Charging method and system
By generating random numbers on the vehicle operation platform and generating charging vouchers using the vehicle charging authorization certificate private key signature, the problem of easy stolen identity information in the existing vehicle charging system is solved, and the high security and legality of charging vouchers are achieved.
Patent Information
- Application Number
- CN202410321176.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-03-20
- Publication Date
- 2025-03-18
- Estimated Expiration
- 2044-03-20
AI Technical Summary
In the existing vehicle charging system, the DC charging enable control and fee settlement methods based on VIN or other identity codes lack cryptographic protection, resulting in the easy stolen identity information.
The random number generated by the vehicle operation platform and the prefabricated vehicle charging authorization certificate private key signature are used to generate charging vouchers. Through time factors, random numbers, position factors, identity identification and signature protection measures, the integrity and legality of the charging vouchers are guaranteed.
It effectively prevents identity theft, ensures the integrity and legality of charging credentials, and improves the safety of the vehicle charging process.
Smart Images

Figure CN118082601B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of vehicle technology, and in particular to a charging method and system. Background Art
[0002] In the user-friendly plug-and-charge technology solution in the related art, the vehicle VIN (Vehicle Identification Number) or other unique identification code representing the vehicle is used as the basis for identity authentication, and is sent in plain text to the charging pile to enable control and fee settlement of DC charging. This method has no cryptographic protection and its identity information is easily stolen. Summary of the invention
[0003] Based on the above problems, an embodiment of the present application provides a charging method and system.
[0004] The technical solution provided by the embodiment of the present application is as follows:
[0005] The present application embodiment first provides a charging method, which is applied to a vehicle operation platform, and the method includes:
[0006] Obtain a charging request for a vehicle, wherein the charging request carries first identification information, first location information, and first time information of the vehicle; generate a first random number, and generate a first data matrix based on the first random number, the first identification information, the first location information, and the first time information; sign the first data matrix based on a private key corresponding to a prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that a charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when a first verification result of the first charging credential is that the verification passes.
[0007] An embodiment of the present application also provides a charging method, which is applied to a vehicle, and the method includes: in response to establishing a connection with a charging pile, sending a charging request to a vehicle operation platform, the charging request carrying first identification information, first location information and first time information of the vehicle; obtaining a first random number generated by the vehicle operation platform and a private key corresponding to a pre-made vehicle charging authorization certificate, and generating a first data matrix based on the first random number, the first identification information, the first location information and the first time information; based on the private key, signing the first data matrix to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when a first verification result of the first charging credential is verification passed.
[0008] An embodiment of the present application also provides a charging method, which is applied to a charging pile operation platform, and the method includes: obtaining a charging request of a vehicle forwarded by the vehicle operation platform and a private key corresponding to a vehicle charging authorization certificate pre-made by the vehicle operation platform, wherein the charging request carries first identification information, first location information, and first time information of the vehicle; generating a first random number, and generating a first data matrix based on the first random number, the first identification information, the first location information, and the first time information; signing the first data matrix based on the private key to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is verification passed.
[0009] An embodiment of the present application also provides a charging system, which includes: a vehicle, a vehicle operation platform, a charging pile operation platform and a charging pile, wherein: the vehicle is used to send a charging request to the vehicle operation platform, and the charging request carries the first identification information, first location information and first time information of the vehicle; the vehicle operation platform is used to generate a first random number, and generate a first data matrix based on the first random number, the first identification information, the first location information and the first time information; based on the private key corresponding to the pre-made vehicle charging authorization certificate, the first data matrix is signed to obtain a first charging credential; the charging pile operation platform, the vehicle operation platform or the charging pile is used to verify the first charging credential to obtain the first verification result; the charging pile operation platform is used to send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is verification passed.
[0010] An embodiment of the present application further provides an electronic device, which includes a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the program, the steps in the charging method described in the embodiment of the present application are implemented.
[0011] The embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps in the charging method described in the embodiment of the present application are implemented.
[0012] In the embodiment of the present application, a charging credential is issued based on a vehicle charging authorization certificate deployed on a vehicle operation platform, which requires relatively little modification to the existing system. The prefabrication of the vehicle charging authorization certificate can refer to the existing vehicle-side and cloud-side certificate prefabrication process, which is easier to implement. On the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging credential are guaranteed to prevent identity theft. BRIEF DESCRIPTION OF THE DRAWINGS
[0013] Figure 1 A schematic diagram of a charging method according to an embodiment of the present application;
[0014] Figure 2 This is a flow chart of another charging method according to an embodiment of the present application;
[0015] Figure 3 This is a flow chart of another charging method according to an embodiment of the present application;
[0016] Figure 4 This is a flow chart of another charging method according to an embodiment of the present application;
[0017] Figure 5 A schematic diagram of a charging method according to an embodiment of the present application is provided;
[0018] Figure 6 A schematic diagram of a charging method according to an embodiment of the present application is provided;
[0019] Figure 7 A schematic diagram of a charging method according to an embodiment of the present application is provided;
[0020] Figure 8 A schematic diagram of a charging method according to an embodiment of the present application is provided;
[0021] Fig. 9 A schematic diagram of a charging method according to an embodiment of the present application is provided;
[0022] Fig.10 This is a schematic diagram of the composition structure of a charging system according to an embodiment of the present application;
[0023] Fig.11 A schematic diagram of a charging method for issuing a charging certificate by a vehicle operation platform according to an embodiment of the present application;
[0024] Fig.12 A schematic diagram of a charging method for issuing a charging certificate for a vehicle according to an embodiment of the present application;
[0025] Fig.13 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION
[0026] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.
