Physical key activation method, electronic device and storage medium

Abstract

The embodiment of the present invention relates to the field of smart keys, and discloses a physical key activation method, electronic device and storage medium, the method comprising: sending an activation instruction to a target physical key that is successfully paired with a mobile terminal through a mobile terminal; in response to the activation instruction, the target physical key initiates a key download request to obtain a target key corresponding to the target physical key; after obtaining the target key, the target physical key is paired with a target vehicle, and the target vehicle writes the target physical key into the whitelist of the target vehicle; the target vehicle sends a control authority request to the target physical key, and the target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns it to the target vehicle at the same time, and the target physical key completes the activation. The above method can solve the problem that most existing vehicles are only equipped with mobile phone digital keys when leaving the factory, and some users are not used to using them and have a poor experience.

Description

Technical Field

[0001] The present invention relates to the field of intelligent keys, and in particular to a physical key activation method, electronic equipment and storage medium. Background Art

[0002] As digital keys gradually enter the popularization cycle, digital key configuration is extending from new energy vehicles to fuel vehicles, and from domestic brands to joint venture brands; and the experience upgrade brought by digital keys to users is becoming a standard configuration for new cars.

[0003] A digital key generally refers to a security tool that uses a numeric code or password to authorize access to a specific system or service. This key can take many forms, such as a PIN code, password, digital certificate, security token, or an electronic device used for systems such as mobile payment.

[0004] At present, cars are generally equipped with mobile phone digital keys. After logging into the car owner's account through the mobile phone to activate the digital key for the car, the car's switches can be controlled through the mobile phone. However, some users who are accustomed to using traditional physical keys are not used to using mobile phone digital keys, resulting in a poor experience. Summary of the invention

[0005] The purpose of the embodiments of the present invention is to provide a physical key activation method, an electronic device and a storage medium, which utilize a physical key to connect to a mobile terminal and a vehicle terminal, and through the coordinated confirmation of multiple terminals including the mobile terminal, the vehicle terminal, the physical key terminal and the digital key server, activate the physical key to control the car instead of the mobile phone digital key, thereby preventing users who are accustomed to using traditional physical keys from becoming unfamiliar with the use of mobile phone digital keys and having a poor experience.

[0006] To solve the above technical problems, an embodiment of the present invention provides a physical key activation method, including: a user sends an activation instruction to a target physical key that is successfully paired with the mobile terminal through a mobile terminal; in response to the activation instruction, the target physical key initiates a key download request to obtain a target key corresponding to the target physical key; after obtaining the target key, the target physical key is paired with a target vehicle, and the target vehicle writes the target physical key into the whitelist of the target vehicle; wherein the target vehicle is a vehicle pre-bound to the mobile terminal; the target vehicle sends a control authority request to the target physical key, and the target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns the authority data to the target vehicle, so that the target physical key completes the activation.

[0007] An embodiment of the present application further provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor;

[0008] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the physical key activation method as described above.

[0009] The embodiments of the present application further provide a computer-readable storage medium storing a computer program, wherein the computer program implements the physical key activation method as described above when executed by a processor.

[0010] In the embodiment of the present application, a mobile terminal is paired with a target physical key to be activated by Bluetooth, and an activation instruction is sent to the target physical key that is successfully paired with the mobile terminal through the mobile terminal; the target physical key is paired with the target vehicle after key verification, and the target vehicle writes the target physical key into its whitelist so that the target physical key can access and obtain the data of the target vehicle; the target vehicle sends a control authority request to the target physical key, and the target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns it to the target vehicle at the same time. After the target physical key obtains the authority data, the target physical key is activated. Since the activated physical key obtains the authority data corresponding to the control authority request, the target physical key can be used to control specific functions of the target vehicle. The specific function is a function corresponding to the control authority request and can be realized by the authority data. That is, by activating the physical key through this solution, the connection between the physical key and the vehicle end is established through the terminal, so that the activated physical key can replace the mobile phone digital key to realize the control of the relevant functions of the car, and prevent the problem that users who are accustomed to using traditional physical keys are not accustomed to using mobile phone digital keys and have a poor experience.

[0011] In some embodiments, before sending an activation instruction to the target physical key that has been successfully paired with the mobile terminal through the mobile terminal as described above, it also includes: the mobile terminal receives the Bluetooth broadcast of all physical keys within a preset range, and selects a physical key, the target physical key; the mobile terminal initiates an activation status query request for the digital key of the target vehicle to the digital key server; when the activation status is activated, the target physical key is connected to the mobile terminal through Bluetooth pairing.

[0012] In some embodiments, after sending an activation instruction to a target physical key that is successfully paired with the mobile terminal through a mobile terminal as described above, the target physical key detects its own power; if its own power is lower than a preset power value, the target physical key stops activating and returns an activation failure message to the mobile terminal.

