Pairing for digital key

Abstract

Disclosed in the embodiments of the present description is a pairing method for a digital key, which method is applied to a client. The pairing method comprises: on the basis of a unique identifier of a target in-vehicle terminal, completing binding with the target in-vehicle terminal; in response to an activation operation of a user, on the basis of an initial physical address of the target in-vehicle terminal, establishing a communication connection with the target in-vehicle terminal; acquiring a digital certificate and a public key, which digital certificate is signed and issued by the target in-vehicle terminal, so as to obtain a digital key; synchronizing the public key and the digital certificate to a server, and acquiring a reset physical address issued by the server; and sending the reset physical address to the target in-vehicle terminal, and on the basis of the reset physical address, re-establishing a communication connection with the target in-vehicle terminal, so as to complete pairing between the digital key and the target in-vehicle terminal. Correspondingly, disclosed in the present invention are a pairing system for a digital key, and an electronic device.

Description

Pairing a digital key Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a digital key pairing method, system, and electronic device. Background Art

[0002] Current digital car key systems primarily consist of a vehicle computer, a server, and a client. The vehicle computer completes the activation process during the production line phase, including generating a public-private key pair and synchronizing the public key and Mac address to the server. To pair the vehicle computer with a digital car key, users simply bind the vehicle computer's unique physical identifier to the client. This approach is complex and expensive during the production line phase, and users only need to obtain the vehicle computer's unique physical identifier for binding, which poses the risk of malicious binding.

[0003] Summary of the Invention

[0004] One or more embodiments of this specification provide a digital key pairing method, system, and electronic device that can offload part of the work in the production line process to the user binding stage, thereby reducing the complexity of the production line process and improving vehicle safety.

[0005] According to a first aspect, a method for pairing a digital key is provided, which is applied to a client, and the method includes:

[0006] According to the unique identifier of the target vehicle terminal, the binding with the target vehicle terminal is completed;

[0007] In response to an activation operation by a user, establishing a communication connection with the target vehicle terminal based on the initial physical address of the target vehicle terminal;

[0008] Obtain the digital certificate and public key issued by the target vehicle terminal to obtain the digital key;

[0009] Synchronize the public key and the digital certificate to the server, and obtain the reset physical address issued by the server;

[0010] The reset physical address is sent to the target vehicle terminal, and based on the reset physical address, a communication connection is re-established with the target vehicle terminal to complete the pairing of the digital key and the target vehicle terminal.

[0011] As an optional implementation manner of the method of the first aspect, completing the binding with the target vehicle terminal according to the unique identifier of the target vehicle terminal specifically includes:

[0012] Generate binding information based on the unique identifier of the target vehicle terminal and the unique identifier of the client;

[0013] Initiate a binding request to the server and upload the binding information to the server;

[0014] Obtain feedback information from the server after registering the binding information, and complete the binding with the target vehicle terminal.

[0015] As an optional implementation of the method described in the first aspect, the target vehicle terminal establishes a communication connection with the client via Bluetooth.

[0016] As an optional implementation manner of the method of the first aspect, in response to a user activation operation, establishing a communication connection with the target vehicle terminal based on the initial physical address of the target vehicle terminal specifically includes:

[0017] In response to the communication connection request based on the initial physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

[0018] As an optional implementation manner of the method of the first aspect, re-establishing a communication connection with the target vehicle terminal based on the reset physical address specifically includes:

[0019] In response to the communication connection request based on the reset physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

[0020] According to a second aspect, a digital key pairing method is provided, which is applied to a server, and the method includes:

[0021] In response to a binding request from a client, storing the binding information uploaded by the client; the binding information is used to represent the binding relationship between the client and the target vehicle terminal;

[0022] Obtain the digital certificate and public key of the target vehicle terminal uploaded by the client;

[0023] Verifying the digital certificate based on the public key; after verification, generating a reset physical address for the target vehicle terminal, and sending the reset physical address to the client, so that the client sends the reset physical address to the target vehicle terminal and re-establishes a communication connection with the target vehicle terminal based on the reset physical address;

[0024] The public key, the digital certificate, the reset physical address and the binding information are stored in association with each other.

[0025] As an optional implementation manner of the method of the second aspect, in response to a binding request from a client, storing the binding information uploaded by the client specifically includes:

[0026] Based on the obtained binding information, determining whether a binding relationship already exists with the target vehicle terminal;

[0027] If there is no binding relationship with the target vehicle terminal, storing the binding information uploaded by the client;

[0028] If a binding relationship exists with the target vehicle-machine end, determine whether there is an activated digital key on the target vehicle-machine end; if there is an activated digital key on the target vehicle-machine end, reject the binding request of the client; if there is no activated digital key on the target vehicle-machine end, overwrite the original binding information of the target vehicle-machine end with the binding information uploaded by the client.

