Quantum key injection system, method and computing device

Abstract

The present invention discloses a quantum key filling system, method and computing device, which belongs to the technical field of vehicle networking. The quantum key filling system includes a quantum key generator, a charging pile and a vehicle; the quantum key generator is configured to generate a quantum key to be filled and send it to the charging pile; the vehicle is configured to send a first message to the charging pile, and receive a second message sent by the charging pile, and the first message includes a first random number and is encrypted using a first preset quantum key, and the second message includes a second random number and is encrypted using a second preset quantum key; a new quantum key is generated based on the first random number and the second random number; the charging pile is configured to verify the identity information of the vehicle based on the first message, send a second message to the vehicle if the identity information verification is successful, and generate a new quantum key based on the first random number and the second random number; send a quantum key message to the vehicle, the quantum key message includes the quantum key to be filled and is encrypted using the new quantum key.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking technology, and in particular to a quantum key injection system, method and computing device. Background Art

[0002] With the rapid development of computer technology, Internet technology, wireless communication technology and other technologies, the automotive industry is also moving towards the direction of intelligent connected vehicles. Vehicles are not only a means of transportation, but also an intelligent terminal. During the driving process of the vehicle, a large amount of data will be generated, and the vehicle will also exchange a lot of information with manufacturers and other vehicles. In the process of information interaction, if the interactive information is not encrypted and protected, the information is transmitted in plain text. Once a third party monitors the wireless channel, the plain text content will be visible at a glance, which will not only leak private information, but also hijack and tamper with the information, causing greater traffic safety hazards. Therefore, it is necessary to encrypt the interactive information in the car-to-cloud service process to ensure the confidentiality, availability and integrity of the information.

[0003] In the existing solution, quantum keys can be used to encrypt the interactive information in the car-cloud service process, so it is necessary to pre-charge the vehicle and the cloud with quantum keys. In the related technology, special charging equipment is required to charge the vehicle with quantum keys offline, which is not convenient and reduces the service experience of the car owner. Summary of the invention

[0004] To this end, the present invention proposes a quantum key injection system, a quantum key injection method, and also provides a quantum key injection device, a computing device and a computer-readable storage medium, aiming to at least solve the technical problems of quantum key injection in related technologies to a certain extent.

[0005] To achieve the above-mentioned object, a first embodiment of the present invention proposes a quantum key filling system, which includes a quantum key generator, a charging pile and a vehicle;

[0006] A quantum key generator, configured to generate a quantum key to be charged and send it to the charging pile;

[0007] A vehicle is configured to send a first message to a charging pile, and receive a second message sent by the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key, and the second message includes a second random number and is encrypted using a second preset quantum key; and generate a new quantum key based on the first random number and the second random number;

[0008] The charging pile is configured to verify the identity information of the vehicle based on the first message, send a second message to the vehicle when the identity information verification is successful, and generate a new quantum key based on the first random number and the second random number; send a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be charged and is encrypted using the new quantum key.

[0009] According to one embodiment of the present invention, the charging pile is further configured as follows:

[0010] The first message is decrypted based on the second preset quantum key. If the decryption is successful, it is determined that the identity information verification is successful, wherein the second preset quantum key is the same as or corresponds to the first preset quantum key.

[0011] According to one embodiment of the present invention, during the connection between a vehicle and a charging pile, both the vehicle and the charging pile are configured to: periodically generate new quantum keys, and use the new quantum keys for encryption and decryption during data interaction.

[0012] According to one embodiment of the present invention, the quantum key generator is further configured to:

[0013] The quantum key to be charged is sent to the quantum cryptographic service platform in the cloud for management, so as to encrypt the data transmission between the cloud and the vehicle.

[0014] According to one embodiment of the present invention, the charging pile is further configured as follows:

[0015] Receiving a quantum key requirement message sent by a vehicle, wherein the quantum key requirement message includes a required quantum key quantity and is encrypted using a new quantum key;

[0016] If the required number of quantum keys is not greater than the total number of quantum keys to be injected, a quantum key message is sent to the vehicle.