[0027] Figure 1 This is a schematic diagram of a charging method according to an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:
[0028] Step 102: The vehicle operation platform obtains a charging request of the vehicle, wherein the charging request carries the first identification information, the first location information and the first time information of the vehicle;
[0029] Among them, the vehicle operation platform can be a server of the vehicle in the cloud. After the charging gun of the charging pile is inserted into the vehicle and the charging gun completes the connection, the vehicle sends a charging request to the vehicle operation platform to request a charging credential; the first identification information can be the identity code of the vehicle, the first location information can be the current location of the vehicle, and the first time information can be the current time information.
[0030] Step 104: the vehicle operation platform generates a first random number, and generates a first data matrix based on the first random number, the first identification information, the first location information and the first time information;
[0031] After receiving the charging request, the vehicle operation platform derives a first random number N1 as a charging authorization code, and binds the charging authorization code with the first identification information, the first location information and the first time uploaded by the current vehicle to obtain a first data matrix.
[0032] Step 106: The vehicle operation platform signs the first data matrix based on the private key corresponding to the prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is passed.
[0033] The charging pile operation platform may be a server of the charging pile in the cloud, and the first charging certificate Token1 of the vehicle may be generated by signing the first data matrix based on the private key corresponding to the vehicle charging authorization certificate pre-made by the vehicle operation platform.
[0034] In the embodiment of the present application, a charging credential is issued based on a vehicle charging authorization certificate deployed on a vehicle operation platform, which requires relatively little modification to the existing system. The prefabrication of the vehicle charging authorization certificate can refer to the existing vehicle-side and cloud-side certificate prefabrication process, which is easier to implement. On the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging credential are guaranteed to prevent identity theft.
[0035] In some embodiments, Figure 2 As shown, the method also includes:
[0036] Step 107a: The vehicle operation platform sends the first charging credential to the vehicle, so that the vehicle sends the first charging credential and the second identification information of the vehicle to the charging pile, and the charging pile sends the second identification information, the third identification information of the charging pile and the first charging credential to the charging pile operation platform, so that the charging pile operation platform obtains the first verification result of the first charging credential.
[0037] Among them, the third identification information can be the identity identification code of the charging pile. After the vehicle receives the first charging certificate Token1 issued by the vehicle operation platform, the first charging certificate and the second identification information of the vehicle are sent to the charging pile based on the communication channel between the vehicle and the charging pile. After the charging pile receives the first charging certificate and the second identification information, the second identification information of the vehicle, the third identification information of the charging pile and the first charging certificate of the vehicle are uploaded to the charging pile operation platform together.
[0038] In an embodiment of the present application, after receiving the first charging credential, the vehicle operating platform can send the first charging credential to the vehicle so that the vehicle can send the first charging credential to the charging pile operating platform through the charging pile, so that the charging pile operating platform can obtain the first verification result of the first charging credential.
[0039] In some embodiments, Figure 3 As shown, the method also includes:
[0040] Step 108: The vehicle operation platform sends the public key corresponding to the vehicle charging authorization certificate to the charging pile operation platform, so that the charging pile operation platform can verify the first charging certificate based on the public key. If the verification is passed, the second identification information and the first identification information are checked for consistency, the first location information and the second location information corresponding to the third identification information are checked for consistency, and the first time information and the current time information are checked for consistency to obtain the first verification result.
[0041] Among them, the vehicle operation platform can pass the public key corresponding to the vehicle charging authorization certificate to the charging pile operation platform, and the charging pile operation platform will verify the signature of the first charging certificate. After the signature verification is passed, if the consistency check of the identification information, location information and time information are all passed, then the first verification result is the verification passed, otherwise the first verification result is the verification failed. After the verification passes, the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle.
[0042] In the embodiment of the present application, the first charging credential can be verified through the charging pile operation platform to improve the security of the first charging credential.
[0043] In some embodiments, Figure 4 As shown, the method also includes:
[0044] Step 109: the vehicle operation platform obtains the second identification information, the third identification information and the first charging credential sent by the charging pile operation platform;
[0045] After receiving the charging certificate, the charging pile operation platform can pass the first charging certificate Token1 to the vehicle operation platform through a secure channel.
[0046] Step 110: The vehicle operation platform verifies the signature of the first charging credential based on the public key corresponding to the vehicle charging authorization certificate. If the signature verification passes, the first identification information, the first random number, the first location information, and the first time information in the first charging credential are verified to obtain the first verification result;
[0047] Step 111: The vehicle operation platform sends the first verification result to the charging pile operation platform.
[0048] Among them, the vehicle operation platform can send the first verification result and the first position information to the charging pile operation platform. When the charging pile operation platform receives the first verification result as passed, it queries the second position information of the charging pile based on the third identification information of the charging pile, and performs a position verification with the received first position information. After the position verification passes, the charging pile operation platform can control the charging pile to enable charging through a charging instruction. If the received verification result is a verification failure or a position information verification failure, the charging pile should be controlled to stop responding to the vehicle's charging request.
[0049] In the embodiment of the present application, the first charging credential can be verified through the vehicle operation platform to improve the security of the first charging credential.
