Charging pile and charging pile control method

Abstract

The invention relates to the technical field of charging facility network security, in particular to a charging pile and a charging pile control method. According to the charging pile, digital certificate dual verification and encryption communication are carried out between the cloud server and the gateway board, the risk of user information leakage caused by man-in-the-middle attack, data eavesdropping and the like is reduced, and the user experience is improved by carrying out second encryption verification on the gateway board and the control board. The risk that the data of the charging pile are tampered due to counterfeiting of the digital certificate is reduced, and compared with identity verification achieved only based on a cloud server in the prior art, the technical effect of improving the network security of the charging pile is achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of charging facility network security, and in particular to a charging pile and a charging pile control method. BACKGROUND

[0002] With the rapid development of new energy technology, the new energy vehicle market has expanded rapidly, and the number of charging piles, as the core energy supply facilities of new energy vehicles, has also continued to rise.

[0003] However, the existing charging piles have obvious short boards in network security. For example, in the user identity authentication process of the existing charging piles, the cloud server mainly verifies the identity of the user, and in the case that the user identity authentication is passed, the server issues an operation instruction to the specified charging pile to make the charging pile start charging the vehicle of the user. However, in the process of issuing the operation instruction from the cloud server to the charging pile, user information is easily leaked, resulting in low security of the charging pile network. SUMMARY

[0004] The present application provides a charging pile and a charging pile control method to solve the problem of low security of the charging pile network.

[0005] In a first aspect, a charging pile is provided, comprising a gateway board and a control board; wherein, The gateway board receives a first encrypted instruction containing a digital certificate sent by a cloud server, and verifies the digital certificate, the first encrypted instruction being encrypted by the cloud server based on a pre-agreed first encryption key, and the target operation instruction sent by the user terminal being encrypted; The gateway board decrypts the first encrypted instruction based on a pre-agreed first decryption key to obtain the target operation instruction in the case that the digital certificate verification is passed; The gateway board encrypts the target operation instruction into a second encrypted instruction based on a pre-agreed second encryption key, and sends the second encrypted instruction to the control board; The control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and controls the charging pile to perform the target operation in response to the target operation instruction, the second encryption key and the second decryption key being generated based on the real-time power data entropy of the charging pile.

[0006] The above charging pile can optionally include a certificate fingerprint and a hardware identifier of the charging pile. The gateway board compares the certificate fingerprint with a target fingerprint pre-stored in a fingerprint library, and compares the hardware identifier with a target identifier pre-stored in an identifier library, and if the target fingerprint same as the certificate fingerprint exists in the fingerprint library and the target identifier same as the hardware identifier exists in the identifier library, it is determined that the digital certificate verification is passed.

[0007] The charging pile can further comprise a control board electrically connected to the gateway board and the user terminal. The control board obtains operation parameters of the charging pile after obtaining the target operation instruction, and the operation parameters comprise a load rate, a temperature, a bandwidth, a data packet frequency and an abnormal traffic proportion of the charging pile. The control board determines a behavior risk score corresponding to each operation data according to a numerical value of each operation data. The control board determines a behavior risk level of the charging pile based on the behavior risk score, and judges whether the behavior risk level is greater than or equal to a preset level threshold. The control board determines an access state of the target operation instruction according to a role permission of a user to which the target operation instruction belongs, a login state of the user terminal, a time node at which the target operation instruction is received, an instruction risk level of the target operation instruction and a historical behavior score of the user if the risk level is greater than or equal to the level threshold. The control board controls the charging pile to perform a target operation in response to the target operation instruction if the access state is allowed to access, and triggers dynamic token verification if the access state is forbidden to access, and controls the charging pile to perform the target operation in response to the target operation instruction if the dynamic token verification is passed. The control board triggers dynamic token verification if the risk level is less than the level threshold, and controls the charging pile to perform a target operation in response to the target operation instruction if the dynamic token verification is passed.

[0008] The charging pile can further comprise a control board electrically connected to the gateway board and the user terminal. The control board records a number of consecutive failures in decrypting the second encrypted instruction when the decryption based on the second decryption key fails, and interrupts the communication between the control board and the gateway board when the number of consecutive failures exceeds a preset number threshold. The control board obtains the target operation instruction when the decryption based on the second decryption key succeeds.

[0009] The target operation instruction can comprise a charging instruction and an upgrading instruction. The control board, when the target operation instruction is the charging instruction, responds to the charging instruction to perform a charging operation. The control board, when the target operation instruction is the upgrade instruction, responds to the upgrade instruction to perform an upgrade operation based on a differential upgrade package in the upgrade instruction, performs a rollback operation based on a pre-stored golden image if the upgrade operation fails, and generates a security event report.

[0010] In a second aspect, a charging pile control method is provided, applied to a gateway board of the charging pile, and includes: Receiving a first encrypted instruction containing a digital certificate sent by a cloud server, and verifying the digital certificate, the first encrypted instruction being obtained by the cloud server based on a pre-agreed first encryption key for encrypting a target operation instruction sent by a user terminal; In the case where the digital certificate verification is passed, decrypting the first encrypted instruction based on a pre-agreed first decryption key to obtain the target operation instruction; Based on a pre-agreed second encryption key, encrypting the target operation instruction into a second encrypted instruction, and sending the second encrypted instruction to the control board, so that the control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and responds to the target operation instruction to control the charging pile to perform a target operation.

