Digital key access authentication method and device, terminal equipment and storage medium

Abstract

The embodiment of the invention provides a digital key access authentication method and device, terminal equipment and a storage medium. According to the method, a digital key is generated through a cloud end, key certification information is generated at the same time, when a vehicle machine end receives a digital key access request of an equipment end, if it is judged that the digital key is not an accessed effective key, the vehicle machine end requests the equipment end to provide the key certification information, and the digital key is verified according to the key certification information; and after the verification is passed, notifying the equipment end to delete the locally stored key certification information. Compared with the prior art that the in-vehicle terminal cannot intercept the vehicle use permission of the key which does not fail in time, by adding the key first access verification mechanism, the deleted key can be effectively prevented from obtaining the vehicle use permission again, the safety of the vehicle is improved, and compared with a blacklist mechanism, more storage resources do not need to be occupied.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of vehicle safety technology, and in particular to a digital key access authentication method and apparatus, a terminal device, and a storage medium. Background Art

[0002] In a digital car key system, keys usually need to be stored on both the device and the vehicle. The key in the device is used when the device is offline, and the key in the vehicle is used for key management on the vehicle's large screen and to confirm the device's legitimate key when the vehicle is offline.

[0003] In the scenario where the owner uses the car, when the key on the vehicle is deleted (such as deleting the key through the car's large screen), if the digital key device is offline at this time, it will not be able to invalidate the local key in time. When the device and the vehicle re-authenticate the key, the vehicle will still recognize that the device contains a valid key and continue to use the key function. This will cause the car to be unable to recognize the validity of the key that failed to be invalidated, and will not be able to prevent the continued use of the invalid key.

[0004] For example, when the car owner revokes the shared key and the friend's device is offline, when the friend's device accesses the vehicle again, the vehicle will still recognize the key on the friend's device as a legitimate key.

[0005] Most existing digital car key specifications in the industry don't consider scenarios where the device is offline when the key is managed in the vehicle or remotely deleted. When both the device and the vehicle are offline and key validity cannot be verified online, if a user deletes the key from the vehicle, the vehicle will still consider the device as a new, legitimate device when the device is used and allow continued use of the function. This fails to effectively restrict the continued use of the deleted key. In remote deletion scenarios, such as those that rely on the vehicle's online network, the vehicle uses a blacklist mechanism to block the continued use of deleted keys. If a large number of keys are deleted, the blacklist data recorded by the vehicle will continue to increase, occupying the vehicle's storage resources. Summary of the Invention

[0006] An embodiment of the present invention provides a digital key access authentication method and apparatus, a terminal device, and a storage medium. By verifying the validity of the digital key's first access permission, it prevents invalid keys that have not been deleted in time on the device side from illegally accessing the vehicle, thereby improving the safety of vehicle use. Compared with the blacklist mechanism, it can save vehicle-side storage resources.

[0007] In a first aspect, an embodiment of the present invention provides a digital key access authentication method, which is applied to a vehicle terminal. The method includes:

[0008] Receiving a digital key access authentication request sent by a device, and determining whether the corresponding digital key is a valid key that has been accessed according to the access authentication request;

[0009] When the digital key is not the valid key that has been accessed, requesting key certification information of the digital key to be accessed from the device end; the key certification information includes access authority authentication information of the digital key;

[0010] After receiving the key certification information sent by the device side, the digital key to be accessed is authenticated according to the key certification information. When the digital key to be accessed passes the authentication, the authentication result is returned to the device side so that the device side can delete the key certification information after the digital key passes the authentication.

[0011] As an embodiment, the method further includes:

[0012] When the key certification information is not obtained or the authentication of the digital key to be accessed fails according to the key certification information, the cloud is requested to authenticate the digital key to be accessed, and whether to allow the digital key to access the vehicle terminal is determined based on the authentication result returned by the cloud.

[0013] In a second aspect, an embodiment of the present invention further provides a digital key access authentication method, which is applied to a device side, and the method includes:

[0014] Sending a digital key access authentication request to the vehicle-side, and upon receiving a request to obtain key certification information of the digital key to be accessed from the vehicle-side and the key certification information being stored locally, sending the key certification information to the vehicle-side, so that the vehicle-side can authenticate the digital key to be accessed based on the key certification information; wherein, when the vehicle-side determines that the digital key to be accessed is not a valid key that has been accessed, requesting the key certification information from the device-side, the key certification information including the access permission authentication information of the digital key; the key certification information is generated by the cloud when generating the digital key and sent to the device-side;

[0015] When the digital key to be connected is received and returned by the vehicle terminal and passes the authentication, the key certification information is deleted.

