WO2024040564A1

WO2024040564A1 - Key sharing methods and apparatus, terminal, and computer readable storage medium

Info

Publication number: WO2024040564A1
Application number: PCT/CN2022/115093
Authority: WO
Inventors: 乔光军
Original assignee: 北京小米移动软件有限公司
Priority date: 2022-08-26
Filing date: 2022-08-26
Publication date: 2024-02-29
Also published as: CN117941316A

Abstract

The present disclosure relates to key sharing methods, a key sharing method apparatus, a terminal, and a computer readable storage medium. A key sharing method comprises: receiving digital key sharing information sent by a second device in a first communication mode, the digital key sharing information comprising a vehicle public key of a vehicle; sending to the second device a first public key of a first device in the first communication mode; and receiving signature information sent by the second device in the first communication mode, the first communication mode comprising a short-range wireless communication mode, and the vehicle public key and the first public key being used for the vehicle and the first device to generate a digital key. The present disclosure can avoid slow information transmission speed caused by network delay of a mobile network or the Internet, thereby improving the efficiency and success rate of key sharing.

Description

Key sharing method and device, terminal and computer-readable storage medium

Technical field

The present disclosure relates to the field of communication technology, specifically, to a key sharing method, a key sharing device, a terminal and a computer-readable storage medium.

Background technique

With the development of vehicle intelligent systems, there is an increasing demand for using smart devices such as mobile phones to replace physical vehicle keys, and digital keys are becoming more and more popular. In addition to the car owner's need to use the digital key to control the vehicle, the car owner sometimes needs to lend the vehicle to other users (such as the owner's friends), so the car owner sometimes needs to share the digital key with other users. However, during the digital key sharing process, there will be some information transmission delays.

Contents of the invention

In view of this, embodiments of the present disclosure propose a key sharing method, a key sharing device, a terminal and a computer-readable storage medium to solve technical problems in related technologies.

According to a first aspect of an embodiment of the present disclosure, a key sharing method is proposed, which is executed by a first device. The method includes: receiving digital key sharing information sent by a second device through a first communication method, wherein the digital key The shared information includes the vehicle public key of the vehicle; sending the first public key of the first device to the second device through the first communication method; receiving the first public key sent by the second device through the first communication method. Signature information, wherein the signature information is determined by the second device signing the first public key through the second private key of the second device; wherein the first communication method includes short-range wireless communication Method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key.

According to a second aspect of the embodiment of the present disclosure, a key sharing method is proposed, which is executed by a second device. The method includes: sending digital key sharing information to the first device through a first communication method, wherein the digital key The shared information includes the vehicle public key of the vehicle; receiving the first public key of the first device sent by the first device through the first communication method; and pairing the first public key of the first device with the second private key of the second device. Sign with a public key to determine the signature information; send the signature information to the first device through the first communication method; wherein the first communication method includes a short-range wireless communication method; the vehicle public key The key and the first public key are used to generate a digital key for the vehicle and the first device.

According to a third aspect of the embodiment of the present disclosure, a key sharing device is proposed, which is executed by the first device. The device includes:

The communication module is configured to receive the digital key sharing information sent by the second device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle; and transmit the first public key of the first device through the Send the first communication method to the second device; receive the signature information sent by the second device through the first communication method, wherein the signature information is sent by the second device through the second device. The second private key signs and determines the first public key; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the The first device generates a digital key.

According to a fourth aspect of the embodiment of the present disclosure, a key sharing device is proposed, which is executed by a second device. The device includes: a first communication module configured to send digital key sharing information to the first communication module through a first communication method. Device, wherein the digital key sharing information includes a vehicle public key of the vehicle; receiving the first public key of the first device sent by the first device through the first communication method; and a processing module configured to The second private key of the second device signs the first public key to determine the signature information; a second communication module is configured to send the signature information to the third through the first communication method. A device; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key.

According to a fifth aspect of the embodiment of the present disclosure, a communication device is proposed, including: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the above key executed by the first device Share how.

According to a sixth aspect of an embodiment of the present disclosure, a computer-readable storage medium is proposed for storing a computer program, which when executed by a processor implements the steps in the key sharing method executed by the first device.

According to a seventh aspect of the embodiment of the present disclosure, a communication device is proposed, including: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the above key executed by the second device Share how.

According to an eighth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided for storing a computer program, which when executed by a processor implements the steps in the key sharing method executed by the second device.

