Battery Data Management System and Its Operating Method

Abstract

A method of operating a battery data management system according to an embodiment disclosed herein may include the following steps: The terminal obtains a public key and a first message by sending battery-related information to an authentication server, encrypts the first message with the public key, and sends the encrypted first message to a battery authentication module; The battery authentication module decrypts the encrypted first message using a previously stored first key to obtain the first message, generates a second message based on random number information, encrypts the second message with the first key, and sends the encrypted second message to the terminal; The terminal decrypts the second message with the public key to obtain the second message, and sends the first message and the second message to the authentication server; The authentication server generates a third message based on random number information, and sends the generated third message to the terminal; The terminal encrypts the third message with the public key, and sends the encrypted third message to the battery authentication module; and The battery authentication module decrypts the encrypted third message using the first key to obtain the third message, generates a second key as a shared session key, encrypts the second key with the first key, and sends the encrypted second key to the terminal.

Description

Technical Field

[0001] Cross - Reference to Related Applications

[0002] This application claims the priority of Korean Patent Application No. 10-2021-0107251, filed with the Korean Intellectual Property Office on August 13, 2021, the entire content of which is incorporated herein by reference. Technical Field

[0004] Embodiments disclosed herein relate to a battery data management system and an operating method thereof. Background Art

[0005] An electric vehicle is powered from the outside to charge a battery, and then drives a motor using the voltage charged in the battery to obtain power. The battery of an electric vehicle may generate heat in the battery due to chemical reactions occurring during charging and discharging, and this heat may damage the performance and lifespan of the battery. Therefore, a battery management device (or battery management system (BMS)) may manage the battery by monitoring battery data including the temperature, voltage, and current of the battery.

[0006] However, normal battery data can be obtained by physically separating the battery pack from the vehicle. Therefore, in order to obtain battery data, there is an inconvenience in that the battery pack must be removed from / attached to the vehicle. In addition, during the process of acquiring battery data, there is no device that can ensure the security of sensitive data that needs to be protected from confidentiality, and thus it may allow forged external intrusion messages on the network, posing a fatal threat to the vehicle and the driver. Summary of the Invention

[0007] Technical Problem

[0008] Embodiments disclosed herein aim to provide a battery data management system and an operating method thereof that can directly obtain battery data through a wired / wireless network and can create a battery data communication environment with enhanced security.

[0009] The technical problems of the embodiments disclosed herein are not limited to the above technical problems, and other unmentioned technical problems will be clearly understood by those of ordinary skill in the art from the following description.

[0010] Technical Solution

[0011] The operation method of the battery data management system according to the embodiments disclosed herein includes: sending battery-related information from a terminal to an authentication server to obtain a public key and a first message, encrypting the first message with the public key, and sending the encrypted first message to a battery authentication module; decrypting the encrypted first message with a previously stored first key by the battery authentication module to obtain the first message, generating a second message based on random number information, encrypting the second message with the first key, and sending the encrypted second message to the terminal; decrypting the second message with the public key by the terminal to obtain the second message, and sending the first message and the second message to the authentication server; generating a third message by the authentication server based on the random number, and sending the third message to the terminal; encrypting the third message with the public key by the terminal, and sending the encrypted third message to the battery authentication module; and decrypting the encrypted third message with the first key by the battery authentication module to obtain the third message, generating a second key as a shared session key, encrypting the second key with the first key, and sending the encrypted second key to the terminal.

[0012] According to an embodiment, the operation method of the battery data management system may further include the following steps: decrypting the encrypted second key with the public key by the terminal to obtain the second key.

[0013] According to an embodiment, the operation method of the battery data management system may further include the following steps: encrypting the battery data with the second key by the battery authentication module, and sending the encrypted battery data to the terminal.

[0014] According to an embodiment, the step of decrypting the encrypted first message with the previously stored first key by the battery authentication module to obtain the first message, generating the second message based on the random number information, encrypting the second message with the first key, and sending the encrypted second message to the terminal may include the following steps: generating a message corresponding to the first message and verifying the stability of the terminal by determining whether the first message and the message corresponding to the first message are the same as each other.