[0016] In a third aspect, an embodiment of the present invention further provides a digital key access authentication method, which is applied to the cloud. The method includes:

[0017] Generate a digital key and key certification information of the digital key in response to a digital key generation request from the device; the key certification information includes access authority authentication information of the digital key;

[0018] The generated digital key and key certification information are returned to the device side, so that the vehicle side can perform access authentication on the digital key according to the key certification information when the vehicle side requests the device side to access the digital key and the digital key is not a valid key that has been accessed, and the device side deletes the key certification information after the access authentication is passed.

[0019] In a fourth aspect, an embodiment of the present invention provides a digital key access authentication device, which is configured on a vehicle terminal, and includes:

[0020] A first access judgment module is used to receive a digital key access authentication request sent by the device end, and determine whether the corresponding digital key is a valid key that has been accessed according to the access authentication request;

[0021] a key certification request module, configured to request key certification information of the digital key to be accessed from the device end when the digital key is not the valid key that has been accessed; the key certification information includes access authority authentication information of the digital key;

[0022] The key certification verification module is used to authenticate the digital key to be accessed according to the key certification information after receiving the key certification information sent by the device end. When the digital key to be accessed passes the authentication, the authentication result is returned to the device end so that the device end can delete the key certification information after the digital key passes the authentication.

[0023] In a fifth aspect, an embodiment of the present invention provides a digital key access authentication device, which is configured on a device side, and the device includes:

[0024] an access request module, configured to send a digital key access authentication request to the vehicle-side terminal, and upon receiving a request for obtaining key certification information of a digital key to be accessed from the vehicle-side terminal and the key certification information being stored locally, send the key certification information to the vehicle-side terminal, so that the vehicle-side terminal can authenticate the digital key to be accessed based on the key certification information; wherein, when the vehicle-side terminal determines that the digital key to be accessed is not a valid key that has been accessed, it requests the key certification information from the device-side, the key certification information including access permission authentication information of the digital key; the key certification information is generated by the cloud terminal when generating the digital key and sent to the device-side;

[0025] The deletion module is used to delete the key certification information when the digital key to be connected is returned by the vehicle terminal and passes the authentication.

[0026] In a sixth aspect, an embodiment of the present invention provides a digital key access authentication device, which is configured in the cloud and includes:

[0027] A key and certification generation module, configured to generate a digital key and key certification information of the digital key in response to a digital key generation request from a device; the key certification information includes access authority authentication information of the digital key;

[0028] A sending module is used to return the generated digital key and key certification information to the device end, so that the vehicle end can perform access authentication on the digital key according to the key certification information when the vehicle end requests the device end to access the digital key and the digital key is not a valid key that has been accessed, and the device end deletes the key certification information after the access authentication is passed.

[0029] In the seventh aspect, an embodiment of the present invention provides a terminal device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the authentication method as described in the first aspect when executing the program.

[0030] In an eighth aspect, an embodiment of the present invention provides a vehicle terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the authentication method as described in the second aspect when executing the program.

[0031] In the ninth aspect, an embodiment of the present invention provides a cloud, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the authentication method as described in the third aspect when executing the program.

[0032] In a tenth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the authentication method as described in the first aspect, the second aspect, or the third aspect.

