Application method, management method, device and system for digital key

Abstract

The present invention relates to the field of digital key technology, and specifically to an application method, management method, device, and system for digital key secret keys. The application method for digital key secret keys includes: obtaining a target production line and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; determining the target path information for the key application corresponding to the target production line based on the key application data and the key path network; and applying for a key or certificate based on the target path information. Through the key application data and the key path network, an application for a digital key secret key or certificate is made to the PKI system of the target export destination for each production line, supporting multi-production line and multi-export destination scenarios, adapting to the global production needs of automobile companies, and improving the efficiency and stability of key or certificate applications.

Description

Technical Field

[0001] The present invention relates to the field of digital key technology, and in particular to an application method and device for a digital key secret key, a management method and platform, a system and a readable storage medium. Background Art

[0002] In recent years, the pre-installation and after-market adoption rates of digital keys in vehicles have steadily increased, with more and more models now featuring them as standard equipment. This has led to a growing number of digital key users. Furthermore, with the globalization of automakers' factory construction and vehicle sales, a single automaker has established production sites in multiple countries. Each production site includes multiple production lines, and each production line may produce vehicles exported to multiple countries. Vehicle models and configurations exported to multiple countries or a single country often cover a wide range of models. Furthermore, infrastructure varies significantly across different export destinations. For example, some export destinations have network infrastructure and PKI systems that support a variety of protocols, while others lack network infrastructure, have no PKI systems, or have limited protocol support.

[0003] For vehicles exported overseas, installing digital keys requires applying for a key at the vehicle's export destination. The key is then transferred to the production site and distributed to the production line for key installation. The key installation process is as follows: Production site staff apply for keys from all export destinations based on the configuration information of various locally produced vehicle models. Keys for all requested export destinations are then distributed to the production line, where they are installed one-by-one into components. After key installation, the installed components are categorized by export destination. Furthermore, data on the components and the corresponding installed key information is collated and summarized to create a mapping table between component identification, key information, and component storage location. During vehicle manufacturing, the production line searches the component identification, key information, and component storage location mapping table based on the vehicle information produced by the production line and the intended export country. The matching key is then retrieved to complete the vehicle key installation. The vehicle-key binding relationship is then fed back to the exporting country's system. From key application to vehicle installation, since key applications are conducted for all exporting countries, manual effort is required to understand the infrastructure of each exporting country and then manually compile application information for each destination. This results in a massive amount of information that must be understood and processed. Furthermore, each key application requires repeated processing of the same tasks. This manual process, on the one hand, leads to a high level of repetitive manual work; on the other hand, manual processing of large amounts of data leads to low processing efficiency; and, when manually processing multiple exporting countries and various vehicle configurations, information confusion is easily generated, which increases the data installation error rate. Furthermore, during the installation process, the key information fed back from different exporting countries, information about installed parts, and vehicle production lines must be repeatedly sorted through. This cumbersome process requires manual data processing, resulting in low processing efficiency and prone to errors.

[0004] As for the export location, the staff at the export location need to process the key application information submitted by each production location based on the relevant information of the key application submitted by all production locations, and manually feed back the processed data to the production location one by one. Since it is necessary to process multiple different production locations, and each production location includes key application data for multiple different models, the amount of data that needs to be processed and verified is huge, which makes it easy to make mistakes during the manual processing. The same production location may cause confusion between keys of different models; or the key information feedback for different production locations may be wrong. This will lead to a mismatch between the later keys and the vehicle, and then filling errors will occur, which will also affect the normal use of the vehicle's digital key. Summary of the Invention

[0005] One objective of the present invention is to provide a method for applying for a digital key secret key to address the problems of a complex key or certificate application process and a long application cycle in the prior art. A second objective is to provide a method for managing a digital key secret key. A third objective is to provide an application device for a digital key secret key. A fourth objective is to provide a management platform for a digital key secret key. A fifth objective is to provide a management system for a digital key secret key. A sixth objective is to provide a management device for a digital key secret key. A seventh objective is to provide a readable storage medium.

[0006] In order to achieve the above object, the technical solution adopted by the present invention is as follows:

[0007] In some embodiments, a method for applying for a digital key secret key is provided, comprising: in response to a key application request sent by a production line, obtaining a target production line corresponding to the key application request and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; determining the target path information of the key application corresponding to the target production line based on the key application data and the key path network; saving the target path information, and splicing the corresponding key application data to obtain first verification data; when the target export destination information includes a PKI system, applying for a key or certificate to the PKI system of the target export destination based on the target path information, and receiving key data fed back by the PKI system of the target export destination, wherein the key data includes: key ID information, key or certificate, and a first key digest value; calculating a second key digest value based on the received key; when the second key digest value is the same as the first key digest value, performing a secondary verification on the received key data based on the first verification data, the first key digest value, and the second key digest value; when the secondary verification result is normal, performing key filling based on the received key data; when the secondary verification result is abnormal, feedback that the key data does not match is given, and the key application request is resent.

[0008] The present disclosure provides a method for applying for digital key secret keys. During vehicle manufacturing, a production line generates a key application request based on the infrastructure information of the target export destination and the vehicle model information produced by the production line. This allows the production line to proactively submit a key application request based on the production information and the corresponding export destination information. Furthermore, the present disclosure utilizes a key path network to match the target production line's key application data with the target path information for the key application. This allows for online application of keys or certificates based on the target path information. Using the key application data and the key path network, each production line can apply for a digital key secret key or certificate from the PKI system of the target export destination. Compared to related techniques that require manual key application requests from multiple export destinations at the production site, the present disclosure utilizes a pre-established key path network to accurately and quickly match key application paths, significantly improving key application efficiency. Furthermore, the key path network improves key application accuracy, reduces manual effort, and simplifies the complexity of key application compared to manual data processing and verification. As for the PKI system at the export destination, the key can be directly generated according to the received target path information, which greatly reduces the difficulty of processing key applications at the export destination and improves the efficiency and accuracy of key applications.

[0009] Furthermore, compared to the related art, which completes key applications for all exporting countries at the same time, this application specifically applies for keys to the exporting countries corresponding to the models produced by the target production line. Since the number of exporting countries corresponding to the vehicles produced by each production line is limited, the number of keys processed at the same time is greatly reduced. Furthermore, in this application, the key or certificate obtained by applying to the PKI system of the target export destination through the target path information is directly distributed to the target production line. During the process of manufacturing vehicles, the target production line directly performs key filling to complete the production of the vehicle. Compared to the related art, which first performs batch filling of keys and then matches the filled parts with the model, this application cancels the process of batch filling and redistribution of keys by applying for keys online for the target production line, thereby reducing the process of multiple collation and aggregation of key-related data and data retrieval, and simplifying the process of key application filling. Moreover, the present disclosure replaces manual key application and distribution with online key application and distribution, thereby improving the efficiency of key application filling and reducing the matching error rate during the processing.

[0010] Furthermore, in order to improve the accuracy of the key during key filling, the present application verifies the received key before filling. If the verification passes, key filling is performed; if the verification fails, it indicates that there is a data error during the key application process, and the key application is restarted. In this way, the present application can complete the verification of the key accuracy before key filling, thereby improving the accuracy of the filled key, reducing the filling error rate, and thus reducing the return rate of digital keys, greatly reducing production costs.

[0011] Furthermore, during the key application process, this application matches the key path network based on the production line information, vehicle information and relevant information of the export destination corresponding to the target production line, and determines the target path information of the key application. This can improve the accuracy and efficiency of the key application, support multi-production line and multi-export destination scenarios, adapt to the global production needs of automobile companies, improve the accuracy and efficiency of data matching, and thus improve the efficiency and stability of key or certificate applications.

[0012] Optionally, the step of performing a secondary verification on the received key data based on the first verification data, the first key digest value and the second key digest value includes: determining the secondary verification first digest value based on the first verification data and the first key digest value; determining the secondary verification second digest value based on the first verification data and the second key digest value; when the secondary verification second digest value is the same as the secondary verification first digest value, determining that the secondary verification result is normal; when the secondary verification second digest value is different from the secondary verification first digest value, determining that the secondary verification result is abnormal.

[0013] In this embodiment, a double verification mechanism is implemented for the requested key data by combining the first and second key digest values with the first verification data to generate two independent secondary verification first and second digest values. Thus, by comparing the first and second key digest values, it is possible to verify whether the key has been tampered with. Furthermore, by comparing the secondary verification first and second digest values, it is possible to verify whether the key has been tampered with or replaced during transmission. Compared to single-point verification, this improves the accuracy of key verification.

[0014] Optionally, before the step of determining the target path information of the key application corresponding to the target production line based on the key application data and the key path network, it also includes: obtaining production line information and export destination information; and constructing a key path network based on the production line information and export destination information.

[0015] In this embodiment, a key path network is constructed based on production line information and export destination information. By constructing the key path network, basic information about the production site and infrastructure information about the export destination are organized and summarized. During the key application process, the appropriate target application path can be quickly matched based on the information of each production line and the target export destination, thus achieving a logical association between the production line and the export destination. Compared to related technologies that manually organize and apply data, constructing a key path network using production line information and export destination information greatly improves key application efficiency, reduces labor intensity, and can replace manual operations, significantly reducing error rates. The key path network covers basic information about the production line and the export destination. In this way, according to the actual situation of each production line and the actual situation of each export location, the actual situation information matching can be carried out in the key path network, and then for different production locations and different export locations, a key application path that meets the actual situation of the production location to the export location can be matched according to their respective actual situations. That is, the key path network provided by the present disclosure can match the key application requirements from different production locations to export locations, and can be applied to different production areas and export areas, thereby improving the efficiency of cross-regional key application at production locations and export locations, and reducing the complexity of cross-regional key application filling. In addition, for the key path network, the path network can also be updated in a timely manner according to changes in export location information and production location information, thereby improving the adaptability of the key path network.

[0016] Optionally, the production line information includes the production line identification, vehicle configuration information, key algorithm and vehicle VIN (Vehicle Identification Number) code of the production line; the export destination information includes the export destination name, the export destination network information, and PKI (Public Key Infrastructure) system information; based on the production line information and the export destination information, the step of constructing a key path network includes: based on the production line identification, vehicle configuration information, key algorithm, vehicle VIN code, export destination name, export destination network information and PKI system information, generating a path network from the production line to the export destination; wherein the path information of each path includes a path code, and a set of application, distribution and management operations of the key or certificate corresponding to the path code.

[0017] In this embodiment, a path network from the production line to the export destination is generated based on the production line identification, vehicle configuration information, key algorithm, vehicle VIN number, export destination name, export destination network information, and PKI system information to ensure accurate matching of the requested key with the vehicle configuration information and vehicle export destination information. Furthermore, by configuring the key algorithm, export destination network information, and PKI system information, the key path is optimized, improving the efficiency and accuracy of key requests.

[0018] Optionally, the step of applying for a key or certificate according to the target path information includes: when a PKI system is not constructed in the target export destination information, obtaining a key in an online key negotiation mode according to the target path information.