[0015] According to an embodiment, the step of decrypting the encrypted first message with the previously stored first key by the battery authentication module to obtain the first message, generating the second message based on the random number information, encrypting the second message with the first key, and sending the encrypted second message to the terminal may include the following steps: generating the second message by using OTP information.

[0016] According to an embodiment, the step of generating, by the authentication server, the third message based on the random number and sending the third message to the terminal may include the following steps: deriving the serial number information of the battery based on the first message and determining whether the derived serial number information of the battery is appropriate.

[0017] According to an embodiment, the step of generating, by the authentication server, the third message based on the random number and sending the third message to the terminal may include the following steps: generating a message corresponding to the second message based on the random number information and verifying the stability of the battery authentication module by determining whether the second message and the message corresponding to the second message are the same as each other.

[0018] According to an embodiment, the step of generating, by the authentication server, the third message based on the random number and sending the third message to the terminal may include the following steps: generating the third message by using the OTP information.

[0019] According to an embodiment, the step of decrypting, by the battery authentication module, the encrypted third message by using the first key to obtain the third message, generating a second key as a shared session key, encrypting the second key by using the first key, and sending the encrypted second key to the terminal may include the following steps: generating a message corresponding to the third message based on the random number information and verifying the third message by determining whether the third message and the message corresponding to the third message are the same as each other.

[0020] According to an embodiment, the step of sending, by the terminal, the battery-related information to the authentication server to obtain the public key and the first message, encrypting the first message by using the public key, and sending the encrypted first message to the battery authentication module may include the following steps: the terminal obtaining the battery-related information by scanning the battery.

[0021] According to an embodiment, the battery-related information may include information of a vehicle in which the battery is installed or a vehicle information number of the vehicle.

[0022] The battery data management system according to the embodiments disclosed herein includes: a terminal configured to obtain a public key and a first message based on battery-related information, encrypt the first message with the public key, and request the transmission of battery data based on the encrypted first message; a battery authentication module configured to decrypt the encrypted first message with a previously stored first key to obtain the first message, generate a second message based on random number information, encrypt the second message with the first key, and send the encrypted second message to the terminal to verify the stability of the terminal; and an authentication server configured to generate a third message based on the random number information and send the third message to the terminal to verify the stability of the battery authentication module.

[0023] According to an embodiment, the terminal may further be configured to receive the encrypted second message from the battery authentication module, decrypt the second message with the public key to obtain the second message, and send the first message and the second message to the authentication server.

[0024] According to an embodiment, the terminal may further be configured to receive the third message from the authentication server, encrypt the third message with the public key, and send the encrypted third message to the battery authentication module.

[0025] According to an embodiment, the battery authentication module may further be configured to decrypt the encrypted third message with the first key to obtain the third message, generate a second key as a shared session key, encrypt the second key with the first key, and send the encrypted second key to the terminal.

[0026] According to an embodiment, the terminal may further be configured to decrypt the encrypted second key with the public key to obtain the second key, and the terminal and the battery authentication module may further be configured to encrypt and decrypt the battery data with the second key to perform data communication.

[0027] Advantageous Effects

[0028] The battery data management system and its operation method according to the embodiments disclosed herein can directly obtain battery data through a wired / wireless network and create a battery data communication environment with enhanced security. Brief Description of the Drawings

[0029] Figure 1 Shows the configuration of a battery pack according to the embodiments disclosed herein.

[0030] Figure 2is a block diagram showing the configuration of a battery data management system according to an embodiment disclosed herein.

[0031] Figure 3 is a block diagram showing the configuration of a battery authentication module according to an embodiment disclosed herein.

[0032] Figure 4 is a block diagram showing the configuration of a terminal according to an embodiment disclosed herein.

[0033] Figure 5 is a block diagram showing the configuration of an authentication server according to an embodiment disclosed herein.

[0034] Figure 6 is a flowchart showing an operation method of a battery data management system according to an embodiment disclosed herein.

