WO2012123135A1

WO2012123135A1 - Charging station for electrical vehicles, system and method for operating a charging station

Info

Publication number: WO2012123135A1
Application number: PCT/EP2012/050406
Authority: WO
Inventors: Armin Gaul
Original assignee: Rwe Ag
Priority date: 2011-03-11
Filing date: 2012-01-12
Publication date: 2012-09-20
Also published as: DE102011013741A1; EP2684162A1

Abstract

The invention relates to a charging station for electrical vehicles having a location determining device configured to receive location information, a storage device configured for saving location information and a comparison device configured for comparing the received location information to the saved location information. In order to ensure that a charging station generates measurement values having verifiable location information, according to the invention the saved location information is replaced by the received location information in the case of a negative comparison result and an entry concerning the changed location information is additionally generated in a log book.

Description

Charging station for electric vehicles, system and method for

Operating a charging station

The subject matter relates to a charging station for electric vehicles, and a system and method for operating a vehicle

Charging station.

The distribution of electrically powered vehicles is

probably increase rapidly in the near future. With the

However, the spread of electric vehicles powered by an electric motor should be ensured that they can be supplied with energy in the simplest way possible. For this purpose, a functioning infrastructure should be made available.

In particular, the possibility should be given of obtaining energy for electric vehicles in public areas. In the previously available ranges of

Electric vehicles between 50 and a few 100 km, it is appropriate that even outside the home environment, a vehicle charging is possible. This should be done in

Public areas charging stations are provided to ensure a constant availability of energy for

To provide electric vehicles through a supply network. This availability of electrical energy or of charging stations is a decisive criterion for the acceptance of electric vehicles. However, in the case of charging stations installed in public areas, it must be ensured that the customer has the

paid related energy. It should also be ensured that the customer has knowledge of the expected costs before obtaining electrical energy. According to the

In the traditional refueling process, the customer should know what costs to expect immediately before charging the battery. For example, the customer should get the price for one

Kilowatt hour be known. In addition, must

It must be ensured that the customer actually only gets the amount of energy that he has purchased. Finally, it must be ensured that the customer can be shown that the

Billing data actually from the charging station, the

Energy meter (meter / counter) come from where he has actually performed the charging process. Out

For legal reasons, ensure that there is a clear relationship between charging location and meter

can be produced.

From a legal point of view, the integrity, authenticity and verifiability of the charging station and the billing center are particularly important

Pay attention to billing data. So it is necessary that the data on the amount of charge remain unadulterated. Also for billing purposes is a transmission of measurement data

(Billing data) from the charging station to a

Secure billing system against tampering. The user must be able to ensure and verify that only the energy purchased by him is charged.

Finally, it must be ensured that

billing-relevant data come only from the charging station, at the charging process (refueling) actually

took place.

For this reason, the object was the object of a method and apparatus available

provide a secure billing of over one

Ensure charging station related energy.

This object is solved objectively by a charging station according to claim 1, a system according to claim 7 and a method according to claim 10.

When charging, the electric vehicle draws electrical energy from the charging station. In the charging station, this electrical energy is using an energy counter

(Meter, meter) measured. During the charging process as well as at the completion of the charging process, it is necessary that the amount of energy purchased for billing purposes is detected. In addition to the calibration of the energy meter itself, it is necessary that the customer can check that one

Charging was done at a specific time at a specific location at a specific charging station. It must be avoided that the operator can charge the customer for an amount of energy that has been recorded by an energy meter to which the customer has not loaded. Thus, in addition to securing the communication between charging station and billing center also a legal security and verifiability of the

Counter information, especially the location as well

Time information to provide. For this reason, it is proposed that the charging station first receives location information. For this the

Charging station preferably via a

Location determining means adapted to receive the location information.

Location information may include location information e.g. in the

Plain text, as well as position information, such as GPS data or longitude and latitude and in addition the number of a meter among several meters on one

be specific place. The location information is preferably associated with a specific counter, so that with the help of the location information and the counter information is verifiable, which counter is placed at which location.

The location information is preferably stored in a memory in the charging station.

Before a storage process, however, a comparison of the received

Location information with stored location information

carried out. Using this comparison, it is possible to check whether the location information has changed or not. As a rule, a meter is permanently installed in a charging station and the charging station is fixed in one place

Installed. If the charging station is now moved to another location, the location information of the counter must be updated. Serve this purpose

representationally transmitted location information.

At the same time, it must be ensured that the customer

Can check if the meter, over which he has the energy is also the one counter that is assigned to the place where he has obtained the energy. For this purpose, the location information is preferably publicly accessible together with a counter identification.

The customer can during the loading process the

Record counter identification or charging point ID or charging station ID and via this counter identification or charging point ID or charging station ID and the publicly accessible

Assignment check whether the meter, through which he has obtained the energy, actually assigned to the place where he has obtained the energy. Dodge this information

from each other, the customer must have an aid to

Provided to prove this to the operator. In addition, the operator must have the opportunity to prove that a particular meter has been set up at a particular location at a specific time and that manipulation of that information is not permitted by law.

