Method and system for online management of digital keys generated in offline environments

Abstract

The application provides a method and system for online management of a digital key generated in an offline environment, comprising the following steps: S1: in the case of off-line vehicle machine, write key data into a card, and generate a vehicle machine off-line card key instruction by a cloud server; S2: in the case of on-line vehicle machine, obtain the cloud server instruction, and report the vehicle machine off-line card key to the cloud server; S3: the cloud server adds the key to a white list, and generates an instruction for clearing the off-line card key; and S4: after receiving the clearing instruction, the vehicle machine clears the key generated by the off-line card. The application can make a card key in the case of no network, and automatically upload data in the case of network, and manage the life cycle of the key.

Description

Technical Field

[0001] This invention relates to the field of vehicle unlocking technology, and more specifically, to a method and system for online management of digital keys generated in an offline environment. Background Technology

[0002] Car digital keys allow consumers to use smart devices such as mobile phones and watches as digital keys to interact securely with their cars, enabling them to perform various functions such as opening and closing doors, unlocking the engine, turning on headlights, and sharing keys. This ensures vehicle security while providing consumers with a more convenient experience.

[0003] The premise of card and vehicle authentication is that the vehicle records certain information from the card during the card production process, and this information is used to verify the card's legitimacy during the authentication process. Simultaneously, to allow users to easily cancel their digital keys, this information needs to be stored on a cloud server. When a user cancels, the cloud server notifies the vehicle to delete the corresponding information.

[0004] Current technologies typically connect to the internet during card production, with data directly uploaded to a cloud server. The vehicle's infotainment system remains continuously connected. After successful card key production, the card production data is directly distributed from the server for key lifecycle management. The drawback is that the vehicle's infotainment system requires constant internet access. Some existing technologies do not upload card production data to the cloud server after card production. In this case, the card production data cannot be managed, and the card cannot be cancelled if lost.

[0005] Patent document CN113965328A (application number: CN202111228125.6) discloses a method and system for transferring permissions of a digital key in an offline situation under a trusted execution environment, including: Step S1: Importing a cloud-based root key and vehicle identification number (VIN) during the vehicle production line stage, binding the VIN with the SE ID, injecting a root certificate into the SE, and generating a vehicle-side root key; Step S2: Generating and exporting a vehicle-side digital key based on the vehicle-side root key; Step S3: Generating a mobile phone-side digital key and authenticating it with the vehicle-side digital key; Step S4: Using the features of a trusted execution environment and a trusted clock, transferring permissions of the digital key in an offline situation based on the generated vehicle-side root key and the vehicle-side digital key. However, this invention does not allow for the production of card keys without a network connection, and it does not automatically upload data when a network connection is available. Summary of the Invention

[0006] To address the shortcomings of existing technologies, the purpose of this invention is to provide a method and system for online management of digital keys generated in an offline environment.

[0007] A method for online management of digital keys generated in an offline environment according to the present invention includes:

[0008] Step S1: When the vehicle's infotainment system is offline, write the key data to the card;

[0009] Step S2: The cloud server generates an instruction to obtain the offline card-making key at preset intervals, or the vehicle-mounted system actively reports the offline card-making key to the cloud server after connecting to the network.

[0010] Step S3: The cloud server adds this key to the whitelist and generates an instruction to clear the offline card-making key;

[0011] Step S4: After receiving the clearing command, the vehicle system clears the key generated by the offline card issuance.

[0012] Preferably, in step S1:

[0013] Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. The system then returns a message indicating successful card production and exits the card production mode.

[0014] Preferably, in step S3:

[0015] The cloud server generates a command to read the offline card list. After the vehicle terminal receives the command, it returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

[0016] Preferably, in step S4:

[0017] The cloud server generates a command to clear the offline card production whitelist. After receiving the command, the vehicle terminal deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

[0018] Preferably, after the cloud server obtains the uploaded card information, it displays the card information through a service call or on a web platform; and the user can cancel the card through the cloud server. When canceling the card, the cloud server deletes the card's key information, generates a new whitelist, and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

[0019] Preferably, in order to ensure the security of the vehicle terminal when it is offline for a long time, the vehicle terminal can record the card issuance time when the card is issued offline. Cards that have not been uploaded within a preset time period cannot continue to be used and must be uploaded and transferred to the whitelist managed by the server before they can continue to be used.

[0020] Preferably, when a vehicle issues cards offline, the vehicle terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

[0021] A system for online management of digital keys generated in an offline environment, according to the present invention, includes:

[0022] Module M1: When the vehicle's infotainment system is offline, write key data to the card;

[0023] Module M2: The cloud server generates an instruction to obtain the offline card-making key at preset intervals, or the vehicle system actively reports the offline card-making key to the cloud server after connecting to the network;

[0024] Module M3: The cloud server adds this key to the whitelist and generates a command to clear the offline card-making key;

[0025] Module M4: After receiving the clearing command, the vehicle's infotainment system clears the key generated by offline card issuance.

