CN114697898A - Digital car key processing method, sharing method, device, SIM card and vehicle - Google Patents

Abstract

The invention provides a digital car key processing method, a sharing device, an SIM card and a car, wherein a digital car key program is preset in the SIM card; the method comprises the following steps: negotiating with a target vehicle to determine a first shared key and establish a secure channel based on Near Field Communication (NFC); the first shared key is used for encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle; the embodiment of the invention adopts the SIM card of the mobile terminal as the safety carrier of the digital car key, the SIM card can be conveniently switched among different brands of terminals, when a user changes the mobile terminal, the car key service can be normally used by inserting the SIM card, and the moving threshold of the car key after the user changes the machine is reduced; further, the establishment of a safety channel between the SIM card and the vehicle is realized through NFC, the safety of data transmission can be ensured, and one-time pad is realized.

Description

Digital car key processing method, sharing method, device, SIM card and vehicle

technical field

The present invention relates to the field of communication technology, in particular to a digital car key processing method, sharing method, device, SIM card and vehicle.

Background technique

With the deepening of vehicle intelligence and networking, driven by the core goal of convenient life, digital car keys came into being. The digital car key is to virtualize the physical car key into a digital identity and store it in the mobile terminal, and realize control operations such as opening/locking the door and starting the car through the communication authentication between the mobile terminal and the vehicle. It has become one of the key infrastructures of the Internet of Vehicles. . Digital car keys are portable, easy to share, low-cost, and have a cool user experience.

At present, there are two types of mainstream mobile terminal car key implementation solutions:

The first type is the software implementation scheme: store the digital car key (public and private key pair) in the application program (APP) of the mobile terminal, communicate with the vehicle through the Bluetooth function of the mobile terminal, and send the identity verification information (signature information) to the vehicle. , if the vehicle passes the verification, the functions such as unlocking and starting will be realized.

The second type is the eSE (embedded Secure Element, embedded security chip) solution led by mobile terminal manufacturers: the digital car key (public and private key pair) is stored in the mobile terminal of the mobile terminal, and the near field communication (Near Field Communication) built in the mobile terminal is used. Field Communication, NFC) chip communicates with the vehicle, sends the identity verification information (signature information) to the vehicle, and realizes functions such as unlocking and starting if the vehicle passes the verification. At the same time, the car owner can share the digital car key with relatives and friends through the car key APP.

The simple process of sharing the mobile terminal car key is as follows:

The car owner initiates a sharing application to the backend server through the car key APP in the mobile terminal. The backend server generates temporary car key data for the car owner's relatives and friends according to the permission information set by the car owner, and then pushes it to the car owner's relatives and friends. Relatives and friends can obtain the temporary car through the car key APP. After the key is stored in the eSE of the phone.

To sum up, the first type of scheme has the following problems:

The public and private keys of the car key are stored in the network environment, the security level is not high, and there is a risk of being stolen; once the mobile terminal is powered off, the Bluetooth connection cannot be enabled to use the car key function.

The second type of solution has the following problems:

Since the current car key eSE solutions of mobile terminal manufacturers are all privately implemented, from the user's point of view, the replacement of mobile terminals is fast. The eSE car key solution does not support cross-mobile phone brand migration and cross-mobile phone brand sharing. The car key means that the manufacturer's mobile terminal must be used all the time. In the process of car key sharing, the terminal of the car owner and the key sharing object (such as relatives and friends) must be connected to the Internet, that is, only online key sharing is supported. When there is no network environment, car key sharing cannot be supported.

SUMMARY OF THE INVENTION

The purpose of the embodiments of the present invention is to provide a digital car key processing method, a sharing method, a device, a SIM card and a vehicle, so as to solve the problem of insecure car keys in existing mobile terminals.

In order to solve the above problems, an embodiment of the present invention provides a method for processing a digital car key, which is executed by a user identification module SIM card, and a digital car key program is preset in the SIM card; the method includes:

Based on near field communication NFC, negotiate with the target vehicle to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

Wherein, based on the near field communication NFC, negotiating with the target vehicle to determine the first shared key, including:

generating a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

Based on NFC, the first temporary public key is sent to the target vehicle; so that the target vehicle determines the first shared key according to the first temporary public key and the second temporary private key; wherein the second temporary private key is determined by the target vehicle according to the generating the first elliptic encryption curve;

receiving a second temporary public key generated by the target vehicle according to the first elliptic encryption curve and sent by the target vehicle based on NFC;

The first shared key is determined according to the first temporary private key and the second temporary public key.

Wherein, the method also includes:

After determining the first shared key, the SIM card sends a first shared key negotiation success message to the target vehicle; or, receiving a message sent by the target vehicle to the SIM card after determining the first shared key The first shared key negotiation success message;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

Wherein, performing encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle through the first shared key, including:

Generate digital car key public key and digital car key private key;

Encrypting the digital car key public key by using the first shared key, and sending the encrypted digital car key public key to the target vehicle through NFC;

Receive the pairing result fed back by the target vehicle through NFC; wherein, when the target vehicle uses the first shared key to decrypt the encrypted digital car key public key to obtain and stores the digital car key public key, the pairing result is successful pairing; Otherwise, the pairing result is pairing failure.

Wherein, when the vehicle stores the public key of the digital car key corresponding to the SIM card, encrypting and decrypting the relevant information of the digital car key transmitted between the SIM card and the target vehicle through the first shared key, further comprising:

Encrypt the identity of the SIM card through the first shared key, and send the encrypted identity to the target vehicle through NFC;

receiving encrypted random challenge information sent by the target vehicle through NFC after verifying the identity of the SIM card using the first shared key; the random challenge information is encrypted by the first shared key;

Decrypt the encrypted random challenge information using the first shared key to obtain random challenge information;

Using the digital car key private key to sign the random challenge information to generate first ciphertext information, and sending the first ciphertext information to the target vehicle through NFC;

Receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the first ciphertext information according to the digital car key public key corresponding to the digital car key private key, the execution result is that the door is opened or the door is opened. The locking is completed; otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

Wherein, in the case where the vehicle does not store the public key of the digital car key corresponding to the SIM card, before receiving the encrypted random challenge information sent through NFC, the method further includes:

Receive the authorization verification request sent by the target vehicle through NFC;

According to the authorization verification request, the signature information of the SIM card paired with the vehicle is sent to the target vehicle through NFC, so that the target vehicle decrypts the signature information using the digital car key public key of the SIM card paired with the vehicle, and obtains The public key of the digital car key corresponding to the SIM card is stored.

An embodiment of the present invention also provides a method for processing a digital car key, which is executed by a target vehicle, where an NFC card reader module is preset in the target vehicle, and the method includes:

Based on the NFC card reader module, negotiate with the SIM card to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

Wherein, based on the NFC card reader module, negotiate with the SIM card to determine the first shared key, including:

Receive the first temporary public key sent by the SIM card based on NFC; wherein, the SIM card generates a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

generating a second temporary public key and a second temporary private key according to the first elliptic encryption curve;

determining the first shared key according to the first temporary public key and the second temporary private key;

Sending the second temporary public key to the SIM card based on NFC; so that the SIM card determines the first shared key according to the first temporary private key and the second temporary public key.

Wherein, the method also includes:

After determining the first shared key, the target vehicle sends a first shared key negotiation success message to the SIM card; or, receiving a first message sent by the SIM card to the target vehicle after determining the first shared key. A shared key negotiation success message;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

Wherein, performing encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle through the first shared key, including:

Receive the encrypted digital car key public key sent by the SIM card through NFC;

Decrypt the encrypted digital vehicle key public key by using the first shared key;

In the case of successfully decrypting the digital car key public key of the SIM card, store the digital car key public key and send the pairing result to the SIM card, and the pairing result is successful pairing; otherwise, send the pairing failed pairing to the SIM card result.

Wherein, when the vehicle stores the public key of the digital car key corresponding to the SIM card, encrypting and decrypting the relevant information of the digital car key transmitted between the SIM card and the target vehicle through the first shared key, further comprising:

Receive the encrypted identification sent by the SIM card through NFC;

Use the first shared key to decrypt and verify the encrypted identity, and send encrypted random challenge information to the SIM card through NFC; the random challenge information is encrypted by the first shared key;

Receive the first ciphertext information sent by NFC after the SIM card decrypts the random challenge information with the first shared key; the first ciphertext information is that the SIM card uses the digital car key private key to sign the random challenge information get;

Use the digital car key public key to verify the first ciphertext information, and send the execution result to the SIM card; in the case of passing the verification, open the door or lock the door, and the execution result is that the door is opened or the door is locked. Otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

Wherein, in the case where the vehicle does not store the public key of the digital car key corresponding to the SIM card, before sending the encrypted random challenge information to the SIM card through NFC, the method further includes:

Send an authorization verification request to the SIM card through NFC;

Receive the signature information of the SIM card paired with the vehicle sent by the SIM card according to the authorization verification request; the signature information of the SIM card paired with the vehicle is determined by the SIM card paired with the vehicle according to its corresponding digital vehicle The key private key performs signature generation on the digital car key public key of the SIM card;

The signature information is verified according to the public key of the digital car key corresponding to the SIM card that has been paired with the vehicle, and if the verification is passed, the public key of the digital car key corresponding to the SIM card is stored.

