Digital key sharing method, system, device and medium based on trust chain

Abstract

The embodiment of the present invention relates to the field of communications, and discloses a digital key sharing method based on a trust chain, wherein a trust chain for digital key sharing is established between an intermediate device and a device to be shared, so as to share the digital key with the device to be shared through the trust chain; the public key of the intermediate device is signed using the private key of the vehicle owner's device, and the signed public key of the intermediate device is returned to the intermediate device. The public key of the device to be shared is sent to the intermediate device, and an information package returned by the intermediate device is obtained; the information package is parsed to obtain the public key of the device to be shared signed by the private key of the intermediate device; a first authentication package is sent to the vehicle, and the first authentication package contains at least the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device. The above method can improve the flexibility and convenience of digital key sharing.

Description

Technical Field

[0001] The present invention relates to the field of communications, and in particular to a trust chain-based digital key sharing method, system, device and medium. Background Art

[0002] In recent years, digital key technology has been widely used as an advanced solution. Digital keys control vehicles by using the wireless communication functions (such as Bluetooth, NFC, etc.) of smartphones or other mobile devices to communicate with the vehicle, allowing users to remotely control functions such as unlocking, unlocking or opening the trunk through mobile devices.

[0003] However, since digital keys are usually activated through the user's mobile phone and exist in the owner's mobile phone, the owner can usually only control the car through the mobile phone that activated the digital key, and other mobile devices cannot control it. If multiple people need to control the vehicle or someone else controls it on behalf of the owner, they can only operate the owner's mobile phone. In this case, since digital keys are not easy to share, the flexibility of using digital keys is greatly reduced. Summary of the invention

[0004] The purpose of the embodiments of the present invention is to provide a digital key sharing method, system, device and medium based on a trust chain, which can realize multiple sharing of digital keys by establishing a trust chain, thereby improving the flexibility and convenience of using digital keys.

[0005] To solve the above technical problems, an embodiment of the present invention provides a digital key sharing method based on a trust chain, which is applied to a car owner device, including: establishing a trust chain for digital key sharing with a device to be shared through an intermediate device, so as to share the digital key with the device to be shared through the trust chain; using the private key of the car owner device to sign the public key of the intermediate device, and returning the signed public key of the intermediate device to the intermediate device.

[0006] In addition, in some embodiments, before establishing a trust chain for digital key sharing with the device to be shared through an intermediate device, it includes: the vehicle owner device initiates a pairing request to the vehicle, receives the digital certificate of the vehicle and the public key of the vehicle; generates the digital key of the vehicle according to the digital certificate of the vehicle and the public key of the vehicle, and sends the digital key to the vehicle; wherein the digital key includes at least the digital certificate of the vehicle owner device and the public key of the vehicle owner device.

[0007] An embodiment of the present invention also provides a digital key sharing method based on a trust chain, which is applied to a device to be shared, including: sending the public key of the device to be shared to an intermediate device on the trust chain, and obtaining an information package returned by the intermediate device; wherein the trust chain is a data transmission link established by a vehicle owner device for sharing a digital key to the device to be shared through the intermediate device, and the intermediate device is located between the vehicle owner device and the device to be shared on the trust chain; parsing the information package to obtain the public key of the device to be shared signed by the private key of the intermediate device; and sending a first authentication package to the vehicle, wherein the first authentication package at least includes the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device.

[0008] In addition, in some embodiments, the public key of the device to be shared is sent to the intermediate device, and an information package returned by the intermediate device is obtained, including: after the intermediate device sends a second authentication package to the vehicle, the public key of the device to be shared is sent to the intermediate device; wherein the second authentication package at least includes the public key of the intermediate device signed by the private key of the vehicle owner's device; and the information package returned by the intermediate device is obtained, wherein the information package at least includes the public key of the device to be shared signed by the private key of the intermediate device.

[0009] In addition, in some embodiments, the public key of the device to be shared is sent to the intermediate device, and an information package returned by the intermediate device is obtained, including: when the intermediate device does not interact with the vehicle, the public key of the device to be shared is sent to the intermediate device; the information package returned by the intermediate device is obtained, and the information package at least includes the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner's device.

