WO2022127064A1

WO2022127064A1 - Vehicle digital key distribution management method and device

Info

Publication number: WO2022127064A1
Application number: PCT/CN2021/102337
Authority: WO
Inventors: 王辉
Original assignee: 广州橙行智动汽车科技有限公司; 广州小鹏汽车科技有限公司
Priority date: 2020-12-16
Filing date: 2021-06-25
Publication date: 2022-06-23
Also published as: CN112669491B; CN112669491A

Abstract

A vehicle digital key distribution management method and device, which are applied to a server. The server establishes a communication connection with a first mobile terminal, a second mobile terminal and a vehicle, respectively. The method comprises: receiving key control information sent by the first mobile terminal (101); generating a preset number of digital keys according to the key control information (102); encrypting the preset number of digital keys (103); and sending the encrypted preset number of digital keys to the second mobile terminal (104). By means of generating a preset number of digital keys carrying key control information and sending the preset number of digital keys to a shared terminal, the shared terminal may directly use digital keys required for use to control the vehicle, and key users do not need to register in advance or explicitly recover the keys, so that the method can be adapted to various sharing scenes.

Description

A kind of vehicle digital key distribution management method and device

cross reference

The present application claims the priority of the prior application with the application number of 202011494238.6 filed on December 16, 2020 and entitled "A Method and Device for Assigning and Managing Vehicle Digital Keys", the content of which is incorporated by reference in this text.

technical field

The invention relates to the technical field of vehicles, in particular to a vehicle digital key distribution management method and a vehicle digital key distribution management device.

Background technique

The digital key is easy to carry, share and manage. It is very popular among users and has a high usage rate. It has become the standard configuration of smart cars. Digital keys usually have strict life cycle management, including registration, cancellation and normal use, and each user (such as a car owner) corresponds to a digital key. When registering a digital key, the server needs to be separated from the mobile terminal and the vehicle. communication to complete the creation of the safe pairing information between the mobile terminal and the vehicle; when the digital key is logged out, not only does the server need to communicate with the mobile terminal and the vehicle separately to complete the deletion of the safe pairing information between the mobile terminal and the vehicle, but also Make sure the vehicle is powered off and armed to complete.

The implementation of the above digital key can support usage scenarios such as key sharing, and then in some cases, such as when the vehicle is in an underground parking lot without a network, the registration and deregistration of keys cannot be realized; When sharing sexually, such as when moving the car in the car wash, or when the courier puts items in the car, a cumbersome registration process is required before it can be used, and the car owner also needs to log out in time after confirming that the shared key is used, which is not flexible. high.

SUMMARY OF THE INVENTION

In view of the above problems, embodiments of the present invention are proposed to provide a vehicle digital key distribution management method and a corresponding vehicle digital key distribution management device that overcome the above problems or at least partially solve the above problems.

In order to solve the above problem, an embodiment of the present invention discloses a vehicle digital key distribution management method, which is applied to a server, and the server establishes a communication connection with a first mobile terminal, a second mobile terminal, and a vehicle, respectively. The method include:

Receive key control information sent by the first mobile terminal; the key control information includes the number of times of key use;

Generate a preset number of digital keys according to the key control information; wherein the preset number does not exceed the number of times the key is used;

Encrypting the preset number of digital keys; wherein, the public key used in the encryption process is generated by a root certificate preset in the vehicle, and forwarded to the server through the vehicle;

Send an encrypted preset number of digital keys to the second mobile terminal.

Optionally, generating a preset number of digital keys according to the key control information includes:

Acquire account information from the first mobile terminal, and generate a key pulling instruction according to the key control information and the account information;

sending the key pulling instruction to the second mobile terminal; the key pulling instruction is used to instruct the second mobile terminal to generate a key obtaining request;

In response to the key acquisition request sent by the second mobile terminal, a preset number of digital keys are generated according to the key control information.

Optionally, the key control information further includes key master identification, vehicle information, key validity period or operation authority.

Optionally, the server is connected to a vehicle, the vehicle has a preset root certificate and a first public key, and the server has a first private key matching the first public key;

The encrypting process for the preset number of digital keys includes:

When an activation operation on the preset vehicle digital key is detected, a vehicle digital key activation instruction is generated, and the vehicle digital key activation instruction is sent to the vehicle; the vehicle digital key activation instruction is used to instruct the vehicle Generate a public-private key pair including a second public key and a second private key by using the root certificate;

receiving the second public key sent by the vehicle, and using the first private key and the second public key to sequentially sign and encrypt the preset number of digital keys;

The sending the encrypted preset number of digital keys to the second mobile terminal includes:

A preset number of digital keys for signature and encryption processing are sent to the second mobile terminal.

Optionally, the preset number of digital keys includes digital keys carrying the same key master identifier, and/or digital keys carrying different key master identifiers;

The generating a preset number of digital keys according to the key control information further includes:

generating a key sub-identity for the digital key; the key sub-identity is used to represent the number of times of use of the digital key;

During the process of sending the digital key carrying the same main key identification to the second mobile terminal, an operation of adding one to the key sub-identification of the digital key carrying the same key main identification is performed.

Optionally, the method further includes:

Obtaining a key disabling instruction; the key disabling instruction includes a disabling key master identifier;

The key disabling instruction is sent to the vehicle; the key disabling instruction is used to inform the vehicle to set the disabling identification bit in the key record information carrying the disabling key master identification to a disabling value.

Optionally, the method further includes:

Generate a restart activation instruction according to a preset time interval, and send the restart activation instruction to the vehicle; the restart activation instruction is used to instruct the vehicle to generate a third public key and a third private key through the root certificate. public-private key pair.

The embodiment of the present invention also discloses a vehicle digital key distribution management method, which is applied to a vehicle, and the vehicle establishes a communication connection with the first mobile terminal, the second mobile terminal and the server, and the method includes:

Generate a public key according to a preset root certificate and forward the public key to the server; receive an encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys The key is generated by the server according to the key control information sent by the first mobile terminal, and the public key is used for encryption processing; wherein, the preset number does not exceed the key usage times included in the key control information ;

The vehicle is controlled accordingly according to the digital key.

Optionally, the vehicle has a preset first public key, and the server has a first private key matching the first public key; the public key is generated according to the preset root certificate and sent to the The server forwards the public key, including:

Receive a vehicle digital key activation instruction sent by the server; the activation instruction is generated by the server detecting an activation operation for the preset vehicle digital key;

Responding to the vehicle digital activation instruction, and generating a public-private key pair including a second public key and a second private key through the root certificate;

Send the second public key to the server; the server is configured to use the first private key and the second public key to perform signature and encryption processing on the preset number of digital keys in turn, and A preset number of digital keys for signature and encryption processing are sent to the second mobile terminal.

Optionally, the corresponding control of the vehicle according to the digital key includes:

When receiving the digital key carrying the corresponding key control information sent by the second mobile terminal, checking the digital key carrying the corresponding key control information;

After the check is passed, an operation corresponding to the corresponding key control information is performed in response.