An embodiment of the present invention also provides a method for sharing a digital car key, which is performed by a first SIM card, where the digital car key level is preset in the first SIM card; and the first digital car key private key and the first digital key of the first SIM card The vehicle key public key is successfully paired with the target vehicle; the method includes:

An NFC connection is established with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

receiving a first request sent through the NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second digital car key public key;

Use the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information, and send the signature information to the second SIM card through the NFC connection;

Receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

Wherein, the method also includes:

The first SIM card and the second SIM card determine the second shared key based on NFC negotiation and establish an NFC connection;

Wherein, the information transmitted between the first SIM card and the second SIM card is encrypted and decrypted by the second shared key.

An embodiment of the present invention further provides a method for sharing a digital car key, which is executed by a second SIM card, and the method further includes:

An NFC connection is established with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key private key and the first digital car key of the first SIM card The public key is successfully paired with the target vehicle;

generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the second digital car key public key;

Receiving the first SIM card and using the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information;

Send a reception result to the first SIM card, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

Wherein, the method also includes:

The second SIM card and the first SIM card determine a second shared key based on NFC negotiation and establish an NFC connection;

Wherein, the information transmitted between the second SIM card and the first SIM card is encrypted and decrypted by the second shared key.

Wherein, if the target vehicle stores the second digital vehicle key public key; the method further includes:

Send identification to the target vehicle via NFC;

Receive random challenge information sent by the target vehicle through NFC after verifying the identity of the second SIM card;

Using the private key of the second digital car key to sign the random challenge information to generate second ciphertext information, and sending the second ciphertext information to the target vehicle through NFC;

Receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the second ciphertext information according to the second digital car key public key, the execution result is that the door is opened or the door is locked; otherwise, The execution result is that the vehicle door fails to open or the vehicle door fails to lock.

Wherein, in the case where the vehicle does not store the public key of the second digital vehicle key, before receiving the random challenge information sent through NFC, the method further includes:

Receive the authorization verification request sent by the target vehicle through NFC;

According to the authorization verification request, the signature information of the first SIM card is sent to the target vehicle through NFC, so that the target vehicle decrypts the signature information using the public key of the first digital car key of the first SIM card to obtain the second SIM card The second digital car key public key and stored.

The embodiment of the present invention also provides a processing device for a digital car key, which is applied to a user identification module SIM card, and a digital car key program is preset in the SIM card; the device includes:

a first establishment module, configured to negotiate with the target vehicle to determine the first shared key and establish a secure channel based on the near field communication NFC;

The first processing module is configured to perform encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle by using the first shared key.

An embodiment of the present invention further provides a SIM card, including a processor and a transceiver, and the transceiver receives and transmits data under the control of the processor, wherein the processor is configured to perform the following operations:

Based on near field communication NFC, negotiate with the target vehicle to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

An embodiment of the present invention further provides a processing device for a digital car key, which is applied to a target vehicle, characterized in that an NFC card reader module is preset in the target vehicle, and the device includes:

The second establishment module is used to negotiate with the SIM card to determine the first shared key and establish a secure channel based on the NFC card reader module;

The second processing module is configured to perform encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle by using the first shared key.

An embodiment of the present invention further provides a target vehicle, including a processor and a transceiver, wherein the transceiver receives and transmits data under the control of the processor, wherein the processor is configured to perform the following operations:

Based on the NFC card reader module, negotiate with the SIM card to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

An embodiment of the present invention further provides a digital car key sharing device, which is applied to a first SIM card, where a digital car key level is preset in the first SIM card; and the first digital car key private key and the first digital key of the first SIM card The vehicle key public key is successfully paired with the target vehicle; the device includes:

The first connection module is used to establish an NFC connection with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

The first request receiving module is used to receive the first request sent through the NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second number car key public key;

A signature sending module, configured to use the private key of the first digital car key of the first SIM card to sign the public key of the second digital car key to generate signature information, and send the signature information to the second SIM card through the NFC connection ;

A result receiving module, configured to receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card has successfully received the signature information.

An embodiment of the present invention also provides a SIM card, the SIM card is a first SIM card, and the first SIM card is preset with a digital car key level; and the first digital car key private key and the first digital key of the first SIM card The vehicle key public key is successfully paired with the target vehicle; the SIM card further includes a processor and a transceiver, and the transceiver receives and transmits data under the control of the processor, wherein the processor is used to perform the following operations:

An NFC connection is established with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

receiving a first request sent through the NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second digital car key public key;

Use the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information, and send the signature information to the second SIM card through the NFC connection;

Receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

An embodiment of the present invention further provides a digital car key sharing device, which is applied to a second SIM card, and the device includes:

The second connection module is used to establish an NFC connection with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key of the first SIM card is private The key and the public key of the first digital car key are successfully paired with the target vehicle;

a first request sending module for generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the second digital car key public key;

a signature receiving module, configured to receive the first SIM card to sign the second digital car key public key with the first SIM card's first digital car key private key to generate signature information;

A result sending module, configured to send a reception result to the first SIM card, where the reception result is used to indicate that the second SIM card has successfully received the signature information.

An embodiment of the present invention further provides a SIM card, the SIM card is a second SIM card, the SIM card further includes a processor and a transceiver, and the transceiver receives and transmits data under the control of the processor. That is, the processor is configured to perform the following operations:

An NFC connection is established with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key private key and the first digital car key of the first SIM card The public key is successfully paired with the target vehicle;

generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the second digital car key public key;

Receiving the first SIM card and using the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information;

Send a reception result to the first SIM card, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

An embodiment of the present invention further provides a communication device, including a memory, a processor, and a program stored on the memory and running on the processor; it is characterized in that the processor implements the above when executing the program The method for processing a digital car key; or, when the processor executes the program, the above-mentioned method for sharing a digital car key is implemented.

Embodiments of the present invention further provide a computer-readable storage medium on which a computer program is stored, characterized in that, when the program is executed by a processor, the steps in the above-mentioned method for processing a digital car key are implemented; When the program is executed by the processor, the steps in the digital vehicle key sharing method as described above are implemented.

The above-mentioned technical scheme of the present invention has at least the following beneficial effects:

In the processing method, device, SIM card and vehicle of the digital car key according to the embodiments of the present invention, the SIM card of the mobile terminal is used as the safe carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. After inserting the SIM card into the terminal, the car key service can be used normally, which reduces the migration threshold of the car key after the user changes the car; further, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize One pass at a time.

Description of drawings

1 is a schematic diagram of an application system of a method for processing a digital car key provided by an embodiment of the present invention;

FIG. 2 shows one of the flow charts of the steps of the method for processing a digital car key provided by an embodiment of the present invention;

3 shows a flowchart of establishing a secure channel in a method for processing a digital car key provided by an embodiment of the present invention;

FIG. 4 shows a flow chart of digital car key pairing in the processing method for digital car keys provided by an embodiment of the present invention;

Fig. 5 is a flowchart showing the use of the digital car key of the owner's SIM card in the processing method of the digital car key provided by the embodiment of the present invention;

FIG. 6 shows the second flow chart of the steps of the method for processing a digital car key provided by an embodiment of the present invention;

FIG. 7 shows one of the step flow charts of the method for sharing a digital car key provided by an embodiment of the present invention;

FIG. 8 shows a flowchart of offline sharing of the digital car key of the first SIM card in the digital car key sharing method provided by the embodiment of the present invention;

FIG. 9 shows the second flow chart of the steps of the method for sharing a digital car key provided by an embodiment of the present invention;

FIG. 10 shows a flowchart showing the first use of a digital car key by a second SIM card in the method for sharing a digital car key provided by an embodiment of the present invention;

FIG. 11 shows one of the schematic structural diagrams of the processing device for a digital car key provided by an embodiment of the present invention;

12 shows one of the schematic structural diagrams of a SIM card provided by an embodiment of the present invention;

FIG. 13 shows the second schematic structural diagram of a processing device for a digital car key provided by an embodiment of the present invention;

FIG. 14 is a schematic structural diagram of a target vehicle provided by an embodiment of the present invention;

FIG. 15 shows one of the schematic structural diagrams of the digital car key sharing device provided by the embodiment of the present invention;

16 shows the second schematic structural diagram of a SIM card provided by an embodiment of the present invention;

FIG. 17 shows the second schematic structural diagram of the digital car key sharing device provided by the embodiment of the present invention;

FIG. 18 shows the third schematic structural diagram of the SIM card provided by the embodiment of the present invention.

Detailed ways

In order to make the technical problems, technical solutions and advantages to be solved by the present invention more clear, the following will be described in detail with reference to the accompanying drawings and specific embodiments.

As shown in FIG. 1 , the method for processing a digital car key provided by an embodiment of the present invention uses a SIM card in a mobile terminal as a safe carrier of the digital car key, and implements a car control operation through NFC. The solution can be used as a general SIM truck key business to provide digital car key services to all car manufacturers. As shown in Fig. 1, the applied system includes: a mobile terminal, a SIM card, a vehicle, and a car key business background server.

Mobile terminal: With NFC function, it is the carrier of the digital car key APP, which provides the car owner with a visual operation interface of the car key business. The digital car key running framework in the mobile terminal provides the digital car key APP with general digital key service functions, including car owner pairing, car key sharing and other operations.