[0019] In this embodiment, the online application or negotiation mode is automatically switched according to the construction of the PKI system in the exporting area to improve the success rate of key acquisition. Online negotiation is to establish a communication link between the vehicle and the mobile phone through the network, and the cloud TSP service only serves as a communication relay during the negotiation process and does not save the data of the negotiation process. Therefore, when exporting overseas, the key data can be completely isolated. At the same time, because the key negotiation algorithm generates the key through online negotiation, and the encryption step is included in the negotiation generation process, online negotiation can not only ensure the secure generation of keys in areas without a PKI system, but also does not require reliance on production lines, saving production costs.

[0020] Optionally, the steps of obtaining the key using the online key negotiation mode include: after the digital key controller on the vehicle side receives the online key negotiation instruction forwarded by the vehicle computer, it uses the ECC algorithm and the DH algorithm to locally generate the temporary private key of the vehicle side and the temporary public key to be exchanged, and sends the temporary public key to the digital key APP of the mobile terminal through the vehicle computer and the TSP of the exporting country; after the digital key APP of the mobile terminal receives the temporary public key of the vehicle side, it uses the same ECC algorithm and DH algorithm to generate the temporary public key and temporary private key of the mobile terminal, and forwards the temporary public key to the digital key controller on the vehicle side through the TSP of the exporting country and the vehicle computer; the digital key controller on the vehicle side uses the temporary private key of the vehicle side and the temporary public key of the mobile terminal to generate a public key. Shared key Kdh, and at the same time generate a random number, encrypt it with the shared key Kdh, and send it to the mobile terminal through the vehicle computer and the TSP of the exporting country; the digital key APP of the mobile terminal uses the temporary private key of the mobile terminal and the temporary public key of the vehicle end to generate the same shared key Kdh; the mobile terminal decrypts the random number sent by the vehicle end and subtracts one, and then encrypts it with the shared key Kdh and sends it to the digital key controller of the vehicle end through the TSP of the exporting country and the vehicle computer; the digital key controller on the vehicle end uses the shared key Kdh to parse it, add one to the local random number and compare them to see if they are equal. If they are equal, the vehicle computer and the TSP of the exporting country will reply to the digital key APP of the mobile terminal that the negotiation is successful; if they are not equal, the random number verification fails, and the negotiation failure is replied.

[0021] In this embodiment, the online key negotiation method is adopted, which can be applied to areas with vehicle networking conditions but without KPI systems, thereby improving the flexibility of key generation.

[0022] In some embodiments, a method for managing digital key secrets is provided, including: using a key quantity prediction model to predict the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset period; and applying for the target quantity of keys or certificates according to the application method described in any of the above embodiments.

[0023] The management method for digital key keys provided by the present disclosure utilizes a key quantity prediction model to predict in advance the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset period. And according to the key application method of any of the above embodiments, the application for the required target quantity of keys or certificates is completed in advance. By completing the application for the keys or certificates required for the next production plan cycle in advance, when the production line applies for vehicle keys again, it will be directly obtained from the local key library without the need for online cross-border communication to apply for keys or certificates. In this way, by completing the application for the keys or certificates required for the next production plan cycle in advance, the problem of application delays caused by problems such as communication time and communication instability during the real-time online application process in the production process can be avoided, thereby improving production efficiency and stability.

[0024] Optionally, the step of constructing the key quantity prediction model includes: using a multi-output long short-term memory network model as the model architecture; obtaining historical production data corresponding to each production line in multiple historical production cycles, the historical production data including: production line identification, vehicle configuration information, export place name, production time and the number of keys or certificates applied for; using historical data to train the model structure to obtain a key quantity prediction model; wherein, the production line identification, vehicle configuration information, export place name, and production time are used as input data, and the number of keys or certificates applied for is used as output data.

[0025] In this embodiment, a key quantity prediction model is obtained by training multiple groups of historical production data of the production line, and the temporal dependency of the historical production data is sorted out to improve the prediction accuracy of the key or certificate application sorting.

[0026] Optionally, according to a preset cycle, using a key quantity prediction model, the steps of predicting the target number of keys or certificates required for the target production line in the next production plan cycle include: obtaining the planned production information of the target production line in the next production plan cycle, the planned production information including the planned production line identification, planned vehicle configuration information, planned export destination name, and planned production time; inputting the planned production information into the key quantity prediction model to obtain the target number of keys or certificates required for the target production line in the next production plan cycle; wherein the end time of the preset cycle is before the next production plan cycle.

[0027] In this embodiment, production plan-related information is tied to key prediction to improve the relevance of key application and production plan, thereby improving the accuracy of key prediction. Furthermore, by setting the end time of the preset period before the next production plan period, that is, by partially overlapping the preset period and the production plan period, but not completely, the number of required keys or certificates can be predicted and applied for before the production plan period begins, thereby improving the timeliness of key application and thus production efficiency.

[0028] Optionally, after completing the step of applying for the target number of keys or certificates, the management method further includes: sending the applied keys or certificates to the local key library of the target production line, so that the target production line can allocate corresponding keys from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export destination information, vehicle VIN code and vehicle configuration information; and synchronizing the binding relationship between the key or certificate and the vehicle VIN code to the TSP (Telematics Service Provider) system at the export destination, so that the digital key APP can query and obtain the key or certificate for vehicle authentication.

[0029] In this embodiment, after completing the application for the target number of keys or certificates, the keys or certificates obtained in the application are sent to the local key library of the target production line so that the production line can complete the filling of digital keys. Compared with the related art, it is necessary to carry out batch filling of keys for different export destinations, organize the mapping relationship of parts for different export destinations and vehicle models after filling, and manage notes on the usage status of the filled parts. The management method provided by the present disclosure realizes the full-link management of key quantity prediction, key application, key distribution and key filling, improves the efficiency of key management, reduces manual intervention, and improves the accuracy of key-related data processing. Furthermore, the binding relationship between the key or certificate and the vehicle VIN code is synchronized to the TSP system of the export destination, and then after the vehicle is sold, when the digital key and vehicle are authenticated, the key or certificate can be directly queried and obtained from the local TSP system of the export destination for vehicle authentication.

[0030] In some embodiments, a device for applying for a digital key secret key is provided, comprising: an acquisition module configured to respond to a key application request sent by a production line, acquire a target production line corresponding to the key application request and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; a storage module configured to save target path information and splice the corresponding key application data to obtain first verification data; a determination module configured to determine the target path information of the key application corresponding to the target production line based on the key application data and the key path network; and an application module configured to determine the target path information of the key application corresponding to the target production line in the case where the target export destination information includes a PKI system. , apply for a key or certificate from the PKI system of the target export destination according to the target path information, and receive key data fed back by the PKI system of the target export destination, the key data including: key ID information, key or certificate, and first key summary value; the verification module is configured to calculate a second key summary value based on the received key; when the second key summary value is the same as the first key summary value, perform a secondary verification on the received key data based on the first verification data, the first key summary value, and the second key summary value; when the secondary verification result is normal, perform key filling according to the received key data; when the secondary verification result is abnormal, feedback is given that the key data does not match, and the key application request is resent.

[0031] In some embodiments, a device for applying for a digital key secret key is provided, comprising a processor and a memory storing program instructions, wherein the processor is configured to execute the method for applying for a digital key secret key as described in any of the above embodiments when running the program instructions.

[0032] In some embodiments, a management platform for digital key secrets is provided, including: a key prediction device, configured to predict the target number of keys or certificates required for the target production line in the next production plan cycle according to a preset period using a key quantity prediction model; and an application device for digital key secrets as described in any of the above embodiments, the device being configured to apply for the target number of keys or certificates.

[0033] Optionally, the management platform also includes: a key management device, configured to send the applied key or certificate to the local key library of the target production line, so that the target production line can allocate the corresponding key from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export destination information, vehicle VIN code and vehicle configuration information; and the key management device is also configured to synchronize the binding relationship between the key or certificate and the vehicle VIN code to the TSP system at the export destination, so that the digital key APP can query and obtain the key or certificate for vehicle authentication.

[0034] In some embodiments, a management system for digital key secret keys is provided, comprising: a management platform as described in any of the above embodiments; a TSP in the producing country, which is in communication connection with the management platform, and the TSP in the producing country is used to send a key application request to the management platform, and send the corresponding key application request key application data to the management platform; a PKI system in the exporting country, which is in communication connection with the management platform, and is used to generate corresponding key data based on the received target path information, and send the key data to the management platform, the key data including: key ID information, key or certificate, and first key summary value; a production line, which is in communication connection with the TSP in the producing country, and is used to generate a key application request, and send the key application request and the corresponding key application data to the management platform. The production line information and export location information are uploaded to the TSP of the producing country; the received key data is verified, the key data that passes the verification is filled into the Bluetooth controller, and the vehicle VIN code, Bluetooth controller identification code and certificate or key ID are stored; for the key data that fails the verification, the key application request is resent; the TSP of the exporting country communicates with the management platform to receive and store the binding relationship between the key or certificate and the vehicle VIN code fed back by the management platform; the application side communicates with the TSP of the exporting country to obtain the key from the TSP of the exporting country according to the user information and vehicle information, generate a digital key based on the obtained key, and establish a connection with the vehicle-side controller to complete the security authentication.

[0035] The management system for digital key provided by the present disclosure includes: a management platform, a TSP in the production country, a production line, a TSP in the export country, and an application end. The management platform is in communication connection with the TSP in the production country and the TSP in the export country. The production line is in communication connection with the TSP in the production country. The application end is in communication connection with the export TSP. The management platform includes a key prediction device, an application device, and a key management device. The production line uploads production information to the TSP in the production country. The TSP in the production country sends the obtained production information to the management platform and initiates an application request for a key or certificate. The key prediction device uses a key quantity prediction model to predict the target number of keys or certificates required for the target production line in the next production plan cycle according to a preset period. The application device applies for the target number of keys or certificates. The key management device sends the target number of keys or certificates applied for to the TSP in the production country. The TSP in the production country receives and stores the keys or certificates fed back by the management platform, and binds the keys or certificates to the vehicle VIN code. At the same time, the TSP in the production country feeds back the binding relationship between the keys or certificates and the vehicle VIN code to the management platform. The management platform sends the binding relationship between the key or certificate and the vehicle VIN code to the TSP of the exporting country. When the production line is in production, it goes to the local TSP of the producing country to obtain the corresponding certificate or key based on the export location, vehicle VIN code and vehicle configuration information. The application end includes the car company APP. After the user purchases the vehicle and completes the real-name authentication binding, he downloads and installs the car company's APP with the digital key function, clicks on the interface to activate the digital key, and initiates a request to the TSP system of the exporting country. The TSP system of the exporting country obtains the corresponding digital key key ID based on the user information and vehicle information passed in by the APP, and queries the digital key key or certificate from the local PKI system based on the ID and returns it to the APP. The APP generates a digital key based on the obtained digital key key or certificate, establishes a connection with the digital key controller on the vehicle side, completes security authentication, and then the user can use the digital key APP to control the vehicle. Through the management system provided by the present disclosure, the automated application and management of digital keys are realized, which adapts to the unified management of different production and sales locations around the world.