[0033] Compared with the prior art, the technical solution provided by the embodiments of the present invention has at least the following positive effects:

[0034] In an embodiment of the present invention, the vehicle-side receives a digital key access authentication request sent by the device-side, determines whether the corresponding digital key is a valid key that has been accessed based on the access authentication request, and when the digital key is not a valid key that has been accessed, requests the device-side for key certification information of the digital key to be accessed; the key certification information includes the access authority authentication information of the digital key, and the key certification information is generated by the cloud when the digital key is generated and then sent to the device-side, and stored locally on the device-side. After receiving the key certification information sent by the device-side, the digital key to be accessed is authenticated based on the key certification information; when the digital key to be accessed passes the authentication, the authentication result is returned to the device-side, so that the device-side can delete the key certification information after the digital key passes the authentication. Therefore, after the digital key on the device side is successfully connected to the vehicle side for the first time, the local key certification information on the device side is deleted. Thereafter, when the connected valid key is deleted by the vehicle but not expired in time by the device side, since the deleted key is not a connected valid key, when the device side requests the vehicle side to access the deleted key, the vehicle side will request the key certification information of the deleted digital key to re-authenticate the access. Since the key certification information has been deleted, the key deleted by the vehicle side cannot be authenticated again, thereby preventing the digital key that has been deleted by the vehicle side but not expired in time by the device side from continuing to use the vehicle, thereby improving vehicle safety and saving storage resources compared to the blacklist mechanism. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following is a brief introduction to the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0036] Figure 1 A schematic diagram of a flow chart of a digital key access authentication method provided in Example 1 of the present invention;

[0037] Figure 2 A schematic diagram of a flow chart of a digital key access authentication method provided in Example 2 of the present invention;

[0038] Figure 3 A schematic diagram of a flow chart of a digital key access authentication method provided in Example 3 of the present invention;

[0039] Figure 4 A schematic diagram of a flow chart of a digital key access authentication method provided in an embodiment of the present invention;

[0040] Figure 5 This is a schematic diagram of the structure of a digital key access authentication device provided in the fourth embodiment of the present invention;

[0041] Figure 6 This is a schematic diagram of the structure of a digital key access authentication device provided in Example 5 of the present invention;

[0042] Figure 7 A schematic diagram of the structure of a digital key access authentication device provided in Example 6 of the present invention;

[0043] Figure 8 This is a structural diagram of the vehicle terminal provided in the seventh embodiment of the present invention;

[0044] Figure 9 A schematic diagram of the structure of a terminal device provided in Embodiment 8 of the present invention;

[0045] Figure 10 This is a schematic diagram of the cloud structure provided by Example 9 of the present invention. DETAILED DESCRIPTION

[0046] The present invention will be further described in detail below with reference to the accompanying drawings and examples. It will be understood that the specific embodiments described herein are intended only to illustrate the present invention and are not intended to limit the present invention. It should also be noted that, for ease of description, the accompanying drawings only illustrate portions relevant to the present invention, not all structures.

[0047] The following describes the digital key access authentication method and apparatus, terminal device and storage medium of an embodiment of the present application with reference to the accompanying drawings. In response to the problem mentioned in the background technology that the vehicle-side cannot prevent the digital key that has been deleted but not expired in time by the device-side from continuing to use the vehicle, the present application provides a digital key access authentication method. In this method, the vehicle-side receives a digital key access authentication request sent by the device-side, and determines whether the corresponding digital key is a valid key that has been accessed based on the access authentication request. When the digital key is not a valid key that has been accessed, the device-side is requested to provide key certification information of the digital key to be accessed; the key certification information includes the access authority authentication information of the digital key, and the key certification information is generated by the cloud when the digital key is generated and then sent to the device-side and stored locally on the device-side. After receiving the key certification information sent by the device-side, the digital key to be accessed is authenticated based on the key certification information; when the digital key to be accessed passes the authentication, the authentication result is returned to the device-side so that the device-side can delete the key certification information after the digital key passes the authentication. Therefore, after the digital key on the device side is successfully connected to the vehicle side for the first time, the local key proof information on the device side is deleted. When the vehicle side deletes the connected key, if the device side does not expire the key in time, when the device side requests the vehicle side to access the key again, the vehicle side will request the device side to provide the key proof information of the key. Since the key proof information has been deleted after the first successful access, the vehicle side cannot obtain the key proof information of the key, so the key cannot pass the access authentication, so that the vehicle can prevent the deleted key from being used again, thereby improving vehicle safety.

[0048] Figure 1 This is a flowchart of a digital key access authentication method provided in a first embodiment of the present invention. This method is used to verify the initial access permission of a digital key on the vehicle side, ensuring that deleted keys that are not accessing the vehicle for the first time are prevented from continuing to use the vehicle. The method of this application can be executed by a digital key access authentication device provided in an embodiment of the present invention. This device can be implemented in software and configured in the digital key system on the vehicle side. This embodiment of the present invention specifically includes steps 101 to 103.

