Digital key generation method, system and equipment of vehicle and medium

Abstract

The invention discloses a digital key generation method, system and device for a vehicle and a medium. The digital key generation method of the vehicle comprises the steps that key data information of a digital key is obtained and encrypted, and encrypted information is obtained; signing the encrypted information according to a master key of a Bluetooth module of the vehicle to obtain signature data; obtaining a signature authentication structure of the digital key according to the key data information, the encryption information and the signature data; obtaining the frame number and the MAC address of the mobile terminal, and signing the frame number and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a user unique identifier; and generating a digital key according to the user unique identifier and the signature authentication structure. By adopting the embodiment of the invention, the encrypted digital key signed by the master key of the vehicle Bluetooth module can be generated, and the digital key is strongly bound with the mobile terminal, so that the key is prevented from being forged or tampered, one vehicle has one key, the reliability of the digital key is improved, and the vehicle information security is guaranteed.

Description

Technical Field

[0001] This application relates to the field of vehicle control and information security, and in particular to a method, system, device and medium for generating digital keys for vehicles. Background Technology

[0002] With the development of intelligent connected vehicle technology, digital keys, as a crucial entry point for vehicle authentication and control, have been widely applied to various types of vehicles. Existing digital key systems are mostly based on Bluetooth communication, relying on the seamless operation between a pre-installed Bluetooth module on the vehicle side, a cloud-based digital key platform, and the user terminal. However, these systems generally suffer from several shortcomings: some systems have loosely designed key systems, allowing multiple vehicle keys to share a single key, resulting in insufficient overall security; simultaneously, the binding relationship between the digital key and the user device is weak, posing a risk of tampering or leakage; furthermore, most existing digital keys lack an effective authentication structure, making them vulnerable to forgery and replay attacks, and easily allowing unauthorized access to vehicle control. Consequently, this not only reduces the security protection effect of digital keys but also impacts the overall information security of the vehicle. Summary of the Invention

[0003] Therefore, it is necessary to provide a method, system, device, and medium for generating digital keys for vehicles to address the aforementioned technical problems. This method can generate digital keys that are encrypted and signed with the vehicle's Bluetooth module master key, and are strongly bound to mobile terminals. This prevents keys from being forged or tampered with, achieves one key per vehicle, and thus improves the reliability of digital keys and ensures vehicle information security.

[0004] Firstly, a method for generating a digital key for a vehicle is provided, including: Obtain the key data information of the digital key, and encrypt the key data information to obtain encrypted information; The encrypted information is signed using the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; Based on the key data information, the encryption information, and the signature data, the signature authentication structure of the digital key is obtained; Obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, and sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; The digital key is generated based on the user's unique identifier and the signature authentication structure.

[0005] Furthermore, before signing the encrypted information using the master key of the vehicle's Bluetooth module to obtain the signature data, the process further includes: During the vehicle production phase, the master key of the Bluetooth module is derived from the master key of the security module; When a vehicle rolls off the production line, the production line electrical inspection module uploads the master key of the Bluetooth module to the cloud via a secure link. This allows the cloud to record the device identifier of the vehicle's Bluetooth module and the master key of the Bluetooth module, forming a vehicle key binding table.

[0006] Furthermore, it also includes: During the after-sales phase, when the vehicle's Bluetooth module is replaced, the device identifier and master key of the vehicle's Bluetooth module are updated. The updated device identifier and master key of the vehicle's Bluetooth module are synchronized to the cloud so that the cloud can update the vehicle key binding table.

[0007] Furthermore, after generating the digital key, the process also includes: The digital key is downloaded to the user's mobile terminal via a temporary key-protection channel; Verify that the digital key is in a valid state; If so, authentication is performed via the vehicle's Bluetooth module using an authentication code, wherein the authentication code is derived by the mobile terminal from the user's unique identifier in the digital key; After successful authentication, the signature authentication structure of the digital key on the mobile terminal is sent to the vehicle so that the vehicle can verify the signature authentication structure using the master key of the Bluetooth module. Once the verification is successful, the corresponding vehicle control permissions are granted to the Bluetooth key on the mobile terminal.

[0008] Furthermore, before downloading the digital key to the user's mobile terminal via the temporary key-protection channel, the method further includes: The vehicle is selected through the client on the mobile terminal, and the binding relationship between the device and the vehicle is verified through the cloud. After verifying that the mobile terminal and the vehicle are bound together, the step of downloading the digital key to the user's mobile terminal through a temporary key security channel is performed.

