CN113242549B - Data processing method, mobile device, UICC (Universal Integrated Circuit card) and terminal - Google Patents

Abstract

The present invention provides a data processing method, which relates to the field of communication technologies, and includes: in response to a GBA-based data processing request sent by a terminal application on the mobile device, acquiring data to be processed of the terminal application; generating a data processing request command from the data, and sending the data processing request command to the UICC for the UICC to process the data to be processed by using a preset shared key; obtaining the UICC using the preset shared key The data to be processed after the shared key is processed. The present invention also provides a mobile device, a UICC and a terminal.

Description

Data processing method, mobile device, UICC and terminal

technical field

The present invention relates to the technical field of communication, in particular to a data processing method, a mobile device, a UICC and a terminal.

Background technique

In the third-generation wireless communication standards, the Generic Authentication Architecture (GAA) is a general structure used by various application business entities to complete the authentication of user identities. The application of GAA can realize the user terminal (UE) Encryption processing of communication with an application server (Network Application Function, NAF for short). GAA includes two authentication mechanisms, one is authentication based on a shared key between communicating entities (General Bootstrapping Architecture, GBA for short), and the other is authentication based on a public key certificate. The GBA mechanism enables communication between the UE and the NAF through the shared key by generating the shared key between the UE and the NAF. According to the UE's physical capabilities and division of labor, GBA can be divided into two types: GBA_ME and GBA_U. Among them, UE entities include mobile equipment (Mobile Equipment, ME) and Universal Integrated Circuit Card (UICC for short), and GBA_ME refers to The negotiation and generation of the key are completed on the UE's mobile equipment (referred to as ME). GBA_U means that the negotiation and generation of the key are completed on the UICC. Compared with GBA_ME, GBA_U has higher security.

Under the GBA_U mechanism, the shared key generated by the UICC includes two, one of which is stored in the UICC and will not be disclosed to the ME of the UE, and the other shared key is sent by the UICC to the ME for storage. In the prior art, for applications associated with the mobile equipment of the UE and the UICC, when the application installed in the ME in the UE communicates with the NAF, the key stored in the ME is usually used as a shared key, and the installed When the application in the UICC communicates with the NAF, the key stored in the UICC is usually used as a shared key. The application on the ME side and the application on the UICC side jointly support the realization of business functions. For example, the application on the UICC side provides security capabilities , storage and use of certificates, etc., and applications on the ME side provide user services and local management. In this case, both the ME side application and the UICC side application may need to perform GBA services, such as the access authentication service of the ME side application and the certificate encryption transmission service of the UICC side application. During the GBA business process, for the NAF shared by the ME application and the UICC application, the NAF also needs to use different shared keys to process the communication data of the ME application and the communication data of the UICC application respectively, which causes the NAF management The complexity of the shared key is high, and it is inconvenient to perform unified management on the shared key.

SUMMARY OF THE INVENTION

The present invention aims to solve at least one of the technical problems existing in the prior art, and proposes a data processing method, a mobile device, a UICC and a terminal.

In a first aspect, the present invention provides a data processing method applied to a mobile device of a user terminal, where the user terminal includes the mobile device and a UICC, and the data processing method includes:

Responding to a GBA-based data processing request sent by a terminal application on the mobile device, acquiring data to be processed by the terminal application;

generating a data processing request command based on the data to be processed, and sending the data processing request command to the UICC, so that the UICC can process the data to be processed by using a preset shared key;

Obtaining the data to be processed processed by the UICC using the preset shared key.

Preferably, the data to be processed includes a plurality of first data blocks to be processed, the data processing request command includes a plurality of data processing request subcommands, each of the data processing request subcommands includes one of the first pending process data blocks;

The step of generating a data processing request command according to the data to be processed, and sending the data processing request command to the UICC includes:

For the current first data block to be processed among the plurality of first data blocks to be processed, generate the current data processing request subcommand according to the current first data block to be processed;

sending the current data processing request subcommand to the UICC, where the current data processing request subcommand includes the current first data block to be processed;

In response to the current first command response message returned by the UICC for the current data processing request subcommand, use the next first data block to be processed among the multiple first data blocks to be processed as the current the first pending data block, and

Executing the step of generating the current data processing request subcommand according to the current first data block to be processed.

Preferably, the step of generating a data processing request command according to the data to be processed, and sending the data processing request command to the UICC includes:

generating the data processing request command according to the complete data to be processed, the data processing request command including the complete data to be processed;

sending the data processing request command including the complete data to be processed to the UICC.

Preferably, after the step of sending the current data processing request subcommand to the UICC, it further includes:

receiving the current first command response message returned by the UICC for the current data processing request subcommand;

If the current first command response message indicates retransmission of the current first data block to be processed, performing the step of generating the current data processing request subcommand according to the current first data block to be processed;

If the current first command response message indicates to send the next first data block to be processed, execute the current first command response message returned by the UICC in response to the current data processing request subcommand, and send The next first data block to be processed among the plurality of first data blocks to be processed is used as the step of the current first data block to be processed.

Preferably, the step of obtaining the data to be processed processed by the UICC using the preset shared key includes:

receiving a data processing response message returned by the UICC, where the data processing response message includes the processed data to be processed.

Preferably, the processed data to be processed includes a plurality of second data blocks to be processed;

The step of obtaining the data to be processed processed by the UICC using the preset shared key includes:

Receiving the current data processing response message returned by the UICC, the current data processing response message includes the current second data block to be processed among the plurality of second data blocks to be processed, and is used to indicate that the next data block to be processed is obtained by sending a command information of the second data block to be processed;

Detecting whether the current data processing response message is abnormal;

If it is detected that the current data processing response message is abnormal, generate a current data acquisition request command for instructing the UICC to retransmit the current second data block to be processed, and send the current data acquisition request command to the UICC, to Responding to the current data acquisition request command, the UICC regenerates a current data processing response message based on the current second data block to be processed;

If it is detected that there is no abnormality in the current data processing response message, generate a current data acquisition request command for instructing the UICC to transmit the next second data block to be processed, and send the current data acquisition request to the UICC The command is used for the UICC to respond to the current data acquisition request command, use the next second data block to be processed as the current second data block to be processed, and generate the data based on the current second data block to be processed Current data processing response message;

Executing the step of receiving the current data processing response message returned by the UICC.