[0050] In some embodiments, Figure 5 As shown, the method also includes:
[0051] Step 107b: The vehicle operation platform sends the first charging credential to the vehicle; so that the vehicle sends the first charging credential and the second identification information of the vehicle to the charging pile, and the charging pile verifies the first charging credential based on the public key corresponding to the vehicle charging authorization certificate. If the verification is passed, the second identification information and the first identification information are checked for consistency, the first location information and the second location information corresponding to the third identification information are checked for consistency, and the first time information and the current time information are checked for consistency to obtain the first verification result. The vehicle sends the first verification result to the charging pile operation platform through the charging pile.
[0052] In the embodiment of the present application, the first charging credential can be verified by the charging pile to improve the security of the first charging credential.
[0053] In some embodiments, Figure 6 As shown, the method also includes:
[0054] Step 112: When the first verification result is that the verification is passed, the vehicle operation platform generates a second random number at a plurality of times according to a preset time interval, and the second random number at each time is different;
[0055] Step 113: The vehicle operation platform generates a second data matrix at a corresponding moment based on the second random number at each moment, the first identification information, the first location information, and the first time information;
[0056] Step 114: The vehicle operation platform signs the second data matrix at each moment based on the private key corresponding to the vehicle charging authorization certificate to obtain the second charging credential at the corresponding moment, so that when the second verification result of the second charging credential at the corresponding moment is passed, the charging pile operation platform sends a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle at the corresponding moment.
[0057] Among them, the second charging credential is also called the charging preservation credential. After the vehicle operation platform passes the charging identity verification of the vehicle, the first random number N1 can be immediately incremented to obtain the second random number, and the private key pair corresponding to the vehicle charging authorization certificate (first identification information, updated N1, first location information, first time information) is used to re-issue the charging preservation credential Token2 and send it to the vehicle.
[0058] During the charging process, the vehicle transmits the charging keep-alive certificate Token2 and the vehicle's fourth identification information to the charging pile in real time. Similarly, the charging pile uploads the charging pile's third identification information, the vehicle's fourth identification information and the vehicle's charging keep-alive certificate to the charging pile operation platform. After receiving the charging keep-alive certificate Token2, the charging pile operation platform transmits the vehicle's charging keep-alive certificate Token2 to the vehicle operation platform through a secure channel.
[0059] After the vehicle operation platform receives the vehicle charging preservation certificate Token2 sent by the charging pile operation platform, it uses the public key corresponding to the vehicle charging authorization certificate to verify the signature. After the signature verification is passed, the issued (first identification information, updated N1, first location information, first time information) is verified. After the verification is passed, the second verification result and the first location information are sent to the charging pile operation platform.
[0060] It should be noted that the charging preservation certificate may also be verified through the charging pile operation platform or the charging pile.
[0061] When the charging pile operation platform receives the second verification result as passed, it queries the second location information of the charging pile based on the third identification information of the charging pile and performs a location verification with the received first location information. After the verification passes, the charging pile operation platform controls the charging pile to enable charging through instructions. If the received verification result is a verification failure or a location information verification failure, the charging pile should be controlled to stop responding to the vehicle-side charging request.
[0062] In the embodiment of the present application, after the charging credential is successfully authenticated, it is immediately switched to the charging keep-alive credential, and authentication is continued throughout the entire charging process, thereby improving the network security of the charging process.
[0063] In some embodiments, Figure 7 As shown, the method also includes:
[0064] Step 115: The vehicle operation platform obtains a fee settlement request sent by the charging pile operation platform, where the fee settlement request carries the first encrypted charging data and the encrypted charging fee;
[0065] Step 116: The vehicle operation platform obtains the second encrypted charging data sent by the vehicle; the first encrypted charging data, the second encrypted charging data and the encrypted charging fee are encrypted using the public key corresponding to the vehicle charging authorization certificate, or signed using the private key corresponding to the vehicle charging authorization certificate;
[0066] Step 117: the vehicle operation platform decrypts or verifies the first encrypted charging data, the second encrypted charging data, and the encrypted charging fee, and obtains the first charging data, the second charging data, and the charging fee if the decryption or verification passes, and performs consistency verification on the first charging data and the second charging data to obtain a third verification result;
[0067] Step 118: When the third inspection result is a passed inspection, the vehicle operation platform responds to the fee settlement request based on the charging fee.
[0068] Among them, after charging stops, the charging pile uploads the first charging data and the latest charging preservation certificate Token2 to the charging pile operation platform; the charging pile operation platform calculates the charging fee based on the received first charging data. Optionally, the charging operation platform can encrypt and protect the first charging data and charging fee based on the public key of the vehicle charging authorization certificate transmitted by the vehicle operation platform, or use the private key of the charging pile operation platform certificate for signature protection, and upload the obtained first encrypted charging data, encrypted charging fee and the latest preservation certificate Token2 to the vehicle operation platform.
[0069] The vehicle uploads the second charging data monitored by the vehicle and the latest keep-alive certificate Token2 to the vehicle operation platform. The vehicle operation platform verifies the first charging data uploaded by the charging pile operation platform and the second charging data uploaded by the vehicle and the latest keep-alive certificate Token2 to determine whether the charging data is consistent. After the verification is passed, the vehicle operation platform responds to the charging fee settlement request initiated by the charging pile operation platform.