[0010] In addition, in some embodiments, the first authentication package includes at least the digital certificate of the device to be shared, the public key of the device to be shared signed by the private key of the intermediate device, and the public key of the intermediate device signed by the private key of the vehicle owner device.

[0011] An embodiment of the present invention also provides a digital key sharing method based on a trust chain, which is applied to a vehicle, and includes: in response to a pairing request initiated by a vehicle owner device on the trust chain, sending the digital certificate of the vehicle and the public key of the vehicle to the vehicle owner device; wherein the trust chain is a data transmission link established by the vehicle owner device for sharing the digital key to the device to be shared through an intermediate device; receiving the digital key sent by the vehicle owner device, parsing the digital certificate of the vehicle owner device and the public key of the vehicle owner device therefrom; storing the public key of the vehicle owner device, and the digital key of the vehicle owner device taking effect.

[0012] In addition, in some embodiments, the method also includes: receiving a second authentication package sent by the intermediate device, parsing from the second authentication package the public key of the intermediate device signed by the private key of the car owner device; using the public key of the car owner device to verify the public key of the intermediate device signed by the private key of the car owner device; storing the public key of the intermediate device after the verification, and the digital key is shared to the intermediate device.

[0013] In addition, in some embodiments, the method also includes: receiving a first authentication package of the vehicle, parsing the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device from the first authentication package; using the stored public key of the intermediate device to verify the public key of the device to be shared signed by the private key of the intermediate device; storing the public key of the device to be shared after the verification is passed, and the digital key is shared to the device to be shared.

[0014] An embodiment of the present invention also provides a digital key sharing system based on a trust chain, comprising: a vehicle owner device, used to execute the digital key sharing method based on a trust chain applied to the vehicle owner device as described above; an intermediate device, used to form a trust chain with the vehicle owner device and a device to be shared; the device to be shared, used to execute the digital key sharing method based on a trust chain applied to the device to be shared as described above; and a vehicle, used to execute the digital key sharing method based on a trust chain applied to the vehicle as described above.

[0015] An embodiment of the present invention also provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the trust chain-based digital key sharing method as described above.

[0016] An embodiment of the present invention further provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the above-mentioned trust chain-based digital key sharing method.

[0017] In this embodiment, after the owner's device and the vehicle are paired and interacted to become a device trusted by the vehicle, a trust chain for sharing digital keys is established through an intermediate device and the device to be shared. The digital key is shared with the device to be shared through the intermediate device on the trust chain, thereby realizing serial sharing of digital keys and improving the flexibility and convenience of digital key sharing. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] One or more embodiments are exemplarily described by the pictures in the corresponding drawings, and these exemplary descriptions do not constitute limitations on the embodiments.

[0019] Figure 1 The specific process of the digital key sharing method based on the trust chain according to an embodiment of the present invention is as follows: Figure 1 ;

[0020] Figure 2 The specific process of the digital key sharing method based on the trust chain according to another embodiment of the present invention is as follows: Figure 2 ;

[0021] Figure 3 The specific process of the digital key sharing method based on the trust chain according to another embodiment of the present invention is as follows: Figure 3 ;

[0022] Figure 4 is a structural schematic diagram of a digital key sharing system based on a trust chain according to another embodiment of the present invention;

[0023] Figure 5 is a schematic structural diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0024] To make the purpose, technical scheme and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. However, it will be appreciated by those skilled in the art that in the embodiments of the present invention, many technical details are proposed in order to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can be implemented. The division of the following embodiments is for the convenience of description and should not constitute any limitation on the specific implementation of the present application. The various embodiments can be combined and referenced with each other without contradiction.

[0025] Before describing this solution in detail, let's first describe the implementation background of this solution. This solution is based on the CCC (Car Connectivity Consortium, 3C) Digital Key (DK) specification. 3C is a global cross-industry organization dedicated to developing standards for smartphone-to-car connectivity solutions. In July 2021, CCC defined UWB (Ultra Wide Band) technology as the core technology of the third-generation digital key and released the CCC R3 (third-generation digital key) specification. CCC R3 is based on the use of NFC / BLE / UWB as the basis of radio technology. The system uses asymmetric cryptography technology to mutually sign and authenticate vehicles and devices, and only displays the identity of known vehicles. Only by using the private key signature calculation corresponding to the public key stored in the vehicle, the device can unlock the vehicle, start the engine, and other functions. The owner's device activates the digital key in the above way, and stores the public key of the owner's device in the vehicle. After the digital key is activated, only the owner's device can control the vehicle, and other mobile devices cannot control it. In this case, since digital keys are not easy to share, the flexibility of using digital keys is greatly reduced.