In a second aspect, the present invention also provides a data processing method applied to a UICC of a user terminal, where the user terminal includes a mobile device and the UICC, and the data processing method includes:

receiving a data processing request command sent by the mobile device, where the data processing request command is a command generated by the mobile device based on the GBA-based data to be processed sent by the terminal application;

Processing the data to be processed by using a preset shared key;

sending the processed data to be processed to the mobile device.

Preferably, the data to be processed includes a plurality of first data blocks to be processed, the data processing request command includes a plurality of data processing request subcommands, each of the data processing request subcommands includes one of the first pending process data blocks;

The step of receiving the data processing request command sent by the mobile device includes:

receiving the current data processing request subcommand sent by the mobile device, where the current data processing request subcommand includes the current first pending data block;

In response to the current data processing request subcommand, generate a current first command response message, and send the current first command response message to the mobile device, for the mobile device to respond to the current first command message, using the next first data block to be processed among the multiple first data blocks to be processed as the current first data block to be processed, and generating the current data block according to the current first data block to be processed The above data processing request subcommand;

Executing the step of receiving the current data processing request subcommand sent by the mobile device.

Preferably, the step of receiving the data processing request command sent by the mobile device includes:

Receive a data processing request command sent by the mobile device, the data processing request command is generated by the mobile device based on the complete data to be processed, and the data processing request command includes the complete data to be processed.

Preferably, after the step of receiving the current data processing request subcommand sent by the mobile device, it further includes:

Detect whether the current data processing request subcommand is abnormal;

If it is detected that the current data processing request sub-command is abnormal, a current first command response message for instructing the mobile device to retransmit the current first data block to be processed is generated for the mobile device to use according to the current The first data block to be processed generates the current data processing request subcommand;

If it is detected that there is no abnormality in the current data processing request subcommand, a current first command response message for instructing the mobile device to transmit the next first data block to be processed is generated for the mobile device to respond to The current first command response message uses the next first data block to be processed among the plurality of first data blocks to be processed as the current first data block to be processed, and according to the current first data block The data block to be processed generates the current data processing request subcommand.

Preferably, the step of sending the processed data to be processed to the mobile device includes:

generating a data processing response message according to the processed data to be processed, where the data processing response message includes the processed data to be processed;

sending the data processing response message to the mobile device.

Preferably, the processed data to be processed includes a plurality of second data blocks to be processed;

The step of sending the processed data to be processed to the mobile device includes:

For the current second data block to be processed among the plurality of second data blocks to be processed, generate a current data processing response message according to the current second data block to be processed;

sending the current data processing response message to the mobile device, where the current data processing response message includes the current second data block to be processed;

In response to the current data acquisition request command returned by the mobile device for the current data processing response message indicating to transmit the next second data block to be processed, the next one of the plurality of second data blocks to be processed The second data block to be processed is used as the current second data block to be processed, and

Executing the step of generating a current data processing response message according to the current second data block to be processed;

In response to the current data acquisition request command returned by the mobile device for the current data processing response message indicating to retransmit the current second data block to be processed, directly execute the generating the current data block according to the current second data block to be processed. Steps for data processing response messages.

Preferably, the preset shared key is a Ks_int_NAF key.

In a third aspect, the present invention provides a mobile device, including: a storage module and at least one processor, wherein a computer program is stored in the storage module, and when the computer program is executed by at least one of the processors, the first aspect is implemented. provided data processing methods.

In a fourth aspect, the present invention provides a UICC, including: a storage module and at least one processor, wherein a computer program is stored in the storage module, and when the computer program is executed by at least one of the processors, the second aspect of the present invention is implemented Provided data processing methods.

In the fifth aspect, the present invention further provides a terminal, including a mobile device and a UICC, wherein the mobile device adopts the mobile device provided in the third aspect of the present invention, and the UICC adopts the UICC provided in the fourth aspect of the present invention.

Beneficial technical effect of the present invention:

In the data processing method, mobile device, UICC and terminal provided by the present invention, when the terminal application installed on the mobile device needs to communicate with the application server based on the GBA mechanism, the data to be processed is sent to the mobile device, and the mobile device based on the Process the data to generate a GBA-based data processing request command, and send the data processing request command to the UICC, and the UICC uses the preset shared key stored by itself to process the data to be processed, and the processing The final data to be processed is returned to the mobile device for use by the terminal application. The present invention realizes the process of using the shared key stored in the UICC to process the communication data of the terminal application installed in the mobile device. Compared with the current The technology avoids the use of different shared keys to process the communication data of applications installed in different modules (mobile devices and UICCs) on the user terminal, thereby reducing the complexity of the application server's management of shared keys and realizing encryption Unified management of keys.

Description of drawings

FIG. 1 is a schematic structural diagram of a user terminal provided by an embodiment of the present invention;

FIG. 2 is a flowchart of a data processing method provided by an embodiment of the present invention;

FIG. 3 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 4 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 5 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 6 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 7 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 8 is a flowchart of another data processing method provided by an embodiment of the present invention;

FIG. 9 is a flowchart of another data processing method provided by an embodiment of the present invention.

Detailed ways

In order to enable those skilled in the art to better understand the technical solution of the present invention, the data processing method, mobile device, UICC and terminal provided by the present invention will be described in detail below in conjunction with the accompanying drawings.

The data processing method provided by the present invention is used to process the data involved in the communication between the user terminal and the application server, and the data processing process is mainly carried out in the user terminal. FIG. 1 is a schematic structural diagram of a user terminal provided by an embodiment of the present invention. As shown in FIG. 1 , the user terminal (UE) in the present invention specifically includes a mobile device 1 and a UICC2, wherein a UICC (Universal Integrated Circuit Card, universal Integrated circuit card) is a general smart card platform, on which resides a variety of applications, such as USIM, banking and ticketing and other smart card applications, and UICC provides a unified underlying support for its upper-level applications.

