Information processing method and system of digital vehicle key and vehicle

Abstract

The invention discloses an information processing method and system of a digital vehicle key and a vehicle. The method is applied to a vehicle side and comprises the steps that a target request is sent to a server side, the target request is used for requesting the server side to preset a certificate on the vehicle side, the certificate is used for generating a plurality of digital vehicle keys, and the effective states of different digital vehicle keys are synchronized with the effective state of the certificate; acquiring a certificate issued by the server in response to the target request; the certificate is stored, a first notification message is sent to the server side, the first notification message is used for indicating that the certificate is successfully preset on the vehicle side, the state of the certificate is set to be an allocatable state by the server side, and the allocatable state is used for indicating that the certificate is allowed to be allocated to an application program bound with the vehicle side; the application program is used for executing locking operation or unlocking operation on the vehicle end through the digital vehicle key corresponding to the certificate. According to the invention, the technical problem of low information processing efficiency of the digital vehicle key is solved.

Description

Technical Field

[0001] The present invention relates to the field of vehicles, and in particular to an information processing method, system and vehicle for a digital vehicle key. Background Art

[0002] At present, with the continuous development of intelligence and Internet technology, the vehicle key management system is also constantly improving. However, the current vehicle key management system has some security and efficiency issues, such as being vulnerable to hacker attacks and key message replay attacks. Therefore, how to set up the information processing method in the vehicle key management system is very necessary.

[0003] In the related art, each digital car key of a vehicle in the vehicle key management system corresponds to an independent certificate. When creating and managing multiple keys, users need to process a large number of certificates, which increases the complexity and difficulty of the operation. In addition, users also need to spend more time and energy to maintain the above certificates, which is prone to confusion and errors. As the number of keys owned by users increases, the number of corresponding certificates will also increase sharply, which will cause the user's device (the terminal device bound to the vehicle end) to store a large amount of certificate information, occupy space, and may cause the performance of the device to deteriorate. Since certificate verification is required every time a digital car key is used, and each digital car key has an independent certificate, the efficiency of processing digital car keys on the vehicle end is low. Frequent communication with the server to obtain and verify certificate information increases network delays and system overhead. Therefore, there is still a technical problem of low information processing efficiency of digital car keys.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] Embodiments of the present invention provide a method, system and vehicle for processing information of a digital vehicle key, so as to at least solve the technical problem of low efficiency in information processing of a digital vehicle key.

[0006] According to one aspect of an embodiment of the present invention, a method for processing information of a digital car key is provided, which is applied to a vehicle side and includes: sending a target request to a server side, wherein the target request is used to request the server side to pre-set a certificate on the vehicle side, the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate; obtaining the certificate issued by the server side in response to the target request; saving the certificate, and sending a first notification message to the server side, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle side, and the status of the certificate is set by the server side to an allocable state, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

[0007] Optionally, sending a target request to the server includes: sending a target request to the server in response to a second notification message from the server, wherein the second notification message is used to notify the vehicle side that a certificate needs to be pre-set, and the second notification message is triggered when the number of certificates in an unallocated state on the vehicle side is lower than a first quantity threshold.

[0008] Optionally, obtaining a certificate issued by the server in response to a target request includes: when the server responds to the target request, generates a certificate, and the server successfully stores the certificate, obtaining the certificate issued by the server, wherein the stored certificate is valid within a target duration.

[0009] Optionally, the method also includes: obtaining the target state of the certificate in response to a third notification message from the server, wherein the third notification message is used to notify the vehicle side that the target state needs to be synchronized, and the third notification message is triggered when the certificate on the server side is in the target state, and the target state includes an invalid state or an updated state; synchronizing the target state to the certificate on the vehicle side.

[0010] Optionally, the target state is synchronized to the certificate on the vehicle side, including: in response to the target state being an invalid state, deleting the certificate on the vehicle side to make the certificate on the vehicle side in an invalid state; in response to the target state being an updated state, updating the certificate on the vehicle side to make the certificate on the vehicle side in an updated state, wherein the certificate in the updated state is used to support multiple updated digital car keys on the vehicle side.

[0011] Optionally, in response to the target state being an update state, updating the certificate on the vehicle side includes: in response to the target state being an extension state, extending the certificate on the vehicle side according to the extension state.

[0012] Optionally, the method further includes: synchronously recording and / or verifying identification information of messages of different digital car keys with the server, wherein the identification information is associated with the generation time of the message of the digital car key.

[0013] Optionally, the method also includes: obtaining an unlocking instruction sent by the application through the digital car key, and using the public key in the certificate to verify the message of the digital car key corresponding to the unlocking instruction; in response to successful verification of the message of the digital car key, performing an unlocking operation on the vehicle side.

[0014] According to another aspect of an embodiment of the present invention, a method for processing information of a digital car key is also provided, which is applied to a server, and includes: generating a certificate in response to a target request from a vehicle, wherein the target request is used to request the server to pre-set a certificate on the vehicle, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate; sending the certificate to the vehicle; in response to a first notification message from the vehicle, setting the status of the certificate to an allocable state, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle, and the application is used to perform a locking operation or an unlocking operation on the vehicle through the digital car key corresponding to the certificate.

[0015] Optionally, sending the certificate to the vehicle side includes: in response to the server side successfully storing the certificate, sending the certificate to the vehicle side, wherein the stored certificate is valid within a target time period.

[0016] Optionally, the application includes a client program and a mini program, and the method further includes: in response to successfully assigning a certificate to the digital car key to be authorized, generating a QR code for the digital car key to be authorized, wherein the digital car key to be authorized is created by the client program and the QR code is used to identify the digital car key to be authorized; sending the QR code to the client program, wherein the QR code is used to enable the client program to authorize the mini program to use the digital car key to be authorized, and the number of messages of the digital car key to be authorized is less than a second quantity threshold.

[0017] Optionally, the method also includes: generating messages of different digital car keys based on the private key corresponding to the certificate; synchronously recording and / or verifying the identification information of the message of the digital car key with the vehicle end, wherein the message of the digital car key is identified by the identification information, and the identification information is associated with the generation time of the message of the digital car key.

[0018] According to another aspect of an embodiment of the present invention, there is also provided an information processing device for a digital car key, including: a first sending unit, used to send a target request to a server, wherein the target request is used to request a certificate to be pre-installed on the vehicle side, the certificate is used to generate multiple digital car keys, and the status of different digital car keys is synchronized with the status of the certificate; an acquisition unit, used to acquire the certificate issued by the server in response to the target request; a second sending unit, used to save the certificate and send a first notification message to the server, wherein the first notification message is used to indicate that the certificate is successfully pre-installed on the vehicle side, and the status of the certificate is set by the server to an allocable state, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

[0019] According to another aspect of an embodiment of the present invention, another information processing device for a digital car key is provided, including: a generating unit, used to generate a certificate in response to a target request from a vehicle end, wherein the target request is used to request to pre-set the certificate on the vehicle end, and the certificate is used to generate multiple digital car keys, and the status of different digital car keys is synchronized with the status of the certificate; a sending unit, used to send the certificate to the vehicle end, wherein the certificate is saved by the vehicle end; a setting unit, used to set the status of the certificate to an allocable state in response to a first notification message from the vehicle end, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle end, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle end, and the application is used to perform a locking operation or an unlocking operation on the vehicle end through the digital car key corresponding to the certificate.

[0020] According to another aspect of an embodiment of the present invention, there is also provided an information processing system for a digital car key, including: a vehicle side, for sending a target request to a server side, wherein the target request is used to request the server side to pre-set a certificate on the vehicle side, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate; a server side, for generating a certificate in response to the target request from the vehicle side, and sending the certificate to the vehicle side; wherein the vehicle side is used to save the certificate and send a first notification message to the server side, the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle side, and the status of the certificate is set by the server side to an allocable state, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

[0021] According to another aspect of an embodiment of the present invention, a vehicle is provided, including: a memory and a processor, wherein the memory stores an executable program; and the processor is used to run the program, wherein any one of the above methods is executed when the program is run.

[0022] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided. The computer-readable storage medium includes a stored program, wherein when the program is executed, a processor of a device is controlled to execute any one of the above methods.

[0023] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising: one or more processors; a storage device for storing one or more programs; and a method in which, when the one or more programs are executed by the one or more processors, the one or more processors execute any one of the above methods.

[0024] In an embodiment of the present invention, if a digital car key is required to perform a locking operation or unlocking operation on the vehicle end, the vehicle end may send a corresponding target request to the server end, and the server end may analyze the target request, analyze the certificate pre-set on the vehicle end requested by the target request, and send the certificate to the vehicle end. The vehicle end may save the received certificate and send a corresponding first notification message to the server end to prompt the vehicle end that the certificate is successfully pre-set. After the server end receives the first notification message, the state of the certificate may be set to an assignable state, at which time the certificate is allowed to be assigned to the application on the terminal device of the user bound to the vehicle end, so that the digital car key corresponding to the certificate can be operated through the application to perform a locking operation or unlocking operation on the vehicle end. In an embodiment of the present application, since a certain number of key message certificates are pre-set on the vehicle end, the number of certificates that need to be stored on the user's terminal device is greatly reduced, thereby saving the storage space of the user's device and avoiding the problem of terminal device performance degradation caused by excessive certificate information. When using a digital car key, the key is directly generated through the pre-set certificate on the vehicle end, thereby simplifying the key creation and management process, reducing the user's operation complexity, and improving the user experience. And since a certain number of certificates have been pre-installed on the vehicle-side device, there is no need to frequently communicate with the server to obtain and verify certificates when using the digital car key, which reduces network delays and system overhead, thereby achieving the technical effect of improving the information processing efficiency of the digital car key and solving the technical problem of low information processing efficiency of the digital car key. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0026] Figure 1 is a flow chart of a method for processing information of a digital vehicle key according to an embodiment of the present invention;

[0027] Figure 2 is a flow chart of another method for processing information of a digital vehicle key according to an embodiment of the present invention;

[0028] Figure 3 is a schematic diagram showing a process of pre-setting a certificate for a vehicle through a network according to an embodiment of the present invention;

[0029] Figure 4 is a schematic diagram showing a process of managing a vehicle certificate through a network according to an embodiment of the present invention;

[0030] Figure 5 is a schematic diagram showing a process of authorizing a user to use a mini-program key according to an embodiment of the present invention;

[0031] Figure 6 is a schematic diagram showing a process of obtaining an authentication message / creating a key / unlocking according to an embodiment of the present invention;

[0032] Figure 7 is a system block diagram of an information processing system for a digital vehicle key according to an embodiment of the present invention;

[0033] Figure 8 is a structural block diagram of an information processing device for a digital vehicle key according to an embodiment of the present invention;

[0034] Fig. 9 is a structural block diagram of another information processing device for a digital vehicle key according to an embodiment of the present invention;

[0035] Fig.10 is a structural block diagram of an autonomous driving vehicle according to an embodiment of the present invention. DETAILED DESCRIPTION

[0036] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0037] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0038] According to an embodiment of the present invention, an embodiment of a method for information processing of a digital car key is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0039] Figure 1 is a flow chart of a method for processing information of a digital car key according to an embodiment of the present invention. Figure 1 As shown, the method is applied to the vehicle side and includes the following steps:

[0040] Step S102, sending a target request to the server.