[0049] Step 101: Receive a digital key access authentication request sent by a device, and determine whether the corresponding digital key is a valid key that has been accessed based on the access authentication request.

[0050] The device side is short for the digital key device side. The device side requests the digital key from the cloud side. When generating the digital key, the cloud side also generates key proof information for the digital key and returns the digital key and key proof information to the device side. The device side then stores the digital key and key proof information in a local secure element (SE) chip. The digital key and key proof information can be generated using common techniques. For example, the cloud side generates the digital key based on the device side's identity information, the vehicle side's identity information, and the digital key user information. This is not detailed here. The key proof information contains the digital key's access permission authentication information and is used to verify the legitimacy and timeliness of the digital key offline. The key proof information can include a digital certificate, which can include information such as the CA (Certificate Authority) public key and validity period, used to authenticate the device side. The digital proof information can be generated using asymmetric encryption and signature technologies. The cloud side generates a key pair, with a private key for signing and a public key for verification. The cloud side sends the public key to the device side and the vehicle side. The cloud side uses the private key to sign the key data and information such as the key validity period to generate the key proof information. The vehicle uses the cloud-based private key to verify the key certification information, thereby verifying the legitimacy and timeliness of the digital key. It is understood that key certification information can also be generated using other methods, as long as it can meet the offline verification requirements for the legitimacy and timeliness of the digital key, and there is no specific restriction here.

[0051] After the device obtains the digital key and key certification information, when it requests to access the vehicle computer for the first time, it sends a digital key access authentication request to the vehicle computer. The vehicle computer performs the first access authentication on the digital key. If the first access authentication is successful, the digital key is added to the whitelist. The vehicle computer maintains a whitelist of all connected and valid digital keys. When the vehicle computer deletes the digital key on the device, the deleted digital key is removed from the whitelist, and it can be determined that the digital key is not a valid key that has been connected. If the digital key requested for access is in the whitelist, it is a valid digital key that has been connected. At this time, there is no need to perform the first access authentication, and the device can continue to legally access and use the vehicle. The key certification information is used to verify the legitimacy and timeliness of the digital key when it is first accessed in an offline manner. The key certification information has a certain timeliness and is only allowed to be used within a certain time limit after the digital key is downloaded to prevent hackers from using legitimate key certification information to attack. Offline access authentication of the digital key means that the device can be online, but the first access authentication process does not require the device to be online.

[0052] Step 102: When the digital key is not a valid key that has been connected, request the device side for key certification information of the digital key to be connected.

[0053] Based on the request from the vehicle computer, if the device has key certification information stored locally, it will send the key certification information to the vehicle computer.

[0054] Step 103: After receiving the key certification information sent by the device, the digital key to be accessed is authenticated according to the key certification information. When the digital key to be accessed passes the authentication, the authentication result is returned to the device so that the device can delete the key certification information after the digital key passes the authentication.

[0055] When the vehicle computer recognizes that the digital key is a new key, that is, the digital key has not been registered with the vehicle or has been registered but deleted, it requests key certification information from the device. After obtaining the key certification information, the vehicle computer verifies the legitimacy and timeliness of the key certification information. If the verification is successful, the vehicle can store the key data and the device will clear the key certification information. The vehicle computer can verify or decrypt the key certification information based on the public keys stored in the cloud and the device to verify the digital key data and whether the digital key is expired, or use verification methods known to those skilled in the art, which will not be detailed here.

[0056] It's worth noting that when the vehicle fails to obtain key certification information or fails to authenticate the digital key based on the key certification information, it requests the cloud to authenticate the digital key. Based on the authentication result returned by the cloud, it determines whether to allow the digital key to access the vehicle. If the cloud's authentication result indicates that the digital key is legal, the vehicle adds the digital key to the whitelist. If the cloud's authentication result indicates that the digital key is illegal, the vehicle blocks the digital key from further accessing the vehicle. Initial access authentication based on key certification information reduces reliance on the cloud and allows authentication to proceed smoothly even when the vehicle and device are offline.