[0026] To solve the above problems, the embodiment of the present invention realizes the construction of a trust chain between devices and the sharing of digital keys through data interaction between the vehicle owner device, the intermediate device, the device to be shared and the vehicle. The embodiment of the present invention provides a digital key sharing method based on a trust chain, which is applied to the vehicle owner device, such as Figure 1 As shown, the method of this embodiment specifically includes the following steps:

[0027] Step 101: Establish a trust chain for sharing a digital key with a device to be shared through an intermediate device, so as to share the digital key with the device to be shared through the trust chain.

[0028] Among them, the digital key refers to the car digital key.

[0029] Specifically, the owner device in this embodiment is a device that has been trusted by the vehicle, that is, a device that has been paired with the vehicle, the owner device has generated a digital key, and the public key of the digital certificate of the owner device has been stored in the vehicle. If the owner device wants to share the digital key with the device to be shared but cannot directly connect to the device to be shared, it can establish a trust chain for sharing the digital key with the device to be shared through an intermediate device. The trust chain refers to a data transmission link established by the owner device to share the digital key with the device to be shared. The owner device is located at the head end of the trust chain, the device to be shared is located at the end, and the intermediate device is located between the owner device and the device to be shared. On the basis of the trust chain, the owner device shares the digital key to the device to be shared through the intermediate device. The trust chain in this embodiment can represent a sequential chain of digital keys shared by the owner device to other devices. Only when the device is on the trust chain can it have the opportunity to obtain the shared digital key.

[0030] In this embodiment, the intermediate device can be a mobile terminal device or a non-movable server, and the present invention does not impose specific restrictions on this. The number of intermediate devices can be one or more, and the present invention does not impose specific restrictions on this. It should be noted that the user device and the intermediate device in this embodiment are electronic devices with wireless communication functions such as Bluetooth and capable of installing applications, and can be smart phones, and the present invention does not impose specific restrictions on this. And the vehicle targeted by this solution must support the digital key function.

[0031] In one example, before step 101 is executed, the steps of this embodiment also include: the vehicle owner device initiates a pairing request to the vehicle, receives the vehicle's digital certificate and the vehicle's public key; generates the vehicle's digital key based on the vehicle's digital certificate and the vehicle's public key, and sends the digital key to the vehicle; wherein the digital key includes at least the public key of the vehicle owner device.

[0032] Specifically, if the owner's device is to become a device trusted by the vehicle, it needs to be paired with the vehicle first. During the pairing process with the vehicle, the owner's device first initiates a pairing request to the vehicle. The pairing method can be through Bluetooth, NFC, etc., and this embodiment does not impose specific restrictions. After pairing, the vehicle will send the vehicle's own digital certificate and the public key of the vehicle's digital certificate (hereinafter referred to as the vehicle's public key) to the owner's device. The owner's device can create a digital key based on the received vehicle's digital certificate and the vehicle's public key, and send the digital key to the vehicle. The digital key contains at least the public key of the owner's device. The vehicle obtains the digital key created by the owner's device, thereby completing the public key boarding process of the owner's device. After the trust is established after the password verification between the vehicle and the owner's device, the owner's device becomes a device trusted by the vehicle.

[0033] Step 102: Use the private key of the vehicle owner's device to sign the public key of the intermediate device, and return the signed public key of the intermediate device to the intermediate device.

[0034] Specifically, after the trust chain is established, the car owner's device must be located at the starting end of the trust chain. The intermediate device adjacent to the car owner's device on the trust chain sends its public key to the car owner's device. The car owner's device receives the public key of the intermediate device, and uses the private key of the car owner's device to sign the public key of the intermediate device, and returns the signed public key of the intermediate device to the intermediate device. It should be noted that the private key of the car owner's device in this embodiment refers to the private key of the digital certificate of the car owner's device. Similarly, the public key of the intermediate device refers to the public key of the digital certificate of the intermediate device, which will not be repeated in the following text. After the intermediate device obtains the signature of the private key of the car owner's device, the signed intermediate device interacts with the vehicle, and the digital key shared by the car owner's device can be obtained after the vehicle is verified.