[0017] According to one embodiment of the present invention, the charging pile is further configured as follows:

[0018] Receiving a quantum key total state message sent by the vehicle, wherein the quantum key total state message includes the generation time of each remaining quantum key in the vehicle and is encrypted using a new quantum key;

[0019] After decrypting the quantum key total state message, determining the number of remaining quantum keys whose generation time is earlier than a preset time;

[0020] If the sum of the quantity and the required quantity of quantum keys is not greater than the total quantity of quantum keys to be injected, a quantum key message is sent to the vehicle.

[0021] According to one embodiment of the present invention, a vehicle includes a battery management device and an on-board terminal;

[0022] The battery management device is configured to receive a quantum key message, decrypt the quantum key message using a new quantum key, and obtain a quantum key to be charged and a device identifier; when it is determined based on the device identifier that the charging pile is a designated charging pile and the quantum key message is a message of a designated type, send a quantum key file to the vehicle terminal according to a specific message identification code, wherein the quantum key file includes the quantum key to be charged;

[0023] The vehicle-mounted terminal is configured to parse the quantum key file to obtain the quantum key to be injected and store it.

[0024] According to one embodiment of the present invention, the vehicle terminal includes a microcontroller and a password security module;

[0025] The microcontroller is configured to obtain the quantum key to be injected from the data field of the quantum key file when determining that the message identification code is correct, and send the quantum key to be injected to the secure storage space of the cryptographic security module for storage.

[0026] According to one embodiment of the present invention, the charging pile communicates with the battery management device of the vehicle via the CAN bus, and the vehicle-mounted terminal communicates with the battery management device via the CAN bus.

[0027] According to one embodiment of the present invention, the quantum key to be injected includes data of multiple quantum keys to be injected and key information corresponding to each quantum key to be injected, wherein the key information at least includes a key identifier, a key length and a key sequence number.

[0028] To achieve the above object, a second aspect of the present invention provides a quantum key injection method, which is applied to a charging pile. The method includes:

[0029] Receiving a first message sent by a vehicle, and verifying identity information of the vehicle based on the first message, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0030] If the identity information verification is successful, sending a second message to the vehicle, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0031] generating a new quantum key based on the first random number and the second random number;

[0032] A quantum key message is sent to the vehicle, wherein the quantum key message includes the quantum key to be charged and is encrypted using a new quantum key, and the quantum key to be charged is generated by a quantum key generator and sent to the charging pile.

[0033] To achieve the above-mentioned purpose, the third aspect of the present invention proposes a quantum key injection method, which is applied to a vehicle. The method includes:

[0034] Sending a first message to the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0035] Receiving a second message sent by the charging pile in response to the first message, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0036] generating a new quantum key based on the first random number and the second random number;

[0037] Receive a quantum key message sent by the charging pile, wherein the quantum key message includes the quantum key to be charged and is encrypted using a new quantum key, and the quantum key to be charged is generated by a quantum key generator and sent to the charging pile.

[0038] To achieve the above-mentioned purpose, the fourth aspect of the present invention proposes a quantum key injection device, which is applied to a charging pile, and the device includes:

[0039] A first receiving unit is configured to receive a first message sent by the vehicle and verify the identity information of the vehicle based on the first message, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0040] A first sending unit is configured to send a second message to the vehicle when the identity information verification is successful, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0041] A first generating unit, configured to generate a new quantum key based on the first random number and the second random number;

[0042] The second sending unit is configured to send a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be injected and is encrypted using a new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile.

[0043] To achieve the above-mentioned purpose, a fifth aspect of the present invention provides a quantum key injection method, which is applied to a vehicle. The device includes:

[0044] A third sending unit is configured to send a first message to the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0045] A second receiving unit is configured to receive a second message sent by the charging pile in response to the first message, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0046] A second generating unit is configured to generate a new quantum key based on the first random number and the second random number;

[0047] The third receiving unit is configured to receive a quantum key message sent by the charging pile, wherein the quantum key message includes the quantum key to be injected and is encrypted using a new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile.

