理模块向所述第一OS发送第三消息，所述第三消息包括所述配置文件对应的ICCID；
    其中，所述第一消息和所述第三消息用于激活或者删除所述配置文件。
  63. 根据权利要求62所述的eUICC，其特征在于，所述处理模块还包括处理单元，用于根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述第一OS和所述配置文件。
  64. 根据权利要求62或63所述的eUICC，其特征在于，
    所述发送单元，还用于向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  65. 根据权利要求62至64任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  66. 一种嵌入式通用集成电路卡eUICC，其特征在于，所述eUICC的主平台包括处理模块，所述主平台为硬件平台，所述处理模块包括：
    接收单元，用于接收LPA发送的第一消息，所述第一消息包括第一指示信息，所述第一指示信息用于指示获取所述eUICC安装的至少一个操作系统OS中所有配置文件的信息；
    发送单元，用于向所述至少一个OS发送第二消息，所述第二消息包括第二指示信息，所述第二指示信息用于指示获取配置文件的信息；
    所述接收单元，还用于接收所述至少一个OS发送的至少一个第三消息，所述第三消息包括配置文件列表信息；
    所述发送单元，还用于向所述LPA发送第四消息，所述第四消息包括所述至少一个OS发送的所述配置文件列表信息。
  67. 根据权利要求66所述的eUICC，其特征在于，所述处理模块还包括处理单元，用于根据所述eUICC下载并安装的镜像包更新配置文件列表，所述镜像包包括所述至少一个OS和安装在所述至少一个OS中的配置文件，所述配置文件列表包括所述至少一个OS的标识和所述至少一个OS下安装的配置文件对应的集成电路卡标识ICCID。
  68. 根据权利要求66或67所述的eUICC，其特征在于，
    所述发送单元，还用于向所述LPA发送ISD-R模式信息，所述ISD-R模式信息用于指示所述LPA接收到用户输入的操作指令时向所述处理模块发送所述第一消息。
  69. 根据权利要求66至68任一项所述的eUICC，其特征在于，所述处理模块为发行者安全域-根ISD-R。
  70. 一种终端，其特征在于，所述终端包括如权利要求1至9任一项所述的嵌入式通用集成电路卡eUICC，或者所述终端包括如权利要求10至权利要求12任一项所述的嵌入式通用集成电路卡eUICC；或者所述终端包括如权利要求13或15所述嵌入式通用集成电路卡eUICC；或者所述终端包括如权利要求16至19任一项所述的嵌入式通用集成电路卡eUICC；或者所述终端包括如权利要求20至23任一项所述的嵌入式通用集成电路卡eUICC。
  71. 一种计算机可读存储介质，其特征在于，包括指令，当其在设备上运行时，使得该设备执行如权利要求24至46中任一项所述的方法。
  72. 一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行如权利要求24至46任一项所述的方法。
PCT/CN2017/117172 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端 WO2019119267A1 (zh)

Priority Applications (7)

Application Number Priority Date Filing Date Title
CN202111196157.2A CN114095916A (zh) 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端
US16/954,971 US11516672B2 (en) 2017-12-19 2017-12-19 Profile management method, embedded universal integrated circuit card, and terminal
EP21194997.9A EP4009680A1 (en) 2017-12-19 2017-12-19 Profile management method, embedded universal integrated circuit card, and terminal
EP17935367.7A EP3703400B1 (en) 2017-12-19 2017-12-19 Profile management method and embedded universal integrated circuit card
PCT/CN2017/117172 WO2019119267A1 (zh) 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端
CN201780082876.7A CN110169100B (zh) 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端
US17/973,088 US12041456B2 (en) 2017-12-19 2022-10-25 Profile management method, embedded universal integrated circuit card, and terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/117172 WO2019119267A1 (zh) 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端

Related Child Applications (2)

Application Number Title Priority Date Filing Date
US16/954,971 A-371-Of-International US11516672B2 (en) 2017-12-19 2017-12-19 Profile management method, embedded universal integrated circuit card, and terminal
US17/973,088 Continuation US12041456B2 (en) 2017-12-19 2022-10-25 Profile management method, embedded universal integrated circuit card, and terminal

