A vehicle unlocking method and device, vehicle and storage medium

Abstract

The present application relates to a kind of vehicle unlocking method, device, vehicle and storage medium, by responding to determine that first passage is damaged, first near field communication authentication data is forwarded to slave virtual identification unit based on second passage, and control slave virtual identification unit is forwarded first near field communication authentication data based on third passage to master virtual identification unit;Control slave virtual identification unit sends second near field communication authentication data to near field communication equipment based on second passage, to complete the first two-way authentication operation for master virtual identification unit and near field communication equipment;Response to the verification result of first two-way authentication operation meets preset condition, control master virtual identification unit and slave virtual identification unit are executed unlocking operation to vehicle, it is realized when commonly used virtual identification unit cannot work, also can be based on access communication to vehicle is unlocked, so as to improve the unlocking efficiency of access communication to vehicle.

Description

Technical Field

[0001] This invention relates to the field of automotive parts technology, specifically to a vehicle unlocking method, device, vehicle, and storage medium. Background Technology

[0002] Near Field Communication (NFC) is a short-range wireless communication technology that allows electronic devices to communicate within centimeters of each other. Like smart cards for electronic tickets in the past, NFC allows mobile payments to replace or support such systems.

[0003] CAN (Controller Area Network) and CAN FD (CAN Flexible Data-Rate) are both in-vehicle communication protocols specifically designed for real-time applications, especially in automotive and industrial automation systems. They share similar characteristics but differ in their data transmission capabilities.

[0004] As the automotive industry rapidly develops towards electrification, intelligence, and connectivity, more and more electric vehicles are equipped with NFC keys. In practical applications, the NFC card reader and the authentication master module communicate via CAN / CANFD. If the CAN / CANFD communication of the authentication master module is abnormal, the user will be unable to swipe the card to enter the vehicle. If the user breaks a window to enter, it will cause certain property damage. Summary of the Invention

[0005] One objective of this invention is to provide a vehicle unlocking method to solve the problem that vehicles cannot be unlocked based on NFC when there is a communication anomaly between the NFC reader and the authentication master module in the prior art; a second objective is to provide a vehicle unlocking device; a third objective is to provide a vehicle; and a fourth objective is to provide a computer-readable storage medium.

[0006] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0007] A vehicle unlocking method, applied to a vehicle equipped with a near-field communication (NFC) unlocking system, the NFC unlocking system comprising a card reader module group, a master virtual identification unit, and a slave virtual identification unit, wherein the card reader module group is connected to the master virtual identification unit via a first path, the card reader module group is connected to the slave virtual identification unit via a second path, and the master virtual identification unit and the slave virtual identification unit are connected via a third path, comprising:

[0008] In response to determining that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second channel, and the slave virtual identification unit is controlled to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel;

[0009] In response to the virtual identification unit receiving second near-field communication authentication data for the master virtual identification unit based on the third channel, the virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the second channel, so as to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device;

[0010] In response to the verification result of the first two-way authentication operation meeting the preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle.

[0011] Furthermore, it also includes:

[0012] In response to the determination that the first and third paths are damaged, the first near-field communication authentication data is forwarded to the virtual identification unit based on the second path;

[0013] The virtual identification unit is controlled to send the third near-field communication authentication data for the virtual identification unit to the near-field communication device through the second path, so as to complete the second two-way authentication operation for the virtual identification unit and the near-field communication device.

[0014] In response to the verification result of the second two-way authentication operation meeting the preset conditions, the system controls the virtual identification unit to perform an unlocking operation on the vehicle.

[0015] Furthermore, it also includes:

[0016] In response to determining that the first path and the second path are normal, the first near-field communication authentication data is sent to the main virtual identification unit based on the first path;

[0017] The main virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the first two-way authentication operation for the main virtual identification unit and the near-field communication device;

[0018] In response to the verification result of the first two-way authentication operation meeting the preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle.

[0019] Furthermore, it also includes:

[0020] In response to determining that the main virtual identification unit has entered the learning card mode, and the card reading module group has detected the fourth near-field communication authentication data for the near-field communication device, the fourth near-field communication authentication data is forwarded to the main virtual identification unit based on the first channel.

[0021] The main virtual identification unit is controlled to send fifth near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the third two-way authentication operation between the main virtual identification unit and the near-field communication device in the learning card mode.

[0022] Furthermore, it also includes:

[0023] In response to the completion of the third two-way authentication operation, a first encryption rule is determined and a first key is generated;

[0024] A second key is generated using the first encryption rule, targeting the first key.

[0025] The main virtual identification unit is controlled to send the second key to the near-field communication device via the first channel, and the near-field communication device is configured to store the second key.

[0026] Furthermore, it also includes:

[0027] The master virtual identification unit is controlled to send the sixth near-field communication authentication data for the master virtual identification unit to the slave virtual identification unit based on the third channel, and the slave virtual identification unit is controlled to send the seventh near-field communication authentication data for the slave virtual identification unit to the master virtual identification unit based on the third channel, so as to complete the fourth two-way authentication operation between the master virtual identification unit and the slave virtual identification unit in the learning card mode;

[0028] In response to the completion of the fourth two-way authentication operation, a second encryption rule is determined;

[0029] A third key is generated using the second encryption rule against the first key;

[0030] The master virtual identification unit is controlled to send the third key to the slave virtual identification unit via the third channel. The slave virtual identification unit is configured to store the third key and send the storage result information of the third key to the master virtual identification unit via the third channel.