According to embodiments of the present disclosure, in a scenario where the first device and the second device are close to each other, the first device can receive the digital key sharing information sent by the second device through short-range wireless communication to obtain the vehicle public key of the vehicle. . After receiving the digital key sharing information, it can send its first public key to the second device through short-range wireless communication, and receive the signature information sent by the second device that is determined by signing the first public key. , so that the vehicle determines the first public key of the first device based on the signature information, and realizes that the first device and the vehicle generate a digital key between the first device and the vehicle based on each other's public key.

Because the first device and the second device in this embodiment communicate through short-range wireless communication. Therefore, when the first device and the second device share the key, they can avoid problems such as slow information transmission due to network delays in the mobile network or the Internet, or even inability to transmit information due to server failures on the Internet, improving the efficiency of the key sharing process. Efficiency and success rate of key sharing.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the drawings needed to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present disclosure. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without exerting any creative effort.

Figure 1 is a schematic flow chart of a key sharing method according to an embodiment of the present disclosure.

FIG. 2 is a schematic flow chart of another key sharing method according to an embodiment of the present disclosure.

Figure 3 is a schematic flow chart of yet another key sharing method according to an embodiment of the present disclosure.

Figure 4 is a schematic flow chart of a key sharing method according to an embodiment of the present disclosure.

Figure 5 is a schematic flow chart of another key sharing method according to an embodiment of the present disclosure.

Figure 6 is a schematic flow chart of yet another key sharing method according to an embodiment of the present disclosure.

FIG. 7 is a schematic block diagram of a device for key sharing according to an embodiment of the present disclosure.

Figure 8 is a schematic block diagram of a device for key sharing according to an embodiment of the present disclosure.

Figure 9 is a schematic block diagram of a terminal for key sharing according to an embodiment of the present disclosure.

Detailed ways

The technical solutions in the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only some of the embodiments of the present disclosure, rather than all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present disclosure.

The terminology used in the embodiments of the present disclosure is for the purpose of describing specific embodiments only and is not intended to limit the embodiments of the present disclosure. As used in the embodiments of the present disclosure and the appended claims, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It will also be understood that the term "and/or" as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used to describe various information in the embodiments of the present disclosure, the information should not be limited to these terms. These terms are only used to distinguish information of the same type from each other. For example, without departing from the scope of the embodiments of the present disclosure, the first information may also be called second information, and similarly, the second information may also be called first information. Depending on the context, the word "if" as used herein may be interpreted as "when" or "when" or "in response to determining."

For the purpose of simplicity and ease of understanding, the terms used in this article are "greater than" or "less than", "higher than" or "lower than" when characterizing size relationships. But for those skilled in the art, it can be understood that: the term "greater than" also covers the meaning of "greater than or equal to", and "less than" also covers the meaning of "less than or equal to"; the term "higher than" covers the meaning of "higher than or equal to". "The meaning of "less than" also covers the meaning of "less than or equal to".

All embodiments in this disclosure are mainly applied in near field communication scenarios, such as a scenario where a car owner is face to face with other users he wants to share with, and the second device held by the car owner is close to the first device held by other users.

Near field communication (NFC) is a non-contact induction identification technology that has the advantages of short distance, low energy consumption, and high security. Bluetooth BT technology is an open global specification for wireless data communications. It is based on low-cost short-range wireless connections and establishes a special wireless connection for fixed and mobile device communication environments. Based on the use of near field communication technology or Bluetooth technology to share digital keys, the information transmitted in the process of sharing the digital key between the first device and the second device (such as digital key sharing information, first public key, signature information, etc.) can not go through other device forwarding, but can communicate directly between the first device and the second device, thereby realizing the digital key sharing process safely and conveniently.

When the first device and the second device are in the same wireless LAN WLAN environment, the first device and the second device can access the wireless LAN at the same time and communicate through the wireless LAN.

In related technology, when other users borrow the car owner's vehicle, in order to facilitate the control of the vehicle, the first device held by other users needs to communicate with the second device held by the car owner to obtain the sharing of the second device digital key.

Currently, communication between the first device and the second device mainly relies on the mobile network or the Internet. Even in a scenario where the car owner is face-to-face with other users, when the first device obtains the digital key shared by the second device for controlling the vehicle, it still needs to interact with the car owner's second device through the mobile network or the Internet to share the digital key. Relevant information, such as the vehicle public key of the vehicle, the first public key of the first device, etc.

