A method for generating and using a virtual key of a vehicle, which is implemented by a user terminal, an authorization terminal, a telematics service provider, a backend system and an onboard communication control module (500; 600), wherein the method comprises: an initial presetting step in which relevant keys and/or certificates are preset in the onboard communication control module (500; 600), the user terminal and the telematics service provider; a key generation step in which the user terminal sends, via the backend system, a request for generating a virtual key to the telematics service provider, the telematics service provider determines whether the request for generating the virtual key is valid, and if the request is valid, an index of the virtual key is returned, via the backend system, to the authorization terminal specified by the user terminal or by the telematics service provider, the authorization terminal invokes the virtual key from the telematics service provider based on the index of the virtual key, the telematics service provider verifies the invocation information from the authorization terminal, and if the verification succeeds, the telematics service provider generates the virtual key, and returns the generated virtual key to the authorization terminal; a key encryption step in which the authorization terminal randomly generates specified parameters, encrypts the virtual key based on the specified parameters, and sends the encrypted virtual key to the onboard communication control module (500; 600) arranged in the vehicle; and a key verification and execution step in which the onboard communication control module (500; 600) reads, decrypts and verifies the virtual key, and executes an instruction related to the virtual key when the verification succeeds. an initial presetting step in which relevant keys and/or certificates are preset in the onboard communication control module (500; 600), the user terminal and the telematics service provider; a key generation step in which the user terminal sends, via the backend system, a request for generating a virtual key to the telematics service provider, the telematics service provider determines whether the request for generating the virtual key is valid, and if the request is valid, an index of the virtual key is returned, via the backend system, to the authorization terminal specified by the user terminal or by the telematics service provider, the authorization terminal invokes the virtual key from the telematics service provider based on the index of the virtual key, the telematics service provider verifies the invocation information from the authorization terminal, and if the verification succeeds, the telematics service provider generates the virtual key, and returns the generated virtual key to the authorization terminal; a key encryption step in which the authorization terminal randomly generates specified parameters, encrypts the virtual key based on the specified parameters, and sends the encrypted virtual key to the onboard communication control module (500; 600) arranged in the vehicle; and a key verification and execution step in which the onboard communication control module (500; 600) reads, decrypts and verifies the virtual key, and executes an instruction related to the virtual key when the verification succeeds.