[0013] In some embodiments, after sending an activation instruction to a target physical key that has been successfully paired with the mobile terminal through a mobile terminal as described above, the target physical key determines whether the activation instruction is received for the first time; wherein the activation instruction includes at least a user ID; if not, determining whether the activation instruction and the activation instruction received for the first time are from the same user; if not, the target physical key stops activating and returns an activation failure message to the mobile terminal.

[0014] In some embodiments, the target physical key as described above initiates a key download request to obtain the target key corresponding to the target physical key, including: the target physical key initiates the key download request to the mobile terminal, and the mobile terminal forwards the key download request to the digital key server; the key download request carries information of the target physical key; the digital key server parses the key download request to determine the target key corresponding to the target physical key, signs and encrypts the target key using the private key corresponding to the target physical key to obtain an encrypted key, and returns the encrypted key to the target physical key; the target physical key decrypts and verifies the encrypted key using the public key stored internally, and obtains the target key after the verification; wherein, the private key and the public key are a set of public-private key pairs generated in advance by the digital key server for the target physical key.

[0015] In some embodiments, signing the target key as described above includes: signing the target key using an elliptic curve digital signature algorithm.

[0016] In some embodiments, after the target physical key as described above is paired and connected with the target vehicle, it also includes: the target vehicle sends a version negotiation request to the target physical key; the target physical key returns the ICCE protocol version information supported by the target physical key to the target vehicle according to the version negotiation request; if the target vehicle supports the ICCE protocol corresponding to the ICCE protocol version information, the target vehicle writes the target physical key into the whitelist of the target vehicle; if the target vehicle does not support the ICCE protocol corresponding to the ICCE protocol version information, an activation failure message is returned to the mobile terminal.

[0017] In some embodiments, before the target vehicle as described above writes the target physical key into the whitelist of the target vehicle, it also includes: the target vehicle initiates an authentication request to the target physical key, requesting to negotiate a session key with the target physical key; the authentication request includes a vehicle-side random number generated by the target vehicle and the frame number of the target vehicle; the target physical key forwards the authentication request to the mobile terminal, the mobile terminal generates a first terminal random number, generates a terminal session key and sends it to the target vehicle; the target vehicle decrypts the terminal session key, compares the correctness of the vehicle-side random number, obtains a second terminal random number, generates a first verification value and a vehicle-side session key and sends them to the mobile terminal; the mobile terminal decrypts the vehicle-side session key, obtains the first verification value, generates a terminal hash value based on the first verification value, encrypts the terminal encrypted hash value, and sends it to the target vehicle; the target vehicle decrypts the terminal encrypted hash value, and uses the first verification value to generate a vehicle-side hash value, compares the terminal hash value with the vehicle-side hash value, and returns an authentication result based on the comparison result.

[0018] In some embodiments, the target vehicle as described above writes the target physical key into the whitelist of the target vehicle, including: the target vehicle initiates a whitelist request to the target physical key, the target physical key synchronizes the whitelist request to the mobile terminal, and the mobile terminal sends the whitelist request to the digital key server; the digital key server returns the signed whitelist data matching the whitelist request according to the whitelist request, and the mobile terminal forwards it to the target vehicle via the target physical key, the target vehicle verifies the signed whitelist data, and after successful verification, the target physical key is written into the whitelist of the target vehicle.

[0019] In some embodiments, the target physical key as described above obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns the authority data to the target vehicle, including: the target physical key synchronizes the control authority request to the mobile terminal, and the mobile terminal sends the control authority request to the digital key server; the digital key server returns the authority data matching the control authority request to the mobile terminal based on the control authority request, and the mobile terminal forwards it to the target physical key; the target physical key sends the authority data to the target vehicle, while caching the authority data and updating its own activation flag; wherein the authority data is the data required for the target physical key to control the target vehicle for a specific function corresponding to the control authority request.

[0020] In some embodiments, the method as described above also includes: the target physical key sends an activation success message to the mobile terminal as an activation result in response to the activation instruction; the mobile terminal reports the activation result to the digital key server, and the digital key server saves the activation status of the target physical key. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] One or more embodiments are exemplarily described by the pictures in the corresponding drawings, and these exemplary descriptions do not constitute limitations on the embodiments.

[0022] Figure 1 The specific process of the physical key activation method according to one embodiment of the present invention is as follows: Figure 1 ;

[0023] Figure 2 The specific process of the physical key activation method according to another embodiment of the present invention is Figure 2 ;

[0024] Figure 3 The specific process of the physical key activation method according to another embodiment of the present invention is Figure 3 ;

[0025] Figure 4 is a schematic structural diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0026] To make the purpose, technical scheme and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. However, it will be appreciated by those skilled in the art that in the embodiments of the present invention, many technical details are proposed in order to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can be implemented. The division of the following embodiments is for the convenience of description and should not constitute any limitation on the specific implementation of the present application. The various embodiments can be combined and referenced with each other without contradiction.

