Key pairing and binding method and system and vehicle

Abstract

The embodiment of the invention provides a key pairing and binding method and system and a vehicle. The method comprises the steps that a security chip of a key is filled with a first prefabricated secret key; pairing and binding with the key controller based on a first prefabricated key in the key and a target key in the key controller; the target key is a key which is obtained from the cloud key system and written into the key controller and corresponds to the identification information based on the identification information of the key. The invention aims to improve the safety of pairing and binding between a key and a key controller.

Description

Technical Field

[0001] The present application relates to the technical field of key pairing, and in particular to a method, system and vehicle for key pairing and binding. Background Art

[0002] At present, the pairing and binding method of the key that controls the vehicle and the key controller inside the vehicle is mainly that the key controller inside the vehicle pre-makes a pre-key to the security chip at the supplier. In the vehicle factory, the diagnostic instrument triggers the key controller to enter the pairing and binding state through the OBD interface. The key controller derives a random number key based on the pre-made pre-key and VIN. The key controller transmits the random number key to the key through short-distance communication. At this point, the key is successfully bound. This pairing and binding method mainly has the following two problems: After the vehicle leaves the factory, criminals use illegal diagnostic instruments to trigger the key pairing and binding instructions through the OBD interface, or directly simulate a key pairing and binding instruction from the input port of the key controller. At this time, the key controller will send the key through short-distance communication. At this time, any forged key terminal can receive it. Once the key is received, a key can be forged. Since the pre-made pre-key of the key needs to be pre-made in the key controller by the supplier in advance, the pre-made pre-key is not managed by the vehicle factory. If the supplier accidentally leaks the key, a large number of counterfeit keys are likely to appear on the market. The quality of the counterfeit keys cannot be guaranteed, and the risk of car theft will also increase. Summary of the invention

[0003] In view of this, the embodiments of the present application provide a key pairing and binding method, system and vehicle, aiming to improve the security of pairing and binding between a key and a key controller.

[0004] A first aspect of an embodiment of the present application provides a key pairing and binding method, which is applied to a key, and the method includes:

[0005] Filling the first pre-made key into the security chip of the key;

[0006] Based on the first prefabricated key in the key and the target key in the key controller, pairing and binding are performed with the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

[0007] Optionally, pairing and binding with the key controller based on the first prefabricated key in the key and the target key in the key controller includes:

[0008] Based on the first prefabricated key in the key and the second prefabricated key in the key controller, communication authentication is performed with the key controller; the second prefabricated key in the key controller is a key corresponding to the identification information obtained and written by the key controller from the cloud key system based on the identification information of the key;

[0009] When the communication authentication is passed, receiving the target key sent by the key controller;

[0010] Performing a legitimacy check on the target key sent by the key controller based on its own first pre-made key;

[0011] If the verification is passed, pairing and binding with the key controller is performed.

[0012] Optionally, performing communication authentication with the key controller based on a first prefabricated key in the key and a second prefabricated key in the key controller includes:

[0013] deriving a second Bluetooth pairing code and a second root key of a target security protocol through a derivation algorithm according to the first prefabricated key in the key;

[0014] When the first Bluetooth pairing code and the second Bluetooth pairing code are successfully paired and the first root key and the second root key are authenticated, it is determined that the communication authentication is successful; wherein, the first Bluetooth pairing code and the first root key of the target security protocol are derived by the key controller based on its own second prefabricated key through a derivation algorithm.

[0015] Optionally, performing a validity check on the target key sent by the key controller based on the first pre-made key thereof includes:

[0016] Compare the check bit subkey of the first prefabricated key in the key with the check bit subkey of the received target key to obtain a comparison result;

[0017] If the comparison result is that the check bit subkey of the first pre-made key is the same as the check bit subkey of the received target key, the verification is passed;

[0018] If the comparison result is that the check bit subkey of the first pre-made key is different from the check bit subkey of the received target key, the verification fails.

[0019] Optionally, when the verification is passed, pairing and binding with the key controller includes:

[0020] If the verification is passed, disconnecting from the key controller, and deriving a fourth Bluetooth pairing code and a fourth root key of the target security protocol through a derivation algorithm based on the target key in the key;

[0021] When the third Bluetooth pairing code and the fourth Bluetooth pairing code are paired successfully and the third root key and the fourth root key are authenticated, pairing and binding are performed with the key controller; wherein the third Bluetooth pairing code and the third root key of the target security protocol are derived by the key controller based on its own target key through a derivation algorithm.

[0022] Optionally, the method further includes:

[0023] When pairing and binding are completed, the control instruction is encrypted based on the target key in the key and sent to the key controller, so that the key controller decrypts the control instruction based on its own target key and performs the corresponding control operation.

[0024] Optionally, the method further includes:

[0025] When the key and the key controller are paired and bound, the first pre-made key in the key is deleted.

[0026] Optionally, when the key written into the key controller is the second prefabricated key and the target key, the method further includes:

[0027] When the key and the key controller are paired and bound, the first pre-made key is deleted, and the key controller is controlled to delete the second pre-made key in the key controller.

[0028] A second aspect of an embodiment of the present application provides a key pairing and binding method, which is applied to a key controller, and the method includes:

[0029] Obtain the target key corresponding to the key identification information in the cloud key system;

[0030] Writing the target key;

[0031] Based on a first prefabricated key in the key and a target key in the key controller, pairing and binding are performed with the key, where the first prefabricated key is a key pre-loaded into a security chip of the key.

[0032] Optionally, obtaining a target key corresponding to the identification information of the key in the cloud key system includes:

[0033] Receive the broadcast signal of the key and obtain the identification information of the key;

[0034] Based on the identification information, a target key corresponding to the identification information in the cloud key system is obtained.

[0035] Optionally, obtaining a target key corresponding to the identification information of the key in the cloud key system includes:

[0036] Receive a target key obtained from the cloud key system by a terminal device; the terminal device is a device that can obtain identification information of the key and establish communication with the cloud key system.

[0037] Optionally, the method further includes:

[0038] Obtain a second pre-made key corresponding to the identification information in the cloud key system;

[0039] Writing the second prefabricated key;

[0040] The pairing and binding with the key based on the first prefabricated key in the key and the target key in the key controller includes:

[0041] Based on a first pre-made key in the key and a second pre-made key in the key controller, performing communication authentication with the key;

[0042] In case the communication authentication is passed, the target key is sent to the key;

[0043] In response to a result that the key passes the legitimacy check of the target key based on its own first pre-made key, pairing and binding with the key is performed.