The data processing method provided by the present invention will be described in detail below with the mobile device and the UICC as execution bodies respectively.

FIG. 2 is a flowchart of a data processing method provided by an embodiment of the present invention. This embodiment is implemented based on a mobile device in a user terminal. As shown in FIG. 2 , the method includes:

Step S101 , in response to the GBA-based data processing request sent by the terminal application on the mobile device, acquire data to be processed by the terminal application.

GBA ((General Bootstrapping Architecture, GBA for short)) is an authentication mechanism based on the shared key between communication entities. The GBA mechanism generates a shared key between UE and NAF, so that the UE and NAF pass The shared key communicates. GBA is divided into GBA_ME and GBA_U due to different UICC functions. The embodiment of the present invention particularly relates to the data processing process under the GBA_U mechanism. GBA_U means that the key negotiation and generation are all completed on the UICC The GBA process.

In the embodiment of the present invention, when the terminal application installed on the mobile device needs to communicate with the application server, it sends a data processing request to the mobile device. The data processing request is based on the data processing request under the GBA mechanism, and the mobile device receives After receiving the GBA-based data processing request sent by the terminal application, the data to be processed by the terminal application is obtained. Preferably, the mobile device obtains the data to be processed by the terminal application. Send to mobile device.

Step S102, generating a data processing request command based on the data to be processed, and sending the data processing request command to the UICC, so that the UICC can process the data to be processed by using a preset shared key.

After obtaining the data to be processed, the mobile device generates a data processing request command based on the data to be processed, and sends the data processing request command to the UICC, and the UICC obtains the data to be processed through the data processing request command, and the UICC responds to the The data processing request command uses the preset shared key stored by itself to process the data to be processed. Specifically, the processing process includes data encryption, identity authentication, and so on.

In the embodiment of the present invention, the data processing request command is a data interaction command between the mobile device and the UICC in the GBA scenario, which satisfies the requirement that the terminal application's data to be processed is processed using the shared key stored in the UICC. The data processing request command may be generated based on a preset first command format.

Step S103, acquiring the data to be processed processed by the UICC using the preset shared key.

After the UICC processes the data to be processed, it returns the processed data to be processed to the mobile device for use by terminal applications installed on the mobile device. Preferably, the UICC can feed back the processed data to be processed to the mobile device by generating a response command corresponding to the above data processing request command.

In the embodiment of the present invention, when the terminal application installed on the mobile device needs to communicate with the application server based on the GBA mechanism, it sends the data to be processed to the mobile device, and the mobile device generates a GBA-based data processing request based on the data to be processed command, and send the data processing request command to the UICC, and the UICC uses the preset shared key stored by itself to process the data to be processed in response to the data processing request command, and returns the processed data to be processed to the mobile device , for use by terminal applications. The embodiment of the present invention realizes the process of processing the communication data of the terminal application installed in the mobile device by using the shared key stored in the UICC. Compared with the prior art, it avoids the use of different The shared key is used to process the communication data of the applications installed in different modules (mobile device and UICC) on the user terminal, thereby reducing the complexity of managing the shared key by the application server and realizing the unified management of the key.

In some embodiments, when the amount of data to be processed by the terminal application is large, the mobile device may transmit data in blocks when generating a data processing request command based on the data to be processed and sending it to the UICC. That is, the data to be processed is divided into multiple first data blocks to be processed, correspondingly, the data processing request command includes multiple data processing request subcommands, and each data processing request subcommand correspondingly includes a first data block to be processed . Specifically, as shown in FIG. 3, FIG. 3 is a flowchart of another data processing method provided by the embodiment of the present invention. In this embodiment, on the basis of the embodiment shown in FIG. 2, step S102 may specifically include:

Step S1021 , for the current first data block to be processed among the plurality of first data blocks to be processed, generate a current data processing request subcommand according to the current first data block to be processed.

Step S1022, sending the current data processing request subcommand to the UICC.

Step S1023, in response to the current first command response message returned by the UICC for the current data processing request subcommand, use the next first data block to be processed among the plurality of first data blocks to be processed as the current first data block to be processed, And return to step S1021.

In some embodiments, after the data to be processed is divided into multiple first data blocks to be processed, the mobile device sequentially processes the multiple first data blocks to be processed, wherein the current first data block to be processed refers to multiple The data block to be processed immediately in the first pending data block.

In step S1021, based on the preset first command format, the mobile device generates a current data processing request subcommand according to the current first data block to be processed, and the current data processing request subcommand includes the current first data block to be processed; In step S1023, after the UICC receives the current data processing request subcommand, it generates the current first command response message, and feeds back the current first command response message to the mobile device, and the mobile device waits for the current first command response message after receiving the current first command response message. After the message, take the next first data block to be processed among the multiple first data blocks to be processed as the current first data block to be processed, and return to step S1021 until all the first data blocks to be processed pass the data processing request Subcommand mode successfully sent to UICC. Wherein, the next first to-be-processed data block refers to the first to-be-processed data block that is about to be processed after the order of the current first to-be-processed data block among the plurality of first to-be-processed data arranged in a preset order, In practical applications, in order to facilitate sequential extraction of the first data blocks to be processed, after the data to be processed is divided into multiple first data blocks to be processed, the multiple first data blocks to be processed can be numbered in order, and the data During processing, the first data block to be processed is extracted in the order of the numbers.

In some embodiments, on the UICC side, after receiving the current data processing request subcommand, the UICC judges based on the current data processing request subcommand whether there is still a first pending data block to be sent in the mobile device. The judgment process It can be determined by identifying the relevant fields in the current data processing request subcommand. For example, a certain field is set in the current data processing request subcommand to identify the number of remaining data blocks, and the UICC detects this field to determine the number of remaining data blocks. quantity. When the UICC judges that there is still a first pending data block to be sent in the mobile device, the UICC will generate a first command response message, so that the mobile device continues to send the remaining first pending data in response to the first command response message block, and when it is determined that the first data block to be processed in the mobile device has been sent, the UICC will no longer generate the first command response message and return it to the mobile device, but will execute the process of processing the data to be processed. At this time, The loop of the above steps S1021 to S1023 ends.