[0029] According to a third aspect, a digital key pairing method is provided, which is applied to a target vehicle terminal, and the method includes:

[0030] In response to an activation operation by the user, establishing a communication connection with the client based on the initial physical address;

[0031] Generate public and private keys and issue digital certificates;

[0032] storing the private key, and sending the public key and the digital certificate to the client, so that the client obtains a digital key based on the digital certificate;

[0033] In response to obtaining the reset physical address sent by the client, a communication connection is re-established with the client based on the reset physical address, thereby completing the pairing of the digital key with the target vehicle terminal.

[0034] As an optional implementation manner of the method according to the third aspect, the target vehicle terminal includes a key generation SDK; the target vehicle terminal generates the public key and the private key, and issues the digital certificate, specifically including:

[0035] In response to successfully establishing a communication connection with the client, calling the key generation SDK to generate the public key and the private key;

[0036] The digital certificate is issued using the public key.

[0037] As an optional implementation manner of the method described in the third aspect, the target vehicle terminal includes a secure storage module with a secure storage environment; the secure storage module is used to store the private key.

[0038] According to the fourth aspect, a digital key pairing system is provided, including a target vehicle terminal, a client terminal and a server terminal; wherein the client terminal is used to execute the digital key pairing method applied to the client terminal as described in any one of the above items, the server terminal is used to execute the digital key pairing method applied to the server terminal as described in any one of the above items, and the target vehicle terminal is used to execute the digital key pairing method applied to the target vehicle terminal as described in any one of the above items.

[0039] According to a fifth aspect, there is provided an electronic device, comprising:

[0040] at least one memory for storing a program;

[0041] At least one processor is used to execute the program stored in the memory. When the program stored in the memory is executed, the processor is used to execute the pairing method of the digital key applied to the client as described in any of the above items, or to execute the pairing method of the digital key applied to the server as described in any of the above items, or to execute the pairing method of the digital key applied to the target vehicle as described in any of the above items.

[0042] According to the sixth aspect, a computer-readable storage medium is provided, which stores a computer program. When the computer program is run on an electronic device, the electronic device executes the pairing method of the digital key applied to the client as described in any one of the above items, or executes the pairing method of the digital key applied to the server as described in any one of the above items, or executes the pairing method of the digital key applied to the target vehicle end as described in any one of the above items.

[0043] According to the seventh aspect, a computer program product is provided, characterized in that when the computer program product is run on an electronic device, the electronic device executes the pairing method of the digital key applied to the client as described in any one of the above items, or executes the pairing method of the digital key applied to the server as described in any one of the above items, or executes the pairing method of the digital key applied to the target vehicle end as described in any one of the above items.

[0044] The digital key pairing method described in the embodiments of this specification has the beneficial effect of offloading error-prone tasks such as public-private key pair generation, key synchronization, and physical address synchronization to the user binding phase. The production line only needs to generate a unique identifier for the vehicle-side computer, eliminating the need to synchronize information between the vehicle-side computer and the server. This simplifies the production process and reduces production costs. Furthermore, after leaving the factory, the vehicle-side computer must manually activate the communication connection with the client. Only after the transmitted key and certificate are verified by the server is the binding process completed and vehicle control is enabled. This improves the security of the digital key, preventing the vehicle from being controlled even if the vehicle-side computer is maliciously bound.

[0045] The digital key pairing system described in the embodiments of this specification also has the above-mentioned beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the embodiments of this specification or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0047] FIG1 exemplarily shows a flow chart of an existing digital key pairing method in one embodiment.

[0048] FIG2 exemplarily shows a schematic diagram of a digital key pairing system according to an embodiment of this specification in one implementation manner.

[0049] FIG3 exemplarily shows a flowchart of a digital key pairing method according to an embodiment of this specification in one implementation manner.

[0050] FIG4 exemplarily shows a flowchart of the digital key pairing method described in an embodiment of this specification being applied to a client.

[0051] FIG5 exemplarily shows a flow chart of the digital key pairing method described in an embodiment of this specification applied to a server.

[0052] FIG6 exemplarily shows a flow chart of the digital key pairing method described in an embodiment of this specification applied to a server in a specific scenario.

[0053] FIG7 exemplarily shows a flow chart of the digital key pairing method described in an embodiment of this specification applied to a target vehicle terminal.

[0054] FIG8 exemplarily shows a structural diagram of an electronic device provided in an embodiment of this specification. DETAILED DESCRIPTION

[0055] First, it should be noted that the terms used in the embodiments of the present invention are for the purpose of describing specific embodiments only and are not intended to limit the present invention. As used in the embodiments of the present invention and the appended claims, the singular forms "a," "the," and "the" are intended to include the plural forms, unless the context clearly indicates otherwise.

[0056] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Therefore, it should be recognized by those skilled in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for the sake of clarity and conciseness, descriptions of well-known functions and structures are omitted in the following description.

[0057] Digital car key technology, through a combination of hardware and software, can give mobile phones or wearable devices the functionality of car keys, allowing car owners to control their vehicles and perform operations such as opening and closing doors. The current digital car key system primarily consists of a vehicle-mounted device, a server, and a client. The vehicle-mounted device completes the activation process during the production line phase, primarily referring to the production process of the vehicle-mounted hardware device. This process includes generating a unique device identifier, generating a public-private key pair, configuring a Mac address, and synchronizing the public key with the server. Upon receiving the public key information, the server deems the vehicle-mounted device production line activation complete.

