Digital key management method and device and electronic equipment

Abstract

The invention provides a digital key management method and device and electronic equipment, and relates to the technical field of intelligent unlocking, and the method comprises the steps: receiving a digital key loss report request sent by a user; wherein the digital key loss report request comprises identity information of a user and encrypted digital key information; verifying the digital key loss report request to obtain a verification result; wherein the verification result comprises one of verification success and verification failure; and under the condition that the verification result is successful verification, marking the digital key as a loss report state, and synchronizing the loss report state to all the target devices bound with the digital key to enable the digital key to be invalid. According to the method, the safety protection of the digital key is effectively enhanced, the replay attack of the digital key is prevented, and the property loss risk of a user is further reduced.

Description

Technical Field

[0001] The present invention relates to the field of smart unlocking technology, and in particular to a digital key management method, device and electronic equipment. Background Art

[0002] Digital car keys, as a cutting-edge car unlocking technology, allow car owners to remotely control vehicle unlocking, locking and starting functions through smartphone applications, thus replacing traditional physical keys. Compared with traditional keys, digital keys significantly improve convenience. Users do not need to carry keys physically, but can control the vehicle through their mobile phones. However, with the popularity of digital keys, their potential security risks have gradually emerged. For example, the loss or theft of the device may make the vehicle vulnerable to illegal access. Therefore, how to improve the security of digital keys and reduce the risk of property loss for car owners has become a technical problem that needs to be solved urgently. Summary of the invention

[0003] The purpose of the present invention is to provide a digital key management method, device and electronic device to enhance the security protection of digital keys, prevent digital key replay attacks, and reduce the risk of property loss for users.

[0004] In a first aspect, the present invention provides a digital key management method, which is applied to a digital key management system, comprising: receiving a digital key loss report request sent by a user; wherein the digital key loss report request includes: the user's identity information and encrypted digital key information; verifying the digital key loss report request to obtain a verification result; wherein the verification result includes one of the following: verification success, verification failure; when the verification result is verification success, marking the digital key as a lost status, and synchronizing the lost status to all target devices bound to the digital key to invalidate the digital key.

[0005] Optionally, the request for reporting a lost digital key is verified, including: determining whether the message format of the request for reporting a lost digital key complies with a first preset format requirement; if it is determined that it complies, decrypting the encrypted digital key information to obtain decrypted information; querying whether the digital key corresponding to the decrypted information is in an available state; if it is determined that the digital key is available, determining whether the user has the authority to manage the digital key based on the user's identity information; if it is determined that the user has the authority to manage the digital key, determining the verification result as a successful verification; otherwise, determining the verification result as a failed verification.

[0006] Optionally, after obtaining the verification result, the method further includes: feeding back the verification result to the user, and if the verification result is a verification failure, synchronously feeding back the reason for the verification failure; if the verification result is a verification success, synchronously feeding back the loss report success information.

[0007] Optionally, after marking the digital key as lost, the method further includes: recording an operation log after receiving the digital key loss report request; wherein the operation log includes: the time of receiving the digital key loss report request, the content of the digital key loss report request, and the operations performed based on the digital key loss report request.

[0008] Optionally, after synchronizing the loss status to all target devices bound to the digital key, the method also includes: receiving a temporary digital key request sent by the user; wherein the temporary digital key request includes: the user's identity information and the device information of the target device; when it is determined that the message format of the temporary digital key request meets the second preset format requirement, judging whether the user has the authority to apply for the temporary digital key based on the user's identity information; when it is determined that the user has the authority to apply for the temporary digital key, generating a temporary digital key and encrypting the temporary digital key to obtain the encrypted temporary digital key information; sending the encrypted temporary digital key information to the target device so that the target device is bound to the temporary digital key.

[0009] Optionally, the temporary digital key is encrypted, including: obtaining the ID information of the temporary digital key; extracting key information from the ID information; wherein the key information includes: card medium type, TSP identification, current date and business serial number; converting the key information into a specified positional counting system according to preset requirements to obtain the encrypted temporary digital key information.

[0010] Optionally, if the digital key loss reporting request is a result of being encrypted using a preset encryption key, then before verifying the digital key loss reporting request, the process further includes: decrypting the digital key loss reporting request using a preset decryption key.