Optionally, the checking of the digital key carrying the corresponding key control information includes:

Determine whether the digital key carrying the corresponding key control information is legal;

The judging whether the digital key carrying the corresponding key control information is legal includes:

Determine whether the decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information to obtain a digital key for decryption and signature verification;

If the digital key for decryption and signature verification can be obtained, then determine whether the digital key for decryption and signature verification is legal;

If the digital key for decryption and signature verification is legal, it is determined whether the key control information carried by the digital key for decryption and signature verification is legal.

Optionally, the judging whether the decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information to obtain the digital key for decryption and signature verification, including:

Judging whether the first public key matching the first private key and the second private key matching the second public key can be used to sequentially decrypt and verify a preset number of digital keys for signature and encryption processing deal with.

Optionally, the vehicle has a digital key record for the digital key; the judging whether the digital key for decryption and signature verification is legal, includes:

When obtaining the digital key for decryption and signature verification, obtain the target key master identifier of the digital key for decryption and signature verification;

Judging whether the target key master identifier exists in the digital key record;

If the target key master identifier exists in the digital key record, it is determined whether the disable flag bit included in the target subrecord corresponding to the target key master identifier is a preset threshold, and the target record includes Whether the key sub-identity of the key reaches the preset expected sub-identity.

Optionally, the method further includes:

If the disabled flag bit contained in the target sub-record is a preset threshold, and the key sub-identity contained in the target record reaches the preset expected sub-identity, then the digital key for decryption and signature verification is legal;

Or, if the target key master identifier does not exist in the digital key record, create a digital key record containing the key master identifier, a preset desired sub-identity and a disabled flag bit for the digital key for decryption and signature verification .

Optionally, if the digital key for decryption and signature verification is legal, judging whether the key control information carried by the digital key for decryption and signature verification is legal, including:

Determine whether the key control information carried by the digital key for decryption and signature verification is the same as the digital key record.

Optionally, the method further includes:

receiving a key disabling instruction sent by the first mobile terminal; the key disabling instruction includes a disabling key master identifier;

The disabled identification bit in the key record information carrying the disabled key master identification is set as a disabled value.

Optionally, the method further includes:

Receive a restart activation instruction sent by the first mobile terminal according to a preset time interval;

In response to the restart activation instruction, a public-private key pair including a third public key and a third private key is generated by using the root certificate.

The embodiment of the present invention also discloses a vehicle digital key distribution management device, which is applied to a server, and the server establishes a communication connection with the first mobile terminal, the second mobile terminal and the vehicle respectively, and the device includes:

a key control information acquisition module, configured to receive the key control information sent by the first mobile terminal; the key control information includes the number of times the key is used;

a digital key generation module for generating a preset number of digital keys according to the key control information; wherein the preset number does not exceed the number of times the key is used;

A digital key encryption module for performing encryption processing on the preset number of digital keys; wherein, the public key used in the encryption processing is generated by the root certificate preset in the vehicle, and forwarded to the server through the vehicle device;

The digital key sending module is used for sending the encrypted preset number of digital keys to the second mobile terminal.

Optionally, the digital key generation module includes:

a key pulling instruction generation submodule, configured to acquire account information from the first mobile terminal, and generate a key pulling instruction according to the key control information and the account information;

a key pulling instruction sending submodule, configured to send the key pulling instruction to the second mobile terminal; the key pulling instruction is used to instruct the second mobile terminal to generate a key obtaining request;

The digital key generation sub-module is configured to generate a preset number of digital keys according to the key control information in response to a key acquisition request sent by the second mobile terminal.

Optionally, the vehicle has a preset root certificate and a first public key, and the server has a first private key matching the first public key; the digital key encryption module includes:

a vehicle digital key activation command sending submodule, configured to generate a vehicle digital key activation command when an activation operation on the preset vehicle digital key is detected, and send the vehicle digital key activation command to the vehicle; the The vehicle digital key activation instruction is used to instruct the vehicle to generate a public-private key pair including a second public key and a second private key through the root certificate;

The signature and encryption processing sub-module is configured to receive the second public key sent by the vehicle, and use the first private key and the second public key to perform signature and encryption processing on the preset number of digital keys in sequence.

Optionally, the digital key sending module includes:

The digital key sending sub-module is used for sending a preset number of digital keys for signature and encryption processing to the second mobile terminal.

Optionally, the preset number of digital keys includes digital keys carrying the same key master identifier, and/or digital keys carrying different key master identifiers; further comprising:

a key sub-identity generation submodule for generating a key sub-identity for the digital key; the key sub-identity is used to represent the number of times of use of the digital key;

An add-one operation sub-module is used to add one to the key sub-identity of the digital key carrying the same key main identifier during the process of sending the digital key carrying the same key main identifier to the second mobile terminal. .

Optionally, the device further includes:

a key disabling instruction acquisition module for acquiring a key disabling instruction; the key disabling instruction includes a disabling key master identifier;

A key disabling instruction sending module is used to send the key disabling instruction to the vehicle; the key disabling instruction is used to inform the vehicle to set the disabling identification bit in the key record information carrying the disabling key master identification as Disabled value.

Optionally, the device may also include:

A restart activation instruction sending module is used to generate a restart activation instruction according to a preset time interval, and send the restart activation instruction to the vehicle; the restart activation instruction is used to instruct the vehicle to generate a third activation instruction through the root certificate. The public-private key pair of the public key and the third private key.

The embodiment of the present invention also discloses a vehicle digital key distribution management device, which is applied to a vehicle, and the vehicle establishes a communication connection with a first mobile terminal, a second mobile terminal and a server respectively, and the device includes:

a public key generation module, configured to generate a public key according to a preset root certificate and forward the public key to the server;

A digital key receiving module, configured to receive the encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys are sent by the server according to the first mobile terminal. Generate key control information, and use the public key to perform encryption processing; wherein, the preset number does not exceed the number of key uses included in the key control information;

The vehicle control module is used for correspondingly controlling the vehicle according to the digital key.

Optionally, the vehicle has a preset first public key, and the server has a first private key matching the first public key; the public key generation module includes:

a vehicle digital key activation instruction receiving sub-module, configured to receive a vehicle digital key activation instruction sent by the server; the activation instruction is generated by the server detecting an activation operation for the preset vehicle digital key;

a vehicle digital activation instruction response submodule, configured to respond to the vehicle digital activation instruction, and generate a public-private key pair including a second public key and a second private key through the root certificate;

The second public key sending submodule is configured to send the second public key to the server; the server is configured to use the first private key and the second public key to pair the preset number of The digital key performs signature and encryption processing in sequence, and sends a preset number of digital keys for signature and encryption processing to the second mobile terminal.

Optionally, the vehicle control module includes:

a digital key checking submodule, configured to check the digital key carrying the corresponding key control information when receiving the digital key carrying the corresponding key control information sent by the second mobile terminal;

The vehicle control sub-module is configured to execute an operation corresponding to the corresponding key control information after the inspection is passed.

Optionally, the digital key checking submodule includes:

Decryption and signature verification judgment unit for judging whether decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information to obtain a digital key for decryption and signature verification;

The digital key legality judgment unit is used to judge whether the digital key for decryption and signature verification is legal if the digital key for decryption and signature verification can be obtained;

The key control information judgment unit is configured to judge whether the key control information carried by the digital key for decryption and signature verification is legal if the digital key for decryption and signature verification is legal.