[0035] Figure 7a and Figure 7b are diagrams for generally describing a battery data management system according to an embodiment disclosed herein. Detailed Description of Specific Embodiments

[0036] Hereinafter, some embodiments disclosed herein will be described in detail with reference to exemplary drawings. When adding reference numerals to the components of each drawing, it should be noted that even if the same component is indicated in different drawings, the same reference numeral is given to the same component. In addition, when determining that a detailed description of a related known configuration or function interferes with the understanding of the embodiments disclosed herein, the detailed description will be omitted.

[0037] To describe the components of the embodiments disclosed herein, terms such as first, second, A, B, (a), (b), etc. may be used. These terms are only used to distinguish one component from another and do not limit the component to its essence, order, sequence, etc. As long as the terms are not differently defined, the terms used herein, including technical terms and scientific terms, have the same meaning as those generally understood by those skilled in the art. Generally, terms defined in a general dictionary should be interpreted as having the same meaning as the contextual meaning of the related art and should not be interpreted as having an ideal or exaggerated meaning, unless they are clearly defined in this document.

[0038] Figure 1 Shows a battery pack according to an embodiment disclosed herein.

[0039] Referring to Figure 1 , the battery pack 100 according to an embodiment disclosed herein may include a battery module 110, a battery management device 120, a battery authentication module 130, and a relay 140.

[0040] The battery module 110 may include a first battery cell 111, a second battery cell 112, a third battery cell 113, and a fourth battery cell 114. Although multiple battery cells are illustrated as four in Figure 1 , the present invention is not limited thereto, and the battery module 110 may include n battery cells (n is a natural number greater than or equal to 2).

[0041] The battery module 110 may supply power to a target device (not shown). To this end, the battery module 110 may be electrically connected to the target device. Here, the target device may include an electrical device, an electronic device, or a mechanical device that operates by receiving power from the battery pack 100 including multiple battery cells 111, 112, 113, and 114, and the target device may be, for example, an electric vehicle (EV), but is not limited thereto.

[0042] The battery cell 111 may be a lithium-ion (Li-ion) battery, a Li-ion polymer battery, a nickel-cadmium (Ni-Cd) battery, a nickel-metal hydride (Ni-MH) battery, etc., and is not limited thereto. In addition, although one battery module 110 is shown in Figure 1 , multiple battery modules 110 may be configured according to an embodiment.

[0043] A battery management device (or a battery management system (BMS)) 120 may manage and / or control the state and / or operation of the battery module 110. For example, the battery management device 120 may manage and / or control the state and / or operation of the multiple battery cells 111, 112, 113, and 114 included in the battery module 110. The battery management device 120 may manage the charging and / or discharging of the battery module 110.

[0044] In addition, the battery management device 120 may monitor the voltage, current, temperature, etc. of the battery module 110 and / or each of the multiple battery cells 111, 112, 113, and 114 included in the battery module 110. Sensors or various measurement modules (not shown) for the battery management device 120 to perform monitoring may be additionally installed in the battery module 110, in the charging / discharging path, at any position of the battery module 110, etc. The battery management device 120 may calculate parameters indicating the state of the battery module 110 (e.g., state of charge (SOC), state of health (SOH), etc.) based on the measured values of the monitored voltage, current, temperature, etc.

[0045] The battery management device 120 may control the operation of the relay 140. For example, the battery management device 120 may short-circuit the relay 140 to supply power to the target device. When a charging device is connected to the battery pack 100, the battery management device 120 may short-circuit the relay 140.

[0046] The battery management device 120 may calculate the cell balancing time for each of the plurality of battery cells 111, 112, 113, and 114. Here, the cell balancing time may be defined as the time required to balance the battery cells. For example, the battery management device 120 may calculate the cell balancing time based on the SOC, battery capacity, and balancing efficiency of each of the plurality of battery cells 111, 112, 113, and 114.