[0035] Compared with the related art, after the owner's device and the vehicle are paired and interacted to become a device trusted by the vehicle, this embodiment establishes a trust chain for digital key sharing through an intermediate device and the device to be shared, and shares the digital key with the device to be shared through the intermediate device on the trust chain, thereby realizing chain sharing of digital keys and improving the flexibility and convenience of digital key sharing.

[0036] Another embodiment of the present invention relates to a digital key sharing method based on a trust chain. The technical problem to be solved by the above embodiment is the same. The method of this embodiment is implemented in cooperation with the above embodiment and is applied to a device to be shared, such as Figure 2 As shown, this embodiment specifically includes the following steps.

[0037] Step 103: Send the public key of the device to be shared to the intermediate device on the trust chain, and obtain the information packet returned by the intermediate device.

[0038] Among them, the trust chain is a data transmission link established by the car owner's device for sharing the digital key to the device to be shared through the intermediate device. The intermediate device is located between the car owner's device and the device to be shared on the trust chain.

[0039] Specifically, this embodiment is an embodiment implemented in conjunction with the aforementioned embodiments, and the details involved in the aforementioned embodiments are still applicable in this embodiment. The device to be shared is any electronic device with which the car owner wants to share a digital key but cannot directly transmit data, and this embodiment does not impose specific restrictions on this. In conjunction with step 102 of the aforementioned embodiment, after the public key of the intermediate device is returned signed by the private key of the car owner's device, the device to be shared sends its public key to the intermediate device, and obtains the information package returned by the intermediate device after the intermediate device performs signing and other processing. It should be noted that the public key of the device to be shared refers to the public key of the digital certificate of the device to be shared, which will not be described in detail in the present invention. In addition, the information package at least contains the public key of the device to be shared signed by the private key of the intermediate device, and the remaining content in the information package will be determined according to the application of the intermediate device.

[0040] In one example, if step 103 occurs when the intermediate device has been paired and connected with the vehicle through Bluetooth or NFC (Near Field Communication) or UWB (Ultra Wide Band), that is, when the intermediate device has sent the second authentication package to the vehicle, since the second authentication package at least includes the public key of the intermediate device signed by the private key of the vehicle owner's device, the vehicle will parse the second authentication package and verify the signature. After the signature verification is passed, the public key of the intermediate device will be stored inside the vehicle. At this time, the digital key has been shared with the intermediate device. In this case, the device to be shared sends its public key to the intermediate device, and after the private key of the intermediate device signs the public key of the device to be shared, the information package returned by the intermediate device at least includes the public key of the device to be shared signed by the private key of the intermediate device.

[0041] In another example, if step 103 occurs when the intermediate device cannot be paired with the vehicle via Bluetooth, NFC, or UWB, that is, the intermediate device is an immovable proxy server, etc., and the intermediate device cannot send the second authentication package to the vehicle, the public key of the intermediate device will not be stored in the vehicle. In this case, the device to be shared sends its public key to the intermediate device, and after the public key of the device to be shared is signed by the private key of the intermediate device, the information packet returned by the intermediate device contains both the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner's device.

[0042] Step 104: Parse the information packet to obtain the public key of the device to be shared signed by the private key of the intermediate device.

[0043] Specifically, no matter under what circumstances step 103 is executed, the information packet returned by the intermediate device at least includes the public key of the device to be shared signed by the private key of the intermediate device. By parsing the obtained information packet, the device to be shared can obtain the public key of the device to be shared signed by the private key of the intermediate device. It should be noted that this solution can return different information packets to the device to be shared according to whether the intermediate device has performed pairing interaction with the vehicle, or it can directly return an information packet containing both the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner's device without distinguishing the circumstances. The present invention does not limit the specific data contained in the information packet.

[0044] Step 105: Send a first authentication package to the vehicle, where the first authentication package at least includes a digital certificate of the device to be shared and a public key of the device to be shared signed by a private key of the intermediate device.