[0031] Furthermore, the fourth near-field communication authentication data and the fifth near-field communication authentication data have a derivation relationship, and the sixth near-field communication authentication data and the seventh near-field communication authentication data have a derivation relationship. The main virtual identification unit has a pre-recorded key, and the step of generating the first key includes:

[0032] The first key is generated using the pre-recorded key based on a derivation operation.

[0033] Furthermore, it also includes:

[0034] The second key is identified as the first near-field communication authentication data;

[0035] The first key is determined as the second near-field communication authentication data;

[0036] The third key is identified as the third near-field communication authentication data.

[0037] Furthermore, the vehicle is equipped with an electronic display control system, which also includes:

[0038] In response to the determination that the first or third path is damaged, fault information is generated;

[0039] The fault information is sent to the electronic display control system, which is configured to generate map information based on the fault information.

[0040] A vehicle unlocking device is applied to a vehicle equipped with a near-field communication unlocking system. The near-field communication unlocking system includes a card reader module group, a master virtual identification unit, and a slave virtual identification unit. The card reader module group is connected to the master virtual identification unit via a first path, and to the slave virtual identification unit via a second path. The master virtual identification unit and the slave virtual identification unit are connected via a third path.

[0041] The first near-field communication authentication data forwarding module is used to respond to the determination that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, forward the first near-field communication authentication data to the slave virtual identification unit based on the second channel, and control the slave virtual identification unit to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel.

[0042] The second near-field communication authentication data sending module is used to control the second near-field communication authentication data sent by the slave virtual identification unit to the near-field communication device based on the second channel in response to the slave virtual identification unit receiving the second near-field communication authentication data for the master virtual identification unit based on the third channel, so as to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device.

[0043] The unlocking operation execution module is used to control the main virtual identification unit and the slave virtual identification unit to perform an unlocking operation on the vehicle in response to the verification result of the first two-way authentication operation meeting the preset conditions.

[0044] A vehicle comprising:

[0045] One or more processors; and

[0046] One or more machine-readable media storing instructions thereon, which, when executed by the one or more processors, cause the vehicle to perform the method described above.

[0047] A computer-readable storage medium having instructions stored thereon that, when executed by one or more processors, cause the processors to perform the method described above.

[0048] The beneficial effects of this invention are:

[0049] In this embodiment of the invention, in response to determining that the first channel is damaged and the card reader module group detects first near-field communication authentication data for a near-field communication device, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second channel, and the slave virtual identification unit is controlled to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel; in response to the slave virtual identification unit receiving second near-field communication authentication data for the master virtual identification unit based on the third channel, the slave virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the second channel to complete a first bidirectional authentication operation for the master virtual identification unit and the near-field communication device; in response to the verification result of the first bidirectional authentication operation meeting preset conditions, the master virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle, thereby enabling the vehicle to be unlocked based on near-field communication even when the commonly used virtual identification unit is not working, thus improving the unlocking efficiency of near-field communication for vehicles. Attached Figure Description

[0050] Figure 1 This is a flowchart of the steps of a vehicle unlocking method provided in an embodiment of the present invention;

[0051] Figure 2 This is a schematic diagram of a near-field communication unlocking system provided in an embodiment of the present invention;

[0052] Figure 3 This is a timing diagram of a module for unlocking based on redundant links provided in an embodiment of the present invention;

[0053] Figure 4 This is another module timing diagram for unlocking based on redundant links provided in this embodiment of the invention;

[0054] Figure 5 This is another module timing diagram for unlocking based on redundant links provided in this embodiment of the invention;

[0055] Figure 6 This is a module timing diagram for binding based on redundant links provided in an embodiment of the present invention;

[0056] Figure 7 This is a schematic diagram of a binding and unlocking process provided in an embodiment of the present invention;

[0057] Figure 8 This is a schematic diagram of another near-field communication unlocking system provided in an embodiment of the present invention;

[0058] Figure 9 This is a structural block diagram of a vehicle unlocking device provided in an embodiment of the present invention. Detailed Implementation

[0059] The embodiments of the present invention will be described below with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for illustrating the present invention and not for limiting the scope of protection of the present invention.

[0060] It should be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of the present invention. Therefore, the drawings only show the components related to the present invention and are not drawn according to the actual number, shape and size of the components in the actual implementation. In the actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0061] Reference Figure 1 The diagram illustrates a flowchart of a vehicle unlocking method provided in an embodiment of the present invention, which may specifically include the following steps:

[0062] Step 101: In response to determining that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second channel, and the slave virtual identification unit is controlled to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel.

[0063] Step 102: In response to the virtual identification unit receiving second near-field communication authentication data for the master virtual identification unit based on the third channel, the virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the second channel to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device.

[0064] Step 103: In response to the verification result of the first two-way authentication operation meeting the preset conditions, control the main virtual identification unit and the slave virtual identification unit to perform an unlocking operation on the vehicle.

