TWI836601B - Charging control system with secure communication and method thereof - Google Patents

Abstract

The present invention is a charging control system with secure communication and a method thereof. When an electric vehicle is connected to a charging device, a battery management system of the electric vehicle communicates with the charging device through a charging control system. In order to ensure the security of communication between the two parties, the procedure of a verification certificate and a challenge can be used to verify the identity of both parties, so as to confirm that the two parties are legitimate connections, so that the battery management system and the charging device can continue to communicate and follow-up charging. In addition, under the secure communication between the two parties, more software and hardware data can be exchanged between the battery management system and the charging device, so as to perform applications of status detection, battery monitoring or software update.

Description

Charging control system with secure communication and method thereof

The present invention relates to the technology of electric vehicle charging control, and in particular, to a charging control system with secure communication and a method thereof.

Blade electric vehicle (BEV) refers to a vehicle that uses an onboard power source as a power source, uses an electric motor to drive the vehicle, and complies with various requirements of road traffic regulations and safety regulations. Electric vehicles use onboard power sources as a power source, reduce the consumption of non-renewable resources-oil, have zero emissions and no pollution, and have become the biggest hot spot in today's automotive industry.

With the rapid development of electric vehicles, technologies such as how electric vehicles and charging equipment are charged and how they communicate have also become research focuses. In the charging process of electric vehicles, after the charging equipment and electric vehicles are connected, they must be matched first. This process is mainly a handshaking process for data exchange. The purpose is to allow the two systems to determine the subsequent signal transmission and operation control of both parties through information exchange. Under current technology, the charging interface and charging procedure have certain specifications. When the industry designs the charging gun of the charging equipment or the charging port of the electric car, it must follow specific specifications so that it can be connected with other industry products. In this case, when the charging gun is inserted into the charging port, if the connection interface and communication mechanism of both parties meet the existing specifications, the two parties can be connected after the handshake procedure, but this also leads to other service problems. For example, even if the two parties complete the handshake, it only means that the connection between the two parties is in compliance with the specifications, but the communication between the two parties is not protected and the communication process lacks security; If the charging equipment operator only wants to allow its charging equipment to charge specific electric vehicles (who have become customers or paid), under the existing procedures, the charging gun can be connected when it is inserted into the charging port and both parties meet the existing specifications, and there is no way to identify the identity, which may lead to illegal (unexpected) vehicles completing the connection and charging, thus deriving service problems; in addition, if during the charging process, the electric vehicle and the charging equipment want to have further information exchange, that is, for example, data exchange of vehicle status, battery status, setting parameter update, etc., it may be difficult to implement without secure communication.

In view of this, how to provide a technology for safe communication of electric vehicles during the charging process, especially before charging, to confirm the identity of the linker, so that both parties can safely exchange information, thereby achieving communication security during the charging process, and even leading to follow-up Application services will become the goal that people in this technical field strive to pursue.

In order to solve the above problems of the prior art, the present invention proposes a safe communication mechanism for electric vehicles. In particular, after the charging device and the vehicle are connected, the two parties are confirmed to be legally connected through the process of certification and inquiry, so as to enhance the communication security of the two parties during the charging process or provide more services or applications under the communication security.

The present invention proposes a charging control system with secure communication, which is installed on the vehicle side and used to provide communication links between the battery management system and charging equipment on the vehicle side. The charging control system includes: a voucher providing unit for Receive a certificate request from the battery management system to provide certificate information according to the certificate request and send it back to the battery management system; and an inquiry processing unit is used to receive the certificate information generated by the battery management system after verifying that the certificate information is correct. Inquiry message to use the recharge The private key of the electrical device signs the query message and generates a response message and sends it back to the battery management system. After the battery management system verifies that the response message is correct, it is confirmed that the communication between the battery management system and the charging device is consistent. Permission to maintain the communication link between the battery management system and the charging device.

In one embodiment, the certificate message includes the public key of the charging device and is generated by signing with the private key of the charging device.

In one embodiment, the battery management system verifies the certificate message using the public key of the battery management system.

In one embodiment, the battery management system uses the public key of the charging device to verify the response message.

In one embodiment, when the battery management system and the charging device meet the communication authority, the battery management system provides the system status or battery status of the vehicle end for the background server connected to the charging device to perform diagnosis or monitoring, or the background server provides new software data for the charging control system or the battery management system to perform software updates.

