Digital key creating method and device, equipment and medium

Abstract

The invention provides a digital key creating method and device, equipment and a medium, and relates to the technical field of communication, and the method comprises the steps: receiving a terminal public key certificate sent by a target terminal; wherein the terminal public key certificate is obtained by signing a terminal public key of the target terminal by adopting a motorcade pairing private key; performing signature verification on the terminal public key certificate by adopting the motorcade pairing public key; sending a vehicle public key certificate of the target vehicle to the target terminal under the condition that the signature verification is successful and the terminal public key is acquired; and in response to a received signature verification success notification sent by the target terminal, determining that the digital key which corresponds to the target terminal and is used for controlling the target vehicle is successfully created. Therefore, the constraint that the user needs to have other keys of the target vehicle is not needed, so that the user can conveniently and flexibly apply for the vehicle in the motorcade for use, the vehicle lifting efficiency of the user is improved, and the vehicle using experience of the user is improved.

Description

Technical Field

[0001] The present application relates to the field of communication processing technology, and in particular to a method, device, equipment and medium for creating a digital key. Background Art

[0002] In the digital key system based on the public-private key pair mechanism and certificate system, assuming that the terminal device used by the car owner (hereinafter referred to as the car owner device) and the vehicle each have a pair of public-private key pairs, and the vehicle holds the public key of the car owner device (hereinafter referred to as the car owner device public key) through some pre-placement method, and the car owner device also holds the vehicle public key through some pre-placement method, it can be considered that mutual trust is completed between the vehicle and the car owner device, that is, the car owner device can become the digital key of the vehicle. Therefore, the digital key creation process of the car owner device is also called the process of exchanging public keys between the car owner device and the vehicle.

[0003] In the related technology, under the fleet management system, in order for any car user to use the vehicle in the fleet, he needs to execute the complete digital key creation process. During the execution of the digital key creation process, the car user needs to enter the vehicle pairing code on the vehicle's central control screen (the vehicle pairing code is sent from the cloud to the terminal device used by the car user (hereinafter referred to as the car user device)), and then the vehicle verifies the vehicle pairing code and enters the communication connection establishment mode after the verification is passed. Through the communication connection establishment mode, the mutual trust between the vehicle and the car user's device is completed to create the car user's digital key.

[0004] However, this method requires the user to have entered the vehicle with other keys, which means that the user must have other keys to the vehicle. The above constraints will complicate the actual first-time vehicle use process for the user, resulting in low vehicle pick-up efficiency and poor vehicle use experience. Summary of the invention

[0005] The present application aims to solve one of the technical problems in the related art at least to some extent.

[0006] To this end, the present application proposes a method, device, equipment and medium for creating a digital key, so as to achieve the goal of not being subject to the constraint that "the car user needs to have other keys of the target vehicle", so that the car user can apply for the use of fleet vehicles conveniently and flexibly, improve the car user's efficiency in picking up the vehicle, and improve the car user's car experience.

[0007] The first embodiment of the present application proposes a method for creating a digital key, which is applied to a target vehicle in a fleet, including:

[0008] Receive a terminal public key certificate sent by the target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle;

[0009] Use the fleet pairing public key in the fleet pairing public-private key pair to verify the signature of the terminal public key certificate;

[0010] If the signature verification is successful and the terminal public key is obtained, the vehicle public key certificate of the target vehicle is sent to the target terminal;

[0011] In response to receiving a signature verification success notification sent by the target terminal, it is determined that a digital key corresponding to the target terminal and used to control the target vehicle is successfully created.

[0012] The second aspect of the present application provides a method for creating a digital key, which is applied to a target terminal and includes:

[0013] Send a terminal public key certificate to the target vehicle in the fleet; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle;

[0014] Receive the vehicle public key certificate sent by the target vehicle; the vehicle public key certificate is the target vehicle using the fleet pairing public key in the fleet pairing public-private key pair to verify the terminal public key certificate, and send it when the verification is successful and the terminal public key is obtained;

[0015] The vehicle public key certificate is verified, and if the verification is successful and the vehicle public key of the target vehicle is obtained, a verification success notification is sent to the target vehicle.

[0016] The third aspect of the present application provides a digital key creation device, which is applied to a target vehicle in a fleet, including:

[0017] A receiving module, used for receiving a terminal public key certificate sent by a target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle;

[0018] The signature verification module is used to verify the signature of the terminal public key certificate using the fleet pairing public key in the fleet pairing public-private key pair;

[0019] The sending module is used to send the vehicle public key certificate of the target vehicle to the target terminal when the signature verification is successful and the terminal public key is obtained;

[0020] The determination module is used to determine that the digital key corresponding to the target terminal for controlling the target vehicle is successfully created in response to receiving a signature verification success notification sent by the target terminal.

[0021] The fourth aspect of the present application provides a digital key creation device, which is applied to a target terminal and includes:

[0022] A sending module is used to send a terminal public key certificate to a target vehicle in a fleet; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle;

[0023] A receiving module is used to receive a vehicle public key certificate sent by a target vehicle; wherein the vehicle public key certificate is a certificate of a terminal public key that is verified by the target vehicle using the fleet paired public key in the fleet paired public-private key pair, and is sent when the verification is successful and the terminal public key is obtained;

[0024] The signature verification module is used to verify the signature of the vehicle public key certificate;

[0025] The sending module is also used to send a signature verification success notification to the target vehicle when the signature verification is successful and the vehicle public key of the target vehicle is obtained.

[0026] The fifth aspect of the present application proposes an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the method for creating a digital key as described in the first aspect above, or implements the method for creating a digital key as described in the second aspect above.

[0027] The sixth aspect embodiment of the present application proposes a non-temporary computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements the method for creating a digital key as described in the first aspect above, or implements the method for creating a digital key as described in the second aspect above.

[0028] The seventh aspect embodiment of the present application proposes a computer program product, on which a computer program is stored. When the computer program is executed by a processor, it implements the method for creating a digital key as described in the first aspect above, or implements the method for creating a digital key as described in the second aspect above.

[0029] The digital key creation method, device, equipment and medium proposed in the present application maintain an additional fleet pair of public-private key pairs for each fleet vehicle, which is used to subsequently issue a terminal public key certificate of the target terminal of the vehicle user. As a result, there is no need for the vehicle user to enter the target vehicle and enter the vehicle pairing code of the pairing process on the central control screen of the target vehicle. The target vehicle uses the device pairing code of the pairing process to verify the vehicle pairing code to confirm the correctness of the pairing process. This allows the vehicle user to apply for the use of fleet vehicles conveniently and flexibly, improves the efficiency of the vehicle pick-up, and improves the vehicle user experience. That is, in this application, an additional digital key certificate chain is added to the vehicle digital key certificate system (for example, in addition to the existing cloud public key certificate, vehicle public key certificate and owner device public key certificate, a terminal public key certificate of the target terminal used by the vehicle user (or called the vehicle user device public key certificate), and a fleet pairing public key certificate generated based on the fleet pairing public-private key pair) is added. It can be compatible with the ability to identify the new digital key certificate system, thereby improving the constraint of "the vehicle user needs to have other keys for the vehicle" when the vehicle user uses the vehicle for the first time and creates the digital key of the target terminal used by the vehicle user, thereby improving the vehicle user experience and the convenience of fleet vehicle management.