[0009] Furthermore, before sending the signature authentication structure of the digital key on the mobile terminal to the vehicle after successful authentication, the method further includes: The vehicle's Bluetooth module and the mobile terminal are paired and encrypted communication is established so that the signature authentication structure of the digital key on the mobile terminal can be sent to the vehicle through the encrypted communication.

[0010] Furthermore, the key data information includes a unique key identifier, key version, authorization identifier, expiration date, vehicle identification number (VIN), mobile device ID, and user ID.

[0011] Secondly, a digital key generation system for vehicles is provided, including: The acquisition module is used to obtain the key data information of the digital key and encrypt the key data information to obtain encrypted information; The signature authentication module is used to sign the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, and to obtain the signature authentication structure of the digital key according to the key data information, the encrypted information and the signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; The generation module is used to obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier, and generate the digital key according to the unique user identifier and the signature authentication structure.

[0012] Thirdly, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements the steps of the digital key generation method for a vehicle according to the first aspect and any possible implementation thereof.

[0013] Fourthly, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the digital key generation method for a vehicle according to the first aspect and any possible implementation thereof.

[0014] According to the embodiments of this application, firstly, the key data information of the digital key is obtained and encrypted to obtain encrypted information; then, the encrypted information is signed according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; then, the signature authentication structure of the digital key is obtained based on the key data information, encrypted information, and signature data; next, the vehicle identification number (VIN) and the MAC address of the mobile terminal are obtained, and the VIN and the MAC address of the mobile terminal are signed according to the master key of the Bluetooth module to obtain a unique user identifier; finally, a digital key is generated based on the unique user identifier and the signature authentication structure. Thus, a digital key that is encrypted and signed with the master key of the vehicle's Bluetooth module can be generated and strongly bound to the mobile terminal, thereby preventing the key from being forged or tampered with, achieving one key per vehicle, and thus improving the reliability of the digital key and ensuring vehicle information security. Attached Figure Description

[0015] Other features, objects, and advantages of this application will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings: Figure 1 A flowchart illustrating the method for generating a digital key for a vehicle provided in this application embodiment; Figure 2 A flowchart illustrating the use of a digital key for a vehicle provided in this application embodiment; Figure 3 This is a schematic diagram illustrating the digital key lifecycle and platform management of a vehicle, provided in another embodiment of this application. Figure 4 A structural block diagram of a vehicle digital key generation system provided in this application embodiment; Figure 5 This is a structural block diagram of a computer device provided in an embodiment of this application. Detailed Implementation

[0016] The present application will now be described in further detail with reference to the embodiments and accompanying drawings. It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the application. Furthermore, it should be noted that, for ease of description, only the parts relevant to the application are shown in the accompanying drawings.

[0017] It should be noted that, unless otherwise specified, the embodiments and features of the embodiments in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0018] The following describes in detail, with reference to the accompanying drawings, a method, system, device, and medium for generating digital keys for vehicles according to embodiments of this application.

[0019] Figure 1 This is a flowchart of a method for generating a digital key for a vehicle according to an embodiment of this application. Figure 1 As shown, the method for generating a digital key for a vehicle according to an embodiment of this application includes the following steps: S101: Obtain the key data information of the digital key, and encrypt the key data information to obtain encrypted information.

[0020] In one embodiment of this application, the key data information includes a unique key identifier, key version, permission identifier, expiration date, vehicle identification number (VIN), mobile device ID, and user ID.

[0021] After obtaining the key data, a hash operation is used to encrypt it. The key data is hashed byte-wise, outputting a fixed-length encrypted message. This method not only encrypts the key data to prevent leakage but also standardizes the length of the key data into a fixed-length string for easier subsequent processing.

[0022] S102: Sign the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module.

[0023] The signing operation can prevent the encrypted information of the key data from being tampered with, ensure the trustworthiness of the key's origin, and avoid forgery and replay attacks. In a specific example, the HAMC-SHA256 algorithm is used to sign the encrypted information, resulting in 32 bytes of signature data.

[0024] In one embodiment of this application, before signing the encrypted information according to the master key of the vehicle's Bluetooth module to obtain the signature data, the method further includes: during the vehicle's production stage, deriving the master key of the Bluetooth module from the master key of the security module; and when the vehicle rolls off the production line, uploading the master key of the Bluetooth module to the cloud via a secure link by the production line electrical inspection module, so that the cloud records the device identifier of the vehicle's Bluetooth module and the master key of the Bluetooth module to form a vehicle key binding table.