The present invention further proposes a charging control method with secure communication, in which a charging control system provides a communication link between a battery management system on a vehicle side and a charging device. The charging control method includes: allowing the battery management system to issue a certificate request; after the charging control system receives the certificate request, providing a certificate message according to the certificate request and returning it to the battery management system; allowing the battery management system to verify the certificate message After the charging control system receives the inquiry message, it signs the inquiry message with the private key of the charging device and generates a response message and sends it back to the battery management system; and after the battery management system verifies that the response message is correct, it confirms that the communication authority between the battery management system and the charging device is met, so as to continue the communication link between the battery management system and the charging device.

In the aforementioned method, the certificate message includes the public key of the charging device and is signed with the private key of the charging device.

In the aforementioned method, the battery management system uses the public key of the battery management system to verify the certificate message.

In the aforementioned method, the battery management system uses the public key of the charging device to verify the response message.

In the foregoing method, it further includes: provided that the battery management system and the charging device meet the communication permissions, the battery management system provides the system status or battery status of the vehicle for backend service after the charging device is connected. The device is used for diagnosis or monitoring, or the backend server provides new software data for software updates of the charging control system or the battery management system.

In summary, the present invention proposes a charging control system and method with secure communication. The purpose is to ensure the security of communication between the two parties through the verification and inquiry procedures when the vehicle and the charging equipment are connected through the charging control system. In other words, Through the identity verification of both parties, it is ensured that the other party is a legal connector, so that the battery management system and the charging device can maintain connection and communication, and then perform subsequent charging and data exchange. The so-called data exchange refers to the two parties operating under communication security. Further data provision, for example, the vehicle side provides system status or battery status to the charging equipment side so that the charging operator can further analyze the information, or the charging operator side sends information to the vehicle side for vehicle or system side processing. Software update or parameter update, therefore, based on the present invention, the identity of the connector can be confirmed before charging, which not only ensures the security of communication between the two parties, but also can perform more diverse services such as monitoring, diagnosis or updating.

1: Charging control system with secure communication

11: Certificate providing unit

12: Inquiry processing unit

2:Battery management system

3:Charging equipment

201-209: Process

-

:程序

-

:program

S301-S305: Steps

Figure 1 is a system architecture diagram of the charging control system with secure communication of the present invention.

FIG. 2 is a flow chart of a charging control system with secure communication according to an embodiment of the present invention.

Figure 3 is a step diagram of the charging control method with secure communication of the present invention.

The following describes the technical content of the present invention through a specific concrete implementation form. People familiar with this technology can easily understand the advantages and effects of the present invention from the content disclosed in this manual. However, the present invention can also be implemented or applied through other different specific implementation forms.

After the existing charging equipment and electric vehicles are connected, they will perform an initial handshake procedure to allow the two parties to exchange information and know each other's hardware and software specifications so as to carry out the charging procedure. In the existing technology, if the connection interface and communication rules of the two parties meet the existing specifications, the charging procedure can be executed after the handshake is completed. In this case, it is impossible to ensure whether the connector is the expected connector, which will cause problems in the management of the charging equipment. Therefore, it becomes necessary to confirm the identity of the other party. Based on this, the present invention proposes to use a secure communication mechanism to ensure that the two parties are legally connected through processes such as certificates and challenges, thereby providing security services and other applications.

FIG1 is a system architecture diagram of the charging control system with secure communication of the present invention. As shown in the figure, the charging control system with secure communication 1 of the present invention can be set at the vehicle end to provide a communication link between the battery management system 2 of the vehicle end and the charging device 3, wherein the charging control system with secure communication 1 includes a certificate providing unit 11 and an inquiry processing unit 12.

The certificate providing unit 11 is used to receive the certificate request from the battery management system 2, and to provide the certificate information according to the certificate request and return it to the battery management system 2. In short, in order for both parties to confirm that they are legally connected, the battery management system 2 on the vehicle side will first send a certificate request to the charging control system 1 with secure communication to request a certificate, and the certificate providing unit 11 uses the public key and private key of the charging device 3 to provide the certificate message to the battery management system 2 according to the certificate request. The certificate message returned to the battery management system 2 does not include the public key of the administrator. The administrator mentioned here is the car manufacturer or vehicle developer who owns the battery management system 2.

In one embodiment, the certificate message is generated by including the public key of the charging device 3 and signed with the private key of the charging device 3. Specifically, the certificate message provided by the certificate providing unit 11 includes the public key of the charging device 3 and is signed using the private key of the charging device 3.