[0011] In a second aspect, the present invention provides a digital key management device, which is applied to a digital key management system, including: a first receiving module, used to receive a digital key loss report request sent by a user; wherein the digital key loss report request includes: the user's identity information and encrypted digital key information; a verification module, used to verify the digital key loss report request to obtain a verification result; wherein the verification result includes one of the following: verification success, verification failure; a loss report and synchronization module, used to mark the digital key as a loss report state when the verification result is a verification success, and synchronize the loss report state to all target devices bound to the digital key to make the digital key invalid.

[0012] In a third aspect, the present invention provides an electronic device including a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, it implements the digital key management method of any one of the aforementioned implementation modes.

[0013] In a fourth aspect, the present invention provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed by a processor, the digital key management method of any one of the aforementioned embodiments is implemented.

[0014] The present invention provides a digital key management method, which provides a quick response mechanism. Once a user's digital key device is lost or stolen, the user can send a digital key loss report request to the digital key management system. Once the digital key loss report request is successfully verified, the digital key management system immediately marks the digital key as a loss report state, and synchronizes the loss report state to all target devices bound to the digital key to invalidate the digital key. The method effectively enhances the security protection of the digital key, prevents the replay attack of the digital key, and thus reduces the risk of property loss of the user. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 A flowchart of a digital key management method provided by an embodiment of the present invention;

[0017] Figure 2 A flowchart of applying for a temporary digital key provided by an embodiment of the present invention;

[0018] Figure 3 A functional module diagram of a digital key management device provided by an embodiment of the present invention;

[0019] Figure 4 A schematic diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0021] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0022] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0023] Embodiment 1

[0024] The embodiment of the present invention provides a digital key management method, which is applied to a digital key management system. Figure 1 A flowchart of a digital key management method provided by an embodiment of the present invention is shown in FIG. Figure 1 As shown, the method specifically comprises the following steps:

[0025] Step S102, receiving a request for reporting a digital key lost from a user.

[0026] Specifically, in order to protect the property safety of users, the digital key management system provides users with multiple ways to report the loss of digital keys, such as through the digital key mobile terminal App, official website or customer service hotline. When a user's digital key is lost, stolen or improperly shared, the user can send a digital key loss report request to the digital key management system through any of the above methods. The digital key loss report request includes: the user's identity information and encrypted digital key information.

[0027] In the embodiment of the present invention, the user's identity information includes at least one of the following information: the user's fingerprint information, facial information, account information for managing digital keys, and login password information for the digital key management system. Before distributing digital keys to users, the digital key management system has already encrypted the digital key information within the system to reduce the sensitivity of data leakage and thereby protect the user's device security. In other words, the digital key information managed by the user end is encrypted, and even if it is illegally intercepted on the way, others cannot crack the real digital key information.

[0028] Step S104, verify the request for reporting the loss of the digital key and obtain a verification result.

[0029] The embodiment of the present invention adopts a multiple identity authentication mechanism to ensure that only legitimate users can perform the digital key loss reporting operation, thereby reducing the risk of fraud and enhancing the protection of digital keys. Therefore, after the digital key management system receives the digital key loss reporting request sent by the user, it needs to verify the digital key loss reporting request, wherein the verification items at least include: user authority authentication, key status verification, etc., and the verification result includes one of the following: verification success, verification failure.

[0030] Step S106, when the verification result is successful, the digital key is marked as lost, and the lost status is synchronized to all target devices bound to the digital key to make the digital key invalid.

[0031] If the verification result is a verification failure, the digital key management system cannot perform the loss reporting operation on the digital key pointed to by the user's digital key loss reporting request; if the verification result is a verification success, the digital key management system immediately marks the digital key pointed to by the digital key loss reporting request as a lost state. At the same time as the digital key state changes, the digital key management system will also synchronize the loss reporting state to all target devices bound to the digital key, thereby invalidating the digital key in the target device. In other words, the digital key management system ensures that once a digital key is reported lost, it will immediately become invalid in all related devices, thereby preventing unauthorized access.

[0032] If the digital key is used in a vehicle, then when the vehicle's digital key is reported lost, the digital key management system will update the vehicle's access control list to ensure that the digital key in the lost state can no longer unlock or start the vehicle.

