Android 4.4Telephony流程分析SIM卡开机时的初始化

本文代码以MTK平台Android 4.4为分析对象，与Google原生AOSP有些许差异，请读者知悉。

本文主要介绍MTK Android开机时，SIM卡的Framework部分初始化过程。

先看一段注释：

view source print ?

01. /* Once created UiccController registers with RIL for "on" and "unsol_sim_status_changed"

02. * notifications. When such notification arrives UiccController will call

03. * getIccCardStatus (GET_SIM_STATUS). Based on the response of GET_SIM_STATUS

04. * request appropriate tree of uicc objects will be created.

05. *

06. * Following is class diagram for uicc classes:

07. *

08. *                       UiccController

09. *                            #

10. *                            |

11. *                        UiccCard

12. *                          #   #

13. *                          |   ------------------

14. *                    UiccCardApplication    CatService

15. *                      #            #

16. *                      |            |

17. *                 IccRecords    IccFileHandler

18. *                 ^ ^ ^           ^ ^ ^ ^ ^

19. *    SIMRecords---- | |           | | | | ---SIMFileHandler

20. *    RuimRecords----- |           | | | ----RuimFileHandler

21. *    IsimUiccRecords---           | | -----UsimFileHandler

22. *                                 | ------CsimFileHandler

23. *                                 ----IsimFileHandler

24. *

25. * Legend: # stands for Composition

26. *         ^ stands for Generalization

27. */

这是UiccController.java文件开头对UiccController的注释，意思很明显UiccController是对Android SIM卡管理的控制器。

下面是SIM卡初始化序列图：

UiccController的初始化是在phone进程启动的时候，PhoneFactory调用makeDefaultPhone()创建默认的Phone，然后走MTK双卡流程中，调用MTKPhoneFactory.makeDefaultPhone()创建的，

view source print ?

01. {

02. for (int l2 = 0; l2 < PhoneConstants.GEMINI_SIM_NUM; l2++)

03. if (j1 == l2)

04. ai[l2] = j;

05. else

06. ai[l2] = 1;

07.  

08. I = new RIL(context, ai[0], l, 0);

09. J = new RIL(context, ai[1], l, 1);

10. }

11. UiccController.make(context, I, 0);

12. UiccController.make(context, J, 1);

13. GSMPhone agsmphone[] = new GSMPhone[PhoneConstants.GEMINI_SIM_NUM];

上面是反编译MTK的static_gemini_intermediates库看到的，在RIL创建完成时，使用UiccController.make()初始化:

view source print ?

01. public static UiccController make(Context c, CommandsInterface ci, int simId) {

02. synchronized (mLock) {

03. if (FeatureOption.MTK_GEMINI_SUPPORT) {

04. if(mInstance[simId] != null) {

05. throw new RuntimeException("UiccController.make() should only be called once");

06. }

07. mInstance[simId] = new UiccController(c, ci, simId);

08. return mInstance[simId];

09. } else {

10. if (mInstance[0] != null) {

11. throw new RuntimeException("UiccController.make() should only be called once");

12. }

13. mInstance[0] = new UiccController(c, ci);

14. return mInstance[0];

15. }

16. }

17. }

UiccController的创建使用了单例模式，使用时调用getInstance()获取，

view source print ?

01. public static UiccController getInstance(int simId) {

02. synchronized (mLock) {

03. if (FeatureOption.MTK_GEMINI_SUPPORT) {

04. if(mInstance[simId] == null) {

05. throw new RuntimeException(

06. "UiccController.getInstance can't be called before make()");

07. }

08. return mInstance[simId];

09. } else {

10. if (mInstance[0] == null) {

11. throw new RuntimeException(

12. "UiccController.getInstance can't be called before make()");

13. }

14. return mInstance[0];

15. }

16. }

17. }

18.  

