Digital car key opening method based on ICCE standard

Abstract

The invention provides a digital car key opening method based on an ICCE standard, and the method comprises the steps: a DKey issuing management system platform receives a digital car key opening request, and verifies a user identity and a digital car key opening authority; after the user confirmation process is completed, requesting digital vehicle key installation data from a DKey issuing management system platform; after application personalization is completed, the DKey issuing management system platform uses the key management system to generate an encryption process key, generates key opening instruction data based on the encryption process key, and sends the key opening instruction data to the mobile terminal; the mobile terminal writes the decrypted DKey authentication key plaintext into a security unit of the mobile terminal; and the DKey issuing management system platform writes the identifier of the mobile terminal into the vehicle key white list, and synchronizes the updated white list to the vehicle end to complete the opening of the digital vehicle key. According to the invention, the security of data transmission and storage can be greatly improved, and convenient opening and general management of the digital car key can be realized at the same time.

Description

Technical Field

[0001] The present invention relates to the technical field of intelligent networked vehicles, and in particular to a digital vehicle key activation method based on the ICCE standard. Background Art

[0002] With the rapid development of intelligent connected cars, digital car keys have gradually become the mainstream of the industry as a substitute for traditional physical keys. However, the existing digital car key activation methods mostly use plain text transmission of key data, which has serious security risks and is vulnerable to attacks by criminals, resulting in sensitive data leakage, which in turn threatens the safety of the vehicle. Therefore, it is particularly important to design an efficient and secure digital car key activation method. Summary of the invention

[0003] The purpose of the present invention is to provide a digital car key activation method based on the ICCE standard, which greatly improves the security of data transmission and storage by adopting a symmetric algorithm to encrypt and transmit key secret data and securely stores it in a security chip of a mobile terminal, while realizing convenient activation and universal management of digital car keys.

[0004] The present invention achieves the above-mentioned purpose through the following technical solutions:

[0005] A digital car key activation method based on the ICCE standard includes the following steps:

[0006] Send a digital car key activation request on a mobile terminal through the business App. The digital car key activation request carries the mobile terminal's identifier.

[0007] After receiving the digital car key activation request, the DKey issuance management system platform verifies the user's identity and digital car key activation authority, and responds with the verification result;

[0008] If the verification is successful, the DKey Issuance Management System platform requests the user to confirm with the mobile terminal. After the user confirmation process is completed, the DKey Issuance Management System platform requests the digital car key installation data;

[0009] The DKey issuance management system platform checks whether the Applet in the security unit SE of the mobile terminal has completed application personalization. If not, it requests to complete the application personalization process;

[0010] After the application personalization is completed, the DKey issuance management system platform uses the key management system to generate the DKey authentication key, combines the random number generated by the mobile terminal as a dispersion factor, generates the encryption process key, and generates the key activation instruction data based on the encryption process key and sends it to the mobile terminal;

[0011] The mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, writes the decrypted DKey authentication key plaintext into the security unit of the mobile terminal, completes the preparation for the activation of the digital car key, and synchronizes the car key status to the DKey issuance management system platform;

[0012] The DKey issuance management system platform writes the mobile terminal's identification into the car key whitelist, and synchronizes the updated whitelist to the vehicle to complete the activation of the digital car key.

[0013] According to a digital car key activation method based on the ICCE standard provided by the present invention, before sending a digital car key activation request, the method further includes:

[0014] The business App queries the mobile terminal through the interface opened by the mobile terminal whether the mobile terminal meets the conditions for activating the digital car key, and the mobile terminal returns to the business App whether it supports the activation of the digital car key;

[0015] When the mobile terminal meets the conditions for activating a digital car key, the business App further queries the identification information and device communication capabilities of the mobile terminal through the interface open by the mobile terminal. The device communication capabilities include at least one of near-field communication NFC, Bluetooth, and ultra-wideband UWB, and decides whether to continue sending the digital car key activation request based on the query results.

