FR3002100A1 - SIMPLIFIED AUTHENTICATION AND AUTHORIZATION OF ENERGY TRANSMISSION THROUGH INITIAL BINDING - Google Patents

Abstract

A system for generating a power transmission link on a transmission path (10) between a first participant (101) and a second participant (201), characterized in that it comprises a communication unit (300) for the transmission transmitting at least one parameter (P1) between the first participant (101) and the second participant (201) over a data communication channel (101), the first participant (201) for transmitting at least one parameter (P1) by the transmission channel (10) and for the production of a data communication link by the channel (10), the second participant (201) for storing at least one parameter (P1 ') transmitted by the channel (11), the authentication of the first participant (101) and for the production of the power transmission link on the channel (10).

Description

The invention relates to a method and a system for producing an energy transmission link between a first participant and a second participant by means of a transmission link. an initial link. Electromobility requires the simultaneous construction of a charging infrastructure for the supply of electric vehicles. This includes public environments, such as refueling stations, as well as private environments such as a private garage. Deliberate manipulation or inadvertent inputs inadvertently during a charging operation threaten, on the one hand, the operational safety of the charging infrastructure as well as the unhindered operation of the charging operation on the other hand. charge and thus acceptance by the user of a charging infrastructure. ISO / IEC 15118, currently in definition, discloses a communication standard for load columns in which, by means of a mutually accepted PKI infrastructure, authentication of load columns, vehicles and sources of energy is possible. This solution is developed primarily for public charging columns, which have, behind a link with a backend, and can thus authenticate an electric vehicle, for example by means of certificates, and allow the collection of data. 'energy.

Patent application in the Federal Republic of Germany 10 2005 045118.7 discloses a method in which, in an announcement phase, a wireless transmission method other than in a work phase is used, the transmission method in which the announcement phase has a smaller scope than that used in the work phase. Furthermore, in the wireless data communication, the logical connection of two components is known, for example in the case of bluetooth, the pairing or, in the case of WLAM, the WiFi-protected-Setup. It is also known in mobile phones to link one to the other a SIM card and a mobile phone with a SIM lock. ISO / IEC 15118 provides X.509 digital certificates as security credentials. In the public domain, for example in refueling stations, the certificates can be put into play on an electric vehicle by an online link. In applications where there is no connection to a backend, only the load column can, however, according to the standard, be authenticated with respect to the electric vehicle. A user of the vehicle receives, from the manufacturer of the wallbox provided for a private load column, a user certificate of origin that he installs in the electric vehicle. The manufacturer of the wall-box serves as certification point and gives signed certificates to the wall-box. The certificate of origin characterizes the private environment, in which the load column is used. The electric vehicle finally checks the origin of the certificate provided by the load column and checks that it comes from the user's certificate of origin.

The present invention is directed to a method and system that makes possible safer and simplified transmission of power without backend linkage.

This is achieved by a method of producing a power transmission link on a transmission path between a first participant and a second participant, characterized in that it comprises the following steps: - production of an initial link by a data communication channel different from the transmission channel, in which: a start signal is generated to start the initial link, by a communication unit, at least one parameter is transmitted between the first participant and the second participant; participating by the data communication channel, by the second participant is memorized at least one parameter transmitted by the data communication channel or information derived therefrom; 20 - production of a data communication link by the transmission channel, in which: by the first participant, at least one parameter is transmitted by the transmission channel, the first participant is authenticated by the second participant on the base; an equalization of the at least one parameter transmitted by the communication channel of data or information which is deduced therefrom with at least one parameter transmitted by the communication link of data or information which is deduced therefrom; 30 - production of the transmission link of energy on the transmission channel according to a result of the authentication.

The advantages mentioned in the following are not necessarily to be achieved by the invention. Rather, these advantages may also be those obtained by some embodiments or improvements.

The first participant and the second participant are, in this application as a general rule, a consumer of energy or a unit that has energy.

By parameter, we mean in particular passwords assigned to the respective participant or an identifier of the respective participant including digital certificates. In addition, a session-specific parameter can be heard, such as a data item or a cryptographic session key. A certificate or a fingerprint of the certificate can be transmitted as parameter. Parameter specific to a session can also be transmitted as parameter, from which the first participant and / or the second participant derive, using an encrypted deduction function, a first session parameter and / or a second session parameter. session parameter.