[0011] The above charging pile control method can optionally include that the digital certificate includes a certificate fingerprint and a hardware identifier of the charging pile. The verification of the digital certificate includes: Comparing the certificate fingerprint with a target fingerprint pre-stored in a fingerprint library, and comparing the hardware identifier with a target identifier pre-stored in an identifier library; If the fingerprint library contains the same target fingerprint as the certificate fingerprint, and the identifier library contains the same target identifier as the hardware identifier, it is determined that the digital certificate verification is passed.

[0012] In a third aspect, a charging pile control method is provided, applied to a control board of the charging pile, and includes: Receiving a second encrypted instruction sent by a gateway board, the second encrypted instruction being obtained by the gateway board based on a pre-agreed second encryption key for encrypting a target operation instruction sent by a cloud server; Decrypting the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction; Responding to the target operation instruction to control the charging pile to perform a target operation.

[0013] Optionally, after the second encrypted instruction is decrypted based on the pre-agreed second decryption key to obtain the target operation instruction, the charging pile control method comprises the following steps: obtaining operation parameters of the charging pile, wherein the operation parameters comprise a load rate, a temperature, a bandwidth, a data packet frequency and an abnormal traffic proportion of the charging pile; determining a behavior risk score corresponding to each item of the operation data according to a numerical size of each item of the operation data; determining a behavior risk level of the charging pile based on the behavior risk score, and determining whether the behavior risk level is greater than or equal to a preset level threshold; if the risk level is greater than or equal to the level threshold, determining an access state of the target operation instruction according to a role permission of a user to which the target operation instruction belongs, a login state of the user terminal, a time node at which the target operation instruction is received, an instruction risk level of the target operation instruction and a historical behavior score of the user; if the access state is allowed access, responding to the target operation instruction to control the charging pile to perform a target operation, and if the access state is prohibited access, triggering dynamic token verification, and in the case that the dynamic token verification is passed, responding to the target operation instruction to control the charging pile to perform a target operation; if the risk level is less than the level threshold, triggering dynamic token verification, and in the case that the dynamic token verification is passed, responding to the target operation instruction to control the charging pile to perform a target operation.

[0014] Optionally, the second encrypted instruction is decrypted based on a pre-agreed second decryption key to obtain the target operation instruction. when the decryption of the second encrypted instruction based on the second decryption key fails, recording a number of consecutive failures in the decryption of the second encrypted instruction, and when the number of consecutive failures exceeds a preset number threshold, interrupting the communication between the control board and the gateway board; when the decryption of the second encrypted instruction based on the second decryption key succeeds, obtaining the target operation instruction.

[0015] Optionally, the target operation instruction comprises a charging instruction and an upgrade instruction. controlling the charging pile to perform a target operation comprises the following steps: the control board, when the target operation instruction is the charging instruction, responds to the charging instruction to perform a charging operation; The control board, when the target operation instruction is the upgrade instruction, responds to the upgrade instruction to perform an upgrade operation based on a differential upgrade package in the upgrade instruction, and if the upgrade operation fails, performs a rollback operation based on a pre-stored golden image, and generates a security event report.

[0016] The application provides a charging pile and a charging pile control method. The charging pile comprises a gateway board and a control board. The gateway board receives a first encrypted instruction containing a digital certificate sent by a cloud server, and verifies the digital certificate. The first encrypted instruction is encrypted by the cloud server based on a pre-agreed first encryption key, and is encrypted by the user terminal to obtain a target operation instruction. The gateway board decrypts the first encrypted instruction based on a pre-agreed first decryption key to obtain the target operation instruction when the digital certificate verification is passed. The gateway board encrypts the target operation instruction into a second encrypted instruction based on a pre-agreed second encryption key, and sends the second encrypted instruction to the control board. The control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and responds to the target operation instruction to control the charging pile to perform the target operation. The second encryption key and the second decryption key are generated based on real-time power data entropy of the charging pile. It can be seen that the charging pile in the application realizes double verification of the digital certificate and encrypted communication between the cloud server and the gateway board, reduces the risk of user information leakage caused by man-in-the-middle attacks, data eavesdropping, etc., and reduces the risk of data tampering of the charging pile caused by digital certificate forgery through the second encryption verification between the gateway board and the control board. Compared with the identity verification realized by the cloud server in the prior art, the technical effect of improving the network security of the charging pile is achieved. BRIEF DESCRIPTION OF DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the application, the following will briefly introduce the drawings needed to be used in the description of the embodiments of the application. Obviously, the drawings in the following description are only some embodiments of the application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0018] Figure 1 is a structural schematic diagram of a charging pile in an embodiment of the application; Figure 2 is an implementation flowchart of a charging pile control method disclosed in an embodiment of the application; Figure 3 is another implementation flowchart of a charging pile control method disclosed in an embodiment of the application. DETAILED DESCRIPTION

[0019] In order to make the technical problems solved by the present application, technical solutions and beneficial effects clearer, the present application will be further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are merely intended to explain the present application, and not to limit the present application.