Optionally, the decryption and signature verification judgment unit includes:

Decryption, signature verification and judgment subunit, for judging whether the first public key matching the first private key and the second private key matching the second public key can be used to sign and encrypt a preset number of The digital key is decrypted and verified in sequence.

Optionally, the vehicle has a digital key record for the digital key; the digital key legality judging unit includes:

The target key master identification acquisition subunit is used to obtain the target key master identification of the digital key for decryption and signature verification when the digital key for decryption and signature verification is obtained;

a target key master identification judging subunit for judging whether the target key master identification exists in the digital key record;

A digital key legality judging subunit, used for determining whether the disabled flag bit contained in the target subrecord corresponding to the target key main identifier is a preset threshold if the target key master identifier exists in the digital key record , and whether the key sub-identity contained in the target record reaches the preset expected sub-identity.

Optionally, the digital key legality judging unit further includes:

The first digital key legal subunit is used for if the forbidden flag bit contained in the target subrecord is a preset threshold, and the key subidentity contained in the target record reaches a preset desired subidentity, then the The digital key for decryption and signature verification is legal;

The second digital key legal subunit is configured to create a decryption and verification code including the key main identifier, the preset expected sub-identity and the disabled flag bit if the target key master identifier does not exist in the digital key record. The digital key record of the signed digital key.

Optionally, the key control information judgment unit includes:

The key control information judgment subunit is used for judging whether the key control information carried by the digital key for decryption and signature verification is the same as the digital key record.

Optionally, the device further includes:

a key disabling instruction receiving submodule, configured to receive a key disabling instruction sent by the first mobile terminal; the key disabling instruction includes a disabling key master identifier;

The disabling value setting submodule is used to set the disabling flag bit in the key record information carrying the disabling key master identifier as a disabling value.

Optionally, the device further includes:

a restart activation instruction receiving module, configured to receive a restart activation instruction sent by the first mobile terminal according to a preset time interval;

A restart activation instruction response module, configured to respond to the restart activation instruction, and generate a public-private key pair including a third public key and a third private key by using the root certificate.

An embodiment of the present invention further discloses a vehicle, comprising: the vehicle digital key distribution management device, a processor, a memory, and a computer program stored on the memory and capable of running on the processor, the computer program When executed by the processor, any one of the steps of the vehicle digital key distribution management method is implemented.

An embodiment of the present invention further discloses a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, any one of the steps of the vehicle digital key distribution management method is implemented .

The embodiments of the present invention include the following advantages:

In the embodiment of the present invention, the server, the first mobile terminal, the second mobile terminal and the vehicle are involved, the key control information sent by the first mobile terminal is received through the server, and a preset number of digital keys are generated according to the key control information Then, the generated preset number of digital keys can be encrypted, and the encrypted preset number of digital keys can be sent to the second mobile terminal, so that the second mobile terminal can send the digital keys carrying the corresponding key control information to the vehicle. key to control the vehicle accordingly. By generating a preset number of digital keys carrying key control information and sending the encrypted preset number of digital keys to the shared terminal, the shared terminal can directly use the desired digital key for vehicle control. Users do not need to register in advance, and do not need to explicitly recycle, they can control the vehicle without network conditions and adapt to various sharing scenarios.

Description of drawings

1 is a flow chart of steps of an embodiment of a vehicle digital key distribution management method according to the present invention;

Fig. 2 is the realization process of vehicle digital key distribution management in the embodiment of the present invention;

Fig. 3 is the realization process for the production stage of the digital key and the vehicle owner binding activation stage in the embodiment of the present invention;

Fig. 4 is the realization process that the vehicle owner deletes the key and deletes all the keys in the embodiment of the present invention;

5 is a flow chart of steps of another embodiment of a vehicle digital key distribution management method according to the present invention;

6 is a flow chart of steps of another embodiment of a vehicle digital key distribution management method according to the present invention;

FIG. 7 is a schematic flow chart of vehicle inspection in an embodiment of the present invention;

Fig. 8 is the realization process of utilizing the distributed digital key to carry out vehicle control in the embodiment of the present invention;

9 is a structural block diagram of an embodiment of a vehicle digital key distribution management device according to the present invention;

10 is a structural block diagram of another embodiment of a vehicle digital key distribution management device according to the present invention;

FIG. 11 is a structural block diagram of another embodiment of a vehicle digital key distribution management device according to the present invention.

Detailed ways

In order to make the above objects, features and advantages of the present invention more clearly understood, the present invention will be described in further detail below with reference to the accompanying drawings and specific embodiments.

One of the core ideas of the embodiments of the present invention is to propose a lightweight digital car key system and design method, so as to make the use, sharing and management of digital car keys more convenient under the premise of ensuring safety; It can control the vehicle without network conditions and adapt to various sharing scenarios without prior registration or explicit recycling.

Referring to FIG. 1, there is shown a flow chart of steps of an embodiment of a vehicle digital key distribution management method of the present invention, which is applied to a server, and the server establishes communication with the first mobile terminal, the second mobile terminal, and the vehicle respectively. The connection can specifically include the following steps:

Step 101, receiving the key acquisition control information sent by the first mobile terminal;

In an embodiment of the present invention, the server can receive the key control information sent by the first mobile terminal, so as to generate a digital key for controlling the vehicle through the received key control information.

In practical applications, the first mobile terminal may refer to the mobile terminal of the vehicle owner who shares the digital key.

In the specific implementation, the car owner can set the key control information to be shared when sharing the key, and send the key control information and the account information of the shareee to the server, that is, the server can receive the sharer's terminal (that is, the first A mobile terminal) sends the key control information and the account information of the shared person.

In practical applications, the key control information may include key master ID (Master ID), vehicle information (VIN code), key validity period, key usage times, and vehicle operation authority information.

Among them, the Master ID can be used to uniquely demarcate a key control information in the whole network, that is, digital keys with the same Master ID can have the same key control information; the validity period of the key can be used to indicate that the key is unavailable after this time, that is, it is used to limit The valid use time of the generated digital key, if it exceeds the valid use time, the vehicle control function of the digital key will automatically become invalid; the number of key uses can be used to indicate how many times the key can be used, which can be realized by the set value. The number of times is limited. For example, if the number of times of use is set to 1, it means one-time sharing, and if it is set to -1, it means that the key can be used permanently; the operation authority information for the vehicle can indicate whether the key has the authority to operate a certain action. For example, permissions to unlock, ignite, open the charging port cover, open the trunk, etc. In the embodiment of the present invention, through the design of the validity period of the key and the number of times of use of the key, the shared key does not need to be explicitly recycled by the owner (that is, it is not necessary to log out in time after confirming that the shared key is used), which is very convenient. Scenarios for sharing keys.

Step 102, generating a preset number of digital keys according to the key control information;

In practical applications, in the process of generating a digital key according to the above-mentioned key control information, a preset number of digital keys may be generated, wherein the preset number does not exceed the key usage times included in the key control information.

When detecting the pulling signal of the mobile terminal for the digital key, the server can generate a preset number of digital keys according to the key control information.

