KR102232966B1 - Un-tact digital key service system and method thereof - Google Patents

Abstract

The present invention relates to a non-face-to-face digital key service system and a method thereof. According to an embodiment of the present invention, provided is an advanced ′non-face-to-face digital key sharing platform′, wherein based on a TEE/WBC-based mobile security technology and a digital key-related know-how, a virtual digital key applet applied with a CCC standard is applied to a smartphone. The non-face-to-face digital key service system includes: a digital key device comprising a virtual embedded secure element for a digital key storage; a lock terminal equipped with a digital key function module which is locked or unlocked by a digital key to which a digital key standard is applied; and a digital key server which issues and manages the digital keys by linking digital key devices and lock terminals.

Description

Non-face-to-face digital key service system and method thereof {Un-tact digital key service system and method thereof}

The present invention relates to a mobile security technology, and more particularly, to a digital key service providing technology using a mobile security technology and a digital key control technology.

Attempts to digitize physical keys and store them in smart phones have been discussed since the early days of smart phones, and as a result, various services such as telematics services, smart living, and digital door locks have been provided.

However, these services are not a method of storing and using a key directly in the smartphone due to problems such as the security of the smartphone itself, but when the authentication device (vehicle or door lock) transmits authentication information through the Internet, the server authenticates. It is a service that can be registered and authenticated only through short-range communication such as Bluetooth or the like.

In various sharing economy services other than vehicles, although interest in non-face-to-face services has steadily increased, proper non-face-to-face services were not provided due to the complexity of implementation and the absence of a dominant business operator or organization, unlike financial sectors that only process electronic information. However, due to the global pandemic of COVID-19 in 2020, interest in non-face-to-face services has greatly increased throughout this sharing economy.

Korean Patent Publication 10-175214 (2017.07.06)

The present invention was conceived to solve the problem, and based on TEE/WBC-based mobile security technology and digital key-related know-how, a'non-face-to-face digital key sharing platform' was developed and applied to a virtual digital key applet to which the CCC standard was applied. It has its purpose to provide.

A non-face-to-face digital key service providing system according to an embodiment includes a digital key device including a virtual embedded security element for storing a digital key, a lock terminal locked or unlocked by a digital key, a digital key device and a lock It includes a digital key server that issues and manages digital keys in connection with terminals.

The virtual embedded security element may be a software security element that performs a USIM (Embedded Universal Subscriber Identity Module: eSIM) function.

The digital key device includes an operating system including a communication interface for performing wireless communication between the digital key device and the lock terminal, and a virtual embedded security element system executed on software, and the virtual embedded security element system includes a digital key app and a digital key. It includes a digital key framework that provides APIs used by the key app, parings a digital key with a locked terminal, and performs key sharing and key management, and a digital key applet that stores digital keys and performs security functions. I can.

The digital key applet is a first digital key applet that stores a digital key based on a Trusted Execution Environment (TEE) or White Box Cryptography (WBC) security medium, and performs a locking or unlocking function and a security function of a locked terminal using a digital key. It may include.

The digital key applet works as a virtual embedded security element by applying the function performed in the security element in the digital key device of the vehicle digital key standard to the TEE or WBC security medium, storing the digital key and locking it using the digital key. It may include a second digital key applet that performs a locking or unlocking function and a security function of the terminal.

The second digital key applet can communicate non-face-to-face with the vehicle through a digital key framework through a standard interface.

The communication interface may include at least one of NFC, HCE, BLE, and UWB interfaces.

A method of providing a non-face-to-face digital key service using a digital key device according to another embodiment includes: providing a digital key device including a virtual embedded security element for storing a digital key: providing a lock terminal-digital key device interlocking start screen Wow, when the connection request is selected by a user action on the lock terminal-digital key device linking start screen, activating the NFC function of the digital key device, and connecting the first NFC session between the locked terminal and the digital key device, and the digital key And generating a second NFC session between the locked terminal and the digital key device and authenticating the vehicle.