[0041] In the technical solution provided in the above step S102 of the present invention, the vehicle side can also be referred to as a vehicle side device, for example, it can be an in-vehicle infotainment system (Telematics Box, referred to as TBOX for short). The server can set a digital key service of the server. The target request can be used to request the server to pre-set a certificate on the vehicle side, that is, it can be used to apply for a pre-set certificate. The certificate can be used to generate multiple digital car keys, and can also be referred to as a key message certificate. The validity status of different digital car keys is synchronized with the validity status of the certificate, that is, when the certificate is in a valid state, the corresponding digital car key is also in a valid state. In an embodiment of the present invention, the digital car key can be simply referred to as a key, for example, it can be a mini-program key, that is, it can be a key in the application of the user's terminal device for controlling the locking or unlocking of the vehicle.

[0042] Optionally, the above certificate is a digital credential used to verify identity, encrypt communications, and ensure data integrity. A certificate is a digital document that usually contains the identity information of the public key and private key holder and other related information. Certificates are issued and managed by a trusted third party, such as a Certificate Authority (CA).

[0043] Optionally, the certificate contains a public key, which is used to encrypt communications or verify digital signatures. The public key is the key used to encrypt data or verify signatures. The certificate usually contains the identity information of the public key holder, such as name, organization information, etc. The above information can help verify the authenticity of the public key holder. The certificate may also contain other relevant information such as the validity period, information of the certificate issuing authority, and the purpose of the certificate. The main function of the certificate is to verify the authenticity of the public key and ensure that the public key does belong to the claimed entity and is not forged. The security and credibility of the public key can be ensured by the digital signature of the certificate issuing authority. The use of certificates can ensure the authenticity of the identities of the communicating parties and the security of the communication data. The recipient can use the public key in the certificate to decrypt the encrypted data or verify the digital signature to ensure the security of the communication.

[0044] In summary, a certificate is a digital document that contains a public key, identity information, and other related information, and is issued by a trusted CA. The main function of a certificate is to verify the authenticity of the public key and ensure the security and reliability of communications. Through the CA's digital signature mechanism, a certificate can help ensure the security of the public key and protect the security of communication data.

[0045] Optionally, a public key and a private key (Private Key) are a pair of keys used in encrypted communications and digital signatures to ensure the security and authenticity of communications. The public key is a publicly shared key used to encrypt information or verify digital signatures. The public key can be used by anyone to encrypt information, but can only be decrypted by the corresponding private key. The private key is a confidential key used to decrypt information encrypted by the public key or generate a digital signature. The private key can only be held by the owner of the key and is used to decrypt encrypted data or verify a digital signature. The information is encrypted using the recipient's public key, and only the recipient holding the corresponding private key can decrypt the information. The above method can ensure the security of information during transmission, and even if the public key is leaked, it will not affect the security of the information. The recipient uses his own private key to decrypt the information encrypted by the public key, ensuring that only the recipient can read the information and protect the confidentiality of the information.

[0046] Optionally, the sender signs the message with his or her own private key to generate a unique digital signature. A digital signature is a summary of the message, encrypted with the sender's private key, to ensure the authenticity and integrity of the message. The receiver verifies the digital signature using the sender's public key to confirm the authenticity and integrity of the message. If the digital signature is verified, it can be determined that the message has not been tampered with, ensuring the security of the message. The pairing of public and private keys can be used for secure communication to ensure that the message is not stolen or tampered with during transmission. Digital signatures can be used for identity authentication and message integrity verification to protect the authenticity and security of the message.

[0047] To summarize, the public key and private key are a pair of keys used in encrypted communications and digital signatures. Public key encryption and private key decryption ensure the secure transmission of information, while private key signature and public key verification ensure the authenticity and integrity of information.

[0048] In this embodiment, if the vehicle's digital car key is needed to lock or unlock the vehicle, a corresponding target request can be sent from the vehicle end to the connected server end. Using the above target request, the certificate corresponding to the digital car key to be generated can be preset on the vehicle end.

[0049] Optionally, the vehicle sends a target request to the connected server through TBOX to request the server's digital key service. The target request includes information about the certificate corresponding to the digital vehicle key that needs to be preset.

[0050] Step S104, obtaining a certificate issued by the server in response to the target request.

[0051] In the technical solution provided in the above step S104 of the present invention, after the server receives the target request sent by the vehicle, it can analyze the target request, determine the corresponding certificate, and send it to the vehicle through the network.

[0052] Optionally, after receiving the target request, the server can process the target request to verify the legitimacy and integrity of the target request. For example, the server can ensure the validity of the target request by checking the parameters in the target request, including vehicle identification, digital car key information, etc. Based on the above parameters in the target request, a database or certificate storage system can be queried to find the certificate required for the digital car key corresponding to the target request from the above database or system.

[0053] Optionally, after determining the certificate to be issued, the server will sign and encrypt the certificate to ensure the security of certificate transmission. Certificate signing is to verify the authenticity and integrity of the certificate, and certificate encryption is to protect the certificate from tampering or theft during transmission. Once the certificate is signed and encrypted, the server will issue the certificate to the vehicle. For example, the certificate may be sent through a secure channel or encrypted to ensure security during transmission.

[0054] Through the above method, the server can determine the required certificate according to the received target request, and send it to the vehicle after signing and encryption, ensuring the security and reliability of the digital car key. At the same time, after the vehicle receives and verifies the certificate, it can effectively use the digital car key to lock or unlock the vehicle.

[0055] Step S106: save the certificate and send a first notification message to the server.

[0056] In the technical solution provided in the above step S106 of the present invention, the first notification message can be used to indicate that the certificate is successfully preset on the vehicle side, and the status of the certificate can be set by the server to an allocable state. The allocable state can be used to indicate that the certificate is allowed to be allocated to the application bound to the vehicle side, that is, a portion of the certificate is allocated to the application. The application can be used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate. The application can be an application (APPlication, referred to as APP for short) on the user's terminal device, such as a mobile phone APP, or a small program on the terminal device. This is only an example and is not specifically limited.

[0057] In this embodiment, after the vehicle side receives the certificate issued by the server side in response to the target request, the vehicle side may save the certificate and send a first notification message to the server side.

[0058] Optionally, after the vehicle receives the certificate issued by the server, it can perform operations such as decryption and verification on the certificate. For example, the certificate can be decrypted, and then the signature and integrity of the certificate can be verified to ensure that the certificate is legal and valid. If the certificate verification passes, the vehicle can save the certificate and associate the certificate with the corresponding digital car key. The purpose of saving the certificate is to effectively verify the identity of the digital car key and to achieve secure communication between the vehicle and the server when performing vehicle locking or unlocking operations.

[0059] Optionally, the vehicle side sends a first notification message to the server side, notifying the server side that the certificate has been successfully preset on the vehicle side. The first notification message can ensure that the server side can understand the preset status of the certificate and prepare for subsequent operations. After the server side receives the first notification message sent by the vehicle side, it will set the status of the corresponding certificate to an allocatable state. The allocatable state means that the certificate is allowed to be assigned to an application bound to the vehicle side for use. Through the above method, the certificate can be used by the application to perform vehicle locking or unlocking operations. Once the certificate status is set to an allocatable state, the application can be bound to the certificate to ensure secure communication and operation. The application can perform vehicle locking or unlocking operations through the digital car key corresponding to the certificate to achieve control of the vehicle.

[0060] Through the above method, the vehicle successfully saved the certificate and sent the first notification message to the server. The server also set the certificate status to the assignable status, preparing for subsequent application binding and operation, ensuring the safe use of the digital car key and the smooth locking and unlocking of the vehicle.

[0061] In an embodiment of the present invention, a certificate pre-setting management mechanism is proposed, which stores a certain number of key message certificates on the vehicle side in advance to simplify the process of user creation and management of keys and improve the efficiency and security of the system. By adopting the certificate pre-setting method, users do not need to generate or request certificates by themselves, but store a certain number of certificates on the vehicle side in advance. Based on the above mechanism, users can complete the creation and management of keys only through network connection. This greatly simplifies the user operation process and saves the user's time and energy. Under this mechanism, if the user deletes a key, the vehicle-side device will delete the corresponding certificate synchronously in real time. The above real-time synchronization can ensure the consistency between the key and the certificate, reduce the possibility of data inconsistency, and further improve the reliability of the vehicle key management system. Each certificate has an expiration time. Once the certificate expires, the corresponding key will automatically expire. Through the above method, the situation where the expired certificate is maliciously used can be effectively avoided, and the security of the vehicle key management system is improved.

[0062] In summary, the certificate pre-set management mechanism simplifies the process of user creation and management of keys by storing certificates on the vehicle in advance, realizes the synchronous management of keys and certificates, and effectively improves the security and reliability of the system.

[0063] In the above steps S102 to S106 of the present application, if it is necessary to use the digital car key to perform a locking operation or an unlocking operation on the vehicle end, the vehicle end can send a corresponding target request to the server end, and the server end can analyze the target request, analyze the certificate pre-set on the vehicle end requested by the target request, and can send the certificate to the vehicle end. The vehicle end can save the received certificate and send a corresponding first notification message to the server end to prompt the vehicle end to successfully pre-set the certificate. After the server end receives the first notification message, the status of the certificate can be set to an allocable state, at which time the certificate is allowed to be allocated to the application on the user's terminal device bound to the vehicle end, so that the digital car key corresponding to the certificate can be operated through the application to perform a locking operation or an unlocking operation on the vehicle end. In this embodiment, since a certain number of key message certificates are pre-set on the vehicle end, the number of certificates that need to be stored on the user's terminal device is greatly reduced, thereby saving the storage space of the user's device and avoiding the problem of terminal device performance degradation caused by excessive certificate information. When using the key, the key is directly generated through the pre-set certificate on the vehicle side, which simplifies the key creation and management process, reduces the user's operation complexity, and improves the user experience. And because a certain number of certificates have been pre-set on the vehicle-side device, when using the digital car key, there is no need to frequently communicate with the server to obtain and verify the certificate, which reduces network delays and system overhead. This achieves the technical effect of improving the information processing efficiency of the digital car key and solves the technical problem of low information processing efficiency of the digital car key.