[0044] Optionally, performing communication authentication with the key based on a first prefabricated key in the key and a second prefabricated key in the key controller includes:

[0045] Based on the second pre-made key in the key controller, derive a first Bluetooth pairing code and a first root key of a target security protocol through a derivation algorithm;

[0046] When the first Bluetooth pairing code and the second Bluetooth pairing code are paired successfully and the first root key and the second root key are authenticated, it is determined that the communication authentication is successful; wherein the second Bluetooth pairing code and the second root key of the target security protocol are derived by the key based on its own first prefabricated key through a derivation algorithm.

[0047] Optionally, in response to a result that the key passes the legitimacy check of the target key based on its own first pre-made key, pairing and binding with the key includes:

[0048] In response to a result that the key passes the legitimacy check of the target key based on its own first pre-made key and the key is disconnected, deriving a third Bluetooth pairing code and a third root key of the target security protocol based on the target key through a derivation algorithm;

[0049] When the third Bluetooth pairing code and the fourth Bluetooth pairing code are paired successfully and the third root key and the fourth root key are authenticated, they are paired and bound with the key; wherein the fourth Bluetooth pairing code and the fourth root key of the target security protocol are derived by the key through a derivation algorithm based on the received target key.

[0050] Optionally, the method further includes:

[0051] When pairing and binding are completed, the receiving key encrypts and sends control instructions based on the target key;

[0052] The control instruction is decrypted based on its own target key and then the corresponding control operation is executed.

[0053] Optionally, the method further includes:

[0054] When the key and the key controller are paired and bound, the key is controlled to delete the first pre-made key in the key.

[0055] Optionally, when the key written into the key controller is the second prefabricated key and the target key, the method further includes:

[0056] When the key and the key controller are paired and bound, the second pre-made key is deleted, and the key is controlled to delete the first pre-made key in the key.

[0057] A third aspect of an embodiment of the present application provides a key pairing and binding system, which is applied to a key, and the system includes:

[0058] A security chip, used for loading a first pre-made key;

[0059] A pairing and binding module is used to pair and bind with the key controller based on the first prefabricated key in the key and the target key in the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

[0060] A fourth aspect of the present application provides a key pairing and binding system, which is applied to a key controller, and the system includes:

[0061] A data acquisition module, used to acquire a target key corresponding to the key identification information in the cloud key system;

[0062] A security chip, used for writing the target key;

[0063] The pairing and binding module is used to pair and bind the key based on a first prefabricated key in the key and a target key in the key controller, wherein the first prefabricated key is a key pre-loaded into a security chip of the key.

[0064] The fifth aspect of an embodiment of the present application provides a vehicle, wherein the key of the vehicle is paired and bound based on a key pairing and binding method described in the first aspect of the present application, or the key controller of the vehicle is paired and bound based on a key pairing and binding method described in the second aspect of the present application.

[0065] A sixth aspect of an embodiment of the present application provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and running on the processor, wherein when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the first aspect of the present application are implemented, or when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the second aspect of the present application are implemented.

[0066] The seventh aspect of an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps in a key pairing and binding method as described in the first aspect of the present application are implemented, or when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the second aspect of the present application are implemented.

[0067] The key pairing and binding method provided by this application has the following advantages:

[0068] A key pairing and binding method provided in an embodiment of the present application is applied to a key. First, a first prefabricated key is installed in the security chip of the key; based on the first prefabricated key in the key and the target key in the key controller, pairing and binding are performed with the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller. Therefore, the first prefabricated key is first filled in the key, and the prefabricated key will be given to the supplier for key generation. Then, a mapping relationship between the key's identification information and the key's first prefabricated key is established in the vehicle factory. When the key and the key controller are paired, a diagnostic instrument that can legally access the cloud key system obtains the target key corresponding to the identification information from the cloud key system based on the key's identification information, and then writes the target key into the vehicle's key controller. Then, when the key and the key controller are paired and bound, the target key of the key controller is verified based on the key's first prefabricated key. When the verification passes, the key and the key controller are bound. In this way, even if the supplier leaks the first prefabricated key in the key, the supplier cannot obtain the legal target key for pairing and binding, thereby effectively improving the security of pairing and binding the key and the key controller. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments of the present application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor.

[0070] Figure 1 A flowchart of a key pairing and binding method shown in one embodiment of the present application;

[0071] Figure 2 Another flow chart of a key pairing and binding method shown in one embodiment of the present application;

[0072] Figure 3 A flowchart of a key pairing and binding method based on a diagnostic instrument in an embodiment of the present application;

[0073] Figure 4 A schematic diagram of a key pairing and binding system is shown in accordance with an embodiment of the present application. DETAILED DESCRIPTION

[0074] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0075] refer to Figure 1 , Figure 1 This is a schematic diagram of a key pairing and binding method according to an embodiment of the present application. Figure 1 As shown, a key pairing and binding method provided by the present application is applied to a key, comprising:

[0076] Step S1: Loading a first pre-made key into a security chip of a key.

[0077] In this embodiment, the vehicle manufacturer first creates a large number of first prefabricated keys in advance, and each first prefabricated key is unique and will not be repeated. At the same time, the vehicle manufacturer creates a corresponding target key for each first prefabricated key, and each target key is also unique and will not be repeated. The first prefabricated key and the target key are stored one-to-one in a cloud key system controlled by the vehicle manufacturer. For the supplier who produces keys for the vehicle manufacturer, the vehicle manufacturer will give the created first prefabricated key to the supplier for key production. Specifically, for each key produced, a unique first prefabricated key is filled into the key's security chip, and different keys are filled with different first prefabricated keys. For each key, there is unique identification information, and the identification information of a corresponding key will correspond to a unique first prefabricated key. For the corresponding relationship between the key identification information and the first prefabricated key, the supplier will give the corresponding relationship to the vehicle manufacturer, and the vehicle manufacturer will record the corresponding relationship in the cloud key system.

[0078] For example, a large number of first prefabricated keys PK1 to PKn are created in advance, and a corresponding target key is created for each first prefabricated key, thereby obtaining n target keys K, where the target key Ki corresponds to the first prefabricated key PKi, and i is a positive integer from 1 to n. All the created first prefabricated keys are given to the supplier, and the jth key among the m keys produced has unique identification information IDj, and the value of j is a positive integer from 1 to m. For the jth key produced, the first prefabricated key PKj is filled into the security chip of the jth key, and then the corresponding relationship between the key identification information IDj and the first prefabricated key PKj is given to the vehicle manufacturer.