[0070] In the embodiment of the present application, the charging preservation certificate is used as the certificate basis for vehicle charging when settling fees, and the data on the vehicle side and the charging pile side are combined to prevent the charging fee settlement process from being illegally counterfeited or tampered with.
[0071] Figure 8 A flow chart of a charging method is also provided in the embodiment of the present application. Figure 8 As shown, the method comprises the following steps:
[0072] Step 202: In response to establishing a connection with the charging pile, the vehicle sends a charging request to the vehicle operation platform, where the charging request carries the first identification information, the first location information, and the first time information of the vehicle;
[0073] Step 204: the vehicle obtains a first random number generated by the vehicle operation platform, and generates a first data matrix based on the first random number, the first identification information, the first location information, and the first time information;
[0074] Step 206: The vehicle signs the first data matrix based on the private key corresponding to the prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is passed.
[0075] In the embodiment of the present application, a charging credential is issued based on a vehicle charging authorization certificate deployed on the vehicle, which requires relatively little modification to the existing system. The prefabrication of the vehicle charging authorization certificate can refer to the existing vehicle-side and cloud-side certificate prefabrication process, which is easier to implement. On the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging credential are guaranteed to prevent identity theft.
[0076] Fig. 9 A flow chart of a charging method is also provided in the embodiment of the present application. Fig. 9 As shown, the method comprises the following steps:
[0077] Step 302: The charging pile operation platform obtains the charging request of the vehicle forwarded by the vehicle operation platform, wherein the charging request carries the first identification information, the first location information, and the first time information of the vehicle;
[0078] Step 304: the charging pile operation platform generates a first random number, and generates a first data matrix based on the first random number, the first identification information, the first location information and the first time information;
[0079] Step 306: The charging pile operation platform signs the first data matrix based on the private key corresponding to the prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that when the first verification result of the first charging credential is passed, the charging pile operation platform sends a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle.
[0080] In the embodiment of the present application, a charging certificate is issued based on a vehicle charging authorization certificate deployed on a charging pile operation platform, which requires relatively little modification to the existing system. The prefabrication of the vehicle charging authorization certificate can refer to the existing vehicle-side and cloud-side certificate prefabrication process, which is easier to implement. On the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging certificate are guaranteed to prevent identity theft.
[0081] The embodiment of the present application proposes a safe and lightweight authentication system that requires little modification to the existing system, thereby avoiding the problem that users need to maintain different account information when charging on charging piles of different operators, while improving the security of vehicle authentication during the senseless charging process; the embodiment of the present application is compatible with the national standard charging protocol, and only requires minor modifications to the existing system.
[0082] In the embodiment of the present application, after the DC charging gun is inserted into the vehicle side (i.e., the vehicle) and the connection is confirmed, the vehicle to be charged sends the vehicle's unique identification code (also known as vehicle identification information or vehicle identity information), vehicle location information, and current time information to the vehicle operation platform. The vehicle operation platform derives a random number of a safe length, and issues this charging certificate based on the private key of the vehicle charging certificate issuance certificate (also known as the vehicle charging authorization certificate), and sends the charging certificate to the vehicle side; or sends a random number to the vehicle side, and the charging certificate is issued by the private key of the charging certificate issuance certificate pre-made in advance by the vehicle side; the vehicle side sends the charging certificate and vehicle identity information to the charging pile (pile side) during the charging handshake phase, and the charging pile uploads it to the charging pile operation platform after receiving it, and the charging pile operation platform uploads the charging certificate to the vehicle operation platform through a secure channel, and the vehicle operation platform verifies the charging certificate and feeds back the verification result to the vehicle side and the charging pile operation platform. The charging pile operation platform controls the charging enablement of the charging pile based on the authentication result fed back by the vehicle operation platform. After the first identity verification is passed, the vehicle operation platform or the vehicle increments the random number and issues a charging keep-alive certificate. During the charging process, the power battery reserves a message that is transmitted to the charging pile, which is then transmitted to the vehicle operation platform through the charging pile operation platform. The vehicle operation platform continuously verifies the charging preservation certificate. The charging pile controls the charging process based on the results of the continuous verification. After charging is completed, the charging pile sends the charging data and the latest charging preservation certificate to the charging pile operation platform, which is then sent to the vehicle operation platform. At the same time, the vehicle sends the monitored charging data and the latest preservation certificate to the vehicle operation platform. The vehicle operation platform verifies the information uploaded by the charging pile and the vehicle, and responds to the fee settlement request initiated by the charging pile operation platform based on the verification results.
[0083] The embodiment of the present application utilizes the existing charging operation architecture and vehicle charging system, and issues charging authorization certificates based on the charging authorization certificates deployed by the vehicle operation platform or deployed in the vehicle. The modification of the existing system is relatively small, and the pre-production of the certificate can refer to the existing vehicle-side and cloud-end (vehicle operation platform) certificate pre-production process, which is easier to implement; on the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging certificate are guaranteed to prevent identity theft; at the same time, after the charging certificate is successfully authenticated, it is immediately switched to the charging protection certificate, and the authentication is continued throughout the charging process, which greatly improves the network security of the charging process. At the same time, the charging protection certificate is used as the certificate basis for vehicle charging during fee settlement, and the data of the vehicle and pile ends are combined to prevent the charging fee settlement process from being illegally counterfeited or tampered with.