[0064] The following further describes how the vehicle side sends a target request to the server side in this embodiment.

[0065] As an optional implementation method, step S102, sending a target request to the server, includes: sending a target request to the server in response to a second notification message from the server, wherein the second notification message is used to notify the vehicle side that a certificate needs to be pre-set, and the second notification message is triggered when the number of certificates in an unallocated state on the vehicle side is lower than a first quantity threshold.

[0066] In an embodiment, in the process of sending a target request to the server, if the vehicle side receives a second notification message from the server side, the vehicle side may send the target request to the server side. The second notification message may be used to notify the vehicle side that a certificate needs to be pre-set, and the second notification message is triggered when the number of certificates in an unallocated state on the vehicle side is lower than a first quantity threshold, that is, the second notification message is used to notify the vehicle side to supplement the certificate. The first quantity threshold may be a preset value, or a value set by itself according to a preset situation. It should be noted that the above-mentioned setting method of the first quantity threshold is only for illustrative purposes and is not specifically limited here.

[0067] Optionally, the server's database can store information about the number of unallocated certificates for each vehicle for statistics and comparison. The server monitors the number of unallocated certificates on the vehicle regularly or in real time. For example, this can be achieved by regularly querying the database or updating the information about the number of unallocated certificates in real time. The server will compare the set first quantity threshold with the number of unallocated certificates monitored on the vehicle. If the server detects that the number of unallocated certificates on a vehicle is lower than the set first quantity threshold, the server will trigger the sending of a second notification message to the vehicle. Once the server determines that the number of unallocated certificates on a vehicle is lower than the threshold, the server will send a second notification message to the vehicle, notifying the vehicle that additional certificates are needed. The second notification message may include information such as the number and type of certificates that need to be supplemented.

[0068] Through the above method, the server can effectively monitor the number of unallocated certificates on the vehicle side, and determine whether to send a notification of supplementary certificates to the vehicle side according to the set threshold. The above real-time monitoring and comparison method can ensure that the vehicle side always has a sufficient number of certificates to support related operations.

[0069] The following further describes how the vehicle side of this embodiment obtains the certificate issued by the server side in response to the target request.

[0070] As an optional implementation method, step S104, obtaining the certificate issued by the server in response to the target request, includes: when the server responds to the target request, generates a certificate, and the server successfully stores the certificate, obtaining the certificate issued by the server, wherein the stored certificate is valid within the target duration.

[0071] In an embodiment, in the process of obtaining the certificate issued by the server in response to the target request, in response to the server successfully storing the certificate, the certificate issued by the server is obtained, wherein the stored certificate is valid within the target duration, that is, the stored certificate automatically becomes invalid upon expiration.

[0072] Optionally, after the server receives the target request, the server first receives a request for a pre-set certificate sent by the vehicle. The target request may include relevant information such as the identity information of the vehicle, the type and quantity of the required certificates, etc. Based on the information in the above target request, the server starts to generate a certificate. The certificate generation process includes steps such as generating a public key, a private key pair, and a digital signature to ensure the uniqueness and security of the certificate. After the certificate is generated, the server will sign and encrypt the certificate. The certificate signature is to verify the authenticity and integrity of the certificate, and the certificate encryption is to protect the security of the certificate transmission. After the certificate is generated and processed, the server stores the certificate information in the corresponding database.

[0073] Optionally, the server will also bind the generated certificate to the corresponding vehicle to ensure that each certificate can be accurately associated with the corresponding vehicle, that is, the certificate can be returned to the corresponding vehicle. After storing the certificate in the database, the server will update the records in the database, including the status of the certificate, the associated information of the vehicle, etc., so as to ensure that the certificate information in the database is always kept up to date and accurate.

[0074] Through the above method, the server can effectively generate certificates and store them in the database, and establish an association between the certificate and the vehicle or vehicle side, which can ensure the security and authenticity of the certificate and provide support for subsequent certificate distribution and use.

[0075] The following further describes how the vehicle side of this embodiment obtains the target status of the certificate.

[0076] As an optional implementation mode, the method also includes: in response to a third notification message from the server, obtaining the target state of the certificate, wherein the third notification message is used to notify the vehicle side that the target state needs to be synchronized, and the third notification message is triggered when the certificate on the server side is in the target state, and the target state includes an invalid state or an updated state; synchronizing the target state to the certificate on the vehicle side.

[0077] In an embodiment, when a third notification message is received from the server, the target state of the certificate can be obtained, and the target state can be synchronized to the certificate on the vehicle, wherein the third notification message can be used to notify the vehicle that the target state needs to be synchronized, that is, to notify the vehicle to synchronize the certificate state. The third notification message is triggered when the certificate on the server is in the target state. The target state can also be referred to as the current certificate state or the returned data (that is, the server returns the current certificate state to the vehicle). The target state can be used to indicate changes in the certificate, or key expiration, user-initiated key invalidation, etc. The target state can include an invalid state or an updated state. The invalid state corresponds to a key expiration or a user-initiated key invalidation. The updated state corresponds to a change in the certificate.

[0078] It should be noted that the above target states are only examples and are not specifically limited here. As long as the target state requires certificate status synchronization, it is within the protection scope of the embodiments of the present application.

[0079] Optionally, the server may periodically check the validity period of the key or certificate stored in the database to determine whether any key has expired. If a key has expired, the server may send a corresponding third notification message to the vehicle to notify the vehicle of the synchronization certificate status.

[0080] Optionally, if the user actively requests to invalidate a key or certificate, the server can mark the status of the key or certificate as invalid according to the user's request. The server updates the status of the corresponding key or certificate in the database to invalid, and can send a corresponding third notification message to the vehicle to notify the vehicle to synchronize the certificate status.

[0081] Optionally, the server can monitor the certificate information stored in the database in real time to detect whether there are other changes to the certificate, such as changes in certificate permissions, changes in owner information, or certificate deletion. By setting an event listener, the server can capture certificate change events in a timely manner and process the changes. Once it is detected that the key has expired, the user has actively invalidated the key, or there are other changes to the certificate, the server will promptly update the relevant records in the database to ensure that the information in the database is always accurate. For the above changes, the server can send a corresponding third notification message to the vehicle to notify the vehicle to synchronize the certificate status.

[0082] Through the above method, the server can effectively monitor and handle key expiration, user-initiated key expiration or other changes in certificates, ensuring that the key and certificate information are always kept up to date and accurate, thereby ensuring the security and user experience of the vehicle key management system, and ensuring the synchronization of the certificate status between the vehicle and the server.

[0083] Optionally, after receiving the third notification message, the vehicle side can receive the current certificate status returned by the server side, and can synchronize and adjust the status of the corresponding certificate in the vehicle side according to the current certificate status, for example, update or delete the status. After the synchronization adjustment is completed, the vehicle side can send a corresponding message to the server side to notify that the certificate status has been updated. After receiving the above message, the server side can confirm that the vehicle side has updated the certificate status to synchronized.

[0084] The following further describes how to synchronize the target state to the certificate on the vehicle side in this embodiment.

[0085] As an optional implementation method, the target state is synchronized to the certificate on the vehicle side, including: in response to the target state being an invalid state, deleting the certificate on the vehicle side to make the certificate on the vehicle side in an invalid state; in response to the target state being an updated state, updating the certificate on the vehicle side to make the certificate on the vehicle side in an updated state, wherein the certificate in the updated state is used to support multiple updated digital car keys on the vehicle side.

[0086] In an embodiment, in the process of synchronizing the target state to the certificate on the vehicle side, it can be determined whether the target state is an invalid state or an updated state. If the target state is an invalid state, the certificate on the vehicle side can be deleted so that the status of the certificate on the vehicle side and the corresponding certificate on the server side are both invalid. If the target state is an updated state, the certificate on the vehicle side can be updated so that the certificate on the vehicle side and the corresponding certificate on the server side are both in an updated state. Among them, the invalid state can be used to indicate expiration or user-initiated invalidation. The updated state can be used to indicate the existence of other changes. The certificate in the updated state can be used to support multiple updated digital car keys on the vehicle side, that is, to support more keys.

[0087] Optionally, after the server detects that the target state is invalid, the certificate needs to be invalidated. This may be because the certificate has expired or the user actively requests invalidation. In order to synchronize the certificate on the vehicle with the server, the server will send an instruction to require the vehicle to delete the corresponding certificate, so that the certificate on the vehicle is in an invalid state. After receiving the instruction, the vehicle will execute the operation of deleting the certificate to ensure that the certificate on the vehicle is consistent with the server and both are in an invalid state.

[0088] Optionally, after the server detects that the target state is in the update state, the certificate needs to be updated. This may be because the certificate information needs to be changed or there are other changes. In order to synchronize the certificate on the vehicle with the server and keep it in the update state, the server will send an instruction to require the vehicle to update the corresponding certificate. After receiving the instruction, the vehicle will perform the operation of updating the certificate to ensure that the certificate on the vehicle is consistent with the server and is in the update state. The certificate in the update state can support multiple updated digital car keys on the vehicle.

[0089] Through the above method, the server can perform corresponding operations according to different target states, ensuring that the certificate on the vehicle side is synchronized with the server side and in the correct state to support the digital car key operation on the vehicle side. This can effectively maintain the validity and security of the certificate while ensuring the normal operation of the system.

[0090] The following further describes a method for updating the certificate on the vehicle side if the target state of this embodiment is an update state.

[0091] As an optional implementation manner, in response to the target state being an update state, updating the certificate on the vehicle side includes: in response to the target state being an extension state, extending the certificate on the vehicle side according to the extension state.

[0092] In an embodiment, when the target state is the update state and the certificate on the vehicle side is updated, if the target state is the extension state, the certificate on the vehicle side can be extended according to the extension state.

[0093] Optionally, the expansion and management of pre-configured certificates is an important aspect of ensuring that the system can support more key generation and manage certificates efficiently.

[0094] Optionally, as the number of system users and needs increase, the number of pre-set certificates may need to be continuously expanded. The server can regularly evaluate the usage and needs of the system and increase the number of pre-set certificates in a timely manner to support the generation of more keys. Pre-set multiple types of certificates to meet the needs of different users and scenarios. Different types of certificates can support the generation of keys with different functions or permissions, improving the flexibility and adaptability of the system. Update certificates regularly to ensure the security and validity of certificates. The server can regularly update or replace old certificates, while retaining historical certificate information for tracking and management. The server needs to establish a secure and reliable certificate storage system and perform regular backups to prevent certificate loss or damage. Real-time monitoring of certificate status, timely response to abnormal or expired certificate status, and ensure timely update and replacement of certificates. Regularly check the validity period of certificates and update or renew them as needed. The server can automate the certificate update process to ensure that certificates are always valid. Ensure that only authorized users or systems can access and manage certificate information to avoid unauthorized operations that pose risks to system security.