[0047] The battery authentication module 130 may verify the stability of an external device requesting battery data and send the battery data to the external device. According to an embodiment, the battery authentication module 130 may be electrically connected to the battery management device 120 or installed inside the battery management device 120 to obtain battery data from the battery management device 120.

[0048] Hereinafter, with reference to Figure 2 The configuration of the battery data management system 1000 including the battery authentication module 130 described above will be described in detail. In Figure 2 the battery module 110 may include a plurality of battery cells 111, 112, 113, and 114, but the first battery cell 111 will be described as an example hereinafter.

[0049] Figure 2 is a block diagram showing the configuration of a battery data management system according to an embodiment disclosed herein. Referring to Figure 2 the battery management device 1000 may include a battery authentication module 130, a terminal 200, and an authentication server 300.

[0050] The battery authentication module 130 may receive and send encrypted messages to and from the terminal 200 to verify the stability of the terminal 200. Encryption is typically used in data communication to ensure the confidentiality of sensitive information. When the information received during the data communication process is not verified without separate encryption / decryption, it may allow forged external intrusion messages on the network, posing a fatal threat to users.

[0051] The terminal 200 may communicate with the battery authentication module 130 to obtain the battery data of the first battery cell 111. For example, the terminal 200 may request the battery data of the first battery cell 111 from the battery authentication module 130 and perform a mutual stability verification process with the battery authentication module 130 to obtain the encrypted battery data of the first battery cell 111. According to an embodiment, the terminal 200 may be implemented in the form of a portable terminal or a fixed terminal.

[0052] The authentication server 300 may support the mutual stability verification process between the terminal 200 and the battery authentication module 130. The authentication server 300 may verify the messages received by the terminal 200 from the battery authentication module 130 to verify the stability of the battery authentication module 130. The authentication server 300 may generate the messages required for the terminal 200 to be verified for its stability by the battery authentication module 130, and send the messages to the terminal 200.

[0053] Hereinafter, with reference to Figures 3 - 5 the configurations of each of the battery authentication module 130, the terminal 200, and the authentication server 300 will be described.

[0054] Figure 3 A block diagram showing the configuration of the battery authentication module 130 according to an embodiment disclosed herein. With reference to Figure 3 according to an embodiment, the battery authentication module 130 may include a first information storage unit 131, a first communication unit 132, and a first processing unit 133.

[0055] The first information storage unit 131 may store battery-related information of the first battery cell. The first information storage unit 131 may store the authentication information required to generate a message corresponding to the message received from the terminal 200. For example, the authentication information may include at least one of serial information of the first battery cell 111, serial information of the battery module 110, the address of the authentication server 300, or a random number generation algorithm.

[0056] The first communication unit 132 may receive an encrypted message from the terminal 200, and send an encrypted message to the terminal 200. More specifically, the first communication unit 132 may send an encrypted second message or an encrypted second key to the terminal 200.

[0057] The first communication unit 132 may send encrypted battery data to the terminal 200 via a wired / wireless network. For example, the first communication unit 132 may send encrypted battery data to the terminal 200 via Bluetooth, Wi-Fi, ZigBee.

[0058] The first processing unit 133 may generate a message corresponding to the message received from the terminal 200 to verify the stability of the terminal 200. More specifically, the first processing unit 133 may decrypt the encrypted first message using a previously stored first key to obtain the first message. The first processing unit 133 may generate a message corresponding to the first message, and verify the stability of the terminal 200 by determining whether the first message and the message corresponding to the first message are the same as each other. When the first message and the message corresponding to the first message are the same as each other, the first processing unit 133 may generate a second message. The first processing unit 133 may generate an encrypted second message by encrypting the second message and the first key.

[0059] In addition, the first processing unit 133 may decrypt the encrypted third message using the first key to obtain the third message. The first processing unit 133 may generate a message corresponding to the third message, and verify the third message by determining whether the third message and the message corresponding to the third message are the same as each other.