For this reason it is suggested that at a

negative comparison result, e.g. in case the location information has changed, the received

Location information replaces the stored location information. This ensures that current location information is always kept in a counter. A change of the location information is objectively recorded in a logbook. Thus, it can be checked afterwards, whether a new meter location information has been assigned or not. With the help of the currently stored location information, the charging station or the counter can transmit billing-relevant data to a billing center. The customer receives an invoice based on the billing-relevant data. On the invoice is noted at which place, at what time and at which counter a billing-relevant operation has taken place. At the same time, the customer can check whether this information matches the information he has collected during the refueling process. During the charging process, the customer can at least the location information as well as the

Enter counter identification. If it compares these with the billing data, it can detect a deviation.

If there is a deviation, the user can do this one

The calibration authority or its operator. Then it can be checked whether the relevant meter is actually set up at the specified location or not. It can also be checked if the counter is new in the past

Has received location information. Only if it can be shown that the relevant meter was installed at the specified place at the relevant time can proof of the correctness of the invoice be provided.

To improve the verifiability, a

publicly accessible information is kept ready, in which each meter location information is assigned and additionally preferably a public meter key (meter key). Are the billing-relevant data from the charging station or the counter with the

Meter key, preferably the private one Meter key, signed, it can be checked on the basis of the public meter key, whether the billing-relevant data actually come from the respective meter.

To allow the user of the vehicle, the

Checking billing data becomes electronic

Signing and transmitting a data packet from the

Charging station proposed to the billing center.

In the following, the terms "signature", "sign" etc are used in the sense of an electronic, technical data signature. It can also be ensured by the electronic signing of the data packet that this is no longer subsequently manipulated.

In addition to the amount of energy, the charging station also detects at least the location information of the charging station, and preferably also an identification of the measuring device. This can be a device number. The identification of the measuring device can also be the additional identification of the charging station.

With the help of at least these values becomes a data package

created. The data packet can be next to the meter reading

(Meter counter reading) and the location information also a meter status (meter status), a

Counter identification (measuring device identification), one

Charging station identification, a time information, a

Date information and / or public

Meter key and possibly others

Have information. A data packet is electronically signed in the charging station. This makes it possible to check the authenticity and integrity of the data packet. The electronically signed

Data packet is sent objectively to the billing center.

With the help of a unique, from the data package and the meter (counter) or the charging station assigned

Key, preferably binary value, a signature can be calculated. From the data package can a

Reference value, such as a hash code to be calculated. This reference value can also be used to calculate the signature. This signature can be calculated, for example, by means of the hash code and a key assigned to the measuring device (counter) or the charging station. Also, a signature directly from the data packet and the meter (counter) or the charging station associated key can be calculated. Signing can be a creation of a cryptogram as a signature with the aid of a preferably binary key, wherein a preferably binary cryptogram is created with the help of the key and the data packet to be signed or the reference value created therefrom. By means of such a cryptogram, it is possible to check whether the data packet was actually created by the charging station.

For example, it is possible during a charging process, that the user at the beginning of a charging the

Measuring device identification, which is for example arranged outside the housing of the charging station, notes and additionally the location information, such as location, address, connector number (if there is more than one charging plug on a charging station in one place). In addition, the user can note the time of the start of the charging process. At the end of the loading process, the user can again record the prehistoric time.

If this location information along with the

Messgerätzählerstand become part of the respective data packet, it can be checked by means of a signature of this data packet whose authenticity by the user, if the user also knows the public meter key.

The charging station creates a data packet which

for example, the location information as well

Contains measuring device identification. In addition, that can

Data package includes the meter reading and the meter status. In addition, for example, a contract or customer identification may be included in the data packet.

The meter status can be information about the

technical functionality of the charging station, e.g. a binary value indicating whether the charging station is working properly.

With the help of the private meter key, a

Signature can be created from this data package. The signature together with the data packet can be transmitted from the charging station to the billing station.

The signature of the data packet ensures that the measured value contained in the data packet and the

Location information is inextricably linked. If one of the two values is changed, another would result Signature. Since the user can capture the location information himself, he can also manipulate the measured value

determine . In order to be able to ensure, in addition to the authenticity of the transmitted data packet, that the location information associated with a counter is correct

suggested that each meter knows its location and recognizes changes thereto and notes with legal certainty.

For this purpose, a central, first server can be provided. The first server is physically located away from the charging station. The first server can change the location information (location information) of each counter. It is also possible that the first server the

Location information stored in the memory device of each counter can read out. The assignment of meter identifications to location as well as meter key of the meter may be noted in a master file provided to the first server. With the help of this list, the first server in

Periodically, or randomly, renew the location information in the charging stations / counters. For this purpose, the first server can transmit the location information to the charging station. This can be a wired or wireless

Communication line are used. In order to check whether the location information has actually been received at the correct charging station, it is also provided that the charging station receives the received location information preferably signed back to the first server. With the help of the master file, it is possible to assign one-unique location information to each individual meter. This assignment is noted in the master file.

The assignment between location and counter identification noted in the master file can be made public

accessible inventory list, e.g. on one

Internet server. In addition, the public meter key may be noted in the inventory list.

