Digital key sharing method, digital key verification method, and computing device

Abstract

This disclosure provides a method for sharing a digital key, a method for verifying a digital key, and a computing device. The method for sharing a digital key performed by a first device includes the steps of: sending a digital key creation request to a second device, which includes valid spatial information used for the digital key, so that the second device generates the digital key; receiving a digital key signing request from the second device, which includes data to be signed for the digital key, and which includes the valid spatial information; and, based on the completion of signing the digital key signing request, sending a digital key deployment request to the second device, instructing the second device to store the generated digital key. This can improve the security of the digital key beyond the spatial dimension.

Description

Technical Field

[0001] This application relates to the field of the Internet of Things (IoT), and more particularly to a method for sharing digital keys, a method for verifying shared digital keys, and a computing device.

Background Art

[0002] With the rapid development of network technology, digital keys have been gradually popularized. For example, digital keys are widely used in various scenarios such as automobiles, enterprise access control, home door locks, safes, bicycles, etc.

[0003] As an example of an application, a digital key is a new product due to the improvement of automotive technology. An automobile owner can use devices such as a mobile terminal, an electronic bracelet, and an electronic watch as the key of the automobile to unlock the vehicle, start the engine to drive the automobile, control the temperature inside the vehicle, etc. without a physical key.

[0004] In many scenarios, it is necessary to share a digital key from a first device to a second device, and the second device is authorized to control the vehicle with the digital key. For example, when it is necessary to repair a vehicle, an automobile owner needs to share the digital key with a repair and maintenance worker. In such a case, since it is necessary to share the digital key between the device owned by the automobile owner (for example, a mobile terminal) and the device owned by the repair and maintenance worker, the repair and maintenance worker can control the vehicle with the shared digital key.

[0005] On the other hand, during the sharing of digital keys, it is necessary to emphasize security and convenience. Therefore, a sharing solution for digital keys and a verification solution for shared digital keys that meet the requirements of security and convenience are needed.

Summary of the Invention

[0006] According to one aspect of the present invention, a method for sharing a digital key performed by a first device is provided. The method for sharing a digital key includes: sending a digital key creation request to a second device, which includes valid spatial information to be used for the digital key, so that the second device generates the digital key; receiving a digital key signing request from the second device, which includes data to be signed for the digital key, and which includes the valid spatial information; and, based on the completion of signing the digital key signing request, sending a digital key deployment request to the second device, instructing the second device to store the generated digital key.

[0007] Another aspect of the present invention provides a method for sharing a digital key performed by a first device. The method for sharing a digital key includes: receiving a digital key creation request from the first device, which includes valid spatial information used for the digital key; the valid spatial information being included in valid spatial information transmitted from the first device to the second device; generating a digital key including the valid spatial information based on the valid spatial information; transmitting a digital key signing request to the first device, which includes data to be signed for the digital key, which includes the valid spatial information; and storing the generated digital key based on a digital key deployment request received from the first device.

[0008] Another aspect of the present invention provides a method for verifying a shared digital key performed by the target object. The verification method includes the steps of: receiving a key authentication request from a device providing the digital key, which includes a certificate of the digital key and valid spatial information; authenticating the certificate of the digital key; and determining, based on the location of use of the digital key, whether the spatial requirements corresponding to the valid spatial information are met.

[0009] A further other aspect of the present invention provides a method for sharing a digital key from a first device to a second device, which is performed by a server. The digital key sharing method includes: receiving a digital key creation request from the first device that includes location information of the first device for determining effective spatial information of a digital key, or that includes the effective spatial information; generating arrangement information for generating the digital key at the second device based on the effective spatial information; and transmitting the arrangement information to the second device so that the second device generates the digital key including the effective spatial information.

[0010] Another aspect of the present invention provides a computing device including a processor and memory storing computer-readable instructions. When such instructions are executed, the processor performs the method described above.

[0011] According to another aspect of the present invention, a computer-readable storage medium in which a computer program is stored is provided. When the computer program is executed by a processor, the processor performs each of the steps of the method described above.

[0012] According to another aspect of the present invention, a computer program product including a computer program is provided. When the computer program is executed by a processor, each step of the method described above is realized.

[0013] In the embodiments of this invention, we propose for the first time that the security of a digital key can be improved from a spatial perspective by restricting the usage range of the digital key from a spatial dimension. Furthermore, security can be further enhanced by combining this with the temporal dimension. In addition, by setting usage periods of different effective ranges and / or different time lengths, it is possible to avoid sharing the digital key multiple times, thereby improving convenience and, consequently, the user experience.

[0014] Below, in order to more clearly explain the embodiments of this application or the prior art, the drawings used in the explanation of the embodiments of this application or the prior art are briefly introduced. Naturally, the drawings described below are only a part of the embodiments described in this application. Those skilled in the art can obtain other drawings based on these drawings of the embodiments of this application. [Brief explanation of the drawing]

[0015] [Figure 1] Figure 1 is a schematic diagram showing a system for sharing a digital key between a first device and a second device according to an embodiment of the present application. [Figure 2] Figure 2 is a schematic diagram showing the data structure of a digital key. [Figure 3] Figure 3 is a schematic diagram showing the interface of an application program that shares a digital key between a first device and a second device according to an embodiment of the present invention. [Figure 4] Figure 4 is a schematic diagram illustrating an application scenario in which it is determined whether or not a vehicle can be controlled using a digital key based on the available space. [Figure 5] Figure 5 is a schematic flowchart illustrating a method for sharing a digital key according to an embodiment of the present invention. [Figure 6A] Figure 6A is a schematic flowchart illustrating a method for sharing a digital key according to an embodiment of the present invention. [Figure 6B] Figure 6B is a schematic flowchart illustrating a method for sharing a digital key according to an embodiment of the present invention. [Figure 7A] Figure 7A shows an example of the relationship between the usage time and space of a digital key, and the effective space and effective usage period. [Figure 7B] Figure 7B shows an example illustrating the relationship between the usage time and space of a digital key, and its effective space and effective usage period. [Figure 7C] Figure 7C shows an example illustrating the relationship between the usage time and space of a digital key, and the effective space and effective usage period. [Figure 8]FIG. 8 is a schematic flowchart showing a method for verifying a shared digital key according to an embodiment of the present application. [Figure 9] FIG. 9 is a schematic flowchart showing a method for sharing a digital key, and is a schematic diagram showing an interaction process among a first device, a second device, and a target object. [Figure 10] FIG. 10 is a block diagram showing the structure of a digital key sharing device according to an embodiment of the present application. [Figure 11] FIG. 11 is a block diagram showing the structure of a digital key sharing device according to an embodiment of the present application. [Figure 12] FIG. 12 is a block diagram showing the structure of a vehicle according to an embodiment of the present application. [Figure 13] FIG. 13 is a block diagram showing the structure of a server according to an embodiment of the present application. [Figure 14] FIG. 14 is a schematic block diagram showing a computing device according to an embodiment of the present application.

MODE FOR CARRYING OUT THE INVENTION

[0016] Hereinafter, in combination with the drawings in the embodiments of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described. Of course, the described embodiments are only a part of the embodiments of the present application, not all of the embodiments. All embodiments obtained based on the embodiments of the present application without creative work by those skilled in the art are included in the protection scope of the present application. FIG. 1 is a schematic diagram showing a system for sharing a digital key between a first device and a second device according to an embodiment of the present application.

[0017] As shown in FIG. 1, the system includes a first device (represented by reference numeral 100), a second device (represented by reference numeral 200), a vehicle (a specific example of a target object controlled by a digital key) (represented by reference numeral 300), a first server (represented by reference numeral 400) for the first device 100, a second server (represented by reference numeral 500) for the second device 200, and a vehicle server for the vehicle 300. The first device 100 and the second device 200 may communicate directly in a point-to-point (Point-to-Point) manner, or may communicate via a server.