However, when communicating through a mobile network or Internet server, because the mobile network or Internet server needs to face a large number of terminals, it may need to process and transmit a large amount of data at the same time, so delays are prone to occur, and the servers in the Internet may also have failures. Due to maintenance and other situations, information exchange between the first device and the second device will not be possible in a timely manner. Even when the first device and the second device are waiting to receive data, they may fall into sleep due to a long waiting time, so that even if the data is received, the received data cannot be processed in time. As a result, other users' first devices will not be able to obtain the vehicle's digital key in time, making it impossible to control the vehicle.

Figure 1 is a schematic flow chart of a key sharing method according to an embodiment of the present disclosure. The key method shown in this embodiment can be executed by a first device, and the first device can communicate with a second device. The first device and the second device include but are not limited to mobile phones, tablet computers, wearable devices, and sensors. , Internet of Things equipment and other communication devices.

As shown in Figure 1, the key sharing method may include the following steps:

In step S101, receive digital key sharing information sent by the second device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle;

In step S102, send the first public key of the first device to the second device through the first communication method;

In step S103, receive the signature information sent by the second device through the first communication method, wherein the signature information is generated by the second device through the second private key of the second device. A public key for signature confirmation;

Wherein, the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key. It can be understood that the short-range wireless communication method in this disclosure includes short-range communication technology in the usual sense, including but not limited to WLAN (Wireless Local Area Network), NFC (Near Field Communication), Bluetooth, Zigbee, etc.

In one embodiment, sharing the digital key includes that the vehicle of the sharing party (second device) and the shared party (first device) can mutually confirm each other's identities, and that the vehicle and the first device can communicate securely.

On the one hand, based on asymmetric encryption technology, when the first device and the vehicle each generate their own public and private key pairs, if they have the other party's public key, they can verify the other party's identity by verifying the signature of the other party's private key. ; On the other hand, a key exchange algorithm, such as the Diffie-Hellman algorithm, can be used to generate a session key using its own private key and the other party's public key to achieve secure communication between the vehicle and the first device. That is, as long as the first device and the vehicle each possess the other party's public key, it can be considered that a digital key has been generated.

In one embodiment, since the second device is a communication device held by the owner of the vehicle, the second device itself stores the digital key of the vehicle, that is, the second device stores the vehicle public key of the vehicle, and the vehicle stores the third The second public key of the second device allows the car owner to control the vehicle through the digital key.

For example, when the car owner needs to unlock the door of the vehicle, he or she can send an unlocking request signed using the private key of the second device to the vehicle through the second device. After receiving the signed unlocking request, the vehicle can use the second public key of the second device stored in the vehicle to verify the signed unlocking request. Only when the signature verification is passed, the vehicle can determine that the unlocking request was sent by the second device. Since the vehicle stores the second public key of the second device, for the unlocking request signed with the private key of the second device, , so that the vehicle door can be unlocked according to the unlocking request.

In one embodiment, the first communication method includes at least one of the following: NFC (Near Field Communication); Bluetooth BT (Bluetooth); Wireless Local Area Network (WLAN).

According to this embodiment, in a scenario where the first device and the second device are close to each other, the first device can receive the digital key sharing information sent by the second device through short-range wireless communication to obtain the vehicle public key of the vehicle. After receiving the digital key sharing information, it can send its first public key to the second device through other communication methods except mobile network communication and Internet communication, and receive the first public key sent by the second device. The signature information determined by the signature is used so that the vehicle can determine the first public key of the first device based on the signature information, so that the first device and the vehicle can generate a digital signature between the first device and the vehicle based on each other's public key. key.

In one embodiment, the digital key sharing information also includes permission information and/or configuration information.

In one embodiment, the permission information may include function permission information and usage period information. When car owners share digital keys with other users, they can grant different functional permissions (such as door unlocking permissions, engine starting permissions, etc.) to different users based on the actual situation. They can even grant different digital key validity periods to different users as needed.

Therefore, after receiving the digital key sharing information sent by the second device, the first device can determine the control operations it can perform on the vehicle based on the function permission information carried in the digital key sharing information. And the validity period of the key shared by the second device can be determined based on the usage period information carried in the digital key sharing information. When the usage period of the own digital key reaches the validity period set by the car owner, it will automatically expire.