[0033] The present invention provides a digital key management method, which provides a quick response mechanism. Once a user's digital key device is lost or stolen, the user can send a digital key loss report request to the digital key management system. Once the digital key loss report request is successfully verified, the digital key management system immediately marks the digital key as a loss report state, and synchronizes the loss report state to all target devices bound to the digital key to invalidate the digital key. The method effectively enhances the security protection of the digital key, prevents the replay attack of the digital key, and thus reduces the risk of property loss of the user.

[0034] In an optional implementation, the above step S104, verifying the request for reporting loss of the digital key, specifically includes the following contents:

[0035] Determine whether the message format of the digital key loss report request meets the first preset format requirement.

[0036] When it is determined that the information complies with the requirements, the encrypted digital key information is decrypted to obtain the decrypted information.

[0037] Check whether the digital key corresponding to the decryption information is available.

[0038] If it is determined to be available, whether the user has the authority to manage digital keys is determined based on the user's identity information.

[0039] When it is determined that the conditions are met, the verification result is determined to be successful.

[0040] Otherwise, the verification result is determined to be a verification failure.

[0041] Specifically, the digital key management system sets the message format of the digital key loss report request sent by the outside world. If the digital key loss report request received by it is not a message assembled according to the first preset format requirement, it will immediately determine that the verification has failed. Optionally, the message at least includes: business instructions (for example: loss report), the length of the business instruction, the user's identity information and the encrypted digital key information. The correct message should be sent after assembling the above contents in the order specified by the user.

[0042] If it is determined that the message format of the digital key loss report request meets the first preset format requirement, the encrypted digital key information in the digital key loss report request is further decrypted to obtain the decrypted digital key information, that is, the decrypted information. The digital key management system can query the status (available / unavailable) of the digital key according to the decrypted information. If it is determined that the digital key is already in an unavailable state, the user cannot perform any operation on it, and therefore the verification result is determined to be a verification failure.

[0043] If it is determined that the digital key is in an available state, in order to prevent illegal users from tampering with the digital key, the digital key management system needs to further determine whether the user who currently initiates the digital key loss request has the authority to manage the digital key. The digital key management system stores a list of users corresponding to each digital key information, and authorizes each user to only manage the digital key he owns. If it is determined that the current user has no right to manage the digital key, the verification result is determined to be a verification failure; otherwise, the verification result is determined to be a verification success.

[0044] In an optional implementation, after obtaining the verification result, the embodiment of the present invention also includes the following contents: feeding back the verification result to the user, and when the verification result is a verification failure, synchronously feeding back the reason for the verification failure; when the verification result is a verification success, synchronously feeding back the loss report success information.

[0045] Optionally, after marking the digital key as lost, the embodiment of the present invention further includes the following content: recording an operation log after receiving the digital key loss report request; wherein the operation log includes: the time of receiving the digital key loss report request, the content of the digital key loss report request, and the operation performed based on the digital key loss report request. The storage of the operation log facilitates subsequent security audits and event tracking.

[0046] In order to ensure that the user can still use the device paired with the digital key normally during the period of reporting the loss of the digital key (if the digital key is a digital car key, the device paired with it is the vehicle), in an optional implementation, Figure 2 As shown, after synchronizing the loss report status to all target devices bound with the digital key, the embodiment of the present invention further includes the following steps:

[0047] Step S201, receiving a temporary digital key request sent by a user.

[0048] Among them, the temporary digital key request includes: user identity information and device information of the target device.

[0049] Step S202: When it is determined that the message format of the temporary digital key request meets the second preset format requirement, it is determined whether the user has the authority to apply for the temporary digital key based on the user's identity information.

[0050] Step S203: if it is determined that the temporary digital key is available, a temporary digital key is generated and encrypted to obtain encrypted temporary digital key information.

[0051] Step S204, sending the encrypted temporary digital key information to the target device so that the target device is bound to the temporary digital key.

[0052] When a user sends a temporary digital key request, he needs to provide his identity information on the one hand, and the device information of the target device that was originally bound to the reported lost digital key on the other hand. Similar to the verification process of the digital key loss request, the message format of the temporary digital key request is also first checked. If its format does not meet the second preset format requirements, the digital key management system immediately rejects the application for the temporary digital key; but if the message format of the temporary digital key request meets the second preset format requirements, the digital key management system further determines whether the user has the authority to apply for a temporary digital key. For example, for digital car keys, it can be limited that only the owner can apply for the temporary digital key of his vehicle, and non-owners do not have the authority to apply for the temporary digital key of the vehicle.