SIM card: It is an NFC card that supports a variety of cryptographic algorithms, and is connected to the NFC module in the mobile terminal through a SWP (Single Wire Protocol) interface, enabling contactless communication with the car. The digital car key APPLET (small program or program) is preset in the SIM card in advance.

Vehicle: The target vehicle must be equipped with an NFC card reader module, which is used to communicate with the SIM card in the mobile terminal and read the relevant information of the car key in the card to lock/open the door.

Car key business background server: It is the business processing background of the digital car key APP, and is connected to the vehicle through a private link to realize the preset and update of data such as keys and certificates in the vehicle.

It should be noted that the above-mentioned APPLET, digital car key APP and business platform can be operated and maintained by operators to provide digital car key services to car companies, which simplifies the workload of cooperation and adaptation between car manufacturers and various mobile phone manufacturers.

As shown in FIG. 2 , an embodiment of the present invention provides a method for processing a digital car key, which is executed by a user identification module SIM card, and a digital car key program is preset in the SIM card; the method includes:

Step 201, based on the near field communication NFC, negotiate with the target vehicle to determine the first shared key and establish a secure channel;

Step 202 , perform encryption and decryption processing on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

In the embodiment of the present invention, in order to improve the communication security between the SIM card and the target vehicle, the vehicle and the SIM card establish a secure channel based on the NFC near field communication protocol, negotiate a shared key (ie, the first shared key), and the subsequent data exchange process are protected by this key. The SIM card may be the vehicle owner SIM card, or may be other SIM cards except the vehicle owner SIM card. It should be noted that the SIM card of the vehicle owner mentioned in the embodiments of this application is the SIM card that is successfully paired with the vehicle for the first time.

As an optional embodiment, the establishment of the secure channel is based on an ECDH (Elliptic Curve Diffie-Hellmankey Exchange, Elliptic Curve Diffie-Hellmankey Exchange) key negotiation algorithm, and the two parties negotiate a key based on the selected elliptic curve. Specifically, step 201 includes:

generating a first temporary public key PKt and a first temporary private key SKt according to the first elliptic encryption curve;

Based on NFC, the first temporary public key PKt is sent to the target vehicle; so that the target vehicle determines the first shared key K according to the first temporary public key PKt and the second temporary private key SKs; wherein the second temporary private key SKs generated by the target vehicle according to the first elliptic encryption curve;

receiving a second temporary public key PKs generated by the target vehicle based on the NFC and generated by the target vehicle according to the first elliptic encryption curve;

The first shared key K is determined according to the first temporary private key SKt and the second temporary public key PKs.

Further, the method also includes:

After determining the first shared key K, the SIM card sends a first shared key negotiation success message to the target vehicle; or, the receiving target vehicle sends a message to the SIM card after determining the first shared key K The first shared key negotiation success message sent;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

As shown in Figure 3, the process of establishing a secure channel between the SIM card and the target vehicle includes:

Step 1, the SIM card uses a given elliptic encryption algorithm (ECC algorithm) curve to generate a first temporary public-private key pair (PKt, SKt);

Step 2, send PKt to the target vehicle;

Step 3, the target vehicle uses a predetermined ECC algorithm curve to generate a second temporary public-private key pair (PKs, SKs);

Step 4, the target vehicle uses PKt and SKs to calculate the first shared key K;

Step 5, the target vehicle sends the PKs to the SIM card;

Step 6, the SIM card uses PKs and SKt to calculate the first shared key K.

Wherein, K is a key key for establishing a secure channel, and the subsequent SIM card and the target vehicle can use the first shared key to encrypt and decrypt the transmitted information.

In the embodiment of the present invention, the SIM card uses the NFC capability opened by the mobile terminal to communicate with the vehicle, and the communication process adopts the ECDH key negotiation algorithm, which can ensure the security of information transmission, realize one-time encryption, and improve the security of the digital car key .

As an optional embodiment, in the case where the SIM card is the owner's SIM card, the owner's SIM card has been pre-configured with a digital car key program and personalization of the key data has been completed. car key APP; correspondingly, step 202 includes:

The owner's SIM card generates the digital car key public key PKc and the digital car key private key SKc;

Encrypting the digital car key public key PKc with the first shared key, and sending the encrypted digital car key public key to the target vehicle through NFC;

Receive the pairing result fed back by the target vehicle through NFC; wherein, when the target vehicle uses the first shared key to decrypt the encrypted digital car key public key PKc to obtain and stores the digital car key public key PKc, the pairing result is pairing success; otherwise, the pairing result is pairing failure.

As shown in Figure 4, the pairing process of the digital car key and the target vehicle is as follows:

Step 1, the car owner starts the pairing process in the car key APP;

Step 2, the car key APP notifies the SIM card through the machine card interface to prepare for car key pairing.

Step 3, the car owner brings the mobile terminal close to the NFC card reader on the car side.

Step 4, the target vehicle and the SIM card establish a secure channel based on the NFC near field communication protocol, and negotiate to determine a first shared key, and subsequent data exchange processes are protected by the first shared key.

Step 5, the SIM card generates a digital car key (PKc, SKc);

Step 6, the SIM card sends the PKc to the target vehicle.

Step 7, the target vehicle stores the PKc, completes the pairing of the car key, and returns the pairing result.

It should be noted that, in steps 5-6, all the information previously transmitted by the SIM card and the target vehicle are protected by the first shared key.

As an optional embodiment, when the vehicle stores the digital vehicle key public key corresponding to the SIM card, step 202 further includes:

Encrypt the identity of the SIM card through the first shared key, and send the encrypted identity to the target vehicle through NFC;

receiving encrypted random challenge information sent by the target vehicle through NFC after verifying the identity of the SIM card using the first shared key; the random challenge information is encrypted by the first shared key;

Decrypt the encrypted random challenge information using the first shared key to obtain random challenge information;

Using the digital car key private key to sign the random challenge information to generate first ciphertext information, and sending the first ciphertext information to the target vehicle through NFC;

Receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the first ciphertext information according to the digital car key public key corresponding to the digital car key private key, the execution result is that the door is opened or the door is opened. The locking is completed; otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

The SIM card can be the owner's SIM card that has been paired with the vehicle (that is, the target vehicle stores the digital car key public key corresponding to the owner's SIM card), or the SIM card of other users who are not using the digital car key for the first time (that is, the target vehicle stores the digital car key public key) The digital car key public key corresponding to the SIM card), that is, the SIM card uses the digital car key private key generated by itself (for example, the owner's SIM card corresponds to the first digital car key private key, and other SIM cards correspond to the second digital car key private key) ) to sign the random challenge information, and the target vehicle uses the corresponding digital car key public key (for example, the owner's SIM card corresponds to the first digital car key public key, and other SIM cards correspond to the second digital car key public key) to verify the signature, thereby Enables door opening or locking.

As shown in Figure 5, the process of using the SIM card digital car key is as follows:

Step 1, the car owner places the mobile terminal close to the NFC card reader on the car side to establish an NFC connection.

Step 2, the target vehicle and the SIM card establish a secure channel based on the NFC near field communication protocol, and negotiate to determine a first shared key, and subsequent data exchange processes are protected by the first shared key.

Step 3, the SIM card sends an identity verification request to the vehicle, carrying the identity identification.

Step 4, the target vehicle judges that it is the owner's SIM card or the SIM card that has stored the corresponding digital car key public key according to the identity identifier, and the vehicle sends random challenge information;

Step 5, the SIM card uses its own digital car key private key to sign the random challenge information to generate the first ciphertext information;

Step 6, the SIM card sends the first ciphertext information to the target vehicle;

Step 7, the target vehicle uses the digital car key public key corresponding to the SIM card to verify the signature of the first ciphertext information; if the verification is passed, the door is opened or locked; otherwise, no response;

Step 8, the target vehicle returns the execution result to the SIM card.

It should be noted that, in steps 3-7, all the information previously transmitted by the SIM card and the target vehicle are protected by the first shared key.

In the embodiment of the present invention, the digital car key program is preset on the SIM card, communicates with the car key APP through the mobile phone terminal machine card channel upward, and is connected with the NFC module in the mobile phone through the SWP interface and the car with the NFC card reader installed. Contactless communication to realize functions such as unlocking/unlocking of vehicles.

As another optional embodiment, when the non-owner SIM card (also referred to as the SIM card not paired with the target vehicle) uses the digital car key for the first time, that is, the vehicle does not store the digital car key public key corresponding to the SIM card In the case of NFC, before receiving the encrypted random challenge information sent by NFC, the method further includes:

Receive the authorization verification request sent by the target vehicle through NFC;

According to the authorization verification request, the signature information of the SIM card paired with the vehicle is sent to the target vehicle through NFC, so that the target vehicle decrypts the signature information using the digital car key public key of the SIM card paired with the vehicle, and obtains The public key of the digital car key corresponding to the SIM card is stored.