[0027] One implementation of the present application relates to a physical key activation method. It should be noted that the following content is only implementation details provided for ease of understanding and is not necessary for implementing this solution.

[0028] Before describing the implementation scheme of the present application in detail, the prerequisites required before executing this scheme are first described. Mobile phone digital key technology combines software and hardware technologies to allow mobile phones (mobile terminals) to have the functions of car keys. Car owners can control vehicles through their mobile phones to complete operations such as opening and closing doors. Therefore, before using the physical key activation method in this scheme to replace the mobile phone digital key with the target physical key, the car owner needs to have activated the mobile phone digital key. However, since different vehicle manufacturers may have different settings for the specific steps of activating mobile phone digital keys, this application does not make specific restrictions on this.

[0029] like Figure 1 As shown, the physical key activation method of the embodiment of the present invention specifically includes the following steps.

[0030] Step 101: A user sends an activation instruction to a target physical key that is successfully paired with the mobile terminal through a mobile terminal.

[0031] The mobile terminal is an electronic device with Bluetooth function and capable of installing applications, which may be a mobile phone, a tablet computer, etc., and this application does not impose specific restrictions on this. The target physical key in this application is a physical Bluetooth key, such as a small hard disk device with a built-in verification mechanism such as Keyfob.

[0032] Specifically, the mobile terminal that sends the activation instruction needs to have pre-installed a physical key management application developed by the manufacturer of the target physical key that is successfully paired with it. The application is used to manage the life cycle of the target physical key, including the creation, activation, use and cancellation of the target physical key; the target physical key is the physical key to be activated selected by the user. The user needs to log in to the physical key management application as the owner of the vehicle. The physical key management application may be provided with an "Activate" button. The user clicks the button to trigger the sending of an activation instruction to the target physical key that is successfully paired with the mobile terminal. It should be noted that the user in this solution is the owner of the target vehicle, and the mobile terminal is the mobile phone used by the owner. All actions performed by the mobile terminal in this solution are performed in the physical key management application installed on the mobile terminal, which will not be repeated below.

[0033] The timer starts when the user sends an activation command to the target physical key that has been successfully paired with the user through the mobile terminal. If the target physical key does not send a successful activation message within the specified time, the activation is deemed to have failed. The mobile terminal automatically ends the activation process and sends an "activation failed" message to the user. The specific specified time can be determined based on the actual communication status of the mobile terminal when the activation command is triggered, the network environment, and other factors, such as 30s, 45s, 60s, 90s, 120s, 150s, etc. This application does not impose specific restrictions on this.

[0034] Step 102: In response to the activation instruction, the target physical key initiates a key download request to obtain a target key corresponding to the target physical key.

[0035] Specifically, after the target physical key receives the activation instruction from the mobile terminal, the activation process will be started. First, the target physical key initiates a key download request to the mobile terminal to obtain the target key corresponding to the target physical key, and at the same time verify the legitimacy of the activation instruction of the mobile terminal. After the mobile terminal receives the key download request, it can request the digital key server to download the target key and return the target physical key. Only when the target physical key obtains the corresponding target key can the subsequent activation steps be performed.

[0036] Step 103: After obtaining the target key, the target physical key is paired with the target vehicle, and the target vehicle writes the target physical key into the white list of the target vehicle;

[0037] Among them, the target vehicle is a vehicle pre-bound to the mobile terminal.

[0038] Specifically, after the target physical key obtains the corresponding target key, the target physical key actively initiates pairing with the target vehicle. The pairing method can be performed using the Bluetooth justwork pairing method, which is not limited in this embodiment. It should be noted that the target vehicle is a vehicle pre-bound to the mobile terminal. If the user is the owner of multiple cars, the mobile terminal is bound to multiple cars. When the user logs in to the physical key management application as the owner, he needs to select a specific vehicle before entering the physical key activation step. For example, the user's mobile terminal is bound to both vehicle A and vehicle B. When the user chooses to log in to the physical key management application as the owner, he needs to first select whether to log in as the owner of vehicle A or the owner of vehicle B; if the user selects vehicle A, vehicle A is the target vehicle that is paired with the target physical key when the target physical key is subsequently activated. After the target physical key is paired with the target vehicle, the target vehicle will write the target physical key into the whitelist of the target vehicle, so that the target physical key can access the target vehicle.

[0039] Step 104: The target vehicle sends a control authority request to the target physical key. The target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns the authority data to the target vehicle, so that the target physical key is activated.