[0025] It also includes: during the after-sales phase of a vehicle, when the vehicle's Bluetooth module is replaced, updating the device identifier and master key of the vehicle's Bluetooth module; and synchronizing the updated device identifier and master key of the vehicle's Bluetooth module to the cloud so that the cloud can update the vehicle key binding table.

[0026] S103: Based on the key data information, the encryption information, and the signature data, obtain the signature authentication structure of the digital key.

[0027] Combination Figure 2 As shown, the signature authentication structure of the digital key is obtained by performing byte concatenation operations on the key data information, encryption information, and signature data.

[0028] S104: Obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, and sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier.

[0029] Specifically, obfuscated plaintext is first generated by combining the vehicle identification number (VIN) and the mobile terminal's MAC address, and then a signature operation is performed to obtain the user's unique identifier. This unique user identifier is the core of the authentication code derived in subsequent authentication stages and also serves as the session key for messages in business communications.

[0030] S105: Generate the digital key based on the user's unique identifier and the signature authentication structure.

[0031] In one embodiment of this application, after generating the digital key, the method further includes: downloading the digital key to the user's mobile terminal via a temporary key security channel; verifying whether the digital key is valid; if so, authenticating with the vehicle's Bluetooth module using an authentication code, wherein the authentication code is derived by the mobile terminal from the user's unique identifier in the digital key; after successful authentication, sending the signature authentication structure of the digital key on the mobile terminal to the vehicle, so that the vehicle can verify the signature authentication structure using the master key of the Bluetooth module; and after successful verification, granting the Bluetooth key on the mobile terminal corresponding vehicle control permissions.

[0032] Specifically, combined Figure 2 As shown, after a digital key is generated in the cloud, it is downloaded to the mobile terminal. Once the mobile terminal verifies the digital key's validity, it derives an authentication code from the user's unique identifier within the digital key. Simultaneously, the vehicle's Bluetooth module generates its own authentication code using the same algorithm. Further, to verify the match between the authentication codes, both the mobile terminal and the vehicle's Bluetooth module generate random numbers and calculate their respective confirmation values ​​using the authentication codes. The mobile terminal then sends its confirmation value to the vehicle's Bluetooth module, which returns its own confirmation value. Upon receiving this, the mobile terminal sends its own random number. The vehicle's Bluetooth module calculates the mobile terminal's authentication code using the received confirmation value and random number, and compares it with its own obtained authentication code. If they match, the vehicle returns its own random number. The mobile terminal verifies the vehicle's Bluetooth module's authentication code in the same way; if they match, authentication is successful. This method avoids the direct transmission of the authentication code, preventing information leakage and improving security.

[0033] In one embodiment of this application, before sending the signature authentication structure of the digital key on the mobile terminal to the vehicle after successful authentication, the method further includes: pairing the vehicle's Bluetooth module and the mobile terminal, and establishing encrypted communication so as to send the signature authentication structure of the digital key on the mobile terminal to the vehicle through the encrypted communication.

[0034] like Figure 2As shown, after both parties successfully authenticate each other, the mobile terminal generates a temporary session key using the authentication code and random numbers from both parties. Thus, the vehicle's Bluetooth module and the mobile terminal are successfully paired and can use the temporary session key for encrypted communication.

[0035] Under the above conditions, the mobile terminal sends the encrypted digital key signature authentication structure to the vehicle's Bluetooth module. The vehicle's Bluetooth module decrypts the data using a temporary session key and then verifies the signature authentication structure, timeout period, and permission fields. If the verification is successful, the corresponding vehicle control permissions are granted to the Bluetooth key on the mobile terminal.

[0036] In one embodiment of this application, before downloading the digital key to the user's mobile terminal via a temporary security key channel, the method further includes: selecting the vehicle through the client of the mobile terminal and verifying the binding relationship between the device and the vehicle through the cloud; after verifying that the mobile terminal and the vehicle have a binding relationship, the step of downloading the digital key to the user's mobile terminal via a temporary security key channel is performed.

[0037] Figure 3 The exhibition showcases the lifecycle of digital keys and the platform management structure. The lifecycle of digital keys covers the stages of binding, unbinding, generation, revocation, deletion, freezing, and expiration. The client is a mobile terminal application, while the cloud is managed collaboratively by an application server, digital keys, fleet operation terminal, and application management terminal to ensure the effective use of digital keys throughout their entire lifecycle.