By starting signal generation is meant in the present application, a process step that informs the infrastructure intentional intention of a user of energy transmission. It can be a user surface entry or the operation of switches on the infrastructure component. The production of the start signal requires in a variant a direct and without intermediary access to the component. Access can be limited by physical protection measures, for example by a cover that can be closed.

The production of a power transmission link on a transmission path means, in the present application, provide a prerequisite for the transmission of energy that makes it possible to take energy. According to the invention, stages of the production of the initial link and the production of the data communication link are required. Other stages may be necessary before the energy transmission is actually possible, such as for example a physical plugging of a load cable or the production of a proximity in space for an inductive load. The physical plug-in may, according to an exemplary embodiment, be the basis of the production of the data communication link.

The proposed method makes it possible to establish an energy transmission infrastructure without having to integrate for this purpose a component, be it an energy consumer or a component offering energy, in a security infrastructure such as for example a public key infrastructure abbreviated PKI. It is thus possible to produce an authorized power transmission link between an electric vehicle and a load column even in the private domain or it is not necessary to link to a backend. In addition, using the proposed method can be included, besides usual electric vehicles, also small vehicles, such as scooters or electric bicycles, in the charging infrastructure. For those small vehicles that also, if any, do not have the load communication standard or the user interfaces of a conventional electric vehicle, there is thus a method of transmitting energy without a third party being able to provide power without authorization. The initial link is made via a data communication channel which does not coincide, in particular, with the transmission channel. This can ensure a clear separation between the linking phase, in which the second participant is taught to trust the first participant and a regular use phase, in which the link is constituted by the transmission path and which must be used for the transmission of energy. The prerequisite for the production of the start signal, to start the initial link and enter the link phase, increases the security that a good teaching has been given to a participant or that the teaching phase has been set. disposition. The data communication channel can be realized by transmission channels such as wireless links, for example Bluetooth or WLAN. The input can be made directly on a control panel of a participant so that the transmission takes place in a component such as the first participant. Transmission can also be carried out by means of a portable data carrier, such as in particular a USB key or a memory card or by a communication link present, such as an internet link. The use of near-field communication method such as in particular by radio frequency identification (RFID) or Near Field Communication (NFC) also represents a possibility of a data communication channel in addition to the regular transmission path, the start signal being produced in this case by providing a justification RFID token by the user.

One can also think of using a charging cable that provides both the transmission channel and the data communication channel. The start signal can thus be produced in a user interface of the charging cable itself or for example by a reader integrated in the charging cable such as a USB reader or a card reader. By introducing the link phase by the production of the start signal, during the link phase, a security mechanism, if any, is disconnected from the second participant, without the second participant performing a verification of the first participant.

According to an advantageous embodiment, a digital certificate or a digital fingerprint of the digital certificate is transmitted as a parameter via the data communication channel. This completes a component that has already entered, if necessary, several security relationships with components of a power transmission infrastructure. A kind of trust advance is made for the component certificate. If then, in the case of a data communication link, the certificate of the first participant or a fingerprint of the certificate is transmitted too, the second participant is guaranteed to communicate with the same component as in the link phase, without a check of the transmitted certificate is carried out. A certificate exploitable only locally by the component participating in the transmission is thus sufficient.

According to an advantageous improvement, a data characterization of a session-specific characterization is transmitted via the data communication link, a characterization from which the first participant and / or the second participant deduces by means of a function of encrypted deduction a first session parameter and / or a second session parameter.