[0020] It should be understood that the term "comprising" as used in the specification and the appended claims indicates the presence of the recited features, integers, steps, operations, elements, and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.

[0021] It should also be understood that the term "and / or" as used in the specification and the appended claims, means any combination of one or more of the associated listed items and all possible combinations of the items.

[0022] As used in the specification and the appended claims, the term "if' can be interpreted as meaning "when" or "once" or "in response to a determination" or "in response to a detection" depending on the context. Similarly, the phrase "if determined" or "if detected [the recited condition or event]" can be interpreted as meaning "once determined" or "in response to a determination" or "once detected [the recited condition or event]" or "in response to a detection [the recited condition or event]" depending on the context.

[0023] In addition, in the description of the present application and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0024] The reference "one embodiment" or "some embodiments" and the like described in the present application means that the specific features, structures or characteristics described in connection with the embodiment are included in one or more embodiments of the present application. Therefore, the statements "in one embodiment", "in some embodiments", "in other some embodiments", "in yet some embodiments" and the like appearing in different places in the specification are not necessarily all referring to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized. The terms "include", "contain", "have" and their variants mean "including but not limited to", unless otherwise specifically emphasized.

[0025] This invention provides a charging pile and a charging pile control method. The charging pile includes a gateway board and a control board. The gateway board receives a first encrypted instruction containing a digital certificate from a cloud server and verifies the digital certificate. The first encrypted instruction is obtained by encrypting a target operation instruction sent by a user terminal by the cloud server based on a pre-agreed first encryption key. If the digital certificate verification is successful, the gateway board decrypts the first encrypted instruction based on a pre-agreed first decryption key to obtain the target operation instruction. The gateway board encrypts the target operation instruction into a second encrypted instruction based on a pre-agreed second encryption key and sends the second encrypted instruction to the control board. The control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction and responds to the target operation instruction by controlling the charging pile to execute the target operation. The second encryption key and the second decryption key are generated based on the real-time power data entropy of the charging pile. As can be seen, the charging pile in this invention reduces the risk of user information leakage due to man-in-the-middle attacks, data eavesdropping, etc., by performing dual digital certificate verification and encrypted communication between the cloud server and the gateway board. Furthermore, by performing a second encryption verification between the gateway board and the control board, the risk of charging pile data being tampered with due to digital certificate forgery is reduced. Compared to the existing technology that relies solely on cloud server-based identity verification, this invention achieves a significant improvement in the network security of the charging pile. Specific embodiments will be described below.

[0026] In one embodiment, such as Figure 1 The diagram shown is a structural schematic of the charging pile in this embodiment. The charging pile 100 includes a gateway board 110 and a control board 120. The gateway board and the control board are used to implement the following steps: The gateway board receives a first encrypted instruction containing a digital certificate from the cloud server and verifies the digital certificate. The first encrypted instruction is obtained by encrypting the target operation instruction sent by the user terminal by the cloud server based on a pre-agreed first encryption key.

[0027] Once the digital certificate verification is successful, the gateway board decrypts the first encrypted instruction based on the pre-agreed first decryption key to obtain the target operation instruction.

[0028] As is understood, in this embodiment, the first encryption key and the first decryption key are a key pair. The cloud server encrypts the target operation instruction using the first encryption key to obtain the first encrypted instruction, and then sends the digital certificate and the first encrypted instruction to the gateway board. After receiving the digital certificate and the first encrypted instruction sent by the cloud server, the gateway board first verifies the digital certificate, and then, if the digital certificate verification is successful, decrypts the first encrypted instruction using the first decryption key to obtain the target operation instruction.

[0029] In an alternative implementation, the first encryption key and the first decryption key in the embodiment can be keys of a symmetric encryption algorithm, at this time, the first encryption key and the first decryption key are the same key, that is, the same key is used for encryption and decryption. For example, the user terminal generates a key through a random number generator, and then shares the key with the gateway board through an asymmetric encryption algorithm, so that the cloud server and the gateway board can use the same key to encrypt and decrypt the target operation instruction. The symmetric encryption algorithm includes but is not limited to any one of the Advanced Encryption Standard (AES) algorithm, the Data Encryption Standard (DES) algorithm, and the 3DES algorithm.

[0030] In an alternative implementation, the first encryption key and the first decryption key in the embodiment can be keys of an asymmetric encryption algorithm, at this time, the first encryption key used by the cloud server is the public key of the gateway board, and the first decryption key used by the gateway board is the private key of the gateway board. The asymmetric encryption algorithm includes but is not limited to any one of the Rivest-Shamir-Adleman (RSA) algorithm, the Elliptic Curve Cryptography (ECC) algorithm, and the Digital Signature Algorithm (DSA).

[0031] In an alternative implementation, the certificate chain, the certificate validity period, the certificate revocation status, the certificate signature, and the host name of the digital certificate can be verified in sequence to achieve the verification of the digital certificate.

