CN116012982A - Authentication method and device for digital key, computer equipment and storage medium - Google Patents

Abstract

The present application relates to a digital key authentication method, device, computer equipment, storage medium and computer program product. The method includes: responding to the matching instruction sent by the unlocking terminal, determining the locally supported cryptographic algorithm; when the locally supported cryptographic algorithm satisfies a preset condition, generating matching response data containing cryptographic algorithm information; and returning the matching response data to the unlocking terminal , the matching response data is used to instruct the unlocking terminal to determine the password matching response result according to the analysis result of the password algorithm information and the password selection policy; to determine the password matching response result corresponding to the matching response data, and to determine the password algorithm to be used based on the password matching response result to be used Cryptographic algorithm for authentication processing. This scheme ensures that the cryptographic algorithms to be used on the digital key terminal and the unlocking terminal are the same cryptographic algorithm, and then adopting this scheme for authentication can be successfully authenticated.

Description

Digital key authentication method, device, computer equipment and storage medium

technical field

The present application relates to the technical field of digital key communication, in particular to a digital key authentication method, device, computer equipment and storage medium.

Background technique

With the development of digital key communication technology, digital key authentication technology has emerged, through which the digital key terminal and the unlocking terminal can be successfully authenticated, and then the unlocking terminal can be successfully unlocked. Digital key terminals are terminals that contain digital keys, such as smartphones, wearable smart devices, etc. The unlocking terminal is a terminal to be unlocked, such as a car.

In the traditional technology, the digital key terminal authenticates with the unlocking terminal based on the cryptographic algorithm preset by the digital key terminal, and during the authentication process, the unlocking terminal authenticates with the digital key terminal based on the cryptographic algorithm preset by the unlocking terminal.

However, in the current digital key authentication method, both the digital key terminal and the unlocking terminal only preset a locally supported password algorithm, and the preset password algorithm on the digital key terminal and the preset password algorithm on the unlocking terminal are the same password In the case of the algorithm, the digital key terminal and the unlocking terminal can be authenticated successfully. If there are multiple preset password algorithms for the terminal (that is, the digital key terminal and/or the unlocking terminal), and the preset password algorithm for the digital key terminal and the preset password algorithm for the unlocking terminal have the same password algorithm, then the current digital algorithm is used. The key authentication method is used for authentication, but the authentication cannot be successful.

Contents of the invention

Based on this, it is necessary to address the above technical problems and provide a digital key authentication method, device, computer equipment, computer-readable storage medium and computer program product that can successfully authenticate the digital key terminal and the unlocking terminal.

In a first aspect, the present application provides a digital key authentication method. The method is applied to the digital key terminal, and the method includes:

Responding to the matching instruction sent by the unlocking terminal, determine locally supported cryptographic algorithms;

When the cryptographic algorithms supported locally meet the preset conditions, generate matching response data including cryptographic algorithm information; the cryptographic algorithm information includes priority information corresponding to each of the cryptographic algorithms;

returning the matching response data to the unlocking terminal, where the matching response data is used to instruct the unlocking terminal to determine a password matching response result according to the analysis result of the password algorithm information and the password selection policy;

According to the password matching response result corresponding to the matching response data, a password algorithm to be used is determined, and authentication processing is performed based on the password algorithm to be used.

In one of the embodiments, the determining the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data includes:

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal is received, obtain the password algorithm identification in the encryption algorithm indication data, and use the password algorithm identification corresponding to the cryptographic algorithm as the cryptographic algorithm to be used;

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In one of the embodiments, in the case where the matching instruction includes a matching application identifier, in the case where the locally supported cryptographic algorithm satisfies a preset condition, generating matching response data containing cryptographic algorithm information includes:

When the cryptographic algorithms supported locally include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information;

The method also includes:

When the cryptographic algorithm supported locally is a first-type cryptographic algorithm or a second-type cryptographic algorithm, comparing the matching application identifier with a preset application identifier to determine a comparison result;

When the comparison result indicates that the identifiers are consistent, generate a second matching result indicating that the matching is successful, and based on the second matching result, generate matching response data that includes the matching result identifier corresponding to the second matching result;

If the comparison result indicates that the identifications are inconsistent, generate a first matching result indicating that the matching fails, and based on the first matching result, generate matching response data including the matching result identification corresponding to the first matching result.

In one of the embodiments, in the case where the matching instruction does not include a matching application identifier, the generating matching response data containing cryptographic algorithm information includes:

In response to the matching instruction, generating a second matching result indicating that the matching is successful;

Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated.

In a second aspect, the present application provides a digital key authentication method. The method is applied to unlocking a terminal, and the method includes:

sending a matching instruction to the digital key, where the matching instruction is used to instruct the digital key to return matching response data based on the matching instruction;

If the matching response data includes cryptographic algorithm information corresponding to the digital key terminal, determine the cryptographic matching response result corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the cryptographic selection strategy; The password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used.

In one of the embodiments, the determining the password matching response result corresponding to the matching response data according to the analysis result of the password algorithm information and the password selection strategy includes:

In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result;

If the analysis result of the password algorithm information is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key.

In one embodiment, the method also includes:

When the matching instruction includes a matching application identifier and the matching response data does not include cryptographic algorithm information corresponding to the digital key terminal, determine the matching result based on the matching result identifier included in the matching response data;

When the matching result is the first matching result indicating that the matching fails, the first type of cryptographic algorithm is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined not to send the cryptographic algorithm to the digital key terminal indicating data;

When the matching result is the second matching result indicating that the matching is successful, the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined as The cryptographic algorithm indication data is not sent to the digital key end.

In a third aspect, the present application also provides a digital key authentication system. The system includes a digital key terminal and an unlocking terminal, wherein:

The unlocking terminal is configured to send a matching instruction to the digital key terminal;

The digital key terminal is used to determine a locally supported cryptographic algorithm in response to a matching instruction sent by an unlocking terminal; and generate matching response data containing cryptographic algorithm information when the locally supported cryptographic algorithm meets a preset condition; The cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm supported locally; the unlocking terminal is also used to determine the cryptographic matching code corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the password selection policy. response result;

The digital key terminal is further configured to determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used.

In one of the embodiments, the digital key terminal is specifically used for:

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal is received, obtain the password algorithm identification in the encryption algorithm indication data, and use the password algorithm identification corresponding to the cryptographic algorithm as the cryptographic algorithm to be used;

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In one of the embodiments, when the matching instruction includes a matching application identifier, the digital key terminal is specifically used for:

In the case where the locally supported cryptographic algorithms include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generating matching response data containing cryptographic algorithm information;

The Digital Key is also used for:

When the cryptographic algorithm supported locally is a first-type cryptographic algorithm or a second-type cryptographic algorithm, comparing the matching application identifier with a preset application identifier to determine a comparison result;

When the comparison result indicates that the identification is consistent, generate a second matching result indicating that the matching is successful, and based on the second matching result, generate matching response data that includes the matching result identification corresponding to the second matching result ;

If the comparison result indicates that the identifications are inconsistent, generate a first matching result indicating that the matching fails, and based on the first matching result, generate matching response data including the matching result identification corresponding to the first matching result.

0 In one of the embodiments, when the matching instruction does not include a matching application identifier, the digital key terminal is specifically used to:

In response to the matching instruction, generating a second matching result indicating that the matching is successful;

Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated.

5 In one of the embodiments, the unlocking terminal is specifically used for:

In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result;

If the analysis result of the cryptographic algorithm information is that the cryptographic algorithm information cannot be parsed, it is determined that the cryptographic matching response result is 0 and that the cryptographic algorithm indication data is not sent to the digital key.

In one of the embodiments, the unlocking terminal is also used for:

When the matching instruction includes a matching application identifier and the matching response data does not include cryptographic algorithm information corresponding to the digital key terminal, determine the matching result based on the matching result identifier included in the matching response data;

When the matching result is the first matching result indicating that the matching fails, the first type of cryptographic algorithm is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined not to send the cryptographic algorithm to the digital key terminal indicating data;

When the matching result is the second matching result indicating that the matching is successful, the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined as The cryptographic algorithm indication data is not sent to the digital key end.