[0026] Preferably, in module M1:

[0027] Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. The system then returns a message indicating successful card production and exits the card production mode.

[0028] Preferably, in module M3:

[0029] The cloud server generates a command to read the offline card list. After the vehicle terminal receives the command, it returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

[0030] Preferably, in module M4:

[0031] The cloud server generates a command to clear the offline card production whitelist. After receiving the command, the vehicle terminal deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

[0032] Preferably, after the cloud server obtains the uploaded card information, it displays the card information through service calls or on a web platform; and the user can cancel the card through the cloud server. When canceling the card, the cloud server deletes the card key information, generates a new whitelist and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

[0033] Preferably, in order to ensure the security of the vehicle terminal when it is offline for a long time, the vehicle terminal can record the card issuance time when the card is issued offline. Cards that have not been uploaded within a preset time period cannot continue to be used and must be uploaded and transferred to the whitelist managed by the server before they can continue to be used.

[0034] Preferably, when a vehicle issues cards offline, the vehicle terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

[0035] Compared with the prior art, the present invention has the following beneficial effects:

[0036] This invention can create card keys even without a network connection, and automatically uploads data and manages the lifecycle of the keys when a network connection is available. Attached Figure Description

[0037] Other features, objects, and advantages of the present invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings:

[0038] Figure 1 This is a flowchart of the offline card production process.

[0039] Figure 2 For uploading flowcharts online. Detailed Implementation

[0040] The present invention will now be described in detail with reference to specific embodiments. These embodiments will help those skilled in the art to further understand the present invention, but do not limit the invention in any way. It should be noted that those skilled in the art can make several changes and improvements without departing from the concept of the present invention. These all fall within the protection scope of the present invention.

[0041] Example 1:

[0042] This invention generates a card key from the vehicle's infotainment system when there is no network connection, and automatically uploads the data to a cloud server when there is a network connection, thus completing the lifecycle management of the card key by the cloud server.

[0043] This invention aims to solve the problem of writing key data to a card when a vehicle is offline and then automatically managing the key when a network connection is established. When the vehicle's infotainment system is offline, key data is written to a card, and the system manages a separate whitelist of offline card issuances; the card can control the vehicle. When the system connects to the network, the key data is reported, and the key's lifecycle is managed by a cloud server.

[0044] This invention includes the following inventive points:

[0045] 1. Create card keys without internet access.

[0046] 2. When there is a network connection, the vehicle's infotainment system will automatically upload the data, enabling the cloud server to manage the key's lifecycle.

[0047] 3. Supports card cancellation.

[0048] 4. Once the card key is successfully created, it cannot be used if it is not uploaded to the cloud server within a certain period of time.

[0049] According to the present invention, a method for online management of digital keys generated in an offline environment is provided, such as... Figures 1-2 As shown, it includes:

[0050] Step S1: When the vehicle system is offline, write the key data into the card, and the cloud server generates an instruction to obtain the offline card key from the vehicle system;

[0051] Specifically, in step S1:

[0052] Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. The system then returns a message indicating successful card production and exits the card production mode.

[0053] Step S2: When the vehicle is connected to the internet, obtain instructions from the cloud server and report the key generated offline by the vehicle to the cloud server;

[0054] Step S3: The cloud server adds this key to the whitelist and generates an instruction to clear the offline card-making key;

[0055] Specifically, in step S3:

[0056] The cloud server generates a command to read the offline card list. After receiving the command, the vehicle terminal returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

[0057] Step S4: After receiving the clearing command, the vehicle system clears the key generated by the offline card issuance.

[0058] Specifically, in step S4:

[0059] The cloud server generates a command to clear the offline card production whitelist. After receiving the command, the vehicle terminal deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

[0060] Specifically, after the cloud server obtains the uploaded card information, it displays the card information through service calls or on the web platform; and the user can cancel the card through the cloud server. When canceling the card, the cloud server deletes the card key information, generates a new whitelist and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

[0061] When a vehicle issues a card offline, the vehicle's terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

[0062] Example 2:

[0063] Example 2 is a preferred embodiment of Example 1, and is used to illustrate the present invention in more detail.

[0064] The present invention also provides a system for online management of digital keys generated in an offline environment. The system for online management of digital keys generated in an offline environment can be implemented by executing the process steps of the method for online management of digital keys generated in an offline environment. That is, those skilled in the art can understand the method for online management of digital keys generated in an offline environment as a preferred embodiment of the system for online management of digital keys generated in an offline environment.