[0040] Specifically, in order to achieve the purpose of using the target physical key to control the functions of the target vehicle instead of the mobile phone digital key, in addition to enabling the target physical key to access the target vehicle, the target physical key must also have relevant data for controlling specific functions of the target vehicle. For this purpose, the target vehicle sends a control authority request to the target physical key. After receiving the control authority request, the target physical key forwards the control authority request to the digital key server (Digital KeyService, DKS). The digital key server returns the authority data corresponding to the control authority request to the target physical key. The target physical key receives and caches the authority data, and simultaneously sends the authority data to the target vehicle. The authority data is the relevant data that can realize the specific function corresponding to the control authority request. At this point, the target physical key can already control the target vehicle, which means that the target physical key has been activated.

[0041] Compared with the related art, this embodiment performs Bluetooth pairing between the mobile terminal and the target physical key to be activated, and sends an activation instruction to the target physical key that is successfully paired with the mobile terminal through the mobile terminal; the target physical key is paired with the target vehicle after key verification, and the target vehicle writes the target physical key into its whitelist so that the target physical key can access and obtain the data of the target vehicle; the target vehicle sends a control authority request to the target physical key, and the target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns it to the target vehicle at the same time. After the target physical key obtains the authority data, the target physical key completes the activation. Since the activated physical key obtains the authority data corresponding to the control authority request, the target physical key can realize specific function control of the target vehicle. The specific function is the function corresponding to the control authority request and can be realized by the authority data. That is, by activating the physical key through this solution, the connection between the physical key and the vehicle end is established through the terminal, so that the activated target physical key can replace the mobile phone digital key to realize the control of the relevant functions of the car, and prevent the problem that users who are accustomed to using traditional physical keys are not accustomed to using mobile phone digital keys and have a poor experience.

[0042] Another embodiment of the present invention relates to a physical key activation method. This embodiment is a supplement to the physical key activation method in the aforementioned embodiment, and the specific contents are as follows.

[0043] In an example, Figure 2 As shown, before step 101, the following steps are also included:

[0044] Step 201: The mobile terminal receives the Bluetooth broadcasts of all physical keys within a preset range, and selects one physical key as a target physical key.

[0045] Specifically, to pair with a mobile terminal via Bluetooth, the physical key needs to be within the connectable range of the vehicle and the mobile terminal and the connectable broadcast must be turned on. The mobile terminal can receive all broadcasts within the connectable range and display a connectable list, from which the user selects a physical key to be activated as the target physical key to be paired with the terminal.

[0046] Step 202: The mobile terminal initiates an activation status query request for the digital key of the target vehicle to the digital key server.

[0047] Specifically, the activation status of the target vehicle's digital key is saved in the digital key server (DKS). Only when the target vehicle's digital key (mobile phone digital key) is activated, can the target physical key subsequently replicate the relevant functions of the mobile phone digital key to achieve control of the target vehicle.

[0048] Step 203: When the activation state is activated, the target physical key is paired with the mobile terminal via Bluetooth.

[0049] Specifically, when it is queried that the activation status of the digital key of the target vehicle is activated, the target physical key can be paired with the mobile terminal through Bluetooth to perform subsequent target physical key activation steps; if it is queried that the activation status of the digital key of the target vehicle is not activated, the mobile terminal prompts the user that it cannot be paired with the target physical key to perform subsequent target physical key activation steps.

[0050] In one example, after step 101, the following steps are also included: the target physical key detects its own power; if the power of the target physical key is lower than a preset power value, the target physical key stops activating and returns an activation failure message to the mobile terminal.

[0051] Specifically, after the target physical key receives the activation command, it first detects whether its own power can meet the power consumption in normal working state. A preset power value can be set in advance for the target physical key to meet the power consumption in normal working state, and the power detected by the target physical key is compared with the preset power value. If it is lower than the preset power value, the target physical key stops activating and returns a message of activation failure to the mobile terminal. The preset power value can be set to any power value between 1% and 50%, such as 20%, 25%, 30%, 35%, etc. The specific value can be determined according to the actual power consumption of the target physical key in normal working state within the preset time, and this application does not impose specific restrictions on this.

[0052] In another example, after step 101, the following steps are also included: the target physical key determines whether it is the first time to receive the activation instruction; wherein the activation instruction at least includes the user ID;

[0053] If not, it is determined whether the activation instruction and the first received activation instruction are from the same user; if not, the target physical key stops activating and returns an activation failure message to the mobile terminal.