[0053] If it is determined that the user has the authority to apply for a temporary digital key, the digital key management system will generate a temporary digital key. The embodiment of the present invention does not specifically limit the method for generating a temporary digital key, and technicians can configure it according to actual needs. In order to reduce the sensitivity of data leakage, after generating a temporary digital key, the digital key management system will also encrypt the temporary digital key to obtain the encrypted temporary digital key information, and then send the encrypted temporary digital key information to the target device so that the target device is bound to the temporary digital key.

[0054] In an optional implementation, in the above step S203, encrypting the temporary digital key specifically includes the following contents:

[0055] Get the ID information of the temporary digital key.

[0056] Extract key information from the ID information; wherein the key information includes: card medium type, TSP identification, current date and business serial number.

[0057] Convert the key information into a specified number system according to preset requirements to obtain encrypted temporary digital key information.

[0058] For example, it is assumed that the ID information of the temporary digital key is: 88830000030020230210000000030331, and the following key information can be extracted from it: the card medium type is 3; the TSP (Telematics Service Provider) identifier is 0; the current date is 20230210; and the business serial number is: 000000030331. Next, to encrypt the temporary digital key, 1. Combine the card media type and TSP identifier, and convert the combined result to hexadecimal: 0x30; 2. Convert the current date to hexadecimal: 0x20F9; 3. Convert the business serial number to binary: 111011001111011, and determine the length of the binary business serial number: 15, and then convert the length of the binary business serial number to hexadecimal: 0x0F; if the length of the binary business serial number is an odd number, fill the low bit of the binary business serial number with zeros: 1110110011110110, and then convert the binary number after zero filling to hexadecimal: 0xECF6, and get the hexadecimal business serial number value. Finally, combine the hexadecimal card media type + TSP identifier, current date, business serial number length and business serial number value to get the encrypted temporary digital key information: 3020F90FECF6.

[0059] In an optional implementation, if the digital key loss reporting request is encrypted using a preset encryption key, then before verifying the digital key loss reporting request, the process further includes: decrypting the digital key loss reporting request using a preset decryption key.

[0060] In order to further improve the security of the interaction between the digital key management system and the outside world, the digital key management system and each device that can be opened with a digital key store a pair of encryption keys and decryption keys. During the interaction process, the message sender needs to use the encryption key to encrypt the messages sent to the outside, and the message receiver uses the matching decryption key to decrypt the received messages. The encryption process can ensure that the data is not easily tampered with.

[0061] In summary, the embodiment of the present invention provides a rapid response mechanism. Once the user's digital key device is lost or stolen, the user can immediately report the loss of his digital key through the digital key management system to prevent unauthorized access. In addition, the digital key management system uses advanced encryption technology and identity authentication processes to ensure that only authorized users can perform loss reporting operations. At the same time, the digital key is immediately updated to the lost status after the loss is reported, and the lost status is synchronized to all target devices bound to the digital key, effectively protecting the user's property safety. The digital key management system not only enhances the security protection of digital keys, but also provides a user-friendly interface and intuitive operation guide to ensure that even in an emergency, users can take quick action to reduce the risk of property loss. The launch of this system marks an important step forward in the convenience and security of digital key technology, and further promotes the technical development of smart unlocking.

[0062] In order to enhance system reliability and provide a high-availability architecture, technicians can design a system architecture with redundancy and fault tolerance to ensure that the loss reporting function can still operate stably under high load or failure conditions. In addition, the digital key management system provides a unified data access interface to the outside world, allowing different platforms and systems to exchange data and instructions through standardized HTTP requests. In addition, by using a microservice architecture and API gateway, the complexity of integration between systems can be reduced, thereby improving the scalability and maintainability of the system.

[0063] Embodiment 2

[0064] The embodiment of the present invention further provides a digital key management device, which is mainly used to execute the digital key management method provided in the above-mentioned embodiment 1. The digital key management device provided in the embodiment of the present invention is specifically introduced below.

[0065] Figure 3 A functional module diagram of a digital key management device provided by an embodiment of the present invention, such as Figure 3As shown, the device mainly includes: a first receiving module 10, a verification module 20, and a loss reporting and synchronization module 30, wherein:

[0066] The first receiving module 10 is used to receive a digital key loss reporting request sent by a user; wherein the digital key loss reporting request includes: user identity information and encrypted digital key information.

