Communication control apparatus, authentication device, central control apparatus and communication system

1. A communication control apparatus, which controls an authentication device provided at a mobile terminal and used for authenticating identity of a mobile user, so that the mobile terminal selects different operator networks for communications, the communication control apparatus is provided at the mobile terminal, and the communication control apparatus is configured to:

acquire identification information of the authentication device;

transmit the identification information to a server, so that the server authenticates identity of the authentication device;

acquire a session key and attribute setting information encrypted by the session key from the server when an identity authentication performed by the server is successful;

transmit to the authentication device the session key and the attribute setting information encrypted by the session key, so that the authentication device obtains the attribute setting information by decrypting, and sets operator attributes of the authentication device according to the attribute setting information;

receive a notification that the authentication device successfully sets the operator attributes, and selects an operator attribute according to a received handover instruction when the number of the operator attributes is more than two, so that the mobile terminal is handed over to a network corresponding to the selected operator attribute for communications; and

control the authentication device according to a received deletion instruction to delete the operator attributes,

wherein, the authentication device and the communication control apparatus communicate with each other through a data path in conformity with a transport protocol data unit (TPDU) protocol,

wherein, the attribute setting information has at least an international mobile subscriber identification number (IMSI) and a key identifier (Ki),

wherein, the communication control apparatus interacts data with the server by connecting to the Internet.

2. An authentication device, which is provided at a mobile terminal and used for authenticating identity of a mobile user, so that the mobile terminal performs communications in a network, the authentication device configured to:

communicate with a communication control apparatus provided at the mobile terminal, and acquire, via the communication control apparatus, a session key issued by a server and attribute setting information encrypted by the session key;

decrypt the attribute setting information encrypted by the session key according to a decryption algorithm and the session key, so as to obtain the attribute setting information;

set operator attributes of the authentication device according to the attribute setting information;

transmit notification information after the authentication device successfully sets the operator attributes;

when the authentication device successfully sets more than two operator attributes and the communication control apparatus selects one operator attribute, the authentication device makes the mobile terminal to be handed over to a network corresponding to the selected operator attribute for communications; and

delete the operator attribute according to the control of the communication control apparatus,

wherein, the authentication device and the communication control apparatus communicate with each other through a data path in conformity with a transport protocol data unit (TPDU) protocol,

wherein, the attribute setting information has at least an international mobile subscriber identification number (IMSI) and a key identifier (Ki),

wherein, the communication control apparatus interacts data with the server by connecting to the Internet.

3. The authentication device according to claim 2 , wherein the authentication device is further configured to:

store the attribute setting information, an encryption algorithm and the decryption algorithm.

4. The authentication device according to claim 2 , wherein,

the authentication device is a subscriber identity module (SIM) card, a chip jointed with the subscriber identity module card, or a device built in the mobile terminal and having the same function as the subscriber identity module card.

5. A central control apparatus, provided in a server, the central control apparatus configured to:

communicate with a communication control apparatus provided at a mobile terminal, so as to receive identification information of an authentication device provided at the mobile terminal and used for authenticating identity of a mobile user;

authenticate identity of the authentication device according to the identification information and encryption information, and set up a session key when the authentication is successful;

transmit to the communication control apparatus of the mobile terminal the session key and attribute setting information encrypted by the session key, so that the communication control apparatus transmits to the authentication device the session key and attribute setting information encrypted by the session key, and the authentication device obtains the attribute setting information by decrypting and sets operator attributes of the authentication device according to the attribute setting information; and

manage the attribute setting information;

when the authentication device successfully sets more than two operator attributes and the communication control apparatus selects one operator attribute, the authentication device makes the mobile terminal to be handed over to a network corresponding to the selected operator attribute for communications;

the authentication device deletes the operator attribute according to the control of the communication control apparatus,

wherein, the authentication device and the communication control apparatus communicate with each other through a data path in conformity with a transport protocol data unit (TPDU) protocol,

wherein, the attribute setting information has at least an international mobile subscriber identification number (IMSI) and a key identifier (Ki),

wherein, the communication control apparatus interacts data with the server by connecting to the Internet.