[0032] In a specific implementation, the control board in the embodiment can include a TLS coprocessor and a hardware security module (HSM), wherein the hardware security module is used to store the first encryption key and prevent the data stored in the hardware security module from being tampered with, and the TLS coprocessor is used to quickly decrypt the first encryption sent by the cloud server based on the first decryption key provided by the hardware security module to obtain the target operation instruction. After obtaining the target operation instruction, the TLS coprocessor encrypts the target operation instruction based on the second encryption key provided by the hardware security module to obtain a second encryption instruction, and sends the second encryption instruction to the control board. The control board decrypts the second encryption instruction based on the pre-agreed second decryption key to obtain the target operation instruction, and responds to the target operation instruction to control the charging pile to perform the target operation.

[0033] The gateway board encrypts the target operation instruction into a second encryption instruction based on the pre-agreed second encryption key, and sends the second encryption instruction to the control board.

[0034] The control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain a target operation instruction, and controls the charging pile to perform a target operation in response to the target operation instruction, and the second encryption key and the second decryption key are generated based on real-time power data entropy of the charging pile.

[0035] In a specific implementation, the second encryption key and the second decryption key in the embodiment can be calculated based on real-time power data entropy of the charging pile through an identity-based cryptography (IBC), and a new second encryption key and a new second decryption key are calculated based on real-time power data entropy of the charging pile each time the gateway board sends a target operation instruction to the control board, so that the gateway board encrypts the target operation instruction based on a different second encryption key each time to obtain a second encrypted instruction, and the control board decrypts the second encrypted instruction based on a different second decryption key each time to obtain a target operation instruction, and controls the charging pile to perform a target operation in response to the target operation instruction.

[0036] The application provides a charging pile, which comprises a gateway board and a control board, the gateway board receives a first encrypted instruction containing a digital certificate sent by a cloud server, and verifies the digital certificate, the first encrypted instruction is encrypted by the cloud server based on a pre-agreed first encryption key, and the target operation instruction sent by a user terminal is encrypted to obtain the first encrypted instruction; the gateway board decrypts the first encrypted instruction based on a pre-agreed first decryption key to obtain a target operation instruction in the case that the digital certificate is verified; the gateway board encrypts the target operation instruction into a second encrypted instruction based on a pre-agreed second encryption key, and sends the second encrypted instruction to the control board; the control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain a target operation instruction, and controls the charging pile to perform a target operation in response to the target operation instruction, and the second encryption key and the second decryption key are generated based on real-time power data entropy of the charging pile. It can be seen that the charging pile in the application realizes double verification of digital certificates and encrypted communication between the cloud server and the gateway board, reduces the risk of user information leakage due to man-in-the-middle attacks, data eavesdropping, etc., and reduces the risk of data tampering of the charging pile due to forgery of digital certificates through the second encryption verification between the gateway board and the control board, compared with the identity verification realized by the cloud server in the prior art, and the technical effect of improving the network security of the charging pile is achieved.

[0037] In one embodiment, the digital certificate in the embodiment includes a certificate fingerprint and a hardware identifier of the charging pile, on the basis of which the gateway board in the embodiment compares the certificate fingerprint with a target fingerprint pre-stored in a fingerprint library and compares the hardware identifier with a target identifier pre-stored in an identifier library, and if there is a target fingerprint identical to the certificate fingerprint in the fingerprint library and there is a target identifier identical to the hardware identifier in the identifier library, it is determined that the digital certificate is verified.

[0038] The hardware identifier of the charging pile is a string (such as a MAC address, a serial number, an IMEI, etc.) used to uniquely identify the charging pile.

[0039] The certificate fingerprint refers to a hash value (such as SHA-256) of the content of the digital certificate, which is used to verify the integrity or binding of the device.

[0040] In a specific implementation, the fingerprint library and the identifier library can be pre-established in the hardware security module of the gateway board in the embodiment, and the TLS co-processor pre-extracts the certificate fingerprint of the digital certificate and the hardware identifier in the digital certificate after receiving the first encryption instruction of the digital certificate, and then compares the certificate fingerprint with a target fingerprint pre-stored in the fingerprint library and compares the hardware identifier with a target identifier pre-stored in the identifier library, so as to determine that the digital certificate is verified when there is a target fingerprint identical to the certificate fingerprint in the fingerprint library and there is a target identifier identical to the hardware identifier in the identifier library.

[0041] In one embodiment, after obtaining a target operation instruction, the control board in the embodiment acquires operating parameters of the charging pile, the operating parameters including a load rate, a temperature, a bandwidth, a data packet frequency and an abnormal traffic proportion of the charging pile; the control board determines a behavior risk score corresponding to each operating data according to the numerical value of each operating data; the control board determines a behavior risk level of the charging pile based on the behavior risk score and judges whether the behavior risk level is greater than or equal to a preset level threshold; if the risk level is greater than or equal to the level threshold, the control board determines an access state of the target operation instruction according to the role permission of a user to which the target operation instruction belongs, a login state of a user terminal, a time node at which the target operation instruction is received, an instruction risk level of the target operation instruction and a historical behavior score of the user; if the access state is allowed access, the control board responds to the target operation instruction to control the charging pile to perform the target operation, and if the access state is prohibited access, the control board triggers dynamic token verification, and in the case that the dynamic token verification is passed, the control board responds to the target operation instruction to control the charging pile to perform the target operation; if the risk level is less than the level threshold, the control board triggers dynamic token verification, and in the case that the dynamic token verification is passed, the control board responds to the target operation instruction to control the charging pile to perform the target operation.