The account information of the shareee (ie, the second mobile terminal user) can be obtained, and the key pulling instruction can be generated according to the key control information and the account information of the shareee, and then the key pulling instruction is sent to the mobile terminal, so as to obtain the key through the key pull. The instruction informs the sharer corresponding to the shareee's account information that the generated preset number of digital keys can be pulled; at this time, the shared terminal (ie the second mobile terminal) can generate a key according to the received key pulling instruction The acquisition request is sent to the server, and the server can respond to the key acquisition request sent by the mobile terminal, so as to generate a preset number of digital keys according to the key control information.

Specifically, referring to FIG. 2 , the implementation process of vehicle digital key distribution management in the embodiment of the present invention is shown. The key control information and the account information of the shared person can be set by the vehicle owner and sent to the server; the server can notify the shared user. The user account APP has a new key, and synchronizes basic information to the APP, including the license plate number, Bluetooth key MAC address, etc. The notification and synchronization methods can be realized by sending a key pull command to the second mobile terminal; the shareee APP You can regularly pull a batch of digital keys from the server, and then safely cache them locally. The storage method is generally stored in the tee environment on andriod and ios systems, which can effectively prevent third-party theft; then the server can control the key according to the key. The information generates several digital keys.

Among them, before generating the digital key, the server can judge whether the digital key can be generated according to the control conditions, for example, the current time does not exceed the validity period, and the total number of digital keys distributed does not exceed the number of times of use; and then the digital key can be generated according to the control conditions. The key information will inherit the MasterID and operation authority in the control information, and the modification validity period is the current time + 5 days (that is, it can be used within 5 days), and does not exceed the validity period in the control information, and the vehicle information is added.

As an example, the key control information set by the car owner, that is, the key control information sent to the server, may include MasterID=EWRQO132, the validity period is 2030.12.31, the number of times of use is -1 (that is, unlimited), and the operation authority is unlock, Ignition, opening the charging port cover, opening the tail box, etc. The premise of the server generating sub-keys can be that the current time does not exceed the validity period, that is, <2030.12.31, and the total number of generated sub-keys does not exceed the number of times of use; then The sub-key generated by the server according to the key control information, the sub-key information can include MasterID=EWRQO132, the validity period can be the current time + 5 days, and <2030.12.31, the vehicle information can be VIN number (such as LMXXXXXX), operation authority The same as the set key control information, it can be unlocking, igniting, opening the charging port cover, opening the trunk, etc., and its sub-key identification SubID will increase by 1 each time a sub-key is issued.

In a preferred embodiment, the generated preset number of digital keys may include digital keys with the same key master identification, and/or digital keys with different key master identifications; that is, the preset number is generated at one time , and the number of generated digital keys with the same key master identification does not exceed the number of key uses.

In a preferred embodiment, while generating a preset number of digital keys according to the key control information, the server can also generate a key sub-identity for the digital key; During the process of the digital key of the key main identification, the key sub-identification of the digital key carrying the same key main identification can be added by one.

Specifically, the server can generate a key sub ID (sub ID) for each digital key. The ID is an auto-increment. For example, the initial value of the ID is 1. For a digital key with the same Master ID, its sub ID is increased by 1, so that the vehicle can realize that each digital key can only be used once according to this sub ID, that is, the key sub-identification is used to indicate the use status of the digital key (the number key has been used or not).

Step 103, performing encryption processing on the preset number of digital keys; wherein, the public key used in the encryption processing is generated from the root certificate preset in the vehicle, and forwarded to the server through the vehicle;

In practical applications, the server can be connected to the vehicle, the vehicle can have a preset root certificate for the preset vehicle digital key and the first public key, and the server can have a first private key matching the first public key.

When an activation operation on the preset vehicle digital key is detected, a vehicle digital key activation instruction is generated, and the vehicle digital key activation instruction is sent to the vehicle; the vehicle is used to respond to the vehicle digital key activation instruction , and generate a public-private key pair including a second public key and a second private key by using the root certificate.

Specifically, referring to FIG. 3 , the implementation process of the digital key production stage and the vehicle owner binding activation stage in the embodiment of the present invention is shown. In the vehicle production stage, a server public key and a server public key can be preset for each vehicle. A root certificate on the vehicle side, all vehicles can have the same root certificate; in the stage of binding and activating the vehicle digital key, the owner can notify the server to activate the vehicle, and the server can trigger the vehicle (ie, the vehicle) to activate.

The communication of the digital key is realized through the public-private key pair. The server can sign and encrypt the digital key before sending it to the second mobile terminal, that is, the server can receive the second public key sent by the vehicle and use the first private key. The key and the second public key sequentially perform signature and encryption processing on the preset number of digital keys; and then send the preset number of digital keys for signature and encryption processing to the second mobile terminal.

Specifically, the root certificate preset in the vehicle may generate a public-private key pair including the second public key and the second private key, the second private key may be kept locally in the vehicle, and the second public key may be sent to the server. In this way, the server can use the preset first private key to sign the generated digital key, and use the vehicle's second public key to sequentially encrypt the generated digital key, and then send the signature and signature to the second mobile terminal. After the second mobile terminal sends the digital key for signature and encryption to the vehicle, the vehicle can use the second private key and the first public key to decrypt and verify the digital key in turn, thereby ensuring that the digital key is encrypted. The security of key data cannot be forged or tampered with.

It should be noted that the owner's own key is also obtained using this method, but this process can be automatically processed in the APP background logic, which is insensitive to the owner.

Step 104: Send the encrypted preset number of digital keys to the second mobile terminal.

In an embodiment of the present invention, after the server generates a preset number of digital keys according to the key control information, in the process of sending the preset number of digital keys to the second mobile terminal, in order to ensure that the digital keys are in the communication process For security in the mobile terminal, the communication of the digital key can be realized through the public-private key pair, that is, the digital key sent to the second mobile terminal is the encrypted digital key.

In a preferred embodiment, in addition to generating and issuing digital keys, the server can also manage the generated digital keys. part of the digital key or all of the digital key.

Referring to FIG. 4 , the implementation process of the vehicle owner deleting the key and deleting all the keys in the embodiment of the present invention is shown. First, the key disabling instruction can be obtained. ) generated key disabling instruction; wherein, the key disabling instruction may include disabling a key master identification; then sending the key disabling instruction to the vehicle; the key disabling instruction is used to inform the vehicle that the vehicle will carry the The disabled flag bit in the key record information of the disabled key master ID is set to the disabled value.

Specifically, in the process of deleting some of the generated digital keys, the key disabling instruction obtained by the server may be an instruction that carries a disabled Master ID sent by the vehicle owner to the server; the server may notify the vehicle that the key with the Master ID will be disabled The disabled flag bit in the key record information is set to 1, so that the key with the ID of the Master ID is deleted and cannot be used again.

In the process of deleting all the generated digital keys, the key disabling instruction obtained by the server may be an instruction to disable all Master IDs sent by the car owner to the server; the server may notify the vehicle to record the keys of all Master IDs The disabled flag bit in the message is set to 1, so that all keys that have been issued are deleted and cannot be used again.