[0065] In a specific implementation, the embodiments of the present invention can be applied to vehicles, which can be equipped with a near-field communication unlocking system, i.e., an NFC system.

[0066] In practical applications, Near Field Communication (NFC) devices can include hardware NFC devices and software NFC devices. Hardware NFC devices include, but are not limited to, NFC cards, NFC keychains, NFC rings, and NFC stickers, etc. Software NFC devices can include NFC virtual modules in mobile terminal applications. When performing NFC unlocking, two-way authentication is required between the near field communication device and the virtual identification unit.

[0067] In the field of NFC technology, VIU is an abbreviation for Virtual Identification Unit. A VIU is a data structure stored in an NFC tag, used for functions such as storing key information and verifying key legitimacy.

[0068] VIU typically contains the following information:

[0069] Tag Identifier: Used to uniquely identify NFC tags;

[0070] Data Blocks: Used to store key information and other related data;

[0071] Access Control: Used to control access permissions to data in VIU.

[0072] VIU has the following advantages:

[0073] High security: VIU uses encryption technology to protect data, which can effectively prevent data from being stolen or tampered with.

[0074] Easy to use: Users can read data simply by bringing their NFC device close to the VIU, without any special operation.

[0075] Low cost: VIU has a low cost and is easy to promote and apply.

[0076] With the popularization of NFC technology, VIU will be used more and more widely in various fields.

[0077] The card reader module can be used to receive data sent by near-field communication devices and transmit it to the VIU.

[0078] In NFC two-way authentication, `ktemp` is a temporary key generated by the near-field communication device (NFC) and used to encrypt the challenge message sent to the virtual identification unit (VIN). The VIN can then use its secret key to decrypt the challenge message and generate a response message. The response message is encrypted using `ktemp` and sent back to the NFC. The NFC can then use `ktemp` to decrypt the response message to verify the authenticity of the VIN.

[0079] The purpose of ktemp is to prevent eavesdroppers from replaying old challenge messages. If a third party illegally captures a challenge message, they will be unable to decrypt it because the third-party device does not know the value of ktemp. Even if they knew the value of ktemp, they would be unable to generate a valid response message because they do not know the secret key of the virtual identification unit.

[0080] For example, the following is a more detailed explanation of the steps involved in using ktemp in NFC two-way authentication:

[0081] S1. The near-field communication device generates a random number (N1) and a temporary key (ktemp).

[0082] S2. The near-field communication device uses the public key of the virtual identification unit to encrypt a random number (N1) and sends the encrypted random number to the virtual identification unit.

[0083] S3. The virtual identification unit uses its private key to decrypt the encrypted random number (N1) to obtain the random number (N1).

[0084] S4. The virtual identification unit generates a random number (N2) and encrypts the random number (N2) using ktemp.

[0085] S5. The virtual identification unit sends the encrypted random number (N2) to the near-field communication device.

[0086] S6. The near-field communication device uses ktemp to decrypt the encrypted random number (N2) to obtain the random number (N2).

[0087] S7. Near Field Communication devices use random numbers (N1), random numbers (N2), and a secret key (SK) to generate Message Authentication Codes (MACs).

[0088] S8. The near-field communication device sends the MAC and random number (N2) to the virtual identification unit.

[0089] S9. The virtual identification unit generates a MAC using a random number (N1), a random number (N2), and a secret key (SK).

[0090] S10. The virtual identification unit compares the MAC it generates with the MAC received from the near-field communication device. If the MACs match, the virtual identification unit is real.

[0091] refer to Figure 2 , Figure 2 This is a schematic diagram of a near-field communication unlocking system provided in an embodiment of the present invention;

[0092] The near-field communication unlocking system of this invention may include a card reader module group, which may include multiple NFC card reader modules. The unlocking system may also include a master virtual identification unit VIU1 and a slave virtual identification unit VIU2. The card reader module group is connected to the master virtual identification unit through a first path, and to the slave virtual identification unit through a second path. The master virtual identification unit and the slave virtual identification unit are connected through a third path. For the sake of simplicity, in the following examples, VIU1 may refer to the master virtual identification unit, and VIU2 may refer to the slave virtual identification unit. An NFC card may also be used as an example of a near-field communication device. Of course, those skilled in the art may use other devices as near-field communication devices, and this invention does not limit such use.

[0093] In specific implementation, the main virtual identification unit VIU1 can be used as a common verification module for near-field communication devices based on the first path. That is, when the first path is normal, the near-field communication device can directly perform two-way authentication with the main virtual identification unit VIU1 to realize the result operation of the vehicle. The judgment on whether the first path is damaged can be realized by listening to the heartbeat signal of the main virtual identification unit VIU1.

[0094] In a specific implementation, when the first path is determined to be damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, the embodiments of the present invention can forward the first near-field communication authentication data to the slave virtual identification unit based on the second path, and can also control the slave virtual identification unit to forward the first near-field communication authentication data to the master virtual identification unit based on the third path; in response to the slave virtual identification unit receiving the second near-field communication authentication data for the master virtual identification unit based on the third path, the slave virtual identification unit can be controlled to send the second near-field communication authentication data to the near-field communication device based on the second path to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device; in response to the verification result of the first two-way authentication operation meeting the preset conditions, the master virtual identification unit and the slave virtual identification unit can be controlled to perform an unlocking operation on the vehicle.

