DE102017216407A1 - Method for charging an electrical energy store; Loading unit and system with loading unit - Google Patents

Abstract

The invention relates to a method for charging an electrical energy store (16) of a motor vehicle (1) with an electric drive (16), wherein electrical power is transmitted to the motor vehicle (1) via a cable connection (4) through a charging unit (2) and via the cable connection (4) additionally a data connection (5) is established. In order to enable a simplified updating of a program stored in the motor vehicle (1), it is provided that a program stored on a memory (8) of the motor vehicle (1) is controlled via the data connection (5) for controlling a function (7) of the motor vehicle ( 1) is updated.

Description

The invention relates to a method for charging an electrical energy store of a motor vehicle. A second aspect of the invention relates to a charging unit for charging an electrical energy store of a motor vehicle. Another aspect of the invention relates to a system with such a loading unit.

From the prior art are known motor vehicles with an electric energy storage and with an electric drive, in particular electric vehicles and hybrid vehicles. In order to charge such a motor vehicle or its electrical energy storage, charging stations are known on public grounds. Such charging stations may comprise one or more charging units. The loading unit may be designed to charge one or more motor vehicles.

Charging a motor vehicle is standardized, for example, by the CHAdeMO standard or the CCS standard (Combined Charging System). Both standards are prior to the establishment of a data connection, wherein via the data connection control data can be transmitted, which relate to the charging of the electrical energy storage and / or a payment function.

In addition, it is known that many functions in motor vehicles, such as an entertainment system, a navigation system, an engine control, a driver assistance system, a control unit for controlling steering, gas and / or brake and any other components by a respective stored program or software to be controlled. Such a program may thus be, for example, the firmware of a single controller or a program for controlling the functions of multiple controllers.

In order to maintain a program stored in the motor vehicle, it is customary for the program to be updated as part of a workshop visit by specialist personnel in the workshop. For this purpose, the program is updated, for example by manually importing an update by means of a diagnostic device, a physical connection to the motor vehicle. In the case of absolutely necessary, for example, time-critical, updates, this procedure may even require a costly and time-consuming recall of all affected motor vehicles in a workshop of the manufacturer.

In addition, it is known to play software updates over the mobile network, which is also called "over-the-air (OTA)". However, this can cause security problems, since a necessary for this constantly or regularly active mobile Internet connection also provides opportunities for attackers to hack to exploit vulnerabilities in a security architecture of the motor vehicle and possibly exploit. The existence of such security problems has already been demonstrated in the past.

It is the object of the present invention to enable a simplified updating of a program stored in a motor vehicle with an electrical energy store and an electric drive.

This object is achieved by the subject matters of claims 1, 10, 11. Advantageous embodiments with expedient developments are the subject of the dependent claims.

The invention is based on the idea that a cable connection, which is created when charging an electrical energy storage device of a motor vehicle, not only used for transmitting electrical power but also for updating programs or software of the motor vehicle. In particular, a data connection is used for this purpose, which is established via the cable connection between a charging unit and the motor vehicle. In other words, the charging unit is used not only for charging the electrical energy storage of the motor vehicle but also, in particular at the same time, for updating its software or for a program of the motor vehicle.

The invention is therefore based on a method for charging an electrical energy storage device of a motor vehicle with an electric drive, is transmitted via a cable connection through a charging unit electrical power to the motor vehicle and via the cable connection additionally a data connection is established. The motor vehicle is preferably a motor vehicle, in particular a passenger car. The electric drive of the motor vehicle can be designed to drive the motor vehicle and be with electrical energy from the electrical energy storage provider. The motor vehicle is preferably a hybrid vehicle or an electric vehicle.

According to the invention, a program stored on a memory of the motor vehicle for controlling a function of the motor vehicle is updated via the data connection. The memory may be a hard disk, a flash memory, an EEPROM, a random access memory (RAM) or a programmable memory Read-only memory (ROM) act. The program can be executable program code. The program can be set up to control a functional unit of the motor vehicle. For example, the memory of the functional unit is assigned or part of the functional unit. The functional unit can comprise, for example, a computer, a microcontroller, a control unit, an FPGA or any programmable switching unit.