The step of connecting the first NFC session between the locked terminal and the digital key device and generating a digital key may include: establishing a secure channel between the locked terminal and a digital key device; Generating a digital key pair of the locked terminal; And generating a digital key by receiving key generation information from the locked terminal in the digital key device.

The step of connecting the second NFC session between the locked terminal and the digital key device and authenticating the vehicle includes: setting up an NFC link, selecting an applet AID, a standard transaction, and terminating the NFC link; and implementing the digital key constituting the locked terminal If the applet's security element is non-face-to-face, transactions can be performed.

After the step of connecting the second NFC session between the locked terminal and the digital key device and authenticating the vehicle, NFC link setup, standard transaction, KT (Key Tracking) Receipt check, and NFC link termination step; can be repeatedly performed. have.

After the step of connecting the second NFC session between the locking terminal and the digital key device and authenticating the vehicle, when checking the KT Receipt while repeating from the NFC link setup to the NFC link termination, the KTS response is sent from the digital key server to the locking terminal. It can be transferred to the smart phone and stored in the security element (SE) of the locking terminal.

As described above, the present invention is a digital key service development using a digital key device such as a smart phone, and a digital key applying the CCC standard based on the existing TEE/WBC-based mobile security technology and digital key-related know-how. Applet can be developed and applied, and extended to smartphones to provide an advanced'non-face-to-face digital key sharing platform' that additionally applies a smart watch.

Unlike digital key services that are currently in commercial service, a system specialized for each service provider needs to be built, but the advanced'non-face-to-face digital key sharing platform' is a vehicle, ship, door equipped with a digital key function module applied with the CCC standard. Various industries that provide standardized domestic and international safe digital key services and mobility-based additional services by implementing a function to easily issue and share digital keys non-face-to-face for services that use various IoT terminals such as door locks. Can be expanded into fields.

It is possible to create added value of the industry by deploying it as a service using a digital key sharing platform in industries related to life, such as door locks that can be used by manipulating IOT devices, building access control systems, cruises that require key sharing for rental, and Airbnb.

The illustrated “non-face-to-face digital key sharing platform” according to an embodiment is expected to have the following effects.

1) Un-tact sharing function can contribute to the effect of creating a new service market in a market environment that is transformed into an un-tact economy.

2) A non-face-to-face security industry foundation can be established that can supplement and resolve security vulnerabilities and threats of non-face-to-face services that are urgently prepared due to the Corona 19 pendemic.

3) It is possible to lay the foundation for easily converting direct contact and touch authentication environment services into non-touch service types.

4) In the movement of decoupling the global economic and industrial cooperation structure, it is possible to build an independent standard security platform.

5) Even in the sharing economy platform environment, which is growing in tandem with environmental changes, the non-face-to-face digital key sharing platform induces the formation of a reasonable price centered on the value of each service, so that both providers and consumers can create reasonable value transactions.

(6) As an identity authentication platform that allows users to authenticate each other in the use of services according to the development of a non-face-to-face social environment, it is a platform that can expand services.

1 is a diagram showing the concept of a non-face-to-face digital key service system according to an embodiment of the present invention;
2 is a diagram showing the configuration of a non-face-to-face digital key service system according to an embodiment of the present invention;
3 is a view showing the configuration of a smart phone according to an embodiment of the present invention,
4 and 5 are diagrams illustrating a digital key registration process of an owner according to an embodiment of the present invention;
6 is a diagram illustrating a smartphone screen provided according to an interlocking process between a vehicle and a smartphone according to an embodiment of the present invention.

Since the description of the present invention is merely an embodiment for structural or functional description, the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, since the embodiments can be variously changed and have various forms, the scope of the present invention should be understood to include equivalents capable of realizing the technical idea.

Meanwhile, the meaning of the terms described in the present invention should be understood as follows.

Terms such as "first" and "second" are used to distinguish one component from other components, and the scope of rights is not limited by these terms. For example, a first component may be referred to as a second component, and similarly, a second component may be referred to as a first component.