[0048] To achieve the above objectives, the sixth aspect of the present invention proposes a computing device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the quantum key injection method described in the second or third aspect is implemented.

[0049] To achieve the above-mentioned purpose, the seventh aspect of the present invention proposes a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the quantum key injection method described in the second or third aspect is implemented.

[0050] The quantum key filling system provided by the embodiment of the present invention includes a quantum key generator, a charging pile and a vehicle. The quantum key generator is configured to generate a quantum key to be filled and send it to the charging pile; the vehicle is configured to send a first message to the charging pile and receive a second message sent by the charging pile, and the first message includes a first random number and is encrypted using a first preset quantum key, and the second message includes a second random number and is encrypted using a second preset quantum key; a new quantum key is generated based on the first random number and the second random number; the charging pile is configured to verify the identity information of the vehicle based on the first message, send a second message to the vehicle if the identity information verification is successful, and generate a new quantum key based on the first random number and the second random number; send a quantum key message to the vehicle, the quantum key message includes the quantum key to be filled and is encrypted using the new quantum key. In this way, quantum key charging is combined with vehicle charging. No special charging equipment is needed, and quantum key charging can be achieved during the charging process, which is more convenient. Before quantum key charging, the charging pile and the vehicle are authenticated according to the preset quantum key, and a new quantum key is generated based on the random numbers generated by the two. The quantum key charging process is encrypted with the new quantum key, which improves the security of quantum key charging.

[0051] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 is a schematic diagram of the structure of a quantum key injection system provided according to an embodiment of the present invention;

[0053] Figure 2 is a schematic diagram of the structure of another quantum key injection system provided according to an embodiment of the present invention;

[0054] Figure 3 is a flow chart of a quantum key injection method applied to a quantum key injection system provided according to an embodiment of the present invention;

[0055] Figure 4 is a flow chart of a quantum key injection method applied to a charging pile provided according to an embodiment of the present invention;

[0056] Figure 5 is a flow chart of a quantum key injection method applied to a vehicle provided according to an embodiment of the present invention;

[0057] Figure 6 2 is a schematic diagram of the structure of a quantum key injection device provided according to an embodiment of the present invention;

[0058] Figure 7 is a schematic structural diagram of another quantum key injection device provided according to an embodiment of the present invention;

[0059] Figure 8 It is a structural block diagram of a computing device provided according to an embodiment of the present invention. DETAILED DESCRIPTION

[0060] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and should not be construed as limiting the present invention.

[0061] The charging pile and the vehicle communicate via the CAN (Controller Area Network) bus to achieve negotiation and control of charging parameters, as well as fault diagnosis and safety protection. Through the CAN bus, the charging pile can communicate data with the BMS (Battery Management System) in the vehicle, and communicate data with other controllers and terminals on the vehicle through the on-board CAN bus.

[0062] Through this technology, charging piles and electric vehicles can achieve the following functions: negotiation and control of charging parameters: such as charging mode, charging power, charging time, charging cost, etc.; fault diagnosis and safety protection: such as fault code, fault level, fault handling method, etc.; exchange of other information: such as vehicle identification code, charging pile identification code, software version number, etc.

[0063] The quantum key injection method provided in the embodiment of the present invention pre-injects the quantum key into the charging pile, and injects the quantum key into the vehicle when the vehicle is charged using the charging pile. The quantum key injection system, method, device and computing device proposed in the embodiment of the present invention are described below with reference to the accompanying drawings.

[0064] Figure 1 1 is a schematic diagram of the structure of a quantum key injection system provided according to an embodiment of the present invention, wherein the quantum key injection system includes a quantum key generator 101, a charging pile 102 and a vehicle 103.