To sum up, the embodiment of the present invention adopts the SIM card of the mobile terminal as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. After the user replaces the mobile terminal, the car key service can be used normally by inserting the SIM card. , which reduces the migration threshold of the car key after the user changes the machine; furthermore, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

As shown in FIG. 6 , an embodiment of the present invention further provides a method for processing a digital car key, which is executed by a target vehicle, where an NFC card reader module is preset in the target vehicle, and the method includes:

Step 801, based on the NFC card reader module, negotiate with the SIM card to determine the first shared key and establish a secure channel;

Step 802: Perform encryption and decryption processing on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

In the embodiment of the present invention, in order to improve the communication security between the SIM card and the target vehicle, the vehicle and the SIM card establish a secure channel based on the NFC near field communication protocol, negotiate a shared key (ie, the first shared key), and the subsequent data exchange process are protected by this key. The SIM card may be the vehicle owner SIM card, or may be other SIM cards except the vehicle owner SIM card. It should be noted that the SIM card of the vehicle owner mentioned in the embodiments of this application is the SIM card that is successfully paired with the vehicle for the first time.

As an optional embodiment, the establishment of the secure channel is based on an ECDH (Elliptic Curve Diffie-Hellmankey Exchange, Elliptic Curve Diffie-Hellmankey Exchange) key negotiation algorithm, and the two parties negotiate a key based on the selected elliptic curve. Specifically, step 801 includes:

Receive the first temporary public key sent by the SIM card based on NFC; wherein, the SIM card generates a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

generating a second temporary public key and a second temporary private key according to the first elliptic encryption curve;

determining the first shared key according to the first temporary public key and the second temporary private key;

Sending the second temporary public key to the SIM card based on NFC; so that the SIM card determines the first shared key according to the first temporary private key and the second temporary public key.

Further, the method also includes:

After determining the first shared key, the target vehicle sends a first shared key negotiation success message to the SIM card; or, receiving a first message sent by the SIM card to the target vehicle after determining the first shared key. A shared key negotiation success message;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

In the embodiment of the present invention, the SIM card uses the NFC capability opened by the mobile terminal to communicate with the vehicle, and the communication process adopts the ECDH key negotiation algorithm, which can ensure the security of information transmission, realize one-time encryption, and improve the security of the digital car key .

As an optional embodiment, the digital car key program has been pre-configured in the vehicle owner's SIM card and the key data personalization has been completed, and the vehicle owner needs to download the digital vehicle key APP through the mobile terminal of the security vehicle owner's SIM card; correspondingly, step 802 includes:

Receive the encrypted digital car key public key sent by the SIM card through NFC;

Decrypt the encrypted digital vehicle key public key by using the first shared key;

In the case of successfully decrypting the digital car key public key of the SIM card, store the digital car key public key and send the pairing result to the SIM card, and the pairing result is successful pairing; otherwise, send the pairing failed pairing to the SIM card result.

As another optional embodiment, in the case that the vehicle stores the digital vehicle key public key corresponding to the SIM card, step 802 further includes:

Receive the encrypted identification sent by the SIM card through NFC;

Use the first shared key to decrypt and verify the encrypted identity, and send encrypted random challenge information to the SIM card through NFC; the random challenge information is encrypted by the first shared key;

Receive the first ciphertext information sent by NFC after the SIM card decrypts the random challenge information with the first shared key; the first ciphertext information is that the SIM card uses the digital car key private key to sign the random challenge information get;

Use the digital car key public key to verify the first ciphertext information, and send the execution result to the SIM card; in the case of passing the verification, open the door or lock the door, and the execution result is that the door is opened or the door is locked. Otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

In the embodiment of the present invention, the digital car key program is preset on the SIM card, communicates with the car key APP through the mobile phone terminal machine card channel upward, and downward through the SWP interface to connect with the NFC module in the mobile phone and the car with the NFC card reader installed. Contactless communication to realize functions such as unlocking/unlocking of vehicles.

As an optional embodiment, when the vehicle does not store the public key of the digital car key corresponding to the SIM card, before sending the encrypted random challenge information to the SIM card through NFC, the method further includes:

Send an authorization verification request to the SIM card through NFC;

Receive the signature information of the SIM card paired with the vehicle sent by the SIM card according to the authorization verification request; the signature information of the SIM card paired with the vehicle is determined by the SIM card paired with the vehicle according to its corresponding digital vehicle The key private key performs signature generation on the digital car key public key of the SIM card;

The signature information is verified according to the public key of the digital car key corresponding to the SIM card that has been paired with the vehicle, and if the verification is passed, the public key of the digital car key corresponding to the SIM card is stored.

To sum up, the embodiment of the present invention adopts the SIM card of the mobile terminal as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. After the user replaces the mobile terminal, the car key service can be used normally by inserting the SIM card. , which reduces the migration threshold of the car key after the user changes the machine; furthermore, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

As shown in FIG. 7 , an embodiment of the present invention further provides a method for sharing a digital car key, which is executed by a first SIM card, where the digital car key level is preset in the first SIM card; and the first digital car key of the first SIM card The private key and the public key of the first digital car key are successfully paired with the target vehicle, and the method includes:

Step 701, establishing an NFC connection with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

Step 702, receiving a first request sent through an NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second digital car key public key;

Step 703, using the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information, and sending the signature information to the second SIM card through the NFC connection;

Step 704: Receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card has successfully received the signature information.

For example, the first SIM card is the SIM card of the car owner, and the second SIM card is the SIM card of relatives and friends; in the embodiment of the present invention, the SIM card of the car owner and the SIM cards of relatives and friends rely on the NFC function opened by the mobile terminal to the SIM card to realize the offline connection between the car owner and relatives and friends. Digital car key authorization.

In at least one optional embodiment of the present invention, the vehicle owner's SIM card and the relatives and friends' SIM cards use the NFC function opened by the mobile terminal to the SIM card to realize the offline car key authorization of the vehicle owner to the relatives and friends; that is, when the vehicle owner needs to share the digital car key with relatives and friends. Even if the mobile terminals of both parties are not connected to the Internet, the car owner can share the car keys through the NFC connection. At the same time, when sharing car keys, there is no need for relatives and friends to download and install the car key APP on the mobile phone, and there is no need to worry about the mobile terminal brand of relatives and friends.

It should be noted that the NFC interaction between the two SIM cards can be transmitted only through NFC, or can be transmitted through an NFC secure channel (ie, a second shared key is pre-established), which is not specifically limited here. Correspondingly, the method further includes:

The first SIM card and the second SIM card determine the second shared key based on NFC negotiation and establish an NFC connection;

Wherein, the information transmitted between the first SIM card and the second SIM card is encrypted and decrypted by the second shared key.

As shown in Figure 8, the offline car key sharing process is as follows:

Step 1, the car owner starts the car key sharing process in the car key APP.

Step 2, the car owner APP calls the machine card interface to send a car key sharing notification to the car owner SIM card (ie, the first SIM card).

In step 3, the vehicle owner uses the mobile terminal to approach the mobile terminal of relatives and friends, and an NFC connection is established between the vehicle owner's SIM card and the second SIM card and a secure channel is established.

Step 4, the second SIM card generates a car key public-private key pair (PKr, SKr).

Step 5, the second SIM card requests the owner's signature information from the owner's SIM card.

Step 6, the second SIM card uses SKc to sign the PKr.

Step 7, the first SIM card sends the vehicle owner signature information to the second SIM card.

Step 8, the second SIM card returns the receiving result, and the car key APP informs the owner of the sharing result. After the sharing is successful, relatives and friends can use the second SIM card to control the vehicle.

To sum up, the embodiment of the present invention adopts the SIM card of the mobile terminal as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. After the user replaces the mobile terminal, the car key service can be used normally by inserting the SIM card. , which lowers the migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

As shown in FIG. 9 , an embodiment of the present invention further provides a method for sharing a digital car key, which is performed by a second SIM card, and the method further includes:

Step 901, establish an NFC connection with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key private key of the first SIM card and the first The digital car key public key is successfully paired with the target vehicle;

Step 902, generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the second digital car key public key;

Step 903, receiving the first SIM card and using the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information;

Step 904: Send a reception result to the first SIM card, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

For example, the first SIM card is the SIM card of the car owner, and the second SIM card is the SIM card of relatives and friends; in the embodiment of the present invention, the SIM card of the car owner and the SIM cards of relatives and friends rely on the NFC function opened by the mobile terminal to the SIM card to realize the offline connection between the car owner and relatives and friends. Digital car key authorization.

In at least one optional embodiment of the present invention, the vehicle owner's SIM card and the relatives and friends' SIM cards rely on the NFC function opened by the mobile terminal to the SIM card to realize the offline car key authorization of the vehicle owner to the relatives and friends; that is, when the vehicle owner needs to share the digital car key to relatives and friends. Even if the mobile terminals of both parties are not connected to the Internet, the car owner can share the car keys through the NFC connection. At the same time, when sharing car keys, there is no need for relatives and friends to download and install the car key APP on their mobile phones, and there is no need to worry about the mobile terminal brands of relatives and friends.

It should be noted that the NFC interaction between the two SIM cards can be transmitted only through NFC, or can also be transmitted through an NFC secure channel (ie, a second shared key is pre-established), which is not specifically limited here. Correspondingly, the method further includes:

The second SIM card and the first SIM card determine a second shared key based on NFC negotiation and establish an NFC connection;

Wherein, the information transmitted between the second SIM card and the first SIM card is encrypted and decrypted by the second shared key.