[0060] The first processing unit 133 may encrypt the battery data obtained from the battery management device 120, and send the encrypted battery data to the terminal 200. Here, the battery data may include, for example, the voltage, current, temperature, charge state (SOC), etc. of the first battery cell 111. For example, the first processing unit 133 may generate a second key as a shared session key to encrypt the battery data using the second key.

[0061] Figure 4 is a block diagram showing the configuration of the terminal 200 according to an embodiment disclosed herein. Referring to Figure 4 the terminal 200 may include a battery scanning unit 210, a second communication unit 220, and a second processing unit 230.

[0062] The battery scanning unit 210 may obtain battery-related information of the first battery cell 111 by scanning the first battery cell 111. The battery scanning unit 210 may directly receive the battery-related information of the first battery cell 111 from the user, and store the information.

[0063] Here, the battery-related information is information including data related to the battery, which may be publicly disclosed, and thus is obtained by the terminal 200 without a separate verification process. For example, the battery-related information may include information about the vehicle in which the battery is installed or the vehicle information number of the vehicle.

[0064] The second communication unit 220 may send the encrypted first message to the battery authentication module 130. The second communication unit 220 may send the first message and the second message to the authentication server 300. The second communication unit 220 may send the encrypted third message to the battery authentication module 130.

[0065] The second processing unit 230 may generate an encrypted message or decrypt an encrypted message. More specifically, the second processing unit 230 may encrypt the first message or the third message by using a public key. In addition, the second processing unit 230 may use the public key to decrypt the second message to obtain the second message.

[0066] Figure 5 is a block diagram showing the configuration of an authentication server according to an embodiment disclosed herein. Referring to Figure 5 the authentication server 300 may include a third information storage unit 310, a third communication unit 320, and a third processing unit 330.

[0067] The third information storage unit 310 may store battery-related information of the first battery cell. The third information storage unit 310 may store authentication information required to generate a message corresponding to the message received from the terminal 200. For example, the authentication information may include at least one of serial information of the first battery cell 111, serial information of the battery module 110, the address of the authentication server 300, or a random number generation algorithm.

[0068] The third communication unit 320 may send a public key and a first message to the terminal 200. The third communication unit 320 may also send a message corresponding to the second message to the terminal 200.

[0069] The third processing unit 330 may generate a message corresponding to the message generated by the battery authentication module 130 to verify the stability of the battery authentication module 130. For example, the third processing unit 330 may generate a message corresponding to the second message. The third processing unit 330 may determine whether the second message and the message corresponding to the second message are the same as each other to verify the stability of the battery authentication module 130. When the second message and the message corresponding to the second message are the same as each other, the third processing unit 330 may generate a third message.

[0070] As described above, the battery data management system 1000 according to the embodiment disclosed herein may directly obtain battery data through a wired / wireless network and create a battery data communication environment with enhanced security.

[0071] The embodiments disclosed herein are intended to directly obtain battery data through a wired / wireless network and provide a battery data management system and an operation method thereof.

[0072] In addition, the battery data management system 1000 may detect an external intruder attempting to sneak in using a forged message by performing communication for decrypting the encrypted message.

[0073] The battery data management system 1000 can send the data of the battery cells to the outside in real time, so that the battery data administrator or the battery manufacturer can immediately determine whether the battery cells are defective.

[0074] The battery data management system 1000 can obtain and send battery data without transporting the battery pack 100 using a separate device or attaching / detaching the battery pack 100 from / to a vehicle after the battery pack 100 is manufactured, thereby improving the battery data management efficiency.

[0075] Figure 6 is a flowchart showing an operation method of a battery data management system according to an embodiment disclosed herein.

[0076] Hereinafter, with reference to Figure 6 , the operation method of the battery data management system will be described in detail.