The query processing unit 12 receives the query message generated by the battery management system 2 after verifying that the certificate message is correct, signs the query message using the private key of the charging device 3, and generates a response message and sends it back to the battery management system. 2. After the battery management system 2 verifies that the response message is correct, it is confirmed that the communication permissions between the battery management system 2 and the charging device 3 are met, so as to continue the communication between the battery management system 2 and the charging device 3 link. In short, after receiving the certificate message returned by the charging control system 1 with secure communication, the battery management system 2 will first perform verification. If the verification is successful, an inquiry message will be generated. After the inquiry processing unit 12 receives the inquiry message, The private key of the charging device 3 will be used to sign the query message to generate a response message. The response message will be sent back to the battery management system 2. In this case, both parties confirm that they are legally connected to each other, that is, both parties have communication permissions. , so that subsequent charging or other information exchange can be carried out.

In one embodiment, the battery management system 2 verifies the certificate message using the public key of the administrator, where the administrator refers to the car manufacturer or vehicle developer that owns the battery management system 2 . In short, after receiving the certificate message, the battery management system 2 verifies it with the administrator's public key. If the verification is successful, it will further generate a query message. If the verification fails, the connection between the two parties will be stopped.

In one embodiment, the battery management system 2 uses the public key of the charging device 3 to verify the response message. Generally speaking, when the battery management system 2 receives the response message from the charging control system 1 with secure communication, it will use the public key of the charging device 3 for verification, and the public key of the charging device 3 was previously randomly assigned. The certificate message is sent to the 2nd end of the battery management system. If the verification is successful, that is, the 3rd end of the charging device has the correct private key, the verification of both parties is completed and the connection between the two parties is maintained. That is, subsequent charging procedures or data exchanges can be performed. If verified If it fails, the connection between the two parties will be terminated.

In another embodiment, when the battery management system 2 and the charging device 3 meet the communication authority, the battery management system 2 can provide the system status or battery status of the vehicle end for the background server connected to the charging device 3 to perform diagnosis or monitoring, or the background server can provide new software data for the charging control system 1 with secure communication or the battery management system 2 to perform software updates. In short, if both parties are correctly connected, encryption can be performed through public keys and private keys, so that the communication between the two parties is in a secure state. Moreover, based on the secure communication, the two parties can exchange more detailed information.

For example, the vehicle side can provide the status of the vehicle's internal system, so that the background server connected to the charging device 3 (that is, the charging device provider and manager) can perform status analysis, and promote more services by collecting big data. For example, if the internal system of the vehicle coming to charge is in a certain state, the background server can help determine whether this state needs to be reported, so as to provide more services; secondly, the vehicle side can provide its battery status, which can also help the driver know as soon as possible whether it needs to be replaced. In addition, if both parties confirm that each other is a legitimate user, the background server can send some information to the vehicle or the charging control system with secure communication 1. That is, if the parameters in the battery management system 2 or the charging control system with secure communication 1 on the vehicle are adjusted or the system program is updated, the background server can send the relevant parameters or update program for the vehicle to update the parameters, update the software or modify it.

From the above, it can be seen that the present invention ensures the security of communication between the two parties through the verification and inquiry procedures after the vehicle is connected to the charging device 3, so that subsequent charging procedures can be carried out after confirming that each other is a legal connector. Specifically, in addition to completing the tasks of communication compatibility and timing matching between the vehicle side and the charging equipment interface side, the charging control system 1 with secure communication can also diagnose the vehicle side system status, monitor the battery pack and utilize public and private information. The key is used for encrypted communication. Furthermore, if the charging equipment 3 can cooperate with related information integration applications, it can provide online diagnosis of related systems (such as battery management system 2, charging control system 1 with secure communication (such as electric vehicle charging) communication equipment (EVCC)) and online diagnosis of charging equipment 3), and can integrate online update and other functional applications (Bootloader for OTAupdate) to update software functions through charging equipment 3 corresponding to the charging control system 1 with secure communication, and even It can be updated corresponding to vehicle system components such as the battery management system 2 on the vehicle side.

FIG. 2 is a flow chart of a charging control system with secure communication according to an embodiment of the present invention. This embodiment uses the Transport Layer (TP) of the Controller Area Network (CAN) as an example to illustrate the message transmission process between the vehicle side (such as the battery) and the charging equipment side (such as the charging pile). More specifically, Generally speaking, the left half represents the battery management system (BMS) or battery on the vehicle side, and the right half represents the charging control system and charging equipment. This distinction is only a functional division, not a location division. The charging control system (such as electric Vehicle charging communication equipment (EVCC) is still installed on the vehicle side.