[0030] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0032] Figure 1 This is a schematic diagram of the existing certificate structure;

[0033] Figure 2 This is a schematic diagram of the existing digital key public and private key pair system;

[0034] Figure 3 This is a schematic diagram of the existing digital key certificate chain;

[0035] Figure 4 Create a process diagram for existing car owners' digital keys;

[0036] Figure 5 A schematic diagram of a flow chart of a first method for creating a digital key provided in an embodiment of the present application;

[0037] Figure 6 A schematic diagram of a flow chart of a second method for creating a digital key provided in an embodiment of the present application;

[0038] Figure 7A schematic diagram of a flow chart of a third method for creating a digital key provided in an embodiment of the present application;

[0039] Figure 8 A schematic diagram of the fleet vehicle registration process provided in an embodiment of the present application;

[0040] Fig. 9 A schematic diagram of a fleet vehicle deregistration process provided in an embodiment of the present application;

[0041] Fig.10 A schematic diagram of the deregistration process for a fleet vehicle provided in an embodiment of the present application;

[0042] Fig.11 A schematic diagram of a fourth method for creating a digital key provided in an embodiment of the present application;

[0043] Fig.12 A schematic diagram of a fifth method for creating a digital key provided in an embodiment of the present application;

[0044] Fig.13 A schematic diagram of the improved digital key public and private key pair system provided in the embodiment of the present application;

[0045] Fig.14 A schematic diagram of an improved digital key certificate chain provided in an embodiment of the present application;

[0046] Fig.15 A schematic diagram of the process of creating a digital key for a car user provided in an embodiment of the present application;

[0047] Fig.16 A schematic diagram of the structure of a digital key creation device provided in an embodiment of the present application;

[0048] Fig.17 A schematic diagram of the structure of another device for creating a digital key provided in an embodiment of the present application;

[0049] Fig.18 is a block diagram of a target vehicle according to an exemplary embodiment. DETAILED DESCRIPTION

[0050] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0051] Digital keys based on Bluetooth, NFC (Near Field Communication, also known as short-range wireless communication) and UWB (Ultra-Wide Band) communications terminals (such as mobile phones) are already very popular in various models of major car companies. Users can create digital keys for car owners on their own, allowing them to unlock the vehicle directly through the terminal later, greatly improving the user experience of the vehicle.

[0052] As a common mode of vehicle operation, fleets are more common in the commercial operation models of companies such as taxi companies and freight truck companies. They usually have the characteristic that the matching relationship between people and vehicles is prone to change. The digital key function that allows users to independently create digital keys for car owners can help improve the car experience of relevant car users.

[0053] Therefore, how to design a more user-friendly fleet digital key management system based on the digital key function has also become a consideration for automakers when designing vehicle digital key functions.

[0054] From a security perspective, a public-private key pair is a commonly used digital key security solution that ensures the information security of both parties in communication by implementing three basic conditions:

[0055] 1. In a pair of public and private keys, the private key is stored at one end and is not easily leaked, while the public key can be released to the outside;

[0056] 2. For the same public-private key pair, the content signed by the private key can be verified by the public key;

[0057] 3. For the communicating parties A and B who are communicating with each other, party A holds its own public-private key pair and the public key of party B, and party B holds its own public-private key pair and the public key of party A;

[0058] After the above three prerequisites are met, the communicating parties can use their own private keys to sign the communication content and then transmit it. Only when the other party successfully completes the signature using the public key can it accept the received message content.

[0059] In order to enable the public key to be transmitted between the terminals, a method such as Figure 1 The certificate structure shown. Figure 1 In the certificate, the certificate name is the name of the certificate; the certificate body is the main content that the certificate wants to encapsulate or transmit. For example, when transmitting public key A, public key A can be the certificate body; the certificate signature is the complete signature of the certificate, usually signed by a private key, and its corresponding public key can verify the signature, thereby ensuring that the communication peer completes the security authorization of the received certificate content.

[0060] Furthermore, in a digital key system based on a public-private key pair mechanism and a certificate system, assuming that the terminal device (hereinafter referred to as the owner device) used by the car owner (i.e., the user who expects to use the vehicle this time) and the vehicle each have a pair of public-private key pairs, and the vehicle holds the owner device public key in some pre-placement manner, and the owner device also holds the vehicle public key in some pre-placement manner, it can be considered that mutual trust is achieved between the vehicle and the owner device, that is, the owner device can become the digital key of the vehicle. Therefore, the process of creating the digital key of the owner device is also called the process of exchanging public keys between the owner device and the vehicle.

[0061] Based on the above description, the digital key public and private key pair system and certificate chain are introduced as follows: Figure 2 and Figure 3 As shown. Among them, Figure 2 In the figure, the public and private key pairs of the digital keys are marked. When all ends in the system are in the initial state, the public and private key pairs held by oneself are marked.

[0062] Figure 3 In the Figure 2 The certificate style used when each public key generates a certificate also includes the verification relationship between each certificate, that is, the public key in the upper-level certificate can verify the signature of the lower-level certificate, so that the system can recognize the public key in the lower-level certificate, and this public key can verify the signature of the lower-level certificate, and so on. A single system can use a root certificate and a series of sub-certificates to recognize the public keys in certificates at all levels received in the system after completing a series of verifications.

[0063] Based on the above premise, the current common process of creating a digital key for a car owner is as follows: Figure 4 As shown, it mainly includes the following steps:

[0064] 1. Before the owner's digital key is created, the cloud obtains the cloud public key certificate by self-signing the cloud public key. For example, when the cloud is a car factory cloud service with vehicle management function, the cloud public key can be the car factory public key, and the cloud public key certificate can be the car factory public key certificate (A);

[0065] Through the customized vehicle-to-cloud communication link or the self-built production line data filling capability of the car manufacturer, the vehicle obtains the car manufacturer's public key certificate (A) and the vehicle public key certificate (B); through the communication link between the car manufacturer and the car manufacturer's APP (Application) installed on the car owner's device, the car owner's device obtains the car manufacturer's public key certificate (A) and the car owner's device public key certificate (C);

[0066] 2. When the car owner wants to use the car owner's device to complete the creation of the digital key, a request for the car owner's digital key creation is sent to the cloud (i.e., the car manufacturer's cloud service);

[0067] 3. The cloud (i.e., the car manufacturer's cloud service) responds to the car owner's digital key creation request, returns the vehicle pairing code to the car owner's device, and sends the device pairing code to the corresponding vehicle;

[0068] 4. The owner enters the vehicle pairing code received by the owner's device on the vehicle's central control screen;

[0069] 5. The vehicle verifies the vehicle pairing code based on the received device pairing code to confirm the correctness of the pairing process, and then enters the communication connection establishment mode to establish a secure communication connection with the owner's device through NFC, Bluetooth, or UWB;

[0070] 6. The vehicle sends the vehicle public key certificate (B) to the vehicle owner's device through the above communication connection;

[0071] 7. The owner's device verifies the signature of the vehicle public key certificate (B) through the cloud public key (such as the manufacturer's public key), and obtains the vehicle public key after the signature verification is correct;

[0072] 8. The owner's device sends the owner's device public key certificate (C) to the vehicle;

[0073] 9. The vehicle verifies the signature of the owner's device public key certificate (C) through the cloud public key (such as the manufacturer's public key), and obtains the owner's device public key after the signature verification is correct;

[0074] 10. The vehicle returns a successful signature verification notification to the owner’s device.

[0075] After the above process, the vehicle can exchange the public key with the owner's device, complete mutual trust, and communicate securely thereafter, which means that the owner's digital key is successfully created.

[0076] Under the fleet management system, the vehicle user can then use the owner's digital key on his or her own terminal device to complete the use of the vehicle, that is, the vehicle user enters the vehicle use status.

[0077] In the above scheme, in order to use the vehicles in the fleet, the user needs to complete the owner digital key creation process. In step 4 of the above owner digital key creation process, the user needs to enter the vehicle pairing code received by the owner's device on the vehicle's central control screen. This process requires that the user can already enter the vehicle with other keys, which restricts the condition that "the user needs to have other keys for the vehicle". The above constraints will complicate the actual first-time vehicle use process for the user, resulting in low vehicle pick-up efficiency and poor vehicle experience.