[0058] For example, in the case of an electric two-wheeler, the hardware on the vehicle primarily refers to the alarm or instrument panel. During the production line activation phase, the basic process includes the following steps.

[0059] 1. Hardware equipment production. Mainly includes PCB board production, chip and original device placement, circuit availability and stability testing, etc.

[0060] 2. Write hardware device parameters. Generate device-related parameters and write them to the hardware device using production line tools. These parameters mainly include: key, MAC address, device serial number, etc. Production line tools refer to the software and hardware tools that connect hardware devices and servers, mainly including host computers and QR code generators.

[0061] 3. Establishing the device number and device mapping relationship. This mainly includes: first using the number to generate a QR code and attaching it to the device or instruction manual, then synchronizing the device number, Mac address, and device key to the server. The server then stores this information after receiving it.

[0062] When users pair the car computer with the digital car key, they only need to bind the unique identifier of the car computer, such as the device number, with the client.

[0063] FIG1 exemplarily shows a flow chart of an existing digital key pairing method in one embodiment.

[0064] During the production line stage, Figure 1 omits the production process of the hardware device. The mobile phone application acts as the client, and the hardware device on the vehicle side performs digital car key pairing on behalf of the vehicle side. The production line tool requests the device number from the server as the unique identifier of the vehicle side, and requests to obtain the Mac address information, which is used to uniquely identify the location of the vehicle side in the network, and sends the device number and Mac address to the hardware device, corresponding to steps 1-4 in Figure 1. Next, the hardware device calls the internal SDK to generate a public-private key pair and stores it locally, and returns the public key to the production line tool, corresponding to steps 5-7 in Figure 1. The production line tool uses a QR code generator to generate a QR code based on the device number and affixes it to the device or instruction manual, and synchronizes the device number, Mac address, and device key to the server to establish a mapping relationship between the device number and the device; after receiving this information, the server associates it with the corresponding hardware device and stores it to complete the activation.

[0065] During the binding stage, users can bind the digital car key between the vehicle and the client by scanning the QR code or entering the device number, and obtain the public key, Mac address and other information of the hardware device returned by the server to control the vehicle.

[0066] The aforementioned production process is complex and expensive, and can be difficult to resolve if issues such as device number mismatches, data write or upload failures, and activation failures occur. Furthermore, after the vehicle-mounted device is activated on the production line, users only need the vehicle-mounted device's unique identifier to bind it, which poses the risk of malicious binding.

[0067] In view of this, we hope to obtain a digital key pairing method that can complete the complex activation process of the production line in the user binding stage. While reducing the probability of pairing errors, it can also effectively avoid the situation where the vehicle end is mistakenly bound.

[0068] The digital key pairing method and system described in the embodiments of this specification will be further described in detail below in conjunction with the drawings and specific embodiments of the specification, but this detailed description does not constitute a limitation on the embodiments of this specification.

[0069] It should be noted that in other embodiments, the steps of the corresponding method are not necessarily performed in the order shown and described in this specification. In some other embodiments, the method may include more or fewer steps than those described in this specification. In addition, a single step described in this specification may be broken down into multiple steps for description in other embodiments, and multiple steps described in this specification may be combined into a single step for description in other embodiments.

[0070] In one embodiment of the present specification, a digital key pairing system is proposed, including a target vehicle terminal, a client terminal, and a server terminal. FIG2 exemplarily shows a schematic diagram of the digital key pairing system described in an embodiment of the present specification under one implementation, which can be used to implement the digital key pairing method described in one or more embodiments of the present specification. It should be noted that the digital key pairing method described in one or more embodiments of the present specification can be implemented by relying on the digital key pairing system shown in FIG2, but is not limited to the digital key pairing system.

[0071] As shown in Figure 2, the digital key pairing system includes a target vehicle computer, a client, and a server. The target vehicle computer, client, and server are connected via a communication link, which can be a wired network or a wireless network. For example, the target vehicle computer, client, and server can establish a communication connection using Wi-Fi, Bluetooth, infrared, or other communication methods. Alternatively, the communication connection can be established via a mobile network.

[0072] In the pairing system of the digital key, optionally, the production line tool can first be used to request the server to obtain the unique identifier of the target vehicle terminal and mark it on the target vehicle terminal. For example, the production line tool obtains the device number from the server and generates a corresponding QR code and affixes it to the hardware device of the target vehicle terminal.

[0073] The activation process is completed in the user binding process, which specifically includes: after the client is bound to the target vehicle terminal according to the unique identifier of the target vehicle terminal, the user manually triggers the target vehicle terminal to broadcast, so that the target vehicle terminal and the client can communicate and connect. Specifically, broadcasting and connection can be performed via Bluetooth. Next, the target vehicle terminal uses the built-in SDK to generate a public-private key pair and store it locally, and returns the public key and digital certificate to the client, which then transmits it to the server for verification. After the verification is passed, the server stores the associated information of the target vehicle terminal, configures a new Mac address for the target vehicle terminal, and transmits it to the target vehicle terminal through the client. After the target vehicle terminal restarts based on the new Mac address, it reconnects with the client to complete the activation and pairing.