In a fourth aspect, the present application also provides a digital key authentication device. The device is applied to the digital key terminal, and the device includes:

A response module, configured to determine locally supported cryptographic algorithms in response to the matching instruction sent by the unlocking terminal;

A first determination module, configured to generate matching response data including cryptographic algorithm information when the locally supported cryptographic algorithms meet preset conditions; the cryptographic algorithm information includes priority information corresponding to each of the cryptographic algorithms;

A sending module, configured to return the matching response data to the unlocking terminal, where the matching response data is used to instruct the unlocking terminal to determine a password matching response result according to the analysis result of the password algorithm information and the password selection strategy;

The second determining module is configured to determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used.

In one of the embodiments, the second determination module is specifically used for:

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal is received, obtain the password algorithm identification in the encryption algorithm indication data, and use the password algorithm identification corresponding to the cryptographic algorithm as the cryptographic algorithm to be used;

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In one of the embodiments, when the matching instruction includes a matching application identifier, the first determination module is specifically configured to:

When the cryptographic algorithms supported locally include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information;

The authentication device of the digital key also includes:

A third determining module, configured to compare the matching application identifier with a preset application identifier when the locally supported cryptographic algorithm is a first-type cryptographic algorithm or a second-type cryptographic algorithm, and determine a comparison result;

The first matching module is configured to generate a second matching result indicating successful matching when the comparison result indicates that the identifiers are consistent, and generate a matching result corresponding to the second matching result based on the second matching result identified matching response data;

The second matching module is configured to generate a first matching result indicating a matching failure when the comparison result indicates that the identification is inconsistent, and generate a matching result corresponding to the first matching result based on the first matching result Identified matching response data.

In one of the embodiments, when the matching instruction does not include a matching application identifier, the first determining module is specifically configured to:

In response to the matching instruction, generating a second matching result indicating that the matching is successful;

Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated.

In a fifth aspect, the present application also provides a digital key authentication device. The device is applied to unlocking a terminal, and the device includes:

A sending module, configured to send a matching instruction to the digital key, where the matching instruction is used to instruct the digital key to return matching response data based on the matching instruction;

The first determination module is configured to determine the matching response data corresponding to the cryptographic algorithm information according to the analysis result of the cryptographic algorithm information and the password selection policy in the case that the matching response data includes the cryptographic algorithm information corresponding to the digital key terminal. A password matching response result; the password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used.

In one of the embodiments, the first determining module is specifically configured to:

In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result;

If the analysis result of the password algorithm information is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key.

In one of the embodiments, the digital key authentication device further includes:

The second determination module is configured to, when the matching instruction includes a matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal, based on the matching result identifier included in the matching response data , to determine the matching result;

The first matching module is configured to use the first type of cryptographic algorithm as the cryptographic algorithm to be used when the matching result is the first matching result indicating that the matching fails, and determine that the cryptographic matching response result is not applicable to all The digital key terminal sends the cryptographic algorithm instruction data;

The second matching module is configured to use the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier as the cryptographic algorithm to be used when the matching result is the second matching result indicating that the matching is successful, and determine The result of the password matching response is that no password algorithm indication data is sent to the digital key.

In a sixth aspect, the present application also provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the steps described in the first aspect or the second aspect when executing the computer program.

In a seventh aspect, the present application also provides a computer-readable storage medium. The computer-readable storage medium has a computer program stored thereon, and when the computer program is executed by a processor, the steps described in the first aspect or the second aspect are realized.

In an eighth aspect, the present application also provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the steps described in the first aspect or the second aspect are performed.

The above digital key authentication method, device, computer equipment, storage medium and computer program product determine the locally supported cryptographic algorithm by responding to the matching instruction sent by the unlocking terminal; when the locally supported cryptographic algorithm satisfies the preset conditions, Generate matching response data containing cryptographic algorithm information; cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm; return matching response data to the unlocking terminal, and the matching response data is used to instruct the unlocking terminal to analyze the result and password selection strategy according to the cryptographic algorithm information , determine the password matching response result; determine the password algorithm to be used according to the password matching response result corresponding to the matching response data, and perform authentication processing based on the password matching algorithm to be used. In the above solution, the unlocking terminal receives the matching response data determined based on the cryptographic algorithm locally supported by the digital key terminal. Therefore, based on the matching response data, the unlocking terminal can know the cryptographic algorithm locally supported by the digital key terminal, and then determine the to-be-used cryptographic algorithm of the unlocking terminal. cryptographic algorithm. Then, the password algorithm to be used on the digital key terminal is determined based on the password matching response result of the unlocked terminal, that is, the digital key terminal can determine the password algorithm to be used on the unlocked terminal based on the password matching response result, and then determine itself (i.e. The cryptographic algorithm to be used on the digital key terminal). In this way, it is ensured that the cryptographic algorithms to be used on the digital key terminal and the unlocking terminal are the same cryptographic algorithm, and then using this scheme for authentication can be successfully authenticated.

Description of drawings

Fig. 1 is the application environment diagram of the authentication method of digital key in an embodiment;

Fig. 2 is a schematic flow chart of an authentication method of a digital key in an embodiment;

Fig. 3 is a schematic flowchart of a method for determining a cryptographic algorithm to be used in an embodiment;

FIG. 4 is a schematic flow diagram of a digital key authentication method in another embodiment;

FIG. 5 is a schematic flowchart of a method for determining a cryptographic algorithm to be used in another embodiment;

Fig. 6 is a structural block diagram of a digital key authentication device in an embodiment;

Fig. 7 is a structural block diagram of a digital key authentication device in another embodiment;

Figure 8 is a diagram of the internal structure of a computer device in one embodiment.

Detailed ways

In order to make the purpose, technical solution and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present application, and are not intended to limit the present application.

The digital key authentication method provided in the embodiment of the present application can be applied to the application environment shown in FIG. 1 . Wherein, the digital key terminal 102 communicates with the unlocking terminal 104 through the network. The digital key terminal 102 can be, but not limited to, various smart phones and portable wearable devices, and the portable wearable devices can be smart watches, smart bracelets, and the like. At least one of the digital key terminal 102 or the unlocking terminal 104 is preset with two password algorithms. Among them, the types of cryptographic algorithms include international algorithms and national secret algorithms. International algorithms include but not limited to Elliptic Curve Cryptography (Elliptic CurveCryptography, ECC) algorithm; national secret algorithms include but not limited to SM1 algorithm, SM2 algorithm, and SM3 algorithm.