In some embodiments, when the amount of data to be processed is small, the data processing request command may be generated directly according to the data to be processed without dividing the data to be processed. That is, step S102 includes: generating a data processing request command according to the complete data to be processed, and sending the data processing request command including the complete data to be processed to the UICC. In this embodiment, the process of generating a data processing request command based on the complete data to be processed is similar to the process of generating a data processing request subcommand based on the first data block to be processed in the previous embodiment, and both commands are based on preset Commands generated by the first command format.

In some embodiments, when the mobile device transmits the data to be processed in blocks to the UICC, the current data processing request subcommand sent by the mobile device may be abnormal. In this case, the mobile device needs to re-based on the current first The data block to be processed generates the current data processing request subcommand and sends it to the UICC. Specifically, as shown in FIG. 4, FIG. 4 is a flowchart of another data processing method provided by the embodiment of the present invention. On the basis of the embodiment shown in FIG. 3, this embodiment further includes after step S1022:

Step S1022a, receiving the current first command response message returned by the UICC for the current data processing request subcommand.

Step S1022b, identifying the current first command response message as indicating retransmission of the current first data block to be processed or indicating transmission of the next first data block to be processed.

When it is recognized that the current first command response message is an instruction to retransmit (retransmit) the current first data block to be processed, return to step S1021; when it is recognized that the current first command response message is an instruction to transmit the next first data block to be processed block, execute step S1023.

In the embodiment of the present invention, the exceptions that may occur in the data processing request subcommand include a data format error in the command, an incomplete first data block to be processed, and the like. An abnormality in the data processing request subcommand will cause the UICC to be unable to obtain the corresponding complete first pending data block from the data processing request subcommand and/or the UICC cannot respond to the data processing request subcommand for the corresponding first pending data block. Process data blocks for processing. Therefore, in the embodiment of the present invention, after the mobile device sends the current data processing request subcommand to the UICC, the UICC side will detect the current data processing request subcommand to determine whether there is any abnormality in the current data processing request subcommand, for example , the UICC determines whether a format error occurs in the current data processing request subcommand by detecting whether each field of the current data processing request subcommand conforms to the preset specification, and by detecting the first data to be processed contained in the current data processing request subcommand Whether the size of the block is equal to the preset size determines whether the first data block to be processed is complete, and so on.

After the UICC completes the detection of the current data processing request sub-command, it generates the current first command response message containing different information according to the detection result. The information contained in the current first command response message may include two types, one for indicating movement The device retransmits the current first data block to be processed, and the other is used to instruct the mobile device to transmit the next first data block to be processed. When the UICC detects that the current data processing request subcommand is abnormal, the current first command response message contains information for instructing the mobile device to retransmit the current first data block to be processed; when the UICC detects the current data processing request subcommand When there is no abnormality, and the UICC recognizes that the mobile device still has the first pending data block to be sent, the current first command response message includes information for instructing the mobile device to transmit the next first pending data block. In practical applications, the different information contained in the current first command response message can be realized by setting the corresponding parameters to be different.

In the embodiment of the present invention, by regenerating the data processing request subcommand and sending it to the UICC when an error or exception occurs in the data processing request subcommand, the integrity of the data to be processed transmitted to the UICC is ensured, and the data to be processed by the UICC can be correctly triggered. to process.

In the embodiment of the present invention, after the mobile device sends the complete data to be processed to the UICC, and the UICC receives the complete data to be processed and completes the processing, the mobile device will obtain the processed data to be processed from the UICC, as shown in Figure 2 Step S103 in.

As an optional implementation manner of step S103, step S103 specifically includes: receiving a data processing response message returned by the UICC, where the data processing response message includes processed data to be processed. That is, the UICC generates a data processing response message based on the processed data to be processed, the data processing response message includes the processed data to be processed, the UICC sends the data processing response message to the mobile device, and the mobile device receives the data processing response message, And obtain the processed data to be processed from the data processing response message. This embodiment is applicable to the case where the amount of processed data to be processed is not large.

As another optional implementation of step S103, when the amount of processed data to be processed is large, the UICC may return the processed data to be processed to the mobile device in blocks, that is, the mobile device may be divided into multiple Obtain processed data to be processed from UICC. Specifically, as shown in FIG. 5, FIG. 5 is a flowchart of another data processing method provided by an embodiment of the present invention. In this embodiment, the processed data to be processed includes a plurality of second data blocks to be processed, namely , after the UICC finishes processing the data to be processed, it divides the processed data to be processed into multiple second data blocks to be processed. In this embodiment, on the basis of the embodiment shown in FIG. 2, step S103 specifically includes:

Step S1031, receiving the current data processing response message returned by the UICC.

The current data processing response message includes the current second data block to be processed among the multiple second data blocks to be processed, wherein the current second data block to be processed refers to the data to be transmitted immediately among the multiple second data blocks to be processed block; the data processing response message is used to instruct the mobile device to obtain the information of the next second data block to be processed by sending a command, and when all the second data blocks to be processed have been sent, the data processing response message is also used to prompt All second pending data blocks of the mobile device have been sent.

Step S1032, detecting whether the current data processing response message is abnormal.

In practical applications, when the UICC returns the second pending data block to the mobile device, the current data processing response message sent by the UICC may be abnormal. In this case, the mobile device needs to generate and reacquire the current second pending data block A command for processing a data block, so that the UICC retransmits the current second data block to be processed. For possible exceptions in the current data processing response message, please refer to the description of the abnormal situation of the data processing request subcommand in the above embodiment shown in FIG. 4 , which will not be repeated here.

In step S1032, when it is detected that the current data processing response message is abnormal, a current data acquisition request command for instructing the UICC to retransmit the current second data block to be processed is generated, and the current data acquisition request command is sent to the UICC, For the UICC to respond to the current data acquisition request command, based on the current second data block to be processed to regenerate the current data processing response message; and when it is detected that there is no abnormality in the current data processing response message, then perform the following step S1033, to Carry out the transmission of the next second data block to be processed.