As an optional embodiment, if the target vehicle stores the second digital vehicle key public key; the method further includes:

Send identification to the target vehicle via NFC;

Receive random challenge information sent by the target vehicle through NFC after verifying the identity of the second SIM card;

Using the private key of the second digital car key to sign the random challenge information to generate second ciphertext information, and sending the second ciphertext information to the target vehicle through NFC;

Receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the second ciphertext information according to the second digital car key public key, the execution result is that the door is opened or the door is locked; otherwise, The execution result is that the vehicle door fails to open or the vehicle door fails to lock.

The method of using the second SIM card to open or lock the vehicle door is the same as the method of using the vehicle owner's SIM card to open or lock the vehicle door, which will not be repeated here.

When the non-owner SIM card (also called the SIM card not paired with the target vehicle, that is, the second SIM card) uses the digital car key for the first time, if the vehicle does not store the public key of the second digital car key, Before receiving the random challenge information sent through NFC, the method further includes:

Receive the authorization verification request sent by the target vehicle through NFC;

According to the authorization verification request, the signature information of the first SIM card is sent to the target vehicle through NFC, so that the target vehicle decrypts the signature information using the public key of the first digital car key of the first SIM card to obtain the second SIM card The second digital car key public key and stored.

As shown in Figure 10, the process of using the digital car key of the second SIM card for the first time is as follows:

Step 1, the car owner's friend brings the mobile terminal close to the NFC card reader on the car side to establish an NFC connection.

Step 2, the target vehicle and the SIM card establish a secure channel based on the NFC near field communication protocol, and negotiate to determine a first shared key, and subsequent data exchange processes are protected by the first shared key.

Step 3, the second SIM card sends an identity verification request to the vehicle, carrying the identity identifier.

Step 4, the target vehicle judges that it is the second SIM card according to the identity identifier, and sends an authorization verification request to the second SIM card;

Step 5, the second SIM card sends the signature information of the first SIM card to the target vehicle;

Step 6, the target vehicle uses the PKc of the owner's SIM card to verify the signature, and if the verification is passed, then the PKr of the second SIM card is stored;

Step 7, the target vehicle sends random challenge information;

Step 8, the second SIM card uses the second digital car key private key SKr to sign the random challenge information to generate the second ciphertext information;

Step 9, the second SIM card sends the second ciphertext information to the target vehicle;

Step 10, the target vehicle uses the second digital car key public key PKr to verify the signature of the second ciphertext information; if the verification is passed, the door is opened or locked; otherwise, no response;

Step 11, the target vehicle returns the execution result to the second SIM card.

It should be noted that, in step 3-10, all the information previously transmitted by the second SIM card and the target vehicle is protected by the first shared key.

To sum up, the embodiment of the present invention adopts the SIM card of the mobile terminal as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. After the user replaces the mobile terminal, the car key service can be used normally by inserting the SIM card. , which lowers the migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

As shown in FIG. 11 , an embodiment of the present invention further provides a processing device for a digital car key, which is applied to a user identification module SIM card, and a digital car key program is preset in the SIM card; the device includes:

The first establishment module 101 is configured to negotiate with the target vehicle to determine a first shared key and establish a secure channel based on the near field communication NFC;

The first processing module 102 is configured to perform encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle by using the first shared key.

As an optional embodiment, the first establishment module includes:

a first submodule for generating a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

The second submodule is configured to send the first temporary public key to the target vehicle based on NFC; so that the target vehicle determines the first shared key according to the first temporary public key and the second temporary private key; wherein the second temporary public key The private key is generated by the target vehicle according to the first elliptic encryption curve;

a third submodule, configured to receive a second temporary public key generated by the target vehicle according to the first elliptic encryption curve and sent by the target vehicle based on NFC;

The fourth submodule is configured to determine the first shared key according to the first temporary private key and the second temporary public key.

As an optional embodiment, the device further includes:

The message processing module is used for the SIM card to send a first shared key negotiation success message to the target vehicle after determining the first shared key; or, after the receiving target vehicle determines the first shared key, send a message to the target vehicle. The first shared key negotiation success message sent by the SIM card;

A determining module, configured to determine that the secure channel is successfully established according to the first shared key negotiation success message.

As an optional embodiment, the first processing module includes:

The fifth submodule is used to generate a digital car key public key and a digital car key private key;

a sixth submodule, configured to encrypt the digital car key public key by using the first shared key, and send the encrypted first digital car key public key to the target vehicle through NFC;

The seventh sub-module is used to receive the pairing result fed back by the target vehicle through NFC; wherein, when the target vehicle uses the first shared key to decrypt the encrypted digital car key public key to obtain and store the digital car key public key , the pairing result is pairing success; otherwise, the pairing result is pairing failure.

As an optional embodiment, when the vehicle stores the public key of the digital car key corresponding to the SIM card, the first processing module further includes:

The eighth submodule is used to encrypt the identity of the SIM card through the first shared key, and send the encrypted identity to the target vehicle through NFC;

a ninth sub-module, configured to receive encrypted random challenge information sent by the target vehicle through NFC after using the first shared key to verify the identity of the SIM card; the random challenge information is encrypted by the first shared key;

The tenth submodule is used to decrypt the encrypted random challenge information by using the first shared key to obtain random challenge information;

The eleventh submodule is used to sign the random challenge information with the private key of the digital car key to generate first ciphertext information, and send the first ciphertext information to the target vehicle through NFC;

The twelfth sub-module is used to receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the first ciphertext information according to the digital car key public key corresponding to the digital car key private key, the The execution result is that the vehicle door is opened or the vehicle door is locked; otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

As an optional embodiment, in the case that the vehicle does not store the public key of the digital car key corresponding to the SIM card, the device further includes:

The verification receiving module is used to receive the authorization verification request sent by the target vehicle through NFC;

The sending module is configured to send the signature information of the SIM card that has been paired with the vehicle to the target vehicle through NFC according to the authorization verification request, so that the target vehicle uses the digital car key public key pair of the SIM card that has been paired with the vehicle to sign The information is decrypted, and the public key of the digital car key corresponding to the SIM card is obtained and stored.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the machine; furthermore, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

It should be noted that the apparatus for processing a digital car key provided by the embodiment of the present invention is a device capable of executing the above-mentioned method for processing a digital car key, and all the embodiments of the above-mentioned method for processing a digital car key are applicable to the apparatus, and all can achieve the same or similar beneficial effects.

As shown in FIG. 12, an embodiment of the present invention further provides a SIM card, including a processor 100 and a transceiver 110, the transceiver 110 receives and sends data under the control of the processor 100, and the processor 100 is used for Do the following:

Based on near field communication NFC, negotiate with the target vehicle to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital vehicle key related information transmitted between the SIM card and the target vehicle by using the first shared key.

As an optional embodiment, the processor 100 is further configured to perform the following operations:

generating a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

Based on NFC, the first temporary public key is sent to the target vehicle; so that the target vehicle determines the first shared key according to the first temporary public key and the second temporary private key; wherein the second temporary private key is determined by the target vehicle according to the generating the first elliptic encryption curve;

receiving a second temporary public key generated by the target vehicle according to the first elliptic encryption curve and sent by the target vehicle based on NFC;

The first shared key is determined according to the first temporary private key and the second temporary public key.

As an optional embodiment, the processor 100 is further configured to perform the following operations:

After determining the first shared key, the SIM card sends a first shared key negotiation success message to the target vehicle; or, receiving a message sent by the target vehicle to the SIM card after determining the first shared key The first shared key negotiation success message;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

As an optional embodiment, the processor 100 is further configured to perform the following operations:

Generate digital car key public key and digital car key private key;

Encrypting the digital car key public key by using the first shared key, and sending the encrypted digital car key public key to the target vehicle through NFC;

Receive the pairing result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle uses the first shared key to decrypt the encrypted digital car key public key to obtain and stores the digital car key public key, the pairing result is successful pairing; Otherwise, the pairing result is pairing failure.

As an optional embodiment, when the vehicle stores the public key of the digital vehicle key corresponding to the SIM card, the processor 100 is further configured to perform the following operations:

Encrypt the identity of the SIM card through the first shared key, and send the encrypted identity to the target vehicle through NFC;

receiving encrypted random challenge information sent by the target vehicle through NFC after verifying the identity of the SIM card using the first shared key; the random challenge information is encrypted by the first shared key;

Decrypt the encrypted random challenge information using the first shared key to obtain random challenge information;

Using the digital car key private key to sign the random challenge information to generate first ciphertext information, and sending the first ciphertext information to the target vehicle through NFC;

Receive the execution result fed back by the target vehicle through NFC; wherein, in the case that the target vehicle passes the verification of the first ciphertext information according to the digital car key public key corresponding to the digital car key private key, the execution result is that the door is opened or the door is opened. The locking is completed; otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

As an optional embodiment, when the vehicle does not store the public key of the digital vehicle key corresponding to the SIM card, the processor 100 is further configured to perform the following operations:

Receive the authorization verification request sent by the target vehicle through NFC;

According to the authorization verification request, the signature information of the SIM card paired with the vehicle is sent to the target vehicle through NFC, so that the target vehicle decrypts the signature information using the digital car key public key of the SIM card paired with the vehicle, and obtains The public key of the digital car key corresponding to the SIM card is stored.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the machine; further, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

It should be noted that, the SIM card provided in the embodiment of the present invention is a SIM card capable of executing the above-mentioned processing method of a digital car key, and all the above-mentioned embodiments of the processing method of a digital car key are applicable to the SIM card, and can achieve same or similar beneficial effects.