19. private UiccController(Context c, CommandsInterface ci, int simId) {

20. if (DBG) log("Creating UiccController simId " + simId);

21. mContext = c;

22. mCi = ci;

23. mSimId = simId;

24. mCi.registerForIccStatusChanged(this, EVENT_ICC_STATUS_CHANGED, null);

25. // TODO remove this once modem correctly notifies the unsols

26. mCi.registerForOn(this, EVENT_ICC_STATUS_CHANGED, null);

27. mCi.registerForVirtualSimOn(this, EVENT_VIRTUAL_SIM_ON, null);

28. mCi.registerForVirtualSimOff(this, EVENT_VIRTUAL_SIM_OFF, null);

29. mCi.registerForSimMissing(this, EVENT_SIM_MISSING, null);

30. mCi.registerForSimRecovery(this, EVENT_SIM_RECOVERY, null);

31. mCi.registerForSimPlugOut(this, EVENT_SIM_PLUG_OUT, null);

32. mCi.registerForSimPlugIn(this, EVENT_SIM_PLUG_IN, null);

33. mCi.registerForInvalidSimDetected(this, EVENT_INVALID_SIM_DETECTED, null);

34.  

35. IntentFilter filter = new IntentFilter();

36. filter.addAction("android.intent.action.ACTION_SHUTDOWN_IPO");

37. filter.addAction(GeminiPhone.EVENT_INITIALIZATION_FRAMEWORK_DONE);

38. filter.addAction(TelephonyIntents.ACTION_SIM_INFO_UPDATE);

39. filter.addAction(ACTION_RESET_MODEM);

40. mContext.registerReceiver(mIntentReceiver, filter);

41. }

下面开始解析上面序列图：

step1，rild主动上报射频信号状态RIL_UNSOL_RESPONSE_RADIO_STATE_CHANGED。

step4，对信号进行判断，看看返回当前射频状态：

view source print ?

01. private RadioState getRadioStateFromInt(int stateInt) {

02. RadioState state;

03.  

04. /* RIL_RadioState ril.h */

05. switch(stateInt) {

06. case 0: state = RadioState.RADIO_OFF; break;

07. case 1: state = RadioState.RADIO_UNAVAILABLE; break;

08. case 2: state = RadioState.SIM_NOT_READY; break;

09. case 3: state = RadioState.SIM_LOCKED_OR_ABSENT; break;

10. case 4: state = RadioState.SIM_READY; break;

11. case 5: state = RadioState.RUIM_NOT_READY; break;

12. case 6: state = RadioState.RUIM_READY; break;

13. case 7: state = RadioState.RUIM_LOCKED_OR_ABSENT; break;

14. case 8: state = RadioState.NV_NOT_READY; break;

15. case 9: state = RadioState.NV_READY; break;

16. case 10: state = RadioState.RADIO_ON; break;

17. case 15: state = RadioState.RADIO_OFF; break;

18.  

19. default:

20. throw new RuntimeException(

21. "Unrecognized RIL_RadioState: " + stateInt);

22. }

23. return state;

24. }

一般刚开机射频是RADIO_OFF的，之后转为RADIO_ON。

step6，设置射频的新状态，比较新状态和旧状态对比，看看发生了什么变化，step9~step13（还有其他的，没有列出）对变化作出响应，具体看下面的源码：

view source print ?

001. /**

002. * Store new RadioState and send notification based on the changes

003. *

004. * This function is called only by RIL.java when receiving unsolicited

005. * RIL_UNSOL_RESPONSE_RADIO_STATE_CHANGED

006. *

007. * RadioState has 5 values : RADIO_OFF, RADIO_UNAVAILABLE, SIM_NOT_READY,

008. * SIM_LOCKED_OR_ABSENT, and SIM_READY.

009. *

010. * @param newState new RadioState decoded from RIL_UNSOL_RADIO_STATE_CHANGED

011. */

012. protected void setRadioState(RadioState newState) {

013. RadioState oldState;

014.  

015. synchronized (mStateMonitor) {

016. Rlog.v(LOG_TAG, "setRadioState old: " + mState + " new " + newState);

017.  

018. oldState = mState;

019. mState = newState;

020.  

021. // For CTA feature, sim1 is radio on if no sim card inserted.

022. // In rild, it is in the state of SIM_LOCKED_OR_ABSENT.

023. // if the sim card is pin locked, then after turn on radio of sim, it still the state of SIM_LOCKED_OR_ABSENT

024. // special handle for this scenario, always notify radio changed if the state is SIM_LOCKED_OR_ABSENT

025. if (oldState == mState && mState != RadioState.SIM_LOCKED_OR_ABSENT) {

026. // no state transition

027. return;

028. }

029.  

