CN109285252B

CN109285252B - Vehicle lock control method and device

Info

Publication number: CN109285252B
Application number: CN201811147047.5A
Authority: CN
Inventors: 云朋; 韩宇; 陈洪银; 牛凡
Original assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Current assignee: Apollo Intelligent Connectivity Beijing Technology Co Ltd
Priority date: 2018-09-29
Filing date: 2018-09-29
Publication date: 2021-08-10
Anticipated expiration: 2038-09-29
Also published as: CN109285252A; CN113554787B; CN113554787A

Abstract

The embodiment of the invention provides a vehicle lock control method and device. Wherein, the method comprises the following steps: receiving and storing an activation code set from a vehicle owner terminal, wherein the activation code set is acquired by the vehicle owner terminal from a server side and comprises a plurality of activation codes distributed to the vehicle owner terminal by the server side; receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code; activating the owner terminal by using the activation code set and the first activation code; and determining whether the vehicle owner terminal is allowed to control the vehicle lock or not by using the first activation code. The embodiment of the invention obtains the activation codebook and the activation code from the server end through the communication between the vehicle owner terminal and the server end, and the vehicle end is not required to have the function of being connected with the server end in the activation process, so that the vehicle key can be activated by adopting a short-distance communication mode between the vehicle owner terminal and the vehicle end, and the applicable scene is wider.

Description

Vehicle lock control method and device

Technical Field

The invention relates to the technical field of vehicle control, in particular to a vehicle lock control method and device.

Background

Currently, the scheme for unlocking the vehicle through wireless communication includes:

the first type: and presetting a fixed key in the vehicle, wherein the key of each vehicle is consistent. By adopting the scheme, once one vehicle is broken, all vehicles face safety risks, and the safety risks are high.

The second type: one car is one secret, based on the high in the clouds mandate. By adopting the scheme, the vehicle end can be connected with the cloud end only when the vehicle end is provided with the mobile network during initialization and sharing authorization. The security risk is small compared to the first category. However, if the vehicle is in an underground garage or a mountain area, the moving signal is often not good, and the function is limited.

In the third category: one vehicle has one secret, and each vehicle is preset with different fixed keys. By adopting the scheme, offline configuration or personalized production needs to be carried out on each vehicle. Therefore, the method has the disadvantages of complicated process, high cost, and the like. In addition, when a certain vehicle is particularly used, the same set of secret key is also used when the key is shared by adopting the scheme, and the security risk is high when the use scene is shared.

Disclosure of Invention

The embodiment of the invention provides a vehicle lock control method and device, and aims to solve one or more technical problems in the prior art.

In a first aspect, an embodiment of the present invention provides a vehicle lock control method, including:

receiving and storing an activation code set from a vehicle owner terminal, wherein the activation code set is acquired by the vehicle owner terminal from a server side and comprises a plurality of activation codes distributed to the vehicle owner terminal by the server side;

receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code;

activating the owner terminal by using the activation code set and the first activation code;

and determining whether the vehicle owner terminal is allowed to control the vehicle lock or not by using the first activation code.

In a second aspect, an embodiment of the present invention provides a vehicle lock control method, including:

receiving an activation code set and a first activation code from a server, wherein the activation code set comprises a plurality of activation codes distributed to a vehicle owner terminal by the server;

sending the activation code set to a vehicle end so as to store the activation code set at the vehicle end;

and sending a first activation request to the vehicle end, wherein the first activation request comprises the first activation code, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code.

In a third aspect, an embodiment of the present invention provides a vehicle lock control method, including:

selecting a first activation code from an activation code set of a vehicle owner terminal, wherein the activation code set comprises a plurality of activation codes distributed to the vehicle owner terminal by the server;

and sending the activation code set and the first activation code to the vehicle owner terminal, and sending the activation code set and the first activation code to the vehicle end through the vehicle owner terminal so that the vehicle end utilizes the activation code set and the first activation code to activate the vehicle owner terminal.

In a fourth aspect, an embodiment of the present invention provides a vehicle lock control device, including:

the system comprises a first receiving module, a second receiving module and a control module, wherein the first receiving module is used for receiving and storing an activation code set from a vehicle owner terminal, the activation code set is acquired by the vehicle owner terminal from a server side, and the activation code set comprises a plurality of activation codes distributed to the vehicle owner terminal by the server side;

the second receiving module is used for receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code;

the first activation module is used for activating the owner terminal by using the activation code set and the first activation code;

and the first control module is used for determining whether the vehicle owner terminal is allowed to control the vehicle lock or not by utilizing the first activation code.

In a fifth aspect, an embodiment of the present invention provides a vehicle lock control device, including:

in a sixth aspect, an embodiment of the present invention provides a vehicle lock control device, including:

the third receiving module is used for receiving an activation code set and a first activation code from a server, wherein the activation code set comprises a plurality of activation codes distributed to the owner terminal by the server;

the first sending module is used for sending the activation code set to a vehicle end so as to store the activation code set at the vehicle end;

and the second sending module is used for sending a first activation request to the vehicle end, wherein the first activation request comprises the first activation code, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code.

In a seventh aspect, an embodiment of the present invention provides a vehicle lock control device, where functions of the device may be implemented by hardware, or may be implemented by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above-described functions.

In one possible design, the structure of the device includes a processor and a memory, the memory is used for storing a program for supporting the device to execute the vehicle lock control method, and the processor is configured to execute the program stored in the memory. The apparatus may also include a communication interface for communicating with other devices or a communication network.

In an eighth aspect, an embodiment of the present invention provides a computer-readable storage medium for storing computer software instructions for a vehicle lock control device, which includes a program for executing the vehicle lock control method.

One of the above technical solutions has the following advantages or beneficial effects: the vehicle key activation method has the advantages that the vehicle owner terminal is communicated with the server side, the activation codebook and the activation code are obtained from the server side, the vehicle side is not required to have a function of being connected with the server side in the activation process, the vehicle key can be activated by adopting a close-distance communication mode between the vehicle owner terminal and the vehicle side, and the applicable scene is wider.

Another technical scheme in the above technical scheme has the following advantages or beneficial effects: because each owner terminal and each vehicle end can be allocated with one set of activation code set, even if one vehicle is cracked, the safety of other vehicles is not influenced.

Furthermore, burning after reading can be achieved, hidden danger of theft is eliminated, and key authorization and sharing can be safely carried out.

Further, the unlocking and locking operation is carried out by using a new key which is based on the activation code and is continuously changed and exchanged, so that the unlocking and locking process is safer.

The foregoing summary is provided for the purpose of description only and is not intended to be limiting in any way. In addition to the illustrative aspects, embodiments, and features described above, further aspects, embodiments, and features of the present invention will be readily apparent by reference to the drawings and following detailed description.

Drawings

In the drawings, like reference numerals refer to the same or similar parts or elements throughout the several views unless otherwise specified. The figures are not necessarily to scale. It is appreciated that these drawings depict only some embodiments in accordance with the disclosure and are therefore not to be considered limiting of its scope.

Fig. 1 shows a flowchart of a lock control method according to an embodiment of the present invention.

Fig. 2 shows a flowchart of initialization in the vehicle lock control method according to the embodiment of the present invention.

Fig. 3 illustrates a flowchart of activating a key in a lock control method according to an embodiment of the present invention.

Fig. 4 shows a flowchart of the lock switch control in the lock control method according to the embodiment of the present invention.

Fig. 5 shows a flowchart of the lock switch control in the lock control method according to the embodiment of the present invention.

Fig. 6 shows a flowchart of a lock control method according to an embodiment of the present invention.

Fig. 7 is a flowchart illustrating a replacement user terminal in a vehicle lock control method according to an embodiment of the present invention.

Fig. 8 shows a flowchart of replacing the vehicle owner in the lock control method according to the embodiment of the invention.

Fig. 9 shows a flow chart of borrowing in the vehicle lock control method according to the embodiment of the present invention.

Fig. 10 is a flowchart showing the process of revoking a vehicle in the lock control method according to the embodiment of the present invention.

Fig. 11 shows a flowchart of a lock control method according to an embodiment of the present invention.

Fig. 12 is a flowchart illustrating a replacement of a user terminal in a lock control method according to an embodiment of the present invention.

Fig. 13 shows a flowchart of replacing the vehicle owner in the lock control method according to the embodiment of the invention.

Fig. 14 is a flowchart showing the borrowing of a vehicle in the vehicle lock control method according to the embodiment of the present invention.

Fig. 15 is a flowchart showing the process of revoking a vehicle in the lock control method according to the embodiment of the present invention.

Fig. 16 shows a flowchart of initialization in an application example of the vehicle lock control method according to the embodiment of the present invention.