As shown in FIG. 13 , an embodiment of the present invention further provides a processing device for a digital car key, which is applied to a target vehicle, where an NFC card reading module is preset in the target vehicle, and the device includes:

The second establishment module 131 is configured to negotiate with the SIM card to determine the first shared key and establish a secure channel based on the NFC card reader module;

The second processing module 132 is configured to perform encryption and decryption processing on the digital car key related information transmitted between the SIM card and the target vehicle by using the first shared key.

As an optional embodiment, the second establishment module includes:

The twentieth submodule is used to receive the first temporary public key sent by the SIM card based on NFC; wherein, the SIM card generates a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

The twenty-first sub-module is configured to generate a second temporary public key and a second temporary private key according to the first elliptic encryption curve;

A twenty-second submodule, configured to determine the first shared key according to the first temporary public key and the second temporary private key;

The twenty-third sub-module is configured to send the second temporary public key to the SIM card based on NFC; so that the SIM card determines the first shared secret according to the first temporary private key and the second temporary public key key.

As an optional embodiment, the device further includes:

The successful negotiation module is used for the target vehicle to send a first shared key negotiation success message to the SIM card after determining the first shared key; or, after the receiving SIM card determines the first shared key to the SIM card the first shared key negotiation success message sent by the target vehicle;

A successful establishment module is configured to determine that the secure channel establishment is successful according to the first shared key negotiation success message.

As an optional embodiment, the second processing module includes:

The twenty-fourth sub-module is used to receive the encrypted digital car key public key sent by the SIM card through NFC;

A twenty-fifth sub-module, configured to decrypt the encrypted digital vehicle key public key by using the first shared key;

The twenty-sixth sub-module is used to store the digital car key public key of the SIM card and send the pairing result to the SIM card when the public key of the digital car key of the SIM card is successfully decrypted; otherwise, the pairing result is successful; otherwise , and send the pairing result of the pairing failure to the SIM card.

As an optional embodiment, when the vehicle stores the public key of the digital car key corresponding to the SIM card, the second processing module includes:

The twenty-seventh sub-module is used to receive the encrypted identity identifier sent by the SIM card through NFC;

The twenty-eighth sub-module is used to decrypt and verify the encrypted identity by using the first shared key, and send encrypted random challenge information to the SIM card through NFC; the random challenge information is passed through the first shared secret key. key encryption;

The twenty-ninth sub-module is used to receive the first ciphertext information sent by NFC after the SIM card decrypts the random challenge information with the first shared key; the first ciphertext information is the private key of the digital car key used by the SIM card The key is obtained by signing the random challenge information;

The thirtieth sub-module is used for verifying the first ciphertext information by using the digital car key public key, and sending the execution result to the SIM card; in the case of passing the verification, the vehicle door is opened or locked, and the execution result is The vehicle door is completed or the vehicle door is locked; otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

As an optional embodiment, in the case that the vehicle does not store the public key of the digital car key corresponding to the SIM card, the device further includes:

The thirty-fifth submodule is used to send an authorization verification request to the SIM card through NFC;

The thirty-sixth sub-module is configured to receive the signature information of the SIM card paired with the vehicle sent by the SIM card according to the authorization verification request; the signature information of the SIM card paired with the vehicle is determined by the signature information of the SIM card paired with the vehicle The SIM card is generated by signing the digital car key public key of the SIM card according to its corresponding digital car key private key;

The thirty-seventh sub-module is used to verify the signature information according to the public key of the digital car key corresponding to the SIM card that has been paired with the vehicle, and if the verification is passed, store the public key of the digital car key corresponding to the SIM card.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the machine; furthermore, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

It should be noted that the apparatus for processing a digital car key provided by the embodiment of the present invention is a device capable of executing the above-mentioned method for processing a digital car key, and all the embodiments of the above-mentioned method for processing a digital car key are applicable to the apparatus, and all can achieve the same or similar beneficial effects.

As shown in FIG. 14 , an embodiment of the present invention further provides a target vehicle, including a processor 120 and a transceiver 121 , the transceiver 121 receives and sends data under the control of the processor 120 , and the processor 120 is used for Do the following:

Based on the NFC card reader module, negotiate with the SIM card to determine the first shared key and establish a secure channel;

Encryption and decryption processing is performed on the digital car key related information transmitted between the SIM card and the target vehicle by using the first shared key.

As an optional embodiment, the processor 120 is further configured to perform the following operations:

Receive the first temporary public key sent by the SIM card based on NFC; wherein, the SIM card generates a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

generating a second temporary public key and a second temporary private key according to the first elliptic encryption curve;

determining the first shared key according to the first temporary public key and the second temporary private key;

Send the second temporary public key to the SIM card based on NFC; so that the SIM card determines the first shared key according to the first temporary private key and the second temporary public key.

As an optional embodiment, the processor 120 is further configured to perform the following operations:

After determining the first shared key, the target vehicle sends a first shared key negotiation success message to the SIM card; or, receiving a first message sent by the SIM card to the target vehicle after determining the first shared key. A shared key negotiation success message;

According to the first shared key negotiation success message, it is determined that the secure channel is successfully established.

As an optional embodiment, when the SIM card is a vehicle owner SIM card, the processor 120 is further configured to perform the following operations:

Receive the encrypted digital car key public key sent by the SIM card through NFC;

Decrypt the encrypted digital vehicle key public key by using the first shared key;

In the case of successfully decrypting the digital car key public key of the SIM card, store the digital car key public key and send the pairing result to the SIM card, and the pairing result is successful pairing; otherwise, send the pairing failed pairing to the SIM card result.

As an optional embodiment, when the vehicle stores the digital vehicle key public key corresponding to the SIM card, the processor 120 is further configured to perform the following operations:

Receive the encrypted identification sent by the SIM card through NFC;

Use the first shared key to decrypt and verify the encrypted identity, and send encrypted random challenge information to the SIM card through NFC; the random challenge information is encrypted by the first shared key;

Receive the first ciphertext information sent by NFC after the SIM card decrypts the random challenge information with the first shared key; the first ciphertext information is that the SIM card uses the digital car key private key to sign the random challenge information get;

Use the digital car key public key to verify the first ciphertext information, and send the execution result to the SIM card; in the case of passing the verification, open the door or lock the door, and the execution result is that the door is opened or the door is locked. Otherwise, the execution result is that the vehicle door fails to open or the vehicle door fails to lock.

As an optional embodiment, when the vehicle does not store the public key of the digital vehicle key corresponding to the SIM card, the processor 120 is further configured to perform the following operations:

Send an authorization verification request to the SIM card through NFC;

Receive the signature information of the SIM card paired with the vehicle sent by the SIM card according to the authorization verification request; the signature information of the SIM card paired with the vehicle is determined by the SIM card paired with the vehicle according to its corresponding digital vehicle The key private key performs signature generation on the digital car key public key of the SIM card;

The signature information is verified according to the public key of the digital car key corresponding to the SIM card that has been paired with the vehicle, and if the verification is passed, the public key of the digital car key corresponding to the SIM card is stored.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the machine; further, the establishment of a secure channel between the SIM card and the vehicle through NFC can ensure the security of data transmission and realize one-time encryption.

It should be noted that, if the target vehicle provided by the embodiment of the present invention is a target vehicle capable of executing the above-mentioned processing method for a digital car key, all embodiments of the above-mentioned processing method for a digital car key are applicable to the target vehicle, and can achieve same or similar beneficial effects.

As shown in FIG. 15 , an embodiment of the present invention further provides a digital car key sharing device, which is applied to a first SIM card, where the digital car key level is preset in the first SIM card; and the first digital car key of the first SIM card The private key and the public key of the first digital car key are successfully paired with the target vehicle; the device includes:

The first connection module 151 is used to establish an NFC connection with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

The first request receiving module 152 is configured to receive the first request sent through the NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second digital car key public key and the second digital car key private key. Digital car key public key;

The signature sending module 153 is configured to use the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information, and send the signature information to the second SIM through the NFC connection Card;

The result receiving module 154 is configured to receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card has successfully received the signature information.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

It should be noted that, the digital car key sharing device provided by the embodiment of the present invention is a device capable of executing the above-mentioned digital car key method, and all the embodiments of the above-mentioned digital car key sharing method are applicable to the device, and can achieve the same or similar beneficial effects.

As shown in FIG. 16 , an embodiment of the present invention further provides a SIM card, where the SIM card is a first SIM card, and a digital car key level is preset in the first SIM card; and the first digital car key of the first SIM card The private key and the public key of the first digital car key are successfully paired with the target vehicle; the SIM card further includes a processor 160 and a transceiver 161, the transceiver 161 receives and sends data under the control of the processor 160, and the processing Controller 160 is used to perform the following operations:

An NFC connection is established with the second SIM card based on NFC; wherein, the digital car key program is respectively preset in the second SIM card;

receiving a first request sent through the NFC connection after the second SIM card generates the second digital car key public key and the second digital car key private key; the first request carries the second digital car key public key;

Use the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information, and send the signature information to the second SIM card through the NFC connection;

Receive a reception result fed back by the second SIM card after receiving the signature information, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

It should be noted that, the digital car key sharing device provided by the embodiment of the present invention is a device capable of executing the above-mentioned digital car key method, and all the embodiments of the above-mentioned digital car key sharing method are applicable to the device, and can achieve the same or similar beneficial effects.