With the help of the inventory list or the master data, the first server at intervals, for example, monthly,

weekly, daily, preferably cyclically inform each counter of its current location information. For this purpose, the first server sends to each location determining means of each charging station the location information corresponding to the first one

Servers are known for this counter. The storage device takes over the received

Location information. At once, a comparison is made as to whether the received location information matches previously stored location information. If this is not the case, the change in the location is noted in an internal logbook.

In this way, all relocations of the counter are tracked in the log file of the charging station. If now, as proposed, a transmitting device, the stored location information together with at least one count of an energy quantity counter and / or a Identification of the energy quantity counter and / or a

Time information and / or status information and / or customer information, preferably signed, transmitted to a second server are the relevant in the billing-relevant data and thus the customer documents

Location information included. Since these are signed, their authenticity can be assumed. It is not possible to generate a customer receipt to a location other than the location stored in the counter.

The customer can now check if the location of the

Customer record with the location he has recorded. If not, may be a manipulation

available. To verify this, the customer can use the

Counter identification or charging point ID or charging station ID, which he has also noted, the operator or the

Notify the calibration authority.

From there, the log file of the named counter can be read out. It turns out that the location information has remained unchanged, and they agree with the

actual location of the charging station, so a manipulation is excluded. On the other hand, this is detectable, if one

Change of location has taken place since this in the

Logbook was updated. Finally, there would be a manipulation if the published assignment of counter to

Location did not match actual. Even then, the customer document would be faulty. Since each charging station / meter knows its location number and stores its history of the location information in the logbook, it is possible to check with a simple sample whether a meter was used for a particular location at any given time in its life. It is also possible to verify in the sample whether the meter is currently installed in the right place.

Finally, the method recognizes whether site changes have occurred since the meter itself tracks the location at which the meter is used.

As already described, it is also proposed that the transmitting device store the currently stored location information together with further billing-relevant data, a second server, preferably a billing center

transmitted. This is preferably done with the help of a signature created with a private meter key.

It is also proposed that a counter identification is attached to a visible from outside the charging station nameplate. This ensures that the customer can note down the meter identification or charging point ID or charging station ID. The nameplate must be located captive on the charging station. Also, the nameplate must be secured by calibration, which means that of this nameplate only a single copy exists and this is preferably provided with a calibration seal. Then it can be ensured that the externally visible

Type plate can be uniquely assigned to the meter. To prevent manipulation of the log file is

suggested that entries in the logbook be secured against deletion accesses. This may mean that deleting entries can not be controlled. If the log file is formed from a ring memory, deletion of entries may occur during a memory overflow. However, this is only the case if many entries are made in the log file. Since a counter is usually fixed in place, however, a change in the location information is usually rare to never before, so that the log file usually has only very few entries.

According to an advantageous embodiment, it is also proposed that a signature device signs the data to be transmitted from the transmitting device to the second server with a measuring device key, preferably a private measuring device key. The

Signature device is preferably with the

Energy meter connected in the charging station and receives from the power meter a meter key. This is preferably a private meter key. With the help of the signature device and the private meter key, the billing-relevant data can be signed.

Billing-relevant data are at least meter reading as well as location information. These can be signed to the second server. As will be explained above and below, signing is a method by which the authenticity of the transmitted data can be ensured.

Another aspect is a system with a charging station, as previously explained. The system is the first one Server responsible for providing the charging stations or the energy meter used therein with location information. For this, the first server can use the

Location information associated with meter identifications received. In particular, this may be part of a

Inventory list or a master data file. A

Master data file can be transferred to the first server, preferably encrypted. The first server may then at intervals, preferably cyclically, preferably regularly, transmit the received location information to the respective counters of the charging stations. This will be the

Location information kept up to date in the charging stations.

A counter in a charging station always knows exactly one

Location information, namely the one communicated to him by the first server. Whether this location information with the

Actual location of the counter match, the counter can not verify. Rather, this review is the responsibility of the customer, who can check in his account, whether the communicated to him location information of a counter with the noted by him location information. at

If there is a lack of agreement, the customer may request a review. In addition, according to an advantageous embodiment, the system has a second server which

preferably a billing server. This receives billing-relevant data from the charging station, the at least location information as well as a count of a

Energy meter included. In addition, billing-relevant data can also be an identification of the energy quantity counter, a counter ID, a time information, status information, customer information or the like. Other billing-relevant data has already been mentioned and will be mentioned below. Preferably, the second server receives the

billing-relevant data signed by the charging station. The signature may preferably be with the help of the private

Meter key of the counter of the charging station have been performed. In order to enable a user to check his billing data, an association between location information and one is preferably in the area of the first server

Counter identification held. In addition, a public meter key of the energy meter may be associated with this data. This information may be made publicly available in an inventory list. With the help of this publicly accessible list, the customer can check whether the billing-relevant data record actually originates from the counter that was located at the place where the loading process was carried out. As soon as there is a discrepancy between the billing data and the data made available to the public, there may be a manipulation that the customer can check. Another aspect is a method for operating a charging station, in particular a charging station for

Electric vehicles with the steps of receiving

Location information, comparing the received

Location information with stored location information, wherein in a negative comparison result, the stored location information by the received location information be replaced and additionally an entry the changed location information concerning in a logbook is generated.