[0016] According to a digital car key activation method based on the ICCE standard provided by the present invention, the user identity and the digital car key activation authority are verified, including:

[0017] At least two verification methods are used to verify the user's identity, including password verification and dynamic password verification; among them, password verification requires the user to provide a preset login password and check it with the password record stored in the system; dynamic password verification is that the platform generates a one-time dynamic password and sends it to a mobile terminal or other device, and the received dynamic password must be entered to complete the identity verification; and when the user identity verification is passed, the DKey issuance management system platform must further check whether the user has the authority to activate the digital car key based on the user's account information, including the user's account status, level, and whether the user has purchased services related to the digital car key.

[0018] According to a digital car key activation method based on the ICCE standard provided by the present invention, when the DKey issuance management system platform requests a confirmation process from a mobile terminal, the DKey issuance management system platform sends a short message containing a verification code to the mobile terminal bound when the user registers; the verification code is received and entered through the business App; the DKey issuance management system platform receives and verifies the verification code entered by the user, and when the verification code verification passes, the user identity is confirmed and the user confirmation process is completed.

[0019] According to a digital car key activation method based on the ICCE standard provided by the present invention, when checking whether the Applet in the security unit SE of the mobile terminal has completed application personalization, the DKey issuance management system platform constructs an application status acquisition instruction, which includes an identifier for identifying the target Applet and an instruction code for requesting to obtain its current application status;

[0020] The DKey issuance management system platform sends the constructed application status acquisition instruction to the target Applet in the security unit SE of the mobile terminal through a secure communication channel;

[0021] After receiving the instruction to obtain the application status, the target Applet parses the instruction and generates a response message according to its current application status. The response message includes status information indicating whether the application has been personalized.

[0022] The DKey issuance management system platform receives the response message from the target Applet and parses the status information therein to determine whether the target Applet has completed application personalization.

[0023] According to a digital car key activation method based on the ICCE standard provided by the present invention, after the Applet in the security unit SE of the mobile terminal completes the application personalization process, the Applet encapsulates the result of the application personalization completion and the relevant personalization data into a response message, and sends it to the DKey issuance management system platform through the communication link between the mobile terminal and the DKey issuance management system platform;

[0024] The DKey issuance management system platform receives and parses the response message to confirm that the Applet has successfully completed application personalization, and performs subsequent digital car key activation or configuration steps based on the parsed personalization data.

[0025] According to a digital car key activation method based on the ICCE standard provided by the present invention, key activation instruction data is generated, specifically including:

[0026] The DKey issuance management system platform calls the key management system KMS to generate the DKey authentication key;

[0027] The DKey issuance management system platform uses the mobile random number CardRandom as a dispersion factor and the encryption key Enc_Key to generate the encryption process key EncSessionKey;

[0028] The DKey issuance management system platform uses the encryption process key EncSessionKey to encrypt the DKey authentication key to obtain the DKey ciphertext DKeyCrypt;

[0029] The DKey issuance management system platform combines the ciphertext DKeyCrypt of the DKey authentication key with other business data to generate key activation instruction data;

[0030] The DKey issuance management system platform sends the generated key activation instruction data to the mobile terminal so that the mobile terminal can complete the activation of the digital car key accordingly.

[0031] According to a digital car key activation method based on the ICCE standard provided by the present invention, the mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, including:

[0032] The mobile terminal extracts the ciphertext DKeyCrypt of the DKey authentication key and other decryption information from the received key activation instruction data, including the generation parameters of the encryption process key or the initialization vector IV used in encryption;

[0033] The mobile terminal uses the same decryption algorithm and key management strategy as the DKey issuance management system platform to generate the encryption process key EncSessionKey for decryption based on the extracted ciphertext and other necessary information;

[0034] The mobile terminal uses the generated encryption process key EncSessionKey to decrypt the ciphertext DKeyCrypt of the DKey authentication key to obtain the plaintext of the DKey authentication key;

[0035] The mobile terminal writes the decrypted DKey authentication key in plain text into its security unit SE, completing the preparation for activation of the digital car key;

[0036] After completing the writing of the DKey authentication key in plain text, the mobile terminal generates and sends a response message to the DKey issuance management system platform to confirm that the DKey authentication key has been successfully written into the security unit.