[0084] It should be noted that in the embodiment of the present application, if the above-mentioned charging method is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application can be essentially or partly reflected in the form of a software product that contributes to the relevant technology. The computer software product is stored in a storage medium, including several instructions to enable an electronic device (which can be a mobile phone, a tablet computer, a desktop, a personal digital assistant, a navigator, a digital phone, a video phone, a television, a sensor device, etc.) to execute all or part of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a U disk, a mobile hard disk, a read-only memory (ROM), a magnetic disk or an optical disk. In this way, the embodiment of the present application is not limited to any specific combination of hardware and software.
[0085] Fig.10 This is a schematic diagram of the composition structure of a charging system according to an embodiment of the present application. Fig.10 As shown, the system includes: a vehicle 41, a vehicle operation platform 42, a charging pile operation platform 43 and a charging pile 44, wherein:
[0086] The vehicle 41 is used to send a charging request to the vehicle operation platform 42, wherein the charging request carries the first identification information, the first location information and the first time information of the vehicle 41;
[0087] The vehicle operation platform 42 is used to generate a first random number, and generate a first data matrix based on the first random number, the first identification information, the first location information and the first time information; based on the private key corresponding to the prefabricated vehicle charging authorization certificate, the first data matrix is signed to obtain a first charging certificate;
[0088] The charging pile operation platform 43, the vehicle operation platform 42 or the charging pile 44 is used to verify the first charging credential to obtain the first verification result;
[0089] The charging pile operation platform 43 is used to send a charging instruction to the charging pile 44 to control the charging pile 44 to enable charging of the vehicle 41 when the first verification result of the first charging credential is verification passed.
[0090] In the embodiment of the present application, a charging credential is issued based on a vehicle charging authorization certificate deployed on a vehicle operation platform, which requires relatively little modification to the existing system. The prefabrication of the vehicle charging authorization certificate can refer to the existing vehicle-side and cloud-side certificate prefabrication process, which is easier to implement. On the other hand, through time factors, random numbers, location factors, identity identification, signature protection and other measures, the integrity and legitimacy of the charging credential are guaranteed to avoid identity theft. The charging pile operation platform, the vehicle operation platform or the charging pile can all be used to verify the first charging credential to obtain the first verification result, thereby improving the flexibility of verification.
[0091] Fig.11 This is a schematic diagram of a charging method in which a vehicle operation platform issues a charging certificate according to an embodiment of the present application. Fig.11 As shown, the method comprises the following steps:
[0092] Step 501: After the vehicle is plugged into the charging gun and the charging gun is connected, the vehicle requests charging credentials from the cloud and uploads vehicle identity information, vehicle location information, and current time information;
[0093] Step 502: After receiving the charging certificate request, the vehicle operation platform derives a random number N1 as a charging authorization code, and binds the charging authorization code with the vehicle identity information, vehicle location information and time information uploaded by the current vehicle; and signs and generates a vehicle charging certificate Token1 based on the private key corresponding to the vehicle charging authorization certificate pre-made by the vehicle operation platform;
[0094] Step 503: After the vehicle receives the vehicle charging certificate Token1 issued by the vehicle operation platform, the vehicle transmits the charging certificate and the vehicle identification code based on the communication between the vehicle and the charging pile;
[0095] Step 504: After receiving the vehicle identification code and the charging certificate, the charging pile uploads the charging pile identity information, the vehicle identification code and the charging certificate to the charging pile operation platform. After receiving the charging certificate, the charging pile operation platform transmits the charging certificate Token1 to the vehicle operation platform through a secure channel.
[0096] Optionally, after receiving the charging certificate, the charging pile operation platform verifies the charging certificate Token1 based on the vehicle delivery authorization certificate transmitted by the vehicle operation platform. After the verification is passed, the vehicle identification code is checked for consistency with the vehicle identification code uploaded by the charging pile, the vehicle GPS1 location information is checked for consistency with the location information corresponding to the charging pile identity information, and the current time is checked for consistency with the time information in the charging certificate; after the verification is passed, the charging pile can be controlled to enable charging based on the verification result;
[0097] Step 505: After the vehicle operation platform receives the vehicle charging certificate Token1 sent by the charging pile operation platform, it uses the public key of the vehicle charging authorization certificate to verify it. After the verification passes, it verifies the issued (vehicle identity information, N1, GPS1, time information). After the verification passes, the verification result and GPS1 location information are sent to the charging pile operation platform;
[0098] Step 506: When the charging pile operation platform receives a verification result indicating that the verification is passed, it queries the location information of the charging pile based on the charging pile identity information and performs location verification with the received GPS1 information. After the verification is passed, the charging pile operation platform controls the charging pile to enable charging through instructions. If the verification result received indicates that the verification fails or the location information verification fails, the charging pile should be controlled to stop responding to the vehicle-side charging request.
[0099] Step 507: After the vehicle operation platform passes the vehicle charging identity verification, the random number N1 should be incremented immediately, and the private key pair corresponding to the vehicle charging authorization certificate (vehicle identity information, updated N1, GPS1, time information) should be used to reissue the charging keep-alive certificate Token2, and send it to the vehicle end;
[0100] Step 508: During the charging process, the vehicle end transmits the charging keep alive certificate Token2 to the charging pile end in real time. Similarly, the charging pile uploads the charging pile identity information and the vehicle charging keep alive certificate to the charging pile operation platform. After receiving the charging keep alive certificate Token2, the charging pile operation platform transmits the vehicle charging keep alive certificate Token2 to the vehicle operation platform through a secure channel.