[0095] refer to Figure 3 , Figure 3 This is a timing diagram of a module for unlocking based on redundant links provided in an embodiment of the present invention;

[0096] For example, the vehicle can be unlocked using NFC through the following process.

[0097] S1: In abnormal situations, if the first channel is damaged, after the NFC card is brought close to the NFC card reader module, the NFC card reader module sends a notification message to VIU2 through the second channel to indicate that the NFC card has been detected.

[0098] S2: When VIU2 detects an anomaly in channel 1, it forwards the routing data. That is, VIU2 sends the first near-field communication authentication data sent by the NFC card in channel 2 to VIU1 through the third channel. VIU2 then sends the second near-field communication authentication data sent by VIU1 in the third channel to the NFC card through the second channel. Finally, VIU1 and the NFC card complete the first two-way authentication operation and verify whether the data sent by the NFC card is in the whitelist. If it is in the whitelist, then S3 is executed.

[0099] S3: VIU1 calls the internal interface to unlock the left area of ​​the vehicle (left front door and left rear door), and calls the VIU2 unlocking interface through the third channel to unlock the right area (right front door and right rear door). After successful unlocking, VIU1 powers on the entire vehicle.

[0100] S4: After VIU2 unlocks, it sends a prompt alarm signal to the Electronic Display Control (EDC). Upon receiving the signal, the EDC will provide a prompt and guide the user to the nearest vehicle repair shop.

[0101] In this embodiment of the invention, in response to determining that the first channel is damaged and the card reader module group detects first near-field communication authentication data for a near-field communication device, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second channel, and the slave virtual identification unit is controlled to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel; in response to the slave virtual identification unit receiving second near-field communication authentication data for the master virtual identification unit based on the third channel, the slave virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the second channel to complete a first bidirectional authentication operation for the master virtual identification unit and the near-field communication device; in response to the verification result of the first bidirectional authentication operation meeting preset conditions, the master virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle, thereby enabling the vehicle to be unlocked based on near-field communication even when the commonly used virtual identification unit is not working, thus improving the unlocking efficiency of near-field communication for vehicles.

[0102] Based on the above embodiments, modified embodiments of the above embodiments are proposed. It should be noted that, in order to keep the description brief, only the differences from the above embodiments are described in the modified embodiments.

[0103] In an optional embodiment of the present invention, it further includes:

[0104] In response to the determination that the first and third paths are damaged, the first near-field communication authentication data is forwarded to the virtual identification unit based on the second path;

[0105] The virtual identification unit is controlled to send the third near-field communication authentication data for the virtual identification unit to the near-field communication device through the second path, so as to complete the second two-way authentication operation for the virtual identification unit and the near-field communication device.

[0106] In response to the verification result of the second two-way authentication operation meeting the preset conditions, the system controls the virtual identification unit to perform an unlocking operation on the vehicle.

[0107] In practical applications, if the first and third paths are damaged, it is impossible to achieve bidirectional authentication between the near-field communication device and the main virtual identification unit through the third path.

[0108] In a specific implementation, embodiments of the present invention may also respond to the determination that the first and third paths are damaged, by forwarding the first near-field communication authentication data to the virtual identification unit based on the second path, and controlling the virtual identification unit to send the third near-field communication authentication data for the virtual identification unit to the near-field communication device based on the second path, so as to complete the second two-way authentication operation for the virtual identification unit and the near-field communication device; in response to the verification result of the second two-way authentication operation meeting the preset conditions, controlling the virtual identification unit to perform an unlocking operation on the vehicle.

[0109] refer to Figure 4 , Figure 4 This is another module timing diagram for unlocking based on redundant links provided in this embodiment of the invention;

[0110] For example, vehicle unlocking can be achieved using NFC through the following process.

[0111] S1: In case of an abnormal situation, if the first and third channels are damaged, when the NFC card is brought close to the NFC card reader module, the NFC card reader module sends a notification message to VIU2 through the second channel to indicate that the NFC card has been detected.

[0112] S2: When VIU2 detects damage or abnormality in the first and third channels, it replaces VIU1 to perform the authentication process. Finally, VIU2 and the NFC card complete the second two-way authentication operation on the second channel and verify whether the data sent by the NFC card is in the whitelist. If it is in the whitelist, the next step is executed. It should be noted that in practical applications, except that the main body performing the authentication is changed from VIU1 to VIU2 and the second channel is used, the authentication process of the second two-way authentication operation can be exactly the same as that of the first two-way authentication operation.

[0113] S3: VIU2 calls the internal unlocking interface to unlock the right side of the vehicle. After successful unlocking, it sends a notification alarm signal to EDC. Upon receiving the signal, EDC will provide a notification and guide the user to the nearest vehicle repair shop.

[0114] In this embodiment of the invention, in response to the determination that the first and third paths are damaged, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second path; the slave virtual identification unit is controlled to send the third near-field communication authentication data for the slave virtual identification unit to the near-field communication device based on the second path, so as to complete the second bidirectional authentication operation for the slave virtual identification unit and the near-field communication device; in response to the verification result of the second bidirectional authentication operation meeting the preset conditions, the slave virtual identification unit is controlled to perform an unlocking operation on the vehicle, so as to realize that even if the first and third paths are abnormal at the same time, the vehicle can still be unlocked based on near-field communication, further improving the unlocking efficiency of near-field communication for vehicles.