[0054] Specifically, if the target physical key can be successfully activated, it is necessary that the target physical key receives the activation instruction for the first time, or has been activated by the activation instruction sent by the same user and receives the activation instruction from the user again. Therefore, after receiving the activation instruction, the target physical key needs to determine whether it is the first time to receive the activation instruction. If so, execute the subsequent steps in response to the activation instruction; if the target physical key does not receive the activation instruction for the first time, determine whether the activation instruction received this time and the activation instruction received in the past are from the same user. It should be noted here that, since the activation instruction is issued, the user needs to log in to the physical key management application installed in the mobile terminal as the owner, and the physical key management application is triggered to send the activation instruction to the target physical key that is successfully paired with the mobile terminal. Therefore, when sending the activation instruction, the logged-in user ID can be carried in the activation instruction, and the target physical key can obtain the user information that issued the activation instruction. By comparing the user ID carried in the activation instruction received this time with the user information carried in the activation instruction received in the past, it can be determined whether it is from the same user. If it is determined that the activation instruction received this time and the activation instruction received in the past are from the same user, the subsequent steps in response to the activation instruction are executed; if the activation instruction received this time and the activation instruction received in the past are not from the same user, another user is not allowed to activate the target physical key again, and an activation failure prompt message can be sent to the mobile terminal at this time.

[0055] In other cases where the target physical key and the target vehicle can only be activated in a unique corresponding manner, the activation instruction must include the target vehicle's frame number in addition to the user ID. If the target physical key does not receive the activation instruction for the first time, it is necessary to determine whether the activation instruction received this time and the activation instruction received in the past are from the same user. If they are the same user, it is also necessary to determine whether the activation instruction received this time and the activation instruction received in the past are activations performed by the same user for the same vehicle. By verifying the user ID and the frame number, it can be ensured that a physical key is activated in a unique corresponding manner with a vehicle. In addition, considering different activation requirements, the activation instruction may include the unique code of the target physical key in addition to the user ID and the frame number of the target vehicle. This application does not limit the specific information contained in the activation instruction.

[0056] In an example, Figure 3 As shown, after the target physical key in step 102 initiates a key verification request to the mobile terminal, the following steps are also included:

[0057] Step 301: The target physical key initiates a key download request to the mobile terminal, and the mobile terminal forwards the key download request to the digital key server; the key download request carries identification information of the target physical key.

[0058] Specifically, when the mobile terminal receives a key download request of a target physical key, it forwards the key download request to a digital key server storing the target key of the target physical key. The digital server parses the request and obtains the unique identification information of the target physical key in the key download request, such as the user ID, etc., and determines the target key corresponding to the unique identification information according to the unique identification information of the target physical key.

[0059] Step 302: The digital key server parses the key download request to determine the target key corresponding to the target physical key, signs and encrypts the target key using the private key corresponding to the target physical key to obtain the encrypted key, and returns the encrypted key to the target physical key.

[0060] Specifically, before the physical key is activated, the digital key server will generate a set of public and private key pairs for each physical key in the cryptographic machine according to the ECC (Elliptic Curve Cryptography) P256 algorithm. The private key is stored in the digital key server, and the public key is preset in the corresponding physical key.

[0061] The key request sent by the target physical key to the mobile terminal may carry the unique identification information of the target physical key, and the mobile terminal forwards the key request to the digital key server. Similarly, the key stored in the digital key server may also have unique identification information that identifies the corresponding physical key, and the target key of the target physical key can be determined based on the parsed unique identification information. After determining the target key, since the private key of the target physical key is pre-stored in the digital key server, the target key can be signed and encrypted using the private key of the target physical key to obtain an encrypted key, and the encrypted key is returned to the target physical key. Specifically, the target key can be signed using the Elliptic Curve Digital Signature Algorith (ECDSA), and this application does not impose specific restrictions on this.

[0062] Step 303: The target physical key uses the public key stored internally to decrypt the encrypted key and verify the signature. After the signature verification is passed, the target key is obtained; wherein, the private key and the public key are a set of public-private key pairs generated in advance by the digital key server for the target physical key.

[0063] Specifically, after the target key corresponding to the key download request is returned to the target physical key after being signed and encrypted, the public key of the same public-private key pair as the private key used to encrypt the target key has been preset inside the target physical key. Therefore, the encrypted key is decrypted and the signature is verified using the public key stored inside the target physical key. If the decryption and signature verification are successful, it proves that the public key inside the target physical key and the private key used to encrypt the key are the same public-private key pair, and the target key can be successfully obtained.

[0064] In one example, after the target physical key in step 102 is paired and connected with the target vehicle, the following steps are also included: the target vehicle sends a version negotiation request to the target physical key; the target physical key returns the ICCE protocol version information supported by the target physical key to the target vehicle according to the version negotiation request; if the target vehicle supports the ICCE protocol corresponding to the ICCE protocol version information, the target vehicle writes the target physical key into the whitelist of the target vehicle; if the target vehicle does not support the ICCE protocol corresponding to the ICCE protocol version information, an activation failure message is returned to the mobile terminal.

[0065] Among them, ICCE (Intelligent Car Connectivity Industry Ecosystem Alliance) is an open platform jointly created by mainstream manufacturers in China's smart terminal and automobile fields. After several years of development, it has become the largest industry alliance in the domestic car connectivity industry.