[0037] According to a digital car key activation method based on the ICCE standard provided by the present invention, when issuing a car key whitelist, a vehicle-side SE random number is obtained from the vehicle's security unit SE through a wireless communication network. The random number is used to ensure the security and compliance of issuing the car key whitelist and prevent man-in-the-middle attacks or data tampering;

[0038] Before sending the vehicle-side SE random number to the key management system KMS, verify the validity of the vehicle-side SE random number;

[0039] After verifying that the vehicle-side SE random number is valid, a request is sent to the key management system KMS, and the message authentication code MAC maintained by the application is used to protect the whitelist issuance instructions. The MAC is generated by KMS and calculated based on the vehicle-side SE random number and the preset key algorithm to ensure the integrity and authenticity of the instructions during the transmission process and prevent the instructions from being tampered with or forged.

[0040] It can be seen that the present invention has the following beneficial effects:

[0041] 1. Improve security: The present invention uses a symmetric algorithm to encrypt and transmit key data, effectively preventing the data from being intercepted or tampered with during transmission, and improving the security of data transmission. The decrypted DKey authentication key plaintext is securely stored in the security chip of the mobile terminal, and the physical protection and encryption mechanism of the security chip are used to prevent the key data from being illegally accessed or stolen.

[0042] 2. Enhanced convenience: Users only need to use the business app on their smart mobile terminals to complete the activation request and confirmation of the digital car key, without having to carry or operate the physical key, which greatly simplifies the usage process. The entire process can be completed remotely through the wireless communication network, and users do not need to go to a designated location or use specific equipment, which improves the convenience of use.

[0043] 3. Achieve universality: The method of the present invention is widely applicable to various types of intelligent connected vehicles, is independent of specific vehicle brands or models, and promotes the standardization and universalization of digital car keys.

[0044] 4. Real-time synchronization: The car key whitelist between the DKey issuance management system platform and the vehicle end is synchronized in real time, ensuring timely update and management of the car key status.

[0045] 5. Enhanced user experience: This method is seamlessly integrated with the business App of smart mobile terminals, and users can complete all operations on a familiar interface, which improves the user experience. It supports multiple wireless communication methods (such as NFC, Bluetooth, UWB, etc.), and can select the appropriate communication method according to the actual environment and needs, which enhances the flexibility and convenience of use.

[0046] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 It is a flowchart of an embodiment of a digital car key activation method based on the ICCE standard of the present invention.

[0048] Figure 2 It is a flow diagram of a method for activating a digital car key based on the ICCE standard according to an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0050] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0051] See also Figure 1 and Figure 2 This embodiment provides a method for activating a digital car key based on the ICCE standard, the method comprising the following steps:

[0052] Step S1, sending a digital car key activation request on a mobile terminal through a service App, where the digital car key activation request carries an identifier of the mobile terminal;

[0053] Step S2, after receiving the digital car key activation request, the DKey issuance management system platform verifies the user identity and digital car key activation authority, and responds with the verification result;

[0054] Step S3, if the verification is successful, the DKey issuance management system platform requests the user to confirm from the mobile terminal, and after completing the user confirmation process, requests the digital car key installation data from the DKey issuance management system platform;

[0055] Step S4, the DKey issuance management system platform checks whether the Applet in the security unit SE of the mobile terminal has completed application personalization. If not, it requests to complete the application personalization process;

[0056] Step S5, after the application personalization is completed, the DKey issuance management system platform uses the key management system to generate a DKey authentication key, combines the random number generated by the mobile terminal as a dispersion factor, generates an encryption process key, and generates key activation instruction data based on the encryption process key and sends it to the mobile terminal;

[0057] Step S6: The mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, writes the decrypted DKey authentication key plaintext into the security unit of the mobile terminal, completes the preparation for activation of the digital car key, and synchronizes the car key status to the DKey issuance management system platform;

[0058] Step S7, the DKey issuance management system platform writes the identifier of the mobile terminal into the car key whitelist, and synchronizes the updated whitelist to the vehicle end to complete the activation of the digital car key.

[0059] In this embodiment, before sending the digital car key activation request, the following steps are also included:

[0060] The business App uses the interface opened by the mobile terminal to query whether the mobile terminal meets the conditions for activating the digital car key, and the mobile terminal returns to the business App whether it supports the activation of the digital car key.