[0074] Corresponding to the above-mentioned digital key pairing system, this specification provides a digital key pairing method. Figure 3 exemplarily shows a flow chart of the digital key pairing method described in an embodiment of this specification under one implementation. The method includes S100 to S110.

[0075] S100: The production line tool requests the server to obtain the unique identifier of the target vehicle computer, such as the device number. The server generates a unique identifier and returns it. The production line tool associates the unique identifier with the target vehicle computer, for example, generates a QR code based on the device number and affixes it to the device of the target vehicle computer.

[0076] S102: The client obtains the unique identifier of the target vehicle terminal from the server to complete the binding with the target vehicle terminal.

[0077] S104: The user operates the target vehicle terminal to activate it, such as triggering Bluetooth broadcast, and the client establishes a communication connection with the target vehicle terminal based on the initial physical address of the target vehicle terminal, such as the initial Mac address.

[0078] S106: The target vehicle computer generates a public-private key pair, issues a digital certificate, stores the private key, and sends the public key and digital certificate to the client, so that the client obtains a digital key based on the digital certificate.

[0079] S108: The client synchronizes the received public key and digital certificate to the server; the server verifies the digital certificate based on the public key, generates a reset physical address for the target vehicle computer after verification, and sends the reset physical address to the client.

[0080] S110: The client sends the reset physical address to the target vehicle terminal and re-establishes the communication connection with the target vehicle terminal to complete the pairing of the digital key and the target vehicle terminal; the server receives the binding information returned by the client and associates it with the public key, digital certificate and reset physical address for storage.

[0081] The digital key pairing method provided in the embodiments of this specification offloads error-prone tasks such as public-private key pair generation, key synchronization, and physical address synchronization to the user binding phase. The production line only needs to generate a unique identifier for the vehicle-side computer, eliminating the need to synchronize information between the vehicle-side computer and the server. This simplifies the production process and reduces production costs. Furthermore, after leaving the factory, the vehicle-side computer must manually activate the communication connection with the client. Only after the transmitted key and digital certificate are verified by the server is the binding process completed and vehicle control enabled. This improves the security of the digital key, ensuring that even if the vehicle-side computer is maliciously bound, it cannot control the vehicle.

[0082] In some embodiments of this specification, a digital key pairing method is proposed, which is applied to a client, as shown in FIG4 , and includes S200 to S208 .

[0083] S200: Complete the binding with the target vehicle terminal according to the unique identifier of the target vehicle terminal.

[0084] Typically, the production line tool can request the unique identifier of the target vehicle-mounted device from the server and return it to the target vehicle-mounted device for association. Production line tools refer to the hardware and software tools that connect hardware devices and the server, primarily including a host computer and a QR code generator. Optionally, the device number of the target vehicle-mounted device can be used as the unique identifier. After the production line tool obtains the device number from the server, it can use a QR code generator to generate a QR code and attach it to the device on the target vehicle-mounted device, or directly attach the device number to the device on the target vehicle-mounted device.

[0085] In some embodiments, binding with the target vehicle terminal is completed according to the unique identifier of the target vehicle terminal, specifically including:

[0086] Generate binding information based on the unique identifier of the target vehicle terminal and the unique identifier of the client;

[0087] Initiate a binding request to the server and upload the binding information to the server;

[0088] Obtain feedback from the server after registering the binding information and complete the binding with the target vehicle terminal.

[0089] Specifically, a mapping relationship can be generated based on the unique identifier of the target vehicle terminal and the unique identifier of the client, thereby forming binding information; the client sends the binding information to the server to request binding, and completes the binding with the target vehicle terminal based on the feedback information of the server response.

[0090] After binding, the target vehicle is still in its initial inactive state. The server does not have the physical address, public key, and other information associated with the target vehicle, and cannot control the vehicle at this time. Even if someone else maliciously binds first, they will not be able to operate the target vehicle.

[0091] S202: In response to the user's activation operation, a communication connection is established with the target vehicle terminal based on the initial physical address of the target vehicle terminal.

[0092] The user can manually activate the target vehicle computer, causing it to establish a communication connection with the client using a unified initial physical address. Specifically, the initial physical address can be the target vehicle computer's initial MAC address, which uniquely identifies the target vehicle computer's location on the network. If the user stops the activation operation, the client will no longer be able to establish a communication connection with the target vehicle computer.

[0093] In some embodiments, the target vehicle terminal and the client terminal establish a communication connection via Bluetooth.

[0094] Specifically, the user triggers the target vehicle computer to send a Bluetooth broadcast through manual operation, and the client continuously monitors the broadcast and establishes a Bluetooth connection when the Bluetooth broadcast of the target vehicle computer is detected; if the user stops the operation, the target vehicle computer also stops the Bluetooth broadcast.