In a preferred embodiment, in order to be more secure, the server can also notify the vehicle to restart and activate, so that the vehicle can use the root certificate to generate a new pair of public and private keys during the reactivation phase, and send the new public key to On the server side, subsequent generated digital keys will be encrypted using this public key.

As an example, the first mobile terminal may generate a restart activation instruction according to a preset time interval, and send the restart activation instruction to the vehicle; the in-vehicle terminal is configured to respond to the restart activation instruction, and send the restart activation instruction through the root The certificate generates a public-private key pair including a third public key and a third private key.

It should be noted that the security design method for strengthening or improving certain links, such as how the server communicates securely with the mobile terminal, how the mobile terminal ensures the security and credibility of the device, how to ensure the credibility of the user (such as biometrics), the vehicle How to safely store and judge the safety of the terminal (such as using tee), etc., this embodiment of the present invention does not limit it; and the form of the mobile terminal APP used by the car owner or the sharer can be a native app, or a small program, H5 (referring to the HTML5 hypertext markup language programming language) and other forms, which are not limited in this embodiment of the present invention.

In the embodiment of the present invention, the server, the first mobile terminal, the second mobile terminal and the vehicle are involved. The server receives the key control information sent by the first mobile terminal, and generates a preset number of digital keys according to the key control information. Then, the generated preset number of digital keys can be encrypted, and the encrypted preset number of digital keys can be sent to the second mobile terminal, so that the second mobile terminal can send the digital keys carrying the corresponding key control information to the vehicle. key to control the vehicle accordingly. By generating a preset number of digital keys carrying key control information and sending the encrypted preset number of digital keys to the shared terminal, the shared terminal can directly use the desired digital key for vehicle control. Users do not need to register in advance, and do not need to explicitly recycle. They can control the vehicle without network conditions and adapt to various sharing scenarios.

Referring to FIG. 5 , there is shown a flow chart of steps of another embodiment of a vehicle digital key distribution management method according to the present invention, which is applied to a second mobile terminal, and the second mobile terminal is connected to the server, the first mobile terminal and the vehicle respectively. Establishing a communication connection may specifically include the following steps:

Step 501: Receive an encrypted preset number of digital keys sent by the server; in an embodiment of the present invention, the second mobile terminal can pull the digital key from the server. Specifically, the server can The key control information and the account information of the shareee generate a key pulling instruction, and send the key pulling instruction to the second mobile terminal; after receiving the key pulling instruction sent by the server, the second mobile terminal can pull the key according to the key The instruction generates a key acquisition request, and sends the key acquisition request to the server; the second mobile terminal can receive a preset number of digital keys sent by the server in response to the key acquisition request.

Wherein, the received preset number of digital keys may be digital keys that have been signed and encrypted by the server using the public and private keys. For the specific signature and encryption processing procedures, reference may be made to the above content, which is not described again in order to avoid redundant content.

Step 502: Send a digital key carrying corresponding key control information to the vehicle, so that the vehicle can control the vehicle according to the corresponding key control information.

In practical applications, a preset number of digital keys can be cached locally, and when the vehicle needs to be controlled, the digital key carrying the corresponding key control information can be obtained locally; The digital key of the information; the vehicle is used to check the digital key carrying the corresponding key control information, and after the inspection is passed, the vehicle is controlled according to the corresponding key control information.

In a preferred embodiment, a batch of digital keys can be periodically pulled from the server and safely cached locally. When the vehicle needs to be operated, the operation code (essentially code/serial number) and the digital key are sent to the The vehicle can be controlled.

In the embodiment of the present invention, the server, the first mobile terminal, the second mobile terminal and the vehicle are involved, the key control information is obtained through the server, and a preset number of digital keys are generated according to the key control information; Encrypt the preset number of digital keys that have been generated, and send the encrypted preset number of digital keys to the second mobile terminal, so that the second mobile terminal can send the digital key carrying the corresponding key control information to the vehicle, so as to realize the encryption of the vehicle. Control accordingly. By generating a preset number of digital keys carrying key control information and sending the encrypted preset number of digital keys to the shared terminal, the shared terminal can directly use the desired digital key for vehicle control. Users do not need to register in advance, and do not need to explicitly recycle. They can control the vehicle without network conditions and adapt to various sharing scenarios.

Referring to FIG. 6, there is shown a flow chart of steps of another embodiment of a vehicle digital key distribution management method according to the present invention, which is applied to a vehicle, and the vehicle establishes a communication connection with a first mobile terminal, a second mobile terminal and a server respectively. , which may include the following steps:

Step 601, generating a public key according to a preset root certificate and forwarding the public key to the server;

Specifically, as shown in FIG. 3 , the vehicle may have a preset root certificate and a first public key for the preset vehicle digital key, and the server may have a first private key matching the preset first public key in the vehicle. key.

At this time, the vehicle can receive the vehicle digital key activation command sent by the server, wherein the activation command can be generated by the server detecting the activation operation for the preset vehicle digital key; The root certificate generates a public-private key pair including the second public key and the second private key; and sends the second public key to the server, so that the server can use the received first private key and the second public key pair. A preset number of digital keys are sequentially signed and encrypted, and the preset number of digital keys for signature and encryption are sent to the second mobile terminal.

Step 602: Receive an encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys are generated by the server according to the key control information sent by the first mobile terminal , and use the public key to perform encryption processing; wherein, the preset number does not exceed the key usage times included in the key control information;

In an embodiment of the present invention, the second mobile terminal can send the operation code and the digital key to the vehicle, and during the sending process, the second mobile terminal and the vehicle can directly perform near field communication through Bluetooth and other means, so that the vehicle can In an environment with no mobile network signal, you can also use the digital key to unlock and other operation permissions.

Step 603, correspondingly control the vehicle according to the digital key.

After the vehicle receives the preset number of digital keys sent by the second mobile terminal, it indicates that the shareee needs to operate the vehicle at this time, and the vehicle can check the received digital key to determine whether the digital key can be used to complete the operation. The corresponding operation of the vehicle.

Specifically, when receiving the digital key carrying the corresponding key control information sent by the second mobile terminal, the digital key carrying the corresponding key control information is checked; after the check is passed, the response and the The operation corresponding to the corresponding key control information.

Checking the digital key carrying the corresponding key control information is mainly to determine whether the digital key is legal. The specific steps may be as follows: judging whether the decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information. , obtain the digital key for decryption and signature verification; if the digital key for decryption and signature verification can be obtained, then judge whether the digital key for decryption and signature verification is legal; if the digital key for decryption and signature verification is legal , then it is judged whether the key control information carried by the digital key for decryption and signature verification is legal.

Referring to FIG. 7 , a schematic flow chart of the vehicle inspection in the embodiment of the present invention is shown. The vehicle can perform communication security inspection, replay attack inspection, and control information inspection on the received digital key. After all inspections are passed, it indicates that the key is legal. , and then perform the corresponding action.

The vehicle can first perform a communication security check to determine whether the first public key matching the first private key and the second private key matching the second public key can be used to sign and encrypt a preset number of The digital key is decrypted and signed in turn. That is, the private key of the vehicle and the public key of the server are used to decrypt and verify the digital key in turn. If the verification is passed, the replay attack check is continued, otherwise the digital key is illegal.