[0018] For example, as shown in FIG. 1, the communication between the first device and the second device may be performed via link 2 between the first device and the first server, links 3 and 5 between the first server and the second server, and link 4 between the second server and the second device. For example, a digital key can be shared with the second device, or arrangement information (such as validity arrangement information described later) that can be set on the first device can be provided to the second device. The first device communicates with the first server 400 via link 2, and the second device communicates with the second server via link 4. The first device and the second device may communicate directly with the vehicle server via links 6 and 7, or may communicate indirectly with the vehicle server via links 2 and 3, and links 4 and 5 of their respective servers. The first server 400 and the second server 500 each manage the life cycle (data cycle) of the digital key, and update, delete, suspend, and restore the certificates of the first device and the second device via links 2 and 4. The servers 400 and 500 provide services that permit updating necessary certificates, an instance of loading and installing a digital key, and invalidating or deleting a digital key. The vehicle server 600 can create pairing passwords, sign a public key, provide a certificate to a device, manage a key, provide necessary authentication data to a sharer, issue a digital key structure for a legitimate sharer, and the like. In other words, the first server, the second server, and the vehicle server cooperate to jointly realize the operation of sharing a digital key from the first device to the second device.

[0019] The first device 100 and the second device 200 are each various mobile electronic devices capable of processing and transmitting and receiving data, such as a mobile phone, a tablet computer, a smart watch, a smart bracelet, and smart glasses. By installing an application program in these devices, they can interact with the server via the application program.

[0020] Servers 400, 500, or 600 include, but are not limited to, network hosts, a single network server, multiple sets of network servers, or cloud computing-based computer sets. Here, "cloud" consists of a number of cloud computing-based hosts or network servers. However, cloud computing is a type of distributed computing, a single virtual computer composed of a group of loosely coupled computer sets.

[0021] In this application, a server (hereinafter, one or more of the first server 400, the second server 500, or the vehicle server are collectively referred to as a server) is used to generate digital key placement information, and the digital key placement information is transmitted to a corresponding device for use in generating digital keys. Optionally, the server may generate placement information in response to a digital key creation request transmitted from a device, generate a corresponding digital key based on the said placement information, and transmit the generated digital key to the corresponding device.

[0022] If the first device and the second device share a digital key through the same application program, the first server 400 and the second server 500 may be the same server. If the first device and the second device share a digital key through different application programs, the first server 400 and the second server 500 may be different servers with a communication link.

[0023] For example, the first device may send a digital key creation request to a server via an application program, which includes the identification information of the first device and the identification information of the vehicle. The server then receives this information, generates installation information after processing such as identity authentication and inspection, and sends it to the first device. Based on this installation information, the first device can generate a digital key for controlling the vehicle (for example, unlocking it), and this digital key may consist of a data structure.

[0024] The first device transmits the generated digital key information to the vehicle (smart vehicle) when it needs to be unlocked. After receiving the digital key information from the first device, the vehicle verifies the digital key information, and if the verification is successful, unlocks the vehicle.

[0025] If a second device needs to obtain a digital key shared by the first device, the second device can receive deployment information (from the server or the first device) and generate a second digital key similar to the first digital key of the first device. The specific process will be described later.

[0026] Furthermore, Figure 2 shows a schematic diagram of the data structure of a digital key. Optionally, the digital key may consist of a data structure that includes various information about the digital key, such as authentication certificate information, digital key validity period information, and signature information.

[0027] For example, the data structure of a digital key generated by the first device (e.g., a car owner's digital key) is the left half shown in Figure 2 (generally considered to be the digital key certificate) and does not include information such as the validity period. The data structure of a digital key from the second device (e.g., a friend's digital key) includes the two data structures shown in Figure 2, left and right. That is, the data structure in the right half of Figure 2 is an additional part specific to the digital key from the second device, and the Friend Public Key field and Device Public Key field contain the same content and are used to associate the two data structures. The content of the Validity Start / End field indicates the validity start and end times (i.e., validity period) of the digital key generated by the second device.

[0028] In other words, in the digital key sharing process described above, the validity of the digital key can be considered in terms of time to enhance security. That is, the digital key of the second device is permitted to control the target object (e.g., a vehicle) only during its valid usage period. If the target object determines that the digital key is being used outside of that valid usage period, the target object will refuse control by the digital key of the second device.

[0029] Figure 3 shows a schematic diagram of the interface of an application program for sharing a digital key between a first device and a second device according to an embodiment of the present invention.

[0030] As shown in Figure 3, a schematic diagram of the interface for sharing a digital key using an application program on the first device is provided. For example, the application program on the first device can set the validity period of the shared digital key, the vehicle, and the second device (using the user identifier of the second device). After interacting with the server through the application program, the server generates validity configuration information (including validity period information), and then, by combining this information with other configuration information to form comprehensive configuration information and transmitting it to the second device, the second device can generate a digital key with the corresponding validity period. Alternatively, the validity configuration information can be generated locally on the first device and transmitted to the second device via point-to-point communication or a server. This information can then be used to generate a digital key on the second device, along with other configuration information obtained locally or from the server (for example, other configuration information stored in advance, or other configuration information obtained from the server in accordance with usage information transmitted from the first device).

[0031] In many scenarios, to further enhance security, the validity of a digital key may be considered in terms of spatial dimensions during the process of sharing it. That is, the digital key of the second device may be permitted to control the target only within its effective spatial range. If the target determines that the location where the digital key is being used is not within that effective spatial range, the target will refuse control by the digital key of the second device.

[0032] For example, as shown in Figure 4, a car owner is expected to share a digital key with a repair / maintenance worker so that the worker can use the digital key within the premises of the repair shop, but not outside the shop (e.g., a shopping mall).

[0033] Therefore, embodiments of the present application further provide a solution for sharing digital keys based on spatial dimensions.

[0034] Figure 5 shows a schematic flowchart of a digital key sharing method according to an embodiment of the present invention. This method is performed by a first device shown in Figure 1, or at least partly by a server shown in Figure 1, where the first device has already generated a digital key and shares it with the second device. For example, the first device may be the car owner's device, and the second device may be the repair / maintenance worker's device.

[0035] As shown in Figure 5, in step S510, a digital key creation request containing valid spatial information used for the digital key is sent to the second device, which then uses this information to generate the digital key.

[0036] Selectively, the effective space information may be transmitted from the first device to the second device, for example via routes 2 / 3 / 5 / 4 in Figure 1, or directly via point-to-point communication. This effective space information indicates the effective space that permits the use of the digital key (second digital key) generated by the second device. As shown in the left half of the data structure in Figure 2, the first digital key (first digital key) generated by the first device does not have to contain effective space information. This is because the digital key of the first device is used by the owner of the target object (e.g., a vehicle), and that owner can control the target object anytime, anywhere.

[0037] Selectively, the effective space information may be determined based on the location of the first device, determined by the first device, or determined by the first server of the first device. Furthermore, the effective space information may be included in the effective arrangement information.

[0038] The effective space where the use of digital keys is permitted may be represented using the absolute position on the ground, as selectable. For example, the shape of the projection area of ​​space onto the ground (e.g., rectangle, square, or circle) may be defined, and the effective space may be defined by the longitude and latitude of each feature point. For example, if the shape of the projection area is rectangular, the effective space may be defined using the longitude and latitude of the top-left vertex and the bottom-right vertex (the default height of the space is infinite).