[0079] Step S2: Based on the first prefabricated key in the key and the target key in the key controller, pair and bind with the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

[0080] In this embodiment, when any key is obtained and paired and bound with the key controller of the key control end, the engineering personnel scan the key through a legitimate diagnostic instrument that can access the cloud key system to determine the identification information of the key, and then determine the target key corresponding to the identification information by accessing the cloud key system based on the identification information, wherein the cloud key system records the corresponding relationship between the key identification information, the first prefabricated key and the target key, and then the legitimate diagnostic instrument writes the target key into the key controller of the key control end through the OBD interface. Among them, the key control end includes but is not limited to vehicles, and illegal diagnostic instruments not provided by the vehicle manufacturer will not have the authority to access the cloud key system. In another embodiment, the key controller receives the key's broadcast signal to obtain the key's identification information, and then the key controller directly obtains the target key corresponding to the identification information from the cloud key system based on the identification information, and then writes the target key into the key controller.

[0081] By way of example, continuing with the example in the above step S1, for the key with identification information ID2, based on the correspondence between the identification information of the key in the cloud key system and the first prefabricated key, it is determined that the first prefabricated key corresponding to the identification information ID2 of the key in the cloud key system is PK2, and then based on the determined first prefabricated key PK2, the target key K2 corresponding to the first prefabricated key PK2 in the cloud key system is determined, and then the legal diagnostic instrument writes the target key K2 into the security chip of the key controller at the key control end through the OBD interface.

[0082] In this embodiment, after the target key is written into the key controller, the target key in its own security chip is sent to the key through the key controller. The key determines whether the received target key is the target key corresponding to its own first prefabricated key in the cloud key system based on its own first prefabricated key. When it is determined that the received target key is the target key corresponding to its own first prefabricated key in the cloud key system, the key controller is determined to be legal, and the key and the key controller are paired and bound based on the first prefabricated key in the key and the target key in the key controller.

[0083] A key pairing and binding method provided in an embodiment of the present application is applied to a key. First, a first prefabricated key is installed in the security chip of the key; based on the first prefabricated key in the key and the target key in the key controller, pairing and binding are performed with the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller. Therefore, the first prefabricated key is first filled in the key, and the prefabricated key will be given to the supplier for key generation. Then, a mapping relationship between the key's identification information and the key's first prefabricated key is established in the vehicle factory. When the key and the key controller are paired, a diagnostic instrument that can legally access the cloud key system obtains the target key corresponding to the identification information from the cloud key system based on the key's identification information, and then writes the target key into the vehicle's key controller. Then, when the key and the key controller are paired and bound, the target key of the key controller is verified based on the key's first prefabricated key. When the verification passes, the key and the key controller are bound. In this way, even if the supplier leaks the first prefabricated key in the key, the supplier cannot obtain the legal target key for pairing and binding, thereby effectively improving the security of pairing and binding the key and the key controller.

[0084] In combination with the above embodiments, in one implementation, the present application embodiment further provides a key pairing and binding method. In the key pairing and binding method, step S2 may include steps S21 to S24:

[0085] Step S21: Based on the first prefabricated key in the key and the second prefabricated key in the key controller, communication authentication is performed with the key controller; the second prefabricated key in the key controller is a key corresponding to the identification information obtained and written by the key controller from the cloud key system based on the identification information of the key.

[0086] In this embodiment, in order to ensure the transmission security of the target key used for pairing and binding the key and the key controller, the present application first performs a legitimacy check on the key controller before transmitting the target key to the key. Specifically: Figure 2As shown, based on the identification information of the key, the target key corresponding to the identification information in the cloud key system is obtained, and at the same time, the second prefabricated key corresponding to the identification information is obtained. When the key controller obtains the second prefabricated key from the cloud key system in a correct and legal manner, the obtained second prefabricated key is actually the first prefabricated key corresponding to the key in the cloud key system, and then the second prefabricated key is written into the key controller. For example, the identification information of the second key is ID2, and the first prefabricated key of the second key is PK2. The corresponding relationship between the identification information ID2 and the first prefabricated key PK2 is given to the vehicle manufacturer, and then the vehicle manufacturer will add a target key K2 based on the corresponding relationship, and then the uniquely determined corresponding relationship between the identification information ID2, the first prefabricated key PK2 and the target key K2 is stored in the cloud key system. When the key controller obtains the corresponding second prefabricated key from the cloud key system based on the identification information ID2 of the second key in a correct and legal manner, the second prefabricated key is actually the first prefabricated key PK2.

[0087] In this embodiment, when the first prefabricated key in the key and the second prefabricated key in the key controller are the same, it is determined that the communication authentication between the key and the key controller is passed. In different situations, the communication authentication fails. At this time, the key will not receive the target key of the key controller, and subsequent binding pairing will not be performed. This process also ensures the security of pairing and binding between the key and the key controller to a certain extent.

[0088] Step S22: When the communication authentication is passed, receiving the target key sent by the key controller.

[0089] In this embodiment, after the communication authentication between the key and the key controller is passed, the target key sent by the key controller is received.

[0090] Step S23: Perform a validity check on the target key sent by the key controller based on its own first pre-made key.

[0091] In this embodiment, after the key receives the target key sent by the key controller, the key determines whether the received target key is the target key corresponding to its own prefabricated key in the cloud key system based on its own prefabricated key. If it is determined that the received target key is the target key corresponding to its own prefabricated key in the cloud key system, the key controller is determined to be legal.

[0092] Step S24: If the verification is passed, pairing and binding with the key controller is performed.

[0093] In this embodiment, when it is determined that the key controller corresponding to the target key is legitimate, the verification is determined to be passed. At this time, the key and the key controller are paired and bound based on the first prefabricated key in the key and the target key in the key controller.

[0094] In combination with the above embodiments, in one implementation, the present application embodiment further provides a key pairing and binding method. In the key pairing and binding method, step S21 may include steps S211 to S212:

[0095] Step S211: deriving a second Bluetooth pairing code and a second root key of a target security protocol through a derivation algorithm according to the first prefabricated key in the key.

[0096] In this embodiment, the key derives the second Bluetooth pairing code and the second root key of the target security protocol at the application level through a derivation algorithm based on the first pre-made key in the security chip of the key, wherein the target security protocol is preferably the ICCE protocol (Intelligent Connected Car Ecosystem Alliance).

[0097] Step S212: When the first Bluetooth pairing code and the second Bluetooth pairing code are successfully paired and the first root key and the second root key are authenticated, determine that the communication authentication is successful; wherein the first Bluetooth pairing code and the first root key of the target security protocol are derived by the key controller based on its own second prefabricated key through a derivation algorithm.