[0078] In response to the above-mentioned technical problems, this application mainly proposes a method, device, equipment and medium for creating a digital key.

[0079] The following describes the method, apparatus, device and medium for creating a digital key according to an embodiment of the present application with reference to the accompanying drawings.

[0080] Figure 5 A flowchart of the first method for creating a digital key provided in an embodiment of the present application.

[0081] The method for creating a digital key according to the embodiment of the present application can be applied to a target vehicle, wherein the target vehicle can be any vehicle in a fleet.

[0082] like Figure 5 As shown, the method for creating a digital key may include the following steps S501 to S504:

[0083] Step S501, receiving a terminal public key certificate sent by a target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using a fleet pairing private key in a fleet pairing public-private key pair associated with the target vehicle.

[0084] Among them, the target terminal can be any terminal device used by a user who wishes to use the target vehicle, including but not limited to smart phones, tablet computers, personal digital assistants, wearable devices and other hardware devices with various operating systems, touch screens and / or display screens.

[0085] Among them, the fleet pairing public-private key pair includes a fleet pairing public key and a fleet pairing private key, which is a public-private key pair generated or created by the cloud for the target vehicle when the target vehicle performs a fleet vehicle registration action.

[0086] The terminal public key is the public key in the public-private key pair generated by the target terminal.

[0087] Among them, the terminal public key certificate (or the vehicle user's device public key certificate) can be obtained by responding to the digital key creation request sent by the target terminal through the cloud, using the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle to sign the terminal public key of the target terminal carried in the digital key creation request.

[0088] Among them, the terminal public key certificate contains the certificate name, certificate body and certificate signature. The certificate name is the name of the terminal public key certificate, the certificate body contains the terminal public key of the target terminal, and the certificate signature is the complete signature of the terminal public key certificate. For example, the fleet paired private key is used to sign the terminal public key to obtain a complete certificate signature.

[0089] In an embodiment of the present application, when the target terminal approaches the target vehicle, the target terminal can establish a communication link with the target vehicle through communication methods such as NFC, Bluetooth, UWB, etc., and based on the communication link, send the terminal public key certificate to the target vehicle. Correspondingly, the target vehicle can receive the terminal public key certificate sent by the target terminal.

[0090] Step S502: Use the fleet pairing public key in the fleet pairing public-private key pair to verify the signature of the terminal public key certificate.

[0091] Among them, signature verification is the process of verifying the validity of the digital signature to ensure the integrity of the data and the authenticity of the source.

[0092] In an embodiment of the present application, the target vehicle can use the fleet pairing public key in the fleet pairing public-private key pair to verify the signature of the terminal public key certificate.

[0093] Step S503, when the signature verification is successful and the terminal public key is obtained, the vehicle public key certificate of the target vehicle is sent to the target terminal.

[0094] Among them, the vehicle public key certificate contains a certificate name, a certificate body and a certificate signature. The certificate name is the name of the vehicle public key certificate, the certificate body contains the vehicle public key of the target vehicle, and the certificate signature is the complete signature of the vehicle public key certificate.

[0095] In an embodiment of the present application, when the signature verification is successful or correct, the target vehicle can obtain a trusted terminal public key from the certificate body of the terminal public key certificate. At this time, the target vehicle can further send the vehicle public key certificate of the target vehicle to the target terminal.

[0096] Step S504, in response to receiving the signature verification success notification sent by the target terminal, determining that the digital key corresponding to the target terminal for controlling the target vehicle is successfully created.

[0097] In any embodiment of the present application, the signature verification success notification may be sent by the target terminal in response to successful signature verification of the vehicle public key certificate and acquisition of the vehicle public key of the target vehicle.

[0098] Among them, the vehicle public key is the public key in the public-private key pair generated by the target vehicle.

[0099] In an embodiment of the present application, when the target terminal receives the vehicle public key certificate sent by the target vehicle, it can verify the signature of the vehicle public key certificate. If the verification is successful or correct, it can obtain the trusted vehicle public key from the certificate body of the vehicle public key certificate and send a successful verification notification to the target vehicle.

[0100] Correspondingly, when the target vehicle receives the notification of successful signature verification, it can be determined that the target vehicle and the target terminal both hold each other's public keys, that is, the digital key of the target terminal is successfully created.

[0101] The method for creating a digital key in the embodiment of the present application maintains an additional fleet pair of public-private key pairs for each fleet vehicle, which is used to subsequently issue a terminal public key certificate of the target terminal of the vehicle user. As a result, the vehicle user does not need to enter the target vehicle and enter the vehicle pairing code of the pairing process on the central control screen of the target vehicle. The target vehicle uses the device pairing code of the pairing process to verify the vehicle pairing code to confirm the correctness of the pairing process. This allows the vehicle user to apply for the use of fleet vehicles conveniently and flexibly, improves the efficiency of the vehicle pick-up, and improves the vehicle user experience. That is, in this application, an additional digital key certificate chain is added to the vehicle digital key certificate system (for example, in addition to the existing cloud public key certificate, vehicle public key certificate and owner device public key certificate, a terminal public key certificate of the target terminal used by the vehicle user (or called the vehicle user device public key certificate), a fleet pairing public key certificate generated based on the fleet pairing public-private key pair, and relevant certificates are issued to the target terminal and target vehicle), which can be compatible with the ability to identify the new digital key certificate system, thereby improving the constraint of "the vehicle user needs to have other keys for the vehicle" when the vehicle user uses the vehicle for the first time and creates the digital key of the target terminal used by the vehicle user, thereby improving the vehicle user experience and the convenience of fleet vehicle management.

[0102] The present application embodiment provides another method for creating a digital key. Figure 6 A schematic diagram of a flow chart of a second method for creating a digital key provided in an embodiment of the present application, wherein the method for creating a digital key can be applied to a target vehicle.

[0103] It should be noted that the method for creating a digital key can be executed alone, or it can be executed in combination with any embodiment in the present application or a possible implementation method in the embodiment, or it can be executed in combination with any technical solution in the relevant technology, and the embodiments of the present application are not limited to this.

[0104] like Figure 6 As shown, the method for creating a digital key may include the following steps S601 to S604:

[0105] Step S601: receiving a terminal public key certificate sent by a target terminal.

[0106] The terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle.

[0107] Step S602: Use the fleet pairing public key in the fleet pairing public-private key pair to verify the signature of the terminal public key certificate.

[0108] The explanation of steps S601 to S602 can be found in the relevant description in any embodiment of the present application and will not be repeated here.

[0109] Step S603, when the signature verification is successful and the terminal public key is obtained, the vehicle public key certificate of the target vehicle is sent to the target terminal; wherein the vehicle public key certificate is obtained by signing the vehicle public key of the target vehicle using the cloud private key in the cloud.

[0110] Among them, the cloud private key is the private key in the public-private key pair generated by the cloud.

[0111] The cloud has the function of managing vehicles. For example, the cloud can be a car factory cloud service. In this case, the cloud private key can also be called the car factory private key generated by the car factory cloud service. Correspondingly, the public key in the public-private key pair generated by the cloud is recorded as the cloud public key in this application, and can also be called the car factory public key generated by the car factory cloud service.

[0112] In an embodiment of the present application, when the signature verification is successful or correct, the target vehicle can obtain a trusted terminal public key from the certificate body of the terminal public key certificate. At this time, the target vehicle can further send the vehicle public key certificate of the target vehicle to the target terminal.

[0113] Among them, the vehicle public key certificate is obtained by signing the vehicle public key of the target vehicle with the cloud private key. For example, the target vehicle can send the vehicle public key to the cloud through the vehicle-cloud communication link customized by the car manufacturer, and the cloud can sign the vehicle public key with the cloud private key to obtain the vehicle public key certificate. After that, the cloud can obtain the vehicle public key certificate through the vehicle-cloud communication link customized by the car manufacturer or the data filling capability of the car manufacturer's self-built production line.