When the unlocking terminal 104 detects the digital key terminal 102 , the unlocking terminal 104 sends a matching instruction to the digital key terminal 102 . Wherein, the matching instruction is used to match the digital key application in the digital key terminal. The digital key terminal 102 determines the cryptographic algorithm locally supported by the digital key terminal 102 in response to the matching instruction sent by the unlocking terminal 104 . Specifically, the digital key terminal 102 responds to the matching instruction sent by the unlocking terminal 104, and based on the matching instruction, matches the digital key application corresponding to the matching instruction. The digital key terminal 102 takes the cryptographic algorithm supported by the digital key application corresponding to the matching command as the locally supported cryptographic algorithm. Optionally, there may be one or more digital key applications corresponding to the matching instruction. If there are multiple digital key applications corresponding to the matching command, different digital key applications corresponding to the matching command may support different cryptographic algorithms. It can be understood that when there are multiple digital key applications corresponding to the matching command, the digital key terminal 102 uses the cryptographic algorithm supported by each digital key application corresponding to the matching command as the locally supported cryptographic algorithm. It can be understood that the cryptographic algorithm supported by the digital key application in the digital key terminal 102 must be the preset cryptographic algorithm of the digital key terminal. When the cryptographic algorithm supported locally meets the preset condition, the digital key terminal 102 generates matching response data including cryptographic algorithm information. Wherein, the preset condition is that the cryptographic algorithms supported locally include international algorithms and national secret algorithms. The cryptographic algorithm information is determined based on the priority of each cryptographic algorithm supported locally, and the cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm. The match response data also contains match results. The matching result includes a first matching result and a second matching result, the first matching result indicates that the matching is successful, and the second matching result indicates that the matching fails. Specifically, when locally supported cryptographic algorithms include international algorithms and national secret algorithms, digital key terminal 102 generates matching response data including cryptographic algorithm information and matching results, and returns the matching response data to unlocking terminal 104 . The unlocking terminal 104 analyzes the matching response data, and obtains an analysis result of the cryptographic algorithm information in the matching response data. Wherein, the parsing result includes priority information corresponding to each cryptographic algorithm, or the cryptographic algorithm information cannot be parsed. The unlocking terminal 104 generates a password matching response result corresponding to the matching response data according to the analysis result and the password selection policy. Wherein, the password selection policy has a corresponding relationship with the parsing result of the matching response data. The parsing result of the matching response data includes the parsing result and the matching result of the cryptographic algorithm information. Wherein, the password matching response result is that the unlocking terminal 104 sends the password algorithm indication data to the digital key terminal 102 , or the unlocking terminal 104 does not send the password algorithm indication data to the digital key terminal 102 . It can be understood that the parsing result of the matching response data has a corresponding relationship with the password matching response result. The digital key terminal 102 determines the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data. Specifically, when the password matching response result corresponding to the matching response data is that the unlocking terminal 104 sends the password algorithm indication data to the digital key terminal 102, the unlocking terminal 104 sends the password algorithm indicating data to the digital key terminal 102, and the digital key terminal 102 sends the password algorithm indication data to the digital key terminal 102, and the digital key terminal 102 based on The cryptographic algorithm indicates the cryptographic algorithm identifier in the data, and the cryptographic algorithm corresponding to the cryptographic algorithm identifier is used as the cryptographic algorithm to be used. When the password matching response result corresponding to the matching response data is that the unlocking terminal 104 does not send the password algorithm indication data to the digital key terminal 102, the digital key terminal 102 uses the locally supported first type of password algorithm as the password algorithm to be used. The first category of cryptographic algorithms includes international algorithms. In one embodiment, if the digital key terminal 102 does not receive the cryptographic algorithm indication data sent by the unlocking terminal 104 within the preset receiving time, the digital key terminal 102 uses the locally supported first type of cryptographic algorithm as the password to be used algorithm. The digital key terminal 102 performs authentication processing based on the cryptographic algorithm to be used. Specifically, the unlocking terminal 104 performs encryption processing based on the encryption algorithm to be used in the unlocking terminal 104 , and the digital key terminal 102 performs decryption processing based on the encryption algorithm to be used in the digital key terminal 102 . It can be understood that the encryption algorithm to be used in the unlocking terminal 104 and the encryption algorithm to be used in the digital key terminal 102 are the same encryption algorithm.

In one embodiment, as shown in Figure 2, a digital key authentication method is provided, and the method is applied to the digital key authentication system in Figure 1 as an example for illustration, including the following steps:

Step 202, in response to the matching instruction sent by the unlocking terminal, determine the cryptographic algorithms supported locally.

In the embodiment of the present application, the digital key terminal 102 determines the cryptographic algorithm locally supported by the digital key terminal 102 in response to the matching instruction sent by the unlocking terminal 104 . Specifically, the digital key terminal 102 receives the matching instruction sent by the unlocking terminal, and based on the matching instruction, matches the digital key application corresponding to the matching instruction. Wherein, the matching instruction is used to determine whether there is a digital key application corresponding to the matching instruction in the digital key terminal 102 . The matching instruction that does not include the matching application identifier is used to determine whether there is a digital key application in the digital key terminal 102, and the digital key applications in the digital key terminal 102 are all digital key applications corresponding to the matching instruction that does not include the matching application identifier. The matching command containing the matching application identifier is used to determine whether there is a digital key application corresponding to the matching application identifier in the digital key terminal 102. In the digital key terminal 102, only the digital key application whose preset application identifier is consistent with the matching application identifier is included. The digital key application corresponding to the matching command matching the application identifier. The digital key terminal 102 uses the cryptographic algorithm supported by the digital key application corresponding to the matching instruction in the digital key terminal 102 as the locally supported cryptographic algorithm. Optionally, there may be one or more digital key applications corresponding to the matching instruction. If there are multiple digital key applications corresponding to the matching command, different digital key applications corresponding to the matching command may support different cryptographic algorithms. It can be understood that when there are multiple digital key applications corresponding to the matching command, the digital key terminal 102 uses the cryptographic algorithm supported by each digital key application corresponding to the matching command as the locally supported cryptographic algorithm. For example, assuming that the preset encryption algorithms in the digital key terminal 102 are the ECC algorithm and the SM2 algorithm, the digital key terminal 102 has a digital key application 1 , a digital key application 2 and a digital key application 3 . Among them, the digital key application 1 supports the ECC algorithm, the digital key application 2 supports the SM2 algorithm, and the digital key application 3 supports both the ECC algorithm and the SM2 algorithm. Assuming that the digital key applications corresponding to the matching instruction include digital key application 1, digital key application 2 and digital key application 3, then the cryptographic algorithms supported locally include ECC algorithm and SM2 algorithm. It can be understood that the cryptographic algorithm supported by the digital key application in the digital key terminal 102 must be the preset cryptographic algorithm of the digital key terminal.

Step 204, in the case that the locally supported cryptographic algorithm satisfies the preset condition, generate matching response data including cryptographic algorithm information.

Wherein, the cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm.

In the embodiment of this application, the digital key terminal 102 identifies and counts the algorithm types of locally supported cryptographic algorithms, and if the algorithm category meets the preset conditions, the digital key terminal 102 generates matching response data containing cryptographic algorithm information. Wherein, the preset condition is that the locally supported cryptographic algorithms include the first type of cryptographic algorithms and the second type of cryptographic algorithms. The first category of cryptographic algorithms includes international algorithms, and the second category of cryptographic algorithms includes national secret algorithms. Specifically, when the algorithm types of locally supported cryptographic algorithms include the first type of cryptographic algorithm and the second type of cryptographic algorithm, the digital key terminal 102 generates a corresponding algorithm containing each cryptographic algorithm based on the priorities of the locally supported cryptographic algorithms. The cryptographic algorithm information of the priority information, and generate matching response data based on the cryptographic algorithm information. In one embodiment, the digital key terminal 102 writes the cryptographic algorithm information into a TLV (T represents a tag, L represents a length, and V represents a value) field, where the value is used to represent the corresponding priority of each cryptographic algorithm information. Optionally, the value value is also used to represent the cryptographic algorithm locally supported by the digital key terminal 102 . Wherein, the matching response data includes matching results. The matching result includes a first matching result and a second matching result, the first matching result indicates that the matching is successful, and the second matching result indicates that the matching fails. Matching success indicates that there is a digital key application corresponding to the matching instruction in the digital key terminal 102 ; matching failure indicates that there is no digital key application corresponding to the matching instruction in the digital key terminal 102 . Specifically, the digital key terminal 102 generates matching response data based on the cryptographic algorithm information and the matching result.

Step 206, returning matching response data to the unlocking terminal.

Wherein, the matching response data is used to instruct the unlocking terminal to determine the password matching response result according to the analysis result of the password algorithm information and the password selection strategy.

In the embodiment of the present application, the digital key terminal 102 returns matching response data to the unlocking terminal. Wherein, the matching response data includes matching results and cryptographic algorithm information. The parsing result contains priority information corresponding to each cryptographic algorithm, or the cryptographic algorithm information cannot be parsed. The password selection policy is used to unlock the terminal to determine the password algorithm to be used to unlock the terminal. The password matching response result is that the unlocking terminal 104 sends the password algorithm indication data to the digital key terminal 102 , or the unlocking terminal 104 does not send the password algorithm indication data to the digital key terminal 102 . The parsing result of the matching response data, the password selection strategy and the password matching response result have a preset first corresponding relationship. The cryptographic algorithm indication data is used to instruct the digital key terminal 102 to determine the cryptographic algorithm to be used by the digital key terminal 102 .

Step 208: Determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used.