[0045] Specifically, after the device to be shared obtains the public key of the device to be shared signed by the private key of the intermediate device, it is paired with the vehicle through Bluetooth, NFC, UWB, etc., and the first authentication package is sent to the vehicle. The first authentication package contains at least the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device. The vehicle will parse the first authentication package and verify the signature. After the signature verification is passed, the public key of the device to be shared will be stored inside the vehicle. At this time, the digital key has been shared with the device to be shared. It should be noted that whether the signature verification can pass depends on the information in the first authentication package and the information stored inside the vehicle.

[0046] In one example, if step 103 occurs when the intermediate device has been paired with the vehicle via Bluetooth, NFC, or UWB, that is, when the intermediate device has sent the second authentication package to the vehicle, the vehicle will parse the second authentication package and verify the signature. After the signature verification is passed, the public key of the intermediate device will be stored in the vehicle. At this time, the device to be shared sends the first authentication package to the vehicle. The first authentication package contains the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device, which can pass the signature verification of the vehicle.

[0047] In another example, if step 103 occurs when the intermediate device cannot be paired and connected with the vehicle via Bluetooth, NFC, or UWB, that is, the intermediate device is an immovable proxy server, etc., and the intermediate device cannot send the second authentication package to the vehicle, the public key of the intermediate device will not be stored inside the vehicle. At this time, if the first authentication package only contains the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device, it cannot pass the vehicle's signature verification. Because, in this case, the information package returned by the intermediate device to the device to be shared contains the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the owner's device. After receiving the information package, the device to be shared will encapsulate the digital certificate of the device to be shared, the public key of the device to be shared signed by the private key of the intermediate device, and the public key of the intermediate device signed by the private key of the owner's device into the first authentication package, and send it to the vehicle to pass the vehicle's signature verification, and the digital key has been shared to the device to be shared.

[0048] Compared with the related art, this embodiment establishes a trust chain for digital key sharing between an intermediate device and the device to be shared, and shares the digital key with the device to be shared through the intermediate device on the trust chain. The device to be shared sends different first authentication packages to the vehicle according to the interaction between the intermediate device and the vehicle to obtain the digital key shared by the owner's device, thereby improving the flexibility and convenience of digital key sharing.

[0049] Another embodiment of the present invention relates to a digital key sharing method based on a trust chain. The technical problem to be solved by the above embodiment is the same. The method of this embodiment is implemented in cooperation with the above embodiment and is applied to a vehicle, such as Figure 3 As shown, this embodiment specifically includes the following steps.

[0050] Step 106: In response to a pairing request initiated by the vehicle owner device on the trust chain, sending the vehicle's digital certificate and the vehicle's public key to the vehicle owner device;

[0051] Among them, the trust chain is a data transmission link established by the car owner's device for sharing the digital key to the device to be shared through an intermediate device.

[0052] Specifically, this embodiment is implemented in conjunction with the above-mentioned embodiments, and the details of the design of the above-mentioned embodiments are still applicable in this embodiment. After the vehicle receives the pairing request initiated by the owner's device, the vehicle responds to the pairing request, establishes a pairing connection with the vehicle through a pairing method such as Bluetooth, NFC, or UWB, and sends the vehicle's digital certificate and the vehicle's public key to the owner's device. The owner's device will generate a digital key based on the above information received and return it to the vehicle. It should be noted that the public key of the vehicle in this embodiment refers to the public key of the vehicle's digital certificate, which will not be repeated later.

[0053] Step 107: Receive the digital key sent by the vehicle owner's device, and parse the digital certificate of the vehicle owner's device and the public key of the vehicle owner's device.

[0054] Specifically, since the digital key is generated by the vehicle owner's device, the digital key will include the digital certificate of the vehicle owner's device and the public key of the vehicle owner's device, which will be attached to the digital key and returned to the vehicle together with the digital key. The vehicle can parse the digital certificate of the vehicle owner's device and the public key of the vehicle owner's device from the digital key sent by the vehicle owner's device.

[0055] Step 108: The public key of the vehicle owner's device is stored, and the digital key of the vehicle owner's device becomes effective.