[0098] In this embodiment, the key controller will derive the first Bluetooth pairing code and the first root key of the target security protocol at the application level based on the second prefabricated key in its own security chip through the same derivation algorithm. After deriving the first Bluetooth pairing code, the first root key, the second Bluetooth pairing code, and the second root key, if the first Bluetooth pairing code derived from the second prefabricated key in the key controller is consistent with the second Bluetooth pairing code derived from the first prefabricated key in the key, and the first root key derived from the second prefabricated key in the key controller is consistent with the second root key derived from the first prefabricated key in the key, the key and the key controller will pass the authentication.

[0099] In combination with the above embodiments, in one implementation, the present application embodiment further provides a key pairing and binding method. In the key pairing and binding method, step S23 in the method may include steps S231 to S233:

[0100] Step S231: Compare the check bit subkey of the first prefabricated key in the key with the check bit subkey of the received target key to obtain a comparison result.

[0101] In this embodiment, the vehicle manufacturer specifies data of a preset length at a designated position of the first prefabricated key as the check position subkey of the first prefabricated key. The function of the check position subkey is to verify whether the target key received and sent by the key controller is the target key corresponding to the first prefabricated key in the cloud key system. At the same time, the vehicle manufacturer specifies data of a preset length at a designated position of the target key as the check position subkey of the target key. The designated position of the check position subkey of the prefabricated key and the designated position of the check position subkey of the target key can be the same or different, such as the designated position of the check position subkey of the first prefabricated key starts from the 50th position, and the designated position of the check position subkey of the target key starts from the 70th position, at which time the two designated positions are different. Specifically, after the key receives the target key sent by the key controller, the key will compare the check position subkey of the first prefabricated key in its own security chip with the check position subkey of the received target key to obtain a corresponding comparison result.

[0102] Step S232: When the comparison result is that the check bit subkey of the first pre-made key is the same as the check bit subkey of the received target key, the verification is passed.

[0103] In this embodiment, after obtaining the corresponding comparison result through step S231, when the comparison result is that the check bit subkey of the first prefabricated key of the key is the same as the check bit subkey of the received target key, it is determined that the key controller corresponding to the target key has passed the verification, and the target key belongs to the target key corresponding to the first prefabricated key in the cloud key system, and the pairing and binding process is legal at this time.

[0104] Step S233: If the comparison result is that the check bit subkey of the first pre-made key is different from the check bit subkey of the received target key, the verification fails.

[0105] In this embodiment, after obtaining the corresponding comparison result through step S231, when the comparison result is that the check bit subkey of the first prefabricated key of the key is different from the check bit subkey of the received target key, it is determined that the key controller corresponding to the target key has failed the verification, and the target key does not belong to the target key corresponding to the first prefabricated key in the cloud key system. At this time, the pairing and binding process is illegal, and the pairing and binding of the key and the key controller is refused.

[0106] In combination with the above embodiments, in one implementation, the present application embodiment further provides a key pairing and binding method. In the key pairing and binding method, step S24 in the method may include steps S241 to S242:

[0107] Step S341: If the verification is passed, disconnect the key controller, and derive a fourth Bluetooth pairing code and a fourth root key of the target security protocol through a derivation algorithm based on the target key in the key.

[0108] In this embodiment, when the key passes the verification of the received target key, the received target key is stored in the security chip and the Bluetooth and application layer connections established with the key controller are disconnected.

[0109] In this embodiment, after the key disconnects from the Bluetooth and application layer of the key controller, the key derives a fourth Bluetooth pairing code and a fourth root key of the target security protocol at the application level through a derivation algorithm based on the target key in its own security chip.

[0110] Step S242: When the third Bluetooth pairing code and the fourth Bluetooth pairing code are successfully paired and the third root key and the fourth root key are authenticated, pairing and binding are performed with the key controller; wherein the third Bluetooth pairing code and the third root key of the target security protocol are derived by the key controller based on its own target key through a derivation algorithm.

[0111] In this embodiment, the key controller will derive a third Bluetooth pairing code and a third root key of the target security protocol at the application level based on the target key in its own security chip through the same derivation algorithm. When the third Bluetooth pairing code derived from the target key in the key controller is consistent with the fourth Bluetooth pairing code derived from the target key in the key, and the fourth root key derived from the target key in the key controller is consistent with the fourth root key derived from the target key in the key, the key and the key controller will pass the authentication, and the key and the key controller will be paired and bound. The key that has completed the pairing and binding can be used to control the key control terminal corresponding to the key controller.

[0112] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, the method further includes: when the pairing and binding is completed, the control instruction is encrypted based on the target key in the key and sent to the key controller, so as to control the key controller to decrypt the control instruction based on its own target key and then perform the corresponding control operation.

[0113] In this embodiment, when the key and the key controller are paired and bound, based on the user's selection operation on the key, the key encrypts the control instruction corresponding to the selection operation based on the target key and sends it to the paired and bound key controller.

[0114] In this embodiment, the key controller decrypts the control instruction based on the target key and then executes the control operation corresponding to the control instruction.

[0115] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, when the key written into the key controller is the target key, the method further includes: when the key and the key controller complete the pairing and binding, deleting the first prefabricated key in the key.

[0116] In this embodiment, in the implementation method of directly sending the target key, the key controller will not obtain the second prefabricated key corresponding to the key's identification information from the cloud key system. For this implementation method, in order to ensure the security of the pairing and binding of the key and the key controller, when the key and the key controller complete the pairing and binding, the first prefabricated key in the key is directly deleted, so that the paired and bound key will no longer have the first prefabricated key, and thus cannot be paired and bound again. Instead, the key needs to be returned to the factory and re-filled with the first prefabricated key before a new pairing and binding can be performed on the key again, thereby ensuring the security of the pairing and binding.

[0117] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, when the key written into the key controller is the second prefabricated key and the target key, the method further includes: when the key and the key controller complete the pairing and binding, deleting the first prefabricated key, and controlling the key controller to delete the second prefabricated key in the key controller.

[0118] In this embodiment, in an implementation method where the target key is sent only after communication authentication is passed, a second prefabricated key corresponding to the key will be obtained from the cloud key system and given to the key controller. For this implementation method, in order to ensure the security of the pairing and binding of the key and the key controller, when the key and the key controller are paired and bound, the first prefabricated key in the key and the second prefabricated key in the key controller are directly deleted, so that the paired and bound key will no longer have various prefabricated keys, and thus cannot be paired and bound. Instead, the key needs to be returned to the factory and the first prefabricated key needs to be re-filled before a new pairing and binding can be performed on the key again, thereby ensuring the security of the pairing and binding.

[0119] Based on the same inventive concept, an embodiment of the present application provides a key pairing and binding method, which is applied to a key controller and includes:

[0120] Step S101: Obtain a target key corresponding to the key identification information in the cloud key system, and write the target key.