[0065] A system for online management of digital keys generated in an offline environment, according to the present invention, includes:

[0066] Module M1: When the vehicle system is offline, write key data to the card, and the cloud server generates a command to obtain the offline card key from the vehicle system;

[0067] Specifically, in module M1:

[0068] Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. The system then returns a message indicating successful card production and exits the card production mode.

[0069] Module M2: When the vehicle is connected to the internet, it receives instructions from the cloud server and reports the key generated offline by the vehicle to the cloud server;

[0070] Module M3: The cloud server adds this key to the whitelist and generates a command to clear the offline card-making key;

[0071] Specifically, in module M3:

[0072] The cloud server generates a command to read the offline card list. After the vehicle terminal receives the command, it returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

[0073] Module M4: After receiving the clearing command, the vehicle's infotainment system clears the key generated by offline card issuance.

[0074] Specifically, in module M4:

[0075] The cloud server generates a command to clear the offline card production whitelist. After the vehicle terminal retrieves the command, it deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

[0076] Specifically, after the cloud server obtains the uploaded card information, it displays the card information through service calls or on the web platform; and the user can cancel the card through the cloud server. When canceling the card, the cloud server deletes the card key information, generates a new whitelist and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

[0077] When a vehicle issues a card offline, the vehicle's terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

[0078] Example 3:

[0079] Example 3 is a preferred example of Example 1, and is used to illustrate the present invention in more detail.

[0080] The system of this invention needs to include the following key implementations:

[0081] 1. In the absence of network connectivity, the vehicle's infotainment system interacts with the card to write key data to the card.

[0082] 2. The cloud server generates an offline card-making key instruction for the vehicle's infotainment system and waits for the vehicle to retrieve it.

[0083] 3. When there is a network connection, the vehicle's infotainment system can directly retrieve or forward instructions from the cloud server via the 4G network or via a mobile phone, and report the key for offline card issuance to the cloud server. The cloud server will then add this key to the whitelist and generate an instruction to clear the offline card issuance key.

[0084] 4. After receiving the clearing command, the vehicle's system clears the key generated by the offline card issuance.

[0085] 5. Supports card cancellation.

[0086] 6. Once the card key is successfully created, it cannot be used if it is not uploaded to the cloud server within a certain period of time.

[0087] Core methodology and workflow:

[0088] I. Offline Card Production

[0089] 1. Offline card production can be triggered by notifying the SE via the MCU to enter card production mode.

[0090] SE (Secure Element) is a security module, a microcomputer that uses a security chip and a chip operating system (COS) to achieve functions such as secure data storage and encryption / decryption operations.

[0091] 2. At this point, place the card, and the MCU will perform pass-through according to the normal interaction process, while the SE will control the card production to complete the process.

[0092] 3. SE returns that card production was successful and exits card production mode.

[0093] 4. The vehicle system manages a separate whitelist for offline card production. All offline-produced cards are placed in this whitelist and can be used until the online upload is completed.

[0094] II. Online Upload

[0095] 1. The cloud server generates a command to read the offline card list. After the vehicle's infotainment system receives this command, it returns the key information generated by the offline card production. The cloud server reads this key information, saves it to the database, and simultaneously generates a new whitelist managed by the cloud server, transferring the offline-produced cards to the whitelist managed by the cloud server.

[0096] 2. The cloud server generates a command to clear the offline card production whitelist. After the vehicle terminal retrieves the command, it deletes the locally saved offline card production whitelist.

[0097] To prevent a situation where a vehicle performs another offline card issuance between the time the cloud server reads the offline card issuance list and the time the cloud server sends the command to clear the offline card issuance whitelist, resulting in the data of one offline card not being read, the command to clear the offline card issuance whitelist must directly include the key information to be cleared. The vehicle's terminal will then compare and delete the key information one by one, and the offline card issuance whitelist cannot be cleared directly.

[0098] III. Online Management and Card Cancellation

[0099] After the cloud server obtains the uploaded card information, it can display the card information through service calls or on a web platform.

[0100] Users can also cancel the card via the cloud server. When cancelling the card, the cloud server deletes the card's key information and generates a new whitelist, which is then sent to the vehicle. Once the vehicle synchronizes the whitelist, the card becomes invalid.

[0101] IV. Prevention of Offline Card Abuse

[0102] To address the risk of unmanageable cards being left unattended due to someone secretly creating cards and preventing vehicles from uploading offline key cards, the vehicle terminal can record the card creation time when cards are created offline. Cards that have not been uploaded within a certain period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

[0103] Terminology Explanation:

[0104] Digital car key: A type of digital car key that controls vehicle functions such as opening and closing doors / starting the engine through smart devices such as mobile phones / cards.

[0105] Cloud server: Digital car key service, managing the lifecycle of car owners, authorizations, and card keys, as well as the relationship between people and vehicles.

[0106] Offline card production: The vehicle's infotainment system does not need to be connected to the internet when making card keys.