Step S1033, identifying whether the current data processing response message indicates to obtain the next second data block to be processed by sending a command or to indicate that all second data blocks to be processed have been sent.

When it is recognized that the current data processing response message indicates that the next second data block to be processed is obtained by sending a command, step S1034 is executed, and the sequence returns to step S1031; When the processing data block has been sent, the process ends.

Step S1034 , in response to the current data processing response message, generate a current data acquisition request command for instructing the UICC to transmit the next second data block to be processed, and send the current data acquisition request command to the UICC.

In response to the current data acquisition request command, the UICC takes the next second data block to be processed as the current second data block to be processed, and generates a current data processing response message based on the current second data block to be processed.

In the embodiment of the present invention, when the mobile device recognizes that the current data processing response message indicates to obtain the next second data block to be processed by sending a command, it generates a data acquisition request command based on the preset first command format and sends it to the UICC .

In some embodiments, each time the UICC receives the data acquisition request command, it judges whether there is only one second unprocessed data block left unsent, and when it is judged that there is only one second unprocessed data block left unsent, Then the next second data block to be processed (the last data block to be processed) is used as the current second data block to be processed, and based on the current second data block to be processed, it is used to prompt the mobile device that all the second data blocks to be processed have been processed. The current data processing response message that has been sent is sent to the mobile device; and when it is judged that there are still a plurality of second data blocks to be processed that have not been sent, the next second data block to be processed is used as the current second data block to be processed data block, and generate a current data processing response message for instructing the mobile device to acquire the next second data block to be processed based on the current second data block to be processed, and send the message to the mobile device.

In some embodiments, each time the UICC receives the data acquisition request command, it judges whether there is currently an unsent second data block to be processed, and if so, uses the next second data block to be processed as the current second data block. A data block to be processed, and a current data processing response message is generated based on the current second data block to be processed, the current data processing response message includes the current second data block to be processed and is used to instruct the mobile device to obtain the next second data block to be processed by sending a command Processing the information of the data block; if it does not exist, then generate the current data processing response message, the current data processing response message does not contain any second data block to be processed, but contains information for prompting the mobile device that all the second data blocks to be processed have been sent Completed information.

In practical applications, the two different information contained in the data processing response message can be realized by setting specific fields in the preset first command format to different values.

In the above embodiments, various commands sent by the mobile device can be implemented based on a preset first command format and by setting different field values. The embodiment of the present invention provides a preferred first command format, As shown in the table below:

The first command format can be applied to block transmission of large data volume and overall transmission of small data volume at the same time, and can provide basic management such as continuation, suspension, and retransmission. The parameters of the first command format are described as follows:

P1 is the command parameter 1, indicating the management requirements of this command, where the b1b2 field indicates the session number of this data transmission process, and there can be up to 4 session numbers at the same time; the b3 field indicates whether this command contains the data to be transmitted, which can have Two values, for example, when the value is "0", it means that the command does not contain data to be transmitted; when the value is "1", it means that the command contains data to be transmitted; the b4 field indicates whether the session is continued or terminated Requirements, it can have two values, for example, when its value is "0", it means to continue the session, when its value is "1", it means to terminate the session; the b5 field indicates whether the response needs to be retransmitted, and it can have Two values, for example, when the value is "0", it means that this command is used to transmit the next data block; when the value is "1", it means that this command is used to retransmit the data that needs to be retransmitted indicated by the latest response. data block. The definitions of the remaining fields of P1 can be reserved, and the specific meanings of each setting are shown in the above table.

P2 is command parameter 2, indicating the number of remaining data blocks from the mobile device to the UICC, that is, the number of untransmitted data blocks.

Lc is the length of the data part to be transmitted in the command, which is optional and does not exist when b3=0.

NAF-ID is a component of the command data, which is the identity of the NAF (application server), and is used to indicate the NAF (application server) that requires this data transmission processing, including the length of the NAF-ID and the value of the NAF-ID .

Data is a component of the command data, indicating the data or data block to be processed in this transmission, including the length of Data and the value of Data. When b3=0, the length of Data and the value of Data are empty.

REQ is a component of the command data, which indicates the processing requirements of the data to be processed, and may include other requirements of the current data processing available to the terminal application, such as processing types, algorithm instructions, etc.

Le is the expected response length, optional, not present when b3=1.

The data processing request command, data processing request subcommand, and data acquisition request command sent by the mobile device in the above embodiments can all be implemented based on the first command format, and the specific values of each field can be set according to the actual situation.

FIG. 6 is a flow chart of another data processing method provided by the embodiment of the present invention. The data processing method provided by this embodiment is implemented based on the UICC in the user terminal. As shown in FIG. 6, the method includes:

Step S201, receiving a data processing request command sent by a mobile device.

The data processing request command is a command generated by the mobile device based on the GBA-based data to be processed sent by the terminal application. The generation process of the data processing request command is the same as the generation process of the data processing request command in step S101 in the above embodiment, please refer to the description of step S101 for details, and will not be repeated here.

Step S202, using the preset shared key to process the data to be processed.

The preset shared key is the shared key stored in the UICC, and the shared key is a key generated under the GBA mechanism. In particular, under the GBA_U mechanism, the shared key is generated by the UICC, and the shared key will be Stored in the application server, the terminal application uses the shared key to perform data processing (encryption and decryption processing, authentication processing, etc.) when communicating with the application server.

In some embodiments, the preset shared key in the UICC is a Ks_int_NAF key.

Step S203, sending the processed data to be processed to the mobile device.

In the embodiment of the present invention, the UICC receives the data processing request command sent by the mobile device, and obtains the data to be processed from the data processing request command, processes the data to be processed based on the preset shared key, and sends the processed The data to be processed is returned to the mobile device for use by the terminal application. The embodiment of the present invention realizes the process of using the shared key stored in the UICC to process the communication data of the terminal application installed in the mobile device. Compared with the current The technology avoids the use of different shared keys to process the communication data of applications installed in different modules (mobile devices and UICCs) on the user terminal, thereby reducing the complexity of the application server's management of shared keys and realizing encryption Unified management of keys.