[0095] Through the above-mentioned certificate expansion strategy and management and maintenance measures, the pre-set certificates can be effectively expanded and managed to support the generation of more keys and ensure the safe and stable operation of the system. This can improve the flexibility, security and reliability of the system and provide users with a better user experience.

[0096] The process of obtaining identification information by the vehicle end of this embodiment is further explained below.

[0097] As an optional implementation method, identification information of messages of different digital car keys is synchronously recorded and / or verified with the server, wherein the identification information is associated with the generation time of the message of the digital car key.

[0098] In an embodiment, identification information of messages of different digital car keys that are synchronized and / or verified with the server can be obtained. The server synchronization record can be a record of serial number synchronization. The verification can be a message integrity check. The message can also be called a key message. The identification information is associated with the generation time of the message of the digital car key, for example, it can be a key message serial number, which can be a corresponding incremental serial number assigned to each key message when it is generated, and can be used to ensure the uniqueness of each key generated by the same certificate.

[0099] It should be noted that the above-mentioned identification information is only for illustration and is not specifically limited here. As long as the identification information can be used to distinguish different digital car keys and reflect the uniqueness of each digital car key, it is within the protection scope of the embodiment of the present invention.

[0100] Optionally, serial number generation and verification plays a vital role in the key management system. Each key message is assigned an incremental serial number when it is generated. This serial number is usually a unique identifier used to identify different key messages. The serial number is usually generated in an incremental manner to ensure that each newly generated key message has a larger serial number than the previous one. This helps the system identify the latest key message and ensure the timeliness of the data.

[0101] Optionally, the vehicle and the server will record and verify the serial number of each key message to ensure the timeliness and validity of the key message. When receiving a key message, the server will verify whether the serial number in the message conforms to the expected incrementing rule. If the serial number does not increase or the serial number is not within the expected range, it may indicate an error or abnormality that requires further processing. Verifying the serial number can prevent replay attacks, that is, the attacker repeatedly sends previous key messages to deceive the system. By verifying the serial number, the system can identify duplicate messages in a timely manner to ensure the security of the system.

[0102] In the embodiment of the present invention, through the incremental serial number generation and verification mechanism, the system can ensure the timeliness and validity of the key message and avoid using outdated or invalid key messages. The serial number verification can effectively prevent replay attacks and protect the system from the threat of malicious attackers sending duplicate key messages. By verifying the serial number, the system can detect abnormal situations in time and protect the system from potential errors or attacks.

[0103] In summary, serial number generation and verification are key steps to ensure the timeliness, effectiveness and system security of key messages, and are of great significance in the key management system. Through an effective serial number generation and verification mechanism, the system can ensure the legitimacy and security of key messages.

[0104] Optionally, serial number synchronization is a mechanism between the server and the vehicle to ensure that the system has a consistent understanding of the key message serial number, thereby preventing outdated or unauthorized key messages from being used. The server and the vehicle need to synchronize serial numbers regularly to ensure that both parties have a consistent understanding of the key message serial number. This can be achieved through timed synchronization operations or event-based triggering. The server will send the latest serial number information to the vehicle to ensure that the vehicle has the latest serial number data. After receiving the serial number information, the vehicle will verify and update the local serial number information to keep it synchronized with the server. During the serial number synchronization process, a two-way communication mechanism can also be implemented to ensure that both parties can obtain the latest serial number information in a timely manner to avoid data inconsistencies.

[0105] In an embodiment of the present invention, through the serial number synchronization mechanism, the consistent recognition of the key message serial number by the server and the vehicle can be ensured. The two parties synchronize the latest serial number information to avoid data inconsistency and maintain the consistency of system data. Through timely serial number synchronization, the system can prevent outdated or unauthorized key messages from being used. Both parties always operate based on the latest serial number information to ensure system security and data validity. Regular serial number synchronization operations help maintain the stability of the system and avoid erroneous operations and system anomalies caused by data inconsistency. The serial number synchronization mechanism is an important step to ensure the consistency and security of system data. Through regular serial number synchronization operations, the consistent recognition of the key message serial number by the server and the vehicle can be ensured, preventing outdated or unauthorized key messages from being used, and improving the stability and security of the system.

[0106] The following further describes the process of how to perform the unlocking operation on the vehicle side in this embodiment.

[0107] As an optional implementation method, the method also includes: obtaining an unlocking instruction sent by the application through the digital car key, and using the public key in the certificate to verify the message of the digital car key corresponding to the unlocking instruction; in response to successful verification of the message of the digital car key, performing an unlocking operation on the vehicle side.

[0108] In an embodiment, the unlocking instruction sent by the digital car key in the application can be obtained, and the message of the digital car key corresponding to the unlocking instruction can be verified by using the public key in the certificate. If the message verification is successful, the unlocking operation can be performed on the vehicle end, wherein the message of the digital car key can also be called a digital key message.

[0109] In the embodiment of the present invention, tampering prevention in the design of the digital key message is an important measure to ensure that the message is not tampered with during transmission.

[0110] Optionally, the digital key message can be verified by two anti-tampering methods: message integrity check and digital signature. In the process of message integrity check, a hash function or a message authentication code (MAC) method can be used to ensure the integrity of the data during transmission. The hash function converts the message into a summary of a fixed length. Any change to the message will cause the hash value to change, so that data tampering can be detected. MAC is the verification value obtained after encrypting the message. Only the party with the key can correctly calculate the MAC to ensure the integrity and authenticity of the data. The message is processed by a hash function or MAC algorithm to obtain a check value, and the check value is attached to the message and sent together. After receiving the message, the same hash function or MAC algorithm is used to process the received message to obtain a check value, which is then compared with the received check value to determine whether the data has been tampered with.

[0111] Optionally, digital signature is the process of signing a message with a private key and then verifying it with a public key. The server signs the message with its own private key, generates a digital signature, and attaches the digital signature to the message and sends it to the vehicle. The vehicle verifies the digital signature using the public key in the server's certificate to ensure the authenticity and integrity of the message. During the digital signature verification process, the vehicle uses the server's public key to decrypt the received digital signature to obtain the original summary information, and then performs the same hash function operation on the received message to obtain a new summary information. Finally, compare the two summary information to see if they are consistent to determine the authenticity and integrity of the message.

[0112] In the embodiments of the present invention, the message integrity check and digital signature can effectively prevent the message from being tampered with during the transmission process, and protect the integrity and authenticity of the data. The use of technologies such as hash functions, MAC and digital signatures can improve the security of data and prevent data from being tampered with and forged. Digital signatures can also be used for identity authentication to ensure that the sender of the message is legal and enhance the security of the system. In summary, message integrity check and digital signatures, as important technical means for anti-tampering, can effectively protect the integrity and authenticity of data and improve the security and reliability of the system.

[0113] In an embodiment of the present invention, if a digital car key is required to perform a locking operation or an unlocking operation on the vehicle end, the vehicle end may send a corresponding target request to the server end, and the server end may analyze the target request, analyze the certificate pre-set on the vehicle end requested by the target request, and send the certificate to the vehicle end. The vehicle end may save the received certificate and send a corresponding first notification message to the server end to prompt the vehicle end that the certificate is successfully pre-set. After the server end receives the first notification message, the state of the certificate may be set to an assignable state, at which time the certificate is allowed to be assigned to an application on the user's terminal device bound to the vehicle end, so that the digital car key corresponding to the certificate may be operated through the application to perform a locking operation or an unlocking operation on the vehicle end. In this embodiment, since a certain number of key message certificates are pre-set on the vehicle end, the number of certificates that need to be stored on the user's terminal device is greatly reduced, thereby saving the storage space of the user's device and avoiding the problem of terminal device performance degradation caused by excessive certificate information. When using the key, the key is directly generated through the pre-set certificate on the vehicle end, thereby simplifying the key creation and management process, reducing the user's operation complexity, and improving the user experience. And because a certain number of certificates have been pre-installed on the vehicle-side device, there is no need to frequently communicate with the server to obtain and verify certificates when using the digital car key, which reduces network delays and system overhead. This achieves the technical effect of improving the information processing efficiency of the digital car key and solves the technical problem of low information processing efficiency of the digital car key.

[0114] Figure 2 FIG. 1 is a flowchart of another method for processing information of a digital vehicle key according to an embodiment of the present invention. Figure 2 As shown, the method is applied to the server and includes the following steps:

[0115] Step S202, generating a certificate in response to a target request from the vehicle side.

[0116] In the technical solution provided in step S202 of the present invention, the target request can be used to request the server to pre-set a certificate on the vehicle. The certificate is used to generate multiple digital car keys. The validity status of different digital car keys is synchronized with the validity status of the certificate.

[0117] In this embodiment, if the digital key of the vehicle is needed to lock or unlock the vehicle, the vehicle can send a corresponding target request to the connected server. If the server receives the target request from the vehicle, it generates a corresponding certificate using the target request.

[0118] Optionally, the vehicle sends a target request to the connected server through TBOX to request the server's digital key service. The target request includes information about the certificate corresponding to the digital vehicle key that needs to be preset.

[0119] Optionally, if the server detects that the number of unallocated certificates of a vehicle is lower than the set first quantity threshold, the server will trigger the sending of a second notification message to the vehicle. Once the server determines that the number of unallocated certificates of a vehicle is lower than the threshold, the server will send a second notification message to the vehicle to notify the vehicle that additional certificates are needed.

[0120] Step S204: send the certificate to the vehicle side, where the certificate is stored by the vehicle side.

[0121] In the technical solution provided in the above step S204 of the present invention, the certificate can be stored by the vehicle end.

[0122] In this embodiment, after the certificate is generated based on the target request sent by the vehicle side, the certificate can be sent to the vehicle side.

[0123] Optionally, after determining the certificate that needs to be issued, the server will sign and encrypt the certificate to ensure the security of certificate transmission. Certificate signing is to verify the authenticity and integrity of the certificate, and certificate encryption is to protect the certificate from being tampered with or stolen during transmission. Once the certificate is signed and encrypted, the server will issue the certificate to the vehicle. For example, the certificate may be sent through a secure channel or encrypted to ensure security during transmission. Through the above method, the server can determine the required certificate based on the received target request, and issue it to the vehicle after signing and encryption, ensuring the security and reliability of the digital car key.

[0124] Step S206: In response to the first notification message from the vehicle end, the status of the certificate is set to an allocatable status.

[0125] In the technical solution provided in the above step S206 of the present invention, the first notification message is used to indicate that the certificate is successfully preset on the vehicle side, and the assignable status is used to indicate that the certificate is allowed to be assigned to the application bound to the vehicle side, and the application is used to perform locking or unlocking operations on the vehicle side through the digital car key corresponding to the certificate.