Fig. 17 is a flowchart illustrating key activation in an application example of the lock control method according to the embodiment of the present invention.

Fig. 18 is a flowchart illustrating a lock switching operation in an application example of the vehicle lock control method according to the embodiment of the present invention.

Fig. 19 is a flowchart showing key recovery in an application example of the lock control method according to the embodiment of the present invention.

Fig. 20 is a flowchart illustrating the sale of used cars in an application example of the vehicle lock control method according to the embodiment of the present invention.

Fig. 21 is a flowchart showing a controller replacement at the vehicle end in an application example of the vehicle lock control method according to the embodiment of the present invention.

Fig. 22 is a flowchart showing a vehicle borrowing in an application example of the vehicle lock control method according to the embodiment of the present invention.

Fig. 23 is a flowchart showing a process of revoking a vehicle in an application example of the vehicle lock control apparatus according to the embodiment of the present invention.

Fig. 24 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention.

Fig. 25 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention.

Fig. 26 is a block diagram showing the structure of a vehicle lock control device according to an embodiment of the present invention.

Fig. 27 is a block diagram showing the structure of a vehicle lock control device according to an embodiment of the present invention.

Fig. 28 is a block diagram showing the structure of a vehicle lock control device according to an embodiment of the present invention.

Fig. 29 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention.

Detailed Description

In the following, only certain exemplary embodiments are briefly described. As those skilled in the art will recognize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. Accordingly, the drawings and description are to be regarded as illustrative in nature, and not as restrictive.

Fig. 1 shows a flowchart of a lock control method according to an embodiment of the present invention. As shown in fig. 1, the method may be applied to a controller of a vehicle end, such as a vehicle, and includes the steps of:

s11, receiving and storing an activation code set from a vehicle owner terminal, wherein the activation code set is acquired by the vehicle owner terminal from a server side, and the activation code set comprises a plurality of activation codes distributed by the server side for the vehicle owner terminal.

S12, receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code.

And S13, activating the owner terminal by using the activation code set and the first activation code.

And S14, determining whether the vehicle owner terminal is allowed to control the vehicle lock or not by using the first activation code.

In this embodiment, the user may register the vehicle owner account with the server through a terminal device such as a mobile phone, a palm computer, and a wearable device. After the registration is successful, the user can log in the vehicle owner account on the terminal device and communicate with the server side through the terminal device. In this case, the terminal device that logs in the owner account may be referred to as an owner terminal.

In an implementation manner, the binding relationship between the vehicle owner account and the terminal device may also be set to improve the security. For example, if the owner account a is logged in at the terminal device a1, it can be used as the owner terminal. However, if the owner account a logs in at the terminal device B1, the owner identity needs to be re-verified.

When the owner terminal is registered, the information of the vehicle end can be uploaded to the server end. After the activation code sets are distributed to the vehicle owner terminal and the vehicle end by the server end, the binding relationship among the activation code sets, the vehicle owner terminal and the vehicle end can be established.

The owner terminal can be connected with the server terminal through remote communication modes such as a mobile network and the like, and obtains the activation code set bound with the owner terminal from the server terminal. The owner terminal can send the set of the activation codes to the vehicle end for storage. And the owner terminal can also acquire the first activation code from the activation code set stored by the server terminal. And the first activation code is used for activating the vehicle key function of the user. In order to prevent replay and random collision, after the first activation code is sent to the owner terminal in the cloud, the first activation code in the self-stored activation code set can be deleted.

In this embodiment, the vehicle owner terminal may communicate with the server side to obtain the activation codebook (activation code set) and the activation code from the server side, and in the activation process, the vehicle key may be activated through interaction between the vehicle side and the vehicle owner terminal. In the activation process, the vehicle end is not required to have the function of being connected with the server end, namely the vehicle end can be off-line. Therefore, in the scene of poor mobile signals such as an underground garage, the activation of the car key can be realized by adopting a close-distance communication mode between the car owner terminal and the car end, and the applicable scene is wider.

Furthermore, because each owner terminal and each vehicle end can be allocated with a set of activation code set, even if one vehicle is cracked, the safety of other vehicles is not influenced.

In one implementation, in the initialization procedure, as shown in fig. 2, step S11 may include:

and step S21, receiving an initialization request from the owner terminal, wherein the initialization request comprises the activation code set signed by a private key.

And step S22, verifying the private key signature of the activation code set by using a public key preset at the vehicle end, and storing the activation code set after the verification is passed.

To ensure security, the set of activation codes may be signed with a private key. After receiving the activation code set, the vehicle end can verify the private key signature by using a public key preset in factory shipment. And after the verification is passed, storing the activation code set at the vehicle end.

In one implementation, as shown in fig. 3, the activation process of the vehicle key of the vehicle owner terminal may include steps S12 and S13, and step S13 may include:

and step S31, if the first activation code belongs to the activation code set, determining that the activation of the vehicle key function of the vehicle owner terminal is successful.

Step S32, deleting the first activate code that has been used from the set of activate codes.

After the vehicle end receives the first activation request, whether the first activation code exists is searched in the locally stored activation code set. If yes, the owner terminal is legal, and the vehicle key function of the owner terminal can be activated. And then, at the vehicle end, deleting the first activation code from the activation code set, preventing the first activation code from being decrypted and then activating again by using the first activation code, thereby improving the safety.

In one implementation manner, the first activation request sent by the owner terminal to the vehicle end further includes a first dynamic key. As shown in fig. 4, in the lock switch control flow, step S14 includes:

and step S41, receiving a first vehicle lock control request from the vehicle owner terminal, wherein the first vehicle lock control request comprises a first ciphertext, a second ciphertext and a target state. The target state may be an unlocked state, a locked state, or the like.

Step S42, if the first release code and the first dynamic key are temporarily stored at the vehicle end, decrypting the first ciphertext by using the first release code.

Step S43, if the decrypted key is the same as the first dynamic key, controlling the lock to be in the target state, and decrypting the second ciphertext with the first dynamic key to obtain a second dynamic key.

Step S44, deleting the first activate code and temporarily storing the second dynamic key.

In the control flow of the vehicle lock switch, a group of verification information can be temporarily stored on the vehicle end and the vehicle owner terminal. Initially, the vehicle end and the vehicle owner terminal may temporarily store the first activation code and the first dynamic key. When the vehicle lock needs to be controlled, a new dynamic secret key, namely a second dynamic secret key, is randomly generated at the owner terminal. And encrypting the first dynamic secret key by using the first activation code to obtain a first ciphertext. And encrypting the second dynamic secret key by using the first dynamic secret key to obtain a second ciphertext. And then, the owner terminal sends the first ciphertext and the second ciphertext to the vehicle end.

The vehicle end decrypts the data by using the first activation code and the first dynamic secret key stored by the vehicle end. If the first activation code is used for decrypting the first ciphertext, and the decrypted secret key is the same as the first dynamic secret key stored at the vehicle end, the vehicle lock control request can be allowed to be executed, and the vehicle lock is set to be in a target state, such as being opened. Otherwise, the lock control request can be refused. If the control fails, the process may be terminated. If the control is successful, the decryption of the second ciphertext using the first dynamic key may continue. And storing the decrypted secret key, namely the second dynamic secret key, in the vehicle end, and deleting the first activation code to update the verification information.

In one implementation, after the lock on/off state is controlled for the first time, it may be determined whether to allow the owner terminal to control the lock subsequently using the temporarily stored dynamic key. As shown in fig. 5, the method further includes:

and step S51, receiving a second lock control request from the owner terminal, wherein the second lock control request comprises a third ciphertext, a fourth ciphertext and a target state.

Step S52, if the vehicle end temporarily stores a third dynamic key and a fourth dynamic key, decrypting the third ciphertext using the third dynamic key.

Step S53, if the decrypted key is the same as the fourth dynamic key, controlling the lock to be in the target state, and decrypting the fourth ciphertext with the fourth dynamic key to obtain a fifth dynamic key.

Step S54, deleting the third dynamic key and temporarily storing the fifth dynamic key.

After the unlocking is successful for the first time, the verification information temporarily stored on the vehicle end and the vehicle owner terminal is updated. Subsequently, each time the lock is unlocked, the owner terminal can generate a new dynamic secret key. And generating two ciphertexts by using the two dynamic secret keys in the verification information and the new dynamic secret key, and sending the two ciphertexts to the vehicle end. And at the vehicle end, decoding the two received ciphertexts by using the temporarily stored verification information. If the vehicle lock is successfully controlled after decoding, the set of authentication information is updated by the new dynamic secret key.