[0065] In an embodiment of the present invention, a quantum key generator is configured to generate a quantum key to be charged and send it to a charging pile; a vehicle is configured to send a first message to the charging pile and receive a second message sent by the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key, and the second message includes a second random number and is encrypted using a second preset quantum key; a new quantum key is generated based on the first random number and the second random number; the charging pile is configured to verify the identity information of the vehicle based on the first message, send a second message to the vehicle if the identity information verification is successful, and generate a new quantum key based on the first random number and the second random number; a quantum key message is sent to the vehicle, wherein the quantum key message includes the quantum key to be charged and is encrypted using the new quantum key.

[0066] As an example, the quantum key generator can be a quantum random number generator or a QKD (Quantum key distribution) device, so the quantum key to be injected can be generated by a random number generated by the quantum random number generator according to a certain algorithm, or can be generated by a pair of quantum key distribution devices through negotiation. In addition, the quantum key to be injected can be stored in a key block, and a key block can store multiple quantum keys to be injected.

[0067] Exemplarily, the number of quantum keys to be charged may be multiple, and the quantum keys to be charged may include data of multiple quantum keys to be charged and key information corresponding to each quantum key to be charged, wherein the key information at least includes a key identifier, a key length, and a key sequence number. In addition, the key identifier is a unique designated identifier of the quantum key, the key length indicates the length information of the quantum key used, and the key sequence number indicates the position information of the quantum key in the key block where it is located.

[0068] In the specific implementation, during the quantum key filling stage, the quantum key generator establishes a connection with the charging pile by wireless means, and fills the generated quantum key to be filled into the charging pile, so that the charging pile can fill the quantum key to be filled into the vehicle during the charging process. Moreover, after the quantum key to be filled is filled into the vehicle, it can be used as a session key to encrypt the data communication between the vehicle and the cloud. Therefore, the quantum key generator is further configured to: send the quantum key to be filled to the quantum secret service platform in the cloud for management, so as to encrypt the data transmission between the cloud and the vehicle. In this way, the cloud also stores the same or corresponding quantum key to be filled, and the quantum key to be filled can be used for encryption and decryption when communicating with the vehicle, thereby improving the security of data communication. In addition, the quantum secret service platform can also send the quantum key to be filled to other charging piles in order to encrypt the data communication process between the charging piles.

[0069] In some embodiments, the vehicle and the charging pile respectively store a first preset quantum key and a second preset quantum key in advance. If the charging pile matches the vehicle, that is, the charging pile can be used to charge the vehicle, then the first preset quantum key and the second preset quantum key are the same or corresponding. Alternatively, the charging pile may store multiple second preset quantum keys, and different second preset quantum keys correspond to different vehicle models. Then the charging pile can be used to charge various models of vehicles, and different second preset quantum keys may be the same or corresponding to the first preset quantum key of the corresponding vehicle model.

[0070] In a specific implementation, after the vehicle establishes a physical connection with the charging pile and configures the corresponding charging parameters, the vehicle can generate a first random number through a random number generator, and encrypt the first random number with a first preset quantum key to obtain a first message. After sending the first message to the charging pile, the charging pile is further configured to: decrypt the first message based on a second preset quantum key, and if the decryption is successful, determine that the identity information verification is successful, wherein the second preset quantum key is the same as or corresponds to the first preset quantum key. After determining that the identity information verification of the vehicle is successful, the charging pile can generate a second random number, and generate a new quantum key using a quantum key generation algorithm based on the first random number and the second random number, and can use the second preset quantum key to encrypt the second random number to obtain a second message, and then send the second message to the vehicle. After receiving the second message, the vehicle uses the first prefabricated quantum key to decrypt the second message to obtain a second random number, and then uses the second random number and the first random number to generate a new quantum key using a quantum key generation algorithm, so that the subsequent quantum key filling process can use the new quantum key for data encryption and decryption.

[0071] It should be noted that during the connection between the vehicle and the charging pile, both the vehicle and the charging pile are configured to: periodically generate new quantum keys, and use the new quantum keys for encryption and decryption during data interaction.