In one embodiment, the configuration information may include storage location information. After receiving the digital key sharing information sent by the second device, the first device can determine the storage location of the digital key based on the configuration information carried in the digital key sharing information, so as to store the key or other information related to the digital key ( For example, permission information) is stored in the storage location, so that when the first device uses the digital key function to control the vehicle, the vehicle can read the relevant information of the digital key in the storage location according to the preset reading path.

In one embodiment, the first public key of the first device may be generated by the first device after receiving the digital key sharing information sent by the second device. After receiving the digital key sharing information sent by the second device, the first device can generate an asymmetric key pair and use the public key in the key pair as the second public key.

FIG. 2 is a schematic flow chart of another key sharing method according to an embodiment of the present disclosure. As shown in Figure 2, the method also includes:

In step S201, the signature information is stored in the trusted execution environment TEE and/or the secure element SE.

TEE (Trusted execution environment) is a secure space in mobile devices (smartphones, tablets, smart TVs) for the execution of data and code, which can ensure the confidentiality and integrity of data and code. SE (Secure Element) is usually provided in the form of a chip. It is an element used to prevent external malicious parsing attacks and protect data security.

In one embodiment, in order to ensure the security of the digital key, after receiving the digital key sharing information sent by the second device, the first device can store the vehicle public key carried in the digital key sharing information in a trusted execution environment TEE and/or secure element SE. After receiving the signature information sent by the second device, the signature information can also be stored in the trusted execution environment TEE and/or the secure element SE. This prevents the first device from leaking relevant information of the digital key when it suffers from malicious attacks, and improves the security of the digital key.

Figure 3 is a schematic flow chart of yet another key sharing method according to an embodiment of the present disclosure. As shown in Figure 3, the method also includes:

In step S301, the signature information is sent to the vehicle, so that the vehicle verifies the signature information according to the stored second public key of the second device to obtain the first device. the first public key.

In one embodiment, after receiving the digital key sharing information sent by the second device, the first device may store the vehicle public key of the vehicle contained therein.

In one embodiment, when the first device uses the digital key function to try to control the vehicle for the first time, the vehicle can read the signature information stored in the first device from the first device, and use the digital key function according to the signature information stored in the vehicle. The second public key of the second device verifies the signature information.

If the vehicle successfully verifies the signature information, the vehicle can determine that the information contained in the signature information is trustworthy, and the vehicle can store the first public key of the first device carried in the signature information, and can verify the signature based on the information. The stored first public key authenticates the identity of the first device when receiving control requests sent by the first device this time and subsequently, and realizes the communication between the vehicle and the third device based on the stored first public key and its own vehicle private key. Secure information exchange between devices.

If the vehicle fails to verify the signature information, the vehicle can determine that the information contained in the signature information is unreliable, and the vehicle will not store the first public key of the first device carried in the signature information and ignore it. A control request sent by the first device. Furthermore, the vehicle can also send alarm information to the second device (ie, the user device held by the car owner) to prompt the second device that the digital key related information may be leaked.

Figure 4 is a schematic flow chart of a key sharing method according to an embodiment of the present disclosure. The key method shown in this embodiment can be executed by a second device. The second device can communicate with the first device. The first device and the second device include but are not limited to mobile phones, tablet computers, wearable devices, and sensors. , Internet of Things equipment and other communication devices.

As shown in Figure 4, the key sharing method may include the following steps:

In step S401, the digital key sharing information is sent to the first device through the first communication method, where the digital key sharing information includes the vehicle public key of the vehicle;

In step S402, receive the first public key of the first device sent by the first device through the first communication method;

In step S403, sign the first public key according to the second private key of the second device to determine signature information;

In step S404, send the signature information to the first device through the first communication method;

Wherein, the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key.

In related technologies, when a car owner lends a vehicle to other users, in order to facilitate other users to control the vehicle, the second device held by the car owner needs to communicate with the first device held by other users to control the vehicle. The digital key is shared with the first device.

Currently, communication between the first device and the second device mainly relies on the mobile network or the Internet. Even in a scenario where the car owner is face-to-face with other users, when the second device shares the digital key used to control the vehicle with the first device, it also needs to interact with the first device through the mobile network or the Internet to share the relevant information required for the digital key. For example, the vehicle public key of the vehicle, the first public key of the first device, etc.