In the embodiment of the present application, the digital key terminal 102 determines the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and performs authentication processing based on the cryptographic algorithm to be used. Wherein, the password matching response result and the password algorithm to be used have a preset second corresponding relationship. The second correspondence includes that if the password matching response result is that the unlocking terminal 104 sends the password algorithm indication data to the digital key terminal 102, then the password algorithm to be used corresponding to the password matching response result is the password algorithm corresponding to the password algorithm indication data; If the matching response result is that the unlocking terminal 104 does not send cryptographic algorithm indication data to the digital key terminal 102, then the cryptographic algorithm to be used corresponding to the cryptographic matching response result is the first type of cryptographic algorithm. In one embodiment, the first class of cryptographic algorithms includes international algorithms.

In the above digital key authentication method, the unlocking terminal receives the matching response data determined based on the cryptographic algorithm locally supported by the digital key terminal. Therefore, based on the matching response data, the unlocking terminal can know the cryptographic algorithm locally supported by the digital key terminal, and then determine the unlocking method. The terminal's cryptographic algorithm to use. Then, the password algorithm to be used on the digital key terminal is determined based on the password matching response result of the unlocked terminal, that is, the digital key terminal can determine the password algorithm to be used on the unlocked terminal based on the password matching response result, and then determine itself (i.e. The cryptographic algorithm to be used on the digital key terminal). In this way, it is ensured that the cryptographic algorithms to be used on the digital key terminal and the unlocking terminal are the same cryptographic algorithm, and then using this scheme for authentication can be successfully authenticated.

In one embodiment, as shown in FIG. 3, according to the password matching response result corresponding to the matching response data, determining the password algorithm to be used includes:

Step 302, when the result of the password matching response corresponding to the matching response data is that the cryptographic algorithm indication data sent by the unlocking terminal is received, obtain the cryptographic algorithm identification in the cryptographic algorithm indication data, and use the cryptographic algorithm corresponding to the cryptographic algorithm identification as the to-be-used cryptographic algorithm.

In the embodiment of the present application, when the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal 104 is received, the digital key terminal 102 receives the password algorithm indication data sent by the unlocking terminal 104 . Wherein, the cryptographic algorithm indication data includes a cryptographic algorithm identifier, and the cryptographic algorithm identifier is a cryptographic algorithm identifier corresponding to a cryptographic algorithm to be used to unlock the terminal 104 . The digital key terminal 102 parses and obtains the cryptographic identifier in the cryptographic algorithm indication data, identifies the cryptographic algorithm corresponding to the cryptographic identifier, and uses the cryptographic algorithm corresponding to the cryptographic identifier as the cryptographic algorithm to be used by the digital key terminal 102 .

Step 304: When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In the embodiment of this application, when the result of the password matching response corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal 104 has not been received, the digital key terminal 102 uses the locally supported first type of password algorithm as the digital key terminal 102 cryptographic algorithms to be used. It can be understood that if the cryptographic algorithm locally supported by the digital key terminal 102 meets the preset conditions, if the cryptographic algorithm to be used by the unlocking terminal 104 is the first type of cryptographic algorithm, the unlocking terminal 104 will not send the password to the digital key terminal 102 Algorithm indication data, then the password matching response result corresponding to the matching response data is that the encryption algorithm indication data sent by the unlocking terminal 104 has not been received. Wherein, the first category of cryptographic algorithms includes international algorithms. In one embodiment, the situation that the password algorithm indication data sent by the unlocking terminal 104 is not received may be that the digital key terminal 102 does not receive the password algorithm indication data sent by the unlocking terminal 104 within the preset receiving time. Specifically, if the digital key terminal 102 does not receive the cryptographic algorithm indication data sent by the unlocking terminal 104 within the preset receiving time, the digital key terminal 102 will use the locally supported first type of cryptographic algorithm as the cryptographic algorithm to be used.

In this embodiment, the digital key side uses the cryptographic algorithm corresponding to the cryptographic algorithm identifier sent by the unlocking terminal as the cryptographic algorithm to be used, or, when the cryptographic algorithm locally supported by the digital key side meets the preset conditions, if the unlocking terminal If the cryptographic algorithm to be used is the first type of cryptographic algorithm, the digital key terminal does not receive the cryptographic algorithm indication data, and uses the first type of cryptographic algorithm group as the cryptographic algorithm to be used. It is ensured that the cryptographic algorithms to be used on the digital key terminal and the unlocking terminal are consistent, so that the authentication can be successful.

In one embodiment, in the case where the matching instruction includes the matching application identifier, and in the case that the locally supported cryptographic algorithm satisfies a preset condition, generating the matching response data containing cryptographic algorithm information includes:

In the case that the cryptographic algorithms supported locally include the first type of cryptographic algorithm and the second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information;

Wherein, the matching instruction includes the matching application identifier. The matching application identifier is used by the digital key end to match the digital key application corresponding to the matching application identifier.

In this embodiment of the application, when the matching instruction includes a matching application identifier, and the cryptographic algorithms locally supported by the digital key terminal 102 include the first-type cryptographic algorithm and the second-type cryptographic algorithm, the digital key terminal 102 The priority of the algorithm, generating cryptographic algorithm information including priority information corresponding to each cryptographic algorithm, and generating matching response data based on the cryptographic algorithm information. Specifically, when the matching instruction includes a matching application identifier, and the cryptographic algorithm locally supported by the digital key terminal 102 includes the first type of cryptographic algorithm and the second type of cryptographic algorithm, the digital key terminal 102 compares the matching application identification in the matching instruction with The preset application identification of the digital key application in the digital key terminal 102 obtains a comparison result indicating that the identifications are inconsistent. Wherein, the matching instruction includes that the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is the second type of cryptographic algorithm. The second category of cryptographic algorithms includes national secret algorithms. The encryption algorithms locally supported by the digital key terminal 102 satisfying the preset condition means that the encryption algorithms supported by the digital key application in the digital key terminal 102 include the first type of encryption algorithm and the second type of encryption algorithm. The first category of cryptographic algorithms includes international algorithms. It can be understood that when the matching instruction includes the matching application identification and the cryptographic algorithm locally supported by the digital key terminal 102 meets the preset conditions, the digital key application corresponding to the matching application identification only supports the second type of cryptographic algorithm, and the digital key terminal 102 The digital key application supports dual algorithms (including the first type of encryption algorithm and the second type of encryption algorithm), so the matching application identification is inconsistent with the preset application identification of the digital key application in the digital key terminal 102 . The digital key terminal 102 generates a first matching result indicating that the matching fails based on the comparison result indicating that the identifiers are inconsistent. Wherein, the matching result includes a first matching result and a second matching result, the first matching result indicates a matching failure, and the second matching result indicates a matching success. Based on the first matching result and the priority information corresponding to each locally supported cryptographic algorithm, the digital key terminal 102 generates matching response data including the matching result identifier and cryptographic algorithm information corresponding to the first matching result. Specifically, the digital key terminal 102 generates a matching result identifier corresponding to the first matching result based on the first matching result. The digital key terminal 102 generates cryptographic algorithm information based on the preset priority information corresponding to each cryptographic algorithm supported locally. The digital key terminal 102 generates matching response data based on the matching result identifier corresponding to the first matching result and the cryptographic algorithm information.

In this embodiment, when the matching instruction includes matching application identifiers, and the first type of encryption algorithm and the second type of encryption algorithm locally supported by the digital key end, the digital key end is based on the corresponding priority of each encryption algorithm locally supported. level information to generate matching response data. In this way, the matching response data contains the priority information of each cryptographic algorithm in the digital key terminal, and the unlocking terminal can judge the cryptographic algorithms supported by the digital key application in the digital key terminal based on the information in the matching response data, and then determine the waiting time of the unlocking terminal. The cryptographic algorithm used, so as to ensure that the cryptographic algorithms to be used on the unlocking terminal and the digital key end are the same cryptographic algorithm, and the authentication is successful.

In one embodiment, when the matching instruction includes a matching application identifier, the digital key authentication method further includes:

When the cryptographic algorithm supported locally is the first type of cryptographic algorithm or the second type of cryptographic algorithm, compare and match the application ID with the preset application ID to determine the comparison result; when the comparison result shows that the IDs are consistent, generate a match A successful second matching result, and based on the second matching result, generating matching response data containing a matching result identifier corresponding to the second matching result; when the comparison result indicates that the identifier is inconsistent, generating a first matching result indicating that the matching failed, And based on the first matching result, generating matching response data including the matching result identifier corresponding to the first matching result.