[0077] With reference to Figure 6 , the operation method of the battery data management system according to an embodiment disclosed herein may include: Step S101, in which the terminal 200 sends battery-related information to the authentication server 300 to obtain a public key and a first message, encrypts the first message with the public key, and sends the encrypted first message to the battery authentication module 130; Step S102, in which the battery authentication module 130 decrypts the encrypted first message with a previously stored first key to obtain the first message, generates a second message based on random number information, encrypts the second message with the first key, and sends the encrypted second message to the terminal 200; Step S103, in which the terminal 200 decrypts the second message with the public key to obtain the second message, and sends the first message and the second message to the authentication server 300; Step S104, in which the authentication server 300 generates a third message based on the random number and sends the third message to the terminal 200; Step S105, in which the terminal 200 encrypts the third message with the public key and sends the encrypted third message to the battery authentication module 130; and Step S106, in which the battery authentication module 130 decrypts the encrypted third message with the first key to obtain the third message, generates a second key as a shared session key, encrypts the second key with the first key, and sends the encrypted second key to the terminal 200.

[0078] With reference to Figure 6 , in step S101, the terminal 200 may scan the battery to obtain battery-related information. For example, the terminal 200 may directly receive battery-related information from the user and store the battery-related information.

[0079] In step S101, the terminal 200 may send the acquired battery-related information to the authentication server 300. In step S101, the authentication server 300 may send a public key and a first message to the terminal 200.

[0080] In step S101, the terminal 200 may encrypt the first message using the public key and send the encrypted first message to the battery authentication module 130.

[0081] In step S102, the battery authentication module 130 may use the previously stored first key to decrypt the encrypted first message to obtain the first message.

[0082] In step S102, the battery authentication module 130 may generate a second message.

[0083] In step S102, the battery authentication module 130 may encrypt the second message using the first key and send the encrypted second message to the terminal 200.

[0084] In step S103, the terminal 200 may decrypt the second message using the public key to obtain the second message. In step S103, the terminal 200 may send the first message and the second message to the authentication server 300.

[0085] In step S104, the authentication server 300 may generate a third message and send the third message to the terminal 200.

[0086] In step S105, the terminal 200 may encrypt the third message received from the authentication server 300 using the public key and send the encrypted third message to the battery authentication module 130.

[0087] In step S106, the battery authentication module 130 may decrypt the encrypted third message using the first key to obtain the third message.

[0088] In step S106, the battery authentication module 130 may generate a second key as a shared session key. Here, the second key may be a shared key that can be used for encrypting and decrypting battery data or messages for data communication between the terminal 200 and the battery authentication module 130.

[0089] In step S106, the battery authentication module 130 may encrypt the second key using the first key and send the encrypted second key to the terminal 200.

[0090] Figure 7a and Figure 7b are diagrams for generally describing the battery data management system according to the embodiments disclosed herein.

[0091] Hereinafter, reference will be made to Figure 7aAnd 7b Describe in detail the mutual stability verification process of the battery authentication module 130, the terminal 200, and the authentication server 300 of the battery data management system 1000. Figure 7b Shows Figure 7a The steps after a series of steps S201 to S214 of the battery data management system 1000 shown.

[0092] Refer to Figure 7a , in step S201, the terminal 200 can scan the battery to obtain battery-related information.

[0093] In step S202, the terminal 200 can send the obtained battery-related information to the authentication server 300.

[0094] In step S203, the authentication server 300 can identify the battery-related information received from the terminal 200 to determine the suitability of the battery-related information.

[0095] In step S204, the authentication server 300 can send a public key and a first message to the terminal 200.

[0096] In step S205, the terminal 200 can encrypt the first message with the public key.

[0097] In step S206, the terminal 200 can send the encrypted first message to the battery authentication module 130.

[0098] In step S207, the battery authentication module 130 can decrypt the encrypted first message using the previously stored first key to obtain the first message.

[0099] In step S208, the battery authentication module 130 can generate a message corresponding to the first message. For example, in step S208, the battery authentication module 130 can generate a message corresponding to the first message by using at least one of the sequence information of the previously stored first battery cell 111, the sequence information of the battery module 110, the address of the authentication server 300, or a random number generation algorithm.

[0100] In step S209, the battery authentication module 130 can verify the stability of the terminal 200 by determining whether the first message and the message corresponding to the first message are the same as each other.