[0066] Specifically, since ICCE has released different versions of the ICCE protocol since its inception, if the target physical key is to control the target vehicle, both need to support the same ICCE protocol. Therefore, the target vehicle can send a version negotiation request to the target physical key to learn the ICCE protocol version supported by the target physical key. After learning this information, the target vehicle determines whether it supports the ICCE protocol version supported by the target physical key. If supported, the target vehicle writes the target physical key to the target vehicle's whitelist, and the target physical key can subsequently communicate with the target vehicle; if not supported, an activation failure message is returned to the mobile terminal.

[0067] In addition, before the target vehicle writes the target physical key into the white list of the target vehicle, the present embodiment also includes the following steps: the target vehicle initiates an authentication request to the target physical key, requesting to negotiate a session key with the target physical key; the authentication request includes a vehicle-side random number generated by the target vehicle and a frame number of the target vehicle; the target physical key forwards the authentication request to the mobile terminal, the mobile terminal generates a first terminal random number, generates a terminal session key and sends it to the target vehicle; the target vehicle decrypts the terminal session key, compares the correctness of the vehicle-side random number, obtains a second terminal random number, generates a first verification value and a vehicle-side session key and sends them to the mobile terminal; the mobile terminal decrypts the vehicle-side session key, obtains a first verification value, generates a terminal hash value based on the first verification value, encrypts the terminal encrypted hash value, and sends it to the target vehicle; the target vehicle decrypts the terminal encrypted hash value, and uses the first verification value to generate a vehicle-side hash value, compares the terminal hash value with the vehicle-side hash value, and returns the authentication result based on the comparison result.

[0068] Specifically, the authentication occurs after the version negotiation is completed. The main process includes three parts: the first is the session material exchange process initiated by the target vehicle. After the exchange is completed, the mobile terminal and the target vehicle will each calculate their session key for this time; the second is the stage of confirming the correctness of the current session key negotiation, and at this stage, it will also be determined whether the current user's authority is legal. Third, after the authentication is completed, the target vehicle notifies the mobile terminal of the result of the authentication so that the mobile terminal can make corresponding notifications to the user. In other words, the authentication process between the target vehicle and the target physical key is to negotiate the session key and verify the legitimacy of the session key. In the above steps, the authentication request contains the vehicle-side random number generated by the target vehicle and the frame number of the target vehicle; the target physical key forwards the authentication request to the mobile terminal, the mobile terminal generates a first terminal random number, generates a terminal session key and sends it to the target vehicle; the target vehicle decrypts the terminal session key, compares the correctness of the vehicle-side random number, obtains the second terminal random number, generates a first verification value and a vehicle-side session key and sends them to the mobile terminal for the session material exchange process initiated by the target vehicle. Among them, the terminal session key includes the second key, the second terminal random number and the vehicle random number, and the second key is encrypted by the target key of the target physical key, the vehicle random number and the first terminal random number. The mobile terminal decrypts the vehicle session key to obtain the first verification value, and generates a terminal hash value based on the first verification value and encrypts it to obtain a terminal encrypted hash value, which is sent to the target vehicle; the target vehicle decrypts the terminal encrypted hash value, and uses the first verification value to generate a vehicle hash value at the same time, compares the terminal hash value with the vehicle hash value, and returns the authentication result according to the comparison result as the second and third stage process. Among them, the vehicle session key includes the first terminal random number, the second terminal random number and the first verification value. The mobile terminal calculates the vehicle hash value based on the vehicle random number and the first verification value, and the vehicle obtains the terminal hash value based on the vehicle random number and the first verification value.

[0069] In another example, the target vehicle in step 102 writes the target physical key into the white list of the target vehicle, which specifically includes the following steps:

[0070] The target vehicle initiates a whitelist request to the target physical key, the target physical key synchronizes the whitelist request to the mobile terminal, and the mobile terminal sends the whitelist request to the digital key server; the digital key server returns whitelist data that matches the whitelist request based on the whitelist request, and the mobile terminal forwards it to the target physical key, and the target physical key synchronizes the whitelist data to the target vehicle, so that the target vehicle writes the target physical key into the whitelist of the target vehicle.

[0071] Specifically, the target physical key forwards the whitelist request to the digital key server via the mobile terminal. The digital key server assembles and issues the whitelist information according to the whitelist request, and returns it to the target physical key via the mobile terminal. It should be noted that the issued whitelist information contains the information of the target vehicle, and the whitelist information can be signed on the digital key server before being issued. After the target vehicle receives the whitelist information issued by the digital key server, it verifies the signature of the whitelist information. If the signature verification is successful, the target physical key is successfully written into the whitelist of the target vehicle. If the signature verification fails, the process is terminated and a message of activation failure is returned.