When a component is referred to as being "connected" to another component, it should be understood that although it may be directly connected to the other component, another component may exist in the middle. On the other hand, when it is mentioned that a component is "directly connected" to another component, it should be understood that there is no other component in the middle. On the other hand, other expressions describing the relationship between components, that is, "between" and "just between" or "neighboring to" and "directly neighboring to" should be interpreted as well.

Singular expressions are to be understood as including plural expressions unless the context clearly indicates otherwise, and terms such as "comprises" or "have" refer to specified features, numbers, steps, actions, components, parts, or these. It is to be understood that it is intended to designate that a combination exists and does not preclude the presence or addition of one or more other features, numbers, steps, actions, components, parts, or combinations thereof.

In each step, the identification code (e.g., a, b, c, etc.) is used for convenience of explanation, and the identification code does not describe the order of each step, and each step has a specific sequence clearly in the context. Unless otherwise stated, it may occur differently from the stated order. That is, each of the steps may occur in the same order as the specified order, may be performed substantially simultaneously, or may be performed in the reverse order.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the field to which the present invention belongs, unless otherwise defined. Terms defined in commonly used dictionaries should be interpreted as having meanings in the context of related technologies, and cannot be interpreted as having an ideal or excessively formal meaning unless explicitly defined in the present invention.

Hereinafter, embodiments of the present specification will be described with reference to the accompanying drawings. It will be described in detail focusing on the parts necessary to understand the operation and operation according to the present specification. While describing the embodiments of the present specification, descriptions of technical contents that are well known in the technical field to which the present specification belongs and are not directly related to the present specification will be omitted. This is to more clearly convey the gist of the present specification by omitting unnecessary description.

In addition, in describing the constituent elements of the present specification, different reference numerals may be assigned to constituent elements of the same name according to the drawings, and the same reference numerals may be denoted even in different drawings. However, even in such a case, it does not mean that the corresponding component has different functions according to the embodiment, or that it has the same function in different embodiments, and the function of each component is the corresponding embodiment. It should be judged based on the description of each component in.

1 is a diagram illustrating a concept of a non-face-to-face digital key service system according to an embodiment of the present invention.

Referring to FIG. 1, a non-face-to-face digital key service system includes a digital key server (1), a digital key device (2), and a lock device (3). .

The digital key service according to an embodiment is provided by a user using a digital key through a digital key device 2 such as a smartphone 2-1, which is widely used due to the development of mobile communication technology. 3) It refers to a service that can operate, for example, lock/unlock. Through the digital key, the user can lock/unlock the lock terminal 3 using a digital key method.

The digital key device 2 may be a mobile terminal that a user can carry, such as a smart phone 2-1 or a smart watch. Hereinafter, in the specification, the smartphone 2-1 is mainly described as an example of the digital key device 2, but the present invention is not limited thereto.

The communication between the digital key device 2 and the lock terminal 3 is a non-face-to-face communication using wireless communication, and the lock terminal 3 can be operated with a digital key method using wireless communication.

The digital key server 1 has digital key control functions such as issuing, deleting, using and retrieving digital keys of the digital key device 2 and the lock terminal 3, and a device (digital key device, digital key device, Locked terminal) performs management functions including registration and deletion. Digital key issuance, deletion, and sharing are all performed in the digital key server 1. Furthermore, the digital key server (1) is a new service management, service provider management, CCC standard function development (Key Trace, etc.), device integrated management function, device-specific digital key life cycle management, security area management expansion, admin ) Functions, etc. can be performed.

The lock terminal 3 is a device that actually locks and unlocks with a digital key issued to the digital key device 2, and is a terminal equipped with a digital key function module. For example, it may be a vehicle (3-1), a door lock, an access control system, a cruise that requires key sharing for rental, and Airbnb.

The lock terminal 3 registers with the digital key server 1 to receive a digital key. Hereinafter, as an example of the locking terminal 3, the vehicle 3-1 is mainly described, but the present invention is not limited thereto.