[0115] In an optional embodiment of the present invention, it further includes:

[0116] In response to determining that the first path and the second path are normal, the first near-field communication authentication data is sent to the main virtual identification unit based on the first path;

[0117] The main virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the first two-way authentication operation for the main virtual identification unit and the near-field communication device;

[0118] In response to the verification result of the first two-way authentication operation meeting the preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle.

[0119] In practical applications, when both the first and second channels are normal, the main virtual identification unit can be used as the main detection unit to complete the two-way verification of NFC devices, thereby improving the verification speed.

[0120] In a specific implementation, the embodiments of the present invention may, in response to determining that the first and second paths are normal, send the first near-field communication authentication data to the main virtual identification unit based on the first path, and control the main virtual identification unit to send the second near-field communication authentication data to the near-field communication device based on the first path, so as to complete the first two-way authentication operation for the main virtual identification unit and the near-field communication device; in response to the verification result of the first two-way authentication operation meeting the preset conditions, control the main virtual identification unit and the slave virtual identification unit to perform an unlocking operation on the vehicle.

[0121] refer to Figure 5 , Figure 5 This is another module timing diagram for unlocking based on redundant links provided in this embodiment of the invention;

[0122] For example, the vehicle can be unlocked using NFC through the following process.

[0123] S1: Under normal circumstances, when an NFC card is brought close to the NFC card reader module, the NFC card reader module sends a notification message indicating that an NFC card has been detected to VIU1 through the first channel, and sends a notification message indicating that an NFC card has been detected to VIU2 through the second channel.

[0124] S2: VIU1 completes the first two-way authentication operation through the first channel and the NFC card, and verifies whether the data sent by the NFC card is in the whitelist; if it is in the whitelist, proceed to the next step;

[0125] S3: VIU1 calls the internal interface to unlock the left area and calls the VIU2 unlock interface through the third channel to unlock the right area. After successful unlocking, VIU1 powers on the vehicle.

[0126] In this embodiment of the invention, in response to determining that the first and second channels are normal, the first near-field communication authentication data is sent to the main virtual identification unit based on the first channel; the main virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the first channel to complete a first bidirectional authentication operation for the main virtual identification unit and the near-field communication device; in response to the verification result of the first bidirectional authentication operation meeting preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle, thereby realizing a standby main verification device for the NFC system and further improving the unlocking efficiency of near-field communication for vehicles.

[0127] In an optional embodiment of the present invention, it further includes:

[0128] In response to determining that the main virtual identification unit has entered the learning card mode, and the card reading module group has detected the fourth near-field communication authentication data for the near-field communication device, the fourth near-field communication authentication data is forwarded to the main virtual identification unit based on the first channel.

[0129] The main virtual identification unit is controlled to send fifth near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the third two-way authentication operation between the main virtual identification unit and the near-field communication device in the learning card mode.

[0130] In practice, the learning card mode can be a mode that binds the NFC device to the VIU. Before unlocking the vehicle, the NFC device needs to be bound to the NFC system in advance so that the virtual identification unit can authenticate the NFC device in the future.

[0131] In a specific implementation, the embodiments of the present invention can respond to the determination that the main virtual identification unit has entered the learning card mode and the card reading module group has detected the fourth near-field communication authentication data for the near-field communication device, and then forward the fourth near-field communication authentication data to the main virtual identification unit based on the first channel; control the main virtual identification unit to send the fifth near-field communication authentication data for the main virtual identification unit to the near-field communication device based on the first channel, so as to complete the third bidirectional authentication operation between the main virtual identification unit and the near-field communication device in the learning card mode.

[0132] In practical applications, Kroot is an open-source key management system that provides a simple way to generate and manage encryption keys. In Kroot, you can use command-line tools to generate keys. Here's an example of generating a key using the Kroot command-line tool: First, ensure you have Kroot installed. If not, you can find the installation guide in the official documentation. Then, open a command-line tool (e.g., terminal, command prompt, or PowerShell).

[0133] In computer science, derivation is a relationship between classes or objects based on inheritance. Inheritance is a programming language mechanism that allows one class to inherit the attributes and methods of another class. This means that a derived class can use all the functionality of the base class and can also add its own new functionality.

[0134] refer to Figure 6 and Figure 7 , Figure 6 This is a module timing diagram for binding based on redundant links provided in an embodiment of the present invention; Figure 7 This is a schematic diagram of a binding and unlocking process provided in an embodiment of the present invention;

[0135] For example, the main virtual identification unit can be bound to the near-field communication device in the following manner.

[0136] The fourth near-field authentication data can be the key Kroot4 pre-recorded in the NFC card under the aforementioned key management system, and the fifth near-field authentication data can be the key Kroot0 pre-recorded in VIU1 under the aforementioned key management system. There is an asymmetric derivation relationship between Kroot4 and Kroot0. When VIU1 enters learning mode and the NFC card is brought close to the NFC reader module, the NFC reader module sends a notification message indicating the detection of the NFC card to VIU1 through the first channel and to VIU2 through the second channel. VIU1 and the NFC card can also complete a third two-way authentication operation based on the first channel using the fourth and fifth near-field authentication data to achieve a two-way authentication process between VIU1 and the NFC card during the binding phase.