[0042] In an optional implementation, the behavior risk level of the charging pile in the embodiment can be determined in the following manner: The load rate, temperature, bandwidth, data packet frequency, and abnormal traffic proportion of the charging pile are obtained, and then the behavior risk score corresponding to each operating data is determined according to the numerical value of each operating data.

[0043] For example, taking the load rate as an example, the load rate interval (40%-70%) corresponds to the score interval (80-100), that is, when the load rate is 30%, the corresponding behavior risk score is 100, when the load rate is 70%, the corresponding behavior risk score is 80, and when the load rate is other numerical value, the behavior risk score is adjusted according to the deviation degree of the load rate, for example, when the load rate is 90%, the corresponding behavior risk score is 60, and when the load rate is less than 40%, the behavior risk score remains at 100.

[0044] For example, taking the temperature as an example, when the temperature is less than or equal to 50℃, the corresponding behavior risk score of the temperature is 100, and then the corresponding behavior risk score of the temperature decreases by 2 or 3 for each 1℃ increase, which is not limited in the embodiment. In addition, if the temperature increases or decreases by more than 20℃ within a preset time (such as 10 minutes), it indicates that the temperature of the charging pile is abnormal, and the corresponding behavior risk score is directly reduced by 30 or 40.

[0045] For example, taking the abnormal traffic proportion as an example, when there is no abnormal traffic, the corresponding behavior risk score of the abnormal traffic is 100, the abnormal port connection (such as unauthorized IP access) is found: deduct 40 behavior risk scores; the burst traffic exceeds 2 times the average value: deduct 30 behavior risk scores; the data packet error rate exceeds 5% or 8%: deduct 20 behavior risk scores.

[0046] In a specific implementation, the behavior risk scores corresponding to each operating data in the embodiment are added with weights to obtain a total behavior score, and then based on the total behavior score, the behavior risk level of the charging pile is determined, for example, when the total behavior score is less than or equal to 60, the corresponding behavior risk level is first risk, when the total behavior score is between 60 and 80, the corresponding behavior risk level is second risk, and when the total behavior score is between 80 and 90, the corresponding behavior risk level is third risk, wherein the level of the first risk is higher than that of the second risk, and the level of the second risk is higher than that of the third risk.

[0047] In one embodiment, the role permission of the user to which the target operation instruction belongs in the embodiment refers to the basic permission range of the user to the charging pile. For example, the administrator role has the highest operation permission of the charging pile by default. The control board responds to the target operation instruction to control the charging pile to execute the target operation. The ordinary user can only execute the basic query. The access state of the target operation instruction needs to be further judged according to the login state of the user terminal, the time node at which the target operation instruction is received, the instruction risk level of the target operation instruction and the historical behavior score of the user.

[0048] In one embodiment, the security of the user terminal can be verified according to the login state of the user terminal in the embodiment. For example, if the user terminal is an enterprise- authenticated terminal, the user terminal is considered as a secure device. If the user terminal is an unauthorized device or a device logged in from a remote place, the user terminal is considered as a risk device.

[0049] In one embodiment, the time effectiveness of the permission can be controlled from the time dimension according to the time node at which the target operation instruction is received in the embodiment. For example, the safe time period is from 9:00 to 18:00 on weekdays, and the risk time period is during holidays or in the early morning.

[0050] In one embodiment, the instruction risk level can be determined according to the specific content of the target operation instruction in the embodiment. For example, viewing public data is a low-risk instruction, and modifying system configuration and large-amount transfer are high-risk instructions.

[0051] In one embodiment, the historical behavior score can be determined according to the historical behavior of the user in the embodiment. For example, if the target operation instruction matches the daily operation habit of the user, the historical behavior score is considered as a high score, such as 70 points or more. If the target operation instruction does not match the daily operation habit of the user, the historical behavior score is considered as a low score, such as 60 points or less.

[0052] Based on the above indexes, when the role permission of the user to which the target operation instruction belongs is an ordinary permission, if the user terminal is a secure device, the time node at which the target operation instruction is received is a safe time period, the instruction risk level is a low-risk instruction, and the target operation instruction matches the daily operation habit of the user, that is, the historical behavior score is 70 points or more, the control board responds to the target operation instruction to control the charging pile to execute the target operation.

[0053] In one embodiment, the control board in the embodiment records the number of consecutive failures in decrypting the second encrypted instruction based on the second decryption key, and interrupts the communication between the control board and the gateway board when the number of consecutive failures exceeds a preset number threshold. The control board obtains the target operation instruction when the decryption of the second encrypted instruction based on the second decryption key is successful.

[0054] It can be understood that, in the embodiment, by recording the number of consecutive failures of decrypting the second encrypted instruction, the communication between the control board and the gateway board can be interrupted when the charging pile is continuously attacked by a man-in-the-middle, thereby avoiding user information leakage and charging pile data tampering caused by the man-in-the-middle attacking the charging pile.