[0107] Online Management: After the card key is successfully created, it automatically uploads data when there is an internet connection, completing the lifecycle management of the card key.

[0108] Vehicle infotainment system: Equipped with network connectivity and cloud server communication capabilities, it can perform functions such as card key writing and authentication.

[0109] MCU: Microcontroller Unit (MCU), also known as a single-chip microcomputer or single-chip microcomputer.

[0110] Commands: Generated by the cloud server, only the vehicle's infotainment system and the cloud server can decrypt and read the command content. The generated commands are sent to the vehicle's infotainment system via mobile phone forwarding or direct 4G network. After executing the corresponding commands, the vehicle's infotainment system will report the response to the cloud server for synchronization processing.

[0111] Whitelist: A special type of instruction that stores information on all valid digital keys. The vehicle's infotainment system uses the information in the whitelist to determine whether a digital key is still valid.

[0112] Those skilled in the art will understand that, in addition to implementing the system, apparatus, and their modules provided by this invention in purely computer-readable program code, the same program can be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, the system, apparatus, and their modules provided by this invention can be considered a hardware component, and the modules included therein for implementing various programs can also be considered structures within the hardware component; alternatively, modules for implementing various functions can be considered both software programs implementing the method and structures within the hardware component.

[0113] Specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the specific embodiments described above, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Unless otherwise specified, the embodiments and features described in this application can be arbitrarily combined with each other.

Claims

1. A method for online management of digital keys generated in an offline environment, characterized in that, include: Step S1: When the vehicle's infotainment system is offline, write the key data to the card; Step S2: The cloud server generates an instruction to obtain the offline card-making key at preset intervals, or the vehicle-mounted system actively reports the offline card-making key to the cloud server after connecting to the network. Step S3: The cloud server adds this key to the whitelist and generates an instruction to clear the offline card-making key; Step S4: After receiving the clearing command, the vehicle's infotainment system clears the key generated during offline card issuance; In step S4: The cloud server generates a command to clear the offline card production whitelist. After receiving the command, the vehicle terminal deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

2. The method for online management of digital keys generated in an offline environment according to claim 1, characterized in that: In step S1: Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. Card production successful. Exit card production mode. In step S3: The cloud server generates a command to read the offline card list. After the vehicle terminal receives the command, it returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

3. The method for online management of digital keys generated in an offline environment according to claim 1, characterized in that: After the cloud server obtains the uploaded card information, it displays the card information through service calls or on a web platform. Users can also cancel the card through the cloud server. When canceling the card, the cloud server deletes the card key information, generates a new whitelist and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

4. The method for online management of digital keys generated in an offline environment according to claim 1, characterized in that: When a vehicle issues a card offline, the vehicle's terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

5. A system for online management of digital keys generated in an offline environment, characterized in that, include: Module M1: When the vehicle's infotainment system is offline, write key data to the card; Module M2: The cloud server generates an instruction to obtain the offline card-making key at preset intervals, or the vehicle system actively reports the offline card-making key to the cloud server after connecting to the network; Module M3: The cloud server adds this key to the whitelist and generates a command to clear the offline card-making key; Module M4: After receiving the clear command, the vehicle's infotainment system clears the key generated during offline card issuance; In module M4: The cloud server generates a command to clear the offline card production whitelist. After receiving the command, the vehicle terminal deletes the locally saved offline card production whitelist. The command to clear the offline card production whitelist must directly contain the key information to be cleared. The vehicle terminal compares and deletes them one by one. It cannot directly clear the offline card production whitelist.

6. The system for online management of digital keys generated in an offline environment according to claim 5, characterized in that: In module M1: Offline card production is triggered, and the microcontroller unit notifies the user to enter card production mode. When the card is placed, the microcontroller unit performs pass-through according to the normal interaction process and controls the card production to complete. Card production successful. Exit card production mode. In module M3: The cloud server generates a command to read the offline card list. After the vehicle terminal receives the command, it returns the key information generated by the offline card. The cloud server reads the key information, saves it to the database, and generates a new whitelist managed by the cloud server, transferring the offline cards to the whitelist managed by the cloud server.

7. The system for online management of digital keys generated in an offline environment according to claim 5, characterized in that: After the cloud server obtains the uploaded card information, it displays the card information through service calls or on a web platform. Users can also cancel the card through the cloud server. When canceling the card, the cloud server deletes the card key information, generates a new whitelist and sends it to the vehicle. After the vehicle synchronizes the whitelist, the card becomes invalid.

8. The system for online management of digital keys generated in an offline environment according to claim 5, characterized in that: When a vehicle issues a card offline, the vehicle's terminal records the card issuance time. Cards that have not been uploaded within a preset time period cannot be used and must be uploaded and transferred to the whitelist managed by the server before they can be used.

Images