[0039] As another example, in some scenarios, when a car owner goes to a repair shop, the location of the car owner's first device is generally not a predetermined location (e.g., workplace or home), and in this case, it is necessary to determine effective space information. Therefore, depending on the fact that the location of the first device is not a predetermined location and is determined to be within the boundary range of a place (e.g., a repair shop or car dealership), the effective space may be determined based on the boundary range of the place, and effective space information relating to the effective space may be included in the effective arrangement information.

[0040] For example, the effective space may be the space corresponding to the boundary range of the location where the first device is located, or the effective space may be obtained by adjusting (expanding or shrinking) based on the boundary range of the location. For example, when a car owner goes to a repair shop to have their car repaired, the effective space may be set to the space corresponding to the boundary range of the repair shop.

[0041] As another example, in some scenarios, the boundaries of the location where the vehicle owner's first device is situated may be unclear. For example, if the first device is located on the side of the road, it is difficult to determine the boundaries of the location where the first device is situated. Therefore, using the projected position of the first device onto the ground as a point of symmetry, the same or different preset distances are moved to all sides (the default height of the space is infinite), and based on the acquired boundary range, the effective space of the digital key can be obtained, and effective space information regarding the effective space can be included in the effective placement information.

[0042] The space corresponding to the boundary range of the location where the first device is located can be processed to make the boundary range more regular. For example, if the boundary range of a location is elliptical, the ellipse is processed as follows: the center of the ellipse is moved by the same or different preset distances in four directions (the default height of the space is infinite), the effective space of the digital key is obtained based on the acquired boundary range, and the effective space information relating to the effective space is included in the effective arrangement information.

[0043] Optionally, the first device may determine the effective spatial information of the digital key based on the location of the first device, and then create effective arrangement information (e.g., endpoint arrangement, where endpoint is a common interface scheme in the art and has a standard arrangement scheme) including the determined effective spatial information. Alternatively, the first device may transmit its location to a server, which may determine the effective spatial information based on the location of the first device and create effective arrangement information accordingly.

[0044] Therefore, the second device can obtain valid placement information, acquire further placement information for generating a digital key (e.g., placement information stored locally or placement information obtained from a server), and generate a digital key on the second device based on this placement information. For example, the generated digital key may have a data structure as shown in Figure 2, and furthermore, since the digital key generated by the second device additionally includes valid spatial information, the right half of the data structure needs to further include information indicating the valid spatial information of the digital key (e.g., location).

[0045] In step S520, a digital key signing request is received from the second device, which includes the data to be signed for the digital key, and the data to be signed includes the valid spatial information.

[0046] For example, a digital key signature request may be transmitted from the second device to the first device via routes 4 / 5 / 3 / 2 in Figure 1, or it may be transmitted directly via point-to-point communication.

[0047] For example, after a second device generates a digital key, the first device may need to sign and verify the second digital key to enhance security, and then use it to control a target (vehicle). For instance, the data to be signed that the second device sends to the first device may include the valid spatial information of the generated digital key, a selectable certificate for the generated digital key, the identification information of the second device, and the user identity information of the second device.

[0048] In step S530, based on the completion of signing the digital key signing request, a digital key deployment request (as a digital key signing response) is sent back to the second device instructing it to save the generated digital key.

[0049] For example, a digital key deployment request may be transmitted from the second device to the first device via routes 2 / 3 / 5 / 4 in Figure 1, or directly via point-to-point communication. For example, the digital key deployment request may include valid spatial information of the digital key confirmed by signature. After receiving the digital key signature response, the second device can store the generated digital key and use it later to control the target object.

[0050] Therefore, according to the method shown in Figure 5, the validity of the digital key is considered from a spatial dimension, improving the security of the process of sharing the digital key spatially.

[0051] In some scenarios, after the process of sharing a digital key is complete—that is, after the digital key has already been generated—the expected usable spatial range of the digital key (indicated by the digital key's effective spatial information) may be smaller than the actual usable spatial range when it is actually used. For example, a vehicle needs to be transported to a repair shop outside the dealership for complex repairs, but the expected usable spatial range is pre-set only within the dealership's boundaries. Therefore, when using the digital key at the repair shop, its usage location may exceed the expected usable spatial range, resulting in loss of control over the vehicle, requiring the car owner to share the digital key again, which impacts the user experience.

[0052] Therefore, in some other embodiments, the validity arrangement information further includes extended validity space information for the digital key, and the digital key generated after the second device acquires such validity arrangement information also includes extended validity space information. In other words, the digital key is also usable in the extended validity space corresponding to the extended validity space information.

[0053] Selectively, the extended effective space is determined in the same manner as the method for determining the effective space described above, and the spatial range of the extended effective space is greater than the spatial range of the effective space. The spatial range of the extended effective space is also within an acceptable or foreseeable range for the user of the first device (automobile owner). For example, since the repair shop is within 1 km of the automobile dealership, the extended effective space can be extended to a space of 1 km from the boundary of the automobile dealership (this space is entirely expressed in terms of longitude, latitude, or coordinates on the ground).

[0054] Thus, the digital key generated by the second device can correspond to two valid spaces with different ranges. If the usage location of the digital key is not within the narrow valid space, it is possible to further determine whether or not it is within the extended valid space.

[0055] Furthermore, depending on the actual circumstances, a larger quantity may be used to set up more effective space, and this invention is not limited to this.

[0056] Therefore, as described above, by setting effective spaces with different ranges, it is possible to avoid the first device sharing the digital key multiple times, thereby improving the user experience.

[0057] The validity of a digital key can also be considered from both temporal and spatial perspectives. In this case, the validity arrangement information may further include valid usage period information used for the digital key. That is, the digital key, after being combined with the valid space or extended valid space described above, becomes usable within that valid space or extended valid space and within its valid usage period.

[0058] Similarly, after the digital key sharing process is complete—that is, after the digital key has already been generated on the second device—the expected usage time range of the digital key (indicated by the digital key's valid usage period information) may be shorter than the actual usage time range when actually used. For example, repairing a vehicle may take longer than the maximum time in the expected usage time range. Therefore, when using a digital key in a repair shop, its usage time may exceed the preset range, resulting in loss of control of the vehicle, requiring the car owner to share the digital key again, which impacts the user experience.

[0059] Therefore, in order to prevent the first device from sharing the digital key multiple times, the validity arrangement information may further include validity period information and extended validity period information for the digital key.

[0060] Thus, the digital key can accommodate two valid usage periods of different durations. If the usage time of the digital key falls outside the shorter valid usage period, but the usage location is within the valid space, it is possible to further determine whether that usage time falls within the longer extended valid usage period. For example, the shorter valid usage period is from 13:00 to 18:00, and the longer extended valid usage period is from 12:00 to 21:00. Alternatively, the start time of the valid usage period may remain the same, while only the end time is extended. For example, the extended valid usage period would be from 13:00 to 18:00.

[0061] The process by which the digital key generated by the second device controls the target object based on this effective spatial information and effective usage period information will be explained in detail later.

[0062] Selectively, a digital key generated by a second device may have a certificate data structure as shown in the left half of Figure 2. Furthermore, since the digital key further includes one or more of the following: valid spatial information, extended valid spatial information, valid validity period information, and extended valid validity period information, the data structure shown in the right half must further include corresponding information (e.g., location, dynamic location, validity start / end, and / or dynamic validity start / end) to indicate this spatial and temporal information.

[0063] Therefore, as described above, the security of a digital key can be improved by limiting its usage scope from both the temporal and spatial dimensions. Furthermore, by setting different effective spatial ranges and / or different time periods for use, it is possible to prevent a first device from sharing the digital key multiple times, thereby improving convenience and enhancing the user experience.