If the mobile network or Internet server is delayed or even malfunctions, the first device and the second device will not be able to exchange information in a timely manner. Even when the first device and the second device are waiting to receive data, they may fall into sleep due to a long waiting time, so that even if the data is received, the received data cannot be processed in time. As a result, car owners will be unable to share the vehicle's digital key with other users in a timely manner, making it impossible for other users to control the vehicle.

According to this embodiment, in a scenario where the first device and the second device are close to each other, the second device can share information with the digital key sent to the first device through short-range wireless communication so that the first device obtains the vehicle's vehicle ID. public key, and receive the first public key of the first device sent by the first device according to the digital key sharing information. After receiving the first public key, the second device can use its second private key to sign the first public key, and send the signature information determined after signing to the first device through short-range wireless communication. So that when the first device uses the digital key function, the vehicle can determine the first public key of the first device based on the signature information stored in the first device, so that the first device and the vehicle can generate the first public key based on each other's public key. Digital key between the first device and the vehicle.

Figure 5 is a schematic flow chart of another key sharing method according to an embodiment of the present disclosure. As shown in Figure 5, signing the first public key according to the second private key of the second device to determine signature information includes:

In step S501, determine configuration information and/or permission information for the second device;

In step S502, the first public key, the configuration information and/or the permission information are signed according to the second private key of the second device to determine signature information.

Therefore, the second device can determine the permission information for the first device, and carry the function permission information and usage period information in the digital key sharing information and send it to the first device. After receiving the digital key sharing information sent by the second device, the first device determines the control operations it can perform on the vehicle based on the function permission information carried in the digital key sharing information, and the first device can determine the control operations it can perform on the vehicle according to the function permission information carried in the digital key sharing information. The usage period information carried in the digital key sharing information determines the validity period of the key shared by the second device. When the usage period of the own digital key reaches the validity period set by the car owner, it will automatically expire.

In one embodiment, the configuration information may include storage location information. The second device may determine the configuration information for the first device, and carry the configuration information in the digital key sharing information and send it to the first device. So that after receiving the digital key sharing information sent by the second device, the first device can determine the storage location of the digital key according to the configuration information carried in the digital key sharing information, so as to store the key or other key related to the digital key. Information (such as permission information) is stored in the storage location, so that when the first device uses the digital key function to control the vehicle, the vehicle can read the relevant information of the digital key in the storage location according to the preset reading path.

In one embodiment, after the second device receives the first public key of the first device sent by the first device, when signing the first public key with its own second private key, the second device may use the determined second private key to sign the first public key. The configuration information and permission information of the first device are signed together with the first public key of the first device. After the vehicle obtains the signature information from the first device and uses the second public key of the second device to verify the signature information, in addition to obtaining the first public key of the first device, it can also obtain the signature determined by the second device. Regarding the configuration information and permission information of the first device, prevent the first device from privately changing the configuration information and permission information of the digital key.

Figure 6 is a schematic flow chart of yet another key sharing method according to an embodiment of the present disclosure. As shown in Figure 6, the first communication method includes near field communication NFC, and the method further includes:

In step S601, the card reading mode of the NFC module is started according to the user's triggering action on the key sharing button in the preset application interface.

In one embodiment, when a user (car owner) needs to share a digital key with other users, he or she can trigger the key sharing button in the preset application interface of the second device. After detecting the triggering action, the second device can automatically start the card reading mode of the NFC module in the second device to initiate reading and writing. The first device can automatically start the card emulation mode of the NFC module in the first device after detecting the user's triggering action on the key sharing button in the preset application interface of the first device, or after detecting the information sent by the second device. When it is determined that one of the first device and the second device is in the card emulation mode and the other is in the card reading mode, communication between the first device and the second device is successfully established.

In one embodiment, if the first communication method used by the first device and the second device is Bluetooth. After detecting the triggering action of the key sharing button in the preset application interface, the second device can automatically turn on the Bluetooth function and search for other nearby devices. Furthermore, since in actual applications, car owners usually only lend their vehicles to close friends or family members, the second device can automatically give priority to the second device after activating the Bluetooth function to search for other nearby devices. Other devices that have been connected before establish a connection and prompt the user whether to share the key with the connected device to improve the efficiency of key sharing.