[0036] Optionally, the Bluetooth controller generates a random number and encrypts the random number according to the filled key or certificate to obtain the encrypted second verification data; the Bluetooth controller sends a key verification request to the production line, and the key verification request includes the second verification data; the production line responds to the key verification request sent by the Bluetooth controller, obtains the vehicle VIN code corresponding to the Bluetooth controller, and searches for the corresponding filled key or certificate stored locally in the production line according to the vehicle VIN code. According to the vehicle VIN code and the corresponding key or certificate, the second verification data is decrypted to obtain a decrypted random number; the vehicle VIN code, the identification code of the Bluetooth controller, the key or certificate stored in the production line and the decrypted random number are spliced, and the spliced data is encrypted using the key or certificate stored in the production line to obtain the first verification authentication data; and the first verification authentication data is sent to the Bluetooth controller; the Bluetooth controller splices the vehicle VIN code, the identification code, the key or certificate of the Bluetooth controller and the generated random number stored in the Bluetooth controller, and encrypts it using the key or certificate to obtain the second verification authentication data; the first verification authentication data and the second verification authentication data are compared; if the comparison results are consistent, it is determined that the key filling is correct; if the comparison results are inconsistent, it is determined that the key filling is abnormal, and the abnormal result is fed back to the production line so that the production line can re-determine the key and fill it according to the feedback abnormal result.

[0037] In this embodiment, a verification procedure is implemented after the Bluetooth controller is installed. Specifically, the key information stored internally in the Bluetooth controller is compared with the key information stored locally on the production line for the corresponding Bluetooth controller. This allows the determination of whether any key or certificate installation errors have occurred. By re-verifying the installed Bluetooth controller, the accuracy of key installation is improved, further reducing the error rate and the likelihood of vehicle returns due to Bluetooth controller mismatches, thereby lowering manufacturing costs.

[0038] In some embodiments, a management device for a digital key secret key is provided, comprising a processor and a memory storing program instructions, wherein the processor is configured to execute the management method for a digital key secret key as described in any of the above embodiments when running the program instructions.

[0039] In some embodiments, a readable storage medium is provided, storing program instructions, which, when executed, enable a computer to execute the application method for a digital key secret key as described in any of the above embodiments, or the management method for a digital key secret key as described in any of the above embodiments.

[0040] Beneficial effects of the present invention:

[0041] (1) Through key application data and key path network, it is possible to apply for digital keys or certificates for each production line to the PKI system of the target export destination. Compared with related technologies, online application for keys or certificates reduces the number of keys that need to be filed in the filing system, thereby reducing the requirements for the filing system. In addition, it supports multiple production lines and multiple export destinations, adapting to the global production needs of automobile companies, and can improve the accuracy and efficiency of data matching, thereby improving the efficiency and stability of key or certificate applications.

[0042] (2) Using the key quantity prediction model, the target number of keys or certificates required by the target production line in the next production plan cycle is predicted in advance according to the preset period. The target number of keys or certificates required for the next production plan cycle is applied for in advance. When the production line applies for vehicle keys again, they will be obtained directly from the local key library without the need for online cross-border communication to apply for keys or certificates, thereby improving production efficiency and stability.

[0043] (3) The present disclosure sets up a multiple verification mechanism for the key to complete the verification of the key accuracy, thereby improving the accuracy of the filling key, reducing the filling error rate, and thus reducing the return rate of the digital key, greatly reducing the production cost. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 A flowchart of a method for applying for a digital key provided in one embodiment of the present invention;

[0045] Figure 2 A flowchart of a method for constructing a key path network provided by one embodiment of the present invention;

[0046] Figure 3 A schematic diagram of a key path network provided for one embodiment of the present invention;

[0047] Figure 4 A schematic diagram of a key path network provided for yet another embodiment of the present invention;

[0048] Figure 5 A flowchart for online negotiation of a digital key provided by one embodiment of the present invention;

[0049] Figure 6 A flowchart of a method for managing a digital key provided by one embodiment of the present invention;

[0050] Figure 7 A schematic diagram of the MO-LSTM network structure used to construct a key quantity prediction model provided by one embodiment of the present invention;

[0051] Figure 8A schematic diagram of ONE-HOT encoding and splicing in a key quantity prediction model provided by one embodiment of the present invention;

[0052] Figure 9 A schematic diagram of the organization of a training data set used to construct a key quantity prediction model provided by one embodiment of the present invention;

[0053] Figure 10 A flowchart of using a key quantity prediction model to perform sorting and prediction according to an embodiment of the present invention;

[0054] Figure 11 A schematic diagram of organizing key application data into training sample data according to an embodiment of the present invention;

[0055] Figure 12 A flowchart of a method for managing a digital key provided in yet another embodiment of the present invention;

[0056] Figure 13 A schematic block diagram of a device for applying for a digital key provided in one embodiment of the present invention;

[0057] Figure 14 A schematic block diagram of a digital key management platform provided in accordance with an embodiment of the present invention;

[0058] Figure 15 A schematic block diagram of a management system for digital key cryptographic keys provided in accordance with an embodiment of the present invention;

[0059] Figure 16 A schematic block diagram of a management system for digital key cryptographic keys provided in accordance with another embodiment of the present invention;

[0060] Figure 17 A structural diagram of a digital key management device provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0061] The following describes the embodiments of the present invention with reference to the accompanying drawings and preferred embodiments. Those skilled in the art will readily appreciate the other advantages and benefits of the present invention from the disclosure herein. The present invention may also be implemented or applied through various other specific embodiments, and the various details in this specification may be modified or altered based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are intended only to illustrate the present invention and are not intended to limit the scope of protection of the present invention.

[0062] It should be noted that the illustrations provided in the following embodiments are merely schematic illustrations of the basic concept of the present invention. Therefore, the illustrations only show components related to the present invention and are not drawn according to the number, shape, and size of components in actual implementation. In actual implementation, the type, quantity, and proportion of each component may be changed arbitrarily, and the component layout may also be more complex.

[0063] In some embodiments, a device for applying for a digital key secret key is provided, comprising a processor and a memory storing program instructions, wherein the processor is configured to execute the method for applying for a digital key secret key described in any of the above embodiments when running the program instructions.

[0064] In some embodiments, combined Figure 1 As shown, a method for applying for a digital key is provided, including:

[0065] S102: The processor responds to the key application request sent by the production line and obtains the target production line corresponding to the key application request and key application data associated with the target production line.

[0066] Among them, the key application data includes the target production line identification, target export destination information, and target vehicle configuration information.

[0067] The production line ID uniquely identifies a production line. A vehicle manufacturing system includes multiple production lines. To distinguish between them, each line is assigned a unique identifier, known as the production line ID. Vehicle information produced by each production line is associated with the production line ID, creating a mapping between production lines and vehicles. Vehicle information includes the vehicle's export destination and configuration. The target production line ID refers to the ID of the production line for which a key application is required.

[0068] The export destination information includes the name of the export destination, the network information of the export destination, and the PKI system information. The export destination name is the name of the export area after the vehicles of this production line are produced. The network information of the export destination refers to the network configuration of the export area, including whether the network is set up or not. The PKI system information refers to whether the export area has a PKI system, including whether a PKI system has been built, the protocol types supported by the set PKI system, and whether a PKI system has been built. The target export destination information refers to the relevant information of the export destination of the vehicles produced by the production line corresponding to the target production line identification.

[0069] Vehicle configuration information includes vehicle configuration information and vehicle VIN number. Vehicle configuration information includes, but is not limited to, vehicle model parameters, vehicle controller type, key algorithm, etc. Target vehicle configuration information refers to the configuration information of vehicles produced by the production line corresponding to the target production line identifier.

[0070] S104: The processor determines target path information of the key application corresponding to the target production line according to the key application data and the key path network.

[0071] The key path network is constructed based on the production line information of the production line and the information of the export destination, and covers the production line information from the production location to the export destination information of the export destination.

[0072] By matching the acquired key application data with the key path network, the target path information for applying for keys that meet the requirements of the target production line is obtained. By establishing a key path network, it is possible to adapt to key management rules in multiple locations and combine production information and export destination information to apply and distribute keys, thereby improving cross-border data processing efficiency. This allows the optimal key application path to be selected based on production line information, export destination information, and vehicle configuration information, reducing manual intervention and improving application efficiency.

[0073] S106: The processor saves the target path information and concatenates the corresponding key application data to obtain first verification data.

[0074] S108, when the target export destination information includes a PKI system, the processor applies for a key or certificate from the PKI system of the target export destination according to the target path information, and receives key data fed back by the PKI system of the target export destination. The key data includes: key ID information, key or certificate, and a first key summary value.

[0075] S110: The processor calculates a second key digest value according to the received key.

[0076] S112: When the second key digest value is the same as the first key digest value, the processor performs a secondary verification on the received key data according to the first verification data, the first key digest value, and the second key digest value.

[0077] S114: When the secondary verification result is normal, the processor performs key filling according to the received key data.

[0078] S116: If the secondary verification result is abnormal, the processor will feedback that the key data does not match and resend the key application request.

[0079] S118: When the second key digest value is different from the first key digest value, the processor resends the key application request.

[0080] The present disclosure provides a method for applying for digital key secret keys. During vehicle manufacturing, a production line generates a key application request based on the infrastructure information of the target export destination and the vehicle model information produced by the production line. This allows the production line to proactively submit a key application request based on the production information and the corresponding export destination information. Furthermore, the present disclosure utilizes a key path network to match the target production line's key application data with the target path information for the key application. This allows for online application of keys or certificates based on the target path information. Using the key application data and the key path network, each production line can apply for a digital key secret key or certificate from the PKI system of the target export destination. Compared to related techniques that require manual key application requests from multiple export destinations at the production site, the present disclosure utilizes a pre-established key path network to accurately and quickly match key application paths, significantly improving key application efficiency. Furthermore, the key path network improves key application accuracy, reduces manual effort, and simplifies the complexity of key application compared to manual data processing and verification. As for the PKI system at the export destination, the key can be directly generated according to the received target path information, which greatly reduces the difficulty of processing key applications at the export destination and improves the efficiency and accuracy of key applications.

[0081] Furthermore, compared to the related art, which completes key applications for all exporting countries at the same time, this application specifically applies for keys to the exporting countries corresponding to the models produced by the target production line. Since the number of exporting countries corresponding to the vehicles produced by each production line is limited, the number of keys processed at the same time is greatly reduced. Furthermore, in this application, the key or certificate obtained by applying to the PKI system of the target export destination through the target path information is directly distributed to the target production line. During the process of manufacturing vehicles, the target production line directly performs key filling to complete the production of the vehicle. Compared to the related art, which first performs batch filling of keys and then matches the filled parts with the model, this application cancels the process of batch filling and redistribution of keys by applying for keys online for the target production line, thereby reducing the process of multiple collation and aggregation of key-related data and data retrieval, and simplifying the process of key application filling. Moreover, the present disclosure replaces manual key application and distribution with online key application and distribution, thereby improving the efficiency of key application filling and reducing the matching error rate during the processing.