In the embodiment, the locking and unlocking operation is carried out by using the new key which is based on the activation code and is continuously changed and exchanged, and the vehicle lock control is safer. In the locking and unlocking process, the vehicle end is not required to have the function of being connected with the server end, a close-distance communication mode is adopted between the vehicle owner terminal and the vehicle end, namely the vehicle end can be offline, and more adaptive scenes are achieved.

Fig. 6 shows a flowchart of a lock control method according to an embodiment of the present invention. As shown in fig. 6, the method may be applied to a user terminal, such as an owner terminal, and includes the following steps:

and step S61, receiving an activation code set and a first activation code from a server side, wherein the activation code set comprises a plurality of activation codes distributed by the server side for the owner terminal.

And step S62, sending the activation code set to the vehicle end so as to store the activation code set at the vehicle end.

And step S63, sending a first activation request to the vehicle end, wherein the first activation request comprises the first activation code, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code. Thus, whether the vehicle owner terminal is allowed to control the vehicle lock can be determined at the vehicle end.

The process of activating the owner terminal by the vehicle end using the activation code set and the first activation code may refer to fig. 3 and the related description thereof, which are not repeated herein.

In one implementation, step S62 includes: and sending an initialization request to the vehicle end, wherein the initialization request comprises the activation code set signed by a private key, and the initialization request is used for enabling the vehicle end to verify the private key signature of the activation code set by using a preset public key and storing the activation code set after the verification is passed. The initialization process can refer to fig. 2 and its related description, which are not described herein.

In one implementation, the first activation request further includes a first dynamic key, and the method further includes: and sending a first vehicle lock control request to the vehicle end, wherein the first vehicle lock control request comprises a first ciphertext, a second ciphertext and a target state, the first ciphertext comprises a first dynamic secret key encrypted by using a first activation code, and the second ciphertext comprises a second dynamic secret key encrypted by using the first dynamic secret key.

The process of decrypting and controlling the lock after the vehicle end receives the first lock control request may refer to fig. 4 and the related description thereof, which are not repeated herein.

In one implementation, after the lock on/off state is controlled for the first time, it may be determined whether to allow the owner terminal to control the lock subsequently using the temporarily stored dynamic key. Thus, the method further comprises: and sending a second lock control request to the vehicle end, wherein the second lock control request comprises a third ciphertext, a fourth ciphertext and a target state, the third ciphertext comprises a fourth dynamic secret key encrypted by using the third dynamic secret key, and the fourth ciphertext comprises a fifth dynamic secret key encrypted by using the fourth dynamic secret key.

The process of decrypting and controlling the lock after the vehicle end receives the second lock control request may refer to fig. 5 and the related description thereof, which are not repeated herein.

Fig. 7 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the lock control method shown in fig. 6, the method can be applied to a scene of replacing the user terminal, such as key recovery. In this scenario, if a new user terminal of the original owner needs to be adopted as the re-authenticated owner terminal, the owner identity needs to be re-authenticated. Therefore, as shown in fig. 7, the method is applied to a new user terminal of an original owner, and the method further includes:

step S71, sending a re-authentication request to the server, where the re-authentication request includes identity information of the owner terminal requesting re-authentication.

And step S72, receiving an authentication result response returned by the server, wherein if the identity information is successfully authenticated, the authentication result response comprises a second activation code. The second activation code is selected from the activation code set bound by the authenticated owner terminal by the server side.

The selected second activation code can be deleted in the activation code set of the server side, so that replay and random collision are prevented, and the safety performance is higher.

And step S73, sending a second activation request including a second activation code to the vehicle end, wherein the second activation request is used for enabling the vehicle end to activate the re-authenticated vehicle owner terminal by using the second activation code.

In this embodiment, the principle that the vehicle end activates the vehicle borrowing terminal by using the second activation code can be seen from fig. 3 and the related description thereof, where the first activation code needs to be replaced by the second activation code, and the vehicle owner terminal is replaced by the vehicle owner terminal authenticated again, which is not described herein again.

In addition, after the vehicle end activates the vehicle borrowing terminal by using the second activation code, the vehicle end may determine whether to allow the vehicle borrowing terminal to control the vehicle lock by using the temporarily stored second activation code, the dynamic key and the like. For a specific principle, refer to fig. 4 and 5 and the related description thereof, the first activation code needs to be replaced by the second activation code, and the owner terminal is replaced by the re-authenticated owner terminal, which is not described herein again.

Fig. 8 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the vehicle lock control method shown in fig. 6, the method can be applied to a scene of vehicle owner replacement such as used vehicle sales. In such a scenario, it is often necessary to change both the user terminal and the vehicle owner identity. Therefore, if a new user terminal of a new owner needs to be adopted as the owner terminal requesting the change, the owner identity needs to be changed. Therefore, as shown in fig. 8, the method is applied to a new user terminal of a new owner, and the method further includes:

and step S81, sending an owner change request to the server side, wherein the owner change request comprises the identity information of the owner terminal requesting to change.

And step S82, receiving a vehicle owner changing response returned by the server, wherein if the change is successful, the vehicle owner changing response comprises a third activation code. The third activation code is selected by the server from the activation code set bound by the owner terminal. In addition, the selected third activation code can be deleted in the activation code set at the server side, so that replay and random collision are prevented, and the safety performance is higher.

After receiving a vehicle owner replacing request sent by the original vehicle owner terminal or the new vehicle owner terminal, the server side can release the binding relationship between the original vehicle owner terminal and the activation code set and establish the binding relationship between the new vehicle owner terminal and the activation code set. The new vehicle main terminal is the changed vehicle main terminal.

And step S83, sending a third activation request including the third activation code to the vehicle end, wherein the third activation request is used for enabling the vehicle end to activate the changed vehicle owner terminal by using the third activation code.

In this embodiment, the principle that the vehicle end activates the vehicle borrowing terminal by using the third activation code can be seen from fig. 3 and the related description thereof, where the first activation code needs to be replaced by the third activation code, and the vehicle owner terminal is replaced by the vehicle owner terminal requesting the change, which is not described herein again.

In addition, after the vehicle end activates the vehicle borrowing terminal by using the third activation code, the vehicle end may determine whether to allow the vehicle borrowing terminal to control the vehicle lock by using the temporarily stored third activation code, the dynamic key and the like. For a specific principle, refer to fig. 4 and 5 and related descriptions thereof, the first activation code needs to be replaced by a third activation code, and the vehicle owner terminal is replaced by a vehicle owner terminal requesting a change, which is not described herein again.

Fig. 9 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the vehicle lock control method shown in fig. 6, the method can be applied to a scene shared by vehicles such as a vehicle borrowing vehicle. In such a scenario, the owner terminal is usually required to authorize the borrowing terminal. Therefore, as shown in fig. 9, the method is applied to the owner terminal, and the method further includes:

and step S91, receiving a vehicle borrowing request from the server side, wherein the vehicle borrowing request comprises the identity information and the permission application of the vehicle borrowing terminal requesting the vehicle borrowing.

And step S92, sending a vehicle borrowing response to the server side according to the identity information and the permission application of the vehicle borrowing terminal, wherein the vehicle borrowing response comprises permission information authorizing the vehicle borrowing terminal to use the vehicle side.

The vehicle borrowing response is used for enabling the server to send a vehicle borrowing permission message to the vehicle borrowing terminal, wherein the vehicle borrowing permission message comprises a fourth activation code and the permission information, and the fourth activation code is selected from an activation code set of a vehicle owner terminal by the server. The selected fourth activation code can be deleted in the activation code set of the server side, so that replay and random collision are prevented, and the safety performance is higher.

The vehicle borrowing permission information is used for enabling the vehicle borrowing terminal to send a fourth activation request comprising a fourth activation code to the vehicle end. The fourth activation request is used for enabling the vehicle end to activate the vehicle borrowing terminal by using the fourth activation code.

In this embodiment, the principle that the vehicle end activates the vehicle borrowing terminal by using the fourth activation code can be seen from fig. 3 and the related description thereof, where the first activation code needs to be replaced by the fourth activation code, and the vehicle owner terminal is replaced by the vehicle borrowing terminal, which is not described herein again.

In addition, after the vehicle end activates the vehicle borrowing terminal by using the fourth activation code, the vehicle end may determine whether to allow the vehicle borrowing terminal to control the vehicle lock by using the temporarily stored fourth activation code, the dynamic key and the like. For a specific principle, refer to fig. 4 and 5 and the related description thereof, it is necessary to replace the first activation code with a fourth activation code, and replace the owner terminal with a borrowing terminal, which is not described herein again.

In one implementation, as shown in fig. 10, if the borrowing needs to be cancelled, the method further comprises:

step S101, a vehicle borrowing cancellation request is sent to the server side, the vehicle borrowing cancellation request is used for requesting the server side to send a vehicle borrowing cancellation message to the vehicle side, and the vehicle borrowing cancellation message is used for enabling the vehicle side to forbid the vehicle borrowing terminal to control the vehicle lock.