[0101] In step S210, when the first message and the message corresponding to the first message are the same as each other, the battery authentication module 130 can generate a second message based on the random number information. For example, in step S210, the battery authentication module 130 can generate a second message by using OTP information.

[0102] In step S211, the battery authentication module 130 may encrypt the second message with the first key to generate an encrypted second message.

[0103] In step S212, the battery authentication module 130 may send the encrypted second message to the terminal 200.

[0104] In step S213, the terminal 200 may decrypt the second message using the public key to obtain the second message. For example, in step S213, the terminal 200 may identify the basic information of the second information (such as the number of bits or data length of the second message) to determine the suitability of the second message.

[0105] In step S214, when the second message is suitable, the terminal 200 may send the first message and the second message to the authentication server 300.

[0106] Refer to Figure 7b , in step S215, the authentication server 300 may derive the serial number information of the battery based on the received first message, and determine whether the derived battery serial number information is suitable.

[0107] In step S216, when the derived battery serial number information is suitable, the authentication server 300 may generate a message corresponding to the second message based on the random number information. For example, in step S216, the authentication server 300 may generate a message corresponding to the second message by using at least one of the previously stored sequence information of the first battery cell 111, the sequence information of the battery module 110, the address of the authentication server 300, or a random number generation algorithm.

[0108] In step S217, the authentication server 300 may determine whether the second message and the message corresponding to the second message are the same as each other to verify the stability of the battery authentication module 130.

[0109] In step S218, when the second message and the message corresponding to the second message are the same as each other, the authentication server 300 may generate a third message based on the random number information. For example, in step S218, the authentication server 300 may generate the third message by using the OTP information.

[0110] In step S219, the authentication server 300 may send the message corresponding to the second message to the terminal 200.

[0111] In step S220, the terminal 200 may encrypt the third message with the public key received from the authentication server 300.

[0112] In step S221, the terminal 200 may send the encrypted third message to the battery authentication module 130.

[0113] In step S222, the battery authentication module 130 may decrypt the encrypted third message using the first key to obtain the third message.

[0114] In step S223, the battery authentication module 130 may generate a message corresponding to the third message based on the random number information.

[0115] In step S224, the battery authentication module 130 may verify the third message by determining whether the third message and the message corresponding to the third message are the same as each other.

[0116] In step S225, when the third message and the message corresponding to the third message are the same as each other, the battery authentication module 130 may generate a second key as the shared session key.

[0117] In step S226, the battery authentication module 130 may encrypt the second key using the first key to generate an encrypted second key.

[0118] In step S227, the battery authentication module 130 may send the encrypted second key to the terminal 200.

[0119] In step S228, the terminal 200 may decrypt the encrypted second message using the public key to obtain the second message.

[0120] In step S229, the battery authentication module 130 may encrypt the battery data using the second key.

[0121] In step S230, the battery authentication module 130 may send the encrypted battery data to the terminal 200.

[0122] The above description is only an illustration of the technical idea of the present disclosure. For those of ordinary skill in the art to which the present invention pertains, various modifications and variations can be made without departing from the essential characteristics of the present invention. ...

[0123] Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the technical idea of the present disclosure. The scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the appended claims, and all technical ideas within the same scope should be understood to be included within the scope of the present invention.

Claims

1. An operating method of a battery data management system, the operating method comprising the following steps: Sending battery-related information from a terminal to an authentication server to obtain a public key and a first message, encrypting the first message with the public key, and sending the encrypted first message to a battery authentication module; The battery authentication module decrypts the encrypted first message with a previously stored first key to obtain the first message, generates a second message based on random number information, encrypts the second message with the first key, and sends the encrypted second message to the terminal; The terminal decrypts the encrypted second message with the public key to obtain the second message, and sends the first message and the second message to the authentication server; The authentication server generates a third message based on the random number, and sends the third message to the terminal; The terminal encrypts the third message with the public key, and sends the encrypted third message to the battery authentication module; And The battery authentication module decrypts the encrypted third message with the first key to obtain the third message, generates a second key as a shared session key, encrypts the second key with the first key, and sends the encrypted second key to the terminal.

