UICC配置规范1.0.1：全球平台技术更新与专利声明

需积分: 13 81 浏览量更新于2024-07-18 收藏 583KB PDF 举报

UICC技术文档是关于Universal Integrated Circuit Card (UICC) 的一份专业规范，由GlobalPlatform Inc. 在2008年至2011年期间发布。UICC是一种用于移动设备和电信服务的智能卡标准，它在移动通信领域扮演着关键角色，尤其是在支持SIM卡和USIM卡（通用Subscriber Identity Module）的应用中。这份文档的版权受到保护，所有接收者被邀请在实施文档中的技术规格时，提交任何可能相关的专利权或知识产权信息，并提供相应的支持文件。 UICC配置版本1.0.1作为会员发布的资料，于2011年1月更新，其文档参考编号为GPC_GUI_010。该配置文件详细描述了UICC的功能、架构以及实现方法，包括如何管理和配置UICC内的数据和服务，确保了设备与服务提供商之间的兼容性和互操作性。UICC技术是动态发展的，全球平台公司保留对其中提供的技术和描述进行更新、修订和扩展的权利，用户必须遵循GlobalPlatform的许可协议，任何与协议不一致的使用都是被禁止的。作为会员福利提供的这份文档，不仅涵盖了基础概念，还可能包含安全措施、接口规范、数据存储管理等实用信息。使用UICC技术有助于移动设备实现无缝连接到各种网络服务，如移动支付、身份验证、物联网应用等，是现代通信系统设计和开发的重要参考资料。理解并遵循UICC标准对于确保设备的稳定运行和合规性至关重要。

9/50 UICC Configuration v1.0.1



The technology provided or described herein is subject to updates, revisions, and extensions by GlobalPlatform. Use of this

information is governed by the GlobalPlatform license agreement and any use inconsistent with that agreement is strictly

prohibited.

4 UICC Security Policies

This section defines security principles for the entities that may be present on a GlobalPlatform card

supporting this configuration:

4.1 Privileges

Table 4-1 lists the privileges that shall be assigned to the Issuer Security Domain, to each instance of a

Supplementary Security Domain, and lists privileges that may be assigned to other Applications. To

facilitate product deployment, the platform supports all mandatory and optional privileges listed in this

table.

Table 4-1: Supported Privileges

A tick () denotes the presence of the indicated privilege and its assignment to the Security Domain or

Application.

A blank cell denotes that the assignment of the privilege is beyond the scope of this configuration.

A black cell denotes that the privilege cannot be assigned.

Additional Privilege Assignment Rules (beyond those defined in section 6.6 of the GP CS v2.2.1 [3])

1. A Security Domain shall not be able to extend its own privileges.

2. A Security Domain shall not be able to assign to another Security Domain, or any other Application,

any of the privileges listed below that it does not have itself:

ISD CASD APSD NAA Application

Privileges

Security Domain



DAP Verification

Delegated Management

Card Lock



Card Terminate



Card Reset

CVM management



Mandated DAP Verification

Trusted Path



Authorized Management



Token Verification



Global Delete



Global Lock



Global Registry



Final Application

Global Service



Receipt Generation



Ciphered Load File Data

Block

UICC Configuration v1.0.1 10/50



The technology provided or described herein is subject to updates, revisions, and extensions by GlobalPlatform. Use of this

information is governed by the GlobalPlatform license agreement and any use inconsistent with that agreement is strictly

prohibited.

• Global Delete

• Global Lock

• Global Registry

• Card Terminate

• Card Lock

3. Only the Issuer Security Domain can assign the Authorized Management and the Mandated DAP

privileges.

4. It shall only be possible to assign the Token Verification and Receipt Generation privileges to a

Security Domain with the Authorized Management privilege.

4.2 Issuer Security Domain

The Issuer Security Domain supports Secure Channel Protocol '80' (SCP80). When the Issuer Security

Domain receives a Remote Application Management command, the security policy as defined in ETSI TS

102 225 [1] shall be applied.

The Issuer Security Domain may support Secure Channel Protocol '02' (SCP02) option i = '55'.

The absence or presence of additional SCPs in Security Domains on the UICC is beyond the scope of this

document.

When the Issuer Security Domain is the selected Application, all commands besides those required to

setup a Secure Channel shall be processed within a Secure Channel session except the GET DATA

command, which may be processed outside of a Secure Channel session.

The level of security of the commands following the setup of the Secure Channel Session in SCP02 mode

is defined in section 2.2 of the GP CS v2.2 Mapping Guidelines [4].

Extradition of an Application or Load File to the Issuer Security Domain shall never succeed.

The Issuer Security Domain shall only accept deletion requests made by Security Domains within its

hierarchy with the Delegated Management privilege or a Security Domain with the Global Delete privilege.

4.3 Supplementary Security Domains

Support for Supplementary Security Domains is mandatory.

Supplementary Security Domains are installed with Secure Channel Protocol '80' option i = '00' and/or

Secure Channel Protocol '02' option i = '55'. As with the Issuer Security Domain, the absence or presence

of additional SCPs in Security Domains on the UICC is beyond the scope of this document.

Any Supplementary Security Domain has the option to reject or accept Applications being extradited to it

as defined by the GP CS v2.2 Mapping Guidelines [4] and in accordance with the configuration given

below in section 4.3.2.

The level of security of the commands following the setup of the Secure Channel Session in SCP02 mode

is defined in section 2.3 of the GP CS v2.2 Mapping Guidelines [4] as was previously stated for the ISD.

4.3.1 Security Domain Hierarchies

Security Domains are organized in hierarchies according to GP CS v2.2.1 [3]:

• The root of a new hierarchy is defined by extraditing a SD to itself (as described in [3])

• Within such a hierarchy, the following rules are enforced by OPEN:

剩余49页未读，继续阅读

William_火狼

粉丝: 0
资源: 22

UICC配置规范1.0.1：全球平台技术更新与专利声明

uicc lte 资料

wtl vs2010安装版

中国联通M2M UICC卡技术规范 V3.0版本.pdf

UniversalIntegratedCircuitCard(UICC)Configuration

3G智能卡UICC开发标准

中国移动UICC技术需求与接口规范详解

GSMA SGP.02 V3.2 更新：远程配置嵌入式UICC技术规范

中国联通M2M UICC卡技术规范详解

GSMA 官方文档：嵌入式UICC消费者设备保护配置文件

中国联通M2M UICC卡技术规范：命令与响应实践

最新资源