Preferably, the functional unit is a microcontroller, which comprises a memory. The functional unit may be designed to control and / or provide the function of the motor vehicle. A way in which the functional unit provides the function of the motor vehicle can be predefinable or changeable by the programming or the program of the functional unit. In other words, can be specified or changed by the programming or the program, in what way the function of the motor vehicle is controlled.

The fact that the program of the motor vehicle is updated when charging the motor vehicle via the cable connection, a high level of security of the update can be guaranteed, since the charging unit is in the "power range" of a service provider. As a result, the update of the program can be particularly well secured to the outside. In addition, security vulnerabilities can only occur while the motor vehicle is connected via the cable connection with the charging unit. During normal operation of the motor vehicle, that is, while the motor vehicle is not connected to the charging unit, an attack on a security architecture of the motor vehicle, for example, by a hacker, much more difficult. On the other hand, regular updating of the program is ensured, since the motor vehicle can be regularly charged and / or a user of the motor vehicle can be easily requested to visit the charging unit.

The function of the motor vehicle may in particular be a driving function. Thus, a program code for controlling the driving function of the motor vehicle as the program can be updated. For example, the program is designed to control a motor or drive, a driver assistance system, throttle, brake and / or steering as the function. The driving function can thus relate, for example, to the gas, brake and / or steering of the motor vehicle. The driving function may be through the driver assistance system, for example a driver assistance system for piloted driving. These embodiments are to be understood as purely exemplary.

A development provides that via the data connection additionally control data, which relate to the charging of the electrical energy storage or a payment function, transmitted and / or received. For example, user-related data of a user of the motor vehicle or motor vehicle-related data is received by the charging unit in order to allocate the charging of the electrical energy store to a user account or vehicle account and to settle the charge via this. Alternatively or additionally, payment information may be received. The control data relating to the charging of the electrical energy store can relate, for example, to a charging state of the electrical energy store, a charging voltage, a charging current or a quantification of the transmitted electrical power.

Certain embodiments of the invention provide that the data connection is made via powerline communication (PLC) or via a CAN bus. In particular, the data connection for the exchange of control data by means of powerline communication according to the CCS standard (Combined Charging System, in German: "combined charging system") is provided. The data connection for exchanging the control data by means of the CAN bus is provided, for example, in the CHAdeMO standard. In this case, the motor vehicle and charging unit can be digitally connected by means of the CAN bus.

A further development provides that a software update for updating the program by the loading unit is received from a server device. In other words, not the motor vehicle itself has a, possibly permanent, internet connection via a mobile connection that is more difficult to secure. An internet connection for retrieving the software updates from the server device may be made by the loading unit in this example. In a sense, the charging unit also serves as a wired Internet router.

A development provides that the receiving and / or an integrity of the software update by a security mechanism, which in particular includes a digital certificate, an encryption and / or a digital signature, are hedged. For example, the secure receiving of the software update by the security mechanism, in particular by the encryption, can be ensured. Alternatively or additionally, the integrity of the software update can be checked by means of a digital certificate and / or a digital signature. In this way An erroneous update due to security vulnerabilities and / or transmission errors can be avoided.

In particular, the same security mechanism is used to receive and / or verify the integrity of the software package as it does to authorize a payment. It is known from the prior art that after the charging of the electrical energy store, the transmitted electrical power is paid by means of a digital payment method. The payment by means of the digital payment method is secured in order to avoid the interception of payment data by third parties. Already known security mechanisms can be used to allow a particularly simple implementation of the update of the program by the charging unit.