[0137] In an optional embodiment of the present invention, it further includes:

[0138] In response to the completion of the third two-way authentication operation, a first encryption rule is determined and a first key is generated;

[0139] A second key is generated using the first encryption rule, targeting the first key.

[0140] The main virtual identification unit is controlled to send the second key to the near-field communication device via the first channel, and the near-field communication device is configured to store the second key.

[0141] Optionally, the step of generating the first key includes:

[0142] The first key is generated using the pre-recorded key based on a derivation operation.

[0143] In a specific implementation, the first encryption rule can be presented in the form of a ktemp key. During the execution of the third two-way authentication operation, ktemp1 of the third two-way authentication operation can be confirmed as the first encryption rule.

[0144] In this embodiment of the invention, VIU1 can be pre-recorded with a pre-recorded key, which can be the key Kroot1 under the aforementioned key management system. For example, when the third two-way authentication operation is completed, VIU1 can also determine the first key through the asymmetric derivation relationship of key Kroot1 and generate key information for the first key; and generate a second key for the first key using the first encryption rule ktemp1, and send the second key, key information, vehicle information, etc., to the NFC card terminal through the first channel as a secure channel. Upon receiving the information, the NFC card terminal can store the second key, key information, vehicle information, etc.

[0145] Optionally, by determining the second key as the first near-field communication authentication data and the first key as the second near-field communication authentication data, a prerequisite can be created for the VIU1 and the NFC card to perform the first two-way authentication operation in the subsequent unlocking stage.

[0146] In this embodiment of the invention, in response to determining that the main virtual identification unit has entered the learning card mode and that the card reader module group has detected fourth near-field communication authentication data for the near-field communication device, the main virtual identification unit forwards the fourth near-field communication authentication data to the main virtual identification unit via the first channel; the main virtual identification unit is then controlled to send fifth near-field communication authentication data for itself to the near-field communication device via the first channel, thereby completing the third two-way authentication operation between the main virtual identification unit and the near-field communication device in the learning card mode. In response to completing the third two-way authentication operation, a first encryption rule is determined and a first key is generated; a second key for the first key is generated using the first encryption rule; the main virtual identification unit is then controlled to send the second key to the near-field communication device via the first channel, and the near-field communication device is configured to store the second key. By using the second key as the first near-field communication authentication data and the first key as the second near-field communication authentication data, the legitimacy of the near-field communication device is verified. At the same time, it also ensures that the key is not deciphered by a third party during the key transmission between VIU1 and the near-field communication device, thus ensuring the security of the subsequent first two-way authentication and further improving the security and binding efficiency of the NFC system.

[0147] In an optional embodiment of the present invention, the master virtual identification unit is controlled to send a sixth near-field communication authentication data for the master virtual identification unit to the slave virtual identification unit based on the third channel, and the slave virtual identification unit is controlled to send a seventh near-field communication authentication data for the slave virtual identification unit to the master virtual identification unit based on the third channel, so as to complete the fourth bidirectional authentication operation between the master virtual identification unit and the slave virtual identification unit in the learning card mode;

[0148] In response to the completion of the fourth two-way authentication operation, a second encryption rule is determined;

[0149] A third key is generated using the second encryption rule against the first key;

[0150] The master virtual identification unit is controlled to send the third key to the slave virtual identification unit via the third channel. The slave virtual identification unit is configured to store the third key and send the storage result information of the third key to the master virtual identification unit via the third channel.

[0151] In a specific implementation, the sixth near-field authentication data in this embodiment of the invention can be the key Kroot2 pre-recorded in VIU1 under the aforementioned key management system, and the seventh near-field authentication data can be the key Kroot3 pre-recorded in VIU2 under the aforementioned key management system. There is an asymmetric derivation relationship between Kroot2 and Kroot3. VIU1 and VIU2 can also complete the fourth bidirectional authentication operation based on the third path using the sixth and seventh near-field authentication data to realize the bidirectional authentication process between VIU1 and VIU2 during the binding phase. The second encryption rule can be presented in the form of a ktemp key. During the execution of the fourth bidirectional authentication operation, ktemp2 of the fourth bidirectional authentication operation can be confirmed as the second encryption rule. As can be seen from the above, VIU1 can also determine the first key through the asymmetric derivation relationship of the key Kroot1 and generate key information for the first key; and use the second encryption rule ktemp2 to generate a third key for the first key. After completing the fourth bidirectional authentication operation, VIU1 sends the key information to VIU2 for storage by using the third path as a secure path. After storage, VIU2 returns the storage result to VIU1.

[0152] Optionally, the third key can also be determined as the third near-field communication authentication data to create a prerequisite for the VIU2 and NFC card to perform a second two-way authentication operation in the subsequent unlocking phase.