In this embodiment of the application, when the matching instruction includes the matching application identifier, and the encryption algorithm locally supported by the digital key terminal is the first type of encryption algorithm or the second type of encryption algorithm, the digital key terminal 102 compares the matching application in the matching instruction The identification is compared with the preset application identification of the digital key application in the digital key terminal 102 to obtain a comparison result. Wherein, the cryptographic algorithm locally supported by the digital key terminal is the first type of cryptographic algorithm or the second type of cryptographic algorithm means that the cryptographic algorithm supported by the digital key application in the digital key terminal 102 is the first type of cryptographic algorithm, or the second type of cryptographic algorithm The cryptographic algorithm, that is to say, the digital key application in the digital key terminal 102 only supports single algorithm but not double algorithm. The matching instruction includes that the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is the second type of cryptographic algorithm. The second category of cryptographic algorithms includes national secret algorithms. Specifically, when the matching instruction includes a matching application identifier, and the encryption algorithm locally supported by the digital key terminal is the second type of encryption algorithm, the digital key terminal 102 compares the matching application identification in the matching instruction with the digital key in the digital key terminal 102. The digital key terminal 102 obtains a comparison result indicating that the identifier is consistent with the preset application identifier of the application. If the comparison result indicates that the identifications are consistent, the digital key terminal 102 generates a second matching result indicating that the matching is successful, and based on the second matching result, generates matching response data including the matching result identification corresponding to the second matching result. In the case that the matching instruction contains the matching application identification, and the cryptographic algorithm locally supported by the digital key terminal is the first type of cryptographic algorithm, the digital key terminal 102 compares the matching application identification in the matching instruction with the predetermined value of the digital key application in the digital key terminal 102. If the application identifier is set, the digital key terminal 102 obtains a comparison result indicating that the identifiers are inconsistent. If the comparison result indicates that the identifications are inconsistent, the digital key terminal 102 generates a first matching result indicating that the matching fails, and based on the first matching result, generates matching response data including the matching result identification corresponding to the first matching result.

In this embodiment, if the preset application identification of the digital key application in the digital key terminal is consistent with the matching application identification, then generate matching response data containing information indicating that the matching is successful; If the ID is not consistent with the matching application ID, a matching response data including matching failure information is generated. Therefore, the unlocking terminal can determine the cryptographic algorithm locally supported by the digital key terminal according to the information contained in the matching response data, thereby ensuring that the cryptographic algorithm to be used by the unlocking terminal and the digital key terminal is the same cryptographic algorithm, so that the authentication can be successful.

In one embodiment, when the matching instruction does not include the matching application identifier, and if the locally supported cryptographic algorithm satisfies a preset condition, generating matching response data containing cryptographic algorithm information includes:

In response to the matching instruction, generate a second matching result indicating that the matching is successful; based on the second matching result and the priority information corresponding to each cryptographic algorithm supported locally, generate matching response data including a matching result identifier corresponding to the second matching result.

Wherein, the matching instruction that does not include the matching application identifier is used to instruct the digital key terminal to determine whether there is a digital key application in the digital key terminal.

In the embodiment of the present application, when the matching instruction does not include the matching application identifier and the cryptographic algorithm locally supported by the digital key terminal 102 satisfies the preset conditions, the digital key terminal 102 generates a representation The second matching result with a successful match. The cryptographic algorithm locally supported by the digital key terminal 102 meets the preset conditions, indicating that there is a digital key application supporting dual algorithms (including the first type of encryption algorithm and the second type of encryption algorithm) in the digital key terminal. It can be understood that as long as there is a digital key application stored in the digital key terminal 102, a second matching result will be generated in response to a matching instruction that does not include a matching application identifier. Based on the second matching result and the priority information corresponding to each cryptographic algorithm locally supported by the digital key, the digital key terminal 102 generates matching response data including a matching result representation corresponding to the second matching result. Specifically, the digital key terminal 102 generates a matching result identifier corresponding to the second matching result based on the second matching result. The digital key terminal 102 generates cryptographic algorithm information based on the preset priority information corresponding to each cryptographic algorithm supported locally. The digital key terminal 102 generates matching response data based on the matching result identifier corresponding to the second matching result and the cryptographic algorithm information.

In this embodiment, when the matching instruction does not include the matching application identifier, and the cryptographic algorithm locally supported by the digital key terminal 102 satisfies the preset conditions, the digital key terminal 102 based on the second matching result indicating that the matching is successful, and the locally supported encryption algorithm The priority information corresponding to the cryptographic algorithm generates matching response data. In this way, the matching response data includes the information of successful matching and the priority information of each cryptographic algorithm in the digital key terminal, and the unlocking terminal can judge the cryptographic algorithm supported by the digital key application in the digital key terminal based on the information in the matching response data, and then The password algorithm to be used for unlocking the terminal is determined, so as to ensure that the password algorithm to be used for the unlocking terminal and the digital key terminal are the same password algorithm, and the authentication is successful.

In one embodiment, as shown in FIG. 4, the method is applied to unlocking a terminal, and the method includes:

Step 402, sending a matching instruction to the digital key.

Wherein, the matching instruction is used to instruct the digital key terminal to return matching response data based on the matching instruction.

In the embodiment of the present application, when the unlocking terminal 104 detects the digital key terminal 102 , the unlocking terminal 104 sends a matching instruction to the digital key terminal 102 . Optionally, the matching instruction may be a matching instruction including a matching application identifier, or a matching instruction not including a matching application identifier. In one embodiment, when the unlocking terminal 104 detects the digital key terminal 102, the unlocking terminal 104 generates a matching instruction including a matching application identifier according to a preset matching application identifier. Wherein, the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is the second type of cryptographic algorithm.

Step 404, if the matching response data includes cryptographic algorithm information corresponding to the digital key terminal, determine the cryptographic matching response result corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the cryptographic selection strategy.

Wherein, the password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used.

In the embodiment of the present application, the unlocking terminal 104 receives and analyzes the matching response data returned by the digital key terminal 102 . In the case that the matching response data includes the cryptographic algorithm information corresponding to the digital key terminal 102, the unlocking terminal 104 analyzes the cryptographic algorithm information in the matching response data to obtain the parsing result. Wherein, the parsing result includes priority information corresponding to each cryptographic algorithm, or the cryptographic algorithm information cannot be parsed. The unlocking terminal 104 sets the password algorithm to be used for the unlocking terminal 104 based on the analysis result and the password selection strategy, and obtains a password matching response result corresponding to the password algorithm to be used for the unlocking terminal 104 based on the password algorithm to be used for the unlocking terminal 104 . Wherein, the password selection policy is used to determine the password algorithm to be used for unlocking the terminal 104 . The password matching response result is that the unlocking terminal 104 sends the password algorithm indication data to the digital key terminal 102 , or the unlocking terminal 104 does not send the password algorithm indication data to the digital key terminal 102 . The parsing result of the matching response data, the password selection strategy and the password matching response result have a preset first corresponding relationship. Specifically, when the parsing result of the matching response data includes priority information corresponding to each cryptographic algorithm, the password selection strategy is to determine the cryptographic algorithm to be used for unlocking the terminal 104 based on the cryptographic algorithm information; when the parsing result of the matching response data is If the password algorithm information cannot be parsed, the password selection strategy is to use the preset first type of password algorithm as the password algorithm to be used to unlock the terminal 104 . In the case that the password algorithm to be used by the unlocking terminal 104 is the first type of password algorithm, the password matching response result is that the unlocking terminal 104 does not send the password algorithm indication data to the digital key terminal 102; In the case of the second type of encryption algorithm, the password matching response result is that the unlocking terminal 104 sends encryption algorithm indication data to the digital key terminal 102 . Wherein, the cryptographic algorithm indication data includes the cryptographic algorithm identification corresponding to the second type of cryptographic algorithm, and the cryptographic algorithm identification corresponding to the second type of cryptographic algorithm is used for the digital key terminal 102 to set the cryptographic algorithm to be used on the digital key terminal 102 as the second type cryptographic algorithm.