[0072] That is to say, during the connection between the vehicle and the charging pile, the vehicle can periodically generate a first random number and send it to the charging pile, and the charging pile can periodically generate a second random number and send it to the vehicle, and the vehicle and the charging pile can generate a new quantum key based on the periodically generated first random number and the second random number, that is, periodically generate a new quantum key, and use the periodically generated new quantum key for encryption during the data interaction process, so that the encryption and decryption of the data interaction process is more flexible and more secure.

[0073] In a possible implementation of the present invention, the charging pile is further configured to: receive a quantum key requirement message sent by a vehicle, wherein the quantum key requirement message includes the required number of quantum keys and is encrypted using a new quantum key; if the required number of quantum keys is not greater than the total number of quantum keys to be charged, send a quantum key message to the vehicle.

[0074] In this case, there is a corresponding relationship between the length of time the vehicle is used after each charge and the number of quantum keys to be charged that the vehicle needs, that is, the total number of quantum keys required from the vehicle being fully charged to the next charge can be determined. Therefore, after the vehicle generates a new quantum key, it can determine the number of quantum keys currently required (i.e., the number of quantum keys required) based on the number of its own remaining quantum keys and the total number of quantum keys required, and use the new quantum key to encrypt the number of quantum keys required, and obtain a quantum key requirement message to send to the charging pile. After the charging pile receives the quantum key requirement message, it uses the new quantum key generated by itself to decrypt the quantum key requirement message to obtain the number of quantum keys required. If the number of quantum keys required is not greater than the total number of quantum keys to be charged, it means that the quantum keys to be charged in the charging pile are sufficient to meet the use of the vehicle, and then a quantum key message including the quantum keys to be charged can be sent to the vehicle, and the quantum key message can be encrypted with the new quantum key.

[0075] In another possible implementation of the present invention, the charging pile is further configured to: receive a quantum key total status message sent by a vehicle, wherein the quantum key total status message includes the generation time of each remaining quantum key in the vehicle and is encrypted using a new quantum key; after decrypting the quantum key total status message, determine the number of remaining quantum keys whose generation time is earlier than a preset time; if the sum of the number and the required number of quantum keys is not greater than the total number of quantum keys to be injected, send a quantum key message to the vehicle.

[0076] In this case, if the quantum key is not used for a long time, it may be leaked or invalid, resulting in the situation that it cannot be used. Therefore, the vehicle can not only generate a quantum key demand message, but also obtain the generation time of each remaining quantum key of itself, and encrypt the generation time of each remaining quantum key with a new quantum key, obtain a quantum key total state message and send it to the charging pile. After receiving the quantum key total state message, the charging pile uses the new quantum key generated by itself to decrypt and obtain the generation time of each remaining quantum key, and determines that the remaining quantum keys with a generation time earlier than the preset time are no longer usable, and then determines the number of these remaining quantum keys. If the sum of this number and the number of quantum key requirements is not greater than the total number of quantum keys to be charged, it means that the quantum keys to be charged in the charging pile are sufficient to meet the use of the vehicle. Therefore, a quantum key message including the quantum keys to be charged can be sent to the vehicle, and the quantum key message can be encrypted with a new quantum key.

[0077] Furthermore, after the charging pile sends a quantum key message to the vehicle, the vehicle can use the new quantum key to decrypt the quantum key message to obtain the quantum key to be charged, and store the quantum key to be charged, thereby realizing the charging of the quantum key during the charging process.

[0078] It should be noted that the vehicle includes a battery management device BMS, which can send quantum key demand messages and quantum key total status messages to the charging pile, and the BMS and the charging pile can transmit data through the CAN bus.