[0153] In this embodiment of the invention, by controlling the main virtual identification unit to send sixth near-field communication authentication data for the main virtual identification unit to the slave virtual identification unit via the third channel, and controlling the slave virtual identification unit to send seventh near-field communication authentication data for the slave virtual identification unit to the main virtual identification unit via the third channel, the fourth two-way authentication operation between the main virtual identification unit and the slave virtual identification unit in learning card mode is completed. In response to the completion of the fourth two-way authentication operation, a second encryption rule is determined; a third key for the first key is generated using the second encryption rule; the main virtual identification unit is controlled to send the third key to the slave virtual identification unit via the third channel, the slave virtual identification unit is configured to store the third key, and sends the storage result information for the third key to the main virtual identification unit via the third channel, thus determining the third key as the third near-field communication authentication data. This achieves the following: during the binding phase, VIU2 is determined to be a legitimate device. At the same time, it also ensures that the key transmission between VIU1 and VIU2 is prevented from being deciphered by a third party, ensuring the security of the subsequent second two-way authentication, and further improving the security and binding efficiency of the NFC system.

[0154] In an optional embodiment of the present invention, the vehicle is equipped with an electronic display control system, which further includes:

[0155] In response to the determination that the first or third path is damaged, fault information is generated;

[0156] The fault information is sent to the electronic display control system, which is configured to generate map information based on the fault information.

[0157] refer to Figure 8 , Figure 8 This is a schematic diagram of a near-field communication unlocking system provided in an embodiment of the present invention;

[0158] In practical implementation, the full name of the central control unit (EDC) is "Electronic Display Control" or "Electronic Display Center." It is a system that manages the information and control displays on the vehicle's touchscreen or other displays.

[0159] For example, the NFC card stores the corresponding vehicle key information and connects wirelessly to the NFC module; multiple NFC card reader modules are responsible for detecting the NFC card and transmitting data between the NFC card and the VIU. VIU1 and VIU2 are responsible for storing key information, verifying key validity, and driving related control units. There are two communication links between them, one of which is connected to the NFC card reader module; EDC is responsible for guiding the user and providing prompts. The NFC card has Kroot4 pre-installed, VIU1 has Kroot0, Kroot1, and Kroot2 pre-installed, and VIU2 has Kroot3 pre-installed.

[0160] During the card learning phase, Kroot2 derives the key K2 for each card. The third two-way authentication operation is performed through Kroot0 and Kroot4 to generate a temporary key Ktemp1, which is then encrypted and sent to the NFC card. The fourth two-way authentication operation is performed through Kroot2 and Kroot3 to generate a temporary key Ktemp2, which is then encrypted and sent to VIU2.

[0161] During normal use, NFC cards VIU1 are used to perform a first two-way authentication operation via one of the communication links using K2 to generate a temporary key Ktemp3 and complete unlocking and power-on. During abnormal situations, NFC cards VIU1 are used to perform a first two-way authentication operation via redundant communication links using K2 to generate a temporary key Ktemp3 and complete unlocking and power-on, and the EDC will indicate that the first channel is damaged and generate map information to the repair center. During abnormal situations, NFC cards VIU2 are used to perform a second two-way authentication operation via redundant communication links using K2 to generate a temporary key Ktemp4 and complete unlocking, and the EDC will indicate that the first and third channels are damaged and generate map information to the repair center.

[0162] Reference Figure 9 The diagram shows a structural block diagram of a vehicle unlocking device provided in an embodiment of the present invention, which may specifically include the following modules:

[0163] The first near-field communication authentication data forwarding module 901 is used to respond to the determination that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, forward the first near-field communication authentication data to the slave virtual identification unit based on the second channel, and control the slave virtual identification unit to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel.

[0164] The second near-field communication authentication data sending module 902 is used to control the second near-field communication authentication data sent by the slave virtual identification unit to the near-field communication device based on the second channel in response to the slave virtual identification unit receiving the second near-field communication authentication data for the master virtual identification unit based on the third channel, so as to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device.

[0165] The unlocking operation execution module 903 is used to control the main virtual identification unit and the slave virtual identification unit to perform an unlocking operation on the vehicle in response to the verification result of the first two-way authentication operation meeting the preset conditions.

[0166] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0167] This invention also discloses a vehicle, comprising:

[0168] One or more processors; and

[0169] One or more machine-readable media storing instructions thereon, which, when executed by the one or more processors, cause the vehicle to perform the method described above.

[0170] This invention also discloses a computer-readable storage medium storing instructions that, when executed by one or more processors, cause the processors to perform the method described above.

[0171] The above embodiments are merely preferred embodiments provided to fully illustrate the present invention, and the scope of protection of the present invention is not limited thereto. Equivalent substitutions or modifications made by those skilled in the art based on the present invention are all within the scope of protection of the present invention.

Claims

1. A vehicle unlocking method, characterized in that, The method is applied to a vehicle equipped with a near-field communication unlocking system. The near-field communication unlocking system includes a card reader module group, a master virtual identification unit, and a slave virtual identification unit. The card reader module group is connected to the master virtual identification unit via a first path, and to the slave virtual identification unit via a second path. The master virtual identification unit and the slave virtual identification unit are connected via a third path. In response to determining that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, the first near-field communication authentication data is forwarded to the slave virtual identification unit based on the second channel, and the slave virtual identification unit is controlled to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel; In response to the virtual identification unit receiving second near-field communication authentication data for the master virtual identification unit based on the third channel, the virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the second channel to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device; In response to the verification result of the first two-way authentication operation meeting the preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle.