As shown in FIG. 17 , an embodiment of the present invention further provides a digital car key sharing device, which is applied to a second SIM card, and the device includes:

The second connection module 171 is configured to establish an NFC connection with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key of the first SIM card The private key and the public key of the first digital car key are successfully paired with the target vehicle;

The first request sending module 172 is used to generate the second digital car key public key and the second digital car key private key, and send a first request to the first SIM card through NFC; the first request carries the second digital car key key public key;

A signature receiving module 173, configured to receive the first SIM card to sign the second digital car key public key by using the first digital car key private key of the first SIM card to generate signature information;

The result sending module 174 is configured to send a receiving result to the first SIM card, where the receiving result is used to indicate that the second SIM card has successfully received the signature information.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

It should be noted that, the digital car key sharing device provided by the embodiment of the present invention is a device capable of executing the above-mentioned digital car key method, and all the embodiments of the above-mentioned digital car key sharing method are applicable to the device, and can achieve the same or similar beneficial effects.

As shown in FIG. 18 , an embodiment of the present invention further provides a SIM card, where the SIM card is a second SIM card, and the SIM card further includes a processor 180 and a transceiver 181 , and the transceiver 181 is in the processor 180 . To receive and transmit data under the control of the processor 180, the processor 180 is configured to perform the following operations:

An NFC connection is established with the first SIM card based on NFC, wherein the digital car key program is preset in the first SIM card and the second SIM card respectively; and the first digital car key private key and the first digital car key of the first SIM card The public key is successfully paired with the target vehicle;

generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the second digital car key public key;

Receiving the first SIM card and using the first digital car key private key of the first SIM card to sign the second digital car key public key to generate signature information;

Send a reception result to the first SIM card, where the reception result is used to indicate that the second SIM card successfully receives the signature information.

In this embodiment of the present invention, the SIM card of the mobile terminal is used as the security carrier of the digital car key, and the SIM card can be easily switched between terminals of different brands. The migration threshold of the car key after the user changes the car; and the NFC function between the car owner's SIM card and the relatives and friends' SIM cards is enabled by the NFC function opened by the mobile terminal to the SIM card, enabling the car owner to authorize the offline digital car key of relatives and friends.

It should be noted that, the digital car key sharing device provided by the embodiment of the present invention is a device capable of executing the above-mentioned digital car key method, and all the embodiments of the above-mentioned digital car key sharing method are applicable to the device, and can achieve the same or similar beneficial effects.

Embodiments of the present invention further provide a communication device, which is a SIM card or a target vehicle, including a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor executes The program implements each process in the above-mentioned embodiment of the method for processing a digital car key or the embodiment of the method for sharing a digital car key, and can achieve the same technical effect. To avoid repetition, details are not repeated here.

Embodiments of the present invention further provide a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the above-mentioned embodiments of the method for processing a digital car key or an embodiment of the method for sharing a digital car key are implemented. and can achieve the same technical effect, in order to avoid repetition, it will not be repeated here. The computer-readable storage medium is, for example, a read-only memory (Read-Only Memory, ROM for short), a random access memory (Random Access Memory, RAM for short), a magnetic disk or an optical disk, and the like.

As will be appreciated by one skilled in the art, the embodiments of the present application may be provided as a method, a system or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-readable storage media having computer-usable program code embodied therein, including but not limited to disk storage, optical storage, and the like.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the present application. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow and/or a block or blocks of the flowchart.

These computer program instructions may also be stored in a computer-readable storage medium capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce a paper product comprising the instruction means, The instruction means implements the functions specified in the flow or flows of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded onto a computer or other programmable data processing device to cause the computer or other programmable device to perform a series of operational steps to produce a computer-implemented process, whereby the instructions to be executed on the computer or other programmable device Steps are provided for implementing the functions specified in a flow or flows of the flowcharts and/or a block or blocks of the block diagrams.

The above are the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, several improvements and modifications can be made. These improvements and modifications It should also be regarded as the protection scope of the present invention.

Claims (28)

1. A processing method of digital car key, is carried out by subscriber identity module SIM card, characterized by, preset the digital car key procedure in the SIM card; the method comprises the following steps:

negotiating with a target vehicle to determine a first shared key and establish a secure channel based on Near Field Communication (NFC);

and encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

2. The method of claim 1, wherein negotiating with the target vehicle to determine the first shared key based on Near Field Communication (NFC) comprises:

generating a first temporary public key and a first temporary private key according to the first elliptic encryption curve;

sending the first temporary public key to a target vehicle based on NFC; determining, by the target vehicle, a first shared key from the first ephemeral public key and the second ephemeral private key; wherein the second temporary private key is generated by the target vehicle according to the first elliptic encryption curve;

receiving a second temporary public key which is sent by a target vehicle based on NFC and generated by the target vehicle according to the first elliptic encryption curve;

and determining the first shared secret key according to the first temporary private key and the second temporary public key.

3. The method of claim 2, further comprising:

after determining the first shared key, the SIM card sends a first shared key negotiation success message to the target vehicle; or receiving a first shared key negotiation success message sent by the target vehicle to the SIM card after the first shared key is determined;

and determining that the establishment of the secure channel is successful according to the first shared key negotiation success message.

4. The method of claim 1, wherein encrypting and decrypting the digital car key related information transmitted between the SIM card and the target vehicle by the first shared key comprises:

generating a digital car key public key and a digital car key private key;

encrypting the digital vehicle key public key through a first shared key, and sending the encrypted digital vehicle key public key to the target vehicle through NFC;

receiving a pairing result fed back by the target vehicle through NFC; the pairing result is successful under the condition that the target vehicle decrypts the encrypted digital vehicle key public key by using the first shared key to obtain and store the digital vehicle key public key; otherwise, the pairing result is pairing failure.

5. The method according to claim 1, wherein in a case where the vehicle stores a digital vehicle key public key corresponding to the SIM card, the first shared key is used to encrypt and decrypt the digital vehicle key related information transmitted between the SIM card and the target vehicle, and further comprising:

encrypting the identity of the SIM card through a first shared secret key, and sending the encrypted identity to a target vehicle through NFC;

receiving encrypted random challenge information sent by NFC after the identity of the SIM card is verified by the target vehicle by using the first shared key; the random challenge information is encrypted by the first shared key;

decrypting the encrypted random challenge information by using the first shared key to obtain random challenge information;

signing the random challenge information by using a digital car key private key to generate first ciphertext information, and sending the first ciphertext information to a target vehicle through NFC;

receiving an execution result fed back by the target vehicle through NFC; under the condition that the target vehicle passes the verification of the first ciphertext information according to the digital vehicle key public key corresponding to the digital vehicle key private key, the execution result is that the vehicle door is opened or locked; otherwise, the execution result is that the vehicle door is failed to open or the vehicle door is failed to lock.

6. The method of claim 5, wherein before receiving the encrypted random challenge information sent by NFC in the case that the vehicle does not store the digital vehicle key public key corresponding to the SIM card, the method further comprises:

receiving an authorization verification request sent by a target vehicle through NFC;

and sending the signature information of the SIM card matched with the vehicle to the target vehicle through NFC according to the authorization verification request, so that the target vehicle decrypts the signature information by using the digital vehicle key public key of the SIM card matched with the vehicle to obtain and store the digital vehicle key public key corresponding to the SIM card.

7. A processing method of a digital car key is executed by a target vehicle, and is characterized in that an NFC card reading module is preset in the target vehicle, and the method comprises the following steps:

negotiating with an SIM card to determine a first shared key and establish a security channel based on an NFC card reading module;

and encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

8. The method of claim 7, wherein negotiating with the SIM card to determine the first shared key based on the NFC card reading module comprises:

receiving a first temporary public key sent by the SIM card based on NFC; the SIM card generates a first temporary public key and a first temporary private key according to a first elliptic encryption curve;

generating a second temporary public key and a second temporary private key according to the first elliptic encryption curve;

determining the first shared key according to the first temporary public key and the second temporary private key;

sending the second temporary public key to the SIM card based on NFC; to determine the first shared key by the SIM card from the first ephemeral private key and the second ephemeral public key.

9. The method of claim 8, further comprising:

the target vehicle sends a first shared key negotiation success message to the SIM card after determining the first shared key; or receiving a first shared key negotiation success message sent by the SIM card to the target vehicle after the first shared key is determined;

and determining that the establishment of the secure channel is successful according to the first shared key negotiation success message.

10. The method of claim 7, wherein encrypting and decrypting the digital car key related information transmitted between the SIM card and the target vehicle by the first shared key comprises:

receiving an encrypted digital car key public key sent by the SIM card through NFC;

decrypting the encrypted digital vehicle key public key by using the first shared key;

under the condition that the digital vehicle key public key of the SIM card is obtained through successful decryption, storing the digital vehicle key public key and sending a pairing result to the SIM card, wherein the pairing result is successful; otherwise, sending the pairing result of the pairing failure to the SIM card.