[0114] Step S604, in response to receiving the successful signature verification notification sent by the target terminal, determining that the digital key corresponding to the target terminal for controlling the target vehicle is successfully created; wherein, the successful signature verification notification is sent by the target terminal when the vehicle public key certificate is verified by the cloud public key and the vehicle public key of the target vehicle is obtained.

[0115] In the embodiment of the present application, when the target terminal receives the vehicle public key certificate sent by the target vehicle, it can use the cloud public key to verify the signature of the vehicle public key certificate. When the signature verification is successful or correct, it obtains the trusted vehicle public key from the certificate body of the vehicle public key certificate and sends a successful signature verification notification to the target vehicle. Accordingly, when the target vehicle receives the successful signature verification notification, it can be determined that the target vehicle and the target terminal both hold each other's public keys, that is, the digital key of the target terminal is successfully created.

[0116] In any embodiment of the present application, the target vehicle may adopt the following steps A to C to obtain the cloud public key:

[0117] Step A: The target vehicle receives the cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by the cloud using the cloud private key to self-sign the cloud public key.

[0118] Step B: The target vehicle verifies the signature of the cloud public key certificate.

[0119] As an example, the target vehicle may obtain and trust the cloud certificate fingerprint or cloud public key in advance, and verify the cloud public key certificate based on the cloud certificate fingerprint or cloud public key.

[0120] Step C: If the signature verification is successful, the target vehicle can extract the cloud public key from the certificate body of the cloud public key certificate.

[0121] The method for creating a digital key in the embodiment of the present application can be implemented by using a cloud public key with a vehicle management function to sign the vehicle public key of the target vehicle, so that the target vehicle can effectively obtain the vehicle public key certificate.

[0122] The present application embodiment provides another method for creating a digital key. Figure 7 A schematic diagram of a process flow of a third method for creating a digital key provided in an embodiment of the present application. The method for creating a digital key can be applied to a target vehicle.

[0123] It should be noted that the method for creating a digital key can be executed alone, or it can be executed in combination with any embodiment in the present application or a possible implementation method in the embodiment, or it can be executed in combination with any technical solution in the relevant technology, and the embodiments of the present application are not limited to this.

[0124] like Figure 7 As shown, based on any of the above embodiments, the target vehicle can obtain the fleet pairing public key by following the steps S701 to S703:

[0125] Step S701, sending a fleet vehicle registration application to the cloud; wherein the fleet vehicle registration application is used to register the vehicle in the cloud and generate a fleet pairing public key certificate for the target vehicle.

[0126] It should be noted that the above embodiments all require that the target vehicle has completed the fleet vehicle registration action, so it is necessary to introduce the fleet vehicle registration process, that is, the target vehicle needs to execute the fleet vehicle registration process.

[0127] In this application, the target vehicle can send a fleet vehicle registration application to the cloud. Accordingly, when the cloud receives the fleet vehicle registration application, it can respond to the fleet vehicle registration application, register the vehicle for the registration application information carried in the fleet vehicle registration application, and generate a fleet pairing public key certificate for the target vehicle.

[0128] As a possible implementation, upon receiving a fleet vehicle registration application, the cloud may perform the following steps A' to D':

[0129] Step A': The cloud may respond to the fleet vehicle registration application and verify the registration application information carried in the fleet vehicle registration application.

[0130] Among them, the registration application information includes the vehicle number, model, vehicle color and other information of the target vehicle.

[0131] Exemplarily, the fleet manager may manually verify the registration application information through the cloud backend, that is, the fleet manager may authorize the target vehicle to join the fleet.

[0132] Step B': If the verification is successful, the cloud registers the registration application information and creates a fleet-paired public-private key pair for the target vehicle.

[0133] Step C': The cloud can use the cloud private key to sign the fleet pairing public key in the fleet pairing public-private key pair associated with the target vehicle to obtain a fleet pairing public key certificate.

[0134] Step D': The cloud can send the fleet pairing public key certificate to the target vehicle.

[0135] In this way, it is possible to effectively generate a vehicle pairing public key certificate for the target vehicle through the fleet vehicle registration process.

[0136] Step S702, receiving and storing the fleet pairing public key certificate sent by the cloud.

[0137] In an embodiment of the present application, the target vehicle may receive a fleet pairing public key certificate sent by the cloud in response to a fleet vehicle registration application, and store the fleet pairing public key certificate locally.

[0138] Step S703: Use the cloud public key to verify the fleet pairing public key certificate to obtain the fleet pairing public key.

[0139] It should be noted that the explanation of the cloud public key in the above embodiment is also applicable to this embodiment and will not be repeated here.

[0140] In an embodiment of the present application, the target vehicle can use the cloud public key to verify the signature of the fleet pairing public key certificate. If the signature verification is successful or correct, the fleet pairing public key is extracted from the certificate body of the fleet pairing public key certificate.

[0141] The method for creating a digital key in the embodiment of the present application can enable the target vehicle to effectively obtain the fleet pairing public key in the fleet pairing public-private key pair through the fleet vehicle registration process.

[0142] In the above embodiments, the target vehicle is required to be a vehicle that has completed the fleet vehicle registration action, so a fleet vehicle registration process needs to be introduced. For example, the fleet vehicle registration process can be as follows: Figure 8 As shown, it mainly includes the following steps:

[0143] a. Before the target vehicle in the fleet is registered, the cloud (or the car factory cloud service) obtains the cloud public key certificate by self-signing the cloud public key (or the car factory public key). For example, when the cloud is a car factory cloud service with vehicle management function, the cloud public key can be the car factory public key, and the cloud public key certificate can be the car factory public key certificate (A).

[0144] Through the car manufacturer's customized car-cloud communication link or the car manufacturer's self-built production line data filling capability, the target vehicle obtains the certificate (A) and the vehicle public key certificate (B).

[0145] b. The fleet manager initiates a fleet vehicle registration application to the cloud by operating the target vehicle's central control screen.

[0146] c. The fleet manager verifies the registration application information in the fleet vehicle registration application through the cloud backend.

[0147] d. After the cloud backend verifies that the registration application information is correct, it will pair a public-private key pair for the target vehicle production fleet, and use the cloud private key (or the vehicle manufacturer's private key) to sign the fleet pairing public key in the fleet pairing public-private key pair to obtain the fleet pairing public key certificate (D).

[0148] e. The cloud sends the fleet paired public key certificate (D) to the target vehicle.

[0149] f. The target vehicle receives the fleet pairing public key certificate (D) and verifies the signature of the fleet pairing public key certificate (D) through the cloud public key (or the vehicle manufacturer's public key) to obtain the fleet pairing public key.

[0150] At this point, the target vehicle has obtained the fleet pairing public key that can be used to verify the terminal public key certificate (or the vehicle user's equipment public key certificate, marked as Certificate E) later, and the target vehicle can be considered to have completed the fleet vehicle registration process.

[0151] In any embodiment of the present application, when the target vehicle is no longer used as a fleet vehicle, the target vehicle can execute the corresponding fleet vehicle deregistration process. Fig. 9 , the fleet vehicle deregistration process is explained in detail.

[0152] Fig. 9 A schematic diagram of a fleet vehicle deregistration process provided in an embodiment of the present application.

[0153] like Fig. 9 As shown, the fleet vehicle deregistration process may include the following steps S901 to S902:

[0154] Step S901, in response to removing the target vehicle from the fleet, deleting the locally stored fleet pairing public key certificate and fleet pairing public key.

[0155] In an embodiment of the present application, when a target vehicle is removed from a fleet, the target vehicle may delete the locally stored fleet pairing public key certificate and fleet pairing public key.