。 In process 201, a certificate request is generated. This process is to explain that the battery management system on the vehicle side issues a certificate request after connecting to the charging device. The purpose is to ensure whether the two parties are legally connected and communicating. The certificate request will be sent to the charging control system, which is the process in Figure 201.

.

。 In process 202, the certificate message is sent. This process explains that after receiving the certificate request, the charging control system will send a certificate message. The certificate message will include the public key of the charging device and be signed with the private key of the charging device. The certificate message does not contain the administrator's password. public key, and the certificate message will be sent to the battery management system, which is the program in the picture

.

In process 203, the digital certificate authority (Certificate Authority, CA) certificate information is verified. This process explains that the certificate message sent by the charging control system is generated by the digital certificate certification authority based on the public key and private key provided by the charging equipment. After receiving the certificate message, the battery management system will first verify it. Here is The administrator's public key is used for verification, which is the public key of the car manufacturer or vehicle developer that owns the battery management system. If the verification is successful, process 204 is entered. If verification fails, process 209 is entered, which means the communication and connection between the two parties are stopped.

。 In process 204, a query message is sent. This process confirms that the verification of the voucher message is successful in the previous process, and then generates and sends an inquiry message to the charging control system, which is the program in the figure.

.

In process 205, the inquiry message is signed. This process illustrates that the charging control system signs the inquiry message sent by the battery management system. Specifically, it signs with the private key of the charging device. The private key here can be the same as the private key that generates the certificate message, or Under different applications, a different private key may be used to sign the certificate message.

。 In process 206, a response message is sent. This process is to illustrate that the charging control system generates a response message based on the query message and then sends the response message to the battery management system.

.

In process 207, the response message is verified. This process is for the battery management system to verify the response message after receiving it. Specifically, it uses the public key of the charging device to verify. If the verification is successful, it enters process 208. If the verification fails, it enters process 209, that is, the communication and connection between the two parties are stopped.

In process 208, the service is continued. This process is a continuation process if the verification result of process 207 is successful. That is, if it is verified that the charging device has the correct private key, it means that the verification of the response message is successful. In this case, the battery management system and the charging device can maintain a connection to perform subsequent services.

Figure 3 is a step diagram of the charging control method with secure communication of the present invention. Please also refer to Figure 1. This embodiment illustrates a charging control system 1 with secure communication on the vehicle side, which can provide a communication link between the battery management system 2 on the vehicle side and the charging equipment 3, and through certificate verification and inquiry. Confirm that the other party is a legal connecter.

In step S301, the battery management system 2 is caused to issue a certificate request. Specifically, when the charging device 3 is connected to the battery management system 2, the charging control system 1 with secure communication is responsible for the connection between the two parties. However, in order to ensure the identity of the other party, the battery management system 2 issues a certificate request.

In step S302, after the charging control system 1 with secure communication receives the certificate request, it provides a certificate message according to the certificate request and returns it to the battery management system 2. In this step, after receiving the certificate request, the charging control system 1 with secure communication will use the public key and private key of the charging device 3 to generate a corresponding certificate message and return it to the battery management system 2, wherein the certificate message includes the public key of the charging device 3 and is signed using the private key of the charging device 3.

In step S303, the battery management system 2 verifies that the certificate message is correct and then generates a query message. This step is to explain that when the battery management system 2 receives the certificate message, it will verify the certificate message. If the verification is successful, it will further generate a query message.

In step S304, after the charging control system 1 with secure communication receives the inquiry message, it uses the private key of the charging device 3 to sign the inquiry message and generates a response message and sends it back to the battery management system 2. Specifically, the charging control system 1 with secure communication receives the data from the battery management system 2 After querying the message, the private key of the charging device 3 can be used to sign the query message, thereby generating a response message and sending it back to the battery management system 2 .

In step S305, after the battery management system 2 verifies that the response message is correct, it confirms that the battery management system 2 and the charging device 3 meet the communication permissions, so as to continue the communication between the battery management system 2 and the charging device 3. Communication links. This step explains that after the battery management system 2 receives the response message and verifies that the response message is correct, it means that the other party is a legal connecter, so the connection between the two parties is maintained so that the charging process or data exchange can be performed later.

After step S305, it indicates that the battery management system 2 and the charging device 3 have the authority to communicate with each other. In this case, because the communication between the two parties is in a safe state, the two parties can exchange more information. For example, the vehicle side can provide the vehicle internal system status or battery status to the background server connected to the charging device 3, so that the background server can perform status analysis. In addition to collecting big data, it can also help determine whether the vehicle side system status or battery status is normal, so that more services can be provided in addition to charging. In addition, if both parties confirm that each other is a legitimate user, the background server can send some information to the vehicle side or the charging control system 1 with secure communication to update parameters or software. That is, if the background server determines that the vehicle side system software or setting parameters need to be updated but have not been updated, the background server can send relevant parameters or update programs under the security of the communication between the two parties, so that the vehicle side can update or modify the parameters and software.