At the end of a billing period, the user receives an invoice from the grid operator / energy supplier / charging station operator for the amount of energy he has purchased. In this bill, for example, every load

Be associated with location information. In addition, each invoice item can have more

billing-relevant data we e.g. the

Meter identification, such as a charging point ID, as well as a counter number assigned. In addition, the start and end meter readings as well as the start and end times (time, date) can be assigned to each invoice item. With this information, the customer can be informed in the invoice the amount of energy consumed for each charging process. In addition, the customer together with the invoice for each invoice item information about the

Meter status as well as the signature used for the

corresponding data package was created. For each invoice item, e.g. two signatures are created. A first signature for the data packet created at the beginning of the load and a second signature for the data packet created at the end of the load.

Finally, the user can use the public

Get informed meter key. This can be done in a publicly accessible inventory list, an assignment between meter ID, location information and public Meter keys are published. With these

Information, the user can check the billing-relevant data. As the customer independently both the

Messgerätidentifikation as well as the place of the respective loading procedure noted, he can together with the

Additional information from the invoice, for example, charging time, charging period, charging point identification,

Counter number, counter ID, counter reading and public

Keys to individually review the given signature for each data packet. For this purpose, he can calculate the reference value, for example, by means of the signature notified to him and the means of the public key communicated to him. One

Reference reference value, the customer, for example, by means of the information noted by him and the additional

Calculate information from the invoice and check if the data is identical. Thus, the customer has the opportunity to verify the accuracy of the invoice items.

For example, the reference value or the data packet to be signed can be calculated back from the signature by means of a key known to the receiver, matching the signature key. For this purpose, for example, a comparison reference value based on the data packet can be calculated on the receiver side. Voices calculated reference value and

Compare reference value can be from one

Data integrity are assumed. For example, from user data (data packet)

Reference value can be calculated. From this reference value, a signature can be calculated with a private key. The signature can be combined with the user data in one

Data containers, as two separate files or embedded in the payload, are sent to a recipient. The recipient can calculate the reference value with a public key matching the private key from the signature. From the payload data also received, a comparison reference value can also be provided on the receiver side

be calculated. If the reference value and the comparison reference value match, the integrity, authentication, authenticity of the user data can be ensured.

Advantageously, the customer is communicated with the invoice for each data packet a separate signature. For each invoice item, resulting from two measurements

composed, namely the beginning and the end of a

Charging process, two data sets are available,

or in a tariff change (with three or four measurements) three or four data sets are available, namely start and end of the charging process and another record for tariff change or two records, one for the end of the first tariff and one for the end of the second Tariff, or the respective times within a tariff, each of which is assigned a signature. The first record determines the beginning of the loading process and contains additional information in addition to the location information

billing-relevant data such as

Meter identifications (charging point ID, meter number), meter reading and status word. For the end of the loading process, there is a second data record which contains the time of the end of the loading process. The same applies to the data sets in the case of a tariff change, to which time information, a meter identification and a meter reading are also assigned. For each record, a signature is calculated in the charging station, which is made available to the user in plain text. The correctness of the signature, the user can verify that he with the help of his notated counter identification or charging point ID or charging station ID and location information along with the notified him

Information about meter reading and status word as well as the public key can calculate a comparison signature and check whether the communicated signature and the calculated comparison signature are identical. The

Basic usability of a data set results for the customer from the fact that he compares the identification number of the charging point (counter) as well as time information (date and / or time) with his records.

Due to the fact that the communicated signature can be uniquely assigned to the data packet, the user could manipulate the value of the measuring device counter reading

determine. In that case, the signature communicated to him would no longer be identical to the signature he had calculated. A changed counter reading would be identical

Information about time of loading and / or

Lead meter identification to another signature. However, the customer preferably notes the location of the charging process as well as the measuring device identification itself, so that it can detect a manipulation in the area of the measuring device counter reading. The fact that a counter always uses only the location information that has been communicated to him, and this information is publicly available, can be checked whether the from Counter generated records were actually created in the place that is known to the user. Because every counter

Changes to the location information stored in a log file, can be checked later, whether the

Location information was changed in a counter.

Under an electronic signature can also with

information associated with electronic information that can be used to identify the signer or signer and verify the integrity of the signed electronic information. As a rule, the electronic information is electronic

Documents. The electronic signature thus fulfills the same technical purpose as a handwritten signature on paper documents. An electronic signature may include, among other things, a digital signature. The digital signature can be the purely data-technical, cryptographic signature, which uses cryptographic, mathematical methods. "Electronic signatures" can be data in electronic form, the other electronic

Data is attached or logically linked to them and that serve to authenticate.

Change values within the transfer

Data packets, it can be detected on the receiver side, for example in the vehicle, the billing center or by the user that the transmitted with the data packet signature does not match the received data packet and a change of

Data packets must have taken place. The comparison of the received signature with a calculated comparison signature or the comparison of a reference value with a Comparison reference value gives a difference between these two values for changed data.