When the lock terminal 3 is a vehicle 3-1, a vehicle digital key standard has been established around the CCC (Car Connectivity Consortium) to standardize the digital key. CCC is a global standardization association that establishes a standard for linking mobile and vehicles, and not only automobile manufacturers, but also global IT companies such as Apple and Samsung participate in the digital key standard for automobiles, a standard that can be used in most vehicles and smartphones in the future. It is expected to establish itself as a traditional technology.

The present invention is a digital key service development using a digital key device (2) such as a smartphone (2-1), and the CCC standard is applied based on the existing TEE/WBC-based mobile security technology and digital key-related know-how. A digital key applet has been developed and applied, and extended to a smartphone to provide an advanced'non-face-to-face digital key sharing platform' that additionally applies a smart watch.

Unlike digital key services that are currently in commercial service, a system specialized for each service provider needs to be built, whereas the advanced'non-face-to-face digital key sharing platform' is a vehicle equipped with a digital key function module applied with the CCC standard (3-1 ), ships, door locks, and other services that use various IoT terminals can easily issue and share digital keys in a non-face-to-face basis, providing standardized domestic and international safe digital key services and mobility-based additions. It enables the expansion to various industries serving as a service.

2 is a diagram illustrating a configuration of a non-face-to-face digital key service system according to an embodiment of the present invention.

1 and 2, the non-face-to-face digital key service system includes a digital key server (1), a smart phone (2-1), and a vehicle (3-1). Includes.

The digital key server (1) integrates digital key applets (24-1, 24-2) to support smart phones (2-1) and IoT terminals (e.g., digital key function modules). For example, it provides a basis for issuing, sharing, and deleting digital keys by linking the vehicle (3)). It is a platform base that enables non-face-to-face digital key sharing services easily by interlocking IoT terminals equipped with digital keys applying the CCC standard. The digital key server 1 is connected to the digital key app 20, the digital key framework 22, the second digital key applet 24-2, and the vehicle 3-1 through a proprietary interface. .

The digital key server 1 may perform functions provided by a vehicle manufacturer server (Vehicle OEM Server) and a device manufacturer server (Device OEM Server). For example, as a function provided by the vehicle manufacturer server, vehicle OEM Apps of the digital key device 2 are provided. As a function provided by the device manufacturer server, it provides Original Apps.

The smartphone 2-1 is one of digital key devices, and includes an operating system and a virtual embedded security element system. The operating system includes a communication interface 26 for performing contactless communication between the smartphone 2-1 and the vehicle 3-1. The communication interface 26 supports contactless communication between the smartphone 2-1 and the vehicle 3-1. For example, it supports UWB (Ultra-wideband), BLE (Bluetooth Low Energy), NFC (Near Frequency Communication), HCE (Host Card Emulation), etc. to lock/unlock the vehicle (3-1) and start the engine, etc. Can support.

The virtual embedded security element system of the smartphone (2-1) is virtually implemented, and the digital key app (20) provided by the digital key server (1), the digital key framework (Digital Key Framework) Key Framework (22), Digital Key Applet (24-1, 24-2).

The digital key app 20 is a smartphone app that provides a user UI for digital key generation and digital key life cycle management (termination, deletion, activation/deactivation). There are functions for key owners and key sharers. The digital key app 20 includes a native APP, a vehicle manufacturer app, and the like.

The digital key framework 22 is implemented by applying the CCC standard standard, and provides an application programming interface (API) used in the digital key app 20 to provide a digital key generation process and a digital key function module. It provides functions such as key pairing, key sharing, and key management with one IoT terminal (vehicle, ship, door lock, etc.). The digital key framework 22 may perform integrated management for the first digital key applet 24-1 and the second digital key applet 24-2.

The digital key framework 22 is a proprietary interface between the digital key app 20, the digital key server 1, the first digital key applet 24-1, and the second digital key applet 24-2. ), and can communicate with the vehicle 3-1 and the second digital key applet 24-2 through a standardized interface.

The first digital key applet 24-1 controls digital key storage, life cycle management, lock/unlock function, and related security algorithms based on TEE (Trusted Execution Environment) or WBC (White Box Cryptography) security media. It is a smart phone applet for security.