[0121] In this embodiment, when any key is obtained and paired with the key controller of the key control end, the target key corresponding to the identification information of the key in the cloud key system is obtained based on the identification information of the key, and the target key is written into the key controller. Among them, the key control end includes but is not limited to the vehicle, and illegal diagnostic instruments not provided by the vehicle manufacturer will not have the authority to access the cloud key system.

[0122] Step S102: Pairing and binding the key with the first prefabricated key in the key and the target key in the key controller, wherein the first prefabricated key is a key pre-installed in the security chip of the key.

[0123] In this embodiment, the vehicle manufacturer first creates a large number of first prefabricated keys in advance, and each first prefabricated key is unique and will not be repeated. At the same time, the vehicle manufacturer creates a corresponding target key for each first prefabricated key, and each target key is also unique and will not be repeated. The first prefabricated key and the target key are stored one-to-one in a cloud key system controlled by the vehicle manufacturer. For the supplier who produces keys for the vehicle manufacturer, the vehicle manufacturer will give the created first prefabricated key to the supplier for key production. Specifically, for each key produced, a unique first prefabricated key is filled into the key's security chip, and different keys are filled with different first prefabricated keys. For each key, there is unique identification information, and the identification information of a corresponding key will correspond to a unique first prefabricated key. For the corresponding relationship between the key identification information and the first prefabricated key, the supplier will give the corresponding relationship to the vehicle manufacturer, and the vehicle manufacturer will record the corresponding relationship in the cloud key system.

[0124] In this embodiment, after the target key is written into the key controller, the target key in its own security chip is sent to the key through the key controller. The key determines whether the received target key is the target key corresponding to its own first prefabricated key in the cloud key system based on its own first prefabricated key. When it is determined that the received target key is the target key corresponding to its own first prefabricated key in the cloud key system, the key controller is determined to be legal, and the key and the key controller are paired and bound based on the first prefabricated key in the key and the target key in the key controller.

[0125] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, step S101 may include: receiving a broadcast signal of a key to obtain identification information of the key; based on the identification information, obtaining a target key corresponding to the identification information in a cloud key system.

[0126] In this embodiment, if Figure 3 As shown, the key broadcasts its own identification information, and the key controller directly receives the key's broadcast signal and determines the key's identification information based on the broadcast signal. Based on the identification information, the key controller obtains the target key corresponding to the identification information from the key cloud system, and the obtained target key is written into the security chip of the key controller. The key cloud system records the correspondence between the key's identification information, the first prefabricated key, and the target key.

[0127] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, step S101 may include: receiving a target key obtained from the cloud key system by a terminal device; the terminal device is a device that can obtain the identification information of the key and can establish communication with the cloud key system.

[0128] In this embodiment, in another implementation, an engineer scans the key through a terminal device that can access the cloud key system to determine the identification information of the key, and then based on the identification information, determines the target key corresponding to the identification information by accessing the cloud key system, wherein the cloud key system records the corresponding relationship between the key identification information, the first prefabricated key and the target key, and then the terminal device writes the target key into the key controller of the key control end. The terminal device includes but is not limited to a diagnostic instrument that can legally access the cloud key system, and the diagnostic instrument will write the target key into the key controller of the key control end through the OBD interface. The key control end includes but is not limited to vehicles, and illegal diagnostic instruments not provided by vehicle manufacturers will not have access to the cloud key system.

[0129] In combination with the above embodiments, in one implementation, the present application embodiment further provides a key pairing and binding method. In the key pairing and binding method, the method further includes step S0101: obtaining a second prefabricated key corresponding to the identification information in the cloud key system, and writing the second prefabricated key.

[0130] In this embodiment, in order to ensure the transmission security of the target key used for pairing and binding the key and the key controller, the present application first performs a legitimacy check on the key controller before transmitting the target key to the key. Specifically: Figure 2As shown, based on the identification information of the key, the target key corresponding to the identification information in the cloud key system is obtained, and at the same time, the second prefabricated key corresponding to the identification information is obtained. When the key controller obtains the second prefabricated key from the cloud key system in a correct and legal manner, the obtained second prefabricated key is actually the first prefabricated key corresponding to the key in the cloud key system, and then the second prefabricated key is written into the key controller. For example, the identification information of the second key is ID2, and the first prefabricated key of the second key is PK2. The corresponding relationship between the identification information ID2 and the first prefabricated key PK2 is given to the vehicle manufacturer, and then the vehicle manufacturer will add a target key K2 based on the corresponding relationship, and then the uniquely determined corresponding relationship between the identification information ID2, the first prefabricated key PK2 and the target key K2 is stored in the cloud key system. When the key controller obtains the corresponding second prefabricated key from the cloud key system based on the identification information ID2 of the second key in a correct and legal manner, the second prefabricated key is actually the first prefabricated key PK2.

[0131] A key pairing and binding method provided in the present application also includes step S0101, and step S102 may include: based on a first prefabricated key in the key and a second prefabricated key in the key controller, performing communication authentication with the key; when the communication authentication passes, sending the target key to the key; in response to the result that the key passes the legitimacy verification of the target key based on its own first prefabricated key, pairing and binding with the key.

[0132] In this embodiment, when the first prefabricated key in the key and the second prefabricated key in the key controller are the same, it is determined that the communication authentication between the key and the key controller is passed. In different situations, the communication authentication fails. At this time, the key will not receive the target key of the key controller, and the subsequent binding pairing will not be performed. This process also ensures the security of pairing and binding between the key and the key controller to a certain extent. After the key passes the communication authentication of the key controller, the key controller sends the target key to the key. After the key receives the target key sent by the key controller, the key determines whether the received target key is the target key corresponding to its own prefabricated key in the cloud key system based on its own prefabricated key. When it is determined that the received target key is the target key corresponding to its own prefabricated key in the cloud key system, it is determined that the key controller is legal. When it is determined that the key controller corresponding to the target key is legal, it is determined that the verification is passed. At this time, based on the first prefabricated key in the key and the target key in the key controller, the key and the key controller are paired and bound.

[0133] In combination with the above embodiments, in one implementation, the embodiment of the present application also provides a method for key pairing and binding. In the key pairing and binding method, based on the first prefabricated key in the key and the second prefabricated key in the key controller, communication authentication is performed with the key, including: based on the second prefabricated key in the key controller, deriving the first Bluetooth pairing code and the first root key of the target security protocol through a derivation algorithm; when the first Bluetooth pairing code and the second Bluetooth pairing code are paired successfully and the first root key and the second root key are authenticated, determining that the communication authentication is passed; wherein the second Bluetooth pairing code and the second root key of the target security protocol are derived by the key based on its own first prefabricated key through a derivation algorithm.