[0067] The verification module 20 is used to verify the digital key loss report request and obtain a verification result; wherein the verification result includes one of the following: verification success, verification failure.

[0068] The loss reporting and synchronization module 30 is used to mark the digital key as a lost state when the verification result is a successful verification, and synchronize the lost state to all target devices bound to the digital key to make the digital key invalid.

[0069] The embodiment of the present invention provides a digital key management device, which provides a quick response mechanism. Once the user's digital key device is lost or stolen, the user can send a digital key loss report request to the digital key management system. Once the digital key loss report request is successfully verified, the digital key management system immediately marks the digital key as a loss report state, and synchronizes the loss report state to all target devices bound to the digital key to invalidate the digital key. The device effectively enhances the security protection of the digital key, prevents the replay attack of the digital key, and thus reduces the risk of property loss of the user.

[0070] Optionally, the verification module 20 is specifically used for:

[0071] Determine whether the message format of the digital key loss report request meets the first preset format requirement.

[0072] When it is determined that the information complies with the requirements, the encrypted digital key information is decrypted to obtain the decrypted information.

[0073] Check whether the digital key corresponding to the decryption information is available.

[0074] If it is determined to be available, whether the user has the authority to manage digital keys is determined based on the user's identity information.

[0075] When it is determined that the conditions are met, the verification result is determined to be successful.

[0076] Otherwise, the verification result is determined to be a verification failure.

[0077] Optionally, the device further comprises:

[0078] The response module is used to feedback the verification result to the user, and if the verification result is a verification failure, the reason for the verification failure is synchronously fed back; if the verification result is a verification success, the successful report of loss is synchronously fed back.

[0079] Optionally, the device further comprises:

[0080] The recording module is used to record the operation log after receiving the digital key loss reporting request; wherein the operation log includes: the receiving time of the digital key loss reporting request, the content of the digital key loss reporting request and the operation performed based on the digital key loss reporting request.

[0081] Optionally, the device further comprises:

[0082] The second receiving module is used to receive a temporary digital key request sent by a user; wherein the temporary digital key request includes: user identity information and device information of a target device.

[0083] The judgment module is used to judge whether the user has the authority to apply for the temporary digital key based on the user's identity information when it is determined that the message format of the temporary digital key request meets the second preset format requirement.

[0084] The generation module is used to generate a temporary digital key when it is determined that the key is available.

[0085] The encryption module is used to encrypt the temporary digital key to obtain the encrypted temporary digital key information.

[0086] The sending module is used to send the encrypted temporary digital key information to the target device so that the target device is bound to the temporary digital key.

[0087] Optionally, the encryption module is specifically used for:

[0088] Get the ID information of the temporary digital key.

[0089] Extract key information from the ID information; wherein the key information includes: card medium type, TSP identification, current date and business serial number.

[0090] Convert the key information into a specified number system according to preset requirements to obtain encrypted temporary digital key information.

[0091] Optionally, if the digital key loss reporting request is a result of being encrypted using a preset encryption key, then before verifying the digital key loss reporting request, the process further includes: decrypting the digital key loss reporting request using a preset decryption key.

[0092] Embodiment 3

[0093] See also Figure 4An embodiment of the present invention provides an electronic device, which includes: a processor 60, a memory 61, a bus 62 and a communication interface 63, the processor 60, the communication interface 63 and the memory 61 are connected through the bus 62; the processor 60 is used to execute an executable module stored in the memory 61, such as a computer program.

[0094] The memory 61 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 63 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0095] The bus 62 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, Figure 4 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0096] Among them, the memory 61 is used to store programs, and the processor 60 executes the program after receiving the execution instruction. The method executed by the device defined by the process disclosed in any embodiment of the above-mentioned embodiment of the present invention can be applied to the processor 60 or implemented by the processor 60.

[0097] The processor 60 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 60. The above processor 60 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in the embodiments of the present invention can be directly embodied as a hardware decoding processor to be executed, or the hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 61, and the processor 60 reads the information in the memory 61 and completes the steps of the above method in combination with its hardware.