[0061] When the mobile terminal meets the conditions for activating a digital car key, the business App further queries the identification information and device communication capabilities of the mobile terminal through the interface open by the mobile terminal. The device communication capabilities include at least one of near-field communication NFC, Bluetooth, and ultra-wideband UWB, and decides whether to continue sending the digital car key activation request based on the query results.

[0062] In this embodiment, the user identity and the digital car key activation authority are verified, including:

[0063] At least two verification methods are used to verify the user's identity, including password verification and dynamic password verification; among them, password verification requires the user to provide a preset login password and check it with the password record stored in the system; dynamic password verification is that the platform generates a one-time dynamic password and sends it to a mobile terminal or other device, and the received dynamic password must be entered to complete the identity verification; and when the user identity verification is passed, the DKey issuance management system platform must further check whether the user has the authority to activate the digital car key based on the user's account information, including the user's account status, level, and whether the user has purchased services related to the digital car key.

[0064] In this embodiment, when the DKey issuance management system platform requests confirmation from the mobile terminal, the DKey issuance management system platform sends a short message containing a verification code to the mobile terminal bound when the user registers; the verification code is received and entered through the business App; the DKey issuance management system platform receives and verifies the verification code entered by the user. When the verification code verification passes, the user identity is confirmed and the user confirmation process is completed.

[0065] In this embodiment, when checking whether the Applet in the security unit SE of the mobile terminal has completed application personalization, the DKey issuance management system platform constructs an application status acquisition instruction, which includes an identifier for identifying the target Applet and an instruction code for requesting to obtain its current application status. ;

[0066] The DKey issuance management system platform sends the constructed obtain application status instruction to the target Applet in the security unit SE of the mobile terminal through a secure communication channel; after receiving the obtain application status instruction, the target Applet parses the instruction and generates a response message based on its current application status, and the response message contains status information indicating whether the application has been personalized; the DKey issuance management system platform receives the response message from the target Applet and parses the status information therein to determine whether the target Applet has completed application personalization.

[0067] In this embodiment, after the Applet in the security unit SE of the mobile terminal completes the application personalization process, the Applet encapsulates the results of the application personalization and related personalization data into a response message, and sends it to the DKey issuance management system platform through the communication link between the mobile terminal and the DKey issuance management system platform; the DKey issuance management system platform receives and parses the response message to confirm that the Applet has successfully completed the application personalization, and performs subsequent digital car key activation or configuration steps based on the parsed personalization data.

[0068] In this embodiment, generating key activation instruction data specifically includes:

[0069] The DKey issuance management system platform calls the key management system KMS to generate a DKey authentication key; the DKey issuance management system platform uses the mobile terminal random number CardRandom as a dispersion factor and the encryption key Enc_Key to generate an encryption process key EncSessionKey; the DKey issuance management system platform uses the encryption process key EncSessionKey to encrypt the DKey authentication key to obtain the DKey ciphertext DKeyCrypt; the DKey issuance management system platform combines the DKey authentication key ciphertext DKeyCrypt with other business data to generate key activation instruction data; the DKey issuance management system platform sends the generated key activation instruction data to the mobile terminal so that the mobile terminal can complete the activation of the digital car key accordingly.

[0070] In this embodiment, the mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, including:

[0071] The mobile terminal extracts the ciphertext DKeyCrypt of the DKey authentication key and other decryption information, including the generation parameters of the encryption process key or the initialization vector IV used for encryption, from the received key activation instruction data; the mobile terminal adopts the same decryption algorithm and key management strategy as the DKey issuance management system platform, and generates the encryption process key EncSessionKey for decryption based on the extracted ciphertext and other necessary information; the mobile terminal uses the generated encryption process key EncSessionKey to decrypt the ciphertext DKeyCrypt of the DKey authentication key to obtain the plaintext of the DKey authentication key; the mobile terminal writes the decrypted plaintext of the DKey authentication key into its security unit SE to complete the preparation for activation of the digital car key; after completing the writing of the plaintext of the DKey authentication key, the mobile terminal generates and sends a response message to the DKey issuance management system platform to confirm that the DKey authentication key has been successfully written into the security unit.