[0126] In this embodiment, after the vehicle receives the certificate issued by the server, the certificate can be saved and a corresponding first notification message can be sent to the server. After receiving the first notification message, the server can set the status of the corresponding certificate to be distributable.

[0127] Optionally, after the vehicle receives the certificate issued by the server, it can perform operations such as decryption and verification on the certificate. For example, the certificate can be decrypted, and then the signature and integrity of the certificate can be verified to ensure that the certificate is legal and valid. If the certificate verification passes, the vehicle can save the certificate and associate the certificate with the corresponding digital car key. The purpose of saving the certificate is to effectively verify the identity of the digital car key and achieve secure communication when performing vehicle locking or unlocking operations.

[0128] Optionally, the vehicle sends a first notification message to the server, notifying the server that the certificate has been successfully preset on the vehicle. The first notification message can ensure that the server can understand the preset status of the certificate and prepare for subsequent operations. After the server receives the first notification message sent by the vehicle, it sets the status of the corresponding certificate to the allocable state. The allocable state means that the certificate is allowed to be allocated to the application bound to the vehicle for use.

[0129] The following further describes how the server of this embodiment sends a certificate to the vehicle.

[0130] As an optional implementation method, sending the certificate to the vehicle side includes: in response to the server side successfully storing the certificate, sending the certificate to the vehicle side, wherein the stored certificate is valid within the target time length.

[0131] In this embodiment, in the process of sending the certificate to the vehicle side, if the server side successfully stores the certificate, the certificate can be sent to the vehicle side, wherein the stored certificate is valid within the target time length.

[0132] Optionally, after the server receives the target request, the server first receives a request for a pre-set certificate sent by the vehicle. The target request may include relevant information such as the identity information of the vehicle, the type and quantity of the required certificates, etc. Based on the information in the above target request, the server starts to generate a certificate. The certificate generation process includes steps such as generating a public key, a private key pair, and a digital signature to ensure the uniqueness and security of the certificate. After the certificate is generated, the server will sign and encrypt the certificate. The certificate signature is to verify the authenticity and integrity of the certificate, and the certificate encryption is to protect the security of the certificate transmission. After the certificate is generated and processed, the server stores the certificate information in the corresponding database.

[0133] Optionally, the server will also bind the generated certificate to the corresponding vehicle side to ensure that each certificate can be accurately associated with the corresponding vehicle side, that is, the certificate can be returned to the corresponding vehicle side. After storing the certificate in the database, the server will update the records in the database, including the status of the certificate, the associated information of the vehicle side, etc., so as to ensure that the certificate information in the database is always kept up to date and accurate. Through the above method, the server can effectively generate certificates and store them in the database, and establish an association between the certificate and the vehicle or vehicle side, which can ensure the security and authenticity of the certificate and provide support for subsequent certificate distribution and use.

[0134] The following further describes a method for sending a corresponding QR code if the digital vehicle key distribution certificate to be authorized is successfully issued in this embodiment.

[0135] As an optional implementation mode, the application includes a client program and a mini program, and the method also includes: in response to successfully assigning a certificate to the digital car key to be authorized, generating a QR code of the digital car key to be authorized, wherein the digital car key to be authorized is created by the client program, and the QR code is used to identify the digital car key to be authorized; sending the QR code to the client program, wherein the QR code is used to enable the client program to authorize the mini program to use the digital car key to be authorized, and the number of messages of the digital car key to be authorized is less than a second quantity threshold.

[0136] In this embodiment, if the certificate is successfully assigned to the digital car key to be authorized, a QR code of the digital car key to be authorized can be generated, and the QR code can be sent to the client program, wherein the digital car key to be authorized is created by the client program. The QR code can be used to identify the digital car key to be authorized. The QR code can be used to enable the client program to authorize the mini program to use the digital car key to be authorized. The number of messages of the digital car key to be authorized is less than the second number threshold. The application program can include a client program and a mini program. The client program can be a mobile phone APP, such as a car owner APP. The digital car key to be authorized can also be called a key to be authorized.

[0137] Optionally, the server successfully assigns a certificate to the digital car key to be authorized, ensuring that the digital car key to be authorized has a valid certificate for identity authentication and authorization operations. Once the certificate is successfully assigned, the server can generate a QR code containing the information of the digital car key to be authorized. The QR code can contain unique information that identifies the digital car key to be authorized for subsequent identification and authorization operations. The generated QR code will be sent to the client program. The client program can receive and parse the QR code to identify the information of the digital car key to be authorized. After receiving the QR code, the client program can use the information of the digital car key to be authorized therein for authorization operations. Interaction and authorization operations between applications (client programs and mini programs) can be achieved through QR codes. The client program can process the information in the QR code and pass the authorization information of the digital car key to be authorized to the mini program.

[0138] Through the above method, the server successfully assigns the certificate to the digital car key to be authorized, generates a QR code, and sends the QR code to the client program, making the authorization operation convenient and effective. The client program can authorize the mini program to use the digital car key to be authorized by parsing the information in the QR code, realizing a secure authorization mechanism.

[0139] Optionally, the management of different applications is proposed in an embodiment of the present invention, including certificate allocation, network supplementation, reinforcement system and consideration of mini-program cache restrictions for mobile phone APPs and mini-programs. For the management of mobile phone APPs, a part of certificates is allocated to mobile phone APPs, which can improve the security and efficiency of the system. Each APP can have its own part of certificates to ensure the independence and security of the certificates. If the number of certificates of an APP is lower than a certain number, it can be supplemented through the network. This ensures that the APP can obtain enough certificates when needed to ensure normal operation. The APP has a reinforcement system, which means that the APP may have some security enhancement features, such as anti-cracking, data encryption, etc. The reinforcement system helps to protect the security of the APP and prevent malicious attacks and information leakage.

[0140] For the management of mini-programs, a portion of certificates are allocated to mini-programs, similar to mobile phone APPs, to ensure the independence and security of the mini-program certificates. Similar to mobile phone APPs, when the number of certificates of a mini-program is lower than a certain number (for example, a second quantity threshold), it can be supplemented through the network. This helps to ensure the normal operation and security of the mini-program. Since mini-programs are usually subject to cache restrictions, the present invention restricts mini-programs from obtaining too many key messages to avoid leakage. This shows that for mini-programs, the number of certificates needs to be carefully managed to avoid security issues caused by cache restrictions.

[0141] In an embodiment of the present invention, by allocating a portion of certificates to APPs and mini-programs and performing network supplementation when necessary, the security of the system can be improved to ensure that each application has sufficient certificate support. The network supplementation mechanism and cache limitation considerations enhance the flexibility of the system and make the management of certificates more intelligent and effective. Limiting mini-programs from obtaining too many key messages to avoid leakage helps protect user privacy and data security. In summary, management measures for different applications can effectively improve the security, flexibility and privacy protection of the system, ensure the reasonable allocation and management of certificates, and protect the normal operation of applications and data security.

[0142] Optionally, before the mini program interacts with the vehicle, the mini program needs to verify the legitimacy of the vehicle to ensure communication with a legitimate vehicle and prevent interaction with unauthorized or malicious vehicles. The mini program can use an authentication mechanism to verify the legitimacy of the vehicle. For example, the vehicle can provide a unique identifier, such as a digital certificate or device identifier, and the mini program can use this information to identify the identity of the vehicle. The vehicle can use its own private key to digitally sign some information, and the mini program can use the public key of the vehicle to verify the signature, thereby ensuring the authenticity of the information and the legitimacy of the vehicle. On the basis of establishing secure communication between the mini program and the vehicle, the confidentiality of the communication content can be protected by encrypted communication to prevent the information from being stolen or tampered with. Using security protocols such as HTTPS can ensure the confidentiality and integrity of data during communication, while also verifying the identities of both parties in communication and improving the security of interaction. The mini program can implement an access control mechanism to limit access rights to the vehicle, and only vehicles that have been legally verified can interact with the mini program. The mini program can perform corresponding permission management based on the identity and permission level of the vehicle to ensure that the vehicle can only access functions and data for which it has permission, avoiding information leakage and improper access.

[0143] By verifying the legitimacy of the vehicle side, the mini program can ensure that it only interacts with legitimate and trusted vehicle sides, improve the security and reliability of the system, and prevent unsafe vehicle sides from posing a threat to the system. At the same time, taking appropriate security measures and monitoring mechanisms can further strengthen the verification and protection of the legitimacy of the vehicle side.

[0144] The following further describes the method for generating identification information in this embodiment.

[0145] As an optional implementation method, the method also includes: generating messages of different digital car keys based on the private key corresponding to the certificate; synchronously recording and / or verifying the identification information of the digital car key message with the vehicle end, wherein the digital car key message is identified by the identification information, and the identification information is associated with the generation time of the digital car key message.

[0146] In this embodiment, based on the private key corresponding to the certificate, messages of different digital car keys can be generated, and identification information of the message synchronously recorded and / or verified with the vehicle side of the digital car key can be obtained.

[0147] Optionally, by using the private key corresponding to the certificate, the server can generate messages for different digital car keys. The private key is used to encrypt or digitally sign the message to ensure the security and authenticity of the message. Each digital car key message will have a unique identification information associated with it. This identification information can be a unique identifier used to distinguish different digital car key messages. At the same time, the identification information is associated with the message generation time of the digital car key to ensure the timeliness and validity of the message. The server will synchronously record the identification information of the generated digital car key message into the database for subsequent verification and management. The vehicle side will also obtain these identification information to verify the message of the digital car key. When the vehicle side uses the digital car key, it will verify the validity of the digital car key message according to the identification information recorded by the server. By comparing the identification information, the vehicle side can ensure that the digital car key message used is valid and meets expectations. Through the association and verification of the identification information, the server and the vehicle side can ensure the security and authenticity of the digital car key message. The message of each digital car key has unique identification information and is associated with the time of generation to ensure that the message is not tampered with and to guarantee the validity of the message.

[0148] Through the above method, the server can generate messages of different digital car keys based on the private key corresponding to the certificate, associate the messages with the identification information, and synchronously record and verify the messages of the digital car keys with the vehicle to ensure the security and validity of the digital car keys. This method can effectively manage and verify the messages of the digital car keys and improve the security and reliability of the system.

[0149] Optionally, the shared certificate mechanism refers to using a single pre-set certificate in the system to support the generation of multiple mini-program keys. This mechanism is different from the existing practice of generating a separate certificate for each key. The shared certificate mechanism can reduce the number of certificates stored on the user's device, reduce management complexity, and improve the scalability and flexibility of the system.