According to an advantageous embodiment is

proposed that the data packet and the respective signature is created at least at the beginning and end of a loading and transmitted to the accounting station. In the

Billing station can thus be created from the two data packets an invoice item in which the

Changing the meter count is evaluated and based on this change, an amount of energy is calculated. Together with tariff information, an invoice amount can be determined with the calculated amount of energy. The fact that a signature was created for each data packet and the user automatically with each loading process

The location information can be noted, which are parts of the data package and thus relevant to the signature, the customer can verify by the signature, whether the invoice

underlying information is correct or not.

As explained earlier, from the

Billing station billing data to the related

Amount of energy will be provided. This billing data can be communicated to the user as part of an invoice. The bill can be made up of several elements. For example, a first page of an invoice may list the sum of the individual invoice items per tariff. A second page of an invoice can contain location information and start and end times for each invoice item

output. In addition to this, information about

Meter identifications, such as a charging point ID, as well as a counter number are output. In addition, can For each time a meter reading will be issued and indicated together with a tariff on the bill. Finally, for each charge the related

Amount of energy to be spent.

On another page can be an invoice for each

Bill item Output location information. In addition, the meter number or other meter identification may be output together with meter count and / or meter status. This data can be, for example

Be part of the data package. A signature can then be output in the same line, resulting from the specified data and the meter key.

Finally, a public key can be given on each page of the bill for each meter.

The public key can be used together with the

Information for each data packet to the user

have been notified, verifying that the signature is correct. Because the user both the place and the

If the meter number has been noted, it can check the signature for authenticity and integrity with the information it has noted down.

It is also possible that the above information is retrievable, in particular via a wide area network,

in particular via the Internet.

To ensure that the energy provider can not manipulate the billing data, which For example, by manipulating the public key, it is proposed that the public meter keys of meters of the meter be used

Charging stations are held by a logically and / or spatially separated from the accounting station computer. In particular, the public keys can be held at a calibration or testing center, so that manipulation by the energy provider is impossible. To the customer the verification of the billing information too

It is proposed that a program for

Calculation and / or verification of the signature for each associated meter counter reading is provided.

This program can, for example, from the online

available invoice data or even from the invoice data entered by customers to calculate the signature. For example, the customer can manually enter the time he has noted and the meter number he has noted. Along with this information, the program can be out of the

Billing information, such as the meter reading and the status word, using the public key to calculate the signature. This signature can then be automatically compared by the program with the signature contained in the billing data. However, the customer can also carry out this check himself, because of the

Program calculated comparison signature is printed in plain text and the underlying the invoice data signature was also issued in plain text. This program may be provided by a computer that is logically and / or physically separate from the accounting station. In particular, a verification center can provide this program in addition to the public keys. According to one embodiment, a pair of public meter key (PuM) and private meter key (PiM) may be stored in the meter or charging station. With the help of the private meter key (PiM) a first signature (SD) of the data packet can be created. For this purpose, for example, from a data packet

assigned reference value using the private

Meter key (PiM) to calculate a cryptogram. This reference value can be a hash code.

Receiver side, e.g. In a billing center or by the user, the authenticity and data integrity of the received data packet can be checked by the fact that the received cryptogram with the help of the receiver side

known public meter key is decrypted and the reference value is thus calculated. A comparison with a reference value calculated on the receiver side from the data packet makes it possible to check the data integrity.

For example, it is possible that the public

Measuring device key (PuM) in a billing center is known. Also, the public meter key (PuM) may be included in the data packet

A hash code can be calculated as a statistically unique reference value by means of a unique calculation method. A hash code may be a value determined from a finite variety of values. Due to the large number of possible hash codes, a change in the data record results in a changed hash code. That two

different records will produce a same hash code, depending on the number and type of coefficients Calculation of the hash code, extremely unlikely. For this probability, the method for calculating the hash value is essential. Examples of hash code

Calculation methods can be MD2, MD4, MD5, SHA, RIPEMD-160, Tiger, HAVAL, Whirlpool, LM hash or NTLM. Other methods, in particular cryptographic methods are also suitable.

A cryptological hash function should be at least one

Be one-way function. So-called one-way hash functions (OWHFs) fulfill the condition, one

To be one-way function, d. H. for a given output value h (x) = y, it is virtually impossible to find an input value x (preimage resistance). Besides, one is

Hash function better suited for cryptography, if possible no collisions occur. This means that for two different values x and x 'the hash value (Hash-Code) should be as different as possible: h (x) is not equal to h (x'). If this is always the case, then one can

Collision Resistant Hash Function (CRHF).

With the help of the first signature (SD) and in the

Billing center received data packet can also verify the authenticity and integrity of the charging station

created data packet to be checked. In the

Billing center or for the user the public meter key (PuM) is known. In addition, the signature was received in the charging station. From the signature can with the help of public

Meter key (PuM), a reference value calculated with a comparison calculated from the data packet. Reference value can be compared. This makes it possible to check whether the measurement data contained in the data packet has been manipulated on the communication link from the charging station to the vehicle and back and then to the billing center.