[0156] Step S902, in response to the fleet pairing public key certificate and the fleet pairing public key being deleted, a fleet vehicle cancellation application is sent to the cloud; wherein the fleet vehicle cancellation application is used by the cloud to delete the fleet pairing public-private key pair, the fleet pairing public key certificate and the registration application information associated with the target vehicle.

[0157] In an embodiment of the present application, when the fleet pairing public key certificate and the fleet pairing public key are deleted, the target vehicle can send a fleet vehicle cancellation application to the cloud. Correspondingly, when the cloud receives the fleet vehicle cancellation application, it can delete the fleet pairing public-private key pair, the fleet pairing public key certificate and the registration application information associated with the target vehicle.

[0158] The digital key creation method of the embodiment of the present application can be achieved by removing the fleet pairing public key certificate and fleet pairing public key stored locally in the target vehicle when the target vehicle is no longer used as a fleet vehicle, so that the target vehicle no longer has the ability to verify the terminal public key certificate and falls back to the existing digital key certificate chain originally possessed by the target vehicle.

[0159] In summary, when the target vehicle is no longer used as a fleet vehicle, the corresponding fleet vehicle deregistration process may be executed. Fig.10 As shown, it mainly includes the following steps:

[0160] a', the fleet manager initiates the fleet vehicle deregistration process by operating the central control screen of the target vehicle. The target vehicle first deletes the fleet pairing public key certificate (D) and the corresponding fleet pairing public key locally;

[0161] b', after the target vehicle is deleted, a fleet vehicle cancellation application is sent to the cloud;

[0162] c'. After receiving the fleet vehicle cancellation application, the cloud cancels the relevant vehicle information (including the fleet pairing public and private key pairs associated with the target vehicle, the fleet pairing public key certificate and registration application information) in the cloud.

[0163] At this point, the target vehicle removes the fleet paired public key certificate (D) and no longer has the ability to verify the terminal public key certificate (or the vehicle user's device public key certificate, that is, certificate E), and falls back to the digital key certificate chain that the target vehicle originally possessed.

[0164] The above are various method embodiments executed by the target vehicle. The present application also proposes a method for creating a digital key executed by a target terminal.

[0165] Fig.11 The fourth method for creating a digital key provided in the embodiment of the present application is a flowchart of the method for creating a digital key, which can be applied to a target terminal.

[0166] like Fig.11 As shown, the method for creating a digital key may include the following steps S1101 to S1103:

[0167] Step S1101: Send a terminal public key certificate to a target vehicle in a fleet; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle.

[0168] Step S1102, receiving the vehicle public key certificate sent by the target vehicle; wherein the vehicle public key certificate is signed by the target vehicle using the fleet pairing public key in the fleet pairing public-private key pair to verify the terminal public key certificate, and is sent when the signature verification is successful and the terminal public key is obtained.

[0169] Step S1103, verify the signature of the vehicle public key certificate, and if the signature verification is successful and the vehicle public key of the target vehicle is obtained, send a signature verification success notification to the target vehicle.

[0170] In any embodiment of the present application, the signature verification success notification is used to notify the target terminal that the corresponding digital key for controlling the target vehicle is successfully created.

[0171] As a possible implementation method, the vehicle public key certificate is obtained by signing the vehicle public key with the cloud private key in the cloud. The vehicle public key certificate verification method can be specifically as follows: the target terminal uses the cloud public key to verify the vehicle public key certificate.

[0172] As a possible implementation method, the cloud public key is obtained by the target terminal using the following steps: the target terminal receives the cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by self-signing the cloud public key using the cloud private key; the target terminal verifies the cloud public key certificate, and if the verification is successful, extracts the cloud public key from the certificate body of the cloud public key certificate. The implementation principle can be found in the relevant description of step S604 in the above embodiment, which will not be repeated here.

[0173] It should be noted that the explanation of the method executed by the target vehicle in the above embodiment is also applicable to the method executed by the target terminal in this embodiment. The implementation principles are similar and will not be repeated here.

[0174] The digital key creation method of the embodiment of the present application, by adding an additional digital key certificate chain to the vehicle digital key certificate system (for example, in addition to the existing cloud public key certificate, vehicle public key certificate and owner device public key certificate, a terminal public key certificate of the target terminal used by the vehicle user (or called the vehicle user device public key certificate), a fleet pairing public key certificate generated based on the fleet pairing public-private key pair, and issuing relevant certificates to the target terminal and the target vehicle), can be compatible with the ability to identify new digital key certificate systems, thereby improving the constraint of "the vehicle user needs to have other keys for the vehicle" when the vehicle user uses the vehicle for the first time and creates a digital key for the target terminal used by the vehicle user during the use of digital keys for traditional fleet vehicles, thereby improving the vehicle user experience and the convenience of fleet vehicle management.

[0175] The present application embodiment provides another method for creating a digital key. Fig.12 A flowchart of a fifth method for creating a digital key provided in an embodiment of the present application is provided. The method for creating a digital key can be applied to a target terminal.

[0176] It should be noted that the method for creating a digital key can be executed alone, or it can be executed in combination with any embodiment in the present application or a possible implementation method in the embodiment, or it can be executed in combination with any technical solution in the relevant technology, and the embodiments of the present application are not limited to this.

[0177] like Fig.12 As shown, the method for creating a digital key may include the following steps S1201 to S1205:

[0178] Step S1201, sending a digital key creation request for the target vehicle to the cloud; wherein the digital key creation request carries the terminal public key of the target terminal, which is used for the cloud to verify the digital key creation request, and when the verification is passed, the terminal public key is signed with the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle to obtain a terminal public key certificate.

[0179] In an embodiment of the present application, the target terminal can send a digital key creation request for the target vehicle to the cloud. Accordingly, when the cloud receives the digital key creation request, it can verify the request parameters in the digital key creation request.

[0180] Among them, the request parameters include but are not limited to: account information of the target terminal; vehicle information of the target vehicle (such as vehicle code, model, vehicle color, etc.); application information of the target terminal for applying for a digital key (such as the reason for application); in the business scenario of the fleet, business information associated with the target terminal (such as the business department and position of the vehicle user), etc.

[0181] As an example, a cloud backend administrator may verify the request parameters in the digital key creation request, that is, manually authorize the digital key to the car user.

[0182] In this application, when the request parameter verification is passed, the cloud can use the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle to sign the terminal public key of the target terminal to obtain the terminal public key certificate of the target terminal.

[0183] Step S1202, receiving the terminal public key certificate sent by the cloud in response to the digital key creation request.

[0184] In an embodiment of the present application, the target terminal can receive a terminal public key certificate sent by the cloud in response to a digital key creation request.

[0185] Step S1203, sending the terminal public key certificate to the target vehicle in the fleet.

[0186] Step S1204, receiving the vehicle public key certificate sent by the target vehicle.

[0187] Among them, the vehicle public key certificate is the target vehicle using the fleet pairing public key in the fleet pairing public-private key pair to verify the terminal public key certificate, and is sent when the verification is successful and the terminal public key of the target terminal is obtained.

[0188] Step S1205, verify the signature of the vehicle public key certificate, and if the signature verification is successful and the vehicle public key of the target vehicle is obtained, send a signature verification success notification to the target vehicle.

[0189] In any embodiment of the present application, the signature verification success notification is used to notify the target terminal that the corresponding digital key for controlling the target vehicle is successfully created.

[0190] The explanation of steps S1203 to S1205 can be found in the relevant description in any embodiment of the present application and will not be repeated here.

[0191] The method for creating a digital key in the embodiment of the present application can be implemented through a cloud with vehicle management functions, using the fleet pairing private key in the fleet pairing public-private key pair generated for the target vehicle to sign the terminal public key of the target terminal, so that the target terminal can effectively obtain the terminal public key certificate.