In one embodiment, in practical applications, users usually control the vehicle through a device that is easy to carry and has a digital key function, such as a mobile phone or a tablet. Therefore, when the first communication method used by the first device and the second device is Bluetooth, after the second device activates the Bluetooth function to search for other nearby devices, it can perform the device type of the searched other devices. Filter, prioritize the establishment of connections with devices whose device type is a mobile phone or tablet, and prompt the user whether to share keys with connected devices to improve the efficiency of key sharing.

Corresponding to the foregoing embodiments of the key sharing method, the present disclosure also provides embodiments of a key sharing device.

Figure 7 is a schematic flow chart of a key sharing device according to an embodiment of the present disclosure. The key device shown in this embodiment can be executed by a first device, and the first device can communicate with a second device. The first device and the second device include but are not limited to mobile phones, tablet computers, wearable devices, and sensors. , Internet of Things equipment and other communication devices.

As shown in Figure 7, the key sharing device may include:

The communication module 701 is configured to receive the digital key sharing information sent by the second device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle; and transmit the first public key of the first device through The first communication method is sent to the second device; and the signature information sent by the second device through the first communication method is received, wherein the signature information is sent by the second device through the second device The second private key signs the first public key; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and The first device generates a digital key.

In one embodiment, the first communication method includes at least one of the following: near field communication (NFC); Bluetooth (BT); wireless local area network (WLAN).

In one embodiment, the digital key sharing information also includes configuration information and/or permission information.

In one embodiment, the apparatus further includes: a storage module 702 configured to store the signature information in a trusted execution environment TEE and/or a secure element SE.

In one embodiment, the communication module is further configured to: send the signature information to the vehicle, so that the vehicle performs signature processing on the signature information according to the stored second public key of the second device. Verify the signature to obtain the first public key of the first device.

Figure 8 is a schematic flow chart of a key sharing device according to an embodiment of the present disclosure. The key device shown in this embodiment can be executed by a second device, and the second device can communicate with the first device. The first device and the second device include but are not limited to mobile phones, tablet computers, wearable devices, and sensors. , Internet of Things equipment and other communication devices.

As shown in Figure 8, the key sharing device may include:

The communication module 801 is configured to send the digital key sharing information to the first device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle; receive the first device through the first communication The first public key of the first device sent by means;

The processing module 802 is configured to sign the first public key according to the second private key of the second device to determine signature information;

The communication module is further configured to send the signature information to the first device through the first communication method; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and The first public key is used to generate a digital key for the vehicle and the first device.

In one embodiment, the processing module is configured to: determine configuration information and/or permission information for the second device; pair the first public key, the The above configuration information and/or permission information are signed to determine the signature information.

In one embodiment, the first communication method includes near field communication (NFC), and the processing module is further configured to: activate the card reading mode of the NFC module according to the user's triggering action on the key sharing button in the preset application interface. .

Regarding the devices in the above embodiments, the specific manner in which each module performs operations has been described in detail in the embodiments of the relevant methods, and will not be described in detail here.

As for the device embodiment, since it basically corresponds to the method embodiment, please refer to the partial description of the method embodiment for relevant details. The device embodiments described above are only illustrative. The modules described as separate components may or may not be physically separated. The components shown as modules may or may not be physical modules, that is, they may be located in One place, or it can be distributed to multiple network modules. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. Persons of ordinary skill in the art can understand and implement the method without any creative effort.

An embodiment of the present disclosure also provides a terminal, including: a processor; and a memory for storing a computer program; wherein, when the computer program is executed by the processor, the key sharing method described in any of the above embodiments is implemented.

Embodiments of the present disclosure also provide a computer-readable storage medium for storing a computer program. When the computer program is executed by a processor, the steps in the key sharing method described in any of the above embodiments are implemented.

Figure 9 is a schematic block diagram of a terminal 900 according to an embodiment of the present disclosure. For example, the terminal 900 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, or the like.

9, the terminal 900 may include one or more of the following components: a processing component 902, a memory 904, a power supply component 906, a multimedia component 908, an audio component 910, an input/output (I/O) interface 912, a sensor component 914, and Communication component 916.

Processing component 902 generally controls the overall operations of terminal 900, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 902 may include one or more processors 920 to execute instructions to complete all or part of the steps of the above key sharing method. Additionally, processing component 902 may include one or more modules that facilitate interaction between processing component 902 and other components. For example, processing component 902 may include a multimedia module to facilitate interaction between multimedia component 908 and processing component 902.