[0082] Furthermore, in order to improve the accuracy of the key during key filling, the present application verifies the received key before filling. If the verification passes, key filling is performed; if the verification fails, it indicates that there is a data error in the key application processing, and the key application is restarted. In this way, by adopting the present application, the accuracy of the key can be verified before key filling, thereby improving the accuracy of the filled key, reducing the filling error rate, and thus reducing the return rate of the digital key, greatly reducing the production cost. In addition, the present disclosure sets a secondary verification mechanism for the applied key, and improves the accuracy of the key verification through a multiple verification mechanism.

[0083] Furthermore, during the key application process, this application matches the key path network based on the production line information, vehicle information and related information of the export destination corresponding to the target production line, and determines the target path information of the key application. This can improve the accuracy and efficiency of the key application, support multi-production line and multi-export destination scenarios, adapt to the global production needs of automobile companies, improve the accuracy and efficiency of data matching, and thus improve the efficiency and stability of key or certificate applications.

[0084] Optionally, the step of performing a secondary verification on the received key data based on the first verification data, the first key digest value and the second key digest value includes: determining the secondary verification first digest value based on the first verification data and the first key digest value; determining the secondary verification second digest value based on the first verification data and the second key digest value; when the secondary verification second digest value is the same as the secondary verification first digest value, determining that the secondary verification result is normal; when the secondary verification second digest value is different from the secondary verification first digest value, determining that the secondary verification result is abnormal.

[0085] In this embodiment, a double verification mechanism is implemented for the requested key data by combining the first and second key digest values with the first verification data to generate two independent secondary verification first and second digest values. Thus, by comparing the first and second key digest values, it is possible to verify whether the key has been tampered with. Furthermore, by comparing the secondary verification first and second digest values, it is possible to verify whether the key has been tampered with or replaced during transmission. Compared to single-point verification, this improves the accuracy of key verification.

[0086] Optionally, the step of verifying the applied key can be performed on the key application device side or on the production line side. The step of verifying on the production line side includes: the server of the production line receives the applied key data and the first verification data, and calculates the second key digest value. The second key digest value is calculated based on the key. When the second key digest value is the same as the first key digest value, the secondary verification first digest value is determined based on the first verification data and the first key digest value; the secondary verification second digest value is determined based on the first verification data and the second key digest value; when the secondary verification second digest value is the same as the secondary verification first digest value, the production line performs key filling according to the received key data. When the secondary verification second digest value is different from the secondary verification first digest value, the key application request is resent to the key application device. By performing secondary verification on the production line side, it is possible to verify whether there is any abnormality in the path of transmitting the key data to the server of the production line, thereby further improving the accuracy of the verification of the key data.

[0087] For example, the verification example is as follows: the key application data uploaded by the server of the production line includes: production location A1, normal network, PKI system, vehicle configuration information L1, support for ICCOA protocol, use of ECC algorithm, and export location B1. Figure 4As shown, the key application device matches the key application data to the target application path, coded as 1. The device stores the target application path information and concatenates it with the key application data to obtain first verification data, verifyData, as follows: verifyData = Production Location A1 || Network Normal || Available || L1 || ICCOA || ECC || Export Location B1. The key application device applies to and receives key data from the export location's PKI system. The key data includes: a key ID, a key, and a key digest value = MD5(key). The digest algorithm is not limited to MD5 (Message Digest Algorithm MD5). The key application device uses the MD5 algorithm to calculate a secondary verification first digest value based on the first verification data and the key digest value. The secondary verification first digest value = MD5(verifyData || key digest) || key digest. The device sends this secondary verification first digest value and the key data to the production line server. The production line server uses the MD5 algorithm and the key to calculate a second key digest value. When the second key digest value is the same as the first key digest value, the first verification data verifyData and the second key digest value are spliced together, and the spliced data is used to calculate the secondary verification second digest value. When the secondary verification second digest value is the same as the secondary verification first digest value, the production line performs key filling according to the received key data. When the secondary verification second digest value is different from the secondary verification first digest value, that is, the secondary verification digest comparison fails, it means that the matched request path does not match the actual request parameters, and it is necessary to re-match the path and apply for the key. If the second key digest value is different from the first key digest value, it means that the key has been tampered with during transmission and the key application request needs to be resent.

[0088] In some embodiments, combined Figure 2 As shown, a method for constructing a key path network is provided, comprising:

[0089] S202, the processor obtains production line information and export location information;

[0090] Among them, production line information includes production line identification, vehicle configuration information, key algorithm and vehicle VIN code; export destination information includes export destination name, export destination network information and PKI system information;

[0091] S204: The processor constructs a key path network based on the production line information and the export destination information.

[0092] In this embodiment, a key path network is constructed based on production line information and export destination information. By constructing the key path network, basic information about the production site and infrastructure information about the export destination are organized and summarized. During the key application process, only the information about each production line and the target export destination is needed to quickly match the appropriate target application path, thus achieving a logical association between the production line and the export destination. Compared to related technologies that manually organize and apply data, constructing a key path network using production line information and export destination information greatly improves key application efficiency, reduces labor intensity, and can replace manual operations, significantly reducing error rates. The key path network covers basic information about the production line and the export destination. In this way, according to the actual situation of each production line and the actual situation of each export location, the actual situation information matching can be carried out in the key path network, and then for different production locations and different export locations, a key application path that meets the actual situation of the production location to the export location can be matched according to their respective actual situations. That is, the key path network provided by the present disclosure can match the key application requirements from different production locations to export locations, and can be applied to different production areas and export areas, thereby improving the efficiency of cross-regional key application at production locations and export locations, and reducing the complexity of cross-regional key application filling. In addition, for the key path network, the path network can also be updated in a timely manner according to changes in export location information and production location information, thereby improving the adaptability of the key path network.

[0093] Optionally, based on the production line information and the export destination information, the step of constructing a key path network includes: generating a path network from the production line to the export destination based on the production line identification, vehicle configuration information, key algorithm, vehicle VIN code, export destination name, export destination network information and PKI system information; wherein the path information of each path includes the path code, the application, distribution and management operation set of the key or certificate corresponding to the path code.

[0094] In this embodiment, a key path network is generated from the production line to the export destination based on multi-dimensional data from the production line and export destination. Specifically, the production line and export destination information is used as network nodes, and each node is associated with its attributes, such as the key algorithms supported by the production line, the PKI system status of the export destination, and the network configuration information of the export destination. A key path network is generated based on the path formation rules of the network nodes and their attributes. By constructing a key path network, the production line capabilities are integrated with the export destination requirements, a logical association between the production line and the export destination is achieved, and the key distribution process is simplified. The key path network unifies the key application, distribution, and management rules, reducing the complexity of cross-regional collaboration.

[0095] Combine Figure 3The key path network shown in the figure (arrows indicate the relationships between network nodes; nodes connected by arrows of the same color form an application path) includes network nodes including: production line identification, network connectivity, PKI system status at the export destination, protocol types supported by the PKI system, vehicle configuration information, supported key algorithms, export destination name, and path code. The path code identifies the application path and allows for quick location and management. The attributes for each network node are as follows: Production line identification includes lines A1, A2, and A3, which can be added or removed based on the specific production line. Network connectivity refers to the connectivity between the production line and the export destination, including normal connectivity. PKI system status at the export destination includes "yes" and "no." "Yes" indicates a PKI system at the export destination, while "no" indicates no PKI system at the export destination. Protocols supported by the PKI system include, but are not limited to, proprietary protocols, ICCOA, and CCC. The proprietary protocol refers to the manufacturer's customized protocol for connecting and communicating between a mobile phone and the vehicle's digital key's Bluetooth controller. The ICCOA (Intelligent Car Connectivity Open Alliance) protocol refers to the protocol standard developed by the Intelligent Car Connectivity Open Alliance. The CCC (Car Connectivity Consortium) protocol refers to the protocol standard developed by the Car Connectivity Consortium. Vehicle configuration information includes Level 1 (L1) and Level 2 (L2), with L1 and L2 representing different vehicle configuration levels. For example, vehicle configuration information for Level 1 includes support for Bluetooth keys, keyless entry, ICCOA digital keys, automatic locking upon departure, and automatic unlocking upon approach. Vehicle configuration information for Level 2 includes support for Bluetooth keys, CCC digital keys, ICCOA digital keys, automatic locking upon departure, automatic unlocking upon approach, and NFC cards. It should be noted that the number of vehicle configuration levels is not limited to the listed examples and can be added or removed based on actual vehicle conditions. The key algorithms supported by the vehicle include but are not limited to: AES (Advanced Encryption Standard) algorithm and ECC (Elliptic Curve Cryptography) algorithm. The export destination name lists the name of the region to be exported. For example, the export destination names include B1 and B2. The path code refers to the number of the application path that can be finally formed. Combined with Table 1, it is the number of the application path of the present invention. Figure 3The illustrated embodiment provides an operation set corresponding to the key path network, where each number corresponds to an operation instruction for the application path, and the operation combination summarizes the operation instructions corresponding to each path number.

[0096] Table 1 Figure 3 The set of operations corresponding to the key path network shown

[0097]

[0098] It should be noted that the attributes of each of the above network nodes can be adaptively adjusted and modified according to the production line information and export location information to meet the actual situation. The above are only examples for explanation and the scope of protection is not limited to this.

[0099] Optionally, the step of applying for a key or certificate according to the target path information includes: when the target export destination information includes a PKI system, applying for a key online from the PKI system according to the target path information.

[0100] In this embodiment, an online application is made to the PKI system based on the matched target path information, thereby improving the efficiency and accuracy of key application.

[0101] For example, combined Figure 4The completed key path network shown in the figure (arrows in the figure represent the relationships between network nodes; nodes connected by arrows of the same color form an application path) is combined with the operations corresponding to the path encoding shown in Table 2. The production lines include domestic location A1 and international location A2. The export locations are international locations B1, B2, and B3. Vehicle configuration information includes Level 1 (abbreviated as L1), Level 2 (abbreviated as L2), and Level 3 (abbreviated as L3), where L1, L2, and L3 represent different vehicle configuration levels. Examples of exemplary vehicle configurations include: Level L1 vehicle configuration information includes support for Bluetooth key, keyless entry, ICCOA digital key, automatic locking when leaving the vehicle, and automatic unlocking when approaching the vehicle; Level L2 vehicle configuration information includes support for Bluetooth key, CCC digital key, ICCOA digital key, automatic locking when leaving the vehicle, automatic unlocking when approaching the vehicle, and support for NFC cards; Level L3 vehicle configuration information includes support for Bluetooth key, CCC digital key, ICCOA digital key, automatic locking when leaving the vehicle, automatic unlocking when approaching the vehicle, support for NFC cards, support for mobile phone NFC, remote seat control, and remote air conditioning control. Obtain the target production line and key application data associated with the target production line. The target production line's line identifier is domestic A1, and the target export destination is foreign B1. The target vehicle configuration information corresponding to the target production line includes vehicle configuration L1, normal network connectivity, a PKI system in place at the export destination, and supported protocols: proprietary and ICCOA. The ICCOA protocol uses the ECC algorithm, while the proprietary protocol uses the AES algorithm. Request data based on the key obtained and Figure 4 The key path network shown in the figure matches the target paths with numbers 1 and 2. Based on Table 2, a key or certificate application is made to the PKI system of the exporting country according to the operation instructions corresponding to numbers 1 and 2.