[0064] Figures 6A and 6B are schematic flowcharts illustrating a digital key sharing method according to an embodiment of the present invention. This digital key sharing method is performed by the second device shown in Figure 1, or at least partly by the server shown in Figure 1. Alternatively, the first device may have already generated a digital key and share it with the second device. For example, the first device may be the vehicle owner's device, and the second device may be the repair / maintenance worker's device.

[0065] As shown in Figure 6A, in step S610, the first device receives a digital key creation request that includes valid space information used for the digital key, and the valid space information is included in the valid arrangement information that is transmitted to the second device.

[0066] In step S620, a digital key including the effective space information is generated based on the effective space information.

[0067] In step S630, a digital key signing request including the data to be signed for the digital key is sent to the first device, and the data to be signed includes the valid spatial information.

[0068] In step S640, the generated digital key is stored based on the digital key introduction request (digital key signature response) received from the first device.

[0069] Steps S610 to S640 correspond to steps S510 to S530 described above with reference to Figure 5, and therefore, further details can be found in the relevant explanations in Figure 5 and will not be repeated here.

[0070] The following section primarily describes the process by which the second device controls the target using the generated digital key. The following steps are performed by the second device shown in Figure 1, or at least partially by the server shown in Figure 1.

[0071] For example, in step S650, a key authentication request including the effective spatial information is sent to the target.

[0072] Selectively, to perform authentication, the second device may send a key authentication request to the target (vehicle) via the route 4 / 5 / 1 shown in Figure 1, through the target server (e.g., vehicle server 600), or it may send the key authentication request directly via point-to-point communication.

[0073] For example, a second device (e.g., a repair or maintenance worker's mobile terminal) can send an unlock request to the vehicle and, through that request, notify the vehicle that the digital key can only be used within the spatial range corresponding to the valid spatial information.

[0074] In step S660, a key authentication response is received from the target object indicating whether the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information.

[0075] Therefore, the second device may optionally receive a key authentication response from the target object (e.g., a vehicle) via the routes 1 / 5 / 4 shown in Figure 1, through the target object's server (e.g., a vehicle server 600), or it may directly receive the key authentication response via point-to-point communication. For example, after receiving the effective spatial information, the vehicle can determine the corresponding spatial range. Also, when the digital key unlocks the vehicle, since its usage location is close to the vehicle's location, the vehicle considers its own location as the estimated usage location of the digital key and determines whether the estimated usage location is within the effective space indicated by the effective spatial information. That is, the vehicle can determine whether the usage location of the digital key satisfies the spatial requirements corresponding to the effective spatial information and send a key authentication response back to the second device.

[0076] Furthermore, as described above, the effective arrangement information may further include extended effective space information of the digital key, and accordingly, the digital key further includes said extended effective space information.

[0077] Therefore, the method 600 may further include steps S670 and S680.

[0078] In step S670, upon receiving a key authentication response from the target indicating that the location where the digital key is used does not meet the spatial requirements corresponding to the effective spatial information, a second key authentication request including the extended effective spatial information is sent to the target.

[0079] In step S680, a second key authentication response is received from the target object indicating whether the location where the digital key is used satisfies the spatial requirements corresponding to the extended effective spatial information.

[0080] In other words, if the location where the digital key is used fails to meet the current spatial requirements for the first time and the target object cannot be controlled, the second device updates the effective spatial information (i.e., using the extended effective spatial information) and resends the key authentication request to notify the target object that its effective space has been updated and extended. Thus, the target object can determine, based on the updated extended effective space, whether the location where the digital key is used meets the updated spatial requirements.

[0081] Optionally, the second device can notify the first device that it has used extended effective spatial information after the effective spatial information has been updated. For example, the second device may send the notification message to the first device via point-to-point communication, or it may send the notification message to the first device via a server. For example, the second server of the second device may send a notification message to the target server, which in turn may send a notification message to the first server of the first device, and finally the first server may send a notification message to the first device.

[0082] Furthermore, both the effective spatial information and the extended effective spatial information may be transmitted to the target object at once, for example, through a single key authentication request.

[0083] In this case, steps S650 to S680 may be replaced with the following steps.

[0084] In step S650', a key authentication request including the effective spatial information and the extended effective spatial information is sent to the target. In step S660', a key authentication response is received from the target indicating whether the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information, or whether it satisfies the spatial requirements corresponding to the extended effective spatial information.

[0085] For example, after receiving the effective spatial information and the extended effective spatial information, the target may determine the corresponding spatial ranges for each. The target can first determine whether the estimated usage location of the digital key is within the effective space indicated by the effective spatial information, that is, whether the usage location of the digital key satisfies the spatial requirements corresponding to the effective spatial information. If yes, the target sends a key authentication response to the second device indicating that the spatial requirements are met. Otherwise, the target can further determine whether the estimated usage location of the digital key is within the extended effective space indicated by the extended effective spatial information, that is, whether the usage location of the digital key satisfies the spatial requirements corresponding to the extended effective spatial information, and send a key authentication response indicating whether the spatial requirements are met. In this case, the key authentication response may also simultaneously indicate that the usage location of the digital key does not satisfy the spatial requirements corresponding to the effective spatial information.

[0086] As selectable, the validity arrangement information may further include validity period information for the digital key, or it may include both validity period information and extended validity period information. Therefore, the digital key generated by the second device may include validity period information, or it may include both validity period information and extended validity period information.

[0087] In such cases, the effective arrangement information may include, in addition to the effective space information and extended effective space information described above, at least one of the effective usage period information and the extended effective usage period.

[0088] For example, consider the following case. Case 1: The effective arrangement information includes effective space information and effective usage period information. Case 2: The effective arrangement information includes effective space information, extended effective space information, and effective usage period information. Case 3: The effective arrangement information includes effective space information, effective usage period information, and extended effective usage period information. Case 4: The effective arrangement information includes effective space information, extended effective space information, effective usage period information, and extended effective usage period information.

[0089] Correspondingly, since the digital key generated by the second device also contains this information, when the second device sends a key authentication request to the target, the key authentication request may, depending on the circumstances, contain different spatial and / or different temporal information.

[0090] For example, as shown in Case 2, the second device first sends a first key authentication request to the target, including valid spatial information and valid usage period information. Upon receiving a key authentication failure response from the target indicating that the location of use of the digital key does not satisfy the spatial requirements corresponding to the valid spatial information (and the usage time of the digital key satisfies the time requirements corresponding to the valid usage period information), the second device sends a second key authentication request to the target, including extended valid spatial information (which may optionally again include valid usage period information), and receives a second key authentication response from the target indicating whether the location of use of the second digital key satisfies the spatial requirements corresponding to the extended valid spatial information. If the spatial requirements corresponding to the extended valid spatial information are satisfied and the time requirements are still satisfied, the second device is permitted to control the target using the digital key.

[0091] Alternatively, upon receiving a key authentication failure response from the target indicating that the usage time of the digital key does not meet the time requirements corresponding to the valid usage period information (regardless of whether the location of use of the digital key meets the spatial requirements corresponding to the valid spatial information or extended valid space), the second device does not send the second key authentication request to the target because the digital key of the second device does not contain the extended valid usage period information. In this case, control of the target by the digital key of the second device is prohibited.

[0092] Alternatively, in response to receiving a key authentication success response from the target object indicating that the location of use of the digital key satisfies the spatial requirements corresponding to the effective spatial information, and the time of use of the digital key satisfies the temporal requirements corresponding to the effective usage period information, i.e., in response to successful digital key authentication of the second device, control of the target object by the digital key of the second device is permitted.