Publications (1)

Publication Number Publication Date
WO2019119267A1 true WO2019119267A1 (zh) 2019-06-27

Family

ID=66992845

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/117172 WO2019119267A1 (zh) 2017-12-19 2017-12-19 配置文件管理的方法、嵌入式通用集成电路卡和终端

Country Status (4)

Country Link
US (2) US11516672B2 (zh)
EP (2) EP4009680A1 (zh)
CN (2) CN114095916A (zh)
WO (1) WO2019119267A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112911580A (zh) * 2021-01-29 2021-06-04 陕西富莱尔软件科技有限公司 基于云服务激活的eSIM配置方法及配置系统
WO2021162386A1 (ko) * 2020-02-10 2021-08-19 삼성전자 주식회사 전자 장치 및 전자 장치에서 임베디드 가입자 식별 모듈의 프로파일 정책 규칙을 처리하는 방법

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3661146B1 (en) * 2017-07-28 2022-10-26 Huawei Technologies Co., Ltd. Method and terminal for updating network access application authentication information
EP4009680A1 (en) * 2017-12-19 2022-06-08 Huawei Technologies Co., Ltd. Profile management method, embedded universal integrated circuit card, and terminal
CN118632229A (zh) * 2018-08-07 2024-09-10 三星电子株式会社 用于授权远程简档管理的方法、装置和系统
CN114556887A (zh) * 2019-08-16 2022-05-27 三星电子株式会社 用于在设备之间传送捆绑包的方法和设备
EP4094401A4 (en) * 2020-02-28 2023-06-21 Samsung Electronics Co., Ltd. METHOD AND DEVICE FOR REMOTE ADMINISTRATION AND VERIFICATION OF A REMOTE ADMINISTRATION AUTHORITY
CN112114835B (zh) * 2020-09-28 2024-04-26 恒宝股份有限公司 智能卡生产方法、装置、电子设备及存储介质
CN114786170B (zh) * 2022-05-09 2023-06-23 中国联合网络通信集团有限公司 上链数据安全处理实体切换方法、终端、usim及系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016167551A1 (ko) * 2015-04-13 2016-10-20 삼성전자 주식회사 통신 시스템에서 프로파일을 관리하는 기법
CN106851621A (zh) * 2017-02-17 2017-06-13 惠州Tcl移动通信有限公司 一种基于rsp的lpa应用实现方法及实现系统
CN106937274A (zh) * 2017-05-12 2017-07-07 东信和平科技股份有限公司 一种基于EUICC的Profile切换方法及装置