[0150] Optionally, the use of a shared certificate mechanism can reduce the number of certificates stored on the user's device. In traditional practices, each key generated requires a corresponding certificate, which results in a large number of certificates in the user's device, increasing storage pressure. With the shared certificate mechanism, only one certificate needs to be pre-set to support the generation of multiple keys, effectively reducing the number of certificates and saving storage space. The shared certificate mechanism reduces management complexity. With the shared certificate mechanism, only one certificate needs to be managed to support the generation of multiple keys, simplifying the management process and reducing management costs and risks. The shared certificate mechanism improves the scalability and flexibility of the system. Since only one certificate needs to be pre-set to support the generation of multiple keys, the system can more flexibly expand new keys without generating new certificates each time. This mechanism can better adapt to changes and developments in the system and improve the flexibility and maintainability of the system.

[0151] In summary, compared with the independent certificate generation method in related technologies, the shared certificate mechanism can reduce storage space, simplify management processes, and improve the scalability and flexibility of the system. It is a more efficient and superior certificate generation method.

[0152] In an embodiment of the present invention, in response to a target request from the vehicle side, a certificate is generated, wherein the target request is used to request the server side to pre-set the certificate on the vehicle side, and the certificate is used to generate multiple digital car keys, and the valid status of different digital car keys is synchronized with the valid status of the certificate; the certificate is sent to the vehicle side; in response to a first notification message from the vehicle side, the status of the certificate is set to an allocable state, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle side, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate. Thus, the technical effect of improving the information processing efficiency of the digital car key is achieved, and the technical problem of low information processing efficiency of the digital car key is solved.

[0153] The technical solution of the embodiment of the present invention is illustrated below in conjunction with preferred implementation modes.

[0154] Currently, each key corresponds to an independent certificate, which makes the process of user creation and management of keys complicated, and there is also the problem of low efficiency in the processing of digital car keys on the vehicle side. Users need to manage multiple independent certificates, which not only increases the complexity of operations, but also may lead to management confusion and security risks. As the number of keys owned by users increases, the number of corresponding certificates will also increase sharply, which will cause the user's device to store a large amount of certificate information, take up space, and may cause device performance to deteriorate. Since certificate verification is required every time a key is used, and each key has an independent certificate, the efficiency of processing digital car keys on the vehicle side is low. Frequent communication with the server to obtain and verify certificate information increases network latency and system overhead.

[0155] Therefore, there still exists the technical problem of low information processing efficiency of digital car keys.

[0156] However, the embodiment of the present invention proposes a method for implementing a mini-program car key based on issuing a certificate to the vehicle side, that is, a back-end method of a mini-program key, which aims to improve the security and efficiency of vehicle key management. In the vehicle key management of related technologies, there are some security risks and inefficiency problems, such as unauthorized key message use and network delays leading to a decline in user experience. In order to solve the above problems, a new certificate management and key message generation mechanism is adopted. Among them, the focus is on asynchronously issuing certificates before authorizing the mini-program. By issuing certificates before authorizing the mini-program, users can feel the impact of the network as little as possible. Through the above method, unauthorized key message use can be effectively prevented, and the security of the system can be improved. In addition, by issuing certificates asynchronously, the adaptability of the system to different users and different scenarios can also be improved. Because the certificate is issued in advance, the user does not need to wait for the network response when using the key, and can manage the vehicle key more flexibly and conveniently. This not only improves the efficiency of the system, but also improves the user experience.

[0157] In summary, the embodiments of the present invention improve the security and efficiency of vehicle key management through innovative certificate management and key message generation mechanisms. By issuing certificates in advance, unauthorized key message use can be effectively prevented, while improving the adaptability of the system to different users and different scenarios, providing users with a safer and more convenient vehicle key management solution. This achieves the technical effect of improving the information processing efficiency of digital car keys and solves the technical problem of low information processing efficiency of digital car keys.

[0158] The method of the embodiment of the present invention is further illustrated below.

[0159] In this embodiment, an innovative small program key backend method is proposed to solve the security, flexibility and user experience problems of the traditional vehicle key management system. Specifically, through certificate pre-setting management, serial number management mechanism, independent certificate and unified update strategy, improvements are made to the defects existing in the prior art, making the vehicle key management system more secure, flexible and user-friendly. Through certificate pre-setting management, a certain number of certificates can be stored on the vehicle-side device in advance, so that users can easily generate and manage small program keys. Through the above method, users do not need to request certificates frequently, which reduces the overhead of network communication and simplifies the key generation and management process. The use of pre-set certificates can improve the security of the system and avoid unauthorized key generation and use. Through the serial number management mechanism, different keys can be effectively identified and managed. Each key has a unique serial number, which facilitates the system to track and manage different keys, thereby ensuring that each key has a clear identity and improving the security and management efficiency of the system. Independent certificates and unified update strategies are also proposed, that is, each key corresponds to an independent certificate, but a unified update strategy is adopted. Through the above method, the security and independence of each key are guaranteed, and the update and management of certificates are simplified. Users can manage their keys more flexibly, and the system can better adapt to the needs of different users and scenarios.

[0160] To sum up, through certificate pre-set management, serial number management mechanism, independent certificates and unified update strategy, the mini-program key back-end solution of the present invention effectively solves the security, flexibility and user experience problems existing in traditional vehicle key management systems, and provides users with a safer and more convenient vehicle key management solution.

[0161] Optionally, a certificate pre-set method is used, that is, a certain number of key message certificates are stored in advance on the vehicle-side device through the network. This method simplifies the process of user key creation. In most cases, users only need to complete key creation and management when there is a network. At the same time, if the user deletes the key, the vehicle-side will delete the certificate synchronously. At the same time, the certificate itself has an expiration time and will automatically expire when it expires.

[0162] Optionally, each key message is assigned an incremental serial number when it is generated, and the vehicle and server will record and verify these serial numbers to ensure the timeliness and validity of the key message. The serial number synchronization mechanism between the server and the vehicle ensures that the system has a consistent understanding of the key message serial number, thereby preventing outdated or unauthorized key messages from being used.

[0163] Optionally, a portion of certificates is allocated to the mobile APP, and the available portion is supplemented by the network when it is lower than a certain number. The APP has a reinforcement system to allocate a portion of certificates to the mini-program, and the available portion is supplemented by the network when it is lower than a certain number. Considering the cache limit of the mini-program, the mini-program can be restricted from obtaining too many key messages to avoid leakage.

[0164] Optionally, for the digital key message design, a hash function or message authentication code is used to ensure that the message has not been tampered with during transmission. The message is signed using the server's private key, and the vehicle uses the public key authenticated by the server's certificate for verification.

[0165] Optionally, before the mini program interacts with the vehicle, the mini program also needs to verify the legitimacy of the vehicle.

[0166] In this embodiment, Figure 3 FIG. 1 is a schematic diagram showing a process of pre-setting a certificate for a vehicle through a network according to an embodiment of the present invention. Figure 3 As shown, the method is implemented by the interaction between the vehicle-side TBOX A and the digital key service B. The method may include the following steps:

[0167] Step S301, check whether the number of unallocated certificates on the vehicle side is lower than a threshold.

[0168] In this embodiment, the number of unallocated certificates on the vehicle side can be detected by the digital key service B to determine whether the number is lower than a threshold. If so, step S302 can be executed.

[0169] Step S302, notify the vehicle end to supplement the certificate.

[0170] In this embodiment, the digital key service B can notify the vehicle side of the supplementary certificate.

[0171] Step S303: Apply for a pre-configured certificate.

[0172] In this embodiment, the vehicle-side TBOX A can pre-set the certificate to the digital key service B.

[0173] Step S304: Generate a certificate.

[0174] In this embodiment, the digital key service B can generate the required preset certificate.

[0175] Step S305, store in database.

[0176] In this embodiment, the generated certificate may be stored in a database.

[0177] Step S306, returning the certificate.

[0178] In this embodiment, the generated certificate may be returned to the vehicle-side TBOX A.

[0179] Step S307, save the certificate.

[0180] In this embodiment, the vehicle-side TBOX A can save the certificates that need to be preset.

[0181] Step S308, notifying that the certificate has been saved.

[0182] In this embodiment, if the vehicle-side TBOX A saves the certificate successfully, it can send a corresponding message to the digital key service B to notify that the certificate has been saved.

[0183] Step S309: Update the certificate status to be available for allocation.

[0184] In this embodiment, after receiving the message notifying that the certificate has been saved, the digital key service B may update the certificate status to a state where the certificate can be assigned.

[0185] Figure 4 FIG. 1 is a schematic diagram showing a process of managing a vehicle certificate through a network according to an embodiment of the present invention. Figure 4 As shown, the method is implemented by the interaction between the vehicle-side TBOX A and the digital key service B. The method may include the following steps:

[0186] Step S401, detect whether the key is expired or the user actively invalidates the key, or whether there are other changes in the certificate.

[0187] In this embodiment, the digital key service B can detect whether the key is expired, or whether the user actively invalidates the key. It can also detect whether there are other changes in the certificate. If at least one of the above conditions is met, step S402 can be executed.

[0188] Step S402, notifying the vehicle end of the synchronization certificate status.

[0189] In this embodiment, the digital key service B can notify the vehicle-side TBOX A to synchronize the certificate status.

[0190] Step S403, the vehicle-side synchronizes the certificate status.

[0191] In this embodiment, the vehicle-side TBOX A can send a message to the digital key service B to obtain the certificate status of the certificate to be synchronized.

[0192] Step S404, returning to the current certificate status.

[0193] In this embodiment, the digital key service B can obtain the current status of the certificate that needs to be synchronized and return it to the vehicle-side TBOX A.

[0194] Step S405: Update or delete the certificate in the vehicle according to the returned current certificate status.

[0195] In this embodiment, after the vehicle-side TBOX A receives the current certificate status, it can update the status of the corresponding certificate in the vehicle-side, or directly delete the corresponding certificate.

[0196] Step S406: Notify that the certificate status has been updated.

[0197] In this embodiment, after the certificate in the vehicle side is updated or deleted, a corresponding message can be sent to the digital key service B to notify that the certificate status on the vehicle side has been updated.

[0198] Step S407: Update the certificate status to synchronized.

[0199] In this embodiment, after the digital key service B receives the above message and confirms that the status of the certificate on the vehicle side has been synchronized, the certificate status can be updated to synchronized.

[0200] Figure 5 FIG. 1 is a schematic diagram showing a process of authorizing a user to use a mini-program key according to an embodiment of the present invention. Figure 5 As shown, the method is implemented through the interaction of the car owner APP C, the digital key service B, the mini program background D, the user center E and the mini program F of the authorized person. The method may include the following steps:

[0201] Step S501, creating a key to be authorized.

[0202] In this embodiment, if the user (for example, the car owner) needs to use the mini program key, the corresponding operation can be performed on the car owner APP C to create a key to be authorized.

[0203] Step S502: assign a certificate to the key to be authorized and save it in a database.