Memory 904 is configured to store various types of data to support operations at terminal 900. Examples of such data include instructions for any application or method operating on the terminal 900, contact data, phonebook data, messages, pictures, videos, etc. Memory 904 may be implemented by any type of volatile or non-volatile storage device, or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EEPROM), Programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disk.

Power supply component 906 provides power to various components of terminal 900. Power component 906 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to terminal 900.

Multimedia component 908 includes a screen that provides an output interface between the terminal 900 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensor may not only sense the boundary of a touch or slide action, but also detect the duration and pressure associated with the touch or slide action. In some embodiments, multimedia component 908 includes a front-facing camera and/or a rear-facing camera. When the terminal 900 is in an operation mode, such as a shooting mode or a video mode, the front camera and/or the rear camera may receive external multimedia data. Each front-facing camera and rear-facing camera can be a fixed optical lens system or have a focal length and optical zoom capabilities.

Audio component 910 is configured to output and/or input audio signals. For example, the audio component 910 includes a microphone (MIC) configured to receive external audio signals when the terminal 900 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals may be further stored in memory 904 or sent via communications component 916 . In some embodiments, audio component 910 also includes a speaker for outputting audio signals.

The I/O interface 912 provides an interface between the processing component 902 and a peripheral interface module, which may be a keyboard, a click wheel, a button, etc. These buttons may include, but are not limited to: Home button, Volume buttons, Start button, and Lock button.

Sensor component 914 includes one or more sensors for providing various aspects of status assessment for terminal 900 . For example, the sensor component 914 can detect the open/closed state of the terminal 900 and the relative positioning of components, such as the display and keypad of the terminal 900. The sensor component 914 can also detect the position change of the terminal 900 or a component of the terminal 900. , the presence or absence of user contact with the terminal 900 , the orientation or acceleration/deceleration of the terminal 900 and the temperature change of the terminal 900 . Sensor assembly 914 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 914 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor component 914 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

The communication component 916 is configured to facilitate wired or wireless communication between the terminal 900 and other devices. The terminal 900 can access a wireless network based on communication standards, such as WiFi, 2G, 3G, 4G LTE, 5G NR or a combination thereof. In one exemplary embodiment, the communication component 916 receives broadcast signals or broadcast related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, the communications component 916 also includes a near field communications (NFC) module to facilitate short-range communications. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

In an exemplary embodiment, the terminal 900 may be configured by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable Gate array (FPGA), controller, microcontroller, microprocessor or other electronic components are implemented for executing the above key sharing method.

In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions, such as a memory 904 including instructions, which can be executed by the processor 920 of the terminal 900 to complete the above key sharing method is also provided. For example, the non-transitory computer-readable storage medium may be ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.

Other embodiments of the disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the disclosure herein. The present disclosure is intended to cover any variations, uses, or adaptations of the disclosure that follow the general principles of the disclosure and include common common sense or customary technical means in the technical field that are not disclosed in the disclosure. . It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the present disclosure is not limited to the precise structures described above and illustrated in the accompanying drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the disclosure is limited only by the appended claims.

It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that these entities or operations are mutually exclusive. any such actual relationship or sequence exists between them. The terms "comprises," "comprises," or any other variation thereof are intended to cover a non-exclusive inclusion such that a process, method, article or apparatus including a list of elements includes not only those elements but also others not expressly listed elements, or elements inherent to such process, method, article or equipment. Without further limitation, an element defined by the statement "comprises a..." does not exclude the presence of additional identical elements in a process, method, article, or apparatus that includes the stated element.

The methods and devices provided by the embodiments of the present disclosure have been introduced in detail above. Specific examples are used in this article to illustrate the principles and implementations of the present disclosure. The description of the above embodiments is only used to help understand the methods and methods of the present disclosure. The core idea; at the same time, for those of ordinary skill in the art, there will be changes in the specific implementation and application scope based on the ideas of this disclosure. In summary, the content of this description should not be understood as a limitation of this disclosure. .