In this embodiment, based on the matching response data sent by the digital key terminal and the preset password selection strategy, the password algorithm to be used to unlock the terminal is determined, and the password matching response result is determined based on the password algorithm to be used to unlock the terminal. Wherein, the matching response data includes the information of the cryptographic algorithm locally supported by the digital key terminal, therefore, the cryptographic algorithm to be used for unlocking the terminal is determined based on the cryptographic algorithm locally supported by the digital key terminal. The password matching response result of the unlocked terminal is used to indicate the cryptographic algorithm to be used on the digital key side, that is, the cryptographic algorithm to be used on the digital key side is determined based on the cryptographic algorithm to be used on the unlocked terminal, thereby ensuring that the digital key The cryptographic algorithm to be used on the terminal and the unlocked terminal is the same cryptographic algorithm. Therefore, using this scheme for authentication can succeed in authentication.

In one embodiment, according to the analysis result of the password algorithm information and the password selection strategy, determining the password matching response result corresponding to the matching response data includes:

In the case that the analysis result of the cryptographic algorithm information includes the priority information corresponding to each cryptographic algorithm, based on the priority information corresponding to each cryptographic algorithm in the cryptographic algorithm information and the password selection strategy, determine the password matching response result; in the cryptographic algorithm information If the analysis result is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key.

In the embodiment of the present application, when the analysis result of the encryption algorithm information includes the priority information corresponding to each encryption algorithm, the unlocking terminal 104 analyzes the encryption algorithm information, and based on the encryption algorithm information in the encryption algorithm information, the encryption algorithm of the digital key terminal 102 Corresponding to the priority information and the preset password selection strategy, the password algorithm to be used for unlocking the terminal 104 is set. Specifically, when the priority information corresponding to each cryptographic algorithm on the digital key terminal 102 includes that the priority of the first type of cryptographic algorithm is higher than that of the second type of cryptographic algorithm, the unlocking terminal 104 will use the preset first type The cryptographic algorithm serves as a cryptographic algorithm for unlocking the terminal 104 . When the priority information corresponding to each encryption algorithm on the digital key terminal 102 includes that the priority of the second type of encryption algorithm is higher than that of the first type of encryption algorithm, the unlocking terminal 104 uses the preset second type of encryption algorithm as A cryptographic algorithm for unlocking the terminal 104 . The unlocking terminal 104 generates a password matching response result based on the password algorithm to be used by the unlocking terminal 104 . Specifically, when the encryption algorithm to be used by the unlocking terminal 104 is the first type of encryption algorithm, the unlocking terminal does not generate encryption algorithm indication data, and does not send encryption algorithm indication data to the digital key terminal 102 . In the case that the cryptographic algorithm to be used by the unlocking terminal 104 is the second type of cryptographic algorithm, the unlocking terminal generates cryptographic algorithm indication data containing the cryptographic algorithm logo based on the cryptographic algorithm identification corresponding to the second type of cryptographic algorithm, and sends the data to the digital key terminal 102 Send cryptographic algorithm indication data including the cryptographic algorithm identifier. If the analysis result of the encryption algorithm information is that the encryption algorithm information cannot be analyzed, the unlocking terminal 104 has not analyzed the encryption algorithm information, and the unlocking terminal 104 uses the preset first type of encryption algorithm as the encryption algorithm to be used by the unlocking terminal 104 . When the encryption algorithm to be used by the unlocking terminal 104 is the first type of encryption algorithm, the unlocking terminal does not generate encryption algorithm indication data, and does not send encryption algorithm indication data to the digital key terminal 102 .

In this embodiment, the unlocking terminal determines the password algorithm to be used by the unlocking terminal according to the analysis result of the password algorithm information and the password selection strategy, and determines the password matching response result based on the password algorithm to be used by the unlocking terminal. Wherein, the password matching response result is used to indicate the password algorithm to be used on the digital key terminal, that is to say, the password algorithm to be used on the digital key terminal is determined based on the password algorithm to be used on the unlocked terminal, thereby ensuring that the digital key terminal and the The cryptographic algorithm to be used for unlocking the terminal is the same cryptographic algorithm. Therefore, using this scheme for authentication can succeed in authentication.

In one embodiment, as shown in Figure 5, the digital key authentication method also includes:

Step 502: In the case that the matching instruction includes the matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key, determine the matching result based on the matching result identifier included in the matching response data.

In this embodiment of the application, when the matching instruction includes the matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal 102, the unlocking terminal 104 obtains the matching result based on the matching result identifier included in the matching response data. Wherein, the matching result is the first matching result indicating that the matching fails, or is the second matching result indicating that the matching is successful. It can be understood that the matching response data does not contain the cryptographic algorithm information corresponding to the digital key terminal 102, indicating that the cryptographic algorithm locally supported by the digital key terminal 102 is a single algorithm (the first type of cryptographic algorithm or the second type of cryptographic algorithm). Therefore, the digital key terminal The cryptographic algorithm to be used in 102 can only be the unique cryptographic algorithm supported locally. Then, it only needs to determine the password algorithm to be used for unlocking the terminal 102 according to the matching result of the digital key terminal 102 , instead of determining the password algorithm to be used for the digital key terminal 102 based on the password algorithm to be used for unlocking the terminal 104 . That is to say, when the matching instruction includes the matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal 102, the digital key terminal 102 uses the locally supported cryptographic algorithm as the to-be-used cryptographic algorithm of the digital key terminal 102. cryptographic algorithm.

Step 504, if the matching result is the first matching result indicating that the matching fails, use the first type of cryptographic algorithm as the cryptographic algorithm to be used, and determine that the cryptographic matching response result is not to send cryptographic algorithm indication data to the digital key.

In the embodiment of the present application, when the matching result is the first matching result indicating that the matching fails, the unlocking terminal 104 uses the first type of cryptographic algorithm as the cryptographic algorithm to be used, and generates an instruction not to send the cryptographic algorithm to the digital key terminal 102 The data's password matches the response result. It can be understood that when the matching instruction includes the matching application identification, the matching instruction sent by the unlocking terminal 104 to the digital key terminal 102 contains the application identification corresponding to the digital key application supporting the second type of cryptographic algorithm, if the digital key terminal 102 is based on the matching If the matching result generated by the instruction indicates that the matching fails, it means that the cryptographic algorithm locally supported by the digital key terminal 102 is the first type of cryptographic algorithm. Therefore, when the matching result is the first matching result indicating that the matching fails, the unlocking terminal 104 uses the first type of cryptographic algorithm as the cryptographic algorithm to be used, which can ensure that both the unlocking terminal 104 and the digital key terminal 102 are to be used. All cryptographic algorithms are Class I cryptographic algorithms.

Step 506, if the matching result is the second matching result indicating that the matching is successful, use the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier as the cryptographic algorithm to be used, and determine that the cryptographic matching response result is a non-directional digital key The key end sends the cryptographic algorithm indication data.

In the embodiment of the present application, when the matching result is the second matching result indicating that the matching is successful, the unlocking terminal 104 uses the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier as the cryptographic algorithm to be used, and generates an The digital key terminal 102 sends a cryptographic matching response result of the cryptographic algorithm indication data. It can be understood that when the matching instruction includes the matching application identification, the matching instruction sent by the unlocking terminal 104 to the digital key terminal 102 contains the application identification corresponding to the digital key application supporting the second type of cryptographic algorithm, if the digital key terminal 102 is based on the matching The matching result generated by the instruction indicates that the matching is successful, which means that the cryptographic algorithm locally supported by the digital key terminal 102 is the second type of cryptographic algorithm. Therefore, when the matching result is the second matching result indicating that the matching is successful, the unlocking terminal 104 uses the second type of cryptographic algorithm as the cryptographic algorithm to be used, which can ensure that both the unlocking terminal 104 and the digital key terminal 102 are to be used. Cryptographic algorithms are all Class II cryptographic algorithms.