[0101] Step 509: After the vehicle operation platform receives the vehicle charging keep-alive certificate Token2 sent by the charging pile operation platform, it uses the public key of the vehicle charging authorization certificate for verification. After the verification passes, it verifies the issued (vehicle identity information, updated N1, GPS1, time information). After the verification passes, the verification result and GPS1 location information are sent to the charging pile operation platform;
[0102] Step 510: When the charging pile operation platform receives the verification result that the verification is passed, it queries the location information of the charging pile based on the charging pile identity information and performs location verification with the received GPS1 information. After the verification is passed, the charging pile operation platform controls the charging pile to enable charging through instructions. If the verification result received is verification failure or location information verification failure, the charging pile should be controlled to stop responding to the vehicle-side charging request.
[0103] Among them, after a period of time, the random number N1 can be incremented and the keep-alive certificate Token2() can be reissued.
[0104] Step 511: After charging stops, the charging pile uploads the charging data and the latest charging keep-alive Token2 to the charging pile operation platform; the charging pile operation platform calculates the charging fee based on the received charging data, and uploads the charging data, charging fee settlement data and the latest keep-alive voucher Token2 to the vehicle operation platform;
[0105] Optionally, the charging operation platform may encrypt and protect the charging data and charging fees based on the public key of the vehicle charging authorization certificate transmitted by the vehicle operation platform, or use the private key of the charging pile operation platform certificate for signature protection.
[0106] Step 512: The vehicle uploads the charging data monitored by the vehicle and the latest keep-alive certificate Token2 to the vehicle operation platform. The vehicle operation platform verifies the charging data and the latest keep-alive certificate Token2 uploaded by the charging pile operation platform and the vehicle. After the verification is passed, the vehicle operation platform responds to the charging fee settlement request initiated by the charging pile operation platform.
[0107] Fig.12 This is a schematic diagram of a charging method in which a vehicle operation platform issues a charging certificate according to an embodiment of the present application. Fig.12 As shown, the method comprises the following steps:
[0108] Step 601: After the vehicle is plugged into the charging gun and the charging gun is connected, the vehicle requests charging credentials from the cloud and uploads vehicle identity information, vehicle location information, and current time information;
[0109] Step 602: After receiving the charging certificate request, the vehicle operation platform derives a random number N1 as a charging authorization code, and sends the random number N1 to the vehicle. The vehicle binds the charging authorization code with the vehicle identity information, vehicle location information and time information uploaded by the current vehicle; and signs the private key corresponding to the vehicle charging authorization certificate pre-made by the vehicle operation platform to generate the vehicle charging certificate Token1;
[0110] Step 603: The vehicle transmits the charging credential and the vehicle identification code based on the communication between the vehicle and the charging pile;
[0111] Step 604: After receiving the vehicle identification code and the charging certificate, the charging pile uploads the charging pile identity information, the vehicle identification code and the charging certificate to the charging pile operation platform. After receiving the charging certificate, the charging pile operation platform transmits the charging certificate Token1 to the vehicle operation platform through a secure channel.
[0112] Optionally, after receiving the charging certificate, the charging pile operation platform verifies the charging certificate Token1 based on the vehicle delivery authorization certificate transmitted by the vehicle operation platform. After the verification is passed, the vehicle identification code is checked for consistency with the vehicle identification code uploaded by the charging pile, the vehicle GPS1 location information is checked for consistency with the location information corresponding to the charging pile identity information, and the current time is checked for consistency with the time information in the charging certificate; after the verification is passed, the charging pile can be controlled to enable charging based on the verification result;
[0113] Step 605: After the vehicle operation platform receives the vehicle charging certificate Token1 sent by the charging pile operation platform, it uses the public key of the vehicle charging authorization certificate to verify it. After the verification passes, it verifies the issued (vehicle identity information, N1, GPS1, time information). After the verification passes, it sends the verification result and GPS1 location information to the charging pile operation platform, and sends the verification result to the vehicle;
[0114] Step 606: When the charging pile operation platform receives a verification result indicating that the verification is passed, it queries the location information of the charging pile based on the charging pile identity information and performs a location verification with the received GPS1 information. After the verification is passed, the charging pile operation platform controls the charging pile to enable charging through instructions. If the verification result received indicates that the verification fails or the location information verification fails, the charging pile should be controlled to stop responding to the vehicle-side charging request.
[0115] Step 607: After the vehicle receives the message from the vehicle operation platform that the vehicle charging identity verification has passed, the random number N1 should be incremented immediately, and the private key pair corresponding to the vehicle charging authorization certificate (vehicle identity information, updated N1, GPS1, time information) should be used to reissue the charging keep-alive certificate Token2;
[0116] Step 608: During the charging process, the vehicle end transmits the charging keep alive certificate Token2 to the charging pile end in real time. Similarly, the charging pile uploads the charging pile identity information and the vehicle charging keep alive certificate to the charging pile operation platform. After receiving the charging keep alive certificate Token2, the charging pile operation platform transmits the vehicle charging keep alive certificate Token2 to the vehicle operation platform through a secure channel.