Family Cites Families (58)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7100011B2 (en) * 2002-03-01 2006-08-29 Arris International, Inc. Method and system for reducing storage requirements for program code in a communication device
US8069192B2 (en) * 2004-03-22 2011-11-29 Microsoft Corporation Computing device with relatively limited storage space and operating / file system thereof
US20080208715A1 (en) * 2007-02-28 2008-08-28 Ronen Hod Method, system and apparatus for providing a personalized electronic shopping center
US9497632B2 (en) * 2009-10-01 2016-11-15 T-Mobile Usa, Inc. System and method for pairing a UICC card with a particular mobile communications device
US8555067B2 (en) * 2010-10-28 2013-10-08 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
US20130305047A1 (en) * 2010-11-12 2013-11-14 Zte Corporation Method, and device and system for unlocking terminal by operator
EP2461613A1 (en) * 2010-12-06 2012-06-06 Gemalto SA Methods and system for handling UICC data
GB201021784D0 (en) * 2010-12-22 2011-02-02 Vodafone Ip Licensing Ltd SIM Locking
KR101954450B1 (ko) * 2011-09-05 2019-05-31 주식회사 케이티 내장 ｕｉｃｃ의 인증정보를 이용한 인증방법과, 그를 이용한 프로비저닝 및 ｍｎｏ 변경 방법, 그를 위한 내장 ｕｉｃｃ, ｍｎｏ 시스템 및 기록매체
KR102001869B1 (ko) 2011-09-05 2019-07-19 주식회사 케이티 ｅＵＩＣＣ의 프로파일 관리방법 및 그를 이용한 ｅＵＩＣＣ, ｅＵＩＣＣ 탑재 단말과, 프로비저닝 방법 및 ＭＮＯ 변경 방법
CN103988530B (zh) * 2011-12-07 2018-03-27 诺基亚技术有限公司 用于安全模块的增强型生命周期管理的方法和装置
EP3402235B1 (en) * 2012-05-23 2024-03-06 Samsung Electronics Co., Ltd. Method for control and enforcement of policy rule and euicc
KR102164447B1 (ko) * 2012-11-19 2020-10-13 삼성전자주식회사 단말 장치에 내장되어 설치되는 가입자 인증 모듈의 프로파일 구성 방법 및 이를 이용하는 장치
KR102040231B1 (ko) * 2013-04-15 2019-11-06 삼성전자주식회사 이동 통신에서 가입 사업자 변경 제한 정책을 지원하는 정책 적용 방법 및 장치
US9585022B2 (en) * 2013-11-19 2017-02-28 Telefonaktiebolaget Lm Ericsson (Publ) Profile integration management
US9436455B2 (en) * 2014-01-06 2016-09-06 Apple Inc. Logging operating system updates of a secure element of an electronic device
US20150230070A1 (en) * 2014-02-13 2015-08-13 Qualcomm Incorporated System and Methods for Increasing a Maximum Number of Simultaneous Calls on a Service Subscription of a Multi-SIM Device
US9544042B2 (en) * 2014-03-31 2017-01-10 Qualcomm Incorporated Opportunistic mobile receive diversity (OMRD) in a dual-SIM dual-active (DSDA) device
CN105228125A (zh) * 2014-05-27 2016-01-06 中兴通讯股份有限公司 一种智能卡动态绑定方法、设备和系统
US9635486B2 (en) * 2014-06-10 2017-04-25 Microsoft Technology Licensing, Llc Network selection for a given application or context
KR102254852B1 (ko) 2014-07-19 2021-05-25 삼성전자주식회사 심 운용 방법 및 이를 지원하는 전자 장치
DE112015003902B4 (de) 2014-08-25 2023-08-24 Apple Inc. Durchsetzen von Dienstrichtlinien in eingebetteten UICC-Karten
KR102318877B1 (ko) * 2014-10-02 2021-10-29 삼성전자주식회사 전자 기기의 사용자 인터페이스 표시 방법 및 장치
KR102333395B1 (ko) * 2015-02-17 2021-12-03 삼성전자 주식회사 이동통신 시스템의 단말에서 프로파일 수신을 위한 방법 및 장치
US9524158B2 (en) * 2015-02-23 2016-12-20 Apple Inc. Managing firmware updates for integrated components within mobile devices
US10664257B2 (en) * 2015-05-06 2020-05-26 Apple Inc. Secure element activities
WO2016178548A1 (ko) * 2015-05-07 2016-11-10 삼성전자 주식회사 프로파일 제공 방법 및 장치