[0095] Preferably, since the physical car key is a valid certificate for determining the user's vehicle ownership, the user can use the physical car key to turn it multiple times to trigger the target car machine to perform Bluetooth broadcasting, thereby establishing a communication connection with the client; accordingly, the target car machine stops broadcasting after the user pulls out the key.

[0096] In some embodiments, in response to a user activation operation, establishing a communication connection with the target vehicle terminal based on the initial physical address of the target vehicle terminal specifically includes:

[0097] In response to the communication connection request based on the initial physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

[0098] Specifically, the user manually activates the target vehicle terminal to broadcast a communication connection request based on the initial physical address. After receiving the request, the client accepts the request to indicate that it agrees to establish a communication connection with the target vehicle terminal.

[0099] Optionally, the communication connection request may be broadcast in the form of Bluetooth; the initial physical address of the target vehicle terminal may adopt a unified initial Mac address.

[0100] S204: Obtain the digital certificate and public key issued by the target vehicle terminal to obtain the digital key.

[0101] Specifically, the target vehicle's hardware device has a built-in SDK that generates public and private keys and issues a digital certificate. The private key is stored locally on the target vehicle. Once the client obtains the digital certificate and public key issued by the target vehicle, it indicates that it has the right to control the target vehicle and thus obtains the digital key.

[0102] S206: Synchronize the public key and digital certificate to the server, and obtain the reset physical address issued by the server.

[0103] The client synchronizes the public key and digital certificate with the server for verification to determine whether the digital certificate is valid, ensuring successful vehicle control after digital key pairing. If verification is successful, the client receives a reset physical address from the server to uniquely identify the target vehicle's network location. Otherwise, it indicates that the target vehicle's public key and digital certificate are unavailable, and digital key pairing has failed.

[0104] S208: Send the reset physical address to the target vehicle terminal, and re-establish the communication connection with the target vehicle terminal based on the reset physical address to complete the pairing of the digital key and the target vehicle terminal.

[0105] Specifically, the client can send the reset physical address to the target vehicle computer based on the previous communication instruction, for example, the reset physical address can be transmitted using a Bluetooth instruction. After receiving the reset physical address, the target vehicle computer restarts to re-establish the communication connection with the client.

[0106] In some embodiments, re-establishing a communication connection with the target vehicle terminal based on resetting the physical address specifically includes:

[0107] In response to the communication connection request based on the reset physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

[0108] Specifically, after the target vehicle computer receives the reset physical address, it changes the initial physical address to the reset physical address and restarts. The user re-activates the target vehicle computer through manual operation to broadcast a communication connection request based on the reset physical address. After receiving the request, the client accepts the request to indicate that it agrees to re-establish the communication connection with the target vehicle computer.

[0109] Optionally, the communication connection request may be broadcast in the form of Bluetooth; the reset physical address of the target vehicle terminal may adopt a unified initial Mac address.

[0110] It should be noted that after the client completes pairing the digital key with the target vehicle, it needs to notify the server that the target vehicle has been activated so that the server can associate and store the target vehicle's public key, physical address, and other information. At this point, the client can request vehicle control operations such as unlocking and locking the vehicle from the server.

[0111] Some embodiments of this specification also provide a digital key pairing method, which is applied to a server, as shown in FIG5 , and includes S300 to S306 .

[0112] S300: In response to the binding request from the client, the binding information uploaded by the client is stored; the binding information is used to represent the binding relationship between the client and the target vehicle terminal.

[0113] S302: Obtain the digital certificate and public key of the target vehicle computer uploaded by the client.

[0114] S304: Verify the digital certificate based on the public key; after the verification is passed, generate a reset physical address for the target vehicle terminal, and send the reset physical address to the client, so that the client sends the reset physical address to the target vehicle terminal and re-establishes the communication connection with the target vehicle terminal based on the reset physical address.

[0115] S306: The public key, digital certificate, reset physical address and binding information are stored in association with each other.

[0116] Specifically, the binding request of the client may include a mapping relationship generated based on the unique identifier of the target vehicle terminal and the unique identifier of the client.

[0117] It should be noted that the unique identifier of the target vehicle and the unique identifier of the client can be generated by the server and transmitted to the target vehicle and the client respectively through production line tools for association. Production line tools refer to the hardware and software tools that connect hardware devices and the server, mainly including the host computer and QR code generator.

[0118] In some embodiments, in response to a binding request from a client, storing the binding information uploaded by the client specifically includes:

[0119] Based on the obtained binding information, determine whether the target vehicle terminal already has a binding relationship;

[0120] If there is no binding relationship with the target vehicle, the binding information uploaded by the client is stored;

[0121] If there is a binding relationship with the target vehicle computer, determine whether there is an activated digital key on the target vehicle computer; if there is an activated digital key on the target vehicle computer, reject the client's binding request; if there is no activated digital key on the target vehicle computer, overwrite the original binding information of the target vehicle computer with the binding information uploaded by the client.