[0098] A computer program product of a digital key management method, device and electronic device provided in an embodiment of the present invention includes a computer-readable storage medium storing a non-volatile program code executable by a processor. The instructions included in the program code can be used to execute the method in the previous method embodiment. The specific implementation can be found in the method embodiment, which will not be repeated here.

[0099] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0100] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0101] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0102] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inside", "outside", etc. indicate positions or positional relationships based on the positions or positional relationships shown in the accompanying drawings, or the positions or positional relationships in which the product of the invention is usually placed when in use. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific position, be constructed and operated in a specific position, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", "third", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0103] In addition, the terms "horizontal", "vertical", "overhanging" and the like do not mean that the components are required to be absolutely horizontal or overhanging, but can be slightly tilted. For example, "horizontal" only means that its direction is more horizontal than "vertical", and does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0104] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0105] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A digital key management method, characterized in that: Applied to digital key management systems, including: Receiving a digital key loss report request sent by a user; wherein the digital key loss report request includes: the user's identity information and encrypted digital key information; Verifying the request for reporting loss of the digital key to obtain a verification result; wherein the verification result includes one of the following: verification success, verification failure; When the verification result is successful, the digital key is marked as a lost state, and the lost state is synchronized to all target devices bound to the digital key to make the digital key invalid.

2. The digital key management method according to claim 1, characterized in that: Verifying the request for reporting loss of the digital key includes: Determining whether the message format of the digital key loss reporting request meets the first preset format requirement; If the information is consistent with the encrypted information, the encrypted digital key information is decrypted to obtain the decrypted information. Query whether the digital key corresponding to the decryption information is in an available state; If it is determined that the digital key is available, determining whether the user has the authority to manage the digital key based on the identity information of the user; If it is determined that the verification result is successful, Otherwise, the verification result is determined to be a verification failure.

3. The digital key management method according to claim 2, characterized in that: After obtaining the verification result, the method further includes: The verification result is fed back to the user, and when the verification result is a verification failure, the reason for the verification failure is synchronously fed back; when the verification result is a verification success, the loss report success information is synchronously fed back.

4. The digital key management method according to claim 1, characterized in that: After marking the digital key as lost, the method further includes: Record an operation log after receiving the digital key loss report request; wherein the operation log includes: the receiving time of the digital key loss report request, the content of the digital key loss report request and the operation performed based on the digital key loss report request.

5. The digital key management method according to claim 1, characterized in that: After synchronizing the loss report status to all target devices bound to the digital key, the method further includes: Receiving a temporary digital key request sent by a user; wherein the temporary digital key request includes: identity information of the user and device information of the target device; If it is determined that the message format of the temporary digital key request meets the second preset format requirement, judging whether the user has the authority to apply for the temporary digital key based on the identity information of the user; If it is determined that the temporary digital key is available, a temporary digital key is generated, and the temporary digital key is encrypted to obtain encrypted temporary digital key information; The encrypted temporary digital key information is sent to the target device so that the target device is bound to the temporary digital key.

6. The digital key management method according to claim 5, characterized in that: Encrypting the temporary digital key includes: Obtaining the ID information of the temporary digital key; Extracting key information from the ID information; wherein the key information includes: card medium type, TSP identification, current date and business serial number; The key information is converted into a specified radix number system according to preset requirements to obtain encrypted temporary digital key information.

7. The digital key management method according to claim 1, characterized in that: If the digital key loss reporting request is a result of being encrypted using a preset encryption key, then before verifying the digital key loss reporting request, the method further includes: decrypting the digital key loss reporting request using a preset decryption key.

8. A digital key management device, characterized in that: Applied to digital key management systems, including: A first receiving module is used to receive a digital key loss reporting request sent by a user; wherein the digital key loss reporting request includes: the identity information of the user and the encrypted digital key information; A verification module, used to verify the digital key loss report request and obtain a verification result; wherein the verification result includes one of the following: verification success, verification failure; The report loss and synchronization module is used to mark the digital key as a report loss state when the verification result is a successful verification, and synchronize the report loss state to all target devices bound to the digital key to make the digital key invalid.

9. An electronic device comprising a memory and a processor, wherein the memory stores a computer program that can be run on the processor, wherein: When the processor executes the computer program, the digital key management method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and when the computer instructions are executed by a processor, the digital key management method according to any one of claims 1 to 7 is implemented.

Images