2. The method according to claim 1, characterized in that, Also includes: In response to the determination that the first and third paths are damaged, the first near-field communication authentication data is forwarded to the virtual identification unit based on the second path; The virtual identification unit is controlled to send the third near-field communication authentication data for the virtual identification unit to the near-field communication device through the second path, so as to complete the second two-way authentication operation for the virtual identification unit and the near-field communication device. In response to the verification result of the second two-way authentication operation meeting the preset conditions, the system controls the virtual identification unit to perform an unlocking operation on the vehicle.

3. The method according to claim 2, characterized in that, Also includes: In response to determining that the first path and the second path are normal, the first near-field communication authentication data is sent to the main virtual identification unit based on the first path; The main virtual identification unit is controlled to send the second near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the first two-way authentication operation for the main virtual identification unit and the near-field communication device; In response to the verification result of the first two-way authentication operation meeting the preset conditions, the main virtual identification unit and the slave virtual identification unit are controlled to perform an unlocking operation on the vehicle.

4. The method according to claim 3, characterized in that, Also includes: In response to determining that the main virtual identification unit has entered the learning card mode, and the card reading module group has detected the fourth near-field communication authentication data for the near-field communication device, the fourth near-field communication authentication data is forwarded to the main virtual identification unit based on the first channel. The main virtual identification unit is controlled to send fifth near-field communication authentication data to the near-field communication device based on the first channel, so as to complete the third two-way authentication operation between the main virtual identification unit and the near-field communication device in the learning card mode.

5. The method according to claim 4, characterized in that, Also includes: In response to the completion of the third two-way authentication operation, a first encryption rule is determined and a first key is generated; A second key is generated using the first encryption rule, targeting the first key. The main virtual identification unit is controlled to send the second key to the near-field communication device via the first channel, and the near-field communication device is configured to store the second key.

6. The method according to claim 5, characterized in that, Also includes: The master virtual identification unit is controlled to send the sixth near-field communication authentication data for the master virtual identification unit to the slave virtual identification unit based on the third channel, and the slave virtual identification unit is controlled to send the seventh near-field communication authentication data for the slave virtual identification unit to the master virtual identification unit based on the third channel, so as to complete the fourth two-way authentication operation between the master virtual identification unit and the slave virtual identification unit in the learning card mode; In response to the completion of the fourth two-way authentication operation, a second encryption rule is determined; A third key is generated using the second encryption rule against the first key; The master virtual identification unit is controlled to send the third key to the slave virtual identification unit via the third channel. The slave virtual identification unit is configured to store the third key and send the storage result information of the third key to the master virtual identification unit via the third channel.

7. The method according to claim 6, characterized in that, The fourth near-field communication authentication data and the fifth near-field communication authentication data have a derivation relationship, the sixth near-field communication authentication data and the seventh near-field communication authentication data have a derivation relationship, the main virtual identification unit has a pre-recorded key, and the step of generating the first key includes: The first key is generated using the pre-recorded key based on a derivation operation.

8. The method according to claim 7, characterized in that, Also includes: The second key is identified as the first near-field communication authentication data; The first key is determined as the second near-field communication authentication data; The third key is identified as the third near-field communication authentication data.

9. The method according to claim 1, characterized in that, The vehicle is equipped with an electronic display control system, and also includes: In response to the determination that the first or third path is damaged, fault information is generated; The fault information is sent to the electronic display control system, which is configured to generate map information based on the fault information.

10. A vehicle unlocking device, characterized in that, The device is applied to a vehicle equipped with a near-field communication unlocking system. The near-field communication unlocking system includes a card reader module group, a master virtual identification unit, and a slave virtual identification unit. The card reader module group is connected to the master virtual identification unit via a first path, and to the slave virtual identification unit via a second path. The master virtual identification unit and the slave virtual identification unit are connected via a third path. The first near-field communication authentication data forwarding module is used to respond to the determination that the first channel is damaged and the card reader module group detects the first near-field communication authentication data for the near-field communication device, forward the first near-field communication authentication data to the slave virtual identification unit based on the second channel, and control the slave virtual identification unit to forward the first near-field communication authentication data to the master virtual identification unit based on the third channel. The second near-field communication authentication data sending module is used to control the second near-field communication authentication data sent by the slave virtual identification unit to the near-field communication device based on the second channel in response to the slave virtual identification unit receiving the second near-field communication authentication data for the master virtual identification unit based on the third channel, so as to complete the first two-way authentication operation for the master virtual identification unit and the near-field communication device. The unlocking operation execution module is used to control the main virtual identification unit and the slave virtual identification unit to perform an unlocking operation on the vehicle in response to the verification result of the first two-way authentication operation meeting the preset conditions.

11. A vehicle, characterized in that, include: One or more processors; and One or more machine-readable media having instructions stored thereon, which, when executed by the one or more processors, cause the vehicle to perform the method as described in any one of claims 1-9.

12. A computer-readable storage medium, characterized in that, It stores instructions that, when executed by one or more processors, cause the processors to perform the method as described in any one of claims 1-9.

Images