11. The method of claim 7, wherein in a case where the vehicle stores a digital vehicle key public key corresponding to the SIM card, the first shared key is used to encrypt and decrypt digital vehicle key related information transmitted between the SIM card and the target vehicle, further comprising:

receiving the encrypted identity sent by the SIM card through NFC;

decrypting and verifying the encrypted identity by using the first shared key, and sending encrypted random challenge information to the SIM card through NFC; the random challenge information is encrypted by the first shared key;

receiving first ciphertext information sent by NFC after the SIM card decrypts the random challenge information by using the first shared key; the first ciphertext information is obtained by the SIM card signing the random challenge information by using a digital car key private key;

verifying the first ciphertext information by using the digital vehicle key public key, and sending an execution result to the SIM card; under the condition that the verification is passed, opening the vehicle door or locking the vehicle door, wherein the execution result is that the vehicle door is opened or locked; otherwise, the execution result is that the vehicle door is failed to open or the vehicle door is failed to lock.

12. The method of claim 11, wherein before sending the encrypted random challenge information to the SIM card via NFC in the event that the vehicle does not store the digital vehicle key public key corresponding to the SIM card, the method further comprises:

sending an authorization verification request to the SIM card through NFC;

receiving signature information of the SIM card which is sent by the SIM card according to the authorization verification request and is paired with the vehicle; the signature information of the SIM card matched with the vehicle is generated by the SIM card matched with the vehicle according to the corresponding digital vehicle key private key to sign the digital vehicle key public key of the SIM card;

and verifying the signature information according to the digital vehicle key public key corresponding to the SIM card matched with the vehicle, and storing the digital vehicle key public key corresponding to the SIM card if the signature information passes the verification.

13. A digital car key sharing method is executed by a first SIM card, and the degree of a digital car key is preset in the first SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle; characterized in that the method comprises:

establishing an NFC connection with a second SIM card based on NFC; wherein, the second SIM card is respectively preset with a digital car key program;

receiving a first request sent by NFC connection after a second SIM card generates a second digital car key public key and a second digital car key private key; the first request carries the public key of the second digital car key;

signing the second digital car key public key by using a first digital car key private key of the first SIM card to generate signature information, and sending the signature information to the second SIM card through NFC connection;

and receiving a receiving result fed back by the second SIM card after receiving the signature information, wherein the receiving result is used for indicating the second SIM card to successfully receive the signature information.

14. The method of claim 13, further comprising:

the first SIM card and the second SIM card determine a second shared key based on NFC negotiation and establish NFC connection;

and encrypting and decrypting the information transmitted between the first SIM card and the second SIM card by the second shared key.

15. A digital car key sharing method performed by a second SIM card, the method further comprising:

establishing NFC connection with a first SIM card based on NFC, wherein digital car key programs are respectively preset in the first SIM card and a second SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle;

generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the public key of the second digital car key;

receiving a signature information generated by a first SIM card signing the second digital car key public key by using a first digital car key private key of the first SIM card;

and sending a receiving result to the first SIM card, wherein the receiving result is used for indicating the second SIM card to successfully receive the signature information.

16. The method of claim 15, further comprising:

the second SIM card and the first SIM card determine a second shared key based on NFC negotiation and establish NFC connection;

and encrypting and decrypting the information transmitted between the second SIM card and the first SIM card by the second shared key.

17. The method of claim 15, wherein if the target vehicle stores the second digital vehicle key public key; the method further comprises the following steps:

sending an identity to a target vehicle through NFC;

receiving random challenge information sent by the target vehicle through NFC after the identity of the second SIM card is verified;

signing the random challenge information by using a second digital vehicle key private key to generate second ciphertext information, and sending the second ciphertext information to a target vehicle through NFC;

receiving an execution result fed back by the target vehicle through NFC; under the condition that the target vehicle passes the verification of the second ciphertext information according to the second digital vehicle key public key, the execution result is that the vehicle door is opened or locked; otherwise, the execution result is that the vehicle door is failed to open or the vehicle door is failed to lock.

18. The method of claim 17, wherein prior to receiving the random challenge information sent via NFC in the event that the vehicle does not store the second digital vehicle key public key, the method further comprises:

receiving an authorization verification request sent by a target vehicle through NFC;

and sending the signature information of the first SIM card to the target vehicle through NFC according to the authorization verification request, so that the target vehicle decrypts the signature information by using the first digital vehicle key public key of the first SIM card to obtain and store a second digital vehicle key public key of the second SIM card.

19. A processing unit of the digital car key, apply to the SIM card of subscriber identity module, characterized by, preset the digital car key procedure in the SIM card; the device comprises:

the first establishing module is used for negotiating with a target vehicle to determine a first shared key and establishing a secure channel based on Near Field Communication (NFC);

and the first processing module is used for encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

20. A SIM card comprising a processor and a transceiver, the transceiver receiving and transmitting data under control of the processor, characterized in that the processor is adapted to:

negotiating with a target vehicle to determine a first shared key and establish a secure channel based on Near Field Communication (NFC);

and encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

21. A processing device of a digital car key is applied to a target vehicle, and is characterized in that an NFC card reading module is preset in the target vehicle, and the device comprises:

the second establishing module is used for negotiating with the SIM card to determine a first shared key and establishing a security channel based on the NFC card reading module;

and the second processing module is used for encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

22. A target vehicle comprising a processor and a transceiver, the transceiver receiving and transmitting data under control of the processor, characterized in that the processor is configured to:

negotiating with an SIM card to determine a first shared key and establish a secure channel based on an NFC card reading module;

and encrypting and decrypting the digital vehicle key related information transmitted between the SIM card and the target vehicle through the first shared key.

23. A digital car key sharing device is applied to a first SIM card, and the degree of a digital car key is preset in the first SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle; the device comprises:

the first connection module is used for establishing NFC connection with the second SIM card based on NFC; wherein, the second SIM card is respectively preset with a digital car key program;

the first request receiving module is used for receiving a first request sent by the NFC connection after the second SIM card generates a second digital car key public key and a second digital car key private key; the first request carries the public key of the second digital car key;

the signature sending module is used for signing the second digital car key public key by using a first digital car key private key of the first SIM card to generate signature information and sending the signature information to the second SIM card through NFC connection;

and the result receiving module is used for receiving a receiving result fed back by the second SIM card after receiving the signature information, and the receiving result is used for indicating the second SIM card to successfully receive the signature information.

24. A kind of SIM card, the said SIM card is the first SIM card, preset the degree of digital car key in the first SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle; the SIM card further comprises a processor and a transceiver, the transceiver receiving and transmitting data under control of the processor, characterized in that the processor is configured to:

establishing an NFC connection with a second SIM card based on NFC; wherein, the second SIM card is respectively preset with a digital car key program;

receiving a first request sent by NFC connection after a second SIM card generates a second digital car key public key and a second digital car key private key; the first request carries the public key of the second digital car key;

signing the second digital vehicle key public key by using a first digital vehicle key private key of the first SIM card to generate signature information, and sending the signature information to a second SIM card through NFC connection;

and receiving a receiving result fed back by the second SIM card after receiving the signature information, wherein the receiving result is used for indicating the second SIM card to successfully receive the signature information.

25. A digital car key sharing device applied to a second SIM card, the device comprising:

the second connection module is used for establishing NFC connection with the first SIM card based on NFC, wherein digital car key programs are respectively preset in the first SIM card and the second SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle;

the first request sending module is used for generating a second digital car key public key and a second digital car key private key and sending a first request to the first SIM card through NFC; the first request carries the public key of the second digital car key;

the signature receiving module is used for receiving the signature information generated by the first SIM card by utilizing a first digital car key private key of the first SIM card to sign the second digital car key public key;

and the result sending module is used for sending a receiving result to the first SIM card, wherein the receiving result is used for indicating the second SIM card to successfully receive the signature information.

26. A SIM card, the SIM card being a second SIM card, the SIM card further comprising a processor and a transceiver, the transceiver receiving and transmitting data under control of the processor, wherein the processor is configured to:

establishing NFC connection with a first SIM card based on NFC, wherein digital car key programs are respectively preset in the first SIM card and a second SIM card; the first digital car key private key and the first digital car key public key of the first SIM card are successfully paired with the target vehicle;

generating a second digital car key public key and a second digital car key private key, and sending a first request to the first SIM card through NFC; the first request carries the public key of the second digital car key;

receiving a signature information generated by a first SIM card signing the second digital car key public key by using a first digital car key private key of the first SIM card;

and sending a receiving result to the first SIM card, wherein the receiving result is used for indicating the second SIM card to successfully receive the signature information.

27. A communication device comprising a memory, a processor, and a program stored on the memory and executable on the processor; the digital car key processing method is characterized in that the processor implements the digital car key processing method according to any one of claims 1 to 6 when executing the program; or, the processor implements the processing method of the digital car key according to any one of claims 7 to 12 when executing the program; or, the processor implements the digital car key sharing method according to claim 13 or 14 when executing the program; alternatively, the processor implements the digital car key sharing method according to any one of claims 15 to 18 when executing the program.

28. A computer-readable storage medium on which a computer program is stored, the program realizing the steps in the processing method of the digital car key according to any one of claims 1 to 6 when executed by a processor; or, the program is executed by a processor to realize the steps in the processing method of the digital car key according to any one of claims 7 to 12; or the program is executed by a processor to implement the steps in the digital car key sharing method according to claim 13 or 14; alternatively, the program realizes the steps in the digital car key sharing method according to any one of claims 15 to 18 when executed by a processor.

Images