[0093] Of course, the second device can include all the information (effective space information, extended effective space information, and effective usage period information in Case 2) when it first sends the key authentication request to the target. This allows the target to make one or two decisions, eliminating the need to send the key authentication request again and reducing signaling overhead.

[0094] For example, in Case 2, after receiving a key authentication request, the target can first determine whether the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information, and whether the usage time satisfies the temporal requirements corresponding to the effective usage period information. If both the spatial and temporal requirements are met, the digital key is permitted to control the target. If the temporal requirements are not met (regardless of whether the spatial requirements are met), the digital key is prohibited from controlling the target (because there is no extended effective usage period information). If the temporal requirements are met but the spatial requirements are not, it is further determined whether the location where the digital key is used satisfies the updated spatial requirements corresponding to the extended effective spatial information. If the updated spatial requirements are met and the temporal requirements are still met, the digital key is permitted to control the target.

[0095] Otherwise, the interaction process between the second device and the target object is similar. For example, if either of the two requirements mentioned above (i.e., the spatial requirement and the temporal requirement) cannot be updated (i.e., the digital key does not contain the corresponding extended information), and that requirement cannot be met, the digital key is prohibited from controlling the target object. If one requirement is not met but is updatable, and the other requirement is met, a further determination is made as to whether the updated requirement is met. If the updated requirement is met and the other requirement is still met, control of the target object by the digital key is permitted. If both requirements are updatable but neither is currently met, a further determination is made as to whether both updated requirements are met, and if both updated requirements are met, control of the target object by the digital key is permitted.

[0096] For example, Figures 7A to 7C show examples of the relationship between the usage time and usage space of a digital key, and the effective space and effective usage period, respectively.

[0097] For example, in Figure 7A, the digital key can control the target object because, although the usage time is within the first effective usage period, the usage location is outside the first effective space, and after updating the spatial requirements based on the extended effective space information, the usage location is within the updated second effective space, and the usage time is still within the first effective usage period.

[0098] For example, in Figure 7B, the digital key can control the target object because, although the usage time is outside the first effective usage period, the usage location is within the first effective space, and after the time requirements are updated based on the extended effective usage period information, the usage time is within the updated second effective usage period, and the usage location is still within the first effective space.

[0099] As another example, in Figure 7C, the digital key is in use outside the first effective usage period, and its location is also outside the first effective space. After updating the spatial requirements based on the extended effective space information and updating the time requirements based on the extended effective usage period information, the digital key can control the target object because its usage time is now within the updated second effective usage period and its location is within the updated second effective space.

[0100] Therefore, as described above, by sending a key authentication request to the target via a second device and passing authentication at the target, secure control of the target using a digital key can be achieved.

[0101] Figure 8 shows a schematic flowchart of a shared digital key verification method according to an embodiment of the present invention. This shared digital key verification method can be performed by the target object, by the target object's server, or by both. For example, it may be performed by the vehicle shown in Figure 1 (hereinafter referred to as an example), and at least a part of it may be performed by the vehicle server.

[0102] As shown in Figure 8, in step S810, a key authentication request is received from the device providing the digital key, which includes a certificate of the digital key and valid spatial information.

[0103] For example, the key authentication request can be received directly from a second device providing a shared digital key via routes 4 / 5 / 1 shown in Figure 1, or via point-to-point communication.

[0104] Step S820 authenticates the digital key certificate.

[0105] The data structure of a digital key certificate can include various pieces of information used to verify or authenticate the digital key, as shown in the left half of Figure 2. Optionally, the authentication process may include performing the authentication operation on the target entity or on the target entity's server.

[0106] In step S830, it is determined whether the spatial requirements corresponding to the effective spatial information are met based on the usage position of the digital key.

[0107] If the spatial requirements are not met and the extended effective spatial information for the digital key has been acquired, it is determined whether the spatial requirements corresponding to the extended effective spatial information are met based on the location where the digital key is used. In this way, if the spatial requirements corresponding to the extended effective spatial information are met, control of the target object by the digital key is permitted; otherwise, control of the target object by the digital key is prohibited.

[0108] Referring to Figures 6A to 6B described above, the extended valid space information obtained from the device may be obtained from the first key authentication request received from the device, or from the second key authentication request received from the device.

[0109] Optionally, as described above, the key authentication request may further include validity period information. This allows the target object to determine, based on the usage time of the digital key, whether it meets the time requirements corresponding to the validity period information. In such a case, if at least one of the spatial and time requirements is not met, control of the target object by the digital key is prohibited.

[0110] Under normal circumstances, to ensure security, digital keys generally need to be used within their valid space and validity period. Therefore, generated digital keys typically include relevant information about the valid space and validity period. Key authentication requests sent when requesting authentication to a target also include relevant information about the valid space and validity period. Of course, if security requirements are not so stringent, only one of these information may be included.

[0111] The following explanation is based on the assumption that a key authentication request includes relevant information about the valid space (valid space information and / or extended valid space information) and relevant information about the valid usage period (valid usage period information and / or extended valid usage period information).

[0112] For example, since the key authentication request further includes at least one of the extended effective spatial information and extended effective usage period information of the digital key, the method 800 may further include step S840 of determining whether the spatial requirements corresponding to the extended effective spatial information are met, based on the usage location of the digital key, if the spatial requirements (effective spatial information) are not met and the time requirements (effective usage period information) are met and the extended effective spatial information has already been obtained (for example, from the device that sent the key authentication request). In this way, if the spatial requirements corresponding to the extended effective spatial information are met and the time requirements are still met, control of the target object by the digital key is permitted; otherwise, control of the target object by the digital key is prohibited.

[0113] Alternatively, method 800 may further include step S850, if the spatial requirement is met, the temporal requirement is not met, and extended validity period information has already been acquired, then determining whether the temporal requirement corresponding to the extended validity period information is met based on the usage time of the digital key. In this way, if the temporal requirement corresponding to the extended validity period information is met and the spatial requirement is still met, control of the target object by the digital key is permitted; otherwise, control of the target object by the digital key is prohibited.

[0114] Alternatively, method 800 may further include step S860, if neither the spatial nor temporal requirements are met, and extended effective spatial information and extended effective usage period information have already been acquired, determining, based on the location and time of use of the digital key, whether both the spatial requirements corresponding to the extended effective spatial information and the temporal requirements corresponding to the extended effective usage period information are met. In this way, if both the updated temporal and spatial requirements are met, control of the target object by the digital key is permitted; otherwise, control of the target object by the digital key is prohibited.

[0115] As can be selected, as described with reference to Figures 6A to 6B, the acquired extended valid space information or extended valid usage period information may be obtained from the first key authentication request received from the device or from the second key authentication request received from the device.

[0116] Therefore, secure control of the target object using a digital key can be achieved through the method performed by the target object as described above. In addition, since extended effective space information and / or effective usage period information are added, repeated sharing of digital keys can be avoided, improving convenience and enhancing the user experience.

[0117] In the above-described embodiment (particularly the embodiment shown in Figure 5), the process of sharing a digital key is schematically explained with the first device and the second device as the implementing entities, and includes point-to-point communication between the first device and the second device and communication via a server. However, at least a part of the above-described process of sharing a digital key performed by the first device and the second device may be performed by a server. The server may be a single server, or it may include a first server used for the first device, a second server used for the second device, and a server used for the target. For convenience, we will use the example of a single server. Below, we will explain some of the operations related to digital key sharing on the server side.

[0118] First, the server can receive a digital key creation request from the first device that includes location information of the first device for determining the valid spatial information of the digital key, or a digital key creation request that includes the valid spatial information (for example, via route 7 or route 2 / 3 (vehicle server) shown in Figure 1, or via route 2 (first server), or via route 2 / 3 / 5 / 4 (second server)).