And step S102, receiving a vehicle borrowing withdrawal response returned by the server, wherein the vehicle borrowing withdrawal response comprises the state of whether the vehicle borrowing is successfully withdrawn or not.

Fig. 11 shows a flowchart of a lock control method according to an embodiment of the present invention. As shown in fig. 11, the method can be applied to a server side, and includes the following steps:

and step S111, receiving an initialization request from the owner terminal.

And step S112, distributing a plurality of activation codes for the owner terminal, wherein the activation codes can form an activation code set having a binding relationship with the owner terminal.

Step S113, selecting a first activation code from an activation code set of a vehicle owner terminal, wherein the activation code set comprises a plurality of activation codes distributed to the vehicle owner terminal by the server side. After selection, the first activation code can be deleted in the activation code set at the server side, so that replay and random collision are prevented, and the safety performance is higher.

And S114, sending an activation code set and a first activation code to the owner terminal, and sending the activation code set and the first activation code to the vehicle end through the owner terminal so that the vehicle end activates the owner terminal by using the activation code set and the first activation code. The activation process and the activated lock switch control process can be referred to the related description of the foregoing embodiments.

Fig. 12 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the lock control method shown in fig. 11, the method can be applied to a scenario where the user terminal is replaced, such as key recovery. In this scenario, if a new user terminal of the original owner needs to be adopted as the re-authenticated owner terminal, the owner identity needs to be re-authenticated. Therefore, as shown in fig. 12, the method is applied to a server side, and the method further includes:

step S121, receiving a re-authentication request from the re-authenticated owner terminal, wherein the re-authentication request comprises the identity information of the owner terminal requesting re-authentication.

And step S122, if the identity information is successfully authenticated, selecting a second activation code from the activation code set.

After the authentication is successful, the server can find the activation code set bound by the owner terminal, and a second activation code is selected from the activation code set. In addition, the selected second activation code can be deleted from the activation code set at the server side, so that replay and random collision are prevented, and the safety performance is higher.

And S123, returning an authentication result response including the second activation code to the re-authenticated owner terminal, wherein the authentication result response is used for enabling the re-authenticated owner terminal to send a second activation request including the second activation code to the vehicle terminal. And the second activation request is used for enabling the vehicle end to activate the re-authenticated vehicle owner terminal by using the second activation code. The activation process and the activated lock switch control process can be referred to the related description of the foregoing embodiments.

Fig. 13 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the vehicle lock control method shown in fig. 11, the method can be applied to a scene of vehicle owner replacement such as used vehicle sales. In such a scenario, it is often necessary to change both the user terminal and the vehicle owner identity. Therefore, if a new user terminal of a new owner needs to be adopted as the owner terminal requesting the change, the owner identity needs to be changed. Therefore, as shown in fig. 13, the method is applied to a server side, and the method further includes:

step S131, an owner change request from a new owner terminal is received, wherein the owner change request comprises identity information of the owner terminal requesting to change.

Step S132, if the change is successful, selecting a third activation code from the activation code set.

The server side can release the binding relationship between the original vehicle main terminal and the activation code set distributed to the vehicle side, and establish the binding relationship between the new vehicle main terminal and the activation code set. The server can select a third activation code from the activation code set. In addition, the selected third activation code can be deleted from the activation code set at the server side, so that replay and random collision are prevented, and the safety performance is higher.

And S133, returning an owner change response including a third activation code to the changed owner terminal, wherein the owner change response is used for enabling the changed owner terminal to send a third activation request including the third activation code to the vehicle end. And the third activation request is used for enabling the vehicle end to activate the changed vehicle owner terminal by using the third activation code. The activation process and the activated lock switch control process can be referred to the related description of the foregoing embodiments.

Fig. 14 shows a flowchart of a lock control method according to an embodiment of the present invention. On the basis of the vehicle lock control method shown in fig. 11, the method can be applied to a scene shared by vehicles such as a vehicle. In such a scenario, the owner terminal is usually required to authorize the borrowing terminal. Therefore, as shown in fig. 14, the method is applied to a server side, and the method further includes:

step S141, receiving a vehicle borrowing request from a vehicle borrowing terminal, where the vehicle borrowing request includes identity information of the vehicle borrowing terminal requesting vehicle borrowing. The request for borrowing the car may also include an application for the right, such as a number of days for the application, how much money to pay per day, etc.

And S142, sending a car borrowing message to the car owner terminal, wherein the car borrowing message comprises the identity information of the car borrowing terminal. The vehicle borrowing request can also comprise an authority application of the vehicle borrowing terminal.

And S143, receiving an authorization response from the owner terminal, wherein the authorization response comprises authority information authorizing the borrowing terminal to use the vehicle end.

Step S144, selecting a fourth activate code from the activate code set.

After obtaining the authorization, the server may search the activation code set bound by the owner terminal, and select a fourth activation code from the activation code set. In addition, the selected fourth activation code can be deleted from the activation code set at the server side, so that replay and random collision are prevented, and the safety performance is higher.

Step S145, sending a vehicle borrowing permission message including a fourth activation code and the permission information to the vehicle borrowing terminal, wherein the vehicle borrowing permission message is used for enabling the vehicle borrowing terminal to send a fourth activation request including the fourth activation code to the vehicle end, and the fourth activation request is used for enabling the vehicle end to activate the vehicle borrowing terminal by using the fourth activation code. The activation process and the activated lock switch control process can be referred to the related description of the foregoing embodiments.

In one implementation, as shown in fig. 15, if the borrowing needs to be cancelled, the method further comprises:

and step S151, receiving a request for canceling the vehicle borrowing from the vehicle owner terminal.

Step S152, a vehicle borrowing cancellation message is sent to the vehicle end, and the vehicle end is enabled to forbid the vehicle borrowing terminal to control the vehicle lock.

And step S153, receiving a withdrawal result message returned by the vehicle end, wherein the withdrawal result message comprises the state of whether the vehicle is successfully withdrawn.

And step S154, sending a withdrawal notification to the vehicle borrowing terminal, wherein the withdrawal notification comprises the state of whether the vehicle borrowing is successfully withdrawn.

In one implementation, when the withdrawal of the car is successful, a car withdrawal notification can be sent to the car withdrawal terminal to notify the car withdrawal terminal of withdrawal of the authorization. When the withdrawal of the car borrowing fails, the car borrowing terminal may not be notified.

In another implementation, a cancellation of the vehicle borrowing notification may be sent to the vehicle borrowing terminal regardless of whether the cancellation of the vehicle borrowing is successful or failed.

And step S155, sending a vehicle borrowing cancellation response to the vehicle owner terminal, wherein the vehicle borrowing cancellation response comprises the state of whether the vehicle borrowing is successfully cancelled or not.

In an application example, the user terminal is a mobile phone, the server side is a cloud side, and the controller of the vehicle is a vehicle side. A user such as a mobile phone of a vehicle owner can communicate with the cloud in a remote wireless communication mode such as a mobile network. The mobile phone can communicate with the controller of the vehicle in a short-distance wireless communication mode. For example, the controller of the vehicle has a bluetooth function. The mobile phone communicates with a controller of the vehicle through a bluetooth function.

The following describes each stage of the lock control method according to different application scenarios.

In the factory configuration stage, a controller with a bluetooth function may be installed in the vehicle. When the manufacturer supplies goods, a unified security Software Development Kit (SDK) and a public key can be preset. When the vehicle is produced and is off-line, the off-line configuration of the Bluetooth vehicle key is not required to be additionally carried out. After a user purchases a vehicle and registers a vehicle account, the vehicle can be initialized to the cloud end through the mobile phone, a Bluetooth vehicle key in the mobile phone is activated, and the vehicle lock state of the vehicle is controlled.

Scene one: and (6) initializing the key.

As shown in fig. 16, the key initialization process may include the following steps:

step S161, the user applies for registration to the cloud end through a mobile phone to become an owner of a certain vehicle. After the registration is successful, the mobile phone requests the cloud end to initialize the Bluetooth car key in the mobile phone. The mobile phone can send a registration request, an initialization request and the like to the cloud, and the registration and initialization process is completed. During registration, a user needs to upload various identity information required for registration to a cloud terminal through a mobile phone, for example: user name, address, basic information of vehicle end, various certification documents, etc.

And S162, after the vehicle owner is registered, the cloud end can bind the vehicle owner with the vehicle end. And the cloud end can allocate an activation codebook for the vehicle owner and the vehicle end. The activate codebook includes an activate code set of a plurality of activate codes. In addition, the cloud can also distribute an activation code for the mobile phone of the host vehicle from the activation codebook. When the cloud returns a successful initialization response to the mobile phone, the cloud may include the activation codebook, the activation code, and the like in the response.