[0038] According to the vehicle digital key generation method of this application embodiment, the method first obtains key data information of the digital key and encrypts it to obtain encrypted information; then, it signs the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; then, based on the key data information, encrypted information, and signature data, it obtains the signature authentication structure of the digital key; next, it obtains the vehicle identification number (VIN) and the MAC address of the mobile terminal, and signs the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; finally, it generates a digital key based on the unique user identifier and the signature authentication structure. Thus, a digital key that is encrypted and signed by the vehicle's Bluetooth module master key can be generated and strongly bound to the mobile terminal, thereby preventing the key from being forged or tampered with, achieving one key per vehicle, and thus improving the reliability of the digital key and ensuring vehicle information security.

[0039] Figure 4 This is a structural block diagram of a vehicle digital key generation system according to an embodiment of this application. Figure 4 As shown, a vehicle digital key generation system according to an embodiment of this application includes: an acquisition module 410, a signature authentication module 420, and a generation module 430, wherein: The acquisition module 410 is used to acquire the key data information of the digital key and encrypt the key data information to obtain encrypted information; The signature authentication module 420 is used to sign the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, and to obtain the signature authentication structure of the digital key according to the key data information, the encrypted information and the signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module. The generation module 430 is used to obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier, and generate the digital key according to the unique user identifier and the signature authentication structure.

[0040] The vehicle digital key generation system according to an embodiment of this application first obtains key data information of the digital key and encrypts it to obtain encrypted information; then, it signs the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; then, based on the key data information, encrypted information, and signature data, it obtains the signature authentication structure of the digital key; next, it obtains the vehicle identification number (VIN) and the MAC address of the mobile terminal, and signs the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; finally, it generates a digital key based on the unique user identifier and the signature authentication structure. Thus, a digital key that is encrypted and signed with the vehicle's Bluetooth module master key can be generated and strongly bound to the mobile terminal, thereby preventing the key from being forged or tampered with, achieving one key per vehicle, and thus improving the reliability of the digital key and ensuring vehicle information security.

[0041] Specific limitations regarding the vehicle digital key generation system can be found in the limitations of the vehicle digital key generation method described above, and will not be repeated here. The various modules of the aforementioned vehicle digital key generation system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each module.

[0042] The following is for reference. Figure 5 , Figure 5 A schematic diagram of a computer device structure suitable for implementing embodiments of this application is shown.

[0043] like Figure 5As shown, the computer system 1000 includes a central processing unit (CPU) 1001, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 1002 or programs loaded from storage section 1008 into random access memory (RAM) 1003. The RAM 1003 also stores various programs and data required for the system's operating instructions. The CPU 1001, ROM 1002, and RAM 1003 are interconnected via a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0044] The following components are connected to I / O interface 1005: an input section 1006 including a keyboard, mouse, etc.; an output section 1007 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 1008 including a hard disk, etc.; and a communication section 1009 including a network interface card such as a LAN card, modem, etc. The communication section 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to I / O interface 1005 as needed. A removable medium 1011, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 1010 as needed so that computer programs read from it can be installed into storage section 1008 as needed.

[0045] Specifically, according to embodiments of this application, the flowchart above refers to... Figure 1 The described process can be implemented as a computer-readable storage medium. For example, embodiments of this application include a computer-readable storage medium comprising a computer program containing program code for performing the methods shown in the flowchart, such as performing: obtaining key data information of a digital key and encrypting the key data information to obtain encrypted information; signing the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is pre-derived from the master key of the vehicle's security module; obtaining a signature authentication structure of the digital key based on the key data information, the encrypted information, and the signature data; obtaining the vehicle identification number (VIN) and the MAC address of the mobile terminal, and signing the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; and generating the digital key based on the unique user identifier and the signature authentication structure.

[0046] Specifically, according to embodiments of this application, the flowchart above refers to... Figure 1The described process can be implemented as a computer software program. For example, embodiments of this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowchart, such as performing: obtaining key data information of a digital key, and encrypting the key data information to obtain encrypted information; signing the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is pre-derived from the master key of the vehicle's security module; obtaining a signature authentication structure of the digital key based on the key data information, the encrypted information, and the signature data; obtaining the vehicle identification number (VIN) and the MAC address of the mobile terminal, and signing the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; and generating the digital key based on the unique user identifier and the signature authentication structure.

[0047] In such an embodiment, the computer program includes program code for performing the methods shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network via communication section 1009, and / or installed from removable media 1011. When the computer program is executed by the central processing unit (CPU) 1001, it performs the functions defined in the system of this application.