[0192] In any embodiment of the present application, by adding an additional certificate chain to the traditional digital key certificate system and designing a fleet vehicle registration process on the cloud (such as a car manufacturer's cloud service) to issue the necessary vehicle-side certificates, the current common process of fleet vehicle users creating digital keys is improved, and the problem of low efficiency in picking up vehicles and poor vehicle-using experience caused by the constraint that "the user needs to have other keys of the vehicle" is improved, thereby improving the vehicle-using experience of the user.

[0193] As an example, the improved digital key public-private key pair system can be as follows Fig.13 As shown, the improved digital key certificate chain can be Fig.14 shown.

[0194] like Fig.13 As shown in the figure, the improved digital car key public-private key pair system is compared with Figure 2 For example, it can be achieved on the cloud side (i.e., the car manufacturer's cloud service) that an additional fleet public-private key pair is maintained for each registered fleet vehicle, which is used to issue a terminal public key certificate (hereinafter collectively referred to as the vehicle user's equipment public key certificate (E)).

[0195] like Fig.14 The figure shows the improved digital car key certificate chain. Figure 3 On the one hand, Fig.14 Zhongxin introduced the fleet pairing public key certificate (D). The certificate body of the fleet pairing public key certificate (D) contains the fleet pairing public key, which is used by the cloud (car manufacturer cloud service) using the cloud private key ( Fig.14 The signature is generated by the manufacturer's private key, one for each car. Fig.14 Sino-Singapore introduces the vehicle user's device public key certificate (E). The certificate body of the vehicle user's device public key certificate (E) contains the vehicle user's device public key (i.e. the terminal public key of the target terminal), which is generated by the cloud (car manufacturer's cloud service) using the fleet paired private key signature.

[0196] Furthermore, the improved process of creating a digital key for a user can be as follows: Fig.15 As shown, it mainly includes the following steps:

[0197] 1', before the car user's digital key is created, the cloud (car manufacturer cloud service) uses the cloud private key (or car manufacturer private key) to self-sign the cloud public key (or car manufacturer public key) and obtains the cloud public key certificate ( Fig.14 The fleet pairing public key certificate (D) is obtained by signing the fleet pairing public key used by the target vehicle with the cloud private key through the fleet vehicle registration process; the target vehicle obtains the vehicle manufacturer public key certificate (A), vehicle public key certificate (B), and fleet pairing public key certificate (D) by performing the fleet vehicle registration action on the target vehicle; the target vehicle obtains the vehicle manufacturer public key certificate (A), the vehicle public key certificate (B), and the fleet pairing public key certificate (D) through the communication link between the vehicle manufacturer and the vehicle manufacturer APP installed on the target terminal used by the vehicle user, the target terminal of the vehicle user obtains the vehicle manufacturer public key certificate (A);

[0198] 2', when the user wants to use the target terminal to complete the creation of the digital key, the user's digital key creation request is initiated to the cloud, and the terminal public key of the user's target terminal ( Fig.14 The public key of the vehicle user's device is included in the request.

[0199] 3'. The cloud backend administrator verifies the digital key creation request through the cloud backend;

[0200] 4'. After verifying the digital key creation request, use the fleet paired private key to sign the vehicle user's device public key to obtain the vehicle user's device public key certificate (E);

[0201] 5', the cloud returns the user's device public key certificate (E) to the user's target terminal;

[0202] 6'. When the user holds the target terminal close to the target vehicle, a communication link is established with the target vehicle through NFC, Bluetooth, UWB and other communication methods;

[0203] 7', the target terminal of the vehicle user sends the vehicle user's device public key certificate (E) to the target vehicle;

[0204] 8'. The target vehicle uses the fleet paired public key to verify the signature of the vehicle user's device public key certificate (E) to obtain a trusted vehicle user's device public key;

[0205] 9', the target vehicle sends the vehicle public key certificate (B) to the target terminal of the vehicle user;

[0206] 10'. The target terminal of the vehicle user uses the cloud public key to verify the signature of the vehicle public key certificate (B) to obtain a trusted vehicle public key;

[0207] 11'. The target terminal of the car user sends a signature verification success notification to the target vehicle. At this point, the target terminal of the car user and the target vehicle both hold each other's public keys, that is, the digital key of the target terminal of the car user is successfully created.

[0208] Through the above method, the fleet can easily add a new certificate chain system to the target vehicle when it is used as a fleet vehicle. Through the newly added certificate chain system, the target vehicle can change the credit logic of digital key creation from "people who enter the vehicle with a physical key can create a digital key" to "people who are approved or authorized by the background can create a digital key". Therefore, when the subsequent vehicle user creates a digital key for the vehicle user's device, he or she no longer needs to be constrained by "the vehicle user needs to have other keys of the target vehicle", but can conveniently and flexibly apply for the use of the fleet vehicle. When the target vehicle is no longer used as a fleet vehicle, the fleet paired public key certificate (D) and its subsequent certificate chain can also be easily removed without affecting the original vehicle digital key certificate chain and certificate system.

[0209] In summary, the solution provided by the present application has at least the following advantages compared to the existing solutions: by introducing a fleet vehicle registration process for fleet vehicles to issue fleet paired public key certificates for fleet vehicles, it is possible to add additional certificate chains while still maintaining its original digital key certificate system, and to be compatible with the ability to identify new digital key certificate systems, thereby improving the constraint that "the user needs to have other keys for the fleet vehicle" when the user uses the vehicle for the first time and creates a digital key for the user's device during the use of traditional fleet vehicle digital keys. This can better improve the user's vehicle experience and the convenience of fleet vehicle management.

[0210] With the above Figures 5 to 10 Corresponding to the method provided in the embodiment, the present application also provides a digital key creation device. Since the digital key creation device provided in the embodiment of the present application is similar to the above-mentioned Figures 5 to 10 The method provided in the embodiment corresponds to the method provided in the embodiment, so the implementation method of the above method is also applicable to the digital key creation device provided in the embodiment of the present application, and will not be described in detail in the embodiment of the present application.

[0211] Fig.16 A schematic diagram of the structure of a digital key creation device provided in an embodiment of the present application.

[0212] like Fig.16 As shown, the digital key creation device 1600 can be applied to a target vehicle in a fleet, and includes: a receiving module 1610 , a signature verification module 1620 , a sending module 1630 and a determination module 1640 .

[0213] The receiving module 1610 is used to receive a terminal public key certificate sent by the target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle;

[0214] The signature verification module 1620 is used to verify the signature of the terminal public key certificate using the fleet pairing public key in the fleet pairing public-private key pair;

[0215] The sending module 1630 is used to send the vehicle public key certificate of the target vehicle to the target terminal when the signature verification is successful and the terminal public key is obtained;

[0216] The determination module 1640 is used to determine that the digital key corresponding to the target terminal for controlling the target vehicle is successfully created in response to receiving a signature verification success notification sent by the target terminal.

[0217] In any embodiment of the present application, the signature verification success notification is sent in response to the successful signature verification of the vehicle public key certificate and the acquisition of the vehicle public key of the target vehicle.

[0218] Furthermore, in an implementation of the embodiment of the present application, the fleet pairing public key is obtained by the target vehicle using the following modules:

[0219] The first processing module is used to send a fleet vehicle registration application to the cloud; wherein the fleet vehicle registration application is used to register the vehicle on the cloud and generate a fleet pairing public key certificate for the target vehicle; receive and store the fleet pairing public key certificate sent by the cloud; use the cloud public key to verify the fleet pairing public key certificate to obtain the fleet pairing public key.