[0122] According to the digital key pairing method described in the embodiments of this specification, the target vehicle terminal can be bound to the client, but this does not mean that the client's digital key has the function of controlling the vehicle, because the digital key still needs to be activated and the physical address, public key and other information of the target vehicle terminal must be synchronized to the server. Therefore, the server first determines whether a binding relationship already exists with the target vehicle terminal. If not, the binding can continue; if a binding relationship exists, it further determines whether there is an activated digital key on the target vehicle terminal. In order to ensure the safety of the vehicle, the number of digital keys that can control the vehicle is limited to one. If there is an activated digital key, it cannot be re-bound to the client; and if the target vehicle terminal is only bound to the client but the digital key is not activated, the previous binding information can be overwritten and the current binding information can be used for binding.

[0123] Next, the server obtains the digital certificate and public key of the target vehicle computer uploaded by the client to verify the authenticity and availability of the digital certificate based on the public key. If the verification is successful, the public key of the target vehicle computer is stored, and a reset physical address that can uniquely identify the target vehicle computer is distributed, which is transmitted to the target vehicle computer by the client; if the verification fails, the digital certificate is unavailable and the digital key binding fails.

[0124] After receiving the reset physical address, the target vehicle computer changes its initial physical address to the reset physical address and restarts. The user manually activates the target vehicle computer and reestablishes a communication connection with the client based on the reset physical address, completing the pairing of the digital key and the target vehicle computer. At this point, the server receives a notification from the client that the pairing has been successful, associates and stores the target vehicle computer's public key, digital certificate, reset physical address, and binding information, and can then respond to the client's request to provide vehicle control functions such as unlocking and locking the vehicle.

[0125] FIG6 exemplarily shows a flow chart of the digital key pairing method described in an embodiment of this specification applied to a server in a specific scenario.

[0126] In this embodiment, the device number is used as the unique identifier of the target vehicle terminal, and the Mac address is used as the physical address of the target vehicle terminal. The client and the target vehicle terminal communicate via Bluetooth. As shown in Figure 6, after the user submits a binding request through the client, the server first determines whether the target vehicle terminal has a binding relationship based on the device number of the target vehicle terminal. If a binding relationship already exists, it further determines whether the target vehicle terminal has been activated. In other words, whether the target vehicle terminal has an activated digital key. If the target vehicle terminal has already been bound to an activated digital key, it cannot be re-bound to the client, and the binding fails. If the target vehicle terminal is only bound to the client but has not activated the digital key, the previous binding information can be overwritten and the current binding information can be used for binding.

[0127] If the target vehicle-side has not had a binding relationship before, the user triggers a Bluetooth broadcast on the target vehicle-side, so that the client and the target vehicle-side establish a Bluetooth connection and exchange commands. Next, the SDK of the target vehicle-side generates a public-private key pair and issues a certificate, stores the public-private key pair locally, and transmits the public key and digital certificate to the server through the client for verification. The server verifies the authenticity and validity of the digital certificate. If the verification fails, the binding fails. If the verification passes, a unique reset Mac address is issued to the target vehicle-side and passed to the target vehicle-side through the client. The target vehicle-side restarts the device based on the reset Mac address, and re-broadcasts when triggered by the user to re-establish a Bluetooth connection with the client, completing the pairing of the digital key and the target vehicle-side. After the pairing is successful, the client notifies the server that the digital key of the target vehicle-side has been successfully activated and can be used to control the vehicle.

[0128] Some embodiments of this specification also provide a digital key pairing method, which is applied to a target vehicle terminal, as shown in FIG7 , and includes S400 to S406 .

[0129] S400: In response to the user's activation operation, a communication connection is established with the client based on the initial physical address.

[0130] S402: Generate public key and private key, and issue digital certificate.

[0131] S404: The private key is stored, and the public key and the digital certificate are sent to the client, so that the client obtains the digital key based on the digital certificate.

[0132] S406: In response to obtaining the reset physical address sent by the client, re-establishing the communication connection with the client based on the reset physical address, and completing the pairing of the digital key and the target vehicle terminal.

[0133] The target vehicle terminal can be manually activated by the user, causing it to establish a communication connection with the client using a unified initial physical address. Specifically, the initial physical address can be the target vehicle terminal's initial MAC address, which uniquely identifies the target vehicle terminal's location on the network. If the user stops the activation operation, the target vehicle terminal will no longer be able to establish a communication connection with the client.

[0134] In some embodiments, the target vehicle terminal and the client terminal establish a communication connection via Bluetooth.

[0135] Specifically, the target vehicle computer sends a Bluetooth broadcast after being triggered by manual operation of the user. After the client detects the broadcast, a Bluetooth connection is established between the two. If the user stops the operation, the target vehicle computer also stops the Bluetooth broadcast.

[0136] Preferably, since the physical car key is a valid certificate for determining the user's vehicle ownership, the user can use the physical car key to turn it multiple times to trigger the target car machine to perform Bluetooth broadcasting, thereby establishing a communication connection with the client; accordingly, the target car machine stops broadcasting after the user pulls out the key.