[0072] In this embodiment, when issuing the car key whitelist, the vehicle-side SE random number is obtained from the vehicle's security unit SE through the wireless communication network. The random number is used to ensure the security and compliance of issuing the car key whitelist and prevent man-in-the-middle attacks or data tampering. Before sending the vehicle-side SE random number to the key management system KMS, the validity of the vehicle-side SE random number is verified.

[0073] After verifying that the vehicle-side SE random number is valid, a request is sent to the key management system KMS, and the message authentication code MAC maintained by the application is used to protect the whitelist issuance instructions. The MAC is generated by KMS and calculated based on the vehicle-side SE random number and the preset key algorithm to ensure the integrity and authenticity of the instructions during the transmission process and prevent the instructions from being tampered with or forged.

[0074] In practical applications, the specific implementation process of the digital car key provided in this embodiment includes:

[0075] 1. The car owner business app queries the mobile terminal through the open interface of the mobile terminal whether it meets the conditions for activating the digital car key, and the mobile terminal returns to the business app whether it supports the activation of the digital car key. The query request can be a specific API call. After receiving the request, the mobile terminal checks its hardware and software configuration, and then returns a response indicating support or non-support.

[0076] 2. If the mobile terminal meets the conditions for activating a digital car key, the business App queries the mobile terminal identification (such as device ID) and device communication capabilities (for example, whether it supports NFC, Bluetooth, UWB, etc.).

[0077] 3. The user sends a digital car key activation request to the DKey issuance management system platform through the business App, and the request contains the mobile terminal identification. The activation request can be sent via HTTP or HTTPS protocol, and the request body contains necessary parameters such as user ID, mobile terminal identification, etc.

[0078] 4. After receiving the digital car key activation request, the DKey issuance management system platform first verifies the user's identity. The verification methods include:

[0079] Password verification: Users need to provide a preset login password. The platform verifies the user's identity by comparing the password entered by the user with the password records stored in the system.

[0080] Dynamic password verification: The platform may generate a one-time dynamic password and send it to the user's mobile phone or other device. The user needs to enter the received dynamic password to complete the identity verification.

[0081] After the user identity verification is passed, the platform needs to further verify whether the user has the authority to activate the digital car key. The platform will check the user's account information to determine whether the user has the authority to activate the digital car key. This includes checking the user's account status, level, whether the relevant services have been purchased, etc.

[0082] 5. After the verification is passed, the DKey issuance management system platform sends a text message verification code to the mobile terminal, and the user enters the verification code through the business APP.

[0083] 6. After the DKey issuance management system platform verifies the SMS verification code, the user confirmation is completed.

[0084] 7. After the user confirms, the business App requests the digital car key installation data from the DKey issuance management system platform. The request includes data such as timestamp, counter, and mobile random number.

[0085] 8. The DKey issuance management system platform sends an application status acquisition instruction to the Applet in the mobile terminal SE to check whether the application personalization is completed; if the application personalization is not completed, the platform requests to complete the process.

[0086] 9. After the Applet in the mobile terminal SE completes the application personalization according to the platform's request, it returns the personalization results and data to the DKey issuance management system platform.

[0087] 10. The DKey issuance management system platform calls KMS to generate a DKey authentication key, and generates key activation instruction data through the following steps.

[0088] Use the mobile random number CardRandom as the dispersion factor and the encryption key Enc_Key to generate the encryption process key EncSessionKey = AES_CBC (Enc_Key, IV, CardRandom), the filling method is No_Padding, and the IV defaults to all 0s.

[0089] Use this process key EncSessionKey to encrypt the DKey authentication key using the AES_CBC algorithm, DKeyCrypt = AES_CBC (EncSessionKey, IV, DKey), the padding method is No_Padding, and the IV defaults to all 0s.

[0090] The DKey issuance management system platform generates key activation instruction data from the encrypted DKey authentication key ciphertext and other business data (such as CardID, ReaderID, CardInfo1, etc.) and sends it to the mobile terminal.

[0091] 11. The mobile terminal decrypts the DKey authentication key ciphertext using the algorithm process in step 10 and writes it into the security unit, generates the digital car key activation result, and synchronizes the car key status to the DKey issuance management system platform.

[0092] 12. The DKey issuance management system platform writes the mobile terminal identifier into the vehicle key whitelist and synchronizes it to the vehicle, and the key is activated successfully.