In addition, in the activation codebook at the cloud, the activation code of the mobile phone issued to the vehicle owner can be deleted, so that repeated authorization is prevented.

In addition, to ensure security, the activation codebook may be signed with a private key.

Step S163, the user sends a key initialization request to the vehicle end through the mobile phone, where the request includes the activation codebook signed by the private key. The method comprises the following steps that private key signature can be carried out on an activation codebook under the condition that a channel is encrypted; the activation codebook can be further encrypted, and the complexity of encryption can be flexibly selected according to the requirements of actual application scenes.

Step S164, the vehicle end may verify the private key signature of the activation codebook by using a preset public key, and store the activation codebook after successful verification. For example, the signature may be verified in a physical key unlocked state of the vehicle.

And S165, returning an initialization success response to the mobile phone by the vehicle end.

Step S166, after the mobile phone receives the initialization success response of the vehicle end, the activation codebook in the mobile phone can be deleted, so that the activation codebook can be prevented from being cracked from the mobile phone.

In this scenario, the mobile phone and the vehicle end may communicate in a short-distance wireless manner, such as bluetooth. Therefore, the vehicle end does not need to be in direct communication with the cloud end, and a mobile network connection function is not required to be set. That is, in the initialization process, the vehicle end may be offline.

Scene two: the key is activated.

As shown in fig. 17, the key activation process may include the following steps:

step S171, the user sends an activation request to the vehicle end through the mobile phone, and the activation request may include attribute information such as an activation code, a dynamic key (key0), and a right. key0 may be 128 bits of data randomly generated for a cell phone activated key.

And step S172, the vehicle end compares the received activation code with the activation codebook. If the activation code exists in the activation codebook, activation success is indicated. At this point, the activate code may be deleted from the activate codebook. In addition, the activation code and the dynamic key may be temporarily saved (key 0).

And step S173, if the activation is successful, the vehicle end may return an activation success response to the mobile phone.

In the activation process, the vehicle end can be off-line. After each activation, the used activate code is deleted from the activate codebook to prevent replay and random collision.

Scene three: and (6) opening and closing the lock.

As shown in fig. 18, the lock opening and closing process may include the following steps:

and step S181, the user sends a vehicle lock control request to the vehicle end for the first time through the mobile phone.

After the key is activated, the activation code and key0 are temporarily stored in the handset. A 128-bit dynamic key1 is randomly generated in the handset. Key1 is encrypted with key0 to generate key1 ciphertext, and key0 is encrypted with the activation code to generate key0 ciphertext. Key1 ciphertext and key0 ciphertext may be included in the lock control request. In addition, the lock control request may further include a status flag requesting unlocking or locking.

In step S182, after the vehicle end receives the lock control request for the first time, the ciphertext in the request may be decrypted by using the activation code and the dynamic key0 temporarily stored by the vehicle end. After decryption and matching are successful, the vehicle end can return a response of successful locking/unlocking for the first time to the mobile phone.

Specifically, decrypting the key0 ciphertext with the activate code results in key 0. And comparing whether the key0 obtained by decoding is the same as the dynamic key0 received in the previous step. If the same, the matching is successful, the vehicle lock can be allowed to be set to the unlocking state or the locking state of the current request. After the matching is successful, key1 ciphertext is decrypted using key0 to obtain key 1. The activation code is deleted at the vehicle end, and the key0 and the key1 are temporarily saved.

And step S183, the user sends the vehicle lock control request to the vehicle end again through the mobile phone.

Keys 0 and 1 are temporarily stored in the cellular phone. A 128-bit dynamic key2 is randomly generated in the handset. Encryption of key2 with key1 generates key2 ciphertext and encryption of key1 with key0 generates key1 ciphertext. Key2 ciphertext and key1 ciphertext may be included in the lock control request. In addition, the lock control request may further include a status flag requesting unlocking or locking.

In step S184, after the vehicle end receives the lock control request again, the ciphertext in the request may be decrypted by using the dynamic keys key0 and key1 temporarily stored by the vehicle end. After decryption and matching are successful, the vehicle end can return a response that the lock is opened/closed again to the mobile phone.

Specifically, decrypting key1 ciphertext with key0 results in key 1. And comparing whether the key1 obtained by decoding is the same as the dynamic key1 received in the previous step. If the same, the matching is successful, the vehicle lock can be allowed to be set to the unlocking state or the locking state of the current request. After the matching is successful, key2 ciphertext is decrypted using key1 to obtain key 2. The activation code is deleted at the vehicle end, and the key1 and the key2 are temporarily saved.

And step S185, the user sends the vehicle lock control request to the vehicle end again through the mobile phone.

Keys 1 and 2 are temporarily stored in the cellular phone. A 128-bit dynamic key3 is randomly generated in the handset. Encryption of key3 with key2 generates key3 ciphertext and encryption of key2 with key1 generates key2 ciphertext. Key3 ciphertext and key2 ciphertext may be included in the lock control request. In addition, the lock control request may further include a status flag requesting unlocking or locking.

In step S186, after the vehicle end receives the lock control request again, the ciphertext in the request may be decrypted by using the activation code and the key0 temporarily stored by the vehicle end. After decryption and matching are successful, the vehicle end can return a response that the lock is opened/closed again to the mobile phone.

Specifically, decrypting key2 ciphertext with key1 results in key 2. And comparing whether the key2 obtained by decoding is the same as the dynamic key2 received in the previous step. If the same, the matching is successful, the vehicle lock can be allowed to be set to the unlocking state or the locking state of the current request. After the matching is successful, key3 ciphertext is decrypted using key2 to obtain key 3. The activation code is deleted at the vehicle end, and the key2 and the key3 are temporarily saved.

In the subsequent lock opening and closing process, similar to the steps S185 and S186, the vehicle end decrypts and pairs the ciphertext in the vehicle lock control request received again by using the group of temporarily stored dynamic keys, and updates the temporarily stored keys after success.

In this scenario, the vehicle end may be offline. The controller at the vehicle end can play and replay the data by temporarily storing a group of secret keys and a secret key newly obtained from the mobile phone, and comparing the three values, so that the safety performance is high.

Scene four: the key is retrieved.

As shown in fig. 19, the key recovery process may include the following steps:

step S191, the cloud can send a message for forbidding authorization to the original mobile phone, and the authorization before invalidation is carried out. This step can be initiated by the cloud, or the terminal can determine whether to initiate the step.

For example, if the original mobile phone is lost or replaced and the authorization before invalidation is desired, the cloud terminal receives a loss report request sent by the new mobile phone of the automobile owner and sends a message for forbidding authorization to the original mobile phone. Of course, there are various loss reporting methods, such as reporting loss by telephone, reporting loss after logging in the owner account through a website, reporting loss by a mobile phone, and the like.

Step S192, the user uses the new mobile phone to send a re-authentication request to the cloud. Various identity information of the user may be included in the re-authentication request, for example: a registered account number, some documentation of additional authentication, etc.

And step S193, after the cloud authentication is successful, an authentication result response can be returned to the new mobile phone. If a successful response is made, a new activate code may be brought in. If the response is failure, the new mobile phone needs to continue authentication until the new activation code can not be received through authentication.

The cloud end can select the new activation code from the activation code books corresponding to the user and the vehicle end. After selection, the new activate code may be deleted from the cloud's activate codebook.

In step S194, after receiving the new activation code, the new mobile phone may re-execute the activation procedure, see the related description of scenario two. After the activation is successful, the new mobile phone can control the lock state of the vehicle end. The control flow can be seen from the related description of scenario three.

Scene five: and selling the second-hand cars.

As shown in fig. 20, the key change process in the used vehicle sales scenario may include the following steps:

step S201, the user sends a vehicle owner changing request to the cloud through the mobile phone.

In this step, the original owner may send an owner change request to the cloud via the mobile phone, or the new owner may send an owner change request to the cloud via the mobile phone.

For the original owner, the original owner can request to release the binding relation between the original owner and the vehicle terminal and between the original owner and the activated codebook through the owner changing request. For a new owner, the functions of new user registration, new user complaint and the like can be realized through the owner change request. Under the condition that the original owner does not actively remove the binding relationship, the new owner can request the cloud to forcibly remove the original binding relationship and establish the binding relationship between the account of the new owner and the vehicle end and the activated codebook of the new owner. In order to ensure the safety of the transaction, the new owner of the vehicle also needs to upload the account information of the new owner of the vehicle and various certification documents such as the second-hand vehicle purchasing contract to the cloud for verification.

Step S202, after the cloud successfully resets the binding relationship, an activation code can be taken from the activation codebook and sent to the mobile phone of the new owner.