[0072] In another example, the target physical key in step 103 obtains and caches the authority data corresponding to the control authority request from the digital key server, and returns the authority data to the target vehicle, including:

[0073] The target physical key synchronizes the control authority request to the mobile terminal, and the mobile terminal sends the control authority request to the digital key server; the digital key server returns the authority data matching the control authority request to the mobile terminal according to the control authority request, and the mobile terminal forwards it to the target physical key; while the target physical key sends the authority data to the target vehicle, it caches the authority data and updates its own activation flag;

[0074] The authority data is data required for the target physical key to control the target vehicle for a specific function corresponding to the control authority request.

[0075] Specifically, after the target vehicle writes the target physical key into the target vehicle's whitelist, the target vehicle sends a control permission request to the target physical key. The control permission request includes a personalized data request and a calibration data request, wherein the personalized data request is used to request permission to open a specific function, and the calibration data request is used to request specific data required to implement a specific function. Specific functions include: unlocking and locking the vehicle, opening and closing windows, air conditioning in the vehicle, approaching to unlock, leaving the vehicle to lock, etc. All functions that can be realized by the mobile phone digital key can be realized by the target physical key. This application does not make specific restrictions on the specific functions requested by the control permission request.

[0076] The digital key server returns the permission data matching the control permission request to the mobile terminal according to the control permission request. The permission data includes both the personalized data requested by the personalized data request and the calibration data requested by the calibration data request. After the target physical key caches the permission data and the target vehicle also receives the permission data, the target physical key can control the target vehicle according to the specific function corresponding to the control permission request, such as controlling the target vehicle to unlock, lock, open and close windows, air conditioner, approach to unlock, leave the vehicle, and at least one other function. While the target physical key caches the permission data, the target physical key updates its own activation identifier, which is the vehicle frame number (vin) of the target vehicle.

[0077] On this basis, the target physical key sends an activation success message to the mobile terminal as an activation result in response to the activation instruction; the mobile terminal reports the activation result to the digital key server, and the digital key server saves the activation status of the target physical key.

[0078] Another embodiment of the present invention relates to an electronic device, such as Figure 4 As shown, it includes at least one processor 402; and a memory 401 that is communicatively connected to the at least one processor 402; wherein the memory 401 stores instructions that can be executed by the at least one processor 402, and the instructions are executed by the at least one processor 402 so that the at least one processor 402 can execute any embodiment of the above-mentioned physical key activation method.

[0079] The memory 401 and the processor 402 are connected in a bus manner, and the bus may include any number of interconnected buses and bridges, and the bus connects various circuits of one or more processors 402 and the memory 401 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on a transmission medium. The data processed by the processor 402 is transmitted on a wireless medium via an antenna, and further, the antenna also receives data and transmits the data to the processor 402.

[0080] The processor 402 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. The memory 401 can be used to store data used by the processor 402 when performing operations. The electronic device in this embodiment can be a physical key, a mobile phone terminal, etc., and this application does not make specific limitations on this.

[0081] Another embodiment of the present invention relates to a computer-readable storage medium storing a computer program, which implements any of the above-mentioned embodiments of the physical key activation method when executed by a processor.

[0082] That is, those skilled in the art can understand that all or part of the steps in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a program, and the program is stored in a storage medium, including several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0083] Those skilled in the art will appreciate that the above-mentioned embodiments are specific examples for implementing the present invention, and in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present invention.

Claims

1. A physical key activation method, characterized in that: include: The user sends an activation instruction to the target physical key that is successfully paired with the mobile terminal through the mobile terminal; In response to the activation instruction, the target physical key initiates a key download request to obtain a target key corresponding to the target physical key; After acquiring the target key, the target physical key is paired with the target vehicle, and the target vehicle writes the target physical key into the white list of the target vehicle; wherein the target vehicle is a vehicle pre-bound to the mobile terminal; The target vehicle sends a control authority request to the target physical key, and the target physical key obtains and caches authority data corresponding to the control authority request from the digital key server, so that the target physical key replicates the control function of the digital key of the target vehicle stored in the mobile terminal to achieve control of the target vehicle; wherein the digital key is in an activated state in the digital key server; After the target physical key returns the authority data to the target vehicle, the target physical key has the authority to control the target vehicle for the specific function corresponding to the control authority request, and the target physical key completes activation; The authority data is data required for the target physical key to control the target vehicle for a specific function corresponding to the control authority request.

2. The method according to claim 1, characterized in that: Before sending the activation instruction to the target physical key successfully paired with the mobile terminal through the mobile terminal, the method further includes: The mobile terminal receives the Bluetooth broadcasts of all physical keys within a preset range, and selects one physical key as the target physical key; The mobile terminal initiates an activation status query request of the digital key of the target vehicle to the digital key server; When the activation state is the activated state, the target physical key is paired with the mobile terminal through Bluetooth.