[0055] In one embodiment, the target operation instruction in the embodiment includes a charging instruction and an upgrade instruction. Based on this, the control board in the embodiment, when the target operation instruction is the charging instruction, responds to the charging instruction to perform a charging operation; and when the target operation instruction is the upgrade instruction, responds to the upgrade instruction to perform an upgrade operation based on a differential upgrade package in the upgrade instruction, and if the upgrade operation fails, performs a rollback operation based on a pre-stored golden image, and generates a security event report.

[0056] In a specific implementation, the control board in the embodiment can include a charging management unit and a secure boot firmware. When the target operation instruction is the charging instruction, the charging management unit responds to the charging instruction to perform a charging operation, such as any one or more of charging parameter control, battery overcharge and / or overdischarge protection, and charging state monitoring and feedback. The secure boot firmware can verify the hash value of the differential upgrade package in the upgrade instruction to ensure the integrity and security of the differential upgrade package, and then perform differential upgrade based on the differential upgrade package through the sandbox environment of the control board.

[0057] To sum up, in the embodiment, the charging management unit provides effective battery overcharge and / or overdischarge protection for the charging pile, thereby improving the safety of the charging pile. The secure boot firmware can verify the differential upgrade package, thereby avoiding incomplete differential upgrade package or Trojan virus, which can cause differential upgrade failure or large-scale data leakage, and improving the security of the charging pile network.

[0058] In one embodiment, as shown in Figure 2 Fig. 1 is an implementation flowchart of a charging pile control method disclosed by the embodiment, which is applicable to a charging pile device. The method includes: S201: receiving a first encrypted instruction containing a digital certificate sent by a cloud server, and verifying the digital certificate. The first encrypted instruction is encrypted by the cloud server based on a pre-agreed first encryption key for a target operation instruction sent by a user terminal.

[0059] S202: in the case where the digital certificate is verified, decrypting the first encrypted instruction based on a pre-agreed first decryption key to obtain the target operation instruction.

[0060] S203: encrypt the target operation instruction into a second encrypted instruction based on a pre-agreed second encryption key, and send the second encrypted instruction to the control board, so that the control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and controls the charging pile to perform the target operation in response to the target operation instruction.

[0061] The application provides a charging pile control method applied to a gateway board in a charging pile. The gateway board receives a first encrypted instruction containing a digital certificate sent by a cloud server, and verifies the digital certificate. The first encrypted instruction is obtained by the cloud server based on a pre-agreed first encryption key for encrypting a target operation instruction sent by a user terminal. In the case that the digital certificate is verified, the first encrypted instruction is decrypted based on a pre-agreed first decryption key to obtain the target operation instruction. The target operation instruction is encrypted into a second encrypted instruction based on a pre-agreed second encryption key, and the second encrypted instruction is sent to the control board, so that the control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and controls the charging pile to perform the target operation in response to the target operation instruction. It can be seen that the charging pile in the application performs double verification of the digital certificate and encrypted communication between the cloud server and the gateway board, reduces the risk of user information leakage due to man-in-the-middle attacks, data eavesdropping, etc., and reduces the risk of data tampering of the charging pile due to digital certificate forgery through the second encryption verification between the gateway board and the control board. Compared with the identity verification based on the cloud server in the prior art, the technical effect of improving the network security of the charging pile is achieved.

[0062] In one embodiment, the digital certificate includes a certificate fingerprint and a hardware identifier of the charging pile.

[0063] The verification of the digital certificate includes: comparing the certificate fingerprint with a target fingerprint pre-stored in a fingerprint library, and comparing the hardware identifier with a target identifier pre-stored in an identifier library; if the fingerprint library contains the target fingerprint identical to the certificate fingerprint, and the identifier library contains the target identifier identical to the hardware identifier, it is determined that the verification of the digital certificate is passed.

[0064] It should be understood that the size of the serial number of each step in the above embodiment does not mean the order of execution, and the execution order of each process should be determined according to its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiment of the application.

[0065] For specific limitations of the charging pile control method, see the limitations of the charging pile in the above text, which will not be repeated here.

[0066] In one embodiment, as Figure 3As shown, it is the implementation flow chart of the charging pile control method disclosed in the embodiment, the method is suitable for the control board of the charging pile equipment, and the method comprises the following steps: S301: receiving the second encryption instruction sent by the gateway board, the second encryption instruction is obtained by encrypting the target operation instruction sent by the cloud server based on the second encryption key agreed in advance.

[0067] S302: based on the second decryption key agreed in advance, the second encryption instruction is decrypted to obtain the target operation instruction.

[0068] S303: in response to the target operation instruction, the charging pile is controlled to execute the target operation.

[0069] The application provides a charging pile control method, which is applied to the control board in the charging pile, the gateway board receives the second encryption instruction sent by the gateway board, the second encryption instruction is obtained by encrypting the target operation instruction sent by the cloud server based on the second encryption key agreed in advance; based on the second decryption key agreed in advance, the second encryption instruction is decrypted to obtain the target operation instruction; in response to the target operation instruction, the charging pile is controlled to execute the target operation. It can be seen that the charging pile in the application carries out double verification of digital certificates and encrypted communication between the cloud server and the gateway board, reduces the risk of user information leakage caused by man-in-the-middle attacks, data eavesdropping and the like, and reduces the risk of charging pile data tampering caused by digital certificate forgery through the second encryption verification between the gateway board and the control board, compared with the identity verification realized only based on the cloud server in the prior art, the technical effect of improving the network security of the charging pile is achieved.