The vehicle can then perform a replay attack check, the vehicle has a digital key record for the digital key, i.e. the record information for each key can be recorded and compared to determine whether the digital key is legitimate, including whether the key is disabled and whether the digital key has been used If the check passes the judgment of continuing to check the control information, otherwise the digital key is illegal.

By recording and comparing the record information of each key, the step of judging whether the digital key is legal may include: when the digital key for decryption and signature verification is obtained, acquiring the target key master identifier of the digital key for decryption and signature verification; It is judged whether the target key master identifier exists in the digital key record; if the target key master identifier exists in the digital key record, it can be determined that the target sub-record corresponding to the target key master identifier contains the target key master identifier. Whether the disabled flag bit is a preset threshold, and whether the key sub-identity contained in the target record reaches a preset expected sub-identity.

Wherein, if the disabled flag bit contained in the target sub-record is a preset threshold, and the key sub-identity contained in the target record reaches the preset expected sub-identity, the digital key for decryption and signature verification legal; or, if the target key master identifier does not exist in the digital key record, create a digital key for the decryption and signature verification digital key that includes the key master identifier, a preset desired sub-identity, and a disabled flag bit key record.

Referring to FIG. 8 , the implementation process of using the assigned digital key to control the vehicle in the embodiment of the present invention is shown. The vehicle can record and compare the recorded information of each digital key received to determine whether the digital key is legal and record the information. Can contain Master ID, expected sub ID (and disable flag, where Master ID is the Master ID of the digital key, which can be used to uniquely mark a key information; the expected sub ID can represent the sub of the digital key expected to receive this time. ID, if the sub ID in the digital key > the expected sub ID of the record table, it means that this digital key has not been used, and this digital key is allowed to be used, otherwise it is not allowed to be used; this ensures that each digital key can only be used once, avoiding Replay attack is prevented; sub ID in the digital key < the expected sub ID of the record table, indicating that the digital key has been used; the disable flag bit can indicate whether the key is disabled, if it is 1, it means disabled, all digital keys are not allowed to be used ; 0 means not disabled.

Based on the above steps, when the vehicle receives a digital key, it can first find out whether the Master ID exists; if it does not exist, a default record can be created, including (Master ID, expected sub ID and disable flag), Its values are (Master ID in the digital key, sub ID+1, 0 in the digital key); if it exists, first you can judge whether the disabled flag bit is 1, if it is 1, it means disabled, then the digital key is illegal; otherwise, it is further judged that the expected sub ID, if the sub ID in the digital key >= the expected sub ID, it means that the digital key has not been used, and the digital key is legal. Update the expected subID=digital key subID+1, otherwise the digital key is illegal. In the embodiment of the present invention, the key can be used without registration by means of active recording and comparison at the vehicle end, and the safety is ensured at the same time.

The vehicle can finally judge the control information check, and judge whether the key control information carried by the digital key for decryption and signature verification is the same as the digital key record, specifically judging whether the VIN number is consistent, whether the validity period has expired, and whether the operation authority is satisfied. ; If the judgment is passed, it means that all the checks are passed, indicating that the key is legal, and then the response operation is performed, and the result is returned.

In a preferred embodiment, the vehicle can also receive a key disabling instruction sent by the first mobile terminal; the key disabling instruction includes a disabling key master identifier; the key record information carrying the disabling key master identifier The disable flag bit is set to the disabled value.

In a preferred embodiment, the vehicle may also receive a restart activation instruction sent by the first mobile terminal at preset time intervals; in response to the restart activation instruction, generate a third public key and The public-private key pair of the third private key.

In the embodiment of the present invention, the server, the first mobile terminal, the second mobile terminal and the vehicle are involved, the key control information sent by the first mobile terminal is received through the server, and a preset number of digital keys are generated according to the key control information ; Then the generated preset number of digital keys can be encrypted, and the encrypted preset number of digital keys can be sent to the second mobile terminal, so that the second mobile terminal can send the vehicle with the corresponding key control information. The digital key can control the vehicle accordingly. By generating a preset number of digital keys carrying key control information and sending the encrypted preset number of digital keys to the shared terminal, the shared terminal can directly use the desired digital key for vehicle control. Users do not need to register in advance, and do not need to explicitly recycle, they can control the vehicle without network conditions and adapt to various sharing scenarios.

It should be noted that, for the sake of simple description, the method embodiments are described as a series of action combinations, but those skilled in the art should know that the embodiments of the present invention are not limited by the described action sequences, because According to embodiments of the present invention, certain steps may be performed in other sequences or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 9 , a structural block diagram of an embodiment of a vehicle digital key distribution management device of the present invention is shown, which is applied to a server, and the server establishes a communication connection with the first mobile terminal, the second mobile terminal and the vehicle respectively. , which can include the following modules:

The key control information acquisition module 901 is configured to receive the key control information sent by the first mobile terminal; the key control information includes the number of times of key use;

A digital key generation module 902, configured to generate a preset number of digital keys according to the key control information; wherein, the preset number does not exceed the number of times the key is used;

A digital key encryption module 903, configured to perform encryption processing on the preset number of digital keys; wherein, the public key used in the encryption processing is generated by the root certificate preset in the vehicle, and forwarded to the service through the vehicle end device;

The digital key sending module 904 is configured to send the encrypted preset number of digital keys to the second mobile terminal.

In an embodiment of the present invention, the digital key generation module 902 may include the following sub-modules:

a key pulling instruction generation sub-module, used for acquiring the account information of the shareee from the first mobile terminal, and generating a key pulling instruction according to the key control information and the account information of the shareee;

In an embodiment of the present invention, the key control information further includes key master identification, vehicle information, key validity period or operation authority.

In an embodiment of the present invention, the vehicle has a preset root certificate and a first public key, the server has a first private key matching the first public key; the digital key encryption module 903 may include the following submodules:

a vehicle digital key activation command sending submodule, configured to generate a vehicle digital key activation command when an activation operation on the preset vehicle digital key is detected, and send the vehicle digital key activation command to the vehicle; the The vehicle digital key activation instruction is used to instruct the vehicle to generate a public-private key pair including a second public key and a second private key through the root certificate.

In an embodiment of the present invention, the digital key sending module 904 may include the following sub-modules:

In an embodiment of the present invention, the preset number of digital keys includes digital keys carrying the same key master identifier, and/or digital keys carrying different key master identifiers; and may also include the following submodules:

In an embodiment of the present invention, the apparatus may further include the following modules:

A restart activation instruction sending module is configured to generate a restart activation instruction according to a preset time interval, and send the restart activation instruction to the vehicle; the restart activation instruction is used to instruct the vehicle to generate a third activation instruction through the root certificate. The public-private key pair of the public key and the third private key.

Referring to FIG. 10 , it shows a structural block diagram of another embodiment of the vehicle digital key distribution management device of the present invention, which is applied to a second mobile terminal, and the second mobile terminal is established with the server, the first mobile terminal and the vehicle respectively. The communication connection can specifically include the following modules:

The digital key receiving module 1001 is used for receiving the encrypted preset number of digital keys sent by the server; the encrypted preset number of digital keys are sent by the server according to the keys sent by the first mobile terminal Control information is generated, and the public key is used for encryption processing; wherein, the preset number does not exceed the key usage times included in the key control information;

The digital key sending module 1002 is configured to send a digital key to the vehicle, so that the vehicle can control the vehicle according to the digital key.