[0057] Compared with the prior art, in the embodiment of the present invention, the vehicle-side receives a digital key access authentication request sent by the device-side, determines whether the corresponding digital key is a valid key that has been accessed based on the access authentication request, and when the digital key is not a valid key that has been accessed, requests the device-side for key certification information of the digital key to be accessed; the key certification information includes the access authority authentication information of the digital key, and the key certification information is generated by the cloud when the digital key is generated and then sent to the device-side, and stored locally on the device-side. After receiving the key certification information sent by the device-side, the digital key to be accessed is authenticated based on the key certification information; when the digital key to be accessed passes the authentication, the authentication result is returned to the device-side, so that the device-side can delete the key certification information after the digital key passes the authentication. When the cloud generates the digital key, it also generates key proof information. When the digital key is connected for the first time, the vehicle computer requests the device to provide the key proof information stored locally and verifies the key proof information. After the verification is passed, the digital key can be added to the whitelist. If the device has no key proof information or the verification fails, the digital key can be further authenticated through the cloud. By performing multi-level authentication on the digital key that is connected for the first time, the expired key can be prevented from being used again, thereby improving vehicle safety. At the same time, there is no need to record expired keys through the blacklist mechanism, saving vehicle-side storage resources.

[0058] Figure 2 This is a flow chart of a digital key access authentication method provided in the second embodiment of the present invention. This method can be applied to a device to verify the initial access permission of a digital key, ensuring that a deleted key that is not accessing the vehicle for the first time can be prevented from continuing to use the vehicle. The method of this application can be executed by a digital key access authentication device provided in an embodiment of the present invention. The device can be implemented in software and configured on the digital key device. This embodiment of the present invention specifically includes steps 201 and 202.

[0059] Step 201: Send a digital key access authentication request to the vehicle-side. When a request to obtain the key certification information of the digital key to be accessed is received from the vehicle-side and the key certification information is stored locally, the key certification information is sent to the vehicle-side for the vehicle-side to authenticate the digital key to be accessed based on the key certification information.

[0060] Before sending a digital key access authentication request to the vehicle, the device requests the cloud to generate a digital key. The cloud generates the digital key and key certification information and then sends it to the device. The device stores the digital key and key certification information in the SE chip.

[0061] Among them, when the vehicle side determines that the digital key to be accessed is not a valid key that has been accessed, it requests key certification information from the device side, and the key certification information includes the access authority authentication information of the digital key.

[0062] Step 202: When the digital key to be connected returned by the vehicle terminal passes the authentication, the key certification information is deleted.

[0063] When the key proof information is deleted, when the device requests the digital key to access the vehicle computer again, since the vehicle computer has deleted the digital key, the digital key needs to be authenticated for the first access, that is, the device is requested to provide key proof information to verify the legitimacy and timeliness of the digital key. Since the device has deleted the key proof information, the first access authentication cannot be passed, thereby preventing the invalid digital key from continuing to use the vehicle.

[0064] Compared with the prior art, the cloud generates key certification information when generating a digital key in the embodiment of the present invention. When the digital key is accessed for the first time, the vehicle computer requests the device computer to provide the key certification information stored locally and verifies the key certification information. After the verification is passed, the digital key can be added to the whitelist. If the device computer has no key certification information or the verification fails, the digital key can be further authenticated through the cloud. By performing multi-level authentication on the digital key that is accessed for the first time, the expired key can be prevented from being used again, thereby improving vehicle safety. At the same time, there is no need to record expired keys through the blacklist mechanism, saving vehicle-side storage resources.

[0065] Figure 3 This is a flowchart of the digital key access authentication method provided in the third embodiment of the present invention. This method can be applied to the cloud to verify the initial access permission of a digital key, ensuring that deleted keys that are not accessing the vehicle for the first time can be prevented from continuing to use the vehicle. The method of this application can be executed by a digital key access authentication device provided in an embodiment of the present invention. The device can be implemented in software and configured in the cloud. This embodiment of the present invention specifically includes steps 301 and 302.

[0066] Step 301: Generate a digital key and key certification information of the digital key in response to a digital key generation request from a device. The key certification information includes access authority authentication information of the digital key.