[0070] In an embodiment, after obtaining the target operation instruction by decrypting the second encrypted instruction based on the pre-agreed second decryption key, the method comprises: obtaining operating parameters of the charging pile, the operating parameters comprising a load rate, a temperature, a bandwidth, a data packet frequency and an abnormal traffic proportion of the charging pile; determining a behavior risk score corresponding to each operating data according to a numerical size of each operating data; determining a behavior risk level of the charging pile based on the behavior risk score, and determining whether the behavior risk level is greater than or equal to a preset level threshold; if the risk level is greater than or equal to the level threshold, determining an access state of the target operation instruction according to a role permission of a user to which the target operation instruction belongs, a login state of a user terminal, a time node at which the target operation instruction is received, an instruction risk level of the target operation instruction and a historical behavior score of the user; if the access state is allowed access, responding to the target operation instruction to control the charging pile to perform the target operation, and if the access state is prohibited access, triggering dynamic token verification, and in the case that the dynamic token verification is passed, responding to the target operation instruction to control the charging pile to perform the target operation; if the risk level is less than the level threshold, triggering dynamic token verification, and in the case that the dynamic token verification is passed, responding to the target operation instruction to control the charging pile to perform the target operation.

[0071] In an embodiment, obtaining the target operation instruction by decrypting the second encrypted instruction based on the pre-agreed second decryption key comprises: in the case that decrypting the second encrypted instruction based on the second decryption key fails, recording a number of consecutive failures of decrypting the second encrypted instruction, and in the case that the number of consecutive failures exceeds a preset number threshold, interrupting communication between the control board and the gateway board; in the case that decrypting the second encrypted instruction based on the second decryption key succeeds, obtaining the target operation instruction.

[0072] In an embodiment, the target operation instruction comprises a charging instruction and an upgrade instruction. Controlling the charging pile to perform the target operation comprises: in the case that the target operation instruction is the charging instruction, the control board responding to the charging instruction to perform a charging operation; in the case that the target operation instruction is the upgrade instruction, the control board responding to the upgrade instruction to perform an upgrade operation based on a differential upgrade package in the upgrade instruction, and in the case that the upgrade operation fails, the control board performing a rollback operation based on a pre-stored golden image and generating a security event report.

[0073] It should be understood that the size of the serial number of each step in the above embodiments does not mean the order of execution, and the execution order of each process should be determined according to its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0074] For specific limitations of the charging pile control method, refer to the limitations of the charging pile in the above, which will not be repeated here.

[0075] The above examples are only used to illustrate the technical solutions of the present application, but not limit the present application; although the present application has been described in detail with reference to the foregoing examples, those ordinarily skilled in the art should understand: the technical solutions recorded in the foregoing examples can still be modified, or some technical features can be replaced equivalently; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

Claims

1. A charging pile, characterized in that, The charging pile includes a gateway board and a control board; wherein... The gateway board receives a first encryption instruction containing a digital certificate sent by the cloud server and verifies the digital certificate. The first encryption instruction is obtained by the cloud server encrypting the target operation instruction sent by the user terminal based on a pre-agreed first encryption key. The gateway board, upon successful verification of the digital certificate, decrypts the first encrypted instruction using a pre-agreed first decryption key to obtain the target operation instruction. The gateway board, based on a pre-agreed second encryption key, encrypts the target operation instruction into a second encrypted instruction and sends the second encrypted instruction to the control board; The control board decrypts the second encrypted instruction based on a pre-agreed second decryption key to obtain the target operation instruction, and responds to the target operation instruction to control the charging pile to perform the target operation. The second encryption key and the second decryption key are generated based on the real-time power data entropy of the charging pile.

2. The charging pile as described in claim 1, characterized in that, The digital certificate includes a certificate fingerprint and the hardware identifier of the charging pile; The gateway board compares the certificate fingerprint with a target fingerprint pre-stored in the fingerprint database and compares the hardware identifier with a target identifier pre-stored in the identifier database. If a target fingerprint identical to the certificate fingerprint exists in the fingerprint database and a target identifier identical to the hardware identifier exists in the identifier database, the digital certificate verification is deemed successful.

3. The charging pile as described in claim 1, characterized in that, include: After receiving the target operation command, the control board acquires the operating parameters of the charging pile, including the load rate, temperature, bandwidth, data packet frequency, and abnormal traffic ratio of the charging pile. The control panel determines the behavioral risk score corresponding to each piece of operational data based on the numerical value of each piece of operational data. The control board determines the behavioral risk level of the charging pile based on the behavioral risk score, and determines whether the behavioral risk level is greater than or equal to a preset level threshold. If the risk level is greater than or equal to the level threshold, the control panel determines the access status of the target operation instruction based on the role and permissions of the user to which the target operation instruction belongs, the login status of the user terminal, the time node when the target operation instruction was received, the instruction risk level of the target operation instruction, and the user's historical behavior score. If the access status is "access allowed", the control board responds to the target operation command and controls the charging pile to perform the target operation. If the access status is "access denied", dynamic token verification is triggered. If the dynamic token verification is successful, the control board responds to the target operation command and controls the charging pile to perform the target operation. If the risk level is less than the level threshold, the control board triggers dynamic token verification. If the dynamic token verification is successful, it responds to the target operation command and controls the charging pile to perform the target operation.