[0117] Step 609: After the vehicle operation platform receives the vehicle charging keep-alive certificate Token2 sent by the charging pile operation platform, it uses the public key of the vehicle charging authorization certificate for verification. After the verification passes, it verifies the issued (vehicle identity information, updated N1, GPS1, time information). After the verification passes, the verification result and GPS1 location information are sent to the charging pile operation platform, and the verification result is sent to the vehicle;
[0118] Step 610: When the charging pile operation platform receives the verification result that the verification is passed, it queries the location information of the charging pile based on the charging pile identity information and performs location verification with the received GPS1 information. After the verification is passed, the charging pile operation platform controls the charging pile to enable charging through instructions. If the verification result received is verification failure or location information verification failure, the charging pile should be controlled to stop responding to the vehicle-side charging request.
[0119] Among them, after a period of time, the random number N1 can be incremented and the keep-alive certificate Token2() can be reissued.
[0120] Step 611: After charging stops, the charging pile uploads the charging data and the latest charging keep-alive Token2 to the charging pile operation platform; the charging pile operation platform calculates the charging fee based on the received charging data, and uploads the charging data, charging fee settlement data and the latest keep-alive voucher Token2 to the vehicle operation platform;
[0121] Optionally, the charging operation platform may encrypt and protect the charging data and charging fees based on the public key of the vehicle charging authorization certificate transmitted by the vehicle operation platform, or use the private key of the charging pile operation platform certificate for signature protection.
[0122] Step 612: The vehicle uploads the charging data monitored by the vehicle and the latest keep-alive certificate Token2 to the vehicle operation platform. The vehicle operation platform verifies the charging data and the latest keep-alive certificate Token2 uploaded by the charging pile operation platform and the vehicle. After the verification is passed, the vehicle operation platform responds to the charging fee settlement request initiated by the charging pile operation platform.
[0123] Based on the above embodiments, the present application also provides an electronic device, Fig.13 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. Fig.13 As shown, the hardware entity of the device 700 includes: a memory 701 and a processor 702, wherein the memory 701 stores a computer program that can be run on the processor 702, and the processor 702 implements the steps of the charging method in the above embodiment when executing the program.
[0124] The memory 701 is configured to store instructions and applications executable by the processor 702, and can also cache data to be processed or processed by the processor 702 and various modules in the device 700 (for example, image data, audio data, voice communication data, and video communication data), which can be implemented through flash memory (FLASH) or random access memory (Random Access Memory, RAM).
[0125] Based on the foregoing embodiments, an embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor of an electronic device, the charging method provided in any of the previous embodiments can be implemented.
[0126] The above description of various embodiments tends to emphasize the differences between the various embodiments. The same or similar aspects can be referenced to each other, and for the sake of brevity, they will not be repeated herein.
[0127] The methods disclosed in the various method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.
[0128] The features disclosed in the various product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.
[0129] The features disclosed in the various method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.
[0130] It should be noted that the above-mentioned computer-readable storage medium can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory (Flash Memory), a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM) and other memories; it can also be various electronic devices including one or any combination of the above-mentioned memories, such as mobile phones, computers, tablet devices, personal digital assistants, etc.
[0131] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.
[0132] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.
[0133] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus necessary general hardware nodes, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.
[0134] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0135] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0136] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0137] The above are only preferred embodiments of the present application, and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.
Claims
1. A charging method, applied to a vehicle operation platform, comprising: Obtaining a charging request of a vehicle, wherein the charging request carries first identification information, first location information, and first time information of the vehicle; Generate a first random number, and generate a first data matrix based on the first random number, the first identification information, the first location information, and the first time information; The first data matrix is signed based on the private key corresponding to the prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is a verification pass; The method further comprises: If the first verification result is that the verification is passed, generating second random numbers at multiple moments according to a preset time interval, and the second random numbers at each moment are different; Generate a second data matrix at a corresponding moment based on a second random number at each moment, the first identification information, the first location information, and the first time information; The second data matrix at each moment is signed based on the private key corresponding to the vehicle charging authorization certificate to obtain the second charging credential at the corresponding moment, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle at the corresponding moment when the second verification result of the second charging credential at the corresponding moment is passed; Obtaining a fee settlement request sent by a charging pile operation platform, wherein the fee settlement request carries the first encrypted charging data and the encrypted charging fee; Obtaining second encrypted charging data sent by the vehicle; the first encrypted charging data, the second encrypted charging data and the encrypted charging fee are encrypted using the public key corresponding to the vehicle charging authorization certificate, or signed using the private key corresponding to the vehicle charging authorization certificate; Decrypting or verifying the first encrypted charging data, the second encrypted charging data, and the encrypted charging fee, obtaining the first charging data, the second charging data, and the charging fee if the decryption or the verification passes, and performing a consistency check on the first charging data and the second charging data to obtain a third verification result; When the third verification result is verification passed, a response is made to the fee settlement request based on the charging fee.
2. The method according to claim 1, characterized in that The method further comprises: sending the first charging credential to the vehicle; So that the vehicle sends the first charging certificate and the second identification information of the vehicle to the charging pile, and the charging pile sends the second identification information, the third identification information of the charging pile and the first charging certificate to the charging pile operation platform, so that the charging pile operation platform obtains the first verification result of the first charging certificate.