[0093] In summary, the present invention uses a symmetric algorithm to encrypt and transmit key secret data, which effectively prevents the data from being intercepted or tampered with during the transmission process, and improves the security of data transmission. The decrypted DKey authentication key plaintext is securely stored in the security chip of the mobile terminal. The physical protection and encryption mechanism of the security chip prevents the key data from being illegally accessed or stolen. Users only need to complete the activation request and confirmation of the digital car key through the business App on the smart mobile terminal, without carrying or operating the physical key, which greatly simplifies the use process. The entire process can be completed remotely through the wireless communication network, and users do not need to go to a designated location or use specific equipment, which improves the convenience of use.

[0094] Furthermore, the method of the present invention is widely applicable to various types of intelligent connected vehicles, is independent of specific vehicle brands or models, and promotes the standardization and universalization of digital car keys.

[0095] Furthermore, the car key whitelist between the DKey issuance management system platform and the vehicle end is synchronized in real time, ensuring timely updating and management of the car key status.

[0096] Furthermore, the method is seamlessly integrated with the business App of the smart mobile terminal, and the user can complete all operations on a familiar interface, which improves the user experience. It supports multiple wireless communication methods (such as NFC, Bluetooth, UWB, etc.), and the appropriate communication method can be selected according to the actual environment and needs, which enhances the flexibility and convenience of use.

[0097] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0098] The above-mentioned embodiments are only preferred embodiments of the present invention and cannot be used to limit the scope of protection of the present invention. Any non-substantial changes and substitutions made by technicians in this field on the basis of the present invention shall fall within the scope of protection required by the present invention.

Claims

1. A digital car key activation method based on ICCE standard, characterized in that: The following steps are involved: Send a digital car key activation request on a mobile terminal through the service App, where the digital car key activation request carries an identifier of the mobile terminal; After receiving the digital car key activation request, the DKey issuance management system platform verifies the user identity and digital car key activation authority, and responds with the verification result; If the verification is successful, the DKey Issuance Management System platform requests the user to confirm with the mobile terminal. After the user confirmation process is completed, the DKey Issuance Management System platform requests the digital car key installation data; The DKey issuance management system platform checks whether the Applet in the security unit SE of the mobile terminal has completed application personalization. If not, it requests to complete the application personalization process; After the application personalization is completed, the DKey issuance management system platform uses the key management system to generate the DKey authentication key, combines the random number generated by the mobile terminal as a dispersion factor, generates the encryption process key, and generates the key activation instruction data based on the encryption process key and sends it to the mobile terminal; The mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, writes the decrypted DKey authentication key plaintext into the security unit of the mobile terminal, completes the preparation for the activation of the digital car key, and synchronizes the car key status to the DKey issuance management system platform; The DKey issuance management system platform writes the mobile terminal's identification into the car key whitelist, and synchronizes the updated whitelist to the vehicle to complete the activation of the digital car key.

2. The method according to claim 1, characterized in that Before sending a digital car key activation request, it also includes: The business App queries the mobile terminal through the interface opened by the mobile terminal whether the mobile terminal meets the conditions for activating the digital car key, and the mobile terminal returns to the business App whether it supports the activation of the digital car key; When the mobile terminal meets the conditions for activating a digital car key, the business App further queries the identification information and device communication capabilities of the mobile terminal through the interface opened by the mobile terminal. The device communication capabilities include at least one of near-field communication NFC, Bluetooth, and ultra-wideband UWB, and decides whether to continue sending the digital car key activation request based on the query results.

3. The method according to claim 1, characterized in that The verification of the user identity and the digital car key activation authority includes: At least two verification methods are used to verify the user identity, including password verification and dynamic password verification; among them, password verification requires the user to provide a preset login password and check it with the password record stored in the system; dynamic password verification is that the platform generates a one-time dynamic password and sends it to a mobile terminal or other device, and the received dynamic password needs to be entered to complete the identity verification; and when the user identity verification is passed, the DKey issuance management system platform needs to further check whether the user has the authority to activate the digital car key based on the user's account information. The check includes the user's account status, level, and whether the digital car key-related services have been purchased.