030. // FIXME: Use Constants or Enums

031. if(mState.getType() == 0) {

032. mSimState = mState;

033. mRuimState = mState;

034. mNvState = mState;

035. }

036. else if (mState.getType() == 1) {

037. if(mSimState != mState) {

038. mIccStatusChangedRegistrants.notifyRegistrants();

039. }

040. mSimState = mState;

041. }

042. else if (mState.getType() == 2) {

043. if(mRuimState != mState) {

044. mIccStatusChangedRegistrants.notifyRegistrants();

045. }

046. mRuimState = mState;

047. }

048. else if (mState.getType() == 3) {

049. mNvState = mState;

050. }

051.  

052. mRadioStateChangedRegistrants.notifyRegistrants(new AsyncResult(null, mState, null));

053.  

054. if (mState.isAvailable() && !oldState.isAvailable()) {

055. Rlog.d(LOG_TAG,"Notifying: radio available");

056. mAvailRegistrants.notifyRegistrants();

057. onRadioAvailable();

058. }

059.  

060. if (!mState.isAvailable() && oldState.isAvailable()) {

061. Rlog.d(LOG_TAG,"Notifying: radio not available");

062. mNotAvailRegistrants.notifyRegistrants();

063. }

064.  

065. if (mState.isOn() && !oldState.isOn()) {

066. Rlog.d(LOG_TAG,"Notifying: Radio On");

067. mOnRegistrants.notifyRegistrants();

068. }

069.  

070. if ((!mState.isOn() || !mState.isAvailable())

071. && !((!oldState.isOn() || !oldState.isAvailable()))

072. ) {

073. Rlog.d(LOG_TAG,"Notifying: radio off or not available");

074. mOffOrNotAvailRegistrants.notifyRegistrants();

075. }

076.  

077. /* Radio Technology Change events

078. * NOTE: isGsm and isCdma have no common states in RADIO_OFF or RADIO_UNAVAILABLE; the

079. *   current phone is determined by mPhoneType

080. * NOTE: at startup no phone have been created and the RIL determines the mPhoneType

081. *   looking based on the networkMode set by the PhoneFactory in the constructor

082. */

083.  

084. if (mState.isGsm() && oldState.isCdma()) {

085. Rlog.d(LOG_TAG,"Notifying: radio technology change CDMA to GSM");

086. mVoiceRadioTechChangedRegistrants.notifyRegistrants();

087. }

088.  

089. if (mState.isGsm() && !oldState.isOn() && (mPhoneType == PhoneConstants.PHONE_TYPE_CDMA)) {

090. Rlog.d(LOG_TAG,"Notifying: radio technology change CDMA OFF to GSM");

091. mVoiceRadioTechChangedRegistrants.notifyRegistrants();

092. }

093.  

094. if (mState.isCdma() && oldState.isGsm()) {

095. Rlog.d(LOG_TAG,"Notifying: radio technology change GSM to CDMA");

096. mVoiceRadioTechChangedRegistrants.notifyRegistrants();

097. }

098.  

099. if (mState.isCdma() && !oldState.isOn() && (mPhoneType == PhoneConstants.PHONE_TYPE_GSM)) {

100. Rlog.d(LOG_TAG,"Notifying: radio technology change GSM OFF to CDMA");

101. mVoiceRadioTechChangedRegistrants.notifyRegistrants();

102. }

103. }

104. }

step7，通知注册了mIccStatusChangedRegistrants的观察者，SIM卡(GSM卡和USIM卡)状态改变了，SIM卡准备好了。UiccController注册了它，看前面UiccController的构造函数，这里EVENT_ICC_STATUS_CHANGED关联了两个RIL URC事件，除了这里说的这个，还有RIL_UNSOL_RESPONSE_SIM_STATUS_CHANGED。所以，当Radio或者SIM卡状态发生变化时，都会第一时间通知UiccController。

step8，对它感兴趣的有，GsmServiceStateTracker(更新网络状态)、SIMRecords(用IccFileHandler读取SIM卡内置紧急号码)和SIMRecordsEx(向RILD查询20位的Iccid)。

step14，处理step7中mIccStatusChangedRegistrants发出的通知。

step15~step16，请求查询现在SIM卡的状态，请求id位RIL_REQUEST_GET_SIM_STATUS。

step17~step20，Rild反馈RIL_REQUEST_GET_SIM_STATUS请求。step19，responseIccCardStatus()方法中会对SIM卡状态进行解析:

view source print ?