On the one hand, it is possible for the loading unit to apply the security mechanism to ensure secure reception as well as the integrity of the software update. However, it proves advantageous that the digital certificate and / or the digital signature are transmitted to the motor vehicle by means of the data connection, ie via the cable connection between the charging unit and the motor vehicle, and the updating of the program by the motor vehicle on the basis of the digital certificate and / or the digital signature is validated. In this way, even more security can be ensured when updating the program. In particular, security gaps that are present in or on the charging unit can be avoided in this way. In addition, for example, transmission errors between the charging unit motor vehicle, which could lead to an error when updating the program, can be avoided.

According to a development it is provided that the program of the motor vehicle is updated by providing an update package or by installing a new version of the program. In particular, the new version of the program is installed directly on the memory of the motor vehicle. To install the new version of the program, the memory of the new version of the program can be programmed or "flashed". Alternatively, the motor vehicle, the update package is transmitted. In this case, the update package can be transmitted by the charging unit from the charging unit to the motor vehicle. In this case, the motor vehicle, for example the functional unit or an updating unit, which is designed to update the functional unit, install the new version of the program from the update package. The update package may correspond to the software update received from the server device.

• - mit einem Ladeanschluss zum Aufbauen einer Kabelverbindung mit dem Kraftfahrzeug, wobei über die Kabelverbindung elektrische Leistung an das Kraftfahrzeug übertragbar ist, und mit
• - einer Kommunikationseinheit zum Aufbauen einer Datenverbindung mit dem Kraftfahrzeug über die Kabelverbindung.

A second aspect of the invention relates to a charging unit (charging station) for charging an electrical energy store of a motor vehicle, which has an electric drive,

• - With a charging connection for establishing a cable connection to the motor vehicle, wherein via the cable connection electrical power is transmitted to the motor vehicle, and with
• - A communication unit for establishing a data connection with the motor vehicle via the cable connection.

According to the invention, the communication unit is designed to update a program stored on a memory of the motor vehicle for controlling a function of the motor vehicle via the data connection. In particular, the loading unit is set up to carry out a method according to one or more of the embodiments described above.

• - der erfindungsgemäßen Ladeeinheit,
• - einem Kraftfahrzeug, welches ausgebildet ist, eine Aktualisierung des Programms mittels der Kabelverbindung zu ermöglichen oder durchzuführen, und
• - einer Servereinrichtung, welche ausgebildet ist, ein Softwareupdate zum Aktualisieren des Programms an die Ladeeinheit zu übermitteln. Das erfindungsgemäße System ist insbesondere dazu eingerichtet, ein Verfahren nach einer oder mehrerer der im vorherigen beschriebenen Ausführungsformen durchzuführen.

The invention also includes a system with

• the charging unit according to the invention,
• a motor vehicle which is designed to enable or carry out an update of the program by means of the cable connection, and
• a server device, which is designed to transmit a software update for updating the program to the loading unit. The system according to the invention is in particular configured to carry out a method according to one or more of the embodiments described above.

Advantageous embodiments and expedient developments of the method according to the invention also apply analogously to the loading unit according to the invention and the system according to the invention. Features which have already been described in the context of the method according to the invention are therefore not explained again for the loading unit and the system.

Further features and advantages will be apparent from the following description with reference to the accompanying figures. In the figures, like reference numerals designate like features and functions. The embodiments are merely illustrative of the invention and are not intended to limit this.

The sole FIGURE is a schematic representation of a motor vehicle, a loading unit and a server device.

The FIG shows a schematic representation of a motor vehicle 1 , The car 1 can be designed as a motor vehicle, especially as a passenger car or truck. The car 1 has an electric drive 16 , in particular an electrical machine, for example a synchronous machine or an asynchronous machine. The electric drive 16 of the motor vehicle 1 requires electrical energy to drive the motor vehicle 1 , For this reason, the motor vehicle 1 an electrical energy storage 15 , For example, an accumulator or a battery, in particular a lithium-ion battery on. The electrical energy storage 15 it is preferably designed as a high-voltage energy store and is designed to provide a voltage of more than 80 V, preferably more than 200 V. For example, the electrical energy store supplies 15 the electric drive 16 of the motor vehicle 1 via a converter 17 or inverter with electrical energy. In the motor vehicle 1 it can be a hybrid vehicle or an electric vehicle.