It should be noted that the system, module, unit, etc. described in the present invention can be composed of software, firmware or hardware components, and can also be implemented through a physical circuit structure. For example, the connection interface between the battery management system and the charging device is a physical component. , the relevant circuits are physical circuit structures, and the voucher providing unit, query processing unit and other units can be completed by a combination of software and hardware, but are not limited to this, and the relevant circuits or institutional components will not be described in detail here.

To sum up, the charging control system and method with secure communication of the present invention uses the verification certificate and inquiry procedures to ensure the security of communication between the two parties when the vehicle and the charging equipment are connected through the charging control system, and the identity of both parties is guaranteed. After verification and confirmation that the other party is a legal connector, the battery management system and the charging device can maintain a communication link, and can perform subsequent charging and further data exchange. The data exchange part can, for example, transfer the vehicle system status as mentioned above. Or the battery status is provided to the charging equipment end so that the charging operator can further analyze the information, or the charging equipment end transmits update information to the vehicle end for software or parameter update of the vehicle or system. Accordingly, the present invention not only It can ensure the security of communication between both parties, and also perform multiple services such as system status diagnosis, battery monitoring or software updates.

The above embodiments are only illustrative and not intended to limit the present invention. Anyone familiar with this technology may modify and change the above embodiments without violating the spirit and scope of the present invention. Therefore, the scope of protection of the present invention is defined by the scope of the patent application attached to the present invention. As long as it does not affect the effect and implementation purpose of the present invention, it should be covered by this public technical content.

1: Charging control system with secure communication

11: Voucher providing unit

12: Inquiry processing unit

2:Battery management system

3: Charging equipment

Claims (10)

A charging control system with secure communication is provided on the vehicle side to provide a communication link between the battery management system on the vehicle side and the charging device. The charging control system includes: The certificate providing unit is used to receive a certificate request from the battery management system, provide certificate information based on the certificate request and send it back to the battery management system; and The inquiry processing unit is used to receive the inquiry message generated by the battery management system after verifying that the certificate message is correct, and to generate a response message after signing the inquiry message using the private key of the charging device. The response message is then sent back to the battery management system. After the battery management system verifies that the response message is correct, it confirms that the communication authority between the battery management system and the charging device is met, so as to continue the communication link between the battery management system and the charging device. A charging control system with secure communication as described in claim 1, wherein the certificate message includes the public key of the charging device and is signed with the private key of the charging device. A charging control system with secure communication as described in claim 1, wherein the battery management system verifies the certificate message using the public key of the battery management system. A charging control system with secure communication as described in claim 1, wherein the battery management system verifies the response message using the public key of the charging device. As described in claim 1, the charging control system with secure communication, wherein, under the communication authority between the battery management system and the charging device, the battery management system provides the system status or battery status of the vehicle end for the background server connected to the charging device to perform diagnosis or monitoring, or the background server provides new software data for the charging control system or the battery management system to perform software updates. A charging control method with secure communication, in which the charging control system provides a communication link between the vehicle-side battery management system and the charging equipment. The charging control method includes: Cause the battery management system to issue a certificate request; After the charging control system receives the certificate request, it provides the certificate information according to the certificate request and sends it back to the battery management system; The battery management system verifies that the certificate information is correct and generates an inquiry message; After the charging control system receives the inquiry message, it uses the private key of the charging device to sign the inquiry message, generates a response message and sends it back to the battery management system; and After the battery management system verifies that the response message is correct, it confirms that the communication permissions between the battery management system and the charging device are met in order to continue the communication link between the battery management system and the charging device. As described in claim 6, the charging control method with secure communication, wherein the certificate message includes the public key of the charging device and is signed with the private key of the charging device. As described in claim 6, the charging control method with secure communication, wherein the battery management system verifies the certificate message using the public key of the battery management system. The charging control method with secure communication as described in claim 6, wherein the battery management system uses the public key of the charging device to verify the response message. The charging control method with secure communication as described in claim 6 further includes: provided that the battery management system and the charging device meet the communication authority, the battery management system provides the system status or battery status of the vehicle, For diagnosis or monitoring by the backend server connected to the charging device, or for the backend server to provide new software data for software updates of the charging control system or the battery management system.

Images