Step S203, after the mobile phone of the new owner receives the activation code, the activation process may be executed again, see the related description of scenario two. After the activation is successful, the mobile phone of the new owner can control the lock state of the vehicle end. The control flow can be seen from the related description of scenario three.

In this scenario, the vehicle end may be offline. When the original car owner is not matched in time, the new car owner can also be bound through the cloud, so that the mobile phone key of the original car owner is invalid.

Scene six: and replacing the controller at the vehicle end.

As shown in fig. 21, if the controller at the vehicle end is damaged, unstable in function, or the like for some reason, it needs to be replaced. After the replacement, the initialization and activation processes need to be executed again by the mobile phone and the vehicle end, which may specifically include the following steps:

step S211, the user sends a reinitialization request to the cloud via the mobile phone, and uploads the identity information of the user, such as account information and some certification documents for additional authentication, to the cloud, so as to reinitialize the bluetooth key in the mobile phone.

Step S212, after the cloud authentication is passed, the vehicle owner may be bound with the new controller of the vehicle end, and the activation code information of the vehicle end is reset. The cloud end can reallocate an activation codebook for the vehicle owner and the new controller of the vehicle end, and can also acquire the original activation codebook of the vehicle owner. And takes an activate code from the activate code book to assign to the owner of the vehicle. The activation codebook and activation code are sent to the handset, for example, by a successful response.

Step S213, the user re-executes the initialization and activation process through the mobile phone. Specifically, the user retransmits the activation codebook to the vehicle end through a mobile phone. The activation codebook is saved in the new controller at the vehicle end, see scenario one. Then, the mobile phone is reactivated by using the received activate code, as shown in scenario two. After the activation is successful, the user can interact with the new controller of the vehicle end through the mobile phone to control the lock state of the vehicle end. The control flow can be seen from the related description of scenario three.

In this scenario, the vehicle end may be offline.

Scene seven: borrowing the vehicle.

As shown in fig. 22, the borrowing process may include the following steps:

and step S221, the borrower sends a registration request to the cloud through the mobile phone.

And step S222, if the registration is successful, the cloud end sends a successful response to the mobile phone of the borrower.

Step S223, the mobile phone of the borrower sends a borrowing request to the cloud, wherein the borrowing request comprises the information of the borrower. In addition, the request for borrowing the vehicle may also include an authority application, for example, the request for borrowing the vehicle needs to be borrowed for several days.

And S224, the cloud sends a vehicle borrowing message to the mobile phone of the vehicle owner, wherein the vehicle borrowing message comprises the information of the vehicle owner.

Step S225, the owner mobile phone may check the information of the person borrowing, thereby determining whether to authorize the vehicle borrowing and the authority information of the vehicle borrowing. For example, the length of time allowed for use by the cyclist, etc. The vehicle owner mobile phone can return a vehicle borrowing response to the cloud. If the owner agrees to borrow the vehicle, the borrowing response can include authorization attributes such as the confirmation authority and the time.

Step S226, after receiving the authorization response, the cloud end can take out an activation code from the activation code book of the vehicle end, and sends the activation code, the authority, the private key signature and the like to the mobile phone of the borrower. And the cloud can delete the taken activation code from the activation codebook.

Step S227, the mobile phone of the borrower can re-execute the key activation process, see scene two. After the activation is successful, the user can control the lock state of the vehicle end through the mobile phone of the person. The control flow can be seen from the related description of scenario three.

In this scenario, the vehicle end may be offline.

And eighth scene: the borrowing is cancelled.

As shown in fig. 23, the process of canceling the vehicle borrowing may include the following steps:

step S231, the vehicle owner mobile phone sends a request for canceling the vehicle borrowing to the cloud, and requests the cloud to cancel the vehicle borrowing authorization.

And step S232, the cloud sends a vehicle borrowing cancellation message to the vehicle end, the vehicle end is instructed to cancel the authorization of the vehicle borrower, and the vehicle borrower is prohibited from controlling the vehicle lock through the mobile phone.

In step S233, the vehicle end feeds back the result of cancelling the vehicle borrowing, such as the successful cancelling or the failed cancelling, to the cloud end.

And step S234, if the vehicle borrowing is successfully cancelled, the cloud end sends a notification message for cancelling the authorization to the mobile phone of the borrower so as to notify the borrower that the vehicle borrowing authority of the vehicle end of the mobile phone is cancelled. The mobile phone of the borrower can display a cancel prompt.

And step S235, the cloud sends a vehicle borrowing cancellation response to the mobile phone of the vehicle owner so as to feed back the current cancellation state to the vehicle owner. Such as revocation success or revocation failure, etc.

In this scenario, the vehicle end may be offline. However, if the mobile phone of the owner or the borrower cannot be networked, the cancellation of the vehicle borrowing authorization may not be effective in real time.

The slave vehicle lock control method provided by the embodiment of the invention has the following advantages:

1. when leaving the factory, the unified safe transmission SDK and the public key are preset in the Bluetooth controller at the vehicle end, so that off-line configuration is not needed in the vehicle production link.

2. And the user owner is successfully registered and the key initialization is carried out after the user owner passes the owner authentication. The cloud generates an activation codebook for the vehicle, and binds the vehicle owner, the vehicle and the activation codebook.

3. The cloud end generates, manages and distributes an activation codebook (an activation code set), so that the activation codebook of each vehicle is not repeated, and one vehicle with one secret is realized. Because each vehicle has a set of activation codebooks, one vehicle is cracked, and the safety of other vehicles is not influenced.

4. When the vehicle key is activated, the activation code of one key is transmitted to the vehicle end by using the mobile phone, and the vehicle end deletes the record in the activation codebook after verifying that the activation code of the key is in the activation codebook range. Therefore, burning after reading is realized, hidden danger of theft is eliminated, and the key can be safely authorized and shared. In addition, in the activation process, the local mobile phone and the vehicle end can interact through Bluetooth, and a vehicle does not need to have a moving signal.

5. The vehicle may be initialized and the key activated for the first time the key is used. It need not precede: for example, when the vehicle is off-line, the personalized configuration of the vehicle key is carried out, so that the process is simplified, and the cost is saved.

6. The activation code and the key are separated to bear the roles of different stages, and after the vehicle key is successfully activated, the locking and unlocking operation is carried out by using a new key which is continuously changed and exchanged on the basis of the activation code, so that the method is a code rolling algorithm. The unique dynamic key algorithm is used for protecting business functions, so that the locking and unlocking process is safer. In the locking and unlocking process, the mobile phone App and the vehicle end interact through local Bluetooth without a moving signal.

Fig. 24 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention. The device may be located in a vehicle end, such as a controller. As shown in fig. 24, the apparatus may include:

a first receiving module 241, configured to receive and store an activation code set from a vehicle owner terminal, where the activation code set is obtained by the vehicle owner terminal from a server, and the activation code set includes a plurality of activation codes allocated by the server to the vehicle owner terminal;

a second receiving module 242, configured to receive a first activation request from the owner terminal, where the first activation request includes a first activation code;

a first activation module 243, configured to activate the owner terminal using the set of activation codes and the first activation code;

a first control module 244 for determining whether to allow the owner terminal to control the vehicle lock using the first activation code.

In one implementation, the first receiving module 241 is further configured to receive an initialization request from the owner terminal, where the initialization request includes the set of activation codes signed by a private key; and verifying the private key signature of the activation code set by using a public key preset at the vehicle end, and storing the activation code set after the verification is passed.

In one implementation, the first activation module 243 is further configured to determine that the activation of the vehicle key function of the vehicle owner terminal is successful if the first activation code belongs to the activation code set; deleting the first activate code that has been used from the set of activate codes.

In one implementation, the first activation request further includes a first dynamic key, and the first control module 244 is further configured to:

receiving a first vehicle lock control request from the vehicle owner terminal, wherein the first vehicle lock control request comprises a first ciphertext, a second ciphertext and a target state;

if the vehicle end temporarily stores the first activation code and the first dynamic secret key, decrypting the first ciphertext by using the first activation code;

if the decrypted secret key is the same as the first dynamic secret key, controlling the vehicle lock to be in the target state, and decrypting the second ciphertext by using the first dynamic secret key to obtain a second dynamic secret key;

and deleting the first activation code and temporarily storing the second dynamic secret key.

In one implementation, the first control module 244 is further configured to:

receiving a second lock control request from the owner terminal, wherein the second lock control request comprises a third ciphertext, a fourth ciphertext and a target state;

if a third dynamic secret key and a fourth dynamic secret key are temporarily stored in the vehicle end, decrypting the third ciphertext by using the third dynamic secret key;

if the decrypted secret key is the same as the fourth dynamic secret key, controlling the vehicle lock to be in the target state, and decrypting the fourth ciphertext by using the fourth dynamic secret key to obtain a fifth dynamic secret key;

deleting the third dynamic key and temporarily storing the fifth dynamic key.