The car 1 has a charging port 10 on, by means of which the motor vehicle 1 to a charging port 20 a loading unit 2 is connectable. Between the charging ports 10 . 20 can the cable connection 4 being constructed. The loading unit 2 is designed for example as a charging station. The loading unit 2 is designed to over the cable connection 4 electrical power to the motor vehicle 1 transferred to. In particular, the loading unit 2 for charging the electrical energy storage 15 of the motor vehicle 1 educated.

In addition, between the loading unit 2 and the motor vehicle 1 over the cable connection 4 a data connection 5 built up. By means of the data connection 5 Control data are transmitted, which is the charging of the electrical energy storage 15 or a payment function. The payment function allows, for example, a payment of the transmitted electrical power by a user of the motor vehicle 1 , For this purpose, the control data for enabling the payment function may include, for example, account data of a payment account of the user and / or a credit card number and / or an indication of an electrical energy transmitted to the motor vehicle. The control data, which is the charging of the electrical energy storage 15 relate, for example, a capacity and / or a state of charge of the electrical energy storage 15 , a charging voltage, a current or the indication of the on the motor vehicle 1 comprise transmitted electrical energy.

For example, the motor vehicle 1 and the loading unit 2 for charging the motor vehicle 1 standardized according to the CHAdeMO standard. This case can be provided that the charging unit 2 through the cable connection 4 with a CAN bus 12 of the motor vehicle 1 for establishing the data connection 5 is connected. In other words, the data connection 5 in this case via the CAN bus 12 produced. In this case, the cable connection 4 preferably in addition to wires for transmitting the electrical power additional wires for establishing the data connection 5 intended.

Alternatively or additionally, the motor vehicle 1 and the loading unit 2 for charging the motor vehicle 1 standardized according to the CCS standard. In this case it can be provided that the motor vehicle 1 a powerline communication unit 13 exhibit. The communication unit 21 the loading unit 2 can then also be designed as a powerline communication unit. In particular, the communication unit 21 the charging unit is designed in this case, a direct IP connection with the powerline communication unit 13 of the motor vehicle 1 build. In this case, the data connection 5 via the same wires of the cable connection 4 be constructed, via which also the electrical power is transmitted. The CAN bus 12 or the powerline communication unit 13 form a communication unit 8th of the motor vehicle 1 ,

In the present case is by the loading unit 2 a program stored on a memory 6 of the motor vehicle 1 is saved, updated. The program is to control a function 7 of the motor vehicle 1 educated. For example, the program may be designed to control an entertainment system, a driver assistance system or a driving function of the motor vehicle. In the present case, the function concerns 7 a motor control of the drive 16 , However, this is an exemplary matter and is not intended to limit the embodiment thereof. The memory 6 is part of a functional unit 11 which is adapted to the function 7 to control. Through the program becomes the functional unit 11 given in which way the function 7 is to control. In particular, it is the functional unit 11 a computer, microcontroller, controller, Field Programmable Gate Array (FPGA) or any programmable switching unit. The present is the functional unit 11 designed as a microcontroller, which the memory 6 includes. At the store 6 it may be, for example, a hard disk, a flash memory, an EEPROM, a random access memory (RAM) or a programmable read-only memory (ROM). In the present case, the microcontroller comprising the functional unit 11 forms an EEPROM as the memory 6 ,

The loading unit 2 is designed to be a software update 31 from a server device 3 to call or receive. For this purpose, the loading unit 2 For example, an Internet access 22 , especially a modem. The software update 31 can then via an internet connection 30 be received. It is provided in particular that the software update 31 encrypted from the server device 3 Will be received. It also adds integrity to the software updates 31 guaranteed by digital certificates and digital signatures. In particular, this can lead to forgeries of the software updates 31 and / or errors in the transfer of the software update 31 be recognized. For example, an asymmetric cryptosystem or public-key cryptosystem is used for encryption and / or signature.