[0056] Specifically, after the vehicle parses the digital certificate of the owner's device and the public key of the owner's device, it will store the public key of the owner's device inside the vehicle, and the digital key of the owner's device will take effect.

[0057] In one example, after step 108, the method of this embodiment also includes: receiving a second authentication package sent by the intermediate device, parsing the public key of the intermediate device signed by the private key of the car owner's device from the second authentication package; using the public key of the car owner's device to verify the public key of the intermediate device signed by the private key of the car owner's device; storing the public key of the intermediate device after the verification, and the digital key is shared to the intermediate device.

[0058] Specifically, the public key of the intermediate device signed by the private key of the car owner's device is verified using the public key of the car owner's device, that is, the private key signature of the car owner's device is verified using the public key of the car owner's device.

[0059] In another example, after step 108, the method of this embodiment also includes: receiving a first authentication package of the device to be shared, parsing the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device from the first authentication package; using the stored public key of the intermediate device to verify the public key of the device to be shared signed by the private key of the intermediate device; storing the public key of the device to be shared after the verification is passed, and the digital key is shared to the device to be shared.

[0060] Specifically, this embodiment is aimed at the case where the public key of the intermediate device has been stored in the vehicle. In another case, if the public key of the intermediate device is not stored in the vehicle, that is, the first authentication package sent by the device to be shared contains at least the digital certificate of the device to be shared, the public key of the device to be shared signed by the private key of the intermediate device, and the public key of the intermediate device signed by the private key of the vehicle owner's device, the vehicle parses the first authentication package, first uses the public key of the vehicle owner's device to verify the public key of the intermediate device signed by the private key of the vehicle owner's device in the first authentication package, and stores the public key of the intermediate device after the verification is passed; then uses the public key of the intermediate device to verify the public key of the device to be shared signed by the private key of the intermediate device in the first authentication package, and stores the public key of the device to be shared after the verification is passed, and the digital key is shared to the device to be shared.

[0061] Compared with the related technology, this embodiment realizes the sharing of digital keys by the owner device to the intermediate device and the device to be shared through pairing and data interaction between the vehicle and the owner device, intermediate device and device to be shared in the trust chain. The vehicle stores different public keys according to different authentication packages received to make the digital key shared by the owner device effective, thereby improving the flexibility and convenience of digital key sharing.

[0062] Another embodiment of the present invention relates to a digital key sharing system based on a trust chain, such as Figure 4 As shown, including:

[0063] A vehicle owner device, used to execute the embodiment of the above-mentioned digital key sharing method based on the trust chain applied to the vehicle owner device;

[0064] An intermediate device, used to form a trust chain with the vehicle owner's device and the device to be shared;

[0065] A device to be shared, used to execute the embodiment of the above-mentioned digital key sharing method based on the trust chain applied to the device to be shared;

[0066] A vehicle is used to execute the embodiment of the above-mentioned trust chain-based digital key sharing method applied to a vehicle. It is not difficult to see that this embodiment is a system embodiment corresponding to the above-mentioned embodiment, and the specific implementation details of this embodiment have been recorded in the above-mentioned embodiment, and this embodiment will not be repeated here.

[0067] Another embodiment of the present invention relates to an electronic device, such as Figure 5 As shown, it includes at least one processor 402; and a memory 401 that is communicatively connected to the at least one processor 402; wherein the memory 401 stores instructions that can be executed by the at least one processor 402, and the instructions are executed by the at least one processor 402 so that the at least one processor 402 can execute any of the above-mentioned embodiments of the trust chain-based digital key sharing method.

[0068] The memory 401 and the processor 402 are connected in a bus manner, and the bus may include any number of interconnected buses and bridges, and the bus connects various circuits of one or more processors 402 and the memory 401 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on a transmission medium. The data processed by the processor 402 is transmitted on a wireless medium via an antenna, and further, the antenna also receives data and transmits the data to the processor 402.

[0069] The processor 402 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. The memory 401 can be used to store data used by the processor 402 when performing operations. The electronic device in this embodiment can be a physical key, a mobile phone terminal, etc., and the present invention does not specifically limit this.

[0070] Another embodiment of the present invention relates to a computer-readable storage medium storing a computer program, which, when executed by a processor, implements any of the above-mentioned embodiments of the digital key sharing method based on a trust chain.