Claims

A key sharing method, characterized in that it is executed by a first device, and the method includes:

Receive digital key sharing information sent by the second device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle;

Send the first public key of the first device to the second device through the first communication method;

Receive signature information sent by the second device through the first communication method, wherein the signature information is signed by the second device using the second private key of the second device to the first public key Sure;

Wherein, the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key.
The method according to claim 1, characterized in that the first communication method includes at least one of the following:

Near field communication NFC;

Bluetooth BT;

Wireless LAN WLAN.
The method according to claim 1, characterized in that the digital key sharing information further includes configuration information and/or authority information.
The method of claim 1, further comprising:

The signature information is stored in the trusted execution environment TEE and/or the secure element SE.
The method of claim 1, further comprising:

Send the signature information to the vehicle, so that the vehicle verifies the signature information according to the stored second public key of the second device to obtain the first public key of the first device .
A key sharing method, characterized in that it is executed by a second device, and the method includes:

Send the digital key sharing information to the first device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle;

Receive the first public key of the first device sent by the first device through the first communication method;

Sign the first public key according to the second private key of the second device to determine signature information;

Send the signature information to the first device through the first communication method;

Wherein, the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the first device to generate a digital key.
The method according to claim 6, characterized in that the first communication method includes at least one of the following:

Near field communication NFC;

Bluetooth BT;

Wireless LAN WLAN.
The method according to claim 6, wherein the digital key sharing information further includes configuration information and/or authority information.
The method of claim 6, wherein signing the first public key according to the second private key of the second device to determine signature information includes:

Determine configuration information and/or permission information for the second device;

Sign the first public key, the configuration information and/or permission information according to the second private key of the second device to determine signature information.
The method according to claim 6, wherein the first communication method includes near field communication (NFC), and the method further includes:

According to the user's triggering action on the key sharing button in the preset application interface, the card reading mode of the NFC module is started.
A key sharing device, characterized in that it is executed by a first device, and the device includes:

The communication module is configured to receive the digital key sharing information sent by the second device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle; and transmit the first public key of the first device through the Send the first communication method to the second device; receive the signature information sent by the second device through the first communication method, wherein the signature information is sent by the second device through the second device. The second private key signs and determines the first public key; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and the first public key are used for the vehicle and the The first device generates a digital key.
The device according to claim 11, wherein the first communication method includes at least one of the following:

Near field communication NFC;

Bluetooth BT;

Wireless LAN WLAN.
The device according to claim 11, wherein the digital key sharing information further includes configuration information and/or authority information.
The device according to claim 11, characterized in that the device further includes:

A storage module configured to store the signature information in a trusted execution environment TEE and/or a secure element SE.
The device according to claim 11, characterized in that the communication module is further configured to: send the signature information to the vehicle, so that the vehicle performs The signature information is verified using the public key to obtain the first public key of the first device.
A key sharing device, characterized in that it is executed by a second device, and the device includes:

The first communication module is configured to send the digital key sharing information to the first device through the first communication method, wherein the digital key sharing information includes the vehicle public key of the vehicle; receive the first device through the first The first public key of the first device sent by communication;

a processing module configured to sign the first public key according to the second private key of the second device to determine signature information;

A second communication module configured to send the signature information to the first device through the first communication method; wherein the first communication method includes a short-range wireless communication method; the vehicle public key and the The first public key is used to generate a digital key for the vehicle and the first device.
The device according to claim 16, wherein the first communication method includes at least one of the following:

Near field communication NFC;

Bluetooth BT;

Wireless LAN WLAN.
The device according to claim 16, wherein the digital key sharing information further includes configuration information and/or authority information.
The apparatus according to claim 16, wherein the processing module is configured to: determine configuration information and/or permission information for the second device; The first public key, the configuration information and/or the permission information are signed to determine the signature information.
The device according to claim 16, wherein the first communication method includes near field communication (NFC), and the processing module is further configured to: based on the user's triggering action for the key sharing button in the preset application interface, Start the card reading mode of the NFC module.
A terminal, characterized by including:

processor;

Memory used to store computer programs;

Wherein, when the computer program is executed by the processor, the key sharing method described in any one of claims 1 to 5 is implemented.
A computer-readable storage medium for storing a computer program, characterized in that, when the computer program is executed by a processor, the steps in the key sharing method described in any one of claims 1 to 5 are implemented.
A terminal, characterized by including:

processor;

Memory used to store computer programs;

Wherein, when the computer program is executed by the processor, the key sharing method described in any one of claims 6 to 10 is implemented.
A computer-readable storage medium used to store a computer program, characterized in that when the computer program is executed by a processor, the steps in the key sharing method described in any one of claims 6 to 10 are implemented.