According to an advantageous embodiment, it is also proposed that a signature is determined by means of a SHA-256 method. Here, for example, a variant FIPS 180-2 can be used.

In particular, it is proposed that a signature is determined using an elliptic curve cryptography method. In this case, it is possible, for example, that a 192-bit ECC method is used.

According to an advantageous embodiment, it is also proposed that the data packet by means of a

asymmetrical method is signed. In this method, as previously explained, a private key is used for a signature and a public key, which is known on the receiver side, used for the decryption of the signature. In order to enable an assignment of a measured value to a measuring time, it is proposed that the data packet contains a time index. For example, a time index may be a seconds index that is strictly monotone increasing mathematically throughout the life of the charger and represents a natural number. With the help of this

With the help of the second index, it is possible to make an unambiguous assignment of the measurement time to a measured value. Also can an operating seconds counter can be used, which can be a monotonously growing natural number, whose goal is the

unique assignment of the time of an event to the legal time assumed as the reference system.

The charging station can also transmit the data packet created and signed at the beginning of a measurement and the data packet created at the end of a measurement to the billing center, from where the delta of the measured values

to be able to calculate the amount of energy taken.

A further subject matter is a method according to claim 19.

The aforementioned methods can also be called

Computer program or as on a storage medium

stored computer program can be realized. This charging station side and / or billing center side, a microprocessor for performing the respective

Process steps to be suitably programmed by a computer program.

The features of the methods and devices are freely combinable. In particular, features of the dependent claims, bypassing the features of

independent claims in isolation or free

being inventive in their own right.

Subsequently, the object is determined by a

Embodiments drawing showing explained. In the drawing show:

1 shows a schematic structure of a system for charging an electric vehicle. Fig. 2a-d exemplary data packets and signatures;

3 is a flowchart of an example

Procedure.

Fig. 1 shows a charging station 2 which via a

Connecting cable 4 is electrically connected to a vehicle 6. In the charging station 2 is a junction box 8 for

Connection of the connection cable 4 is provided. About the

Connection cable 4 are on the one hand transmitted energy and on the other hand data between the vehicle 6 and charging station 2 exchanged. At the charging station 2 is outside a not shown

Nameplate arranged. On this type plate the ID of the measuring device is indicated in clear text.

As a result, during a charging process, a user can also record and record the ID of the measuring device 10 in addition to the location of the charging station 2. Together with the information about the loading period, the user can then authentically check his billing data, as shown below.

The junction box 8 is electrically connected to a measuring device 10 (energy meter) 16. The measuring device 10 measures the electrical power that is output via the junction box 8 to the vehicle 6 via the connecting cable 4. The electric power is transmitted via an electrical connection 12 from an electrical outlet 12 Power supply network 14 based Coupled to the measuring device 10 is a computing unit 16 having a communication unit 16a and a signature unit 16b. The signature unit 16b may detect a unique identification associated with the charger 2 or the measuring device 10, for example a private measuring device key (PiM) 18a. Also, a public meter key (PuM) 18b may be detected. Further, a memory 18 in which location information and meter keys 18a, 18b

can be stored provided.

The arithmetic unit 16 is connected via a data network 20 to a billing center 22.

Furthermore, a further computer 23 is provided, which is logically and spatially separated from the billing center 22.

In particular, the computer 23 may be connected to the data network 20, e.g. a wide area network, e.g. connected to the Internet. The computer 23 can be operated, for example, in the rooms and / or under the supervision of a calibration authority.

Via the data network 20, users can access both the

Billing center 22 and the computer 23 access. At the billing center 22, users can

Retrieve billing data. In the computer 23, users may e.g. public meter key and / or

Obtain programs for calculating a comparison signature. In addition, users at the computer 23 can retrieve a publicly available inventory list. The inventory list contains a one-to-one association between meters 16,

Location information for each meter and public meter keys. For legal reasons, it is necessary

ensure that gauges 16 are a unique

Location must be assigned. Therefore, the computer 23 transmits cyclically or in change or regularly or irregularly to each charging station 2 from the

Inventory list obtained location information for the

Charging station 2.

In the charging station 2, this location information

receive. First, it is checked whether location information is stored in the memory 18. If not, the received location information is stored immediately. Further, in a log file backed up with legal certainty in the

Memory 18 notes the change of location information.

If already location information in the memory 18

are stored, this location information is read from the memory 18. Then they are read from the memory

Location information compared with the received location information.

If the location information is different, the received location information in the memory 18

stored. In addition, a log entry is created in the log file, which occupies the change of the location information.

If the location information is the same, the memory 18 is not changed and the log file is not changed.

In addition, the signature unit can receive the received

Location information using the private meter key 18a are signed and then transmitted via the data network 20 to the computer 23. This can

be checked whether the location information has actually been received in the right charging station 2.