[0102] Table 2 Figure 4 The set of operations corresponding to the key path network shown

[0103]

[0104] Optionally, the step of applying for a key or certificate according to the target path information includes: when a PKI system is not constructed in the target export destination information, obtaining a key by adopting an online key negotiation mode according to the target path information.

[0105] In this embodiment, online negotiation establishes a communication link between the vehicle and the mobile phone via the Internet. During the negotiation process, the cloud-based TSP service only serves as a communication relay and does not store any negotiation data. Therefore, key data can be completely isolated during overseas export. At the same time, the key negotiation algorithm itself ensures the security of the transmission process. This solution does not require filing and naturally avoids the security, privacy, and compliance risks associated with the filing process. Therefore, in areas without a PKI system, online negotiation not only ensures the secure generation of keys, but also eliminates the need to rely on production lines, saving manufacturing costs.

[0106] Optionally, combined Figure 5 The online negotiation flow chart shown in the figure shows the steps for online negotiation key and digital key derivation as follows:

[0107] In step S502, after receiving the online key negotiation instruction forwarded by the vehicle computer, the vehicle-side digital key controller uses the ECC algorithm and the DH algorithm to locally generate the vehicle-side temporary private key and the temporary public key to be exchanged, and sends the temporary public key to the user's digital key APP through the vehicle computer TBox (Telematics BOX) and the local TSP.

[0108] S504: After receiving the temporary public key from the vehicle, the mobile phone's digital key app generates a temporary public key and private key using the same ECC and DH algorithms. The temporary public key pair is then forwarded to the vehicle's digital key controller via the local TSP and the vehicle's TBox.

[0109] In step S506 , the digital key controller on the vehicle side generates a shared key Kdh using the temporary private key on the vehicle side and the temporary public key on the mobile phone side. It also generates a random number, encrypts it with Kdh, and sends it to the mobile phone side via the previous link.

[0110] In step S508, the mobile phone's digital key app uses the temporary private key on the mobile phone and the temporary public key on the vehicle to generate the same shared key Kdh. At this point, Kdh is the digital key master key. Alternatively, a derived key from this key can be used as the digital key master key. The mobile phone decrypts the random number sent by the vehicle, subtracts one from it, and then encrypts it with Kdh before sending it to the vehicle's digital key controller via the previous link.

[0111] At step S510, the digital key controller on the vehicle side parses Kdh, adds one to the local random number, and compares it to see if the result is equal. If so, the controller replies to the mobile phone's digital key app via the original link, indicating a successful negotiation. If the random number verification fails, the controller replies, indicating a failed negotiation. Alternatively, the vehicle side and the digital key controller each concatenate the random number with Kdh and use a MAC algorithm to calculate its 32-bit derived key, Kmac. The first 16 bits of Kmac are used as the IRK, and the last 16 bits are used as the pairing code encryption key. Alternatively, the controller directly uses the last 16 bits of Kmac to calculate the hash value of the 4-bit data as the pairing code. The mobile phone and the vehicle side independently generate and verify the pairing code using the same algorithm.

[0112] S512, after completing the online negotiation of the digital key with the vehicle, can be used to generate the key, connect with the vehicle, authenticate, and perform subsequent vehicle control operations.

[0113] In this embodiment, an online key negotiation method is adopted. For areas with the conditions for Internet of Vehicles, it can avoid problems such as inconsistency between production and sales areas and key isolation, while eliminating the cost of modifying the production line for the production line filling solution and the cost of building the local PKI system, thereby greatly saving manufacturing costs.

[0114] In some embodiments, a management device for a digital key secret key is provided, comprising a processor and a memory storing program instructions, wherein the processor is configured to execute the management method for a digital key secret key as described in any of the above embodiments when running the program instructions.

[0115] In some embodiments, combined Figure 6 As shown, a method for managing a digital key is provided, comprising:

[0116] S602: The processor uses a key quantity prediction model to predict the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset cycle.

[0117] Generate a scheduled task by setting a preset period. Start the scheduled task at each preset period and predict the target number of keys or certificates required to start the next production planning cycle.

[0118] The specific value of the preset cycle can be set according to the time of the production plan cycle.

[0119] S604: The processor applies for a target number of keys or certificates according to the application method for a digital key as described in any of the above embodiments.

[0120] The management method for digital key keys provided by the present disclosure utilizes a key quantity prediction model to predict in advance the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset period. And according to the key application method of any of the above embodiments, the application for the required target quantity of keys or certificates is completed in advance. By completing the application for the keys or certificates required for the next production plan cycle in advance, when the production line applies for vehicle keys again, it will be directly obtained from the local key library without the need for online cross-border communication to apply for keys or certificates. In this way, by completing the application for the keys or certificates required for the next production plan cycle in advance, the problem of application delays caused by problems such as communication time and communication instability during the real-time online application process in the production process can be avoided, thereby improving production efficiency and stability.

[0121] The management method provided by the present disclosure utilizes a key quantity prediction model to predict the target number of keys or certificates required for the next production plan cycle. Then, according to the application method for digital keys described in any of the above embodiments, the key application process is triggered based on the predicted target number and the key path network, completing the application of keys or certificates required for the next production plan cycle in advance. This allows for on-demand application and allocation of keys, improving key application efficiency and production line efficiency. Furthermore, the management method disclosed herein enables automated processing of the entire chain, from predicting the required number of keys or certificates to completing the application of the corresponding number of keys or certificates, reducing manual intervention.

[0122] Optionally, the step of constructing the key quantity prediction model includes: using a multi-output long short-term memory network model as the model architecture; obtaining historical production data corresponding to each production line in multiple historical production cycles, the historical production data including: production line identification, vehicle configuration information, export place name, production time and the number of keys or certificates applied for; using historical data to train the model structure to obtain a key quantity prediction model; wherein, the production line identification, vehicle configuration information, export place name, and production time are used as input data, and the number of keys or certificates applied for is used as output data.

[0123] In this embodiment, the model structure selects a multi-output LSTM (Long Short-Term Memory) model, which uses a multi-output variant of the Long Short-Term Memory Network (LSTM) to effectively identify long-term trends such as production cycles, vehicle model iterations, and export policy changes, thereby improving the accuracy of predictions. Figure 7As shown in Figure 1, the multi-output LSTM model consists of an input layer, hidden layers, and an output layer. The input layer receives multidimensional time series data, including production line identification, vehicle configuration information, export location, production time, and the number of key or certificate applications within each historical production cycle. The hidden layer captures temporal dependencies, such as periodic production fluctuations, and correlations between multidimensional features. The output layer generates a predicted number of keys or certificates required for each production line in the next production planning cycle.

[0124] Furthermore, multiple sets of historical production data from multiple historical production cycles are obtained, and the model is trained using the multiple sets of historical production data. The model is trained and optimized to improve the accuracy of the prediction of the number of keys or certificates. Among them, the historical production data includes: production line identification, network connectivity, vehicle configuration information, export location name, PKI system construction status at the export location, protocol types supported by PKI, production time, and the number of key or certificate applications. That is, the historical production data covers the production line identification, the configuration information of the vehicles produced by the production line corresponding to each production line identification in each production cycle, as well as the vehicle's export location information, the vehicle's production time, and the total number of key or certificate applications applied for in each production cycle.

[0125] Furthermore, the step of arranging the training sample data includes: sorting out the historical production data, taking the input historical production data as input features, and sorting out the PKI systems of different exporting countries and the certificates and key types corresponding to the digital key protocols they support as labels. Figure 8 As shown, ONE-HOT encoding is performed based on the attribute state and label data of each input feature, that is, different vector bits represent different eigenvalues. If the bit is satisfied, the eigenvalue is set to 1, otherwise it is set to 0. Figure 8 As shown in FIG, the encoded feature vectors are concatenated to form a feature matrix and the corresponding label data as a training sample data. By processing multiple sets of historical production data from multiple historical production cycles, multiple sets of training sample data can be obtained.

[0126] Furthermore, multiple sets of training sample data are processed with feature engineering according to the time sequence of historical production cycles to obtain the following Figure 9 The training dataset is shown in the figure. The training dataset is input into the LSTM model for training. After the training is completed, a key quantity prediction model is obtained.

[0127] The model is trained and optimized using historical production data to improve the accuracy of predictions on the number of keys or certificates, and can predict key requirements to avoid production line shutdowns due to key shortages, thereby improving the completion rate of production plans. Optionally, according to a preset cycle, the key quantity prediction model is used to predict the target number of keys or certificates required for the target production line in the next production plan cycle, including the following steps: obtaining the planned production information of the target production line in the next production plan cycle, the planned production information including the planned production line identification, planned vehicle configuration information, the planned export location name, and the planned production time; inputting the planned production information into the key quantity prediction model to obtain the target number of keys or certificates required for the target production line in the next production plan cycle; wherein the end time of the preset cycle is before the next production plan cycle.

[0128] In this embodiment, the planned production information for the target production line in the next production planning cycle (the target production line here can be any production line) is input into the key quantity prediction model. Using the trained multi-output LSTM model, the number of keys or certificates required for the target production line in the next production planning cycle is output. The end time of the preset cycle must be earlier than the start time of the next production planning cycle to reserve time for key application and filling.

[0129] For example, if the production plan period is set to a quarterly cycle, the preset period can be one month or 15 days earlier than the production plan period. The specific setting can be reasonable based on the time of key application and filling. For example, if the production plan period is from April 1 to June 30, the preset period is 3 months, and the preset period ends on February 28.

[0130] For example, the target production line is identified as domestic A1, and the planned production information for the next production plan cycle of the target production line includes: the planned export destination information is foreign B1, the planned vehicle configuration information corresponding to the target production line includes the vehicle configuration level is L1, the supported key algorithm is ECC, the network connectivity is normal, a PKI system is built at the planned export destination, the protocol types supported by PKI are private protocol and ICCOA protocol, the ICCOA protocol uses the ECC algorithm, the private protocol uses the AES algorithm, and the planned production time is April, May and June. Figure 10 As shown, the model input data is sorted out and spliced into the key quantity prediction model. The prediction results for the keys or certificates required for the target exporting country B1 are output, as shown in Table 3. The key or certificate application is carried out according to the key application method defined in any of the above embodiments.

[0131] Table 3 Prediction results of the keys or certificates required for target export country B1

[0132]

[0133] Optionally, after completing the prediction of the number of keys or certificates for a production plan cycle, the key application data corresponding to each production plan cycle is used as training sample data to optimize the training of the key quantity prediction model.

[0134] For example, combined Figure 11 As shown, Figure 4 The listed key application data is organized into sample data for training, where padding indicates that the position does not represent any attribute value and is filled with "0" to facilitate model training. Figure 11 As shown in Table 4, the encoded feature vectors are concatenated to form a feature matrix and the corresponding label data are input into the model as a training sample data to optimize the model and improve its adaptability.