The second digital key applet 24-2 applies a function implemented in a security element in a smartphone according to the CCC standard to a TEE/WBC security medium to provide a virtual embedded secure element (Virtual embedded Secure Element (Virtual eSE, hereinafter referred to as'Virtual eSE)). It is a smart phone applet for security based on the CCC standard that operates as a function as'eSE'). In other words, in order to perform the SE applet function defined in the CCC standard standard, the TEE/WBC security medium is replaced with Virtual eSE. The second digital key applet 24-2 controls digital key generation, storage, life cycle management, lock/unlock functions, and related security algorithms. The Virtual eSE may be a software security element (SE) that implements an embedded Universal Subscriber Identity Module (eSIM) and related functions as S/W.

The second digital key applet 24-2 is a non-face-to-face communication (e.g., NFC/HCE, BLE, UWB) through the vehicle 3-1 and a standardized interface through the digital key framework 22. Communication).

The vehicle 3-1 is one of IoT terminals equipped with a digital key function module that is unlocked through a digital key. Examples of IoT terminals include ships and door locks in addition to vehicles.

3 is a diagram showing the configuration of a smart phone according to an embodiment of the present invention.

2 and 3, a smart phone 2-1, which is one of the digital key devices, includes a digital key app 20, a digital key framework 22, and a digital key applet 24-1 and 24-2. Includes.

To classify the configuration of the smartphone 2-1 on a layer, the digital key app 20 corresponds to the UI layer, the digital key framework 22 corresponds to the function layer, The digital key applets 24-1 and 24-2 correspond to the secure layer.

The digital key framework 22 is a first applet management unit 221 that manages and supports the first digital key applet 24-1 based on a TEE/WBC security medium, a first digital key applet defined in the CCC standard standard. A second applet management unit 222, a key management unit 223, and an integrated management unit 224 for managing and supporting (24-1) may be included.

The second applet management unit 222 performs functions defined in the CCC standard, a) digital key owner interlocking (Owner pairing), digital key sharing, key management functions, and digital key app of the smartphone (2-1). Implement the API used in (20), b) provide the owner pairing procedure control function, and c) implement the APDU Command to manage the configuration of the digital key protected by the digital key applet.

The digital key owner linking function includes triggering owner linking, providing an owner linking password, and requesting/receiving owner linking status update.

The key sharing and key management functions include a function to retrieve/receive a shared URL and accept/consent to a shared URL for a sharer, providing a qualification, alias and sharing URL, and a shared password search function in the framework digital key list for the owner. In addition, it includes functions such as requesting/receiving an update of the sharer key status, sending a notification to the digital key app when the sharer key is generated on the sharer's smartphone, and waking up the digital key app when the sharer key is generated on the sharer's smartphone.

Key management functions include digital key termination, owner/shareholder digital key data listing, vehicle identification and digital key identification signing with a key that can be authenticated in the digital key applet of the sharer's smartphone to verify the identification of the digital key server, digital key server It includes functions such as signing data with a key that can be authenticated in the digital key applet of the owner/sharer smartphone and reading/writing information related to the digital key to verify the signature at

The integrated management unit 224 manages and supports the first digital key applet 24-1 and the second digital key applet 24-2 in an integrated manner.

The first digital key applet 24-1 controls digital key storage, life cycle management, lock/release functions, and related security algorithms based on TEE/WBC security media. The second digital key applet 24-2 performs a function as a virtual eSE by applying a function implemented in a security element in a smartphone according to the CCC standard to a TEE/WBC security medium. For example, it performs digital key hosting, digital key related (fast and standard) transactions, vehicle (3-1) authenticity verification, sharer public key certificate chain verification, vehicle public key certificate verification.

4 and 5 are diagrams illustrating a digital key registration process of an owner according to an embodiment of the present invention.