In some embodiments, when the amount of data to be processed in the terminal application is large, the mobile device transmits the data to be processed to the UICC in blocks, as shown in FIG. 7 , which is another embodiment of the present invention. The flow chart of the data processing method. In this embodiment, the data to be processed includes a plurality of first data blocks to be processed, the data processing request command includes a plurality of data processing request subcommands, and each data processing request subcommand correspondingly includes a first The data block to be processed, in this embodiment, on the basis of the embodiment shown in Figure 6, step S201 includes:

Step S2011. Receive the current data processing request subcommand sent by the mobile device, where the current data processing request subcommand includes the current first data block to be processed.

Step S2012. Based on the current data processing request subcommand, it is judged whether there is still the first data block to be processed in the mobile device to be sent.

The UICC judges based on the current data processing request subcommand whether there is still the first pending data block to be sent in the mobile device, which can be determined by identifying the relevant fields in the data processing request subcommand, for example, setting a certain value in the data processing request subcommand One field is used to identify the number of remaining data blocks, and the UICC determines the number of remaining data blocks by detecting this field.

In step S2012, when the UICC determines that the mobile device still has the first pending data block to be sent, the following step S2013 is executed, so that the mobile device continues to send the remaining first pending data block in response to the first command response message. data blocks, and return to step S2011 in sequence until the UICC successfully receives all the first data blocks to be processed sent by the mobile device; and when it is judged that there is no first data block to be processed in the mobile device to be sent, the UICC will no longer generate the first data block to be processed A command response message, but directly execute step S202 to process the received first data block to be processed.

Step S2013: In response to the current data processing request subcommand, generate a current first command response message for instructing the mobile device to transmit the next first data block to be processed, and send the current first command response message to the mobile device.

After receiving the current first command response message, the mobile device uses the next first data block to be processed among the multiple first data blocks to be processed as the current first data block to be processed for the current first command response message, And generate the current data processing request subcommand according to the current first data block to be processed.

Steps S2011-S2013 in this embodiment correspond to steps S1021-S1023 in the above-mentioned embodiment. For details, please refer to the description of the corresponding steps in the above-mentioned embodiment, and details are not repeated here.

In some embodiments, when the amount of data to be processed is small, the data to be processed may not be divided. At this time, the process of step S201 is: receiving the data processing request command sent by the mobile device, the data processing request command is the mobile device Generated according to complete data to be processed, the data processing request command includes complete data to be processed.

In some embodiments, when the mobile device transmits the data to be processed in chunks to the UICC, an error or exception may occur in the data processing request subcommand sent by the mobile device. In this case, the UICC needs to instruct the mobile device to resend Contains the data processing request subcommand of the current first pending data block. As shown in FIG. 8, FIG. 8 is a flowchart of another data processing method provided by the embodiment of the present invention. On the basis of the embodiment shown in FIG. 7, this embodiment also includes after step S2011:

Step S2012a, detecting whether the current data processing request subcommand is abnormal.

If it is detected that the current data processing request sub-command is abnormal, a current first command response message for instructing the mobile device to retransmit the current first data block to be processed will be generated and sent to the mobile device for the mobile device to use according to the current first data block. The data block to be processed generates a current data processing request subcommand; if it is detected that there is no abnormality in the current data processing request subcommand, step S2012 is executed.

In the embodiment of the present invention, the exceptions that may occur in the data processing request subcommand include data format errors, incomplete data blocks, and the like. An abnormality in the data processing request subcommand will cause the UICC to be unable to obtain the corresponding complete first pending data block from the data processing request subcommand and/or the UICC cannot respond to the data processing request subcommand for the corresponding first pending data block. Process data blocks for processing. Therefore, in the embodiment of the present invention, after the mobile device sends the current data processing request subcommand to the UICC, the UICC side detects the current data processing request subcommand to determine whether the current data processing request subcommand is abnormal, for example, The UICC determines whether a format error occurs in the current data processing request subcommand by detecting whether each field of the current data processing request subcommand conforms to the preset specification, and by detecting the first data block to be processed contained in the current data processing request subcommand Whether the size of is equal to the preset size determines whether the first data block to be processed is complete, and so on.

The embodiment shown in FIG. 8 of the present invention corresponds to the method steps of the embodiment shown in FIG. 4 of the present invention. For details, please refer to the description of the corresponding method steps in the embodiment shown in FIG. 4 , which will not be repeated here.

In the present invention, after the UICC finishes processing the data to be processed, it can

The data size of the processed data uses different methods to return the processed pending data to the mobile device.

In some embodiments, when the amount of processed data to be processed is small, the processed data to be processed may be directly returned to the mobile device in the form of a response message. Correspondingly, the process of step S203 is: generate a data processing response message according to the processed data to be processed, the data processing response message includes the processed data to be processed, and send the data processing response message to the mobile device.

In some other embodiments, when the amount of the processed data to be processed is large, the processed data to be processed may be returned to the mobile device based on data block transmission. Specifically, as shown in FIG. 9, FIG. 9 is a flowchart of another data processing method provided by an embodiment of the present invention. In this embodiment, the processed data to be processed is divided into multiple second data blocks to be processed. In this embodiment, on the basis of the embodiment shown in FIG. 6, step S203 specifically includes:

Step S2031, for the current second data block to be processed among the plurality of second data blocks to be processed, generate a current data processing response for instructing the mobile device to acquire the next second data block to be processed according to the current second data block to be processed message, and send the current data processing response message to the mobile device.

The current data processing response message includes the current second data block to be processed.

Step S2032, in response to the current data acquisition request command returned by the mobile device in response to the current data processing response message, determine whether there is only one second pending data block that has not been sent.

When it is judged that only one second data block to be processed remains unsent, execute step S2033; when it is judged that multiple second data blocks to be processed remain unsent, return to execute step S2031.