[0134] In this embodiment, the key derives the second Bluetooth pairing code and the second root key of the target security protocol at the application level through a derivation algorithm based on the first prefabricated key in its own security chip. Among them, the target security protocol is preferably the ICCE protocol (Intelligent Connected Car Ecosystem Alliance). The key controller will derive the first Bluetooth pairing code and the first root key of the target security protocol at the application level through the same derivation algorithm based on the second prefabricated key in its own security chip. After deriving the first Bluetooth pairing code, the first root key, the second Bluetooth pairing code and the second root key, if the first Bluetooth pairing code derived based on the second prefabricated key in the key controller is consistent with the second Bluetooth pairing code derived based on the first prefabricated key in the key, and the first root key derived based on the second prefabricated key in the key controller is consistent with the second root key derived based on the first prefabricated key in the key, the key and the key controller will pass the authentication.

[0135] In combination with the above embodiments, in one implementation, the embodiment of the present application also provides a method for key pairing and binding. In the key pairing and binding method, in response to the result that the key passes the legitimacy check of the target key based on its own first prefabricated key, pairing and binding with the key is performed, including: in response to the result that the key passes the legitimacy check of the target key based on its own first prefabricated key and the key is disconnected, deriving a third Bluetooth pairing code and a third root key of the target security protocol based on the target key through a derivation algorithm; when the third Bluetooth pairing code and the fourth Bluetooth pairing code are successfully paired and the third root key and the fourth root key are authenticated, pairing and binding with the key is performed; wherein the fourth Bluetooth pairing code and the fourth root key of the target security protocol are derived by the key based on the received target key through a derivation algorithm.

[0136] In this embodiment, when the key passes the verification of the received target key, the received target key is stored in the security chip and the Bluetooth and application layer connections established with the key controller are disconnected. After the key disconnects the Bluetooth and application layer connections with the key controller, the key derives the fourth Bluetooth pairing code and the fourth root key of the target security protocol at the application layer through a derivation algorithm based on the target key in its own security chip. The key controller derives the third Bluetooth pairing code and the third root key of the target security protocol at the application layer through the same derivation algorithm based on the target key in its own security chip. When the third Bluetooth pairing code derived from the target key in the key controller is consistent with the fourth Bluetooth pairing code derived from the target key in the key, and the fourth root key derived from the target key in the key controller is consistent with the fourth root key derived from the target key in the key, the key and the key controller will pass the authentication, and the key and the key controller will be paired and bound. The key that has completed the pairing and binding can be used to control the key control terminal corresponding to the key controller.

[0137] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, the method further includes: when the pairing and binding is completed, receiving a control instruction encrypted and sent by the key based on the target key; decrypting the control instruction based on its own target key and executing the corresponding control operation.

[0138] In this embodiment, when the key and the key controller are paired and bound, based on the user's selection operation on the key, the key encrypts the control instruction corresponding to the selection operation based on the target key and sends it to the paired and bound key controller. The key controller decrypts the control instruction based on the target key and executes the control operation corresponding to the control instruction.

[0139] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, the method further includes: when the key and the key controller complete pairing and binding, controlling the key to delete the first prefabricated key in the key.

[0140] In this embodiment, in the implementation method of directly sending the target key, the key controller will not obtain the second prefabricated key corresponding to the key's identification information from the cloud key system. For this implementation method, in order to ensure the security of the pairing and binding of the key and the key controller, when the key and the key controller complete the pairing and binding, the key is directly controlled to delete the first prefabricated key in the key, so that the paired and bound key will no longer have the first prefabricated key, and thus cannot be paired and bound. Instead, the key needs to be returned to the factory and re-filled with the first prefabricated key before a new pairing and binding can be performed on the key again, thereby ensuring the security of the pairing and binding.

[0141] In combination with the above embodiments, in one implementation, the embodiment of the present application further provides a key pairing and binding method. In the key pairing and binding method, when the key written into the key controller is the second prefabricated key and the target key, the method further includes: when the key and the key controller complete the pairing and binding, deleting the second prefabricated key, and controlling the key to delete the first prefabricated key in the key.

[0142] In this embodiment, in an implementation method where the target key is sent only after communication authentication is passed, a second prefabricated key corresponding to the key will be obtained from the cloud key system and given to the key controller. For this implementation method, in order to ensure the security of the pairing and binding of the key and the key controller, when the key and the key controller are paired and bound, the first prefabricated key in the key and the second prefabricated key in the key controller are directly deleted, so that the paired and bound key will no longer have various prefabricated keys, and thus cannot be paired and bound. Instead, the key needs to be returned to the factory and the first prefabricated key needs to be re-filled before a new pairing and binding can be performed on the key again, thereby ensuring the security of the pairing and binding.

[0143] Based on the same inventive concept, an embodiment of the present application provides a key pairing and binding system, which is applied to keys, such as Figure 3 As shown, the system 400 includes:

[0144] The security chip 401 is used to load the first pre-made key;

[0145] The pairing and binding module 402 is used to pair and bind with the key controller based on the first prefabricated key in the key and the target key in the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

[0146] Optionally, the pairing and binding module 402 includes:

[0147] A communication authentication module, used to perform communication authentication with the key controller based on a first prefabricated key in the key and a second prefabricated key in the key controller; the second prefabricated key in the key controller is a key corresponding to the identification information obtained and written by the key controller from a cloud key system based on the identification information of the key;

[0148] A key receiving module, used for receiving a target key sent by the key controller when communication authentication is passed;

[0149] A legitimacy verification module, used for verifying the legitimacy of a target key sent by a key controller based on its own first pre-made key;

[0150] The pairing and binding submodule is used to pair and bind with the key controller when the verification passes.

[0151] Optional, communication authentication module, including:

[0152] A first derivation module, used for deriving a second Bluetooth pairing code and a second root key of a target security protocol through a derivation algorithm according to a first prefabricated key in the key;

[0153] The communication authentication submodule is used to determine that the communication authentication is successful when the first Bluetooth pairing code and the second Bluetooth pairing code are successfully paired and the first root key and the second root key are authenticated; wherein the first Bluetooth pairing code and the first root key of the target security protocol are derived by the key controller based on its own second prefabricated key through a derivation algorithm.

[0154] Optional, legality verification module, including:

[0155] A comparison module, used for comparing the check bit subkey of the first prefabricated key in the key with the check bit subkey of the received target key to obtain a comparison result;

[0156] A first legitimacy verification module, configured to verify that the verification is successful if the comparison result shows that the check bit subkey of the first prefabricated key is the same as the check bit subkey of the received target key;

[0157] The second legitimacy verification module is configured to, if the comparison result is that the check bit subkey of the first pre-made key is different from the check bit subkey of the received target key, verify failure.