3. The method according to claim 2, characterized in that The method further comprises: The public key corresponding to the vehicle charging authorization certificate is sent to the charging pile operation platform, so that the charging pile operation platform can verify the first charging certificate based on the public key. If the verification passes, the second identification information and the first identification information are checked for consistency, the first location information and the second location information corresponding to the third identification information are checked for consistency, and the first time information and the current time information are checked for consistency to obtain the first verification result.
4. The method according to claim 2, characterized in that: The method further comprises: Obtaining the second identification information, the third identification information and the first charging credential sent by the charging pile operation platform; Performing signature verification on the first charging credential based on the public key corresponding to the vehicle charging authorization certificate, and if the signature verification passes, verifying the first identification information, the first random number, the first location information, and the first time information in the first charging credential to obtain the first verification result; The first verification result is sent to the charging pile operation platform.
5. The method according to claim 1, characterized in that The method further comprises: sending the first charging credential to the vehicle; So that the vehicle sends the first charging certificate and the second identification information of the vehicle to the charging pile, the charging pile verifies the first charging certificate based on the public key corresponding to the vehicle charging authorization certificate, and if the verification is passed, performs a consistency check on the second identification information and the first identification information, performs a consistency check on the first location information and the second location information corresponding to the third identification information of the charging pile, performs a consistency check on the first time information and the current time information, and obtains the first verification result. The vehicle sends the first verification result to the charging pile operation platform through the charging pile.
6. A charging method, applied to a vehicle, comprising: In response to establishing a connection with the charging pile, sending a charging request to the vehicle operation platform, the charging request carrying the first identification information, the first location information and the first time information of the vehicle; Obtaining a first random number generated by the vehicle operation platform, and generating a first data matrix based on the first random number, the first identification information, the first location information, and the first time information; The first data matrix is signed based on the private key corresponding to the prefabricated vehicle charging authorization certificate to obtain a first charging credential, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is a verification pass; The method further comprises: If the first verification result is a passed verification, a second charging certificate is issued, and the second charging certificate is sent to the charging pile in real time, so that the charging pile operation platform can send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle at the corresponding time when the second verification result of the second charging certificate at the corresponding time is a passed verification; wherein the second charging certificate is obtained by signing the second data matrix at each moment based on the private key corresponding to the vehicle charging authorization certificate; the second data matrix at each moment is obtained based on the second random number at each moment, the first identification information, the first location information and the first time information; the second random number at each moment is different; The second encrypted charging data is sent to the vehicle operation platform so that the vehicle operation platform can decrypt or verify the first encrypted charging data, the second encrypted charging data and the encrypted charging fee. When the decryption or verification is successful, the first charging data, the second charging data and the charging fee are obtained, and the first charging data and the second charging data are checked for consistency to obtain a third verification result; when the third verification result is that the verification is successful, the fee settlement request is responded to based on the charging fee; wherein the vehicle operation platform obtains the fee settlement request sent by the charging pile operation platform, and the fee settlement request carries the first encrypted charging data and the encrypted charging fee; the first encrypted charging data, the second encrypted charging data and the encrypted charging fee are encrypted using the public key corresponding to the vehicle charging authorization certificate, or signed using the private key corresponding to the vehicle charging authorization certificate.
7. A charging system, the system comprising: Vehicles, vehicle operation platforms, charging pile operation platforms and charging piles, including: The vehicle is used to send a charging request to the vehicle operation platform, wherein the charging request carries the first identification information, the first location information and the first time information of the vehicle; The vehicle operation platform is used to generate a first random number, and based on the first random number, the first identification information, the first location information and the first time information, generate a first data matrix; based on a private key corresponding to a prefabricated vehicle charging authorization certificate, sign the first data matrix to obtain a first charging credential; The charging pile operation platform, the vehicle operation platform or the charging pile is used to verify the first charging credential to obtain a first verification result; The charging pile operation platform is configured to send a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle when the first verification result of the first charging credential is verification passed; The vehicle operation platform is further used to generate second random numbers at multiple moments at preset time intervals when the first verification result is a passed verification, and the second random numbers at each moment are different; based on the second random number at each moment, the first identification information, the first location information and the first time information, generate a second data matrix at the corresponding moment; based on the private key corresponding to the vehicle charging authorization certificate, the second data matrix at each moment is signed to obtain a second charging credential at the corresponding moment, so that when the second verification result of the second charging credential at the corresponding moment is a passed verification, the charging pile operation platform sends a charging instruction to the charging pile to control the charging pile to enable charging of the vehicle at the corresponding moment; obtain a fee settlement request sent by the charging pile operation platform, and the fee settlement A request is made to carry first encrypted charging data and encrypted charging fee; second encrypted charging data sent by the vehicle is obtained; the first encrypted charging data, the second encrypted charging data and the encrypted charging fee are encrypted using the public key corresponding to the vehicle charging authorization certificate, or signed using the private key corresponding to the vehicle charging authorization certificate; the first encrypted charging data, the second encrypted charging data and the encrypted charging fee are decrypted or signed, and when the decryption or signature verification passes, the first charging data, the second charging data and the charging fee are obtained, and a consistency check is performed on the first charging data and the second charging data to obtain a third check result; when the third check result is that the check passes, the fee settlement request is responded to based on the charging fee.
Citation Information
Patent Citations
Vehicle charging safety management method
CN115534743A
Charging control method and device, charging request method and device and charging authentication method and device of charging pile
CN116409190A
Vehicle charging method, device and equipment and storage medium
CN116766968A