4. The charging pile as described in claim 1, characterized in that, include: When the control board fails to decrypt the second encryption instruction based on the second decryption key, it records the number of consecutive failures to decrypt the second encryption instruction, and when the number of consecutive failures exceeds a preset threshold, it interrupts the communication between the control board and the gateway board. When the control board successfully decrypts the second encrypted instruction based on the second decryption key, it obtains the target operation instruction.

5. The charging pile as described in claim 1, characterized in that, The target operation instructions include charging instructions and upgrade instructions; When the target operation command is the charging command, the control board responds to the charging command to perform the charging operation. When the target operation instruction is the upgrade instruction, the control board responds to the upgrade instruction by performing an upgrade operation based on the differential upgrade package in the upgrade instruction. If the upgrade operation fails, a rollback operation is performed based on the pre-stored gold image, and a security event report is generated.

6. A charging pile control method, characterized in that, The gateway board used in the charging pile includes: The system receives a first encrypted instruction containing a digital certificate sent by a cloud server and verifies the digital certificate. The first encrypted instruction is obtained by the cloud server encrypting the target operation instruction sent by the user terminal based on a pre-agreed first encryption key. If the digital certificate is verified, the first encrypted instruction is decrypted based on the pre-agreed first decryption key to obtain the target operation instruction; Based on a pre-agreed second encryption key, the target operation instruction is encrypted into a second encrypted instruction and sent to the control board. The control board then decrypts the second encrypted instruction using a pre-agreed second decryption key to obtain the target operation instruction and responds to the target operation instruction to control the charging pile to perform the target operation.

7. The charging pile control method as described in claim 6, characterized in that, The digital certificate includes a certificate fingerprint and the hardware identifier of the charging pile; The verification of the digital certificate includes: The certificate fingerprint is compared with the target fingerprint pre-stored in the fingerprint database, and the hardware identifier is compared with the target identifier pre-stored in the identifier database; If the target fingerprint that is identical to the certificate fingerprint exists in the fingerprint database, and the target identifier that is identical to the hardware identifier exists in the identifier database, then the digital certificate verification is deemed successful.

8. A charging pile control method, characterized in that, The control board used in the charging pile includes: The gateway board receives a second encryption instruction, which is obtained by the gateway board encrypting the target operation instruction sent by the cloud server based on a pre-agreed second encryption key. Based on the pre-agreed second decryption key, the second encrypted instruction is decrypted to obtain the target operation instruction; In response to the target operation command, control the charging pile to perform the target operation.

9. The charging pile control method as described in claim 8, characterized in that, After decrypting the second encrypted instruction based on the pre-agreed second decryption key to obtain the target operation instruction, the process includes: Obtain the operating parameters of the charging pile, including the load rate, temperature, bandwidth, data packet frequency, and abnormal traffic ratio of the charging pile; Based on the numerical value of each piece of operational data, a behavioral risk score is determined for each piece of operational data. Based on the behavioral risk score, the behavioral risk level of the charging pile is determined, and it is determined whether the behavioral risk level is greater than or equal to a preset level threshold. If the risk level is greater than or equal to the level threshold, the access status of the target operation instruction is determined based on the role and permissions of the user to which the target operation instruction belongs, the login status of the user terminal, the time node when the target operation instruction was received, the instruction risk level of the target operation instruction, and the user's historical behavior score. If the access status is allowed, the target operation instruction is responded to and the charging pile is controlled to perform the target operation. If the access status is denied, dynamic token verification is triggered. If the dynamic token verification is successful, the target operation instruction is responded to and the charging pile is controlled to perform the target operation. If the risk level is less than the level threshold, dynamic token verification is triggered. If the dynamic token verification is successful, the target operation instruction is responded to, and the charging pile is controlled to perform the target operation.

10. The charging pile control method as described in claim 8, characterized in that, Based on the pre-agreed second decryption key, the second encrypted instruction is decrypted to obtain the target operation instruction, including: When decryption of the second encryption instruction based on the second decryption key fails, the number of consecutive failures to decrypt the second encryption instruction is recorded, and when the number of consecutive failures exceeds a preset threshold, the communication between the control board and the gateway board is interrupted. When the second encrypted instruction is successfully decrypted based on the second decryption key, the target operation instruction is obtained.

11. The charging pile control method as described in claim 8, characterized in that, The target operation instructions include charging instructions and upgrade instructions; Controlling the charging pile to perform the target operation includes: When the target operation command is the charging command, the control board responds to the charging command to perform the charging operation. When the target operation instruction is the upgrade instruction, the control board responds to the upgrade instruction by performing an upgrade operation based on the differential upgrade package in the upgrade instruction. If the upgrade operation fails, a rollback operation is performed based on the pre-stored gold image, and a security event report is generated.

Images