Fig. 25 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention. As shown in fig. 25, the apparatus may include:

a third receiving module 250, configured to receive an activation code set and a first activation code from a server, where the activation code set includes multiple activation codes allocated by the server to a vehicle owner terminal;

a first sending module 251, configured to send the set of activation codes to a vehicle end, so as to save the set of activation codes at the vehicle end;

a second sending module 252, configured to send a first activation request to the vehicle end, where the first activation request includes the first activation code, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code.

In one implementation manner, the first sending module 251 is further configured to send an initialization request to the vehicle end, where the initialization request includes the activation code set signed by a private key, and the initialization request is used to enable the vehicle end to verify the private key signature of the activation code set by using a preset public key, and store the activation code set after the verification is passed.

In one implementation, the first activation request further includes a first dynamic key, and as shown in fig. 26, the apparatus further includes:

the third sending module 253 is further configured to send a first lock control request to the vehicle end, where the first lock control request includes a first ciphertext, a second ciphertext and a target state, the first ciphertext includes a first dynamic key encrypted by using the first activation code, and the second ciphertext includes a second dynamic key encrypted by using the first dynamic key.

In one implementation, the apparatus further comprises:

the fourth sending module 254 is further configured to send a second lock control request to the vehicle end, where the second lock control request includes a third ciphertext, a fourth ciphertext and a target state, the third ciphertext includes a fourth dynamic key encrypted by using the third dynamic key, and the fourth ciphertext includes a fifth dynamic key encrypted by using the fourth dynamic key.

In one implementation, the apparatus further includes a first re-authentication module 261. The first re-authentication module 261 is configured to:

sending a re-authentication request to the server, wherein the re-authentication request comprises the identity information of the owner terminal requesting re-authentication;

receiving an authentication result response returned by the server, wherein if the identity information is authenticated successfully, the authentication result response comprises a second activation code, and the second activation code is selected from the activation code set by the server;

and sending a second activation request comprising a second activation code to the vehicle end, wherein the second activation request is used for enabling the vehicle end to activate the re-authenticated vehicle owner terminal by using the second activation code.

In one implementation, the apparatus further includes a first vehicle main change module 262. The first vehicle main transformation module 262 is configured to:

sending an owner changing request to the server side, wherein the owner changing request comprises identity information of an owner terminal requesting changing;

receiving an owner change response returned by the server, wherein if the change is successful, the owner change response comprises a third activation code, and the third activation code is selected from the activation code set by the server;

and sending a third activation request comprising the third activation code to the vehicle end, wherein the third activation request is used for enabling the vehicle end to activate the changed vehicle owner terminal by using the third activation code.

In one implementation, the apparatus further includes a first borrowing module 263. The first vehicle borrowing module 263 is configured to:

receiving a vehicle borrowing request from the server side, wherein the vehicle borrowing request comprises identity information of a vehicle borrowing terminal requesting to borrow a vehicle;

sending a vehicle borrowing response to the server side according to the identity information and the permission application of the vehicle borrowing terminal, wherein the vehicle borrowing response comprises permission information authorizing the vehicle borrowing terminal to use the vehicle side;

the vehicle borrowing response is used for enabling the server to send a vehicle borrowing permission message to the vehicle borrowing terminal, wherein the vehicle borrowing permission message comprises a fourth activation code and the authority information, and the fourth activation code is selected from the activation code set by the server;

the vehicle borrowing permission information is used for enabling the vehicle borrowing terminal to send a fourth activation request comprising a fourth activation code to the vehicle end, and the fourth activation request is used for enabling the vehicle end to activate the vehicle borrowing terminal by utilizing the fourth activation code.

In one implementation, the apparatus further includes a first revocation lending module 264. The first revocation lending module 264 is configured to:

sending a cancellation vehicle borrowing request to the server side, wherein the cancellation vehicle borrowing request is used for requesting the server side to send a cancellation vehicle borrowing message to the vehicle side, and the cancellation vehicle borrowing message is used for enabling the vehicle side to forbid the vehicle borrowing terminal to control the vehicle lock;

and receiving a vehicle borrowing cancellation response returned by the server, wherein the vehicle borrowing cancellation response comprises the state of whether the vehicle borrowing is successfully cancelled or not.

Fig. 27 is a block diagram showing the structure of a vehicle lock control device according to an embodiment of the present invention. As shown in fig. 27, the apparatus may include:

a first selecting module 271, configured to select a first activation code from an activation code set of a vehicle owner terminal, where the activation code set includes a plurality of activation codes allocated by the server to the vehicle owner terminal;

a fifth sending module 272, configured to send the activation code set and the first activation code to the vehicle owner terminal, and send the activation code set and the first activation code to the vehicle end through the vehicle owner terminal, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code.

In one implementation, as shown in fig. 28, the apparatus further includes a second re-authentication module 281. The second re-authentication module 281 is configured to:

receiving a re-authentication request from a re-authenticated owner terminal, wherein the re-authentication request comprises identity information of the owner terminal requesting re-authentication;

if the identity information is successfully authenticated, selecting a second activation code from the activation code set;

and returning an authentication result response comprising the second activation code to the re-authenticated owner terminal, wherein the authentication result response is used for enabling the re-authenticated owner terminal to send a second activation request comprising the second activation code to the vehicle end, and the second activation request is used for enabling the vehicle end to activate the re-authenticated owner terminal by using the second activation code.

In one implementation, the apparatus further includes a second main transformation module 282. The second main transformation module 282 is configured to:

receiving an owner change request from a new owner terminal, wherein the owner change request comprises identity information of an owner terminal requesting to change;

if the change is successful, selecting a third activation code from the activation code set;

and returning an owner change response comprising the third activation code to the changed owner terminal, wherein the owner change response is used for enabling the changed owner terminal to send a third activation request comprising the third activation code to the vehicle end, and the third activation request is used for enabling the vehicle end to activate the changed owner terminal by using the third activation code.

In one implementation, the apparatus further includes a second borrowing module 283. The second lending module 283 is configured to:

receiving a vehicle borrowing request from a vehicle borrowing terminal, wherein the vehicle borrowing request comprises identity information and permission application of the vehicle borrowing terminal requesting to borrow a vehicle;

sending a car borrowing message to the car owner terminal, wherein the car borrowing message comprises identity information of the car borrowing terminal;

receiving an authorization response from the owner terminal, wherein the authorization response comprises authority information for authorizing the borrowing terminal to use the vehicle end;

selecting a fourth activate code from the activate code set;

sending a vehicle borrowing permission message comprising the fourth activation code and the permission information to the vehicle borrowing terminal;

the vehicle borrowing permission message is used for enabling the vehicle borrowing terminal to send a fourth activation request comprising a fourth activation code to the vehicle end, and the fourth activation request is used for enabling the vehicle end to activate the vehicle borrowing terminal by utilizing the fourth activation code.

In one implementation, the apparatus further includes a second recall lending module 284. The second revocation lending module 284 is configured to:

receiving a request for canceling the vehicle borrowing of the vehicle owner terminal;

sending a cancellation vehicle borrowing message to the vehicle end, wherein the cancellation vehicle borrowing message is used for enabling the vehicle end to forbid the vehicle borrowing terminal to control the vehicle lock;

receiving a vehicle borrowing cancellation result message returned by the vehicle end, wherein the vehicle borrowing cancellation result message comprises the state of whether the vehicle borrowing is successfully cancelled or not;

sending a car borrowing cancellation notification to the car borrowing terminal, wherein the car borrowing cancellation notification comprises the state of whether car borrowing is successfully cancelled or not;

and sending a vehicle borrowing cancellation response to the vehicle owner terminal, wherein the vehicle borrowing cancellation response comprises the state of whether the vehicle borrowing is successfully cancelled or not.

The functions of each module in each apparatus in the embodiments of the present invention may refer to the corresponding description in the above method, and are not described herein again.

Fig. 29 is a block diagram showing the construction of a vehicle lock control device according to an embodiment of the present invention. As shown in fig. 29, the apparatus includes: a memory 910 and a processor 920, the memory 910 having stored therein computer programs operable on the processor 920. The processor 920 implements the lock control method in the above embodiments when executing the computer program. The number of the memory 910 and the processor 920 may be one or more.

The device also includes:

and a communication interface 930 for communicating with an external device to perform data interactive transmission.

Memory 910 may include high-speed RAM memory, and may also include non-volatile memory (non-volatile memory), such as at least one disk memory.