By transmitting the location information to the

Charging station 2 ensures that a charging station 2 is always supplied with current location information. In addition, those stored in the charging station 2 vote

Location information matches that of the publicly disclosed inventory list. A change of the location information in the charging station 2 can be checked later, since this is noted in the log file. In addition, the computer 23 can read the currently stored location information via the data network 20 from each charging station 2 and compare it with the inventory list. As a result, it can also be checked by random sampling whether the data in the charging station 2 correspond to those of the inventory list.

In the vehicle 6, a communication unit 28 is provided in addition to a connected to a terminal 24 battery 26. The communication unit 28 enables the transmission and reception of data on the connection cable 4. Connected to the communication unit 28 is a

Signature unit 30. The signature unit 30 may be of the

Vehicle 6 detect a unique identification 32. During the charging of the vehicle 6 to the charging station 2, energy from the power supply network 14 in the

Battery 26 of the vehicle 6 fed. The amount of supplied energy is detected by the measuring device 10. The amount of energy, for example, a count of the

Measuring device 10, as well as the current location information from the memory 18 and other data, such as the identification of the charging station 2 and / or the identification of the meter 10, a time stamp, a time index, a status of the charging station 2 and / or a status the meter 10, an initial count, a final count and / or the like can be transmitted to the billing center 22.

For this purpose, the communication unit 16 transmits

Data packet, as explained in Figures 2. In the data packet 34, the aforementioned measured variables

get saved. In the data packet 34, a

public meter key (PuM) 34e. FIGS. 2 show the calculation of a data packet 34 and a signature which are present between charging station 2 and

Billing center 22 can be exchanged.

2a shows an exemplary first data packet 34, in which a counter reading 34a, location information 34b, optionally a measuring device identification 34c, optionally a time information 34d, optionally a public meter key (PuM) 34e and / or possibly further data 34f, such as optional Meter status, stored in a binary sequence. The meter identification 34c may be a unique identifier of the meter 10 and / or the charging station 2. For authentication of the first data packet 34, a signature 36 can be created. This is in a

Arithmetic section 38 uses the first data packet 34 together with a private meter key (PiM) 18a to compute a first signature (SD) 36. Thus, e.g. in the calculation step 38 a hash value from the first data packet are determined and this hash value can be converted into the signature (SD) 36 with the private meter key (PiM).

For the transmission of the first data packet 34 to the

Billing center 22, the first data packet 34 is packaged with the signature 36 in a record 40. The data record 40 is from the charging station 2 via the supply network 14 or the data network 20 or otherwise to the

Billing center 22 transmitted.

FIG. 2b shows the data record 40 formed from the first

Data packet 34 and the signature 36.

The data record 40 can be sent directly to the billing center 22. The data obtained from this can be used for billing, as described below. The user can check the billing data for authenticity and integrity using the signature 36 and his self-made notes.

For a customer with the help of the first signature (SD) and the public meter key (PuM), a check is possible, whether in the billing center 22 to

Billing purposes also used data packets 34 actually come from the charging stations 2, where he has obtained energy.

For this purpose, the user of the computer 23 from the

Inventory list of the public meter key (PuM) of the charging station, whose ID he has noted during the charging process, as well as the corresponding location information. He can do that

Compare charging station ID with a charging station ID on its invoice. The related to this charging station ID

Billing data (data packets) are each provided with a signature in the invoice. This signature, together with the time information and the loaded public meter key (PuM), can be downloaded by the user

Check charging station. For this purpose, the user can use a program loaded via the computer 23.

In addition, the user can check whether the location information associated with the charging station 2 matches that which he has noted during the charging process. In the event of a deviation, the user may request a review

desire .

The log file is then used to check whether the charging station whose ID the user has noted has received changed location information.

In addition, it is possible to regularly check in random samples whether the correct location information, which corresponds to the inventory list, is stored in the loading station 2.

The use of signatures ensures a high level

Data integrity in billing. Also is one Plausibility check possible. Finally, it is ensured that the data packet 34 has been received unaltered in the billing center 22. FIG. 3 shows a flow chart of a method for

Verification of the measurement data by the user.

In a first step 60, the computer 23 loads an inventory list provided to it.

Subsequently, the computer 23 reads (62) from the inventory list a counter ID and associated with this counter

Location information. With the aid of the counter ID, the computer can address the charging station 2 via the data network 20, e.g. through a routing table or a name server, which is an ID

Can assign network address. This allows the computer 23 to send the current location information to the charging station 2 (64).

The charging station 2 receives with the communication device 16a, which operates as a location determining device, the

Location information from the computer 23.

The charging station 2 signs the received location information in the signature device 16b and sends it back to the computer 23 signed (66). This allows the computer to check the correct reception of the location information in the charging station 2. In the charging station, the received location information is compared (68) with location information stored in the memory 18. If the location information matches, nothing else happens.

If the received location information does not match the stored location information, the received location information is stored in memory 18 and at the same time an entry in a log file becomes

Change of the location information generated (70).

For calibration purposes, the stored location information can be randomly read out via the data network 20

(72). The read location information can be compared with those of the inventory list and discrepancies are detected. In addition, it is possible that the log file is read out via the data network 20 or directly at the loading station 2 (74). With the help of the log file, the location history of a charging station 2 can be reconstructed. This can

to check randomly whether location information has been changed by charging station 2, and whether these changes correspond to those of the inventory list.