Encryption, which is fixed in the link phase, is used to authenticate the first participant or the second participant without having to encrypt a subsequent data communication. In particular, it is possible to agree on a symmetric key that is used for authentication in a subsequent data communication link. The invention is further directed to a system for generating a power transmission link on a transmission path between a first participant and a second participant, characterized in that it comprises: a communication unit for transmission from minus one parameter between the first participant and the second participant by a data communication channel, the communication unit having an input device for producing a start signal for starting an initial link; the first participant for transmitting at least one parameter over the transmission path and for generating a data communication link over the transmission path; the second participant for memorizing at least one parameter transmitted by the communication channel of data or information derived therefrom, for the authentication of the first participant on the basis of an equalization of the at least one transmitted parameter by the communication channel of data or information which is deduced therefrom with at least one parameter transmitted by the communication link of data or information which is deduced therefrom and for the production of the transmission link of energy on the transmission path according to a result of the authentication. According to an improvement of the invention, the system comprises at least one other unit to be used in one of the stages of the method according to the embodiments described above or the improvements described above of the method according to the invention.

The invention will be explained in a more precise manner in the following by embodiments by means of the figures. In the drawings: FIG. 1 is a schematic representation of the method for producing a power transmission link according to a first embodiment of the invention; FIG. 2 is a schematic representation of the method for producing a transmission link; transmission of energy according to a second embodiment of the invention. FIG. 1 represents the essential components of the invention according to a first exemplary embodiment, a first participant 101 and a second participant 201 may communicate with each other on a transmission channel 12 via a data communication link and with the aid of FIG. a communication unit 300 on a data communication channel 11. The first participant 101 is realized in the first embodiment by a charge column 101 which is erected in a private environment and which must yield electrical energy to a limited number of electric vehicles. Electric vehicles that are part of this limited number are designated as authorized users. A second participant 201 is made in the first embodiment by an electric vehicle 201 which can be connected to the charge column 101 on a transmission channel 10, in this case a charging cable 10. As communication unit 300 is used a smartphone 300 which is equipped with a camera and which communicates by a near-field communication method, such as bluetooth with an operating unit of the vehicle 201 for electrical control purposes. a charging operation. Instead of cable power transmission with data communication in the form of on-line power communication using a charging cable, it is just as possible to use a wireless power transmission. , in particular an inductive load. The data communication link is then wirelessly implemented. As parameter P1, it is possible to have a fingerprint of a charge column certificate. It is in the form of a two-dimensional code. Using the smartphone camera 300, the two-dimensional code that is visible outside on the load column is photographed. smartphone 300 routes the information thus obtained the fingerprint of the bluetooth link load column certificate to the electric vehicle 201. This corresponds to the beginning of the initial link. A user of the smartphone 300 emits, by the activation of the camera and by sending the photographed information, an indication of his desire to start the linking phase.

The electric vehicle 201 stores the information on the parameter P1 in the form of a parameter P1 'transmitted by the data communication channel. As soon as the electric vehicle and the load column 101 are connected by means of the transmission line, that is to say by the charging cable 10, which occurs, for example, with a view to charging the vehicle battery, on private ground, on which the charge column 101 is installed, begins the establishment of a communication between the electric vehicle and the load column using the certificate of the load column. The electric vehicle 201 compares the parameter P1 thus transmitted by the data communication link, i.e. the certificate information from the direct communication by the charging cable, with the parameter P1 transmitted by the data communication channel 11. If the parameter P1 transmitted by the data communication channel or information derived therefrom coincides with the parameter P1 "or information derived therefrom transmitted by the communication link of FIG. data, this may be a charge column certificate or a fingerprint of a charge column certificate, the charge column is identified by the electric vehicle and the power transmission link is produced. The charging operation is therefore started and the electric vehicle is added to the number of authorized users. In a variant, a control of the transmitted parameter is performed using a backend infrastructure, when the link can not be produced. An energy session occurs when authentication has been successful and when the link has been generated or when a backend control gives a positive control result.