[0220] In one implementation of an embodiment of the present application, a fleet vehicle registration application is used to: verify the registration application information carried in the fleet vehicle registration application; if the verification is passed, register the registration application information and create a fleet pairing public-private key pair for the target vehicle; use a cloud private key to sign the fleet pairing public key in the fleet pairing public-private key pair to obtain a fleet pairing public key certificate; and send the fleet pairing public key certificate to the target vehicle.

[0221] In one implementation method of an embodiment of the present application, the vehicle public key certificate is obtained by signing the vehicle public key using the cloud private key in the cloud; the successful signature verification notification is when the target terminal verifies the vehicle public key certificate using the cloud public key, and when the verification is successful and the vehicle public key is obtained, it is sent to the target vehicle.

[0222] In one implementation of the embodiment of the present application, the cloud public key is obtained by the target vehicle using the following modules:

[0223] The second processing module is used to receive the cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by self-signing the cloud public key using the cloud private key; verify the signature of the cloud public key certificate; if the signature verification is successful, extract the cloud public key from the certificate body of the cloud public key certificate.

[0224] In one implementation of the embodiment of the present application, the digital key creation device 1600 further includes:

[0225] a deleting module, configured to delete the locally stored fleet pairing public key certificate and fleet pairing public key in response to removing the target vehicle from the fleet;

[0226] The sending module 1630 is also used to send a fleet vehicle cancellation application to the cloud in response to the fleet pairing public key certificate and the fleet pairing public key being deleted; wherein the fleet vehicle cancellation application is used to delete the fleet pairing public-private key pair, the fleet pairing public key certificate and the registration application information associated with the target vehicle in the cloud.

[0227] In the digital key creation device of the embodiment of the present application, by adding an additional digital key certificate chain to the vehicle digital key certificate system (for example, in addition to the existing cloud public key certificate, vehicle public key certificate and owner device public key certificate, a terminal public key certificate of the target terminal used by the vehicle user (or called the vehicle user device public key certificate), a fleet pairing public key certificate generated based on the fleet pairing public-private key pair, and issuing relevant certificates to the target terminal and the target vehicle), it can be compatible with the ability to identify new digital key certificate systems, thereby improving the constraint of "the vehicle user needs to have other keys for the vehicle" when the vehicle user uses the vehicle for the first time and creates the digital key of the target terminal used by the vehicle user during the use of digital keys for traditional fleet vehicles, thereby improving the vehicle user experience and the convenience of fleet vehicle management.

[0228] With the above Figures 11 to 15 Corresponding to the method provided in the embodiment, the present application also provides a digital key creation device. Since the digital key creation device provided in the embodiment of the present application is similar to the above-mentioned Figures 11 to 15 The method provided in the embodiment corresponds to the method provided in the embodiment, so the implementation method of the above method is also applicable to the digital key creation device provided in the embodiment of the present application, and will not be described in detail in the embodiment of the present application.

[0229] Fig.17 A schematic diagram of the structure of another digital key creation device provided in an embodiment of the present application.

[0230] like Fig.17 As shown, the digital key creation device 1700 can be applied to a target terminal, including: a sending module 1710, a receiving module 1720 and a signature verification module 1730.

[0231] The sending module 1710 is used to send a terminal public key certificate to a target vehicle in a fleet; wherein the terminal public key certificate is obtained by signing a terminal public key of the target terminal using a fleet paired private key in a fleet paired public-private key pair associated with the target vehicle;

[0232] The receiving module 1720 is used to receive the vehicle public key certificate sent by the target vehicle; wherein the vehicle public key certificate is sent when the target vehicle verifies the terminal public key certificate using the fleet paired public key in the fleet paired public-private key pair and the verification succeeds and the terminal public key is obtained;

[0233] The signature verification module 1730 is used to verify the signature of the vehicle public key certificate;

[0234] The sending module 1710 is also used to send a signature verification success notification to the target vehicle when the signature verification is successful and the vehicle public key of the target vehicle is obtained.

[0235] In any embodiment of the present application, the signature verification success notification is used to notify the target terminal that the corresponding digital key for controlling the target vehicle is successfully created.

[0236] In one implementation of the embodiment of the present application, the sending module 1710 is further used to: send a digital key creation request for the target vehicle to the cloud; wherein the digital key creation request carries a terminal public key, which is used for the cloud to verify the digital key creation request, and if the verification is passed, use the fleet paired private key to sign the terminal public key to obtain a terminal public key certificate;

[0237] The receiving module 1720 is further used to: receive the terminal public key certificate sent by the cloud in response to the digital key creation request.

[0238] In one implementation of an embodiment of the present application, the digital key creation request carries at least one of the following information: account information of the target terminal; vehicle information of the target vehicle; application information of the target terminal for the digital key; and business information associated with the target terminal in the business scenario to which the fleet belongs.

[0239] In one implementation of the embodiment of the present application, the vehicle public key certificate is obtained by signing the vehicle public key in the cloud using the cloud private key; the signature verification module 1730 is used to: verify the vehicle public key certificate using the cloud public key.

[0240] In one implementation of the embodiment of the present application, the cloud public key is obtained by the target terminal using the following modules:

[0241] The processing module is used to receive the cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by self-signing the cloud public key using the cloud private key; verify the cloud public key certificate; if the signature verification is successful, extract the cloud public key from the certificate body of the cloud public key certificate.

[0242] The digital key creation device of the embodiment of the present application can be compatible with the ability to identify new digital key certificate systems by adding an additional digital key certificate chain to the vehicle digital key certificate system (for example, in addition to the existing cloud public key certificate, vehicle public key certificate and owner device public key certificate, a terminal public key certificate of the target terminal used by the vehicle user (or called the vehicle user device public key certificate), a fleet pairing public key certificate generated based on the fleet pairing public-private key pair, and issuing relevant certificates to the target terminal and the target vehicle), thereby improving the constraint of "the vehicle user needs to have other keys for the vehicle" when the vehicle user uses the vehicle for the first time and creates the digital key of the target terminal used by the vehicle user, thereby improving the vehicle user experience and the convenience of fleet vehicle management.

[0243] In order to implement the above embodiments, the present application also proposes an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method for creating a digital key as described in any of the above embodiments is implemented.

[0244] In order to implement the above embodiments, the present application also proposes a non-temporary computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the method for creating a digital key as described in any of the above embodiments is implemented.

[0245] In order to implement the above embodiments, the present application also proposes a computer program product, on which a computer program is stored, and when the computer program is executed by a processor, the method for creating a digital key as described in any of the above embodiments is implemented.

[0246] Fig.18 1 is a block diagram of a target vehicle 1800 according to an exemplary embodiment. For example, the target vehicle 1800 may be a hybrid vehicle, a non-hybrid vehicle, an electric vehicle, a fuel cell vehicle, or other types of vehicles. The target vehicle 1800 may be an autonomous vehicle, a semi-autonomous vehicle, or a non-autonomous vehicle.

[0247] Reference Fig.18, the target vehicle 1800 may include various subsystems, for example, an infotainment system 1810, a perception system 1820, a decision control system 1830, a drive system 1840, and a computing platform 1850. The target vehicle 1800 may also include more or fewer subsystems, and each subsystem may include multiple components. In addition, each subsystem and each component of the target vehicle 1800 may be interconnected by wire or wireless means.

[0248] In some embodiments, the infotainment system 1810 may include a communication system, an entertainment system, and a navigation system, among others.

[0249] The perception system 1820 may include several sensors for sensing information about the environment around the target vehicle 1800. For example, the perception system 1820 may include a global positioning system (the global positioning system may be a GPS system, or a Beidou system or other positioning systems), an inertial measurement unit (IMU), a laser radar, a millimeter wave radar, an ultrasonic radar, and a camera.

[0250] The decision control system 1830 may include a computing system, a vehicle controller, a steering system, a throttle, and a braking system.