[0119] This process corresponds to the process of step S510 described above. Therefore, the process of determining the effective space information based on the location of the first device can be described in the above explanation. Optionally, the effective space information may be determined by the server. In this case, the digital key creation request may include only the location information of the first device, and the server may determine the effective space information based on the location information of the first device.

[0120] Optionally, the digital key creation request may further include identification information of the target object and identification information of the second device (e.g., identification information of the user of the second device). For example, the first device (e.g., the car owner's device) may have already generated an unrestricted digital key (the first digital key, or the shared digital key) based on first deployment information from the server, and then request the server to allow the second device to control the vehicle, notifying the server to share relevant information. For example, such a request may include an identifier of the shared object (i.e., the second device), an identifier of the controlled object (e.g., the vehicle), and information about locations where the use of the digital key is permitted.

[0121] The server can then generate arrangement information for generating the digital key on the second device based on the effective space information.

[0122] Optionally, the deployment information for generating digital keys on the device is generated on the server.

[0123] Since generating a digital key on a device requires obtaining deployment information from the server, the server can store the deployment information of the generated digital key. As shown in Figure 2, the data structure of the digital key of the second device and the digital key of the first device have the same part (left half), and the digital key generated on the second device has an additional part (right half). Therefore, based on at least a portion of the deployment information of the first digital key and information related to the received sharing process, second deployment information for the digital key to be used on the second device can be generated.

[0124] Next, the server can transmit the second deployment information to the second device so that the second device can generate a digital key. Alternatively, the server can further generate a digital key based on the second deployment information, transmit the generated digital key to the second device, and store it after signature verification by the server or the first device as described later. The digital key includes the valid spatial information, meaning that the digital key of the second device can be used within the spatial range corresponding to the determined valid spatial information. For example, in Figure 1, if the second deployment information is generated by the vehicle server, it is transmitted to the second device via route 5 / 4 or route 6; if it is generated by the first server, it is transmitted to the second device via route 3 / 5 / 4 or route 3 / 6; and if it is generated by the second server, it is transmitted to the second device via route 4.

[0125] On the other hand, the server may receive a digital key signing request from the second device, which includes data to be signed for a digital key generated by the second device. The data to be signed includes the valid spatial information.

[0126] The process in question may correspond to the process of step S520 described above.

[0127] The server may then verify the signature of the digital key signing request and send a digital key deployment request to the second device, instructing the second device to save the generated second digital key; or it may forward the digital key signing request to the first device, verify the signature of the digital key signing request by the first device, receive the digital key deployment request from the first device, and send the digital key deployment request to the second device, instructing the second device to save the generated second digital key.

[0128] The process in question may correspond to the process described in S530 above.

[0129] Optionally, the digital key creation request may further include validity period information. The server then further generates the deployment information based on the validity period. The digital key generated by the second device further includes a validity period.

[0130] Optionally, the digital key creation request may further include at least one of extended effective space information and extended effective usage period information. In this case, the server further generates the deployment information based on at least one of the extended effective space information and extended effective usage period information. The digital key in the second device further includes at least one of the extended effective space information and extended effective usage period information.

[0131] In other words, the communication and interaction process between the first device and the second device described above may be completed via one or more servers, and at least part of the operation on the first device or the second device may be performed by such one or more servers, and the present application is not limited thereto.

[0132] Figure 9 shows a schematic process diagram of a digital key sharing method, illustrating the interaction between the first device, the second device, and the target object. Figure 9 illustrates effective placement information, including effective space information, effective usage period information, and extended effective space information, as an example.

[0133] Please note that while Figure 9 shows direct communication between devices and between devices and vehicles, this also includes communication via a server.

[0134] As shown in Figure 9, in process 1, the first device (e.g., the car owner device) triggers the digital key sharing function, for example, in response to input from the user.

[0135] In process 2, the first device obtains its current location. In process 3, the first device determines whether its current location is a predetermined location (e.g., a permanent location). If it is not a predetermined location, in process 4, it obtains the corresponding boundary range and determines the effective space information and extended effective space information used for the digital key.

[0136] In process 5, the first device creates effective placement information (e.g., endpoint placement) which includes effective space information and extended effective space information.

[0137] In process 6, the first device sends a digital key creation request containing validity configuration information to the second device.

[0138] In process 7, the second device can obtain valid placement information, valid spatial information and extended valid spatial information, and generate a digital key based on the valid spatial information. The data structure of the digital key includes a digital key certificate, the valid spatial information, and the extended valid spatial information.

[0139] In process 8, the second device sends a digital key signing request to the first device, which includes the certificate of the digital key, the valid spatial information, and the extended valid spatial information.

[0140] In process 9, the first device performs signature verification on the digital key certificate received from the second device, the valid spatial information, and the extended valid spatial information.

[0141] In process 10, the first device transmits a digital key deployment request that includes a digital key certificate received from the second device, the effective spatial information, and extended effective spatial information. This request may be considered a response to a sharing confirmation instruction or a signature request.

[0142] In process 11, the second device stores the certificate of the digital key generated by the second device, the valid spatial information, and the extended valid spatial information.

[0143] In process 12, the second device sends a digital key authentication request to the vehicle, which includes validity period information and valid space information for the digital key generated by the second device.

[0144] In process 13, the vehicle determines whether it meets the time and spatial requirements corresponding to the effective usage period information and effective spatial information. If it does not meet both simultaneously, the vehicle further determines in process 14 whether it meets the time requirements but not the spatial requirements. If so, in process 15, the vehicle sends a digital key authentication response to the second device indicating that it does not meet the spatial requirements.

[0145] In process 16, the second device updates the valid space of the digital key according to the extended valid space information in the generated digital key.

[0146] Optionally, after updating the valid space of the digital key, the second device sends a notification message to the first device to inform the first device that the valid space of the digital key on the second device has been dynamically expanded. For example, the notification message may be sent by the second device to the first device via a point-to-point communication scheme, or it may be sent via the second device's server to a vehicle server, then from the vehicle server to the first device's server, and finally from the first device's server to the first device.

[0147] In process 17, the second device resends a digital key authentication request to the vehicle, which includes valid usage period information (corresponding to the unupdated valid usage period) and extended valid space information (corresponding to the updated valid space).

[0148] Process 18 determines whether the time and spatial requirements corresponding to the effective usage period information and effective spatial information are met. If both are met, in process 19 the digital key authentication is passed and the key becomes available to control the vehicle, and in process 20 an authentication response is returned.

[0149] Of course, processes 12 through 20 described above assume that digital key authentication, including extended valid space information, is completed by sending multiple digital key authentication requests. However, as mentioned above, it can be understood that when the digital key authentication request is first sent, the extended valid space information, valid space information, and valid usage period information can be sent to the vehicle.

[0150] Although Figure 9 schematically shows that the first device, the second device, and the vehicle communicate and interact directly, these communication interactions may be completed based on communication interactions between their respective servers, and at least part of the operations of the first device, the second device, and the vehicle may be performed by their respective servers, and this disclosure is not limited thereto.

[0151] Therefore, by simultaneously limiting the scope of use of the digital key in both temporal and spatial dimensions, the security of the digital key can be improved. Furthermore, by setting usage periods with different effective spatial ranges and / or different time lengths, it is possible to prevent the first device from sharing the digital key multiple times, thereby improving convenience and enhancing the user experience.

[0152] Other embodiments of the present invention further provide electronic devices.

[0153] Figure 10 shows a block diagram of the structure of a digital key sharing device according to an embodiment of the present invention. The electronic device may be the first device or the first server shown in Figure 1.