[0158] Optional, pairing binding submodules, including:

[0159] A second derivation module, used for disconnecting the key controller when the verification is passed, and deriving a fourth Bluetooth pairing code and a fourth root key of the target security protocol through a derivation algorithm based on the target key in the key;

[0160] The first pairing and binding submodule is used to pair and bind with the key controller when the third Bluetooth pairing code and the fourth Bluetooth pairing code are successfully paired and the third root key and the fourth root key are authenticated; wherein the third Bluetooth pairing code and the third root key of the target security protocol are derived by the key controller based on its own target key through a derivation algorithm.

[0161] Optionally, the system 400 further includes:

[0162] The control instruction sending module is used to encrypt the control instruction based on the target key in the key and send it to the key controller after completing the pairing binding, so as to control the key controller to decrypt the control instruction based on its own target key and perform the corresponding control operation.

[0163] Optionally, the system 400 further includes:

[0164] The first key deleting module is used to delete the first prefabricated key in the key when the key and the key controller are paired and bound.

[0165] Optionally, when the key written into the key controller is the second prefabricated key and the target key, the system 300 further includes:

[0166] The second key deletion module is used to delete the first prefabricated key when the key and the key controller are paired and bound, and to control the key controller to delete the second prefabricated key in the key controller.

[0167] Based on the same inventive concept, an embodiment of the present application provides a key pairing and binding system, which is applied to a key controller, and the system includes:

[0168] A data acquisition module, used to acquire a target key corresponding to the key identification information in the cloud key system;

[0169] A security chip, used for writing the target key;

[0170] The pairing and binding module is used to pair and bind the key based on a first prefabricated key in the key and a target key in the key controller, wherein the first prefabricated key is a key pre-loaded into a security chip of the key.

[0171] Optionally, the system further includes:

[0172] A key acquisition module, used to acquire a second prefabricated key corresponding to the identification information in a cloud key system;

[0173] A security chip, used for writing the second pre-made key;

[0174] The pairing and binding module includes:

[0175] a communication authentication module, configured to perform communication authentication with the key based on a first pre-made key in the key and a second pre-made key in the key controller;

[0176] A key sending module, used for sending the target key to the key if the communication authentication is passed;

[0177] The pairing and binding submodule is used to perform pairing and binding with the key in response to the result that the key passes the validity verification of the target key based on its own first pre-made key.

[0178] Optional, communication authentication module, including:

[0179] A first derivation module, configured to derive a first Bluetooth pairing code and a first root key of a target security protocol through a derivation algorithm based on a second prefabricated key in the key controller;

[0180] The communication authentication submodule is used to determine that the communication authentication is passed when the first Bluetooth pairing code and the second Bluetooth pairing code are paired successfully and the first root key and the second root key are authenticated; wherein the second Bluetooth pairing code and the second root key of the target security protocol are derived by the key based on its own first prefabricated key through a derivation algorithm.

[0181] Optional, pairing binding submodules, including:

[0182] a second derivation module, configured to derive a third Bluetooth pairing code and a third root key of a target security protocol based on the target key by a derivation algorithm in response to a result that the key passes the legitimacy check of the target key based on its own first prefabricated key and the key is disconnected;

[0183] The first pairing and binding submodule is used to pair and bind with the key when the third Bluetooth pairing code and the fourth Bluetooth pairing code are successfully paired and the third root key and the fourth root key are authenticated; wherein the fourth Bluetooth pairing code and the fourth root key of the target security protocol are derived by the key through a derivation algorithm based on the received target key.

[0184] Optionally, the system further includes:

[0185] A control instruction receiving module, used for receiving a control instruction sent by the key based on the target key encryption when pairing and binding are completed;

[0186] The control module is used to decrypt the control instruction based on its own target key and then execute the corresponding control operation.

[0187] Optionally, the system further includes:

[0188] The first deleting module is used to control the key to delete the first prefabricated key in the key when the key and the key controller are paired and bound.

[0189] Optionally, when the key written into the key controller is the second prefabricated key and the target key, the system further includes:

[0190] The second deleting module is used to delete the second prefabricated key when the key and the key controller are paired and bound, and to control the key to delete the first prefabricated key in the key.

[0191] Based on the same inventive concept, an embodiment of the present application provides a vehicle, wherein the key of the vehicle is paired and bound based on a key pairing and binding method described in the first aspect of the present application, or the key controller of the vehicle is paired and bound based on a key pairing and binding method described in the second aspect of the present application.

[0192] Based on the same inventive concept, an embodiment of the present application provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and running on the processor, wherein when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the first aspect of the present application are implemented, or when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the second aspect of the present application are implemented.

[0193] Based on the same inventive concept, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps in a key pairing and binding method as described in the first aspect of the present application are implemented, or when the computer program is executed by the processor, the steps in a key pairing and binding method as described in the second aspect of the present application are implemented.

[0194] As for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the system embodiment.

[0195] It should be noted that, for the method embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present application are not limited by the described order of actions, because according to the embodiments of the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present application.

[0196] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0197] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the embodiments of the present application may adopt the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0198] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0199] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0200] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0201] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.

[0202] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0203] The above is a detailed introduction to a key pairing and binding method, system and vehicle provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A method for key pairing and binding, It is characterized in that Applied to a key, the method comprises: Filling the first pre-made key into the security chip of the key; Based on the first prefabricated key in the key and the target key in the key controller, pairing and binding are performed with the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

2. A key pairing and binding method according to claim 1, It is characterized in that Based on the first prefabricated key in the key and the target key in the key controller, pairing and binding with the key controller includes: Based on the first prefabricated key in the key and the second prefabricated key in the key controller, communication authentication is performed with the key controller; the second prefabricated key in the key controller is a key corresponding to the identification information obtained and written by the key controller from the cloud key system based on the identification information of the key; When the communication authentication is passed, receiving the target key sent by the key controller; Performing a legitimacy check on the target key sent by the key controller based on its own first pre-made key; If the verification is passed, pairing and binding with the key controller is performed.

3. A key pairing and binding method according to claim 2, It is characterized in that Based on a first prefabricated key in the key and a second prefabricated key in the key controller, performing communication authentication with the key controller includes: deriving a second Bluetooth pairing code and a second root key of a target security protocol through a derivation algorithm according to the first prefabricated key in the key; When the first Bluetooth pairing code and the second Bluetooth pairing code are successfully paired and the first root key and the second root key are authenticated, it is determined that the communication authentication is successful; wherein, the first Bluetooth pairing code and the first root key of the target security protocol are derived by the key controller based on its own second prefabricated key through a derivation algorithm.