Referring to FIGS. 4 and 5, 1. The user 4, the owner, executes an app on the smartphone 2-1, logs in, selects a vehicle, and registers a vehicle number. 2. The smartphone 2-1 provides a vehicle-smart phone interlocking (Paring) start screen 40. 3. The user 4 selects (eg, clicks) [Vehicle ↔ Smartphone Link Button] on the vehicle-smartphone link start screen 40.

4. Subsequently, the smartphone 2-1 requests a paring password from the digital key server 1, and 5. the digital key server 1 provides the vehicle with a Connected Car Service (CCS). ) It checks whether it is a vehicle, and if it is not a CCS vehicle, an Initial Paring Password is generated. In contrast, for a CCS vehicle, 1) when it is the first time, it generates an initial paring password, and 2) when it is not the first time, it generates a new paring password. Subsequently, the digital key server 1 generates Verifier/Salt and vehicle data. CCS is a service that connects vehicles, smartphones, and transportation infrastructure into one.

7. Subsequently, if the vehicle is a CCS vehicle, the digital key server 1 transmits Verifier/Salt, vehicle data to the vehicle 3-1 through a Connected Car Service (CCSP), and transmits the vehicle data to the vehicle 3-1. 1) responds to this. Upon receiving the response, the digital key server 1 transmits the linked password to the smartphone 2-1.

9. The smartphone 2-1 provides a vehicle-smart phone interlocking stage 1 screen 41. At this time, the interlocking password is displayed and HCE communication is enabled. 10. The user puts the smartphone 2-1 on the charging pad of the vehicle 3-1, and then selects [register] digitally from the terminal of the vehicle 3-1, for example, a navigation system.

Thereafter, steps 12 to 20 may be performed in the framework of the smartphone 2-1.

12. Vehicle (3-1) starts interlocking step 2 (First NFC Session) through NFC connection, and selects framework AID. 13. When the smart phone 2-1 successfully recognizes the vehicle pad, the vehicle-smart phone interlocking step 2 screen 42 is provided. 14. Through communication between the smartphone (2-1) and the vehicle (3-1), the vehicle (3-1) establishes a secure channel (Secure Ch.) and the vehicle's digital key pair (Car. Key Pair). ), and the smartphone 2-1 establishes a secure channel (Secure Ch.) and receives key creation information (key Creation Info.) from the vehicle 3-1, and 15. generates a digital key. (Create Digital Key).

16. Through communication between the smartphone (2-1) and the vehicle (3-1), the vehicle (3-1) authenticates the authentication chain (Certi. Chain) and the key creation certificate (Key Creation Attestation), and the smartphone shared key Extract and store (Extract & Store Phone. PK). 17. The smartphone (2-1) requests digital key tracking from the digital key server (1), 18. The digital key server (1) is a key tracking server (Key Tracking Server: KTS, hereinafter ' KTS') to request digital key tracking (Key Tracking Request). 19. After registering the digital key, release the NFC connection and reset the NFC connection, and 20. The smartphone (2-1) disables the HCE connection.

Steps 22 to 34 are performed in the framework and security element SE of the smartphone 2-1.

22. The vehicle 3-1 starts a second NFC session, which is a pairing phase 3 with the smartphone 2-1. Interworking step 3 includes NFC link setup, applet AID selection, standard transaction, and NFC link termination steps. 23. The security element (SE) of the smartphone (2-1) constitutes a contactless transaction.

24. The vehicle 3-1 can start the Owner Pairing Finaalization, which is the pairing phase 4 with the smartphone 2-1. Interworking step 4 is an interworking termination step, and includes NFC link setup, standard transaction, KT (Key Tracking) Receipt check, and NFC link termination step. It is possible to check the KT Receipt while repeating the NFC link termination step in the NFC link setup (KT Receipt Check).

25. KTS(5) transmits KTS response to digital key server(1), 26. Digital key server(1) transmits KTS response to smart phone(2-1) , 27. Save the KT Receipt in the security element (SE). In the interlocking step 4, it is possible to check the KT Receipt while repeating the NFC link setup and NFC link termination.