In this embodiment, when the matching instruction includes the matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal, the unlocking terminal determines the cryptographic algorithm to be used for the unlocking terminal based on the matching result in the matching response data . Since the matching response data does not contain cryptographic algorithm information, the cryptographic algorithm locally supported by the digital key terminal is a single algorithm (the first type of cryptographic algorithm or the second type of cryptographic algorithm), and the unlocking terminal is determined based on the matching response data sent by the digital key end. Therefore, it is guaranteed that the cryptographic algorithm to be used on the digital key terminal and the unlocking terminal is the same cryptographic algorithm. Therefore, using this scheme for authentication can be successful.

It should be understood that although the steps in the flow charts involved in the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed sequentially in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least some of the steps in the flow charts involved in the above-mentioned embodiments may include multiple steps or stages, and these steps or stages are not necessarily executed at the same time, but may be performed at different times For execution, the execution order of these steps or stages is not necessarily performed sequentially, but may be executed in turn or alternately with other steps or at least a part of steps or stages in other steps.

Based on the same inventive concept, an embodiment of the present application further provides a digital key authentication system for implementing the digital key authentication method involved above. The solution to the problem provided by the system is similar to the implementation described in the above method, so the specific limitations in the embodiment of the authentication system for one or more digital keys provided below can be referred to above for the authentication of the digital key The limitation of the method will not be repeated here.

In one embodiment, as shown in FIG. 1 , a digital key authentication system is provided, the system includes a digital key terminal 102 and an unlocking terminal 104, wherein:

The unlocking terminal 104 is configured to send a matching instruction to the digital key terminal 102;

The digital key terminal 102 is configured to determine a locally supported cryptographic algorithm in response to the matching instruction sent by the unlocking terminal 104; when the locally supported cryptographic algorithm satisfies a preset condition, generate matching response data containing cryptographic algorithm information; The cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm supported locally; the unlocking terminal 104 is also used to determine the password corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the password selection policy matching response result;

The digital key terminal 102 is further configured to determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used.

In one embodiment, the digital key terminal 102 is specifically used for:

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal 104 is received, the password algorithm identification in the encryption algorithm indication data is obtained, and the encryption algorithm identification is corresponding to The cryptographic algorithm of is used as the cryptographic algorithm to be used;

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal 104 has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In one embodiment, when the matching instruction includes a matching application identifier, the digital key terminal 102 is specifically configured to:

When the cryptographic algorithms supported locally include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information;

The digital key terminal 102 is also used for:

When the cryptographic algorithm supported locally is a first-type cryptographic algorithm or a second-type cryptographic algorithm, comparing the matching application identifier with a preset application identifier to determine a comparison result;

When the comparison result indicates that the identifiers are consistent, generate a second matching result indicating that the matching is successful, and based on the second matching result, generate matching response data that includes the matching result identifier corresponding to the second matching result;

If the comparison result indicates that the identifications are inconsistent, generate a first matching result indicating that the matching fails, and based on the first matching result, generate matching response data including the matching result identification corresponding to the first matching result.

In one embodiment, when the matching instruction does not include a matching application identifier, the digital key terminal 102 is specifically used for:

In response to the matching instruction, generating a second matching result indicating that the matching is successful;

Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated.

In one embodiment, the unlocking terminal 104 is specifically used for:

In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result;

If the analysis result of the password algorithm information is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key terminal 102 .

In one embodiment, the unlocking terminal 104 is also used for:

When the matching instruction includes a matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal 102, determine the matching result based on the matching result identifier included in the matching response data ;

In the case that the matching result is the first matching result indicating that the matching fails, the first type of cryptographic algorithm is used as the cryptographic algorithm to be used, and it is determined that the cryptographic matching response result is not to send the cryptogram to the digital key terminal 102 Algorithms indicate data;

When the matching result is the second matching result indicating that the matching is successful, the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined as The cryptographic algorithm indication data is not sent to the digital key terminal 102 .

Based on the same inventive concept, an embodiment of the present application further provides a digital key authentication device for implementing the above-mentioned digital key authentication method. The solution to the problem provided by the device is similar to the implementation described in the above method, so the specific limitations in the embodiment of the authentication device for one or more digital keys provided below can be referred to above for the authentication of the digital key The limitation of the method will not be repeated here.

In one embodiment, as shown in FIG. 6 , a digital key authentication device is provided. The device is applied to the digital key terminal, and the device includes:

A response module 602, configured to determine locally supported cryptographic algorithms in response to the matching instruction sent by the unlocking terminal;

The first determination module 604 is configured to generate matching response data including cryptographic algorithm information when the locally supported cryptographic algorithms meet preset conditions; the cryptographic algorithm information includes priority information corresponding to each of the cryptographic algorithms ;

A sending module 606, configured to return the matching response data to the unlocking terminal, where the matching response data is used to instruct the unlocking terminal to determine a password matching response result according to the analysis result of the password algorithm information and the password selection strategy;

The second determining module 608 is configured to determine a password algorithm to be used according to a password matching response result corresponding to the matching response data, and perform authentication processing based on the password algorithm to be used.

In one embodiment, the second determining module 608 is specifically configured to:

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal is received, obtain the password algorithm identification in the encryption algorithm indication data, and use the password algorithm identification corresponding to the cryptographic algorithm as the cryptographic algorithm to be used;

When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used.

In one embodiment, when the matching instruction includes a matching application identifier, the first determining module 604 is specifically configured to:

When the cryptographic algorithms supported locally include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information;

The authentication device of the digital key also includes:

A third determining module, configured to compare the matching application identifier with a preset application identifier when the locally supported cryptographic algorithm is a first-type cryptographic algorithm or a second-type cryptographic algorithm, and determine a comparison result;

The first matching module is configured to generate a second matching result indicating successful matching when the comparison result indicates that the identifiers are consistent, and generate a matching result corresponding to the second matching result based on the second matching result identified matching response data;

The second matching module is configured to generate a first matching result indicating a matching failure when the comparison result indicates that the identification is inconsistent, and generate a matching result corresponding to the first matching result based on the first matching result Identified matching response data.

In one embodiment, when the matching instruction does not include a matching application identifier, the first determining module 604 is specifically configured to:

In response to the matching instruction, generating a second matching result indicating that the matching is successful;

Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated.

In one embodiment, as shown in FIG. 7 , a digital key authentication device is provided. The device is applied to unlocking a terminal, and the device includes:

A sending module 702, configured to send a matching instruction to the digital key, where the matching instruction is used to instruct the digital key to return matching response data based on the matching instruction;

The first determination module 704 is configured to determine the matching response data corresponding to the cryptographic algorithm information according to the analysis result of the cryptographic algorithm information and the password selection strategy in the case that the matching response data includes the cryptographic algorithm information corresponding to the digital key terminal. The password matching response result; the password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used.

In one embodiment, the first determining module 704 is specifically configured to:

In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result;

If the analysis result of the password algorithm information is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key.

In one embodiment, the digital key authentication device further includes:

The second determination module is configured to, when the matching instruction includes a matching application identifier and the matching response data does not include the cryptographic algorithm information corresponding to the digital key terminal, based on the matching result identifier included in the matching response data , to determine the matching result;

The first matching module is configured to use the first type of cryptographic algorithm as the cryptographic algorithm to be used when the matching result is the first matching result indicating that the matching fails, and determine that the cryptographic matching response result is not applicable to all The digital key terminal sends the cryptographic algorithm indication data;

The second matching module is configured to use the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier as the cryptographic algorithm to be used when the matching result is the second matching result indicating that the matching is successful, and determine The result of the password matching response is that no password algorithm indication data is sent to the digital key. Each module in the above-mentioned digital key authentication device can be fully or partially realized by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, and can also be stored in the memory of the computer device in the form of software, so that the processor can invoke and execute the corresponding operations of the above-mentioned modules.

In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure may be as shown in FIG. 7 . The computer device includes a processor, a memory, a communication interface, a display screen and an input device connected through a system bus. , the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be realized through WIFI, mobile cellular network, NFC (Near Field Communication) or other technologies. When the computer program is executed by the processor, a digital key authentication method is realized. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covered on the display screen, or a button, a trackball or a touch pad provided on the casing of the computer device , and can also be an external keyboard, touchpad, or mouse.