[0251] The drive system 1840 may include components that provide power movement for the target vehicle 1800. In one embodiment, the drive system 1840 may include an engine, an energy source, a transmission system, and wheels. The engine may be one or a combination of an internal combustion engine, an electric motor, and an air compression engine. The engine is capable of converting the energy provided by the energy source into mechanical energy.

[0252] Some or all functions of the target vehicle 1800 are controlled by a computing platform 1850. The computing platform 1850 may include at least one processor 1851 and a memory 1852, and the processor 1851 may execute instructions 1853 stored in the memory 1852.

[0253] The processor 1851 may be any conventional processor, such as a commercially available CPU. The processor may also include a graphics processor (Graphic Process Unit, GPU), a field programmable gate array (Field Programmable Gate Array, FPGA), a system on chip (System on Chip, SOC), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC) or a combination thereof.

[0254] Memory 1852 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.

[0255] In addition to instructions 1853 , memory 1852 may also store data, such as road maps, route information, vehicle location, direction, speed, etc. The data stored in memory 1852 may be used by computing platform 1850 .

[0256] In the embodiment of the present application, the processor 1851 can execute instruction 1853 to complete all or part of the steps of the above-mentioned method embodiment.

[0257] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0258] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0259] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0260] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute the instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0261] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0262] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0263] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0264] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A method for creating a digital key, characterized in that: Target vehicles in the fleet include: Receiving a terminal public key certificate sent by a target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet pairing private key in the fleet pairing public-private key pair associated with the target vehicle; Using the fleet pairing public key in the fleet pairing public-private key pair to verify the signature of the terminal public key certificate; If the signature verification is successful and the terminal public key is obtained, the vehicle public key certificate of the target vehicle is sent to the target terminal; In response to receiving a signature verification success notification sent by the target terminal, it is determined that a digital key corresponding to the target terminal and used to control the target vehicle is successfully created.

2. The method according to claim 1, characterized in that The fleet pairing public key is obtained by the target vehicle using the following steps: Sending a fleet vehicle registration application to the cloud; wherein the fleet vehicle registration application is used to register the vehicle in the cloud and generate a fleet pairing public key certificate for the target vehicle; Receiving and storing the fleet pairing public key certificate sent by the cloud; The cloud public key is used to verify the fleet pairing public key certificate to obtain the fleet pairing public key.

3. The method according to claim 2, characterized in that The fleet vehicle registration application is used to: Verify the registration application information contained in the fleet vehicle registration application; If the verification is successful, register the registration application information and create the fleet paired public and private key pair for the target vehicle; Using the cloud private key, signing the fleet pairing public key in the fleet pairing public-private key pair to obtain the fleet pairing public key certificate; The fleet pairing public key certificate is sent to the target vehicle.

4. The method according to claim 1, characterized in that: The vehicle public key certificate is obtained by signing the vehicle public key using the cloud private key in the cloud; The successful signature verification notification is sent to the target vehicle when the target terminal verifies the vehicle public key certificate using the cloud public key and obtains the vehicle public key after the verification is successful.

5. The method according to claim 4, characterized in that The cloud public key is obtained by the target vehicle using the following steps: Receiving a cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by self-signing the cloud public key using the cloud private key; Verifying the signature of the cloud public key certificate; When the signature verification is successful, the cloud public key is extracted from the certificate body of the cloud public key certificate.

6. The method according to any one of claims 1 to 5, characterized in that The method further comprises: In response to removing the target vehicle from the fleet, deleting the locally stored fleet pairing public key certificate and the fleet pairing public key; In response to the fleet pairing public key certificate and the fleet pairing public key being deleted, sending a fleet vehicle cancellation application to the cloud; Among them, the fleet vehicle cancellation application is used by the cloud to delete the fleet pairing public-private key pair, the fleet pairing public key certificate and registration application information associated with the target vehicle.

7. A method for creating a digital key, characterized in that: Applied to target terminals, including: Sending a terminal public key certificate to a target vehicle in the fleet; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle; Receive the vehicle public key certificate sent by the target vehicle; wherein the vehicle public key certificate is sent by the target vehicle when the target vehicle verifies the signature of the terminal public key certificate using the fleet pairing public key in the fleet pairing public-private key pair and the verification succeeds and the terminal public key is obtained; The vehicle public key certificate is signature-verified, and if the signature verification is successful and the vehicle public key of the target vehicle is obtained, a signature verification success notification is sent to the target vehicle.

8. The method according to claim 7, characterized in that Before sending the terminal public key certificate to the target vehicle in the fleet, the method further includes: Sending a digital key creation request for the target vehicle to the cloud; wherein the digital key creation request carries the terminal public key, which is used by the cloud to verify the digital key creation request, and if the verification is passed, using the fleet paired private key to sign the terminal public key to obtain the terminal public key certificate; Receive the terminal public key certificate sent by the cloud in response to the digital key creation request.

9. The method according to claim 8, characterized in that The digital key creation request carries at least one of the following information: Account information of the target terminal; Vehicle information of the target vehicle; Application information of the target terminal for the digital key; Business information associated with the target terminal in the business scenario to which the fleet belongs.

10. The method according to any one of claims 7 to 9, characterized in that: The vehicle public key certificate is obtained by signing the vehicle public key using the cloud private key in the cloud; The verifying the signature of the vehicle public key certificate includes: The vehicle public key certificate is verified using the cloud public key.

11. The method according to claim 10, characterized in that The cloud public key is obtained by the target terminal by using the following steps: Receiving a cloud public key certificate sent by the cloud; wherein the cloud public key certificate is obtained by self-signing the cloud public key using the cloud private key; Verifying the signature of the cloud public key certificate; When the signature verification is successful, the cloud public key is extracted from the certificate body of the cloud public key certificate.

12. A digital key creation device, characterized in that: Target vehicles in the fleet include: A receiving module, configured to receive a terminal public key certificate sent by a target terminal; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using a fleet pairing private key in a fleet pairing public-private key pair associated with the target vehicle; A signature verification module, used to verify the signature of the terminal public key certificate using the fleet pairing public key in the fleet pairing public-private key pair; A sending module, configured to send the vehicle public key certificate of the target vehicle to the target terminal when the signature verification succeeds and the terminal public key is obtained; A determination module is used to determine that the digital key corresponding to the target terminal and used to control the target vehicle is successfully created in response to receiving a signature verification success notification sent by the target terminal.

13. A digital key creation device, characterized in that: Applied to target terminals, including: A sending module, used to send a terminal public key certificate to a target vehicle in a fleet; wherein the terminal public key certificate is obtained by signing the terminal public key of the target terminal using the fleet paired private key in the fleet paired public-private key pair associated with the target vehicle; A receiving module, used to receive the vehicle public key certificate sent by the target vehicle; wherein the vehicle public key certificate is sent by the target vehicle when the target vehicle verifies the signature of the terminal public key certificate using the fleet pairing public key in the fleet pairing public-private key pair and the verification succeeds and the terminal public key is obtained; A signature verification module, used to verify the signature of the vehicle public key certificate; The sending module is further configured to send a signature verification success notification to the target vehicle when the signature verification is successful and the vehicle public key of the target vehicle is obtained.

14. An electronic device, characterized in that: include: processor; a memory for storing processor-executable instructions; Wherein, the processor is configured to: Implement the steps of the method described in any one of claims 1 to 6, or implement the steps of the method described in any one of claims 7 to 11.

15. A non-temporary computer-readable storage medium, when the instructions in the storage medium are executed by a processor of an electronic device, enables the processor to perform the steps of the method described in any one of claims 1 to 6, or the steps of the method described in any one of claims 7 to 11.

16. A computer program product, characterized in that The invention comprises a computer program, which, when executed by a processor, implements the method according to any one of claims 1 to 6, or implements the method according to any one of claims 7 to 11.

Images