01. private Object

02. responseIccCardStatus(Parcel p) {

03. IccCardApplicationStatus appStatus;

04.  

05. IccCardStatus cardStatus = new IccCardStatus();

06. cardStatus.setCardState(p.readInt());

07. cardStatus.setUniversalPinState(p.readInt());

08. cardStatus.mGsmUmtsSubscriptionAppIndex = p.readInt();

09. cardStatus.mCdmaSubscriptionAppIndex = p.readInt();

10. cardStatus.mImsSubscriptionAppIndex = p.readInt();

11. int numApplications = p.readInt();

12.  

13. // limit to maximum allowed applications

14. if (numApplications > IccCardStatus.CARD_MAX_APPS) {

15. numApplications = IccCardStatus.CARD_MAX_APPS;

16. }

17. cardStatus.mApplications = new IccCardApplicationStatus[numApplications];

18. for (int i = 0 ; i < numApplications ; i++) {

19. appStatus = new IccCardApplicationStatus();

20. appStatus.app_type       = appStatus.AppTypeFromRILInt(p.readInt());

21. appStatus.app_state      = appStatus.AppStateFromRILInt(p.readInt());

22. appStatus.perso_substate = appStatus.PersoSubstateFromRILInt(p.readInt());

23. appStatus.aid            = p.readString();

24. appStatus.app_label      = p.readString();

25. appStatus.pin1_replaced  = p.readInt();

26. appStatus.pin1           = appStatus.PinStateFromRILInt(p.readInt());

27. appStatus.pin2           = appStatus.PinStateFromRILInt(p.readInt());

28. cardStatus.mApplications[i] = appStatus;

29. }

30. return cardStatus;

31. }

step21，onGetIccCardStatusDone()中更新SIM卡状态mUiccCard.update()，如果第一次运行,mUiccCard对象还没有创建，则先创建，再更新。

view source print ?

01. private synchronized void onGetIccCardStatusDone(AsyncResult ar, boolean isUpdateSiminfo) {

02. if (ar.exception != null) {

03. Rlog.e(LOG_TAG,"[SIM " + mSimId + "] Error getting ICC status. "

04. + "RIL_REQUEST_GET_ICC_STATUS should "

05. + "never return an error", ar.exception);

06. return;

07. }

08.  

09. IccCardStatus status = (IccCardStatus)ar.result;

10.  

11. if (status.mCardState == IccCardStatus.CardState.CARDSTATE_PRESENT) {

12. if (DBG) log("onGetIccCardStatusDone, disableSimMissingNotification because card is present");

13. disableSimMissingNotification();

14. }

15.  

16. if (mUiccCard == null) {

17. //Create new card

18. //ALPS01311133: We also need to update SIM Info when SIM hot plug.

19. mUiccCard = new UiccCard(mContext, mCi, status, mSimId, isUpdateSiminfo);

20. } else {

21. //Update already existing card

22. mUiccCard.update(mContext, mCi , status, isUpdateSiminfo);

23. }

24.  

25. if (DBG) log("Notifying IccChangedRegistrants, isUpdateSiminfo:" + isUpdateSiminfo);

26. mIccChangedRegistrants.notifyRegistrants();

27. }

step23，更新时，如果UiccCardApplication还没有创建，则先创建，同时需要根据SIM类型创建IccFileHandler具体子类对象(用来读取SIM数据)和IccRecords具体子类对象(记录SIM数据)，否则直接更新。

view source print ?

01. public void update(Context c, CommandsInterface ci, IccCardStatus ics, boolean isUpdateSimInfo) {

02. synchronized (mLock) {

03. if (mDestroyed) {

04. loge("Updated after destroyed! Fix me!");

05. return;

06. }

07. CardState oldState = mCardState;

08. mCardState = ics.mCardState;

09. mUniversalPinState = ics.mUniversalPinState;

10. mGsmUmtsSubscriptionAppIndex = ics.mGsmUmtsSubscriptionAppIndex;

11. mCdmaSubscriptionAppIndex = ics.mCdmaSubscriptionAppIndex;

12. mImsSubscriptionAppIndex = ics.mImsSubscriptionAppIndex;