[0135] Table 4 Application data for keys or certificates for the last production planning cycle

[0136]

[0137] In some embodiments, combined Figure 12 As shown, a method for managing a digital key is provided, comprising:

[0138] S1202: The processor uses a key quantity prediction model to predict the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset cycle.

[0139] S1204: The processor applies for a target number of keys or certificates according to the application method for a digital key as described in any of the above embodiments.

[0140] S1206, the processor sends the applied key or certificate to the local key library of the target production line, so that the target production line can allocate the corresponding key from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export location information, vehicle VIN code and vehicle configuration information.

[0141] Compared with the related art, which requires batch filling of keys for different export destinations, sorting out the mapping relationship of parts for different export destinations and vehicle models after filling, and making management notes on the usage status of the filled parts, the management method provided by the present invention realizes the full-link management of key quantity prediction, key application, key distribution and key filling, improves the efficiency of key management, reduces manual intervention, and improves the accuracy of key-related data processing.

[0142] S1208: The processor synchronizes the binding relationship between the key or certificate and the vehicle VIN code to the TSP system at the export location, so that the digital key APP can query and obtain the key for vehicle authentication.

[0143] In this embodiment, based on the predicted target quantity and key application data for the target production line, a key or certificate is requested from the PKI system of the target export destination. The requested key or certificate is stored in the local key repository of the target production line's local TSP system. During production, the production line directly retrieves the corresponding certificate or key from the local key repository based on the target export destination, the vehicle VIN number, and vehicle configuration information, eliminating the need for online cross-border communication to request the key or certificate, thereby improving production efficiency and stability. The key is then loaded into the vehicle's Bluetooth controller via production line equipment. The key binding relationship between the vehicle and the local TSP system of the production line is synchronized with the TSP system of the export destination, allowing the Digital Key app to query and obtain the key for vehicle authentication. The user initiates an authentication request through the Digital Key app, queries the local TSP system of the exporting country for the binding relationship, and based on the binding relationship, obtains the key from the TSP of the producing country and returns it to the app. The vehicle-side controller completes identity authentication based on the key. This method selects a compliant key based on the export destination information, reducing the risk of cross-border data violations. Furthermore, keys for different export destinations are stored and synchronized independently, achieving multi-region key isolation.

[0144] In some embodiments, combined Figure 13As shown, an application device 1300 for a digital key secret key is provided, comprising: an acquisition module 1310, configured to respond to a key application request sent by a production line, obtain a target production line corresponding to the key application request and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; a determination module 1320, configured to determine the target path information of the key application corresponding to the target production line based on the key application data and the key path network; a storage module 1330, configured to save the target path information, and to splice the corresponding key application data to obtain a first verification data; an application module 1340, configured to, when the target export destination information includes a PKI system, apply for a key or certificate to the PKI system of the target export destination according to the target path information, and receive key data fed back by the PKI system of the target export destination, wherein the key data includes: key ID information, key or certificate, and a first key summary value. The verification module 1350 is configured to calculate a second key digest value based on the received key; when the second key digest value is the same as the first key digest value, the received key data is verified twice based on the first verification data, the first key digest value and the second key digest value; when the result of the secondary verification is normal, the key is filled according to the received key data; when the result of the secondary verification is abnormal, it is fed back that the key data does not match and the key application request is resent.

[0145] The present disclosure provides a device 1300 for applying for digital keys. During vehicle manufacturing, a production line generates a key application request based on the infrastructure information of the target export destination and the vehicle models produced by the production line. This allows the production line to proactively submit a key application request based on its production information and the corresponding export destination information. Furthermore, the present disclosure utilizes a key path network to match the target production line's key application data with the target path information for the key application. This enables online application of keys or certificates based on the target path information. Using the key application data and the key path network, each production line can apply for digital keys or certificates from the PKI system of the target export destination. Compared to related techniques that require manual key application requests from multiple export destinations at the production site, the present disclosure utilizes a pre-established key path network to accurately and quickly match key application paths, significantly improving key application efficiency. Furthermore, the key path network improves key application accuracy, reduces manual effort, and simplifies the complexity of key application compared to manual data processing and verification. As for the PKI system at the export destination, the key can be directly generated according to the received target path information, which greatly reduces the difficulty of processing key applications at the export destination and improves the efficiency and accuracy of key applications.

[0146] Furthermore, compared to the related art, which completes key applications for all exporting countries at the same time, this application specifically applies for keys to the exporting countries corresponding to the models produced by the target production line. Since the number of exporting countries corresponding to the vehicles produced by each production line is limited, the number of keys processed at the same time is greatly reduced. Furthermore, in this application, the key or certificate obtained by applying to the PKI system of the target export destination through the target path information is directly distributed to the target production line. During the process of manufacturing vehicles, the target production line directly performs key filling to complete the production of the vehicle. Compared to the related art, which first performs batch filling of keys and then matches the filled parts with the model, this application cancels the process of batch filling and redistribution of keys by applying for keys online for the target production line, thereby reducing the process of multiple collation and aggregation of key-related data and data retrieval, and simplifying the process of key application filling. Moreover, the present disclosure replaces manual key application and distribution with online key application and distribution, thereby improving the efficiency of key application filling and reducing the matching error rate during the processing.

[0147] Furthermore, in order to improve the accuracy of the key during key filling, the present application verifies the received key before filling. If the verification passes, key filling is performed; if the verification fails, it indicates that there is a data error in the key application processing, and the key application is restarted. In this way, by adopting the present application, the accuracy of the key can be verified before key filling, thereby improving the accuracy of the filled key, reducing the filling error rate, and thus reducing the return rate of the digital key, greatly reducing the production cost. In addition, the present disclosure sets a secondary verification mechanism for the applied key, and improves the accuracy of the key verification through a multiple verification mechanism.

[0148] Furthermore, during the key application process, this application matches the key path network based on the production line information, vehicle information and related information of the export destination corresponding to the target production line, and determines the target path information of the key application. This can improve the accuracy and efficiency of the key application, support multi-production line and multi-export destination scenarios, adapt to the global production needs of automobile companies, improve the accuracy and efficiency of data matching, and thus improve the efficiency and stability of key or certificate applications.

[0149] In some embodiments, a device for applying for a digital key secret key is provided, comprising a processor and a memory storing program instructions, wherein the processor is configured to execute the method for applying for a digital key secret key described in any of the above embodiments when running the program instructions.

[0150] In some embodiments, combined Figure 14 As shown, a management platform 1400 for digital key secret keys is provided, including: a key prediction device 1410, which is configured to use a key quantity prediction model to predict the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset period; and an application device 1300 for digital key secret keys as described in any of the above embodiments, wherein the device is configured to apply for a target quantity of keys or certificates.

[0151] The present disclosure provides a management platform 1400 for digital key keys, and a key prediction device 1410 that uses a key quantity prediction model to predict in advance the target quantity of keys or certificates required for the target production line in the next production plan cycle according to a preset period. The application device 1300 completes the application for the required target quantity of keys or certificates in advance according to the key application method of any of the above embodiments. By completing the application for the keys or certificates required for the next production plan cycle in advance, when the production line applies for vehicle keys again, it will be directly obtained from the local key library without the need for online cross-border communication to apply for keys or certificates, thereby improving production efficiency and stability.

[0152] Optionally, the management platform 1400 also includes: a key management device 1420, which is configured to send the applied key or certificate to the local key library of the target production line, so that the target production line can allocate the corresponding key from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export destination information, vehicle VIN code and vehicle configuration information; and the key management device 1420 is also configured to synchronize the binding relationship between the key or certificate and the vehicle VIN code to the TSP system at the export destination, so that the digital key APP can query and obtain the key for vehicle authentication.

[0153] In some embodiments, combined Figure 15 As shown, a management system 1500 for digital key secret keys is provided, comprising: a management platform 1400 as described in any of the above embodiments; a production country TSP 1510, which is in communication with the management platform and is used to send a key application request to the management platform and send the corresponding key application request key application data to the management platform. An exporting country PKI system 1550 is in communication with the management platform and is used to generate corresponding key data based on the received target path information and send the key data to the management platform. The key data includes: key ID information, key or certificate, and first key digest value. A production line 1520 is in communication with the production country TSP and is used to generate a key application request and upload the key application request and corresponding production line information and export location information to the production country TSP; and verify the received key data, fill the key data that passes the verification into the Bluetooth controller, and store the vehicle VIN code, Bluetooth controller identification code and certificate or key ID; for key data that fails the verification, resend the key application request. The exporting country TSP 1530 is connected to the management platform for receiving and storing the binding relationship between the key or certificate and the vehicle VIN code fed back by the management platform; the application end 1540 is connected to the exporting country TSP for obtaining the key from the exporting country TSP based on user information and vehicle information, generating a digital key based on the obtained key, and establishing a connection with the vehicle-side controller to complete security authentication.

[0154] The management system for digital key provided by the present disclosure includes: a management platform, a TSP in the producing country, a production line, a PKI system in the exporting country, a TSP in the exporting country, and an application end. The management platform is in communication connection with the TSP in the producing country, the TSP in the exporting country, and the PKI system in the exporting country. The production line is in communication connection with the TSP in the producing country. The application end is in communication connection with the exporting TSP. The management platform includes a key prediction device, an application device, and a key management device. The production line uploads production information to the TSP in the producing country. The TSP in the producing country sends the obtained production information to the management platform and initiates an application request for a key or certificate. The key prediction device uses a key quantity prediction model according to a preset period to predict the target number of keys or certificates required for the target production line in the next production plan cycle. The key application device applies for the target number of keys or certificates to the PKI system in the exporting country. The key management device sends the target number of keys or certificates applied for to the TSP in the producing country. The TSP in the producing country receives and stores the keys or certificates fed back by the management platform, and binds the keys or certificates to the vehicle VIN code. At the same time, the TSP of the producing country feeds back the binding relationship between the key or certificate and the vehicle VIN code to the management platform. The management platform sends the binding relationship between the key or certificate and the vehicle VIN code to the TSP of the exporting country. When the production line is in production, it goes to the local TSP of the producing country to obtain the corresponding certificate or key based on the export location, vehicle VIN code and vehicle configuration information. The application end includes the car company APP. After the user purchases the vehicle and completes the real-name authentication binding, he downloads and installs the car company's APP with the digital key function. Click on the interface to activate the digital key and initiate a request to the TSP system of the exporting country. The TSP system of the exporting country obtains the corresponding digital key key ID based on the user information and vehicle information passed by the APP, and queries the digital key key from the local PKI system based on the ID and returns it to the APP. The APP generates a digital key based on the obtained digital key key, establishes a connection with the digital key controller on the vehicle side, completes security authentication, and then the user can use the digital key APP to control the vehicle. Through the management system provided by the present disclosure, the automated application and management of digital key keys are realized, which adapts to the unified management of different production and sales locations around the world. Among them, before the production line performs key filling, it will conduct a second verification of the key to determine whether the obtained key matches the key application data. If the verification result is normal, the Bluetooth controller will be filled. If the verification result is abnormal, the key application will be re-submitted.

