Access control method and access control device

Abstract

The invention discloses an access control method and an access control device. The method comprises the steps: responding to a received access universal integrated circuit card (UICC) request sent by a first application, and reading an access control condition file and an access control extension file in the UICC, wherein the access control extension file is at least used for indicating whether an application authorized to access the UICC is allowed to provide an access control condition or not; determining a first access control condition according to the access control condition file and the access control extension file; and processing an access UICC request of the first application according to the first access control condition. According to the invention, access control based on the UICC can be realized, access control based on the application authorized to access the UICC can also be realized, and a more efficient and more flexible access control mechanism is provided.

Description

technical field [0001] The present invention relates to the field of communication technology, and in particular to an access control method and an access control device. Background technique [0002] UICC (Universal Integrated Circuit Card, universal integrated circuit card) is a universal smart card platform, on which various applications such as USIM (Universal Subscriber Identity Module, user global identification card), bank cards and ticketing cards can reside. The UICC is installed in the terminal device, and the terminal device can manage various applications residing on the UICC through the terminal application. As a security device, UICC should have a necessary security protection mechanism for terminal applications to access UICC. The most basic security protection mechanism is to verify whether terminal applications are provided by legitimate developers and are authorized to access UICC, usually for terminal applications. certificate digest for verification. ...

AI Technical Summary

Problems solved by technology

[0004] In actual business, the requirement policy for terminal applications to access UICC is often relatively complex. For example, UICC-based access control is a more standard solution, but terminal devices may not be universally supported, and terminal applications based on authorized access to UICC Access control, perhaps more supported by terminal devices, but it is a less standard solution

Images