[0137] In some embodiments, the target vehicle terminal sends a communication connection request to the client based on the initial physical address in response to the user's activation operation. If the client receives the request, the target vehicle terminal successfully establishes a communication connection with the client.

[0138] Optionally, the communication connection request may be broadcast in the form of Bluetooth; the initial physical address of the target vehicle terminal may adopt a unified initial Mac address.

[0139] In some embodiments, the target vehicle computer includes a key generation SDK; the target vehicle computer generates a public key and a private key and issues a digital certificate, specifically including:

[0140] In response to successfully establishing a communication connection with the client, calling the key generation SDK to generate a public key and a private key;

[0141] Use the public key to issue a digital certificate.

[0142] SDK refers to a collection of relevant documents, examples, and tools that assist in the development of a certain type of software. A universal key generation SDK can be deployed in the target vehicle terminal. When needed, the key generation SDK can be mobilized to quickly generate public and private keys.

[0143] A digital certificate, also known as a digital identifier, is a form of digital identity authentication during network communications. It encrypts or decrypts information and data sent by network users, ensuring the integrity and security of that information. The target vehicle's computer uses its public key to issue a digital certificate, effectively verifying the authenticity of the target vehicle's identity.

[0144] In some embodiments, the target vehicle terminal includes a secure storage module with a secure storage environment; the secure storage module is used to store the private key.

[0145] In asymmetric encryption, the public key is typically publicly available, while the private key is retained by the owner of the key pair. When using a public-private key pair, encrypting data with one key requires the other to decrypt it. Therefore, the security of the private key is extremely important. Storing it in a secure local storage module with a secure environment prevents data leakage and protects the security of the target vehicle.

[0146] After the target vehicle sends the digital certificate and public key to the client, it indicates that the client has the right to control the target vehicle and thus obtain the digital key.

[0147] The target vehicle's public key and digital certificate are synchronized from the client to the server for verification to determine whether the digital certificate is valid, ensuring successful vehicle control after digital key pairing. If verification is successful, the target vehicle receives the reset physical address sent by the client and replaces the initial physical address. After restarting the device, it re-establishes communication with the client using the reset physical address, completing the pairing of the digital key and the target vehicle. Otherwise, it indicates that the target vehicle's public key and digital certificate are unavailable, and digital key pairing fails.

[0148] In some embodiments, the target vehicle terminal responds to the user's activation operation and resends a communication connection request to the client based on the reset physical address. If the client receives the request, the target vehicle terminal successfully re-establishes a communication connection with the client.

[0149] Optionally, the communication connection request may be broadcast in the form of Bluetooth; the reset physical address of the target vehicle terminal may adopt a unified initial Mac address.

[0150] It should be noted that after completing the pairing of the digital key and the target vehicle computer, the client notifies the server that the target vehicle computer has been activated, and the public key, digital certificate, reset physical address and binding information of the target vehicle computer are associated and stored by the server.

[0151] One embodiment of this specification provides an electronic device, including:

[0152] at least one memory for storing a program;

[0153] At least one processor is used to execute the program stored in the memory. When the program stored in the memory is executed, the processor is used to execute the pairing method of the digital key applied to the client as described in any of the above items, or to execute the pairing method of the digital key applied to the server as described in any of the above items, or to execute the pairing method of the digital key applied to the target vehicle as described in any of the above items.

[0154] One embodiment of the present specification provides a computer-readable storage medium storing a computer program. When the computer program is executed on an electronic device, the electronic device executes a pairing method for a digital key applied to a client as described in any one of the above items, or executes a pairing method for a digital key applied to a server as described in any one of the above items, or executes a pairing method for a digital key applied to a target vehicle as described in any one of the above items.

[0155] One embodiment of the present specification provides a computer program product, characterized in that when the computer program product is run on an electronic device, the electronic device executes the pairing method of the digital key applied to the client as described in any of the above items, or executes the pairing method of the digital key applied to the server as described in any of the above items, or executes the pairing method of the digital key applied to the target vehicle terminal as described in any of the above items.

[0156] FIG8 exemplarily illustrates a block diagram of an electronic device provided in accordance with an embodiment of this specification, which illustrates a schematic diagram of the structure of a computer system 500 suitable for implementing a terminal device or server according to an embodiment of the present invention. The terminal device or server shown in FIG8 is merely an example and should not limit the functionality or scope of use of the embodiments of the present invention.

[0157] In a typical configuration, computer system 500 includes one or more processors (CPUs) 502 , an input interface 504 , an output interface 506 , a network interface 508 , and memory 510 .

[0158] Memory 510 may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0159] Computer-readable media include permanent and non-permanent, removable and non-removable media that can be used to store information using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, disk storage, quantum memory, graphene-based storage media or other magnetic storage devices, or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory media such as modulated data signals and carrier waves.

[0160] The foregoing description of this specification describes specific embodiments. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0161] It should be understood that although the terms first, second, third, etc. may be used to describe various information in one or more embodiments of this specification, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of one or more embodiments of this specification, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when..." or "when..." or "in response to determining."