13. mContext = c;

14. mCi = ci;

15. //update applications

16. if (DBG) log(ics.mApplications.length + " applications");

17. for ( int i = 0; i < mUiccApplications.length; i++) {

18. if (mUiccApplications[i] == null) {

19. //Create newly added Applications

20. if (i < ics.mApplications.length) {

21. mUiccApplications[i] = new UiccCardApplication(this,

22. ics.mApplications[i], mContext, mCi);

23. mIccRecords = mUiccApplications[i].getIccRecords();

24. mIccFileHandler = mUiccApplications[i].getIccFileHandler();

25. }

26. } else if (i >= ics.mApplications.length) {

27. //Delete removed applications

28. if (DBG) log("update mUiccApplications[" + i + "] dispose");

29. mUiccApplications[i].dispose();

30. mUiccApplications[i] = null;

31. } else {

32. //Update the rest

33. if (DBG) log("update mUiccApplications[" + i + "] update");

34. mUiccApplications[i].update(ics.mApplications[i], mContext, mCi);

35. }

36. }

37. //if (!mIccRecordsList.isEmpty()){

38. //    for (IccRecords mIccRecords: mIccRecordsList)

39. if (mIccRecords != null)

40. mIccRecords.registerForImsiReady(mHandler, EVENT_IMSI_READY, null);

41.  

42. if (DBG) log("update mUiccApplications.length: " + mUiccApplications.length);

43. if (mUiccApplications.length > 0 && mUiccApplications[0] != null) {

44. // Initialize or Reinitialize CatService

45. mCatService = CatService.getInstance(mCi,

46. mContext,

47. this);

48. } else {

49. if (mCatService != null) {

50. mCatService.dispose();

51. }

52. mCatService = null;

53. }

54.  

55. sanitizeApplicationIndexes();

56.  

57.  

58. RadioState radioState = mCi.getRadioState();

59. if (DBG) log("update: radioState=" + radioState + " mLastRadioState="

60. + mLastRadioState);

61. if(isUpdateSimInfo) { //SIM卡热插拔会用到这里

62. // No notifications while radio is off or we just powering up

63. //if (radioState == RadioState.RADIO_ON && mLastRadioState == RadioState.RADIO_ON) {

64. if (radioState != RadioState.RADIO_UNAVAILABLE) {

65. if (mCardState == CardState.CARDSTATE_ABSENT) {

66. if (DBG) log("update: notify card removed");

67. mAbsentRegistrants.notifyRegistrants();

68. mHandler.sendMessage(mHandler.obtainMessage(EVENT_CARD_REMOVED, null));

69. //Update SIM inserted state

70. if (FeatureOption.MTK_GEMINI_SUPPORT) {

71. Phone defaultPhone = PhoneFactory.getDefaultPhone();

72. ((GeminiPhone)defaultPhone).setSimInsertedState(getMySimId(), false);

73. }

74. } else if (oldState == CardState.CARDSTATE_ABSENT &&

75. mCardState != CardState.CARDSTATE_ABSENT) {

76. if (DBG) log("update: notify card added");

77. mHandler.sendMessage(mHandler.obtainMessage(EVENT_CARD_ADDED, null));

78. }

79. }

80. }

81. mLastRadioState = radioState;

82. }

83. }

UiccCardApplication执行update()操作时，如果此时SIM卡应用的状态是APPSTATE_READY，这要进行如下操作:

view source print ?

01. if (mAppState != oldAppState) {

02. if (DBG) log(oldAppType + " changed state: " + oldAppState + " -> " + mAppState);

03. // If the app state turns to APPSTATE_READY, then query FDN status,

04. //as it might have failed in earlier attempt.

05. if (mAppState == AppState.APPSTATE_READY) {

06. queryFdn();//读取FDN数据

07. queryPin1State();//查询pin状态

08. }

09. notifyPinLockedRegistrantsIfNeeded(null);

10. notifyReadyRegistrantsIfNeeded(null);

11. }

如果SIM卡被锁住了，则会通知弹出解锁框。

step31，通知去读取SIM卡的IMSI。

step32，创建SIM Toolkit Telephony Service。

step33，通知所有关注mIccChangedRegistrants变化的观察者，如IccCardProxy(代理各种类型的SIM卡)。