[0067] In step 302, the generated digital key and key certification information are returned to the device. This information is used by the vehicle to authenticate the digital key when the vehicle requests access to the digital key and the digital key is not a valid key. The device then deletes the key certification information after successful authentication. It will be appreciated that the processes executed by the device, vehicle, and cloud in this embodiment correspond to those in Embodiments 1 and 2 and are not further detailed here.

[0068] Compared with the prior art, the cloud generates key certification information when generating a digital key in the embodiment of the present invention. When the digital key is accessed for the first time, the vehicle computer requests the device computer to provide the key certification information stored locally and verifies the key certification information. After the verification is passed, the digital key can be added to the whitelist. If the device computer has no key certification information or the verification fails, the digital key can be further authenticated through the cloud. By performing multi-level authentication on the digital key that is accessed for the first time, the expired key can be prevented from being used again, thereby improving vehicle safety. At the same time, there is no need to record expired keys through the blacklist mechanism, saving vehicle-side storage resources.

[0069] like Figure 4 As shown, the digital key access authentication method of an embodiment of the present invention is described below based on the digital key system. The method includes S401 to S419.

[0070] S401. The device sends a digital key generation request to the cloud.

[0071] S402: Generate digital key and key certification information in the cloud.

[0072] S403: The cloud returns the digital key and key certification information to the device.

[0073] S404: The device receives and stores the digital key and key certification information.

[0074] S405: The device sends a digital key access request to the vehicle computer.

[0075] S406. The vehicle terminal determines whether the digital key to be connected is a valid key that has been connected. If so, the process proceeds to S408 to end the first key access authentication. If not, the process proceeds to S407.

[0076] S407: The vehicle computer requests key certification information from the device.

[0077] S409: The device determines whether key certification information is stored locally. If so, the process proceeds to S410; if not, the process proceeds to S412.

[0078] S410: The device sends key certification information to the vehicle computer.

[0079] S411. The vehicle computer verifies the key certification information and determines whether the key certification information passes the verification. If it passes, the process proceeds to S415; if it fails, the process proceeds to S412.

[0080] S412: The vehicle computer requests the cloud to authenticate the digital key online.

[0081] S413. The cloud authenticates the digital key.

[0082] S414: The cloud returns the cloud authentication result to the vehicle computer.

[0083] S415. The vehicle computer determines whether the digital key has passed the cloud authentication. If so, it proceeds to S416 to store the digital key. If not, it proceeds to S419 to disable the digital key.

[0084] S416. The vehicle computer stores the digital key and adds the digital key to the whitelist.

[0085] S417: If the device has key certification information, the vehicle computer notifies the device to delete the key certification information.

[0086] S418. The device deletes the key certification information.

[0087] The fourth embodiment of the present invention provides a digital key access authentication device, which is configured on the vehicle side. Figure 5 As shown, the authentication device 500 includes: a first access determination module 502 , a key certification request module 504 and a key certification verification module 506 .

[0088] The first access determination module 502 is configured to receive a digital key access authentication request sent by a device, and determine whether the corresponding digital key is a valid key that has been accessed based on the access authentication request.

[0089] The key certification request module 504 is used to request key certification information of the digital key to be accessed from the device side when the digital key is not a valid key that has been accessed; the key certification information includes access authority authentication information of the digital key.

[0090] The key certification verification module 506 is used to authenticate the digital key to be accessed based on the key certification information after receiving the key certification information sent by the device side. When the digital key to be accessed passes the authentication, the authentication result is returned to the device side so that the device side can delete the key certification information after the digital key passes the authentication.

[0091] Compared to existing technologies, the authentication device in this embodiment of the present invention generates key certification information simultaneously with the digital key generated in the cloud. When the vehicle receives a digital key access request from the device, if it determines that the digital key is not a valid key, it requests the device to provide key certification information and verifies the digital key based on the key certification information. If the verification passes, the device is notified to delete the locally stored key certification information. By incorporating a first-time key access verification mechanism, deleted keys can be effectively prevented from obtaining vehicle access again, improving vehicle safety without requiring more storage resources than a blacklist mechanism.

[0092] The fifth embodiment of the present invention provides a digital key access authentication device, which is configured on the device side. Figure 6 As shown, the authentication device 600 includes: an access request module 602 and a deletion module 604.