[0154] As shown in Figure 10, the device 1000 may include a transmitting module 1010, a receiving module 1020, and a processing module 1030. Optionally, the transmitting module 1010 and the receiving module 1020 may be implemented by a single transceiver module.

[0155] The transmitting module 1010 can transmit a digital key creation request, including effective spatial information to be used for the digital key, to the second device to generate the digital key at the second device.

[0156] The receiving module 1020 can receive a digital key signing request from a second device, which includes data to be signed for the digital key, and the data to be signed includes valid spatial information.

[0157] The processing module 1030 verifies the signature of the received digital key signature request. Based on the completion of signing the digital key signature request, the transmission module 1010 sends a digital key deployment request to the second device, instructing the second device to save the generated digital key.

[0158] Optionally, the processing module 1030 may further determine the effective space information based on the position of the first device. Here, the transmitting module 1010 may include the effective space information in the effective arrangement information transmitted from the first device to the second device.

[0159] Selectively, the effective arrangement information further includes extended effective space information used for the digital key, such that the digital key generated by the second device includes the extended effective space information.

[0160] Selectively, the validity arrangement information further includes validity period information used for the digital key, so that the digital key generated by the second device also includes validity period information. Alternatively, the validity arrangement information further includes validity period information and extended validity period information used for the digital key. The digital key further includes validity period information and extended validity period information.

[0161] Further details about the operations performed by each module can be found in the explanation in Figure 5 above, so they will not be repeated here.

[0162] Figure 11 shows a block diagram of the structure of a digital key sharing device according to an embodiment of the present application. The electronic device may be the second device or second server in Figure 1. Optionally, the transmitting module 1110 and the receiving module 1120 may be implemented by a single transceiver module.

[0163] As shown in Figure 11, the device 1100 may include a transmitting module 1110, a receiving module 1120, and a processing module 1130.

[0164] The receiving module 1120 can receive a digital key creation request from the first device, which includes valid spatial information used for the digital key, where the valid spatial information is included in the valid arrangement information transmitted from the first device to the second device.

[0165] The processing module 1130 can generate a digital key containing the effective spatial information based on the effective spatial information.

[0166] The transmission module 1110 can send a digital key signing request to a first device, which includes data to be signed for a digital key, where the second data to be signed includes valid spatial information.

[0167] The processing module 1130 can further store the generated second digital key based on the digital key introduction request (digital key signature response) received from the first device.

[0168] Once the process of sharing the digital key is complete, the target entity must authenticate the digital key so that the digital key can control the target entity.

[0169] For example, the transmitting module 1110 may further transmit a key authentication request including the effective spatial information to the target. The receiving module 1120 may further receive a key authentication response from the target, where the key authentication response indicates whether the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information.

[0170] If, as selectable, the second device needs to update spatial and / or temporal requirements, belonging to one of the cases described above, the processing module 1130 or the transmission module 1110 can generate a second digital key authentication request that includes extended valid spatial information and / or extended valid usage period information.

[0171] Further details about the operations performed by each module can be found in the explanations in Figures 6A to 7B above, and will not be repeated here.

[0172] Figure 12 shows a block diagram of the structure of a vehicle according to an embodiment of the present application. This vehicle may be the vehicle shown in Figure 1.

[0173] As shown in Figure 12, the vehicle 1200 may include a vehicle body 1210 and a control system 1220. The control system 1220 may include a transmitting module 1220-1, a receiving module 1220-2, and a processing module 1220-3. The control system of the vehicle 1200 can operate in cooperation with a vehicle server.

[0174] For example, the receiving module 1220-2 can receive a key authentication request from a device providing a digital key (for example, from a second device, or from the server of the second device via a vehicle server), which includes a digital key certificate and valid spatial information.

[0175] The processing module 1220-3 can authenticate the certificate of the digital key and determine whether the spatial requirements corresponding to the effective spatial information are met based on the location where the digital key is used.

[0176] If the processing module 1220-3 or the vehicle server determines that the spatial requirements are not met, the transmission module 1220-1 sends a key authentication response to a second device indicating whether the location where the digital key is used meets the spatial requirements corresponding to the effective spatial information.

[0177] Further details about the operations performed by each module can be found in the explanations in Figures 6A to 8 above, and will not be repeated here.

[0178] Figure 13 shows a block diagram of the server structure according to an embodiment of the present invention. The term "server" refers to any one of the servers shown in Figure 1 or the collective term for multiple servers.

[0179] As shown in Figure 13, each of the one or more servers 1300 may include a transmitting module 1310, a receiving module 1320, and a processing module 1330.

[0180] The receiving module 1320 can receive a digital key creation request from the first device that includes location information of the first device for determining the effective spatial information of the digital key, or that includes the effective spatial information.

[0181] The processing module 1330 can generate arrangement information for generating the digital key in the second device based on the effective space information.

[0182] The transmitting module 1330 can transmit the arrangement information to the second device so that the second device generates the digital key including the effective space information.

[0183] Optionally, the receiving module 1320 may further receive a digital key signing request from the second device, which includes data to be signed for a digital key generated by the second device, and which includes the valid space information. The processing module 1330 may further sign the digital key signing request and send a digital key deployment request to the second device via the transmitting module 1310. Alternatively, the transmitting module 1310 may forward the digital signature request to the first device, and after the receiving module 1320 receives the digital key deployment request from the first device, the transmitting module 1310 may send the digital key deployment request to the second device, instructing the second device to store the generated second digital key.

[0184] Further details about the operations performed by each module can be found in the explanations in Figures 5 through 8 above, and will not be repeated here.

[0185] Although Figures 10 to 13 illustrate the above modules, it can be understood that each device may be divided into more submodules depending on its different function, or each module may be combined into a new module. In some exemplary embodiments, a module or its submodules can be implemented using electronic hardware (e.g., a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, individual gate or transistor logic, individual hardware components, etc.), computer software (e.g., stored in random access memory (RAM), flash memory, read-only memory (ROM), erasable programmable ROM (EPROM), etc.), or a combination of the two.

[0186] Figure 14 shows a schematic block diagram of a computing device according to an embodiment of the present invention. The computing device may be the first device (or first server) shown in Figure 1, the second device (or second server), or a vehicle.

[0187] As shown in Figure 14, the computing device 1400 includes one or more processors connected via a system bus, one or more memories, a network interface, an input device, and a display screen. Here, the memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium of the terminal stores an operating system and may also store a computer executable program. When the computer executable program is executed by the processor, the processor can perform various operations of the digital key sharing method or the target control method using the digital key described above. The internal memory may also store a computer executable program. When the computer executable program is executed by the processor, the processor can perform various operations of the digital key sharing method or the target control method using the digital key.

[0188] The processor may be an integrated circuit chip with signal processing capabilities. The processor may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic elements, or discrete hardware components. Each method, step, and logic block diagram disclosed in the embodiments of this application can be implemented or performed. The general-purpose processor may be a microprocessor, or the processor may be any ordinary processor, and may be based on an X84 architecture or an ARM architecture.

[0189] Non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The memory in the methods described herein includes, but is not limited to, these and other suitable types of memory.

[0190] The display screen of the computing device may be a liquid crystal display screen or an e-ink display screen. The input device of the computing device may be a touch layer covering the display screen, or it may be buttons, a trackball, or a touchpad set in the housing of the device, or it may be an external keyboard, touchpad, or mouse.

[0191] The computing device may be a terminal or a server. A terminal includes, but is not limited to, smartphones, tablet computers, laptops, desktop computers, and smart TVs. Various clients (applications, APPs), such as multimedia playback clients, social clients, browser clients, information flow clients, and educational clients, may run on the terminal. A server may be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDNs, big data, and artificial intelligence platforms.