Those skilled in the art can understand that the structure shown in Figure 7 is only a block diagram of a part of the structure related to the solution of this application, and does not constitute a limitation to the computer equipment on which the solution of this application is applied. The specific computer equipment can be More or fewer components than shown in the figures may be included, or some components may be combined, or have a different arrangement of components.

In one embodiment, there is also provided a computer device, including a memory and a processor, where a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps in the foregoing method embodiments are implemented.

In one embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps in the foregoing method embodiments are implemented.

It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all Information and data authorized by the user or fully authorized by all parties.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented through computer programs to instruct related hardware, and the computer programs can be stored in a non-volatile computer-readable memory In the medium, when the computer program is executed, it may include the processes of the embodiments of the above-mentioned methods. Wherein, any reference to storage, database or other media used in the various embodiments provided in the present application may include at least one of non-volatile and volatile storage. Non-volatile memory can include read-only memory (Read-Only Memory, ROM), tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive variable memory (ReRAM), magnetic variable memory (Magnetoresistive Random Access Memory, MRAM), Ferroelectric Random Access Memory (FRAM), Phase Change Memory (Phase Change Memory, PCM), graphene memory, etc. The volatile memory may include random access memory (Random Access Memory, RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the various embodiments provided in this application may include at least one of a relational database and a non-relational database. The non-relational database may include a blockchain-based distributed database, etc., but is not limited thereto. The processors involved in the various embodiments provided by this application can be general-purpose processors, central processing units, graphics processors, digital signal processors, programmable logic devices, data processing logic devices based on quantum computing, etc., and are not limited to this.

The technical features of the above embodiments can be combined arbitrarily. To make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be It is considered to be within the range described in this specification.

The above-mentioned embodiments only express several implementation modes of the present application, and the description thereof is relatively specific and detailed, but should not be construed as limiting the patent scope of the present application. It should be noted that those skilled in the art can make several modifications and improvements without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be determined by the appended claims.

Claims (11)

1. An authentication method of a digital key, characterized in that the method is applied to a digital key end, and the method comprises: Responding to the matching instruction sent by the unlocking terminal, determine locally supported cryptographic algorithms; When the cryptographic algorithms supported locally meet the preset conditions, generate matching response data including cryptographic algorithm information; the cryptographic algorithm information includes priority information corresponding to each of the cryptographic algorithms; returning the matching response data to the unlocking terminal, where the matching response data is used to instruct the unlocking terminal to determine a password matching response result according to the analysis result of the password algorithm information and the password selection strategy; According to the password matching response result corresponding to the matching response data, a password algorithm to be used is determined, and authentication processing is performed based on the password algorithm to be used. 2. The method according to claim 1, wherein the determining the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data comprises: When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal is received, obtain the password algorithm identification in the encryption algorithm indication data, and use the password algorithm identification corresponding to the cryptographic algorithm as the cryptographic algorithm to be used; When the password matching response result corresponding to the matching response data is that the password algorithm indication data sent by the unlocking terminal has not been received, the locally supported first type of password algorithm is used as the password algorithm to be used. 3. The method according to claim 1, wherein, in the case where the matching instruction includes a matching application identifier, when the locally supported cryptographic algorithm satisfies a preset condition, generating The matching response data for the message includes: When the cryptographic algorithms supported locally include a first type of cryptographic algorithm and a second type of cryptographic algorithm, generate matching response data containing cryptographic algorithm information; The method also includes: When the cryptographic algorithm supported locally is a first-type cryptographic algorithm or a second-type cryptographic algorithm, comparing the matching application identifier with a preset application identifier to determine a comparison result; When the comparison result indicates that the identifiers are consistent, generate a second matching result indicating that the matching is successful, and based on the second matching result, generate matching response data that includes the matching result identifier corresponding to the second matching result; If the comparison result indicates that the identifications are inconsistent, generate a first matching result indicating that the matching fails, and based on the first matching result, generate matching response data including the matching result identification corresponding to the first matching result. 4. The method according to claim 1, wherein when the matching instruction does not include a matching application identifier, when the locally supported encryption algorithm satisfies a preset condition, generating an instruction containing a password The matching response data for algorithm information includes: In response to the matching instruction, generating a second matching result indicating that the matching is successful; Based on the second matching result and the priority information corresponding to each of the cryptographic algorithms supported locally, matching response data including a matching result identifier corresponding to the second matching result is generated. 5. An authentication method of a digital key, characterized in that the method is applied to unlocking a terminal, and the method comprises: sending a matching instruction to the digital key, where the matching instruction is used to instruct the digital key to return matching response data based on the matching instruction; If the matching response data includes cryptographic algorithm information corresponding to the digital key terminal, determine the cryptographic matching response result corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the cryptographic selection strategy; The password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used. 6. The method according to claim 5, wherein the determining the password matching response result corresponding to the matching response data according to the analysis result of the password algorithm information and the password selection strategy comprises: In the case where the analysis result of the encryption algorithm information includes priority information corresponding to each encryption algorithm, based on the priority information corresponding to each encryption algorithm in the encryption algorithm information and the password selection strategy, determine the password matching response result; If the analysis result of the password algorithm information is that the password algorithm information cannot be parsed, it is determined that the password matching response result is not to send the password algorithm indication data to the digital key. 7. The method according to claim 5, wherein the method further comprises: When the matching instruction includes a matching application identifier and the matching response data does not include cryptographic algorithm information corresponding to the digital key terminal, determine the matching result based on the matching result identifier included in the matching response data; When the matching result is the first matching result indicating that the matching fails, the first type of cryptographic algorithm is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined not to send the cryptographic algorithm to the digital key terminal indicating data; When the matching result is the second matching result indicating that the matching is successful, the cryptographic algorithm supported by the digital key application corresponding to the matching application identifier is used as the cryptographic algorithm to be used, and the cryptographic matching response result is determined as The cryptographic algorithm indication data is not sent to the digital key end. 8. An authentication system for a digital key, characterized in that the system includes a digital key terminal and an unlocking terminal, wherein: The unlocking terminal is configured to send a matching instruction to the digital key terminal; The digital key terminal is used to determine a locally supported cryptographic algorithm in response to a matching instruction sent by an unlocking terminal; and generate matching response data containing cryptographic algorithm information when the locally supported cryptographic algorithm meets a preset condition; The cryptographic algorithm information includes priority information corresponding to each cryptographic algorithm supported locally; the unlocking terminal is also used to determine the cryptographic matching code corresponding to the matching response data according to the analysis result of the cryptographic algorithm information and the password selection policy. response result; The digital key terminal is further configured to determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used. 9. An authentication device for a digital key, characterized in that the device is applied to a digital key terminal, and the device includes: A response module, configured to determine locally supported cryptographic algorithms in response to the matching instruction sent by the unlocking terminal; A first determination module, configured to generate matching response data including cryptographic algorithm information when the locally supported cryptographic algorithms meet preset conditions; the cryptographic algorithm information includes priority information corresponding to each of the cryptographic algorithms; A sending module, configured to return the matching response data to the unlocking terminal, where the matching response data is used to instruct the unlocking terminal to determine a password matching response result according to the analysis result of the password algorithm information and the password selection strategy; The second determining module is configured to determine the cryptographic algorithm to be used according to the cryptographic matching response result corresponding to the matching response data, and perform authentication processing based on the cryptographic algorithm to be used. 10. An authentication device for a digital key, characterized in that the device is used to unlock a terminal, and the device includes: A sending module, configured to send a matching instruction to the digital key, where the matching instruction is used to instruct the digital key to return matching response data based on the matching instruction; The first determination module is configured to determine the matching response data corresponding to the cryptographic algorithm information according to the analysis result of the cryptographic algorithm information and the password selection policy in the case that the matching response data includes the cryptographic algorithm information corresponding to the digital key terminal. A password matching response result; the password matching response result is used for the digital key terminal to determine the password algorithm to be used, and perform authentication processing based on the password algorithm to be used. 11. A computer device, comprising a memory and a processor, the memory stores a computer program, wherein the processor implements the method according to any one of claims 1 to 6 when executing the computer program step.

Images