[0093] The access request module 602 is used to send a digital key access authentication request to the vehicle-computer end. When a request for obtaining the key certification information of the digital key to be accessed is received from the vehicle-computer end and the key certification information is stored locally, the key certification information is sent to the vehicle-computer end so that the vehicle-computer end can authenticate the digital key to be accessed based on the key certification information; wherein, when the vehicle-computer end determines that the digital key to be accessed is not a valid key that has been accessed, it requests the key certification information from the device end, and the key certification information includes the access authority authentication information of the digital key; the key certification information is generated by the cloud end when the digital key is generated and sent to the device end.

[0094] The deletion module 604 is used to delete the key certification information when the digital key to be connected returned by the vehicle terminal passes the authentication.

[0095] Compared to existing technologies, the authentication device in this embodiment of the present invention generates key certification information simultaneously with the digital key generated in the cloud. When the vehicle receives a digital key access request from the device, if it determines that the digital key is not a valid key, it requests the device to provide key certification information and verifies the digital key based on the key certification information. If the verification passes, the device is notified to delete the locally stored key certification information. By incorporating a first-time key access verification mechanism, deleted keys can be effectively prevented from obtaining vehicle access again, improving vehicle safety without requiring more storage resources than a blacklist mechanism.

[0096] The sixth embodiment of the present invention provides a digital key access authentication device, which is configured in the cloud. Figure 7 As shown, the authentication device 700 includes: a key and certificate generating module 702 and a sending module 704.

[0097] The key and certification generation module 702 is used to generate a digital key and key certification information of the digital key in response to a digital key generation request from the device end; the key certification information includes access authority authentication information of the digital key.

[0098] The sending module 704 is used to return the generated digital key and key certification information to the device side, so that the vehicle side can perform access authentication on the digital key according to the key certification information when the vehicle side requests access to the digital key and the digital key is not a valid key that has been accessed, and the device side deletes the key certification information after the access authentication is passed.

[0099] Compared to existing technologies, the authentication device in this embodiment of the present invention generates key certification information simultaneously with the digital key generated in the cloud. When the vehicle receives a digital key access request from the device, if it determines that the digital key is not a valid key, it requests the device to provide key certification information and verifies the digital key based on the key certification information. If the verification passes, the device is notified to delete the locally stored key certification information. By incorporating a first-time key access verification mechanism, deleted keys can be effectively prevented from obtaining vehicle access again, improving vehicle safety without requiring more storage resources than a blacklist mechanism.

[0100] Figure 8 This is a structural diagram of the vehicle terminal provided in Example 7 of the present invention. The vehicle terminal 80 includes a memory 81, a processor 82, and a computer program stored in the memory 81 and executable on the processor 82. When the processor 82 executes the program, the technical solution described in Example 1 above is implemented.

[0101] Figure 9 This is a schematic diagram of the structure of a terminal device provided in Embodiment 8 of the present invention. The terminal device 90 includes a memory 91, a processor 92, and a computer program stored in the memory 91 and executable on the processor 92. When the processor 92 executes the program, the technical solution described in Embodiment 2 above is implemented.

[0102] Figure 10 This is a schematic diagram of the cloud structure provided in Example 9 of the present invention. The cloud 100 includes a memory 110, a processor 120, and a computer program stored in the memory 110 and executable on the processor 120. When the processor 120 executes the program, the technical solution described in Example 3 above is implemented.

[0103] A tenth embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a computer processor, the computer program is used to execute the technical solution of any method embodiment.

[0104] Through the above description of the embodiments, those skilled in the art can clearly understand that the present invention can be implemented with the help of software and necessary general-purpose hardware. Of course, it can also be implemented with hardware, but in many cases the former is a more preferred embodiment. Based on this understanding, the technical solution of the present invention, or the part that contributes to the existing technology, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or grid device, etc.) to execute the methods described in various embodiments of the present invention.

[0105] It is worth noting that in the embodiment of the above-mentioned device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0106] Note that the above are only preferred embodiments of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments, and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments and may include many other equivalent embodiments without departing from the concept of the present invention. The scope of the present invention is determined by the scope of the appended claims.