4. The method according to claim 1, characterized in that: When the DKey issuance management system platform requests confirmation from the mobile terminal, the DKey issuance management system platform sends a short message containing a verification code to the mobile terminal bound when the user registers; the verification code is received and input through the business App; the DKey issuance management system platform receives and verifies the verification code entered by the user. When the verification code verification passes, the user identity is confirmed and the user confirmation process is completed.

5. The method according to claim 1, characterized in that: When checking whether the Applet in the security unit SE of the mobile terminal has completed application personalization, the DKey issuance management system platform constructs an application status acquisition instruction, which includes an identifier for identifying the target Applet and an instruction code for requesting to obtain its current application status; The DKey issuance management system platform sends the constructed application status acquisition instruction to the target Applet in the security unit SE of the mobile terminal through a secure communication channel; After receiving the instruction to obtain the application status, the target Applet parses the instruction and generates a response message according to its current application status, the response message including status information indicating whether the application has completed personalization; The DKey issuance management system platform receives the response message from the target Applet and parses the status information therein to determine whether the target Applet has completed application personalization.

6. The method according to claim 5, characterized in that: After the Applet in the security unit SE of the mobile terminal completes the application personalization process, the Applet encapsulates the result of the application personalization completion and the relevant personalization data into a response message, and sends it to the DKey issuance management system platform through the communication link between the mobile terminal and the DKey issuance management system platform; The DKey issuance management system platform receives and parses the response message to confirm that the Applet has successfully completed application personalization, and performs subsequent digital car key activation or configuration steps based on the parsed personalization data.

7. The method according to any one of claims 1 to 6, characterized in that: The generating of key activation instruction data specifically includes: The DKey issuance management system platform calls the key management system KMS to generate the DKey authentication key; The DKey issuance management system platform uses the mobile random number CardRandom as a dispersion factor and the encryption key Enc_Key to generate the encryption process key EncSessionKey; The DKey issuance management system platform uses the encryption process key EncSessionKey to encrypt the DKey authentication key to obtain the DKey ciphertext DKeyCrypt; The DKey issuance management system platform combines the ciphertext DKeyCrypt of the DKey authentication key with other business data to generate key activation instruction data; The DKey issuance management system platform sends the generated key activation instruction data to the mobile terminal so that the mobile terminal can complete the activation of the digital car key accordingly.

8. The method according to any one of claims 1 to 6, characterized in that: The mobile terminal uses the same decryption algorithm as the DKey issuance management system platform to decrypt the DKey authentication key ciphertext, including: The mobile terminal extracts the ciphertext DKeyCrypt of the DKey authentication key and other decryption information from the received key activation instruction data, including the generation parameters of the encryption process key or the initialization vector IV used in encryption; The mobile terminal uses the same decryption algorithm and key management strategy as the DKey issuance management system platform to generate the encryption process key EncSessionKey for decryption based on the extracted ciphertext and other necessary information; The mobile terminal uses the generated encryption process key EncSessionKey to decrypt the ciphertext DKeyCrypt of the DKey authentication key to obtain the plaintext of the DKey authentication key; The mobile terminal writes the decrypted DKey authentication key in plain text into its security unit SE, completing the preparation for activation of the digital car key; After completing the writing of the DKey authentication key in plain text, the mobile terminal generates and sends a response message to the DKey issuance management system platform to confirm that the DKey authentication key has been successfully written into the security unit.

9. The method according to any one of claims 1 to 6, characterized in that: When issuing the car key whitelist, the vehicle-side SE random number is obtained from the vehicle's security unit SE through the wireless communication network. The random number is used to ensure the security and compliance of issuing the car key whitelist and prevent man-in-the-middle attacks or data tampering; Before sending the vehicle-side SE random number to the key management system KMS, verify the validity of the vehicle-side SE random number; After verifying that the vehicle-side SE random number is valid, a request is sent to the key management system KMS, and the message authentication code MAC maintained by the application is used to protect the whitelist issuance instructions. The MAC is generated by KMS and calculated based on the vehicle-side SE random number and the preset key algorithm to ensure the integrity and authenticity of the instructions during the transmission process and prevent the instructions from being tampered with or forged.

Images