28. Vehicle 3-1 checks KT Receipt by setting up NFC link and performing standard transaction. If KT Receipt is Yes, 29. KT Receipt is authenticated.

30. The vehicle (3-1) performs Control Flow, Exchange, Send HCI notification, Control Flow, NFC link termination, and NFC reset, and 31. The smartphone (2-1) catches the HCI Notification Event.

Subsequently, 32. Smartphone (2-1) provides vehicle-smartphone linkage)_3 step screen 43, and 33. When the user clicks the [OK] button, 34. Digital key linkage completion screen 45 Provides.

6 is a diagram illustrating a smartphone screen provided according to an interlocking process between a vehicle and a smartphone according to an embodiment of the present invention.

4 to 6, the smartphone 2-1 provides a vehicle-smart phone linking start screen 40 for linkage between the vehicle 3-1 and the smartphone 2-1, and the vehicle When linking between (3-1) and the smartphone (2-1), check the NFC of the smartphone (2-1) and the charging pad of the vehicle (3-1), etc. ) If the NFC function is deactivated, the NFC setting guide screen "POP006" 46 and the smartphone NFC setting screen 47 are provided. In contrast, when the NFC function of the smartphone 2-1 is activated, the vehicle -Provides a screen 41 of step 1 interlocking with a smartphone.

Subsequently, when the smartphone 2-1 recognizes the charging pad through the process of recognizing the charging pad of the vehicle 3-1, the vehicle-smart phone interlocking step 2 screen 42 is provided, and the charging pad is recognized. If not, the vehicle pad connection guide screen "POP007" (48) is provided.

Subsequently, when the digital key registration is successful through the digital key registration success confirmation process, the smart phone 2-1 provides a vehicle-smart phone interlocking_3 step screen 43 and a digital key registration completion screen 45. The smartphone 2-1 provides a digital key registration failure screen 44 when the digital key cannot be registered for other unknown reasons. Before the digital key registration is completed, if the user wants to cancel the registration, the registration cancellation screen'AL003' (49) is provided.

In the above, although the present invention has been described with reference to several examples, the present invention is not necessarily limited to these embodiments, even though it has been described that all components constituting an embodiment of the present invention are combined into one or operated in combination. That is, as long as it is within the scope of the object of the present invention, one or more of the components may be selectively combined and operated. In addition, although all the components may be implemented as one independent hardware, a program module that performs some or all functions combined in one or a plurality of hardware by selectively combining some or all of the components. It may be implemented as a computer program having Codes and code segments constituting the computer program may be easily inferred by those skilled in the art of the present invention. Such a computer program is stored in a computer-readable storage medium, is read and executed by a computer, thereby implementing an embodiment of the present invention. The storage medium of the computer program may include a semiconductor recording medium, a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like.

In addition, the terms such as "include", "consist of" or "have" described above mean that the corresponding component may be present unless otherwise stated, excluding other components. It should not be construed as being able to further include other components.

The embodiments described above are examples, and those of ordinary skill in the technical field to which the present specification pertains will be able to make various modifications and variations without departing from the essential characteristics of the present specification. Accordingly, the embodiments disclosed in the present specification are not intended to limit the technical idea of the present specification, but to describe, and the scope of the technical idea of the present specification is not limited by these exemplary embodiments. The scope of protection of the present specification should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present specification.

1: digital key server
2-1: Smartphone
3-1: Vehicle
20: Digital Key App
22: Digital Key Framework
24-1: first digital key applet
24-2: second digital key applet
26: communication interface
221: first applet management unit
222: 2nd applet management unit
223: key management unit
224: Integrated management department

Claims (12)