With the aid of the proposed method, the electric vehicle is first learned in a link phase: the link phase, which starts with the start signal, enables a certificate to be put into play which, without control of its origin, for example by means of a check of a certificate of origin, becomes trustworthy and which is taught to the 201 electric vehicle as a trustworthy certificate. The vehicle 201 may already have previously entered security relationships, for example, with public load columns. A safety mechanism possibly present on the electric vehicle 201 prevents the implementation of an additional certificate, which is allowed only by the introduction of the link phase by the start signal. So we would temporarily disconnect a security mechanism. The data communication channel 101 extends independently of the transmission path so that an embodiment for a scenario with an inductive load also becomes possible simply. Another exemplary embodiment is described with reference to FIG. 2. As the first participant 101, an electric vehicle is now used and as second participant 201, a charge column 201. The electric vehicle 101 and the charge column 201 may be connected to each other by a charging cable. The charging cable consists of a transmission channel 10 and a data communication channel 11. It further has a communication unit 300, which can be controlled by a user by means of a user interface on the charging cable. As a user interface, for example, a keyboard can be used on which numbers and letters can be entered. It is also advantageous to integrate a USB key as an interface. In the second exemplary embodiment, a data-specific characterization D for a session of the electric vehicle 101 is transmitted via the data communication path. The load column 201 then provides a self-signed PS2 certificate, which is called a Self Signed Certicate which, depending on the session-specific characterization D that has been transmitted, is set on the basis of a certificate of origin specifically for the 101 electric vehicle. The signed certificate itself is then stored by the electric vehicle in the form of a first PS1 session parameter. This method makes it possible to teach the charging column 201, an electric vehicle 101 being designated to the load column 201 as a user authorized by the production of the start signal at the user interface of the communication unit 300. After a successful initial connection, a mutual control of the certificates takes place during other charging operations, the electric vehicle 101 equalizing, in particular, a certificate of origin, which does not change, of a connected load column. by a load cable, the first PS1 session parameter and the load column equalizing the information obtained by the vehicle-specific certificate to the second session PS2 parameter.

The charge column 201 thus has a simple possibility of determining the number of existing security links. The load column 201 alternatively sends a load column certificate which at the same time has a string up to the certificate of origin. The electric vehicle 101 stores the original certificate as a first session PS1 parameter just as the load column 201 stores the PS2 certificate as the second session PS2 parameter.

Claims (5)

REVENDICATIONS1. A method of producing a power transmission link on a transmission path (10) between a first participant (101) and a second participant (201), characterized in that it comprises the following steps: - production of a initial connection by a data communication channel (11) different from the transmission channel (10), wherein: a start signal is generated to start the initial link, by a communication unit (300), transmits to the least one parameter (Pl) between the first participant (101) and the second participant (201) via the data communication channel (11), the second participant (201) stores at least one parameter (Pi ') transmitted by the data communication channel (11) or information derived therefrom; - production of a data communication link by the transmission channel (10), in which: by the first participant (101) at least one parameter (P1) is transmitted by the transmission channel (10), the first participant (101) is authenticated by the second participant (201) on the basis of an equalization of the at least one parameter (Pl ') transmitted by the data communication or information communication channel (11) which is deduced therefrom with minus one parameter (Pl ") transmitted by the communication link of data or information which derives therefrom; - production of the transmission link of energy on the transmission channel (10) as a function of a result of authentication. 2. Method according to claim 1, characterized in that a certificate (Z) or a fingerprint of the certificate (Z) is transmitted via the data communication channel (11) as parameter (P1). Method according to claim 1, characterized in that the data communication channel (11) is transmitted as parameter (P1) a session-specific characterization (D) from which the first participant (101) and / or the second participant (201) deduce, using an encrypted deduction function, a first session parameter (PS1) and / or a second session parameter (PS2). 4. A system for generating a power transmission link on a transmission channel (10) between a first participant (101) and a second participant (201), characterized in that it comprises: a unit (300) of communication for transmitting at least one parameter (P1) between the first participant (101) and the second participant (201) over a data communication path (101), the communication unit (300) having a communication device input for producing a start signal for starting an initial link; the first participant (201) for transmitting at least one parameter (P1) over the transmission path (10) and for producing a data communication link over the transmission path (10); the second participant (201) for memorizing at least one parameter (Pl ') transmitted by the channel (11) for communicating data or information which is deduced therefrom, for the authentication of the first participant (101) on the basis of an equalization of the at least one parameter (Pl ') transmitted by the channel (11) of data or information communication which is deduced therefrom with at least one parameter (Pl ") transmitted by the communication link data or information derived therefrom and for the production of the power transmission link on the transmission channel (10) according to a result of the authentication. 5. System according to claim 4, characterized in that it further comprises at least one other unit for use in one of the process steps according to claims 2 to 3.