[0162] It should be noted that the above examples are merely specific embodiments of the present invention. Obviously, the present invention is not limited to the above examples, and many similar variations are possible. All variations directly derived from or associating with the present invention by those skilled in the art are intended to fall within the scope of protection of the present invention.

Claims

1. A digital key pairing method, applied to a client, comprising: According to the unique identifier of the target vehicle terminal, the binding with the target vehicle terminal is completed; In response to an activation operation by a user, establishing a communication connection with the target vehicle terminal based on an initial physical address of the target vehicle terminal; Obtain the digital certificate and public key issued by the target vehicle terminal to obtain the digital key; Synchronize the public key and the digital certificate to the server, and obtain the reset physical address issued by the server; The reset physical address is sent to the target vehicle terminal, and based on the reset physical address, a communication connection is re-established with the target vehicle terminal to complete pairing of the digital key with the target vehicle terminal.

2. The method according to claim 1, completing the binding with the target vehicle terminal according to the unique identifier of the target vehicle terminal, specifically comprising: Generate binding information based on the unique identifier of the target vehicle terminal and the unique identifier of the client; Initiate a binding request to the server and upload the binding information to the server; Obtain feedback information from the server after registering the binding information, and complete binding with the target vehicle terminal.

3. The method of claim 1, wherein: The target vehicle terminal establishes a communication connection with the client via Bluetooth.

4. The method according to claim 1, in response to the user's activation operation, establishing a communication connection with the target vehicle terminal based on the initial physical address of the target vehicle terminal, specifically comprising: In response to the communication connection request based on the initial physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

5. The method according to claim 1, based on the reset physical address, re-establishing a communication connection with the target vehicle terminal, specifically comprising: In response to the communication connection request based on the reset physical address broadcast by the target vehicle terminal, a communication connection is established with the target vehicle terminal.

6. A digital key pairing method, applied to a server, comprising: In response to a binding request from a client, storing the binding information uploaded by the client; The binding information is used to represent the binding relationship between the client and the target vehicle terminal; Obtaining the digital certificate and public key of the target vehicle terminal uploaded by the client; verifying the digital certificate based on the public key; After the verification is passed, a reset physical address is generated for the target vehicle terminal, and the reset physical address is sent to the client, so that the client sends the reset physical address to the target vehicle terminal, and re-establishes a communication connection with the target vehicle terminal based on the reset physical address; The public key, the digital certificate, the reset physical address and the binding information are stored in association with each other.

7. The method according to claim 6, in response to a binding request from a client, storing the binding information uploaded by the client, specifically comprising: Based on the obtained binding information, determining whether the target vehicle terminal already has a binding relationship; If there is no binding relationship with the target vehicle terminal, storing the binding information uploaded by the client; If a binding relationship exists with the target vehicle terminal, determine whether there is an activated digital key on the target vehicle terminal; if there is an activated digital key on the target vehicle terminal, reject the binding request of the client; if there is no activated digital key on the target vehicle terminal, overwrite the original binding information of the target vehicle terminal with the binding information uploaded by the client.

8. A digital key pairing method, applied to a target vehicle terminal, the method comprising: In response to an activation operation by the user, a communication connection is established with the client based on the initial physical address; Generate public key, private key, and issue digital certificate; storing the private key, and sending the public key and the digital certificate to the client, so that the client obtains a digital key based on the digital certificate; In response to obtaining the reset physical address sent by the client, a communication connection is re-established with the client based on the reset physical address, thereby completing pairing of the digital key with the target vehicle terminal.

9. The method according to claim 8, wherein the target vehicle terminal includes a key generation SDK; The target vehicle terminal generates the public key and the private key, and issues the digital certificate, specifically including: In response to successfully establishing a communication connection with the client, calling the key generation SDK to generate the public key and the private key; The digital certificate is issued using the public key.

10. The method according to claim 8, wherein the target vehicle terminal comprises a secure storage module having a secure storage environment; the secure storage module is used to store the private key.

11. A digital key pairing system, comprising a target vehicle terminal, a client terminal and a server terminal; wherein: The client is used to execute the method according to any one of claims 1 to 5, the server is used to execute the method according to any one of claims 6 to 7, and the target vehicle terminal is used to execute the method according to any one of claims 8 to 10.

12. An electronic device comprising: at least one memory for storing a program; At least one processor is used to execute the program stored in the memory, and when the program stored in the memory is executed, the processor is used to execute the method as described in any one of claims 1 to 5, or, execute the method as described in any one of claims 6 to 7, or, execute the method as described in any one of claims 8 to 10.

13. A computer-readable storage medium storing a computer program, wherein when the computer program is executed on an electronic device, the electronic device executes the method according to any one of claims 1 to 5, or the method according to any one of claims 6 to 7, or the method according to any one of claims 8 to 10.

14. A computer program product, characterized in that When the computer program product runs on an electronic device, the electronic device executes the method according to any one of claims 1 to 5, or the method according to any one of claims 6 to 7, or the method according to any one of claims 8 to 10.

Images