[0071] That is, those skilled in the art can understand that all or part of the steps in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a program, and the program is stored in a storage medium, including a number of instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0072] Those skilled in the art will appreciate that the above-mentioned embodiments are specific examples for implementing the present invention, and in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present invention.

Claims

1. A digital key sharing method based on a trust chain, characterized in that: Applied to a vehicle owner device, the method comprises: Establishing a trust chain for sharing the digital key with the device to be shared through the intermediate device, so as to share the digital key with the device to be shared through the trust chain; Signing the public key of the intermediate device using the private key of the vehicle owner device, and returning the signed public key of the intermediate device to the intermediate device; The device to be shared sends a first authentication package to the vehicle according to the information package returned by the intermediate device, and the device to be shared sends different first authentication packages to the vehicle according to the interaction between the intermediate device and the vehicle; wherein the information package at least includes: the public key of the device to be shared signed by the private key of the intermediate device, or the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner device; The vehicle receives a first authentication package sent by the device to be shared, wherein the first authentication package at least includes a digital certificate of the device to be shared and a public key of the device to be shared signed by a private key of the intermediate device; The vehicle uses the public key of the vehicle owner's device to verify the public key of the intermediate device signed by the private key of the vehicle owner's device, and stores the public key of the intermediate device after the verification is passed; the vehicle uses the stored public key of the intermediate device to verify the public key of the device to be shared signed by the private key of the intermediate device, and after the verification is passed, the digital key is shared to the device to be shared; Before establishing a trust chain for digital key sharing with the device to be shared through an intermediate device, the following steps are required: The vehicle owner device initiates a pairing request to the vehicle, and receives the digital certificate of the vehicle and the public key of the vehicle; Generate the digital key of the vehicle according to the digital certificate of the vehicle and the public key of the vehicle, and send the digital key to the vehicle; wherein the digital key at least includes the digital certificate of the vehicle owner device and the public key of the vehicle owner device; The vehicle receives the digital key sent by the vehicle owner device, parses the digital certificate of the vehicle owner device and the public key of the vehicle owner device, and stores the public key of the vehicle owner device.

2. A digital key sharing method based on a trust chain, characterized in that: Applied to the device to be shared, the method includes: The vehicle receives the digital key sent by the vehicle owner's device, parses the digital certificate of the vehicle owner's device and the public key of the vehicle owner's device, and stores the public key of the vehicle owner's device; Send the public key of the device to be shared to the intermediate device on the trust chain, and obtain the information packet returned by the intermediate device; wherein the trust chain is a data transmission link established by the vehicle owner device for sharing the digital key to the device to be shared through the intermediate device, and the intermediate device is located between the vehicle owner device and the device to be shared on the trust chain; Parse the information packet to obtain the public key of the device to be shared signed by the private key of the intermediate device; wherein the information packet at least includes: the public key of the device to be shared signed by the private key of the intermediate device, or the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner device; Sending a first authentication package to the vehicle according to the information package returned by the intermediate device, and the device to be shared sending different first authentication packages to the vehicle according to the interaction between the intermediate device and the vehicle; the first authentication package at least includes the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device; The vehicle uses the public key of the owner's device to verify the public key of the intermediate device signed by the private key of the owner's device, and stores the public key of the intermediate device after the verification is passed; the vehicle uses the stored public key of the intermediate device to verify the public key of the device to be shared after being signed by the private key of the intermediate device, and after the verification is passed, the digital key is shared to the device to be shared.

3. The method according to claim 2, characterized in that Sending the public key of the device to be shared to the intermediate device, and obtaining the information packet returned by the intermediate device, including: After the intermediate device sends a second authentication package to the vehicle, the public key of the device to be shared is sent to the intermediate device; wherein the second authentication package at least includes the public key of the intermediate device signed by the private key of the vehicle owner device; The information packet returned by the intermediate device is obtained, wherein the information packet at least includes the public key of the device to be shared signed by the private key of the intermediate device.

4. The method according to claim 2, characterized in that: Sending the public key of the device to be shared to the intermediate device, and obtaining the information packet returned by the intermediate device, including: When the intermediate device does not interact with the vehicle, the public key of the device to be shared is sent to the intermediate device; The information packet returned by the intermediate device is obtained, wherein the information packet at least includes the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner device.