Claims

1. A digital key access authentication method, characterized in that: Applied to the vehicle terminal, the method includes: Receiving a digital key access authentication request sent by a device, and determining whether the corresponding digital key is a valid key that has been accessed according to the access authentication request; When the digital key is not the valid key that has been accessed, requesting key certification information of the digital key to be accessed from the device end; the key certification information includes access authority authentication information of the digital key; After receiving the key certification information sent by the device side, the digital key to be accessed is authenticated according to the key certification information. When the digital key to be accessed passes the authentication, the authentication result is returned to the device side so that the device side can delete the key certification information after the digital key passes the authentication.

2. The method according to claim 1, characterized in that The method further comprises: When the key certification information is not obtained or the authentication of the digital key to be accessed fails according to the key certification information, the cloud is requested to authenticate the digital key to be accessed, and whether to allow the digital key to access the vehicle terminal is determined based on the authentication result returned by the cloud.

3. A digital key access authentication method, characterized in that: Applied to a device, the method includes: Sending a digital key access authentication request to the vehicle-side, and upon receiving a request to obtain key certification information of the digital key to be accessed from the vehicle-side and the key certification information being stored locally, sending the key certification information to the vehicle-side, so that the vehicle-side can authenticate the digital key to be accessed based on the key certification information; wherein, when the vehicle-side determines that the digital key to be accessed is not a valid key that has been accessed, requesting the key certification information from the device-side, the key certification information including the access permission authentication information of the digital key; the key certification information is generated by the cloud when generating the digital key and sent to the device-side; When the digital key to be connected is received and returned by the vehicle terminal and passes the authentication, the key certification information is deleted.

4. A digital key access authentication method, characterized in that: Applied to the cloud, the method includes: Generate a digital key and key certification information of the digital key in response to a digital key generation request from the device; the key certification information includes access authority authentication information of the digital key; The generated digital key and key certification information are returned to the device side, so that the vehicle side can perform access authentication on the digital key according to the key certification information when the vehicle side requests the device side to access the digital key and the digital key is not a valid key that has been accessed, and the device side deletes the key certification information after the access authentication is passed.

5. A digital key access authentication device, characterized in that: Configured on the vehicle side, the device includes: A first access judgment module is used to receive a digital key access authentication request sent by the device end, and determine whether the corresponding digital key is a valid key that has been accessed according to the access authentication request; a key certification request module, configured to request key certification information of the digital key to be accessed from the device end when the digital key is not the valid key that has been accessed; the key certification information includes access authority authentication information of the digital key; The key certification verification module is used to authenticate the digital key to be accessed according to the key certification information after receiving the key certification information sent by the device end. When the digital key to be accessed passes the authentication, the authentication result is returned to the device end so that the device end can delete the key certification information after the digital key passes the authentication.

6. A digital key access authentication device, characterized in that: Configured on the device side, the device includes: an access request module, configured to send a digital key access authentication request to the vehicle-side terminal, and upon receiving a request for obtaining key certification information of a digital key to be accessed from the vehicle-side terminal and the key certification information being stored locally, send the key certification information to the vehicle-side terminal, so that the vehicle-side terminal can authenticate the digital key to be accessed based on the key certification information; wherein, when the vehicle-side terminal determines that the digital key to be accessed is not a valid key that has been accessed, it requests the key certification information from the device-side terminal, the key certification information including access permission authentication information of the digital key; the key certification information is generated by the cloud terminal when generating the digital key and sent to the device-side; The deletion module is used to delete the key certification information when the digital key to be connected is returned by the vehicle terminal and passes the authentication.

7. A digital key access authentication device, characterized in that: Configured in the cloud, the device includes: A key and certification generation module, configured to generate a digital key and key certification information of the digital key in response to a digital key generation request from a device; the key certification information includes access authority authentication information of the digital key; A sending module is used to return the generated digital key and key certification information to the device end, so that the vehicle end can perform access authentication on the digital key according to the key certification information when the vehicle end requests the device end to access the digital key and the digital key is not a valid key that has been accessed, and the device end deletes the key certification information after the access authentication is passed.

8. A terminal device, characterized in that: The method comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method according to claim 1 or 2 when executing the program.

9. A vehicle terminal, characterized in that: The method comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the method according to claim 3 is implemented when the processor executes the program.

10. A cloud, characterized in that: The method comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the method according to claim 4 is implemented when the processor executes the program.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 4 is implemented.

Images