[0192] Another aspect of the present invention further provides a computer-readable storage medium in which a computer program is stored. When the computer program is executed by a processor, the processor performs each step of the method for sharing a digital key or the method for controlling a target using a digital key as described above.

[0193] According to other aspects of the present invention, a computer program product including a computer program is further provided. When the computer program is executed by a processor, each step of the above-described method for sharing a digital key or for controlling a target object using a digital key is realized.

[0194] It should be noted that the flowcharts and block diagrams in the drawings illustrate feasible architectures, functions, and operations of methods and apparatus according to various embodiments of the present application. In this regard, each block in a flowchart or block diagram may represent a module, program segment, or part of code, and such module, program segment, or part of code may include at least one executable instruction for implementing a given logic function. It should also be noted that in some alternative implementations, the functions shown within a block may be executed in an order different from the order shown in the drawings. For example, two consecutively shown blocks may actually be executed roughly in parallel, or, depending on the related functions, in reverse order. It should also be noted that each block in a block diagram and / or flowchart, or combinations of blocks in a block diagram and / or flowchart, may be implemented by a dedicated hardware-based system that performs a given function or operation, or by a combination of dedicated hardware and computer instructions.

[0195] The exemplary embodiments of the present application described in detail above are for illustrative purposes only and do not limit the present application. Those skilled in the art will understand that various modifications or combinations of these embodiments or their features can be made without departing from the principles and spirit of the present application, and that these modifications are also covered by the present application.

Claims

1. A method for sharing a digital key performed by a first device, The steps include sending a digital key creation request, including effective spatial information used for the digital key, to the second device so that the second device generates the digital key, A second device receives a digital key signing request including the data to be signed for the digital key, and the data to be signed includes the effective space information, A method for sharing a digital key, comprising the step of sending a digital key deployment request to the second device based on the completion of signing the digital key signature request, instructing the second device to store the generated digital key.

2. The process further includes determining the effective space information based on the location of the first device before transmitting the digital key creation request, The effective space information is included in the effective arrangement information transmitted from the first device to the second device. A method for sharing a digital key as described in claim 1.

3. The step of determining the effective space information based on the position of the first device is: The steps of determining the effective space used for the digital key based on the boundary range of the location, in response to the determination that the position of the first device is not a predetermined position and that the position of the first device is within the boundary range of a certain location, The step of including effective space information relating to the effective space in the effective arrangement information, The method for sharing a digital key according to claim 2.

4. The step of determining the effective space information based on the position of the first device is: The first step is to move the position of the first device symmetrically in all four directions by the same or different predetermined distances, and the boundary range obtained is the effective space used for the digital key. The step of including effective space information relating to the effective space in the effective arrangement information, The method for sharing a digital key according to claim 2.

5. The effective arrangement information further includes extended effective space information used in the digital key, The digital key includes the extended effective spatial information, The method for sharing a digital key according to claim 2.

6. The effective arrangement information further includes effective usage period information used in the digital key, and the digital key further includes the effective usage period information, or The effective arrangement information further includes effective usage period information and extended effective usage period information used in the digital key, and the digital key further includes the effective usage period information and the extended effective usage period information. A method for sharing a digital key as described in claim 1.

7. If the location where the digital key is used does not satisfy the spatial requirements corresponding to the effective spatial information, the extended effective spatial information is used to determine whether the location where the digital key is used satisfies the spatial requirements corresponding to the extended effective spatial information. The method for sharing a digital key as described in claim 5.

8. If the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information, and the usage time of the digital key does not satisfy the time requirements corresponding to the effective usage period information, the extended effective usage period information is used to determine whether the usage time of the digital key satisfies the time requirements corresponding to the extended effective usage period information. The method for sharing a digital key according to claim 6.

9. A method for verifying a shared digital key performed by a target, The steps include receiving a key authentication request from a device providing the digital key, which includes a certificate of the digital key and valid spatial information, A step of authenticating the certificate of the digital key, The step includes determining whether the spatial requirements corresponding to the effective spatial information are met based on the usage location of the digital key, How to verify a shared digital key.

10. If the aforementioned spatial requirements are not met, and extended effective spatial information for the digital key is obtained, the further step includes determining whether the spatial requirements corresponding to the extended effective spatial information are met based on the usage location of the digital key. A method for verifying a shared digital key according to claim 9.

11. The aforementioned key authentication request further includes validity period information, The verification method for the shared digital key is as follows: The further step includes determining whether the time requirements corresponding to the valid usage period information are met based on the usage time of the digital key, A method for verifying a shared digital key according to claim 9.

12. The step further includes prohibiting control of the target object by the digital key if at least one of the spatial and temporal requirements is not met, A method for verifying a shared digital key according to claim 11.

13. If the spatial requirements are not met and the temporal requirements are met, and extended effective spatial information is obtained, the further step includes determining whether the spatial requirements corresponding to the extended effective spatial information are met based on the usage position of the digital key. A method for verifying a shared digital key according to claim 11.

14. If the spatial requirements are met and the temporal requirements are not met, and extended valid usage period information is obtained, the further step includes determining whether the temporal requirements corresponding to the extended valid usage period information are met based on the usage time of the digital key. A method for verifying a shared digital key according to claim 11.

15. If neither the spatial nor temporal requirements are met, and extended effective spatial information and extended effective usage period information are obtained, the further step includes determining, based on the usage location and usage time of the digital key, whether all spatial requirements corresponding to the extended effective spatial information and temporal requirements corresponding to the extended effective usage period information are met. A method for verifying a shared digital key according to claim 11.

16. A method for sharing a digital key from a first device to a second device, which is performed by a server, The steps include receiving a digital key creation request from a first device that includes location information of the first device for determining the effective spatial information of a digital key, or that includes the effective spatial information, A step of generating arrangement information for generating the digital key in the second device based on the effective space information, The process includes the step of transmitting the arrangement information to the second device so that the second device generates the digital key including the effective space information, How to share a digital key.

17. The second device receives a digital key signing request including data to be signed for a digital key generated by the second device, and the data to be signed includes the effective space information, The procedure further includes the steps of: verifying the signature of the digital key signing request, sending a digital key deployment request to the second device instructing the second device to store the generated second digital key; or transferring the digital signature request to the first device, receiving a digital key deployment request from the first device, and then sending a digital key deployment request to the second device instructing the second device to store the generated second digital key. The method for sharing a digital key according to claim 16.

18. The aforementioned digital key creation request further includes valid usage period information, The server further generates the installation information based on the effective usage period, The digital key generated by the second device further includes the valid usage period information, The method for sharing a digital key according to claim 16.

19. The digital key creation request includes at least one of extended effective space information and extended effective usage period information, The server further generates the arrangement information based on at least one of the extended effective space information and the extended effective usage period information. The digital key generated by the second device further includes at least one of the extended effective space information and the extended effective usage period information. The method for sharing a digital key according to claim 16.

20. If the location where the digital key is used does not satisfy the spatial requirements corresponding to the effective spatial information, the extended effective spatial information is used to determine whether the location where the digital key is used satisfies the spatial requirements corresponding to the extended effective spatial information. The method for sharing a digital key according to claim 19.

21. If the location where the digital key is used satisfies the spatial requirements corresponding to the effective spatial information, and the usage time of the digital key does not satisfy the time requirements corresponding to the effective usage period information, the extended effective usage period information is used to determine whether the usage time of the digital key satisfies the time requirements corresponding to the extended effective usage period information. The method for sharing a digital key according to claim 19.

22. Processor and Includes memory in which computer-readable instructions are stored, When the instruction is executed, the processor performs the method according to any one of claims 1 to 21. Computing device.

Images