In an embodiment of the present invention, the digital key receiving module 1001 may include the following sub-modules:

a key pulling instruction receiving sub-module, configured to receive the key pulling instruction sent by the server; the key pulling instruction is generated by the server according to the key control information and account information sent by the first mobile terminal;

A key acquisition request sending submodule, configured to generate a key acquisition request according to the key pulling instruction, and send the key acquisition request to the server;

The word key receiving sub-module is configured to receive a preset number of digital keys sent by the server in response to the key acquisition request.

In an embodiment of the present invention, the received digital keys of the preset number are signed and encrypted by the server using the public and private keys.

In an embodiment of the present invention, the digital key sending module 1002 may include the following sub-modules:

a key control information acquisition sub-module, configured to cache the preset number of digital keys locally, and obtain digital keys carrying corresponding key control information locally;

The key control information sending sub-module is used to send the digital key carrying the corresponding key control information to the vehicle; the vehicle is used to check the digital key carrying the corresponding key control information, and after the inspection is passed, The vehicle is controlled according to the corresponding key control information.

Referring to FIG. 11 , there is shown a structural block diagram of another embodiment of a vehicle digital key distribution management apparatus according to the present invention, which is applied to a vehicle, and the vehicle is connected to the first mobile terminal, the second mobile terminal, and the server terminal respectively. Establishing a communication connection can specifically include the following modules:

a public key generation module 1101, configured to generate a public key according to a preset root certificate and forward the public key to the server;

A digital key receiving module 1102, configured to receive an encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys are sent by the server according to the first mobile terminal The key control information is generated, and the public key is used for encryption processing; wherein, the preset number does not exceed the key usage times included in the key control information;

The vehicle control module 1103 is configured to control the vehicle according to the digital key.

In an embodiment of the present invention, the vehicle has a preset first public key, and the server has a first private key matching the first public key; the public key generation module 1101 may include The following submodules:

In an embodiment of the present invention, the vehicle control module 1103 may include the following sub-modules:

a digital key checking submodule, configured to check the digital key carrying the corresponding key control information when receiving the digital key carrying the corresponding key control information sent by the mobile terminal;

In an embodiment of the present invention, the digital key checking sub-module may include the following units:

In an embodiment of the present invention, the decryption and signature verification judgment unit may include the following subunits:

In an embodiment of the present invention, the vehicle has a digital key record for the digital key; the digital key legality judging unit may include the following subunits:

A digital key legality judging subunit, used for determining whether the prohibited flag bit contained in the target subrecord corresponding to the target key main identifier is a preset threshold if the target key master identifier exists in the digital key record , and whether the key sub-identity contained in the target record reaches the preset expected sub-identity.

In an embodiment of the present invention, the digital key legality judging unit may further include the following subunits:

In an embodiment of the present invention, the key control information judging unit may include the following subunits:

The disabling value setting submodule is used for setting the disabling flag bit in the key record information carrying the disabling key master identifier as a disabling value.

a restart activation instruction receiving module, configured to receive the restart activation instruction sent by the first mobile terminal according to a preset time interval;

As for the apparatus embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and reference may be made to the partial description of the method embodiment for related parts.

The embodiment of the present invention also provides a vehicle, including:

It includes the above-mentioned vehicle digital key distribution management device, a processor, a memory, and a computer program stored on the memory and capable of running on the processor, and when the computer program is executed by the processor, the above-mentioned vehicle digital key distribution management method is implemented. In order to avoid repetition, the details are not repeated here.

Embodiments of the present invention also provide a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, each process of the foregoing embodiments of the vehicle digital key allocation management method is implemented, and the same can be achieved. In order to avoid repetition, the technical effect will not be repeated here.

The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments may be referred to each other.

It should be understood by those skilled in the art that the embodiments of the embodiments of the present invention may be provided as a method, an apparatus, or a computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

Embodiments of the present invention are described with reference to flowcharts and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the present invention. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing terminal equipment to produce a machine that causes the instructions to be executed by the processor of the computer or other programmable data processing terminal equipment Means are created for implementing the functions specified in the flow or flows of the flowcharts and/or the blocks or blocks of the block diagrams.

These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal equipment to operate in a particular manner, such that the instructions stored in the computer readable memory result in an article of manufacture comprising instruction means, the The instruction means implement the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing terminal equipment, so that a series of operational steps are performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby executing on the computer or other programmable terminal equipment The instructions executed on the above provide steps for implementing the functions specified in the flowchart or blocks and/or the block or blocks of the block diagrams.

Although preferred embodiments of the embodiments of the present invention have been described, additional changes and modifications to these embodiments may be made by those skilled in the art once the basic inventive concepts are known. Therefore, the appended claims are intended to be construed to include the preferred embodiments as well as all changes and modifications that fall within the scope of the embodiments of the present invention.

Finally, it should also be noted that in this document, relational terms such as first and second are used only to distinguish one entity or operation from another, and do not necessarily require or imply these entities or that there is any such actual relationship or sequence between operations. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass non-exclusive inclusion such that a process, method, article or terminal device that includes a list of elements includes not only those elements, but also a non-exclusive list of elements. other elements, or also include elements inherent to such a process, method, article or terminal equipment. Without further limitation, an element defined by the phrase "comprises a..." does not preclude the presence of additional identical elements in the process, method, article or terminal device comprising said element.

A vehicle digital key distribution management method and a vehicle digital key distribution management device provided by the present invention have been introduced in detail above. Specific examples are used in this paper to illustrate the principles and implementations of the present invention. The above embodiments The description is only used to help understand the method of the present invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and application scope. However, the contents of this specification should not be construed as limiting the present invention.

Claims

A vehicle digital key distribution management method, characterized in that it is applied to a server, and the server establishes a communication connection with a first mobile terminal, a second mobile terminal and a vehicle respectively, and the method includes:

Receive key control information sent by the first mobile terminal; the key control information includes the number of times of key use;

Generate a preset number of digital keys according to the key control information; wherein the preset number does not exceed the number of times the key is used;

Encrypting the preset number of digital keys; wherein, the public key used in the encryption process is generated by a root certificate preset in the vehicle, and forwarded to the server through the vehicle;

Send an encrypted preset number of digital keys to the second mobile terminal.
The method according to claim 1, wherein the generating a preset number of digital keys according to the key control information comprises:

Acquire account information from the first mobile terminal, and generate a key pulling instruction according to the key control information and the account information;

sending the key pulling instruction to the second mobile terminal; the key pulling instruction is used to instruct the second mobile terminal to generate a key obtaining request;

In response to the key acquisition request sent by the second mobile terminal, a preset number of digital keys are generated according to the key control information.
The method according to claim 1 or 2, wherein the key control information further includes a key master identification, vehicle information, key validity period or operation authority.
The method according to claim 1, wherein the vehicle has a preset root certificate and a first public key, and the server has a first private key matching the first public key;

The encrypting process for the preset number of digital keys includes:

When an activation operation on the preset vehicle digital key is detected, a vehicle digital key activation instruction is generated, and the vehicle digital key activation instruction is sent to the vehicle; the vehicle digital key activation instruction is used to instruct the vehicle Generate a public-private key pair including a second public key and a second private key by using the root certificate;

receiving the second public key sent by the vehicle, and using the first private key and the second public key to sequentially sign and encrypt the preset number of digital keys;

The sending the encrypted preset number of digital keys to the second mobile terminal includes:

A preset number of digital keys for signature and encryption processing are sent to the second mobile terminal.
The method according to claim 3, wherein the preset number of digital keys includes digital keys carrying the same key master identifier, and/or digital keys carrying different key master identifiers;

The generating a preset number of digital keys according to the key control information further includes:

generating a key sub-identity for the digital key; the key sub-identity is used to represent the number of times of use of the digital key;

During the process of sending the digital key carrying the same main key identification to the second mobile terminal, an operation of adding one to the key sub-identification of the digital key carrying the same key main identification is performed.
The method according to claim 1, wherein the method further comprises:

Obtaining a key disabling instruction; the key disabling instruction includes a disabling key master identifier;

The key disabling instruction is sent to the vehicle; the key disabling instruction is used to inform the vehicle to set the disabling identification bit in the key record information carrying the disabling key master identification to a disabling value.
The method according to claim 1, wherein the method further comprises:

Generate a restart activation instruction according to a preset time interval, and send the restart activation instruction to the vehicle; the restart activation instruction is used to instruct the vehicle to generate a third public key and a third private key through the root certificate. public-private key pair.
A method for distributing and managing vehicle digital keys, characterized in that it is applied to a vehicle, and the vehicle establishes a communication connection with a first mobile terminal, a second mobile terminal and a server respectively, and the method comprises:

Generate a public key according to the preset root certificate and forward the public key to the server;

Receive the encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys are generated by the server according to the key control information sent by the first mobile terminal, and use The public key is encrypted; wherein, the preset number does not exceed the number of key uses included in the key control information;

The vehicle is controlled accordingly according to the digital key.
The method according to claim 8, wherein the vehicle has a preset first public key, and the server has a first private key matching the first public key; the preset root The certificate generates a public key and forwards the public key to the server, including:

Receive a vehicle digital key activation instruction sent by the server; the activation instruction is generated by the server detecting an activation operation for the preset vehicle digital key;

Responding to the vehicle digital activation instruction, and generating a public-private key pair including a second public key and a second private key through the root certificate;

Send the second public key to the server; the server is configured to use the first private key and the second public key to perform signature and encryption processing on the preset number of digital keys in turn, and A preset number of digital keys for signature and encryption processing are sent to the second mobile terminal.
The method according to claim 8, wherein the corresponding control of the vehicle according to the digital key comprises:

When receiving the digital key carrying the corresponding key control information sent by the second mobile terminal, checking the digital key carrying the corresponding key control information;

After the check is passed, an operation corresponding to the corresponding key control information is performed in response.
The method according to claim 10, wherein the checking the digital key carrying the corresponding key control information comprises:

Determine whether the digital key carrying the corresponding key control information is legal;

The judging whether the digital key carrying the corresponding key control information is legal includes:

Determine whether the decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information to obtain a digital key for decryption and signature verification;

If the digital key for decryption and signature verification can be obtained, then determine whether the digital key for decryption and signature verification is legal;

If the digital key for decryption and signature verification is legal, it is determined whether the key control information carried by the digital key for decryption and signature verification is legal.
The method according to claim 10, wherein the judging whether decryption and signature verification operations can be performed on the digital key carrying the corresponding key control information to obtain the digital key for decryption and signature verification, comprising:

Judging whether the first public key matching the first private key and the second private key matching the second public key can be used to sequentially decrypt and verify a preset number of digital keys for signature and encryption processing deal with.
The method according to claim 10, wherein the vehicle has a digital key record for the digital key; and the judging whether the decrypted and signed digital key is legal comprises:

When obtaining the digital key for decryption and signature verification, obtain the target key master identifier of the digital key for decryption and signature verification;

Judging whether the target key master identifier exists in the digital key record;

If the target key master identifier exists in the digital key record, it is determined whether the disable flag bit included in the target subrecord corresponding to the target key master identifier is a preset threshold, and the target record includes Whether the key sub-identity of the key reaches the preset expected sub-identity.
The method of claim 13, wherein the method further comprises:

If the disabled flag bit contained in the target sub-record is a preset threshold, and the key sub-identity contained in the target record reaches the preset expected sub-identity, then the digital key for decryption and signature verification is legal;

Or, if the target key master identifier does not exist in the digital key record, create a digital key record containing the key master identifier, a preset desired sub-identity and a disabled flag bit for the digital key for decryption and signature verification .
The method according to claim 12, wherein, if the digital key for decryption and signature verification is legal, judging whether the key control information carried by the digital key for decryption and signature verification is legal, comprising:

Determine whether the key control information carried by the digital key for decryption and signature verification is the same as the digital key record.
The method according to claim 8, wherein the method further comprises:

receiving a key disabling instruction sent by the first mobile terminal; the key disabling instruction includes a disabling key master identifier;

The disabled identification bit in the key record information carrying the disabled key master identification is set as a disabled value.
The method according to claim 9, wherein the method further comprises:

Receive a restart activation instruction sent by the first mobile terminal according to a preset time interval;

In response to the restart activation instruction, a public-private key pair including a third public key and a third private key is generated by using the root certificate.
A vehicle digital key distribution management device, characterized in that it is applied to a server, and the server establishes a communication connection with a first mobile terminal, a second terminal and a vehicle respectively, and the device comprises:

a key control information acquisition module, configured to receive the key control information sent by the first mobile terminal; the key control information includes the number of times the key is used;

a digital key generation module for generating a preset number of digital keys according to the key control information; wherein the preset number does not exceed the number of times the key is used;

A digital key encryption module for performing encryption processing on the preset number of digital keys; wherein, the public key used in the encryption processing is generated by the root certificate preset in the vehicle, and forwarded to the server through the vehicle device;

The digital key sending module is used for sending the encrypted preset number of digital keys to the second mobile terminal.
A vehicle digital key distribution management device, characterized in that it is applied to a vehicle, the vehicle is respectively connected with a first mobile terminal, a second terminal and a server, and the device comprises:

a public key generation module, configured to generate a public key according to a preset root certificate and forward the public key to the server;

A digital key receiving module, configured to receive the encrypted preset number of digital keys sent by the second mobile terminal; the encrypted preset number of digital keys are sent by the server according to the first mobile terminal. Generate key control information, and use the public key to perform encryption processing; wherein, the preset number does not exceed the number of key uses included in the key control information;

The vehicle control module is used for correspondingly controlling the vehicle according to the digital key.
A vehicle, characterized by comprising: the vehicle digital key distribution management device according to claim 19, a processor, a memory, and a computer program stored on the memory and capable of running on the processor, the computer When the program is executed by the processor, the steps of the vehicle digital key distribution management method according to any one of claims 8-17 are implemented.
A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, any one of claims 1-7 or 8-17 is implemented Steps of a vehicle digital key assignment management method.