[0155] Combine Figure 16As shown, the present disclosure provides a management system 1600 for digital key keys. It includes: a management platform 1610, a production country TSP 1620, a production country vehicle production line 1630, an exporting country TSP 1640, a PKI system 1650 of the exporting country, a mobile terminal 1660 and a vehicle. The management platform 1610 is respectively connected to the production country TSP 1620, the exporting country TSP 1640 and the exporting country KPI system. The production country TSP 1620 is connected to the production country vehicle production line 1630. The exporting country TSP 1640 is connected to the exporting country's local PKI system. The digital key service of the exporting country TSP 1640 is connected to the mobile terminal 1660, the remote control service of the exporting country TSP 1640 is connected to the digital key service, and the remote control service is connected to the vehicle's on-board computer. The vehicle's Bluetooth controller communicates with the car company APP on the mobile terminal 1660.

[0156] When producing vehicles, the vehicle production line 1630 in the producing country uploads key application data to the producing country's TSP 1620. The producing country's TSP 1620 then sends this key application data to the management platform 1610. This key application data includes the production line identification of the production line 1630, whether the export destination's network is connected, whether the export destination has a PKI system 1650, the protocol types supported by the PKI system 1650, the vehicle configuration information and supported key algorithms, the export destination name, and the vehicle's VIN number. Based on the production plan information for the next production cycle and the key quantity prediction model, the management platform 1610 predicts the target quantity of vehicles required for the target production line 1630 to be exported to the target export destination. Based on the target quantity, the management platform 1610 requests a key or certificate from the PKI system 1650 in the target export destination using the key application data and the key path network. The requested key or certificate is then sent to the producing country's TSP 1620, completing the application, distribution, and management of the key or certificate.

[0157] The PKI system 1650 of each exporting country is used to generate different digital keys to attract the required keys or issue corresponding digital key certificates based on key or certificate application requests.

[0158] The exporting country's TSP 1640 records the vehicle's digital key's master control ID, key, and key ID (key storage location) reported by the management platform 1610. During vehicle production, the production line 1630 obtains the key or certificate from the producing country's TSP 1620 and assembles the vehicle's digital key.

[0159] The digital key APP of the mobile terminal 1660 is mainly used to activate and download keys, and complete the connection and authentication with the vehicle through the downloaded keys and secret keys, and perform operations such as controlling the vehicle.

[0160] The vehicle's on-board digital key controller mainly performs key authentication with mobile devices installed with the digital key APP, establishes a secure channel to transmit instructions, receives and saves digital key keys, certificates, etc., receives vehicle control instructions and forwards them to the corresponding controller through the gateway for execution.

[0161] The management platform 1610 includes a key prediction device, a request device, and a key management device. The request device, based on key request data from the target production line 1630, performs key request steps, including: forming a key path network from the production line to the export destination based on key conditions, including the line identification of the production line 1630, network connectivity at the export destination, the presence of a PKI system 1650 at the export destination, the protocol types supported by the PKI system 1650, vehicle configuration information and supported key algorithms, the export destination name, and the vehicle VIN number, as well as the corresponding value categories. The request device then matches the key request data with the key path network, obtaining a corresponding path code. It then requests a key or certificate based on the key operation set corresponding to the matched path code. The key management device then distributes the requested key or certificate to the corresponding production line workstation, which then installs the key into the vehicle's Bluetooth controller. Furthermore, the key management device periodically synchronizes key and vehicle binding information with the exporting country's TSP 1640.

[0162] After a vehicle is exported and sold, the user completes real-name authentication and uses the Digital Key app to activate and download the key. The user and vehicle information passed to the vehicle manufacturer's app is used to query the exporting country's TSP 1640 for the key IDs corresponding to the required digital keys. The key corresponding to these key IDs is then retrieved from the exporting country's local PKI system 1650 and returned to the Digital Key app. The Digital Key app then uses the retrieved key to generate a digital key, connect and authenticate with the vehicle's digital key master controller, and perform related operations such as vehicle control.

[0163] If the exporting country does not have a PKI system 1650, the command sent by the vehicle-side Bluetooth controller will be marked as an online key negotiation mode.

[0164] The key prediction device predicts the target number of keys or certificates by training a neural network model using historical production data from key or certificate applications during vehicle production on each production line 1630. By setting a scheduled task, the model uses the line identification, vehicle configuration information, export destination information, planned time, and number of key or certificate applications for each production line 1630 as input before each production planning cycle. The model then predicts the number of keys or certificates required for each production line for export vehicles in different export destinations. The key application device then applies to the PKI system 1650 in each exporting country based on the predicted target number and requests the corresponding number of certificates or keys. The requested keys or certificates are then distributed to the Manufacturing Execution System (MES) of the corresponding production line. The production line MES then allocates the corresponding keys from the local key repository of the TSP 1620 in the producing country based on the export destination information, vehicle VIN, and vehicle configuration information to the corresponding vehicles for installation. This enables intelligent and automated application and management of digital keys while mitigating network instability and inefficiencies that can occur with online applications during vehicle production.

[0165] The digital key management system 1600 provided herein enables online key application and distribution to production lines for filling via a key path network, eliminating the numerous status issues associated with inconsistent export and production locations, which can complicate and inefficient component management. Furthermore, a key quantity prediction model is used to predict the keys required for a production line. Combined with scheduled tasks, this allows for periodic prediction and application of the keys or certificates required for a production line, enabling intelligent and automated application and management of digital key secrets required for production line manufacturing.

[0166] Optionally, the Bluetooth controller generates a random number and encrypts the random number according to the filled key or certificate to obtain the encrypted second verification data; the Bluetooth controller sends a key verification request to the production line, and the key verification request includes the second verification data; the production line responds to the key verification request sent by the Bluetooth controller, obtains the vehicle VIN code corresponding to the Bluetooth controller, and searches for the corresponding filled key or certificate stored locally in the production line according to the vehicle VIN code. According to the vehicle VIN code and the corresponding key or certificate, the second verification data is decrypted to obtain a decrypted random number; the vehicle VIN code, the identification code of the Bluetooth controller, the key or certificate stored in the production line and the decrypted random number are spliced, and the spliced data is encrypted using the key or certificate stored in the production line to obtain the first verification authentication data; and the first verification authentication data is sent to the Bluetooth controller; the Bluetooth controller splices the vehicle VIN code, the identification code, the key or certificate of the Bluetooth controller and the generated random number stored in the Bluetooth controller, and encrypts it using the key or certificate to obtain the second verification authentication data; the first verification authentication data and the second verification authentication data are compared; if the comparison results are consistent, it is determined that the key filling is correct; if the comparison results are inconsistent, it is determined that the key filling is abnormal, and the abnormal result is fed back to the production line so that the production line can re-determine the key and fill it according to the feedback abnormal result.

[0167] In this embodiment, a verification procedure is implemented after the Bluetooth controller is installed. Specifically, the key information stored internally in the Bluetooth controller is compared with the key information stored locally on the production line for the corresponding Bluetooth controller. This allows the determination of whether any key or certificate installation errors have occurred. By re-verifying the installed Bluetooth controller, the accuracy of key installation is improved, further reducing the error rate and the likelihood of vehicle returns due to Bluetooth controller mismatches, thereby lowering manufacturing costs.

[0168] In some embodiments, combined Figure 17 As shown, a digital key secret management device 1700 is provided, including a processor 1710 and a memory 1720 storing program instructions. Optionally, the device 1700 may also include a communication interface 1730 and a bus 1740. The processor 1710, the communication interface 1730, and the memory 1720 may communicate with each other via the bus 1740. The communication interface 1730 may be used for information transmission. The processor 1710 may call the logic instructions in the memory 1720 to execute the digital key secret management method described in any of the above embodiments.

[0169] In addition, the logic instructions in the memory 1720 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product.

[0170] Memory 1720, as a computer-readable storage medium, can be used to store software programs and computer-executable programs, such as the program instructions / modules corresponding to the methods in the embodiments of the present disclosure. Processor 1700 executes the program instructions / modules stored in memory 1720 to execute functional applications and data processing, thereby implementing the digital key management method in the above-mentioned embodiments.

[0171] Memory 1720 may include a program storage area and a data storage area. The program storage area may store an operating system and application programs required for at least one function, while the data storage area may store data generated based on the use of the terminal device. Memory 1720 may also include high-speed random access memory and non-volatile memory.

[0172] In some embodiments, a readable storage medium is provided, storing program instructions, which, when executed, enable a computer to execute the application method for a digital key secret key as described in any of the above embodiments, or the management method for a digital key secret key as described in any of the above embodiments.

[0173] The technical solutions of the embodiments of the present disclosure may be embodied in the form of a software product, which is stored in a storage medium and includes one or more instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in the embodiments of the present disclosure. The aforementioned storage medium may be a non-transitory storage medium, such as a USB flash drive, a mobile hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, among other media capable of storing program code.

[0174] The above description and the accompanying drawings sufficiently illustrate the embodiments of the present disclosure to enable those skilled in the art to practice them. Other embodiments may include structural, logical, electrical, process and other changes. The embodiments represent only possible variations. Unless expressly required, individual components and functions are optional, and the order of operations may vary. Portions and features of some embodiments may be included in or replace portions and features of other embodiments. Moreover, the terms used in this application are only used to describe the embodiments and are not used to limit the claims. As used in the description of the embodiments and claims, the singular forms "a", "an" and "the" are intended to also include the plural forms unless the context clearly indicates otherwise. Similarly, the term "and / or" as used in this application means any and all possible combinations of one or more of the associated listings. In addition, when used in this application, the term "comprise" and its variations "comprises" and / or comprising refer to the presence of stated features, wholes, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or groups thereof. In the absence of further restrictions, an element defined by the sentence "comprising a..." does not exclude the presence of other identical elements in the process, method or device that includes the element. In this article, each embodiment may focus on the differences from other embodiments, and the same and similar parts between the various embodiments can be referenced to each other. For the methods, products, etc. disclosed in the embodiments, if they correspond to the method part disclosed in the embodiments, then the relevant parts can be referred to the description of the method part.

[0175] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software may depend on the specific application and design constraints of the technical solution. The technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the embodiments of the present disclosure. The technicians will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0176] In the embodiments disclosed herein, the disclosed methods and products (including but not limited to devices and equipment) can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of units may be merely a logical functional division. In actual implementation, other divisions may be used, such as combining or integrating multiple units or components into another system, or omitting or disabling some features. Furthermore, the couplings or direct couplings or communication connections shown or discussed may be through interfaces, indirect couplings or communication connections between devices or units, and may be electrical, mechanical, or other forms. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one location or distributed across multiple network units. Some or all of these units may be selected to implement the embodiments according to actual needs. Furthermore, the functional units in the disclosed embodiments may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit.