2. The operating method according to claim 1, wherein the operating method further comprises the following steps: The terminal decrypts the encrypted second key with the public key to obtain the second key.

3. The operating method according to claim 2, wherein the operating method further comprises the following steps: The battery authentication module encrypts the battery data with the second key, and sends the encrypted battery data to the terminal.

4. The operating method according to claim 1, wherein The step of the battery authentication module decrypting the encrypted first message with a previously stored first key to obtain the first message, generating the second message based on the random number information, encrypting the second message with the first key, and sending the encrypted second message to the terminal comprises the following steps: generating a message corresponding to the first message and verifying the stability of the terminal by determining whether the first message and the message corresponding to the first message are the same as each other.

5. The operating method according to claim 1, wherein, The step of the battery authentication module decrypting the encrypted first message with a previously stored first key to obtain the first message, generating the second message based on the random number information, encrypting the second message with the first key, and sending the encrypted second message to the terminal comprises the following steps: generating the second message by using OTP information.

6. The operating method according to claim 1, wherein, The step of the authentication server generating a third message based on the random number and sending the third message to the terminal comprises the following steps: deriving the serial number information of the battery based on the first message, and determining whether the derived serial number information of the battery is appropriate.

7. The operating method according to claim 6, wherein, The step of the authentication server generating a third message based on the random number and sending the third message to the terminal comprises the following steps: generating a message corresponding to the second message based on the random number information and verifying the stability of the battery authentication module by determining whether the second message and the message corresponding to the second message are the same as each other.

8. The operating method according to claim 1, wherein The step of generating, by the authentication server, a third message based on the random number and sending the third message to the terminal includes the following steps: generating the third message by using OTP information.

9. The operating method according to claim 1, wherein, The step of decrypting, by the battery authentication module, the encrypted third message by using the first key to obtain the third message, generating a second key as a shared session key, encrypting the second key by using the first key, and sending the encrypted second key to the terminal includes the following steps: generating a message corresponding to the third message based on the random number information and verifying the third message by determining whether the third message and the message corresponding to the third message are the same as each other.

10. The operating method according to claim 1, wherein, The step of sending, by the terminal, the battery-related information to the authentication server to obtain the public key and the first message, encrypting the first message by using the public key, and sending the encrypted first message to the battery authentication module includes the following steps: obtaining, by the terminal, the battery-related information by scanning the battery.

11. The operating method according to claim 1, wherein, The battery-related information includes information of a vehicle in which the battery is installed or a vehicle information number of the vehicle.

12. A battery data management system, the battery data management system comprising: a terminal configured to obtain a public key and a first message based on battery-related information, encrypt the first message by using the public key, and request transmission of battery data based on the encrypted first message; a battery authentication module configured to decrypt the encrypted first message by using a previously stored first key to obtain the first message, generate a second message based on random number information, encrypt the second message by using the first key, and send the encrypted second message to the terminal to verify the stability of the terminal; and an authentication server configured to generate a third message based on the random number information and send the third message to the terminal to verify the stability of the battery authentication module.

13. The battery data management system according to claim 12, wherein, The terminal is further configured to receive the encrypted second message from the battery authentication module, decrypt the encrypted second message by using the public key to obtain the second message, and send the first message and the second message to the authentication server.

14. The battery data management system according to claim 13, wherein, The terminal is further configured to receive the third message from the authentication server, encrypt the third message by using the public key, and send the encrypted third message to the battery authentication module.

15. The battery data management system according to claim 14, wherein, The battery authentication module is further configured to decrypt the encrypted third message by using the first key to obtain the third message, generate a second key as a shared session key, encrypt the second key by using the first key, and send the encrypted second key to the terminal.

16. The battery data management system according to claim 15, wherein, The terminal is further configured to decrypt the encrypted second key by using the public key to obtain the second key, and the terminal and the battery authentication module are further configured to encrypt and decrypt the battery data by using the second key to perform data communication.

Images