Step S2033, in response to the current data acquisition request command returned by the mobile device for the current data processing response message, use only one remaining second data block to be processed as the current second data block to be processed, and generate The current data processing response message is used to prompt the mobile device that the second data block to be processed has been sent, and the current data processing response message is sent to the mobile device.

The method steps in this embodiment correspond to the method steps in the embodiment shown in FIG. 5 . For details, refer to the description of the method steps in the embodiment shown in FIG. 5 , which will not be repeated here.

In the embodiment of the present invention, various response messages sent by the UICC can be implemented based on a preset second command format and by setting different field values. The embodiment of the present invention provides a preferred second command format, as shown in the following table Shown:

The second command format can be applied to block transmission of large data volume and overall transmission of small data volume at the same time, and provides basic management such as continuation, suspension, and retransmission. The parameters of the second command format are described as follows:

NAF-ID and Data are the data returned by UICC to the mobile device, and the format is the same as that required in the table.

SW1 is the command processing status word, which indicates the basic result of command processing, for example, SW1=92 indicates that the response is in progress, and SW1=6A indicates that the response is terminated.

SW2 is the command processing status word, indicating the management requirements of the response, where the b1 field indicates whether there are still pending data blocks that need to be returned to the mobile device through the response, the b2 field indicates whether the command needs to be retransmitted; the b3b4 field indicates the processed data The session number in the command corresponding to the block. The definitions of the remaining fields in SW2 are retained.

In the embodiment of the present invention, the messages such as the first command response message and the data processing response message sent by the UICC can be realized based on the second command format.

Based on the above description, in some embodiments, a data processing method is provided, the complete flow of which is:

Step 1. In response to the GBA-based data processing request sent by the terminal application on the mobile device, the mobile device acquires data to be processed by the terminal application.

Step 2. The mobile device divides the data to be processed into multiple first data blocks to be processed.

Step 3: The mobile device generates a data processing request subcommand based on the current first data block to be processed, and sends it to the UICC.

Step 4. The UICC receives the current data processing request subcommand, stores the current first data block to be processed, and judges whether the current data processing request subcommand is abnormal. The first command response message of the data block to be processed is returned to the mobile device, and step 6 is entered; if it is judged to be normal, step 5 is performed.

Step 5, judge whether to receive all data, if judge not to receive all data, then return the first command response message that is used to instruct mobile equipment to send the next first data block to be processed; If judge to receive all data, Then the first command response message is not returned, and step 7 is entered.

Step 6, the mobile device receives the first command response message, identifies the information in the first command response message, and if it recognizes that the first command response message is to send the next first pending data block, then sends the next first pending data block The data block is used as the current first data block to be processed, and step 3 is performed; if it is recognized that the first command response message is to send the current first data block to be processed, step 3 is directly performed.

Repeat step 3 to step 6 until all the first data blocks to be processed are successfully and completely sent to the UICC.

Step 7. The UICC uses the preset shared key to process the data to be processed.

Step 8. The UICC divides the processed data to be processed into multiple second data blocks to be processed.

Step 9. The UICC generates a current data processing response message based on the current second data block to be processed, and the UICC adds information to the current data processing response message based on the number of the second data block to be processed, so as to prompt the mobile device to continue extracting the next data block. A second data block to be processed may prompt the mobile device that all the second data blocks to be processed have been sent.

Step 10, the mobile device receives the current data processing response message, stores the current second data block to be processed, and identifies the information in the current data processing response message, and generates The current data acquisition request command is sent to the UICC. When it is recognized that all the second data blocks to be processed have been sent, only the current second data block to be processed is stored, and the current data acquisition request command is no longer generated.

Step 11. The UICC receives the data acquisition request command, takes the next second data block to be processed as the current second data block to be processed, and executes step 9.

Step 9 to step 11 are repeated until the UICC successfully and completely returns all second data blocks to be processed to the mobile device.

The embodiment of the present invention also provides a mobile device, including: a storage module and at least one processor, a computer program is stored in the storage module, and when the computer program is executed by at least one processor, the data processing based on the mobile device of the present invention is realized method.

The embodiment of the present invention also provides a UICC, including: a storage module and at least one processor, where a computer program is stored in the storage module, and when the computer program is executed by at least one processor, the UICC-based data processing method of the present invention is implemented.

The embodiment of the present invention also provides a user terminal. As shown in FIG. 1, the user terminal includes a mobile device and a UICC, wherein the mobile device adopts the mobile device provided in the embodiment of the present invention, and the UICC adopts the mobile device provided in the embodiment of the present invention. UICC.

It can be understood that, the above embodiments are only exemplary embodiments adopted for illustrating the principle of the present invention, but the present invention is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also regarded as the protection scope of the present invention.

Claims (16)

1. A data processing method is applied to mobile equipment of a user terminal, wherein the user terminal comprises the mobile equipment and a UICC, and the data processing method comprises the following steps:

responding to a data processing request based on GBA sent by a terminal application on the mobile equipment, and acquiring data to be processed of the terminal application;

generating a data processing request command based on the data to be processed, and sending the data processing request command to the UICC, so that the UICC can process the data to be processed by using a preset shared key; the data to be processed comprises a plurality of first data blocks to be processed, the data processing request command comprises a plurality of data processing request subcommands, and each data processing request subcommand correspondingly comprises one first data block to be processed;

acquiring the data to be processed, which is processed by the UICC by using the preset shared key; wherein the processed data to be processed includes a plurality of second data blocks to be processed.

2. The method according to claim 1, wherein the step of generating a data processing request command according to the data to be processed and sending the data processing request command to the UICC comprises:

aiming at the current first data block to be processed in the plurality of first data blocks to be processed, generating a current data processing request subcommand according to the current first data block to be processed;

sending the current data processing request subcommand to the UICC, wherein the current data processing request subcommand comprises the current first data block to be processed;

in response to a current first command response message returned by the UICC for the current data processing request subcommand, taking a next first to-be-processed data block of the plurality of first to-be-processed data blocks as the current first to-be-processed data block, and

and executing the step of generating the current data processing request subcommand according to the current first to-be-processed data block.