The program of the motor vehicle 1 For example, by installing on the memory 6 to be updated. For example, the loading unit 2 an arithmetic unit 23 on which the program directly by installing a new version of the program on the memory 6 updated. The new version of the program can be part of the software update 31 be.

Alternatively it can be provided that the loading unit 2 the software update 31 over the data connection 5 to the motor vehicle 1 transmitted. In this case, the motor vehicle 1 an arithmetic unit 14 have the new version of the program on the memory 6 Installed. For example, the installation is done by programming (so-called "flashing") the new version of the program onto the memory 6 , the car 1 may be designed to be software update 31 automatically from the server device 3 retrieve. The loading unit 2 may be executed in this case to provide the Internet connection. In other words, the loading unit serves 2 as a router, which the motor vehicle 1 the internet access 30 refer the connection to the server device 3 provides.

In summary, the embodiment shows how a simplified updating of the in the motor vehicle 1 stored program can be enabled. The loading unit 2 serves not only for charging the vehicle 1 but also as wired internet access to update the program of the motor vehicle 1 , In particular, a high degree of security can be ensured since the data connection 5 Wired is established. In addition, the data connection 5 only briefly built up during the charging process. A continuous or regular Internet connection of the motor vehicle 1 via the mobile network is not necessary.

It is preferably provided that for the communication within the system 9 and in particular between charging unit 2 and server device 3 already known communication services are used. In this way, the implementation can be significantly simplified.

Claims (11)

Method for charging an electrical energy store (16) of a motor vehicle (1) with an electric drive (16), electrical power being transmitted to the motor vehicle (1) via a cable connection (4) by a charging unit (2) and via the cable connection ( 4) additionally a data connection (5) is constructed, characterized in that via the data connection (5) on a memory (8) of the motor vehicle (1) stored program for controlling a function (7) of the motor vehicle (1) is updated. Method according to Claim 1 characterized in that program code for controlling a driving function of the motor vehicle (1) is updated as the program. Method according to Claim 1 or 2 , characterized in that via the data connection (5) additionally control data, which relate to the charging of the electrical energy store (16) and / or a payment function, transmitted and / or received. Method according to one of the preceding claims, characterized in that the data connection (5) via Powerline communication (PLC) (13) or via a CAN bus (12) is produced. Method according to one of the preceding claims, characterized in that a software update (31) for updating the program by the loading unit (2) is received from a server device (3). Method according to Claim 5 , characterized in that the receiving and / or integrity of the software update (31) by a security mechanism, which in particular comprises a digital certificate, encryption and / or digital signature is secured. Method according to Claim 6 , characterized in that the same security mechanism is also used to authorize a payment. Method according to Claim 6 or 7 , characterized in that the digital certificate and / or the digital signature is transmitted to the motor vehicle (1) by means of the data connection (5) and the updating of the program by the motor vehicle (1) is validated on the basis of the digital certificate and / or the digital signature. Method according to one of the preceding claims, characterized in that the program of the motor vehicle (1) is updated by providing an update package or by installing a new version of the program. Charging unit (2) for charging an electrical energy store (15) of a motor vehicle (1) having an electric drive (16), - with a charging port (20) for establishing a cable connection (4) with the motor vehicle (1), wherein via the cable connection (4) electrical power to the motor vehicle (1) is transferable, and with - a communication unit (21) for establishing a data connection (5) with the motor vehicle (1) via the cable connection (4), characterized in that - Communication unit (21) is adapted to update via the data connection (5) on a memory (6) of the motor vehicle (1) stored program for controlling a function (7) of the motor vehicle (1). System (9), with - a loading unit (2) after Claim 10 a motor vehicle (1) which is designed to enable or carry out an update of the program by means of the cable connection (4), and a server device (3) which is adapted to update the program to the software Charge unit (2) to transmit.

Images