5. The method according to claim 4, characterized in that The first authentication package at least includes the digital certificate of the device to be shared, the public key of the device to be shared signed by the private key of the intermediate device, and the public key of the intermediate device signed by the private key of the vehicle owner device.

6. A digital key sharing method based on a trust chain, characterized in that: Applied to a vehicle, the method comprises: In response to a pairing request initiated by a vehicle owner device on a trust chain, sending the vehicle's digital certificate and the vehicle's public key to the vehicle owner device; wherein the trust chain is a data transmission link established by the vehicle owner device for sharing a digital key to a device to be shared through an intermediate device; Receiving the digital key sent by the vehicle owner device, and parsing the digital certificate of the vehicle owner device and the public key of the vehicle owner device; The public key of the vehicle owner device is stored, and the digital key of the vehicle owner device becomes effective; The device to be shared sends a first authentication package to the vehicle according to the information package returned by the intermediate device, and the device to be shared sends different first authentication packages to the vehicle according to the interaction between the intermediate device and the vehicle; wherein the information package at least includes: the public key of the device to be shared signed by the private key of the intermediate device, or the public key of the device to be shared signed by the private key of the intermediate device and the public key of the intermediate device signed by the private key of the vehicle owner device; Receiving a first authentication package sent by the device to be shared, wherein the first authentication package at least includes a digital certificate of the device to be shared and a public key of the device to be shared signed by a private key of the intermediate device; The public key of the intermediate device signed by the private key of the car owner's device is verified by using the public key of the car owner's device, and the public key of the intermediate device is stored after the verification is passed; the public key of the device to be shared that is signed by the private key of the intermediate device is verified by using the stored public key of the intermediate device, and the digital key is shared to the device to be shared after the verification is passed.

7. The method according to claim 6, characterized in that Before receiving the first authentication packet sent by the device to be shared, the method further includes: Receiving a second authentication packet sent by the intermediate device, parsing the second authentication packet to obtain a public key of the intermediate device signed by the private key of the vehicle owner device; using the public key of the vehicle owner device to verify the public key of the intermediate device signed by the private key of the vehicle owner device; After the signature verification is passed, the public key of the intermediate device is stored, and the digital key is shared with the intermediate device; The verifying the signature of the public key of the to-be-shared device signed by the private key of the intermediate device includes: Receiving a first authentication package of the device to be shared, parsing the digital certificate of the device to be shared and the public key of the device to be shared signed by the private key of the intermediate device from the first authentication package; Using the stored public key of the intermediate device to verify the public key of the device to be shared that is signed by the private key of the intermediate device; After the signature verification is passed, the public key of the device to be shared is stored, and the digital key is shared to the device to be shared.

8. The method according to claim 7, characterized in that The receiving a first authentication packet sent by the device to be shared includes: Receiving a first authentication package of the device to be shared, parsing from the first authentication package a digital certificate of the device to be shared, a public key of the device to be shared signed by a private key of the intermediate device, and a public key of the intermediate device signed by a private key of the vehicle owner device; Using the stored public key of the vehicle owner's device to verify the public key of the intermediate device signed by the private key of the vehicle owner's device; After the signature verification is passed, the public key of the intermediate device is stored, and the public key of the intermediate device is used to verify the public key of the device to be shared after being signed by the private key of the intermediate device; After the signature verification is passed, the public key of the device to be shared is stored, and the digital key is shared to the device to be shared.

9. A digital key sharing system based on a trust chain, characterized in that: include: A vehicle owner device, used to execute the digital key sharing method based on the trust chain as described in claim 1 above; An intermediate device, used to form a trust chain with the vehicle owner's device and the device to be shared; A device to be shared, used to execute the digital key sharing method based on the trust chain as described in any one of claims 2 to 5 above; A vehicle, used to execute the trust chain-based digital key sharing method described in any one of claims 6 to 8 above.

10. An electronic device, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the digital key sharing method based on the trust chain as described in any one of claims 1 to 5.

11. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the digital key sharing method based on the trust chain described in any one of claims 1 to 5 is implemented.

Images