EP3346637B1 (en) * 2015-08-31 2019-10-23 Samsung Electronics Co., Ltd. Method and device for downloading profile in communication system
CN108029012B (zh) * 2015-09-11 2020-06-16 华为技术有限公司 配置文件处理方法、配置文件处理装置、用户终端及eUICC
CN107950041B (zh) * 2015-09-30 2020-04-14 华为技术有限公司 一种Profile切换的方法及终端
KR102381377B1 (ko) * 2015-10-07 2022-03-31 삼성전자주식회사 통신 시스템에서 프로파일을 원격으로 제공하는 방법 및 장치
US10305933B2 (en) * 2015-11-23 2019-05-28 Blackberry Limited Method and system for implementing usage restrictions on profiles downloaded to a mobile device
WO2017143885A1 (zh) * 2016-02-25 2017-08-31 华为技术有限公司 一种嵌入式通用集成电路卡的应用处理方法及装置
EP4236412A3 (en) * 2016-03-03 2023-09-13 Huawei Technologies Co., Ltd. Profile download method and system, and related device
KR20170143330A (ko) * 2016-06-21 2017-12-29 삼성전자주식회사 eUICC를 포함하는 전자 장치 및 eUICC를 포함하는 전자 장치의 운용 방법
EP3476144B1 (en) * 2016-06-23 2021-04-21 Telefonaktiebolaget LM Ericsson (publ) A method enabling migration of a subscription
EP3504892B1 (en) * 2016-08-24 2021-04-07 Telefonaktiebolaget LM Ericsson (PUBL) Network subscription handling
CN106648725B (zh) 2016-09-07 2020-04-21 努比亚技术有限公司 终端、服务器及配置文件升级方法
US10506439B2 (en) * 2016-09-16 2019-12-10 Apple Inc. Secure control of profile policy rules
CN108353278B (zh) * 2016-10-20 2021-05-11 华为技术有限公司 嵌入式通用集成电路卡eUICC的管理方法及装置
US10667123B2 (en) * 2016-11-22 2020-05-26 Huawei Technologies Co., Ltd. Method for installing subscription profile, terminal, and server
JP6816284B2 (ja) * 2016-12-12 2021-01-20 テレフオンアクチーボラゲット エルエム エリクソン（パブル） デバイス間のネットワーク加入プロファイルの転送
KR102484365B1 (ko) * 2017-02-28 2023-01-04 삼성전자주식회사 보안 엘리먼트를 이용하여 서비스를 제공하는 전자 장치 및 이를 위한 방법
US10178242B2 (en) * 2017-03-17 2019-01-08 Microsoft Technology Licensing, Llc Enterprise gateway to mobile operator
US11340885B2 (en) * 2017-03-21 2022-05-24 Huawei Technologies Co., Ltd. Method and apparatus for updating operating system
KR102382851B1 (ko) * 2017-07-04 2022-04-05 삼성전자 주식회사 eSIM 단말과 서버가 디지털 인증서를 협의하는 방법 및 장치
US10769279B2 (en) * 2017-08-24 2020-09-08 Apple Inc. Secure element operating system update notification
US10897690B2 (en) * 2017-08-31 2021-01-19 T-Mobile Usa, Inc. Device-enabled eSIM profile acquisition
KR102458790B1 (ko) * 2017-09-07 2022-10-25 삼성전자 주식회사 무선 통신 시스템에서 디바이스들의 프로파일 이동을 지원하는 방법 및 장치
KR102382894B1 (ko) * 2017-11-28 2022-04-05 삼성전자주식회사 통신 시스템에서 이벤트를 관리하는 방법 및 장치
KR102424358B1 (ko) * 2017-11-30 2022-07-22 삼성전자주식회사 통신 서비스를 제공하는 방법 및 전자 장치
US20190181901A1 (en) * 2017-12-08 2019-06-13 T-Mobile Usa, Inc. Local profile assistant and application programming interface
EP4009680A1 (en) * 2017-12-19 2022-06-08 Huawei Technologies Co., Ltd. Profile management method, embedded universal integrated circuit card, and terminal
US10530756B1 (en) * 2018-01-16 2020-01-07 Sprint Spectrum L.P. Profile-deletion control for an embedded universal integrated circuit card
CN114124930B (zh) * 2018-04-25 2023-01-13 华为技术有限公司 配置文件传输方法、终端、服务器和存储介质
EP3672300A1 (en) * 2018-12-21 2020-06-24 Telefonica, S.A. Portable secure elements for subscription manager roles
CN109819434A (zh) * 2019-01-11 2019-05-28 深圳市斯凯荣科技有限公司 一种基于eSIM的卡池系统及控制方法
WO2022108357A1 (en) * 2020-11-19 2022-05-27 Samsung Electronics Co., Ltd. Method and apparatus for handling profiles by considering removable euicc supporting multiple enabled profiles