If the memory 910, the processor 920 and the communication interface 930 are implemented independently, the memory 910, the processor 920 and the communication interface 930 may be connected to each other through a bus and perform communication with each other. The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 29, but this does not mean only one bus or one type of bus.

Optionally, in an implementation, if the memory 910, the processor 920 and the communication interface 930 are integrated on a chip, the memory 910, the processor 920 and the communication interface 930 may complete communication with each other through an internal interface.

An embodiment of the present invention provides a computer-readable storage medium, which stores a computer program, and the computer program is used for implementing the method of any one of the above embodiments when being executed by a processor.

In the description herein, references to the description of the term "one embodiment," "some embodiments," "an example," "a specific example," or "some examples," etc., mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples. Furthermore, various embodiments or examples and features of different embodiments or examples described in this specification can be combined and combined by one skilled in the art without contradiction.

Furthermore, the terms "first", "second" and "first" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one such feature. In the description of the present invention, "a plurality" means two or more unless specifically defined otherwise.

Any flow or method descriptions in flow charts or otherwise described herein may be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps of the flow, and alternate implementations are included within the scope of the preferred embodiment of the present invention in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present invention.

The logic and/or steps represented in the flowcharts or otherwise described herein, e.g., an ordered listing of executable instructions that can be considered to implement logical functions, can be embodied in any computer-readable medium for use by or in connection with an instruction execution system, apparatus, or device, such as a computer-based system, processor-containing system, or other system that can fetch the instructions from the instruction execution system, apparatus, or device and execute the instructions. For the purposes of this description, a "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of the computer-readable medium would include the following: an electrical connection (electronic device) having one or more wires, a portable computer diskette (magnetic device), a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable read-only memory (CDROM). Additionally, the computer-readable medium could even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via for instance optical scanning of the paper or other medium, then compiled, interpreted or otherwise processed in a suitable manner if necessary, and then stored in a computer memory.

It should be understood that portions of the present invention may be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, the various steps or methods may be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, any one or combination of the following techniques, which are known in the art, may be used: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application specific integrated circuit having an appropriate combinational logic gate circuit, a Programmable Gate Array (PGA), a Field Programmable Gate Array (FPGA), or the like.

It will be understood by those skilled in the art that all or part of the steps carried by the method for implementing the above embodiments may be implemented by hardware capable of instructing relevant hardware to complete through a program, and the program may be stored in a computer readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

In addition, functional units in the embodiments of the present invention may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a separate product, may also be stored in a computer readable storage medium. The storage medium may be a read-only memory, a magnetic or optical disk, or the like.

The above description is only for the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive various changes or substitutions within the technical scope of the present invention, and these should be covered by the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the appended claims.

Claims

1. A vehicle lock control method is characterized by comprising the following steps:

receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code and a first dynamic secret key;

and determining whether the owner terminal is allowed to control the vehicle lock or not by using the first activation code and the first dynamic secret key.

2. The method of claim 1, wherein receiving and saving the set of activation codes from the owner terminal comprises:

receiving an initialization request from the owner terminal, wherein the initialization request comprises the activation code set signed by a private key;

and verifying the private key signature of the activation code set by using a public key preset at the vehicle end, and storing the activation code set after the verification is passed.

3. The method of claim 1, wherein activating the owner terminal using the set of activate codes and the first activate code comprises:

if the first activation code belongs to the activation code set, determining that the vehicle key function of the vehicle owner terminal is successfully activated;

deleting the first activate code that has been used from the set of activate codes.

4. The method of claim 1, wherein the determining whether to allow the owner terminal to control the vehicle lock using the first activate code and the first dynamic key comprises:

5. The method of any of claims 1 to 4, further comprising:

deleting the third dynamic key and temporarily storing the fifth dynamic key.

6. A vehicle lock control method is characterized by comprising the following steps:

and sending a first activation request to the vehicle end, wherein the first activation request comprises the first activation code and a first dynamic secret key, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code, and the vehicle end determines whether to allow the vehicle owner terminal to control the vehicle lock by using the first activation code and the first dynamic secret key.

7. The method of claim 6, wherein sending the set of activation codes to a vehicle end comprises:

and sending an initialization request to the vehicle end, wherein the initialization request comprises the activation code set signed by a private key, and the initialization request is used for enabling the vehicle end to verify the private key signature of the activation code set by using a preset public key and storing the activation code set after the verification is passed.

8. The method of claim 6, further comprising:

and sending a first vehicle lock control request to the vehicle end, wherein the first vehicle lock control request comprises a first ciphertext, a second ciphertext and a target state, the first ciphertext comprises a first dynamic secret key encrypted by using a first activation code, and the second ciphertext comprises a second dynamic secret key encrypted by using the first dynamic secret key.

9. The method of claim 6, further comprising:

and sending a second lock control request to the vehicle end, wherein the second lock control request comprises a third ciphertext, a fourth ciphertext and a target state, the third ciphertext comprises a fourth dynamic secret key encrypted by using the third dynamic secret key, and the fourth ciphertext comprises a fifth dynamic secret key encrypted by using the fourth dynamic secret key.

10. The method of any of claims 6 to 9, further comprising:

11. The method of any of claims 6 to 9, further comprising:

12. The method of any of claims 6 to 9, further comprising:

13. The method of claim 12, further comprising:

14. A vehicle lock control method is characterized by comprising the following steps:

selecting a first activation code from an activation code set of a vehicle owner terminal, wherein the activation code set is acquired by the vehicle owner terminal from a server side and comprises a plurality of activation codes distributed to the vehicle owner terminal by the server side;

15. The method of claim 14, further comprising:

16. The method of claim 15, further comprising:

17. The method of claim 16, further comprising:

selecting a fourth activate code from the activate code set;

18. The method of claim 17, further comprising:

19. A vehicle lock control device, comprising:

the second receiving module is used for receiving a first activation request from the owner terminal, wherein the first activation request comprises a first activation code and a first dynamic secret key;

and the first control module is used for determining whether the owner terminal is allowed to control the vehicle lock or not by utilizing the first activation code and the first dynamic secret key.

20. The apparatus of claim 19, wherein the first control module is further configured to:

21. The apparatus of claim 19 or 20, wherein the first control module is further configured to:

deleting the third dynamic key and temporarily storing the fifth dynamic key.

22. A vehicle lock control device, comprising:

the second sending module is configured to send a first activation request to the vehicle end, where the first activation request includes the first activation code and a first dynamic key, so that the vehicle end activates the vehicle owner terminal by using the activation code set and the first activation code, and the vehicle end determines whether to allow the vehicle owner terminal to control the vehicle lock by using the first activation code and the first dynamic key.

23. The apparatus of claim 22, further comprising:

the third sending module is further configured to send a first vehicle lock control request to the vehicle end, where the first vehicle lock control request includes a first ciphertext, a second ciphertext and a target state, the first ciphertext includes a first dynamic key encrypted by using the first activation code, and the second ciphertext includes a second dynamic key encrypted by using the first dynamic key.

24. The apparatus of claim 23, further comprising:

the fourth sending module is further configured to send a second lock control request to the vehicle end, where the second lock control request includes a third ciphertext, a fourth ciphertext and a target state, the third ciphertext includes a fourth dynamic key encrypted by using the third dynamic key, and the fourth ciphertext includes a fifth dynamic key encrypted by using the fourth dynamic key.

25. The apparatus according to any one of claims 22 to 24, further comprising a first reauthentication module configured to:

26. The apparatus of any one of claims 22 to 24, further comprising a first vehicle change module for:

27. The apparatus of any one of claims 22 to 24, further comprising a first lending module configured to:

28. The apparatus of claim 27, further comprising a first recall lending module configured to:

29. A vehicle lock control device, comprising:

the system comprises a first selection module, a second selection module and a third selection module, wherein the first selection module is used for selecting a first activation code from an activation code set of a vehicle owner terminal, the activation code set is acquired by the vehicle owner terminal from a server, and the activation code set comprises a plurality of activation codes distributed to the vehicle owner terminal by the server;

and the fifth sending module is used for sending the activation code set and the first activation code to the vehicle owner terminal, and sending the activation code set and the first activation code to the vehicle end through the vehicle owner terminal so that the vehicle end utilizes the activation code set and the first activation code to activate the vehicle owner terminal.

30. The apparatus of claim 29, further comprising a second re-authentication module configured to:

31. The apparatus of claim 29, further comprising a second main change module configured to:

32. The apparatus of claim 29, further comprising a second borrowing module configured to:

selecting a fourth activate code from the activate code set;

33. The apparatus of claim 32, further comprising a second recall lending module configured to:

34. A vehicle lock control device, comprising:

one or more processors;

storage means for storing one or more programs;

the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method of any of claims 1-18.

35. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out the method according to any one of claims 1 to 18.