[0048] It should be noted that the computer-readable medium shown in this application can be a computer-readable signal medium or a computer-readable storage medium, or any combination of the two. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0049] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operational instructions of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two connected blocks may actually be executed substantially in parallel, or they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified functions or operational instructions, or using a combination of dedicated hardware and computer instructions.

[0050] The units or modules described in the embodiments of this application can be implemented in software or hardware. The described units or modules can also be located in a processor. The names of these units or modules do not, in certain circumstances, constitute a limitation on the unit or module itself.

[0051] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0052] The above embodiments merely illustrate several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. A method for generating a digital key for a vehicle, characterized in that, include: Obtain the key data information of the digital key, and encrypt the key data information to obtain encrypted information; The encrypted information is signed using the master key of the vehicle's Bluetooth module to obtain signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; Based on the key data information, the encryption information, and the signature data, the signature authentication structure of the digital key is obtained; Obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, and sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier; The digital key is generated based on the user's unique identifier and the signature authentication structure.

2. The method for generating a digital key for a vehicle according to claim 1, characterized in that, Before signing the encrypted information using the master key of the vehicle's Bluetooth module to obtain the signature data, the process further includes: During the vehicle production phase, the master key of the Bluetooth module is derived from the master key of the security module; When a vehicle rolls off the production line, the production line electrical inspection module uploads the master key of the Bluetooth module to the cloud via a secure link. This allows the cloud to record the device identifier of the vehicle's Bluetooth module and the master key of the Bluetooth module, forming a vehicle key binding table.

3. The method for generating a digital key for a vehicle according to claim 2, characterized in that, Also includes: During the after-sales phase, when the vehicle's Bluetooth module is replaced, the device identifier and master key of the vehicle's Bluetooth module are updated. The updated device identifier and master key of the vehicle's Bluetooth module are synchronized to the cloud so that the cloud can update the vehicle key binding table.

4. The method for generating a digital key for a vehicle according to any one of claims 1-3, characterized in that, After generating the digital key, the process also includes: The digital key is downloaded to the user's mobile terminal via a temporary key-protection channel; Verify that the digital key is in a valid state; If so, authentication is performed via the vehicle's Bluetooth module using an authentication code, wherein the authentication code is derived by the mobile terminal from the user's unique identifier in the digital key; After successful authentication, the signature authentication structure of the digital key on the mobile terminal is sent to the vehicle so that the vehicle can verify the signature authentication structure using the master key of the Bluetooth module. Once the verification is successful, the corresponding vehicle control permissions are granted to the Bluetooth key on the mobile terminal.

5. The method for generating a digital key for a vehicle according to claim 4, characterized in that, Before downloading the digital key to the user's mobile terminal via the temporary key security channel, the method further includes: The vehicle is selected through the client on the mobile terminal, and the binding relationship between the device and the vehicle is verified through the cloud. After verifying that the mobile terminal and the vehicle are bound together, the step of downloading the digital key to the user's mobile terminal through a temporary key security channel is performed.

6. The method for generating a digital key for a vehicle according to claim 4, characterized in that, After successful authentication, but before sending the signature authentication structure of the digital key on the mobile terminal to the vehicle, the method further includes: The vehicle's Bluetooth module and the mobile terminal are paired and encrypted communication is established so that the signature authentication structure of the digital key on the mobile terminal can be sent to the vehicle through the encrypted communication.

7. The method for generating a digital key for a vehicle according to claim 1, characterized in that, The key data information includes a unique key identifier, key version, access identifier, expiration date, vehicle identification number (VIN), mobile device ID, and user ID.

8. A digital key generation system for a vehicle, characterized in that, include: The acquisition module is used to obtain the key data information of the digital key and encrypt the key data information to obtain encrypted information; The signature authentication module is used to sign the encrypted information according to the master key of the vehicle's Bluetooth module to obtain signature data, and to obtain the signature authentication structure of the digital key according to the key data information, the encrypted information and the signature data, wherein the master key of the Bluetooth module is derived in advance from the master key of the vehicle's security module; The generation module is used to obtain the vehicle identification number (VIN) and the MAC address of the mobile terminal, sign the VIN and the MAC address of the mobile terminal according to the master key of the Bluetooth module to obtain a unique user identifier, and generate the digital key according to the unique user identifier and the signature authentication structure.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the digital key generation method for a vehicle according to any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the digital key generation method for a vehicle according to any one of claims 1-7.

Images