In addition, user complaints can be checked. When loading a user goes with his vehicle 6 to a charging station 2. At the time when the charging cable 4 was inserted into the vehicle 6, and the charging process begins, is in the charging station 2, preferably in the meter 10 but possibly also in the arithmetic unit 16, the current location information and time or a

Time index and the date recorded. In addition, the

Arithmetic unit of the meter 10, the current count. In addition, the arithmetic unit detects at least one status of the charging station (for example, order / fault) and the meter identification. It is possible that

Measured value, time and date as well as status and signature in

Measuring device 10 are detected. It is also possible that parts of it are detected in the arithmetic unit 16 and the data packet is signed in the arithmetic unit 16.

In parallel, the user can also change the location of

Charging station 2, the time and date of the beginning of the

Note the charging process. For this he uses, for example, his own clock. Also, the user can the meter identification or a charging station ID, preferably outside of the

Charging station 2 is installed, read and write down.

For billing purposes, the signature unit 16b calculates the signature 36 from the data packet 34, which contains the above-mentioned information, and the meter key 18a. The data packet 34 and the signature 36 are sent to the

Billing center 22 transmitted.

Then the user completes the loading process. To this

At the same time, the arithmetic unit 16 again acquires the current time or a time index as well as the date. In addition, the arithmetic unit again detects the current meter reading from the meter 10. In addition, the recorded Calculation unit again at least one status of

Charging station (for example OK / fault) and the

Measuring device identification. At the same time, the user can also make a note of the time and date of the end of the charging process. For this he uses, for example, his own clock.

With the new data packet 34, which is the above

Contains information, and the meter key 18a, the signature unit 16b calculates a new signature 36.

The new data packet 34 and the new signature 36 are transmitted to the billing center 22.

In the billing center 22 are from the two

received data packets the billing-relevant

Information determined. For a customer or contract ID, all loads are accumulated over a billing cycle.

At the time of invoicing, the user receives an invoice. On the one hand, this bill shows the total amount of energy consumed and the price for each tariff.

In addition, the bill for each load, the

Location information, start and end time, the date, the

Charging station ID, the meter number, the meter readings at the beginning and end of the charging process, and the amount of power. In addition, the bill for each start time and each end time, the counter number, the count, the

Meter Status and Signature 36 off. This signature 36 is the signature calculated in the charging station 2. This data is also available online to the customer.

Also available to the customer is the public meter key associated with the meter ID and the location associated with that meter.

As a result, the customer with the ones noted by him

Location information and meter identifications verify the signatures communicated to it. For this purpose, he can share the recorded information with the information provided

Use meter reading and status to verify the signature with the public meter key. For this purpose, he can also provide a retrievable provided

Use program. If discrepancies arise between the location information noted by the user and those of the invoice, the user may request a check. Then, e.g. a calibration authority read out the log file of the relevant meter and

check if his location information has been changed.

In this way it can be determined whether the charging station for

The time of loading at another location or has been assigned to another location and thus can not be responsible for the charging process.

Claims

claims

Charging station, in particular charging station for

Electric vehicles, with

a location determination device set up for

Receiving location information,

a memory device configured to store location information,

a comparison device configured to compare the received location information with the stored location information, in such a way

that in case of a negative comparison result the

stored location information is replaced by the received location information and in addition

Entry the changed location information concerning in a logbook is generated.

Loading station according to claim 1, characterized in that the received location information originate from a remote first server and that a

Confirmation device is provided to the

received location information preferably signed to the first server to send back.

Charging station according to claim 1 or 2, characterized

characterized in that a transmitting device the

stored location information together with at least one count of an energy quantity counter and / or a

Identification of the energy quantity counter and / or time information and / or status information and / or a customer identification, preferably signed to a second server.

Charging station according to one of claims 1 to 3, characterized gekennzeichne that a counter identification or

Charging point ID or charging station ID is attached to a nameplate visible from outside the charging station.

Charging station according to one of claims 1 to 4, characterized in that an access to the logbook

is secured by copyright.

Loading station according to one of claims 3 to 5, characterized in that a signature device, the transmitted from the transmitting device to the second server data with a meter key, preferably

private meter key, signed.

System with a charging station according to one of claims 1 to 6 and a first server, characterized in that the first server receives the location information associated with a counter identification and transmitted with the help of the counter identification, the location information and preferably together with a time information to the charging station.

System according to claim 7, characterized in that a second server of the charging station location information together with at least one count of a

Energy quantity counter and / or an identification of the energy quantity counter and / or time information and / or status information and / or a Customer identification, preferably signed by the charging station receives.

Method for operating a charging station, in particular a charging station for electric vehicles, with the steps of receiving location information,

Comparing the received location information with stored location information, wherein

in the case of a negative comparison result, the stored location information is replaced by the received location information and, in addition, an entry relating to the changed location information is generated in a logbook.

A method according to claim 9, characterized in that the location information is transmitted from a first server to the charging station and / or that the location information received from the charging station signed to the first server to be sent back.