[0204] In this embodiment, the digital key service B can allocate a corresponding certificate to the key to be authorized and save it in a corresponding database.

[0205] Step S503, requesting to generate a QR code.

[0206] In this embodiment, the digital key service B sends a corresponding message to the mini program background D to request the generation of a QR code.

[0207] Step S504, return the QR code.

[0208] In this embodiment, after receiving the above message, the mini program background D can generate a QR code that meets the request and return it to the digital key service B.

[0209] Step S505, generating a key for activation within 24 hours, and the user ID is to be bound.

[0210] In this embodiment, the digital key service B can generate a key that can be activated within 24 hours, and the user identification (User Identification, referred to as UID) is to be bound.

[0211] Step S506, return the QR code.

[0212] In this embodiment, the digital key service can return the QR code to the car owner APP C.

[0213] Step S507, scan the QR code to enter the mini program.

[0214] In this embodiment, the corresponding mini program can be entered by scanning the QR code on the car owner APP C.

[0215] Step S508, requiring forced login.

[0216] In this embodiment, in the applet F of the authorized person, mandatory login may be required.

[0217] Step S509, register.

[0218] In this embodiment, if the user is not registered, user registration can be initiated.

[0219] Step S510: Generate a user identification.

[0220] In this embodiment, a UID is generated and registration is completed.

[0221] Step S511, log in.

[0222] In this embodiment, if the user has registered, he / she can log in directly.

[0223] Step S512, returning the user ID.

[0224] In this embodiment, the authorized person's applet F can return the UID to the user center E.

[0225] If the car owner accepts the mini program invitation, steps S513 to S516 can be executed. Step S513, accept the invitation. Step S514, bind the relationship between the user ID and the key. Step S515, authorization is successful. Step S516, notify the car owner of the successful authorization.

[0226] If the car owner rejects the mini program invitation, steps S517 to S520 may be executed. Step S517, reject the invitation. Step S518, unbind the relationship between the user ID and the key. Step S519, reject successfully. Step S520, notify the car owner that the authorization failed.

[0227] Step S521, request message.

[0228] In this embodiment, the authorized person's applet F sends a corresponding message to the digital key service B to request a message.

[0229] Step S522, find the corresponding certificate to obtain the private key generation message.

[0230] In this embodiment, after receiving the above message, the digital key service B can find the corresponding certificate to obtain the private key, thereby generating a message.

[0231] Step S523, sending a message.

[0232] In this embodiment, the digital key service B can send a message to the mini program F of the authorized person.

[0233] Figure 6 FIG. 1 is a schematic diagram showing a process of obtaining an authentication message / creating a key / unlocking according to an embodiment of the present invention. Figure 6 As shown, the method is implemented by the interaction between the car owner APP C, the digital key service B and the vehicle-side TBOX, and the method may include the following steps:

[0234] Step S601, obtaining an authentication message.

[0235] In this embodiment, the car owner APP C obtains the authentication message required for the user to authenticate, which is used to verify the user's identity and authority.

[0236] Step S602, verify whether the user ID and key ID are legal.

[0237] In this embodiment, the legitimacy of the user identification and the key identification is verified to ensure that the identifiers of the user and the key are valid and legal.

[0238] Step S603: Find the corresponding key and certificate according to the key identifier.

[0239] In this embodiment, the corresponding key and certificate are found according to the key identifier used by the user for subsequent authentication and verification operations.

[0240] Step S604: Generate an authentication message.

[0241] In this embodiment, an authentication message is generated based on the user's identity and authority information, as well as the found key and certificate, to authenticate the validity of the user's identity.

[0242] Step S605, updating the counter.

[0243] In this embodiment, a counter is updated to record the number of authentication operations or status information for subsequent tracking and management.

[0244] Step S606, returning the update result.

[0245] In this embodiment, the result of updating the counter is returned to inform the user whether the counter updating operation is successful or not.

[0246] Step S607: adding an unlocking instruction after the authentication message.

[0247] In this embodiment, an unlocking instruction is added after the authentication message to instruct the system to perform an unlocking operation.

[0248] Step S608, verifying signature and other data.

[0249] In this embodiment, the signature and other data in the authentication message and the unlocking instruction are verified to ensure the integrity and authenticity of the data.

[0250] Step S609, updating the counter.

[0251] In this embodiment, the counter is updated again to record the number of unlocking operations or status information.

[0252] Step S610, unlocking.

[0253] In this embodiment, an unlocking operation is performed, and corresponding restrictions or authority controls are released according to the unlocking instruction.

[0254] Step S611, returning the unlocking result.

[0255] In this embodiment, the result of the unlocking operation is returned to inform the user whether the unlocking operation is successful or not.

[0256] In this embodiment, a single pre-set certificate is used to support the generation of multiple mini-program keys, and the following expansion strategies can be considered. According to the growth of the number of system users and demand, regularly evaluate whether the number of pre-set certificates is sufficient and whether the number of pre-set certificates needs to be expanded. According to the actual usage and needs of users, dynamically adjust the certificate generation strategy to ensure that the number of pre-set certificates can meet the needs of users. Consider pre-setting multiple types of certificates according to the needs of different user groups or usage scenarios to support the generation of more different types of keys.

[0257] In this embodiment, a new mapping management mechanism is used to ensure the uniqueness and traceability of each key generated from the same certificate. It ensures that an accurate mapping relationship is established between each key and the corresponding certificate to ensure the uniqueness of each key. The mapping relationship between each key and the certificate is recorded to ensure that the use of the key is traceable, which facilitates monitoring and auditing of the use of each key.

[0258] In this embodiment, a dynamic key generation algorithm based on a shared certificate is implemented to provide users with the function of instantly generating new key messages. New key messages are dynamically generated according to the actual needs and situations of users, which improves user experience and system flexibility. An efficient key generation algorithm is designed to ensure that new key messages are quickly generated in different usage scenarios, reducing user waiting time.

[0259] Through the above expansion and management strategies, it is possible to better manage and expand the pre-set certificates, ensure that the mapping relationship between certificates and keys is accurate and reliable, and realize dynamic key generation, improve the flexibility and user experience of the system, and enhance the security and traceability of the system. These measures will help improve the performance of the system and user satisfaction.

[0260] In an embodiment of the present invention, the process of user creation and management of keys is simplified by presetting certificates in advance. Users do not need to request certificates frequently, and can complete key operations through network connection. This design greatly improves the user experience, reduces the user's operating burden, and makes key management more convenient and efficient. The security of the system is significantly improved through the activation and update mechanism of the preset certificate, as well as measures such as serial number management. The design of the preset certificate can prevent the unauthorized use of key messages, and the serial number management can ensure the integrity and authenticity of the data, effectively prevent data tampering and security vulnerabilities, thereby improving the security of the system. Through the design of independent certificates and unified update strategies, the system can adapt to different usage scenarios and user needs. Each key corresponds to an independent certificate, but a unified update strategy is adopted, which not only ensures the security of the key, but also simplifies the management of certificates. This design enhances the flexibility of the system and makes the system more adaptable to the needs of different users and scenarios.

[0261] In summary, the above embodiments have obvious advantages in improving user experience, enhancing security and improving system flexibility. Through innovative certificate pre-set management, serial number management and update strategy design, the present invention effectively solves the security, flexibility and user experience problems existing in traditional systems, and provides users with a safer, more convenient and flexible vehicle key management solution. This achieves the technical effect of improving the information processing efficiency of digital car keys and solves the technical problem of low information processing efficiency of digital car keys.

[0262] In summary, the beneficial effects and advantages of the present invention are mainly reflected in three aspects: improving user experience, enhancing system security, and improving system adaptability. First, in terms of improving user experience, users can create and manage keys without going through complicated processes, and can complete the operation through a network connection. This simplified operation process improves the user's convenience of use and saves the user's time and energy. Users can generate and manage keys more conveniently without cumbersome certificate request and management processes, which improves the user's experience and reduces the user's operation threshold. Secondly, in terms of enhancing system security, unauthorized access and security threats are effectively prevented through pre-set certificates and serial number management. Pre-set certificates can prevent unauthorized key message use, and serial number management ensures the integrity and authenticity of data, thereby improving the security of the system. The security of the system is improved, and unauthorized access, data tampering and other security threats can be effectively prevented, and the user's data and privacy security can be protected. Thirdly, in terms of improving system adaptability, the system can quickly respond to changes in security policies and ensure the continued effectiveness of key messages. The system can flexibly adapt to changes in security policies to ensure the security and stability of the system. Through advance certificate pre-setting and serial number management, the system has higher flexibility and can quickly adapt to the needs of different users and usage scenarios, providing users with more personalized and customized services.

[0263] In summary, the beneficial effects and advantages of the present invention are reflected in improving user experience, enhancing system security and improving system adaptability. By simplifying the operation process, improving security and enhancing system flexibility, the present invention provides users with a more convenient, safe and flexible key management solution to meet users' needs for security and convenience.

[0264] According to another aspect of an embodiment of the present invention, corresponding to the embodiment of the above-mentioned digital car key information processing method, this specification also provides a digital car key information processing system, Figure 7 is a system block diagram of an information processing system for a digital car key according to an embodiment of the present invention. Figure 7 As shown, the information processing system 700 of the digital car key may include: a vehicle end 702 and a service end 704 .

[0265] The vehicle side 702 is used to send a target request to the server side, wherein the target request is used to request the server side to pre-set a certificate on the vehicle side, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate.

[0266] The server 704 is used to generate a certificate in response to a target request from the vehicle side, and send the certificate to the vehicle side; wherein the vehicle side is used to save the certificate and send a first notification message to the server side, the first notification message is used to indicate that the certificate is successfully preset on the vehicle side, and the status of the certificate is set by the server side to an allocatable state, the allocatable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

[0267] In the information processing system of the digital car key of this embodiment, if it is necessary to use the digital car key to perform a locking operation or an unlocking operation on the vehicle end, the vehicle end can send a corresponding target request to the server end, and the server end can analyze the target request, analyze the certificate pre-set on the vehicle end requested by the target request, and can send the certificate to the vehicle end. The vehicle end can save the received certificate and send a corresponding first notification message to the server end to prompt the vehicle end to successfully pre-set the certificate. After the server end receives the first notification message, the state of the certificate can be set to an allocable state, at which time the certificate is allowed to be allocated to the application on the terminal device of the user bound to the vehicle end, so that the digital car key corresponding to the certificate can be operated through the application to perform a locking operation or an unlocking operation on the vehicle end. In this embodiment, since a certain number of key message certificates are pre-set on the vehicle end, the number of certificates that need to be stored on the user's terminal device is greatly reduced, thereby saving the storage space of the user's device and avoiding the problem of terminal device performance degradation caused by excessive certificate information. When using the key, the key is directly generated through the pre-set certificate on the vehicle side, which simplifies the key creation and management process, reduces the user's operation complexity, and improves the user experience. And because a certain number of certificates have been pre-set on the vehicle-side device, when using the digital car key, there is no need to frequently communicate with the server to obtain and verify the certificate, which reduces network delays and system overhead. This achieves the technical effect of improving the information processing efficiency of the digital car key and solves the technical problem of low information processing efficiency of the digital car key.