A digital key device including a virtual embedded security element for digital key storage;
A locking terminal equipped with a digital key function module that is locked or unlocked by a digital key applying a digital key standard; And
Including; a digital key server for issuing and managing a digital key by linking the digital key device and the lock terminal,
The digital key device,
Includes; a virtual embedded security element system executed on software,
The virtual embedded security element system,
Digital key app;
A first digital key applet based on a Trusted Execution Environment (TEE) or White Box Cryptography (WBC) security medium;
A second digital key applet based on a digital key standard that operates as a function of a virtual embedded security element; And
Including a digital key framework that provides an API used by the digital key app, manages the first digital key applet and the second digital key applet in an integrated manner, and communicates with the second digital key applet and the lock terminal through a standard interface. A non-face-to-face digital key service providing system characterized by.
The method of claim 1, wherein the virtual embedded security element
A non-face-to-face digital key service providing system, characterized in that it is a software security element that performs a USIM (Embedded Universal Subscriber Identity Module: eSIM) function.
The method of claim 1, wherein the digital key device
An operating system including a communication interface for performing wireless communication between the digital key device and the locked terminal; a non-face-to-face digital key service providing system comprising: a.
The method of claim 1, wherein the first digital key applet,
Provides a non-face-to-face digital key service characterized by storing a digital key based on a Trusted Execution Environment (TEE) or White Box Cryptography (WBC) security medium, and performing a locking or unlocking function and a security function of a locked terminal using a digital key. system.
The method of claim 1, wherein the second digital key applet,
It operates as a virtual embedded security element by applying the function performed in the security element in the digital key device of the vehicle digital key standard to the TEE or WBC security medium, and stores the digital key and locks or unlocks the locked terminal using the digital key. A non-face-to-face digital key service providing system, characterized in that it performs functions and security functions.
The method of claim 5, wherein the second digital key applet
A non-face-to-face digital key service providing system, characterized in that non-face-to-face communication with the vehicle through a digital key framework.
The method of claim 3, wherein the communication interface
A non-face-to-face digital key service providing system comprising at least one of NFC, HCE, BLE, and UWB interfaces.
In the method of providing a non-face-to-face digital key service using a digital key device, a digital key device including a virtual embedded security element for digital key storage is:
Providing a lock terminal-digital key device interlocking start screen;
Activating the NFC function of the digital key device upon receiving a selection of an interworking request by a user operation on the lock terminal-digital key device interlocking start screen;
Connecting a first NFC session between the locked terminal and the digital key device and generating a digital key; And
Connecting a second NFC session between the locking terminal and the digital key device and authenticating the vehicle; Including,
The digital key device,
Includes; a virtual embedded security element system executed on software,
The virtual embedded security element system,
Digital key app;
A first digital key applet based on a TEE or WBC security medium;
A second digital key applet based on a digital key standard that operates as a function of a virtual embedded security element; And
Including a digital key framework that provides an API used by the digital key app, manages the first digital key applet and the second digital key applet in an integrated manner, and communicates with the second digital key applet and the lock terminal through a standard interface. A method of providing a non-face-to-face digital key service, characterized by.
The method of claim 8, wherein the step of connecting the first NFC session between the locked terminal and the digital key device and generating a digital key,
Establishing a secure channel between the locked terminal and a digital key device;
Generating a digital key pair of the locked terminal; And
And generating a digital key by receiving key generation information from the locking terminal in the digital key device.
The method of claim 8,
The step of connecting the second NFC session between the locking terminal and the digital key device and authenticating the vehicle,
NFC link setup, applet AID selection, standard transaction, NFC link termination step; to implement,
A method of providing a non-face-to-face digital key service, characterized in that a security element of a digital key applet constituting the locked terminal performs a non-face-to-face transaction.
The method of claim 10,
After the step of connecting the second NFC session between the locking terminal and the digital key device and authenticating the vehicle,
NFC link setup, standard transaction, KT (Key Tracking) Receipt check, and NFC link termination step; non-face-to-face digital key service providing method, characterized in that it repeatedly performs.
The method of claim 11, wherein after the step of connecting the second NFC session between the locking terminal and the digital key device and authenticating the vehicle,
When checking KT Receipt while repeating NFC link setup to NFC link termination, the KTS response is transmitted from the digital key server to the smartphone, which is the locking terminal, and is stored in the security element (SE) of the locking terminal. How to provide digital key service.

Images