3. The method according to claim 1, characterized in that After sending the activation instruction to the target physical key successfully paired with the mobile terminal through the mobile terminal, the method includes: The target physical key detects its own power level; If the battery level of the target physical key is lower than a preset battery level, the target physical key stops activating and returns an activation failure message to the mobile terminal.

4. The method according to claim 1, characterized in that: After sending the activation instruction to the target physical key successfully paired with the mobile terminal through the mobile terminal, the method includes: The target physical key determines whether it is the first time to receive the activation instruction; wherein the activation instruction at least includes a user ID; If not, determining whether the activation instruction and the activation instruction received for the first time are from the same user; If not, the target physical key stops activating and returns a message of activation failure to the mobile terminal.

5. The method according to claim 1, characterized in that: The target physical key initiates a key download request to obtain a target key corresponding to the target physical key, including: The target physical key initiates the key download request to the mobile terminal, and the mobile terminal forwards the key download request to the digital key server; the key download request carries information of the target physical key; The digital key server parses the key download request to determine the target key corresponding to the target physical key, signs and encrypts the target key using the private key corresponding to the target physical key to obtain an encrypted key, and returns the encrypted key to the target physical key; The target physical key uses the public key stored internally to decrypt and verify the encryption key, and obtains the target key after the verification; wherein, the private key and the public key are a set of public-private key pairs generated in advance by the digital key server for the target physical key.

6. The method according to claim 5, characterized in that The signing of the target key includes: using an elliptic curve digital signature algorithm to sign the target key.

7. The method according to claim 5, characterized in that After the target physical key is paired with the target vehicle, the method further includes: The target vehicle sends a version negotiation request to the target physical key; The target physical key returns the ICCE protocol version information supported by the target physical key to the target vehicle according to the version negotiation request; If the target vehicle supports the ICCE protocol corresponding to the ICCE protocol version information, the target vehicle writes the target physical key into the whitelist of the target vehicle; If the target vehicle does not support the ICCE protocol corresponding to the ICCE protocol version information, an activation failure message is returned to the mobile terminal.

8. The method according to claim 7, characterized in that Before the target vehicle writes the target physical key into the white list of the target vehicle, the method further includes: The target vehicle initiates an authentication request to the target physical key, requesting to negotiate a session key with the target physical key; the authentication request includes a vehicle-side random number generated by the target vehicle and a frame number of the target vehicle; The target physical key forwards the authentication request to the mobile terminal, and the mobile terminal generates a first terminal random number, generates a terminal session key and sends it to the target vehicle; The target vehicle decrypts the terminal session key, compares the correctness of the vehicle-side random number, obtains a second terminal random number, generates a first verification value and a vehicle-side session key, and sends them to the mobile terminal; The mobile terminal decrypts the vehicle-side session key to obtain the first verification value, generates a terminal hash value according to the first verification value, encrypts the value to obtain a terminal encrypted hash value, and sends the value to the target vehicle; The target vehicle decrypts the terminal encrypted hash value, and uses the first verification value to generate a vehicle-side hash value, compares the terminal hash value with the vehicle-side hash value, and returns an authentication result based on the comparison result.

9. The method according to claim 1, characterized in that: The target vehicle writes the target physical key into a white list of the target vehicle, including: The target vehicle initiates a whitelist request to the target physical key, the target physical key synchronizes the whitelist request to the mobile terminal, and the mobile terminal sends the whitelist request to the digital key server; The digital key server returns the signed whitelist data that matches the whitelist request according to the whitelist request, and the mobile terminal forwards it to the target vehicle via the target physical key. The target vehicle verifies the signed whitelist data, and after successful verification, the target physical key is written into the whitelist of the target vehicle.

10. The method according to claim 9, characterized in that The target physical key obtains and caches the authority data corresponding to the control authority request from the digital key server, and the target physical key returns the authority data to the target vehicle, including: The target physical key synchronizes the control authority request to the mobile terminal, and the mobile terminal sends the control authority request to the digital key server; The digital key server returns permission data matching the control authority request to the mobile terminal according to the control authority request, and the mobile terminal forwards the permission data to the target physical key; The target physical key caches the authority data and updates its own activation flag while sending the authority data to the target vehicle; wherein the authority data is the data required for the target physical key to control the target vehicle for a specific function corresponding to the control authority request.

11. The method according to claim 10, characterized in that The method further comprises: The target physical key sends a message of successful activation to the mobile terminal as an activation result in response to the activation instruction; The mobile terminal reports the activation result to the digital key server, and the digital key server saves the activation status of the target physical key.

12. An electronic device, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the physical key activation method according to any one of claims 1 to 11.

13. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the physical key activation method according to any one of claims 1 to 11 is implemented.

Images