[0177] The flowcharts and block diagrams in the accompanying drawings show the possible implementation architectures, functions and operations of the systems, methods and computer program products according to the embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, program segment or part of the code, and the module, program segment or part of the code contains one or more executable instructions for implementing the specified logical functions. In some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, or they can sometimes be executed in the opposite order, which can depend on the functions involved. In the descriptions corresponding to the flowcharts and block diagrams in the accompanying drawings, the operations or steps corresponding to different boxes can also occur in an order different from that disclosed in the description, and sometimes there is no specific order between different operations or steps. For example, two consecutive operations or steps can actually be executed substantially in parallel, or they can sometimes be executed in the opposite order, which can depend on the functions involved. Each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented by a dedicated hardware-based system that performs the specified function or action, or may be implemented by a combination of dedicated hardware and computer instructions.

Claims

1. A method for applying for a digital key, characterized in that: include: In response to a key application request sent by a production line, obtaining a target production line corresponding to the key application request and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; Determine the target path information of the key application corresponding to the target production line based on the key application data and the key path network; Save the target path information and concatenate the corresponding key application data to obtain the first verification data; If the target export destination information includes a PKI system, requesting a key or certificate from the PKI system of the target export destination according to the target path information, and receiving key data fed back by the PKI system of the target export destination, the key data including: key ID information, key or certificate, and first key digest value; Calculating a second key digest value based on the received key or certificate; If the second key digest value is the same as the first key digest value, performing a secondary verification on the received key data based on the first verification data, the first key digest value, and the second key digest value; If the secondary verification result is normal, key filling is performed according to the received key data; If the secondary verification result is abnormal, the key data mismatch is fed back and the key application request is resent.

2. The application method according to claim 1, characterized in that: The step of performing secondary verification on the received key data according to the first verification data, the first key digest value, and the second key digest value includes: Determine a secondary verification first digest value based on the first verification data and the first key digest value; Determine a secondary verification second digest value based on the first verification data and the second key digest value; If the second digest value of the secondary verification is the same as the first digest value of the secondary verification, the secondary verification result is determined to be normal; If the secondary verification second digest value is different from the secondary verification first digest value, the secondary verification result is determined to be abnormal.

3. The application method according to claim 1, characterized in that: Before the step of determining target path information of the key application corresponding to the target production line according to the key application data and the key path network, the method further includes: Obtain production line information and export destination information; Construct a key path network based on production line information and export destination information.

4. The application method according to claim 3, characterized in that: Production line information includes production line identification, vehicle configuration information, key algorithm, and vehicle VIN code; export destination information includes export destination name, export destination network information, and PKI system information; Based on the production line information and export destination information, the steps to construct the key path network include: Generate a path network from the production line to the export destination based on the production line identification, vehicle configuration information, key algorithm, vehicle VIN code, export destination name, export destination network information, and PKI system information; The path information of each path includes a path code and a set of application, distribution, and management operations for the key or certificate corresponding to the path code.

5. The application method according to any one of claims 1 to 4, characterized in that: Also includes: If the PKI system is not established in the target export destination information, the key is obtained using the online key negotiation mode based on the target path information; The steps for obtaining a key in online key negotiation mode include: After receiving the online key negotiation command forwarded by the vehicle computer, the vehicle-side digital key controller uses the ECC algorithm and the DH algorithm to locally generate the vehicle-side temporary private key and the temporary public key to be exchanged. The temporary public key is then sent to the digital key app on the mobile terminal through the vehicle computer and the TSP of the exporting country. After receiving the temporary public key from the vehicle, the mobile terminal's digital key app uses the same ECC and DH algorithms to generate the mobile terminal's temporary public key and temporary private key, and forwards the temporary public key to the vehicle's digital key controller via the exporting country's TSP and the vehicle's computer. The vehicle-side digital key controller uses the vehicle-side temporary private key and the mobile terminal's temporary public key to generate a shared key Kdh. It also generates a random number, encrypts it with the shared key Kdh, and sends it to the mobile terminal via the vehicle computer and the exporting country's TSP. The mobile terminal's digital key app uses the mobile terminal's temporary private key and the vehicle's temporary public key to generate the same shared key Kdh. The mobile terminal decrypts the random number sent by the vehicle, subtracts one from the decrypted number, and then encrypts it with the shared key Kdh. The encrypted number is then sent to the vehicle's digital key controller via the exporting country's TSP and the vehicle's computer. The digital key controller on the vehicle side uses the shared key Kdh to parse and add one to compare with the local random number to see if they are equal. If they are equal, the vehicle computer and the TSP of the exporting country will reply to the digital key APP on the mobile terminal that the negotiation is successful; if they are not equal, the random number verification fails and the negotiation fails.

6. A method for managing digital key secrets, characterized in that: include: According to the preset period, the key quantity prediction model is used to predict the target number of keys or certificates required for the target production line in the next production planning cycle; According to the application method according to any one of claims 1 to 5, an application for a target number of keys or certificates is performed.

7. The management method according to claim 6, characterized in that: The steps of constructing the key quantity prediction model include: A multi-output long short-term memory network model is used as the model architecture; Obtain historical production data corresponding to each production line over multiple historical production cycles. The historical production data includes: production line identification, vehicle configuration information, export location name, production time, and the number of keys or certificates applied for; Use historical production data to train the model structure and obtain a key quantity prediction model; Among them, the production line identification, vehicle configuration information, export location name, and production time are used as input data, and the number of keys or certificates applied for is used as output data.

8. The management method according to claim 6, characterized in that: The steps of using the key quantity prediction model to predict the target quantity of keys or certificates required for the target production line in the next production planning cycle according to the preset period include: Obtain the planned production information of the target production line in the next production planning cycle. The planned production information includes the planned production line identification, planned vehicle configuration information, planned export destination name, and planned production time. Input the planned production information into the key quantity prediction model to obtain the target quantity of keys or certificates required for the target production line in the next production planning cycle; The end time of the preset cycle is before the next production plan cycle.

9. The management method according to any one of claims 6 to 8, characterized in that: After completing the step of applying for the target number of keys or certificates, the management method further includes: Send the applied key or certificate to the local key library of the target production line, so that the target production line can allocate the corresponding key from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export location information, vehicle VIN code and vehicle configuration information; The binding relationship between the key or certificate and the vehicle VIN code is synchronized to the TSP system at the export location so that the digital key APP can query and obtain the key or certificate for vehicle authentication.

10. A device for applying for a digital key, characterized in that: include: an acquisition module configured to, in response to a key application request sent by a production line, acquire a target production line corresponding to the key application request and key application data associated with the target production line, wherein the key application data includes a target production line identifier, target export destination information, and target vehicle configuration information; a storage module configured to store target path information and concatenate corresponding key application data to obtain first verification data; a determination module configured to determine target path information of the key application corresponding to the target production line based on the key application data and the key path network; an application module configured to, when the target export destination information includes a PKI system, apply for a key or certificate from the PKI system of the target export destination according to the target path information, and receive key data fed back by the PKI system of the target export destination, the key data including: key ID information, key or certificate, and a first key digest value; The verification module is configured to calculate a second key digest value based on the received key or certificate; when the second key digest value is the same as the first key digest value, the received key data is verified twice according to the first verification data, the first key digest value and the second key digest value; when the result of the secondary verification is normal, the key is filled according to the received key data; when the result of the secondary verification is abnormal, it is fed back that the key data does not match and the key application request is resent.

11. A device for applying for a digital key, characterized in that: The invention comprises a processor and a memory storing program instructions, wherein the processor is configured to execute the application method for a digital key according to any one of claims 1 to 5 when running the program instructions.

12. A digital key management platform, characterized in that: include: The key prediction device is configured to predict the target number of keys or certificates required for the target production line in the next production plan period according to a preset period using a key quantity prediction model; The device for applying for a digital key according to claim 10 or 11, wherein the device is configured to apply for a target number of keys or certificates.

13. The management platform according to claim 12, characterized in that: Also includes: The key management device is configured to send the applied key or certificate to the local key library of the target production line, so that the target production line can allocate the corresponding key from the local key library to the vehicle Bluetooth controller for binding and filling according to the target export location information, vehicle VIN code and vehicle configuration information; The key management device is also configured to synchronize the binding relationship between the key or certificate and the vehicle VIN code to the TSP system at the export location, so that the digital key APP can query and obtain the key or certificate for vehicle authentication.

14. A management system for digital key secrets, characterized in that: include: The management platform according to claim 12 or 13; The producer TSP is connected to the management platform for communication. The producer TSP is used to send a key application request to the management platform and send key application data corresponding to the key application request to the management platform. The exporting country's PKI system is in communication with the management platform and is configured to generate corresponding key data based on the received target path information and send the key data to the management platform. The key data includes: key ID information, key or certificate, and first key digest value; The production line is connected to the TSP in the production country to generate a key application request and upload the key application request and the corresponding production line information and export location information to the TSP in the production country; verify the received key data, install the verified key data into the Bluetooth controller, and store the vehicle VIN code, Bluetooth controller identification code and certificate or key ID; and resend the key application request for the key data that fails the verification; The exporting country's TSP is connected to the management platform to receive and store the binding relationship between the key or certificate and the vehicle's VIN code fed back by the management platform; The application side communicates with the TSP of the exporting country to obtain the key or certificate from the TSP of the exporting country based on user information and vehicle information, generates a digital key based on the obtained key or certificate, and establishes a connection with the vehicle-side controller to complete security authentication.

15. The management system according to claim 14, characterized in that: The Bluetooth controller generates a random number and encrypts the random number according to the injected key or certificate to obtain the encrypted second verification data; The Bluetooth controller sends a key verification request to the production line, where the key verification request includes second verification data; The production line responds to the key verification request sent by the Bluetooth controller, obtains the vehicle VIN code corresponding to the Bluetooth controller, and searches for the corresponding filling key or certificate stored locally on the production line based on the vehicle VIN code; decrypts the second verification data based on the vehicle VIN code and the corresponding key or certificate to obtain a decrypted random number; concatenates the vehicle VIN code, the identification code of the Bluetooth controller, the key or certificate stored on the production line, and the decrypted random number, and encrypts the concatenated data using the key or certificate stored on the production line to obtain first verification authentication data; and sends the first verification authentication data to the Bluetooth controller; The Bluetooth controller concatenates the vehicle VIN code, the Bluetooth controller's identification code, the key or certificate and the generated random number stored in the Bluetooth controller, and encrypts the data using the key or certificate to obtain the second verification authentication data; the first verification authentication data and the second verification authentication data are compared; if the comparison results are consistent, it is determined that the key filling is correct; if the comparison results are inconsistent, it is determined that the key filling is abnormal, and the abnormal result is fed back to the production line, so that the production line can re-apply for the key or certificate and fill it according to the feedback abnormal result.

16. A digital key management device, characterized in that: The system comprises a processor and a memory storing program instructions, wherein the processor is configured to execute the digital key management method according to any one of claims 6 to 9 when running the program instructions.

17. A readable storage medium storing program instructions, characterized in that: When the program instructions are executed, the computer is configured to execute the application method for a digital key as claimed in any one of claims 1 to 5, or the management method for a digital key as claimed in any one of claims 6 to 9.

Images