4. A key pairing and binding method according to claim 2, It is characterized in that Performing a validity check on the target key sent by the key controller based on its own first pre-made key, including: Compare the check bit subkey of the first prefabricated key in the key with the check bit subkey of the received target key to obtain a comparison result; If the comparison result is that the check bit subkey of the first pre-made key is the same as the check bit subkey of the received target key, the verification is passed; If the comparison result is that the check bit subkey of the first pre-made key is different from the check bit subkey of the received target key, the verification fails.

5. A key pairing and binding method according to claim 2, It is characterized in that If the verification is passed, pairing and binding with the key controller is performed, including: If the verification is passed, disconnecting from the key controller, and deriving a fourth Bluetooth pairing code and a fourth root key of the target security protocol through a derivation algorithm based on the target key in the key; When the third Bluetooth pairing code and the fourth Bluetooth pairing code are paired successfully and the third root key and the fourth root key are authenticated, pairing and binding are performed with the key controller; wherein the third Bluetooth pairing code and the third root key of the target security protocol are derived by the key controller based on its own target key through a derivation algorithm.

6. A key pairing and binding method according to claim 5, It is characterized in that The method further comprises: When pairing and binding are completed, the control instruction is encrypted based on the target key in the key and sent to the key controller, so that the key controller decrypts the control instruction based on its own target key and performs the corresponding control operation.

7. A key pairing and binding method according to claim 1, It is characterized in that The method further comprises: When the key and the key controller are paired and bound, the first pre-made key in the key is deleted.

8. A key pairing and binding method according to any one of claims 2 to 5, It is characterized in that In the case where the key written into the key controller is the second prefabricated key and the target key, the method further includes: When the key and the key controller are paired and bound, the first pre-made key is deleted, and the key controller is controlled to delete the second pre-made key in the key controller.

9. A method for key pairing and binding, It is characterized in that Applied to a key controller, the method comprises: Obtain the target key corresponding to the key identification information in the cloud key system; Writing the target key; Based on a first prefabricated key in the key and a target key in the key controller, pairing and binding are performed with the key, where the first prefabricated key is a key pre-loaded into a security chip of the key.

10. A key pairing and binding method according to claim 9, It is characterized in that Obtain the target key corresponding to the key identification information in the cloud key system, including: Receive the broadcast signal of the key and obtain the identification information of the key; Based on the identification information, a target key corresponding to the identification information in the cloud key system is obtained.

11. A key pairing and binding method according to claim 9, It is characterized in that Obtain the target key corresponding to the key identification information in the cloud key system, including: Receive a target key obtained from the cloud key system by a terminal device; the terminal device is a device that can obtain identification information of the key and establish communication with the cloud key system.

12. A key pairing and binding method according to claim 9, It is characterized in that The method further comprises: Obtain a second pre-made key corresponding to the identification information in the cloud key system; Writing the second prefabricated key; The pairing and binding with the key based on the first prefabricated key in the key and the target key in the key controller includes: Based on a first pre-made key in the key and a second pre-made key in the key controller, performing communication authentication with the key; If the communication authentication is passed, sending the target key to the key; In response to a result that the key passes the legitimacy check of the target key based on its own first pre-made key, pairing and binding with the key is performed.

13. A key pairing and binding method according to claim 12, It is characterized in that Based on a first pre-made key in the key and a second pre-made key in the key controller, performing communication authentication with the key, comprising: Based on the second pre-made key in the key controller, derive a first Bluetooth pairing code and a first root key of a target security protocol through a derivation algorithm; When the first Bluetooth pairing code and the second Bluetooth pairing code are paired successfully and the first root key and the second root key are authenticated, it is determined that the communication authentication is successful; wherein the second Bluetooth pairing code and the second root key of the target security protocol are derived by the key based on its own first prefabricated key through a derivation algorithm.

14. A key pairing and binding method according to claim 12, It is characterized in that In response to a result that the key passes the legitimacy check of the target key based on the first pre-made key of the key, pairing and binding with the key comprises: In response to a result that the key passes the legitimacy check of the target key based on its own first pre-made key and the key is disconnected, deriving a third Bluetooth pairing code and a third root key of the target security protocol based on the target key through a derivation algorithm; When the third Bluetooth pairing code and the fourth Bluetooth pairing code are paired successfully and the third root key and the fourth root key are authenticated, they are paired and bound with the key; wherein the fourth Bluetooth pairing code and the fourth root key of the target security protocol are derived by the key through a derivation algorithm based on the received target key.

15. A key pairing and binding method according to claim 9, It is characterized in that The method further comprises: When pairing and binding are completed, the receiving key encrypts and sends control instructions based on the target key; The control instruction is decrypted based on its own target key and then the corresponding control operation is executed.

16. A key pairing and binding method according to claim 9, It is characterized in that The method further comprises: When the key and the key controller are paired and bound, the key is controlled to delete the first pre-made key in the key.

17. A key pairing and binding method according to any one of claims 12 to 14, It is characterized in that In the case where the key written into the key controller is the second prefabricated key and the target key, the method further includes: When the key and the key controller are paired and bound, the second pre-made key is deleted, and the key is controlled to delete the first pre-made key in the key.

18. A key pairing binding system, It is characterized in that Applied to a key, the system comprises: A security chip, used for loading a first pre-made key; A pairing and binding module is used to pair and bind with the key controller based on the first prefabricated key in the key and the target key in the key controller; the target key is based on the identification information of the key, and the key corresponding to the identification information is obtained from the cloud key system and written into the key controller.

19. A key pairing and binding system, It is characterized in that Applied to a key controller, the system comprises: A data acquisition module, used to acquire a target key corresponding to the key identification information in the cloud key system; A security chip, used for writing the target key; The pairing and binding module is used to pair and bind the key based on a first prefabricated key in the key and a target key in the key controller, wherein the first prefabricated key is a key pre-loaded into a security chip of the key.

20. A vehicle, It is characterized in that The key of the vehicle is paired and bound based on a key pairing and binding method as described in any one of claims 1 to 8, or the key controller of the vehicle is paired and bound based on a key pairing and binding method as described in any one of claims 9 to 17.

21. An electronic device, It is characterized in that include: A processor, a memory, and a computer program stored in the memory and running on the processor, wherein the computer program, when executed by the processor, implements the steps in a key pairing and binding method as described in any one of claims 1 to 8, or the computer program, when executed by the processor, implements the steps in a key pairing and binding method as described in any one of claims 9 to 17.

22. A computer-readable storage medium, It is characterized in that The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps in a key pairing and binding method as described in any one of claims 1 to 8, or the computer program, when executed by the processor, implements the steps in a key pairing and binding method as described in any one of claims 9 to 17.

Images