3. The method according to claim 1, wherein the step of generating a data processing request command according to the data to be processed and sending the data processing request command to the UICC comprises:

generating the data processing request command according to the complete data to be processed, wherein the data processing request command comprises the complete data to be processed;

sending the data processing request command containing the complete data to be processed to the UICC.

4. The method of claim 2, wherein after the step of sending the current data processing request subcommand to the UICC, further comprising:

receiving a current first command response message returned by the UICC according to the current data processing request subcommand;

if the current first command response message indicates to retransmit the current first data block to be processed, executing the step of generating the current data processing request subcommand according to the current first data block to be processed;

if the current first command response message indicates that the next first to-be-processed data block is to be sent, performing the step of taking the next first to-be-processed data block of the plurality of first to-be-processed data blocks as the current first to-be-processed data block in response to the current first command response message returned by the UICC for the current data processing request subcommand.

5. The method according to claim 1, wherein the step of obtaining the to-be-processed data processed by the UICC using the predetermined shared key comprises:

and receiving a data processing response message returned by the UICC, wherein the data processing response message comprises the processed data to be processed.

6. The method according to claim 1, wherein the step of obtaining the to-be-processed data processed by the UICC using the predetermined shared key comprises:

receiving a current data processing response message returned by the UICC, wherein the current data processing response message comprises a current second data block to be processed in a plurality of second data blocks to be processed and information for indicating to acquire the next second data block to be processed by sending a command;

detecting whether the current data processing response message is abnormal or not;

if the current data processing response message is detected to be abnormal, generating a current data acquisition request command for instructing the UICC to retransmit a current second data block to be processed, and sending the current data acquisition request command to the UICC, so that the UICC can respond to the current data acquisition request command and regenerate a current data processing response message based on the current second data block to be processed;

if it is detected that the current data processing response message is not abnormal, generating a current data acquisition request command for instructing the UICC to transmit a next second data block to be processed, and sending the current data acquisition request command to the UICC, so that the UICC responds to the current data acquisition request command, taking the next second data block to be processed as the current second data block to be processed, and generating a current data processing response message based on the current second data block to be processed;

and executing the step of receiving the current data processing response message returned by the UICC.

7. A data processing method is applied to a UICC of a user terminal, wherein the user terminal comprises a mobile device and the UICC, and the data processing method comprises the following steps:

receiving a data processing request command sent by the mobile equipment, wherein the data processing request command is a command generated by the mobile equipment based on GBA-based to-be-processed data sent by a terminal application; the data to be processed comprises a plurality of first data blocks to be processed, the data processing request command comprises a plurality of data processing request subcommands, and each data processing request subcommand correspondingly comprises one first data block to be processed;

processing the data to be processed by using a preset shared key;

sending the processed data to be processed to the mobile equipment; wherein the processed data to be processed includes a plurality of second data blocks to be processed.

8. The method of claim 7, wherein the step of receiving the data processing request command sent by the mobile device comprises:

receiving the current data processing request subcommand sent by the mobile equipment, wherein the current data processing request subcommand comprises the current first data block to be processed;

responding to the current data processing request subcommand, generating a current first command response message, sending the current first command response message to the mobile equipment, so that the mobile equipment can regard the next first data block to be processed in the plurality of first data blocks to be processed as the current first data block to be processed aiming at the current first command response message, and generating the current data processing request subcommand according to the current first data block to be processed;

and executing the step of receiving the current data processing request subcommand sent by the mobile equipment.

9. The method of claim 7, wherein the step of receiving the data processing request command sent by the mobile device comprises:

and receiving a data processing request command sent by the mobile equipment, wherein the data processing request command is generated by the mobile equipment according to the complete data to be processed, and the data processing request command comprises the complete data to be processed.

10. The method of claim 8, wherein the step of receiving the current data processing request subcommand sent by the mobile device further comprises:

detecting whether the current data processing request subcommand is abnormal or not;

if the data processing request subcommand is detected to be abnormal, generating a current first command response message for instructing the mobile equipment to retransmit the current first data block to be processed, so that the mobile equipment can generate the current data processing request subcommand according to the current first data block to be processed;

if it is detected that the current data processing request subcommand is not abnormal, a current first command response message for instructing the mobile device to transmit the next first data block to be processed is generated, so that the mobile device regards the next first data block to be processed in the plurality of first data blocks to be processed as the current first data block to be processed according to the current first command response message, and the current data processing request subcommand is generated according to the current first data block to be processed.

11. The method of claim 7, wherein the step of sending the processed data to be processed to the mobile device comprises:

generating a data processing response message according to the processed data to be processed, wherein the data processing response message comprises the processed data to be processed;

and sending the data processing response message to the mobile equipment.

12. The method of claim 7, wherein the step of sending the processed data to be processed to the mobile device comprises:

generating a current data processing response message according to the current second data block to be processed aiming at the current second data block to be processed in the second data blocks to be processed;

sending the current data processing response message to the mobile device, wherein the current data processing response message comprises the current second data block to be processed;

responding to a current data acquisition request command returned by the mobile equipment for the current data processing response message to indicate to transmit a next second data block to be processed, taking the next second data block to be processed in the second data blocks to be processed as the current second data block to be processed, and executing the step of generating the current data processing response message according to the current second data block to be processed;

and in response to a current data acquisition request command returned by the mobile device for the current data processing response message indicating retransmission of the current second data block to be processed, directly executing the step of generating the current data processing response message according to the current second data block to be processed.

13. The method according to any of claims 7-12, wherein the pre-provisioned shared key is a Ks _ int _ NAF key.

14. A mobile device, comprising: a storage module having stored therein a computer program which, when executed by at least one of the processors, implements the data processing method of any one of claims 1-6, and at least one processor.

15. A UICC, comprising: a storage module in which a computer program is stored, and at least one processor, the computer program, when executed by the at least one processor, implementing the data processing method of any one of claims 7-13.

16. A terminal, characterized in that it comprises a mobile device and a UICC, wherein said mobile device employs the mobile device of claim 14 and said UICC employs the UICC of claim 15.

Images