[0268] According to another aspect of an embodiment of the present invention, corresponding to the embodiment of the above-mentioned method for processing information of a digital car key, this specification also provides an information processing device for a digital car key, Figure 8 is a structural block diagram of an information processing device for a digital car key according to an embodiment of the present invention. Figure 8 As shown, the information processing device 800 of the digital car key may include: a first sending unit 802 , an acquiring unit 804 and a second sending unit 806 .

[0269] The first sending unit 802 is used to send a target request to the server, wherein the target request is used to request the server to pre-set a certificate on the vehicle, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate.

[0270] The acquisition unit 804 is used to acquire the certificate issued by the server in response to the target request.

[0271] The second sending unit 806 is used to save the certificate and send a first notification message to the server, wherein the first notification message is used to indicate that the certificate is successfully preset on the vehicle side, and the status of the certificate is set by the server to an allocatable state, which is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

[0272] In this embodiment, the following units are provided in the information processing device 800 of the digital car key: a first sending unit 802, used to send a target request to the server, wherein the target request is used to request to pre-set a certificate on the vehicle side, the certificate is used to generate multiple digital car keys, and the status of different digital car keys is synchronized with the status of the certificate; an acquisition unit 804, used to acquire the certificate issued by the server in response to the target request; a second sending unit 806, used to save the certificate and send a first notification message to the server, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle side, the status of the certificate is set by the server to an allocable state, and the allocable state is used to indicate that the certificate is allowed to be allocated to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate. Thus, the technical effect of improving the information processing efficiency of the digital car key is achieved, and the technical problem of low information processing efficiency of the digital car key is solved.

[0273] According to another aspect of an embodiment of the present invention, corresponding to the embodiment of the above-mentioned method for processing information of a digital car key, this specification also provides an information processing device for a digital car key, Fig. 9 is a structural block diagram of another information processing device for a digital car key according to an embodiment of the present invention. Fig. 9 As shown, the information processing device 900 of the digital car key may include: a generating unit 902 , a sending unit 904 and a setting unit 906 .

[0274] The generation unit 902 is used to generate a certificate in response to a target request from the vehicle side, wherein the target request is used to request the server side to pre-set the certificate on the vehicle side, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate.

[0275] The issuing unit 904 is used to issue the certificate to the vehicle end, wherein the certificate is stored by the vehicle end.

[0276] Setting unit 906 is used to set the status of the certificate to an allocatable state in response to a first notification message from the vehicle end, wherein the first notification message is used to indicate that the certificate is successfully preset on the vehicle end, and the allocatable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle end, and the application is used to perform a locking operation or an unlocking operation on the vehicle end through a digital car key corresponding to the certificate.

[0277] In this embodiment, the following units are provided in the information processing device 900 of the digital car key: a generating unit 902, used to generate a certificate in response to a target request from the vehicle end, wherein the target request is used to request to pre-set the certificate on the vehicle end, and the certificate is used to generate multiple digital car keys, and the status of different digital car keys is synchronized with the status of the certificate; a sending unit 904, used to send the certificate to the vehicle end, wherein the certificate is saved by the vehicle end; a setting unit 906, used to set the status of the certificate to an assignable state in response to a first notification message from the vehicle end, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle end, and the assignable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle end, and the application is used to perform a locking operation or an unlocking operation on the vehicle end through the digital car key corresponding to the certificate. Thus, the technical effect of improving the information processing efficiency of the digital car key is achieved, and the technical problem of low information processing efficiency of the digital car key is solved.

[0278] According to another aspect of an embodiment of the present invention, a vehicle is provided, which may be an autonomous driving vehicle, comprising: a memory storing an executable program; and a processor for running the program, wherein the program executes any one of the above methods when running.

[0279] Fig.10 is a structural block diagram of an automatic driving vehicle according to an embodiment of the present invention. Fig.10 As shown, the components of the autonomous driving vehicle 1000 include but are not limited to a memory 1010 and a processor 1020. The processor 1020 is connected to the memory 1010 via a bus 1030, and the database 1050 is used to store data.

[0280] The autonomous vehicle 1000 may also include an access device 1040 that enables the autonomous vehicle 1000 to communicate via one or more networks 1050. Examples of these networks include a Public Switched Telephone Network (PSTN), a Local Area Network (LAN), a Wide Area Network (WAN), a Personal Area Network (PAN), or a combination of communication networks such as the Internet. The access device 1040 may include one or more of any type of network interface (e.g., a network interface controller (NIC)) of wired or wireless type, such as an IEEE 802.11 Wireless Local Area Network (WLAN) wireless interface, a Worldwide Interoperability for Microwave Access (Wi-MAX) interface, an Ethernet interface, a Universal Serial Bus (USB) interface, a cellular network interface, a Bluetooth interface, a Near Field Communication (NFC) interface, and the like.

[0281] In one embodiment of the present disclosure, the above components of the autonomous driving vehicle 1000 and Fig.10 Other components not shown in the figure may also be connected to each other, for example, via a bus. It should be understood that Fig.10 The structure block diagram of the autonomous driving vehicle shown is for illustrative purposes only and is not intended to limit the scope of the present disclosure. Those skilled in the art may add or replace other components as needed.

[0282] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium including a stored executable program, wherein when the executable program runs, the device where the storage medium is located is controlled to execute any one of the above methods.

[0283] According to another aspect of an embodiment of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, any one of the above methods is implemented.

[0284] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0285] In the several embodiments provided by the present invention, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic, for example, the division of units can be a logical function division, and there can be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0286] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed over multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0287] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0288] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the various embodiments of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM), random access memory (RAM), mobile hard disk, disk or optical disk, etc., and other media that can store program codes.

[0289] The above are only preferred embodiments of the present invention. It should be pointed out that, for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for processing information of a digital car key, characterized in that: Applied to the vehicle side, including: Sending a target request to the server, wherein the target request is used to request the server to pre-set a certificate on the vehicle, the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate; Obtaining the certificate issued by the server in response to the target request; Save the certificate and send a first notification message to the server, wherein the first notification message is used to indicate that the certificate is successfully preset on the vehicle side, and the status of the certificate is set by the server to an allocatable state, and the allocatable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle side, and the application is used to perform a locking operation or an unlocking operation on the vehicle side through the digital car key corresponding to the certificate.

2. The method according to claim 1, characterized in that Send a target request to the server, including: In response to a second notification message from the server, the target request is sent to the server, wherein the second notification message is used to notify the vehicle that the certificate needs to be pre-set, and the second notification message is triggered when the number of certificates in an unallocated state on the vehicle is lower than a first quantity threshold.

3. The method according to claim 1, characterized in that Acquiring the certificate issued by the server in response to the target request, including: When the server responds to the target request, generates the certificate, and the server successfully stores the certificate, the certificate issued by the server is obtained, wherein the stored certificate is in the valid state within the target duration.

4. The method according to claim 1, characterized in that: The method further comprises: In response to a third notification message from the server, obtaining a target state of the certificate, wherein the third notification message is used to notify the vehicle end that the target state needs to be synchronized, and the third notification message is triggered when the certificate on the server is in the target state, and the target state includes an invalid state or an updated state; The target state is synchronized to the certificate on the vehicle side.

5. The method according to claim 4, characterized in that Synchronizing the target state to the certificate on the vehicle side includes: In response to the target state being the invalid state, deleting the certificate on the vehicle end so that the certificate on the vehicle end is in the invalid state; In response to the target state being the updated state, the certificate on the vehicle end is updated so that the certificate on the vehicle end is in the updated state, wherein the certificate in the updated state is used to support multiple updated digital car keys on the vehicle end.

6. The method according to claim 5, characterized in that In response to the target state being an update state, updating the certificate on the vehicle end includes: In response to the target state being an extended state, the certificate on the vehicle side is extended according to the extended state.

7. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: Synchronously record and / or verify identification information of messages of different digital car keys with the server, wherein the identification information is associated with the generation time of the message of the digital car key.

8. A method for processing information of a digital car key, characterized in that: Applied to the server, including: In response to a target request from the vehicle side, generating a certificate, wherein the target request is used to request the server side to pre-set the certificate on the vehicle side, and the certificate is used to generate multiple digital car keys, and the validity status of different digital car keys is synchronized with the validity status of the certificate; Sending the certificate to the vehicle end; In response to a first notification message from the vehicle end, the status of the certificate is set to an allocatable state, wherein the first notification message is used to indicate that the certificate is successfully pre-set on the vehicle end, and the allocatable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle end, and the application is used to perform a locking operation or an unlocking operation on the vehicle end through the digital car key corresponding to the certificate.

9. The method according to claim 8, characterized in that The application program includes a client program and a small program, and the method further includes: In response to successfully allocating the certificate to the digital car key to be authorized, generating a QR code of the digital car key to be authorized, wherein the digital car key to be authorized is created by the client program, and the QR code is used to identify the digital car key to be authorized; The two-dimensional code is sent to the client program, wherein the two-dimensional code is used for the client program to authorize the mini program to use the digital car key to be authorized, and the number of messages of the digital car key to be authorized is less than a second number threshold.

10. The method according to claim 8, characterized in that The method further comprises: Based on the private key corresponding to the certificate, generate messages for different digital car keys; Synchronously record and / or verify identification information of the message of the digital car key with the vehicle end, wherein the message of the digital car key is identified by the identification information, and the identification information is associated with the generation time of the message of the digital car key.

11. An information processing system for a digital car key, characterized in that: include: The vehicle side is used to send a target request to the server side, wherein the target request is used to request the server side to pre-set a certificate on the vehicle side, and the certificate is used to generate multiple digital vehicle keys, and the validity status of different digital vehicle keys is synchronized with the validity status of the certificate; The server is used to generate the certificate in response to the target request from the vehicle, and send the certificate to the vehicle; Among them, the vehicle end is used to save the certificate and send a first notification message to the server end, the first notification message is used to indicate that the certificate is successfully preset on the vehicle end, the status of the certificate is set by the server end to an allocatable state, and the allocatable state is used to indicate that the certificate is allowed to be assigned to an application bound to the vehicle end, and the application is used to perform a locking operation or an unlocking operation on the vehicle end through the digital car key corresponding to the certificate.

12. A vehicle, characterized in that: include: A memory storing a program; A processor, configured to run the program, wherein the program executes the method according to any one of claims 1 to 10 when running.

Images