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016167551A1 (ko) * 2015-04-13 2016-10-20 삼성전자 주식회사 통신 시스템에서 프로파일을 관리하는 기법
CN106851621A (zh) * 2017-02-17 2017-06-13 惠州Tcl移动通信有限公司 一种基于rsp的lpa应用实现方法及实现系统
CN106937274A (zh) * 2017-05-12 2017-07-07 东信和平科技股份有限公司 一种基于EUICC的Profile切换方法及装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3703400A4 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2021162386A1 (ko) * 2020-02-10 2021-08-19 삼성전자 주식회사 전자 장치 및 전자 장치에서 임베디드 가입자 식별 모듈의 프로파일 정책 규칙을 처리하는 방법
CN112911580A (zh) * 2021-01-29 2021-06-04 陕西富莱尔软件科技有限公司 基于云服务激活的eSIM配置方法及配置系统
CN112911580B (zh) * 2021-01-29 2023-11-07 陕西富莱尔软件科技有限公司 基于云服务激活的eSIM配置方法及配置系统

Also Published As

Publication number Publication date
CN110169100B (zh) 2021-10-15
EP3703400B1 (en) 2021-10-27
CN110169100A (zh) 2019-08-23
EP3703400A1 (en) 2020-09-02
US20200314639A1 (en) 2020-10-01
EP3703400A4 (en) 2020-11-25
US12041456B2 (en) 2024-07-16
US11516672B2 (en) 2022-11-29
EP4009680A1 (en) 2022-06-08
CN114095916A (zh) 2022-02-25
US20230037497A1 (en) 2023-02-09

Similar Documents

Publication Publication Date Title
WO2019119267A1 (zh) 配置文件管理的方法、嵌入式通用集成电路卡和终端
US12022571B2 (en) Profile between devices in wireless communication system
US20210112402A1 (en) Method enabling migration of a subscription
US10356070B2 (en) Method for transferring profile and electronic device supporting the same
EP3629610B1 (en) Method and apparatus for managing embedded universal integrated circuit card configuration file
CN110352605B (zh) 一种鉴权算法程序的添加方法、相关设备及系统
KR101907814B1 (ko) eUICC의 원격 가입 관리 방법, 해당 단말
CN109168156B (zh) 一种虚拟sim卡的实现方法、系统、介质、计算机程序产品及服务器
CN108702386B (zh) 一种嵌入式通用集成电路卡配置文件的管理方法及装置
KR20160120598A (ko) 무선 통신 시스템에서 단말에 프로파일을 다운로드 하는 방법 및 장치
EP2887607A1 (en) Migration of assets of a trusted execution environment
JP2018503313A (ja) データ更新方法、装置、および埋め込まれた汎用集積回路カード
WO2019019185A1 (zh) 网络接入应用鉴权信息的更新方法、终端及服务器
JP2022535181A (ja) 加入プロファイル、加入者ｉｄモジュール、および加入サーバを提供する方法
US9088409B2 (en) Accessing local applications when roaming using a NFC mobile device
KR102462366B1 (ko) eUICC 버전을 협상하는 방법 및 장치
KR20210039733A (ko) 무선 통신 시스템의 SIM Profile을 재설치 하는 방법 및 장치
WO2018209986A1 (zh) eUICC签约数据的下载方法及装置
WO2019095948A1 (zh) 一种事件的处理方法和终端
US20240251230A1 (en) Systems and methods enabling seamless sim profile transmission at subscription management data preparation (smdp+)
CN113572861B (zh) 配置文件管理方法、装置、设备及存储介质
KR20200099836A (ko) eUICC 프로파일 설치 권한을 관리하는 방법 및 장치
KR20210020770A (ko) 기기 간 번들 이동 방법 및 장치

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17935367

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2017935367

Country of ref document: EP

Effective date: 20200526

NENP Non-entry into the national phase

Ref country code: DE