[0079] Figure 2 is a schematic diagram of the structure of another quantum key injection system provided according to an embodiment of the present invention, see Figure 2 The quantum key charging system includes a quantum key generator 101, a charging pile 102 and a vehicle 103. The vehicle 103 may include a battery management device (BMS) 201 and a vehicle terminal (TBOX, telematics box) 202. The vehicle terminal (TBOX) 202 may include a microcontroller (MCU, Microcontroller Unit) 2021 and a cryptographic security module 2022. The charging pile 101 communicates with the vehicle 103 through a CAN bus, specifically with the battery management device (BMS) 201 of the vehicle 103 through a CAN bus. The battery management device (BMS) 201 also communicates with the vehicle terminal (TBOX) 202 through a CAN bus, specifically with the microcontroller (MCU) 2021 of the vehicle terminal (TBOX) 202 through a CAN bus. The microcontroller (MCU) 2021 and the cryptographic security module 2022 may communicate through a UART (Universal Asynchronous Receiver / Transmitter, universal asynchronous receiver / transmitter).

[0080] In some embodiments, the battery management device is configured to receive a quantum key message and decrypt the quantum key message using a new quantum key to obtain the quantum key to be charged and a device identifier; when it is determined based on the device identifier that the charging pile is a designated charging pile and the quantum key message is a message of a specified type, a quantum key file is sent to the vehicle terminal according to a specific message identification code, wherein the quantum key file includes the quantum key to be charged; the vehicle terminal is configured to parse the quantum key file to obtain the quantum key to be charged and store it.

[0081] In the specific implementation, the charging pile sends a quantum key message to the battery management device through the CAN bus. The quantum key message includes the quantum key to be charged and the device identifier, and the quantum key to be charged is located in the data field of the CAN, and the device identifier PGN is located in the extended frame field of the CAN ID. After receiving the quantum key message, the battery management device uses the new quantum key to parse it, identifies the PGN to determine whether the charging pile is a designated charging pile, and identifies the type of message instruction to determine whether the quantum key message is a message of the designated type. If both are true, it is determined that the verification is successful, and the quantum key to be charged is obtained from the data field of the quantum key message. The battery management device sends a quantum key file including the quantum key to be charged to the vehicle terminal in the form of a CAN message in the vehicle CAN bus according to a specific message identification code. After receiving the quantum key file, the vehicle terminal parses it, obtains the quantum key to be charged and stores it as a session key for subsequent vehicle-cloud communication.

[0082] Furthermore, the vehicle-mounted terminal (TBOX) includes a microcontroller (MCU) and a cryptographic security module. After the vehicle-mounted terminal receives the quantum key file, the microcontroller obtains the quantum key to be injected from the data field of the quantum key file when determining that the message identification code is correct, and sends the quantum key to be injected to the secure storage space of the cryptographic security module for storage.

[0083] Among them, the cryptographic security module is a type of hardware security module that can support various commonly used encryption algorithms, integrates a random number generator, and has an internal Flash storage space that can realize the secure storage and use of quantum keys. The cryptographic security module of the embodiment of the present invention can be replaced by any hardware security module that can realize the above functions.

[0084] In the specific implementation, the battery management device sends the quantum key file to the microcontroller of the vehicle terminal in the form of a CAN message. The microcontroller determines whether the message identification code is a preset identification code related to quantum key transmission. If not, the quantum key file is not processed. If so, the message identification code is determined to be correct, and the quantum key to be charged is obtained from the data field of the quantum key file, and the quantum key to be charged is sent to the Flash storage space of the cryptographic security module through the serial port or SPI (Serial Peripheral Interface) communication method for safe storage.

[0085] For electric car owners, using charging piles to charge electric cars is a daily necessity. The present invention combines the quantum key filling process with the vehicle charging process, which greatly improves the convenience for car owners to obtain vehicle communication security services without increasing other operations of car owners. During the entire communication interaction process on the CAN bus, the identity reliability of the message sender is ensured by identifying the PGN segment of the message and the message identification code of the CAN message. In the entire data stream transmission line, except for the quantum key generator filling the charging pile with the quantum key to be filled, wireless transmission may be adopted. The process data streams from the charging pile to the vehicle's BMS, from the BMS through the on-board CAN bus to the vehicle's microcontroller (MCU), and from the vehicle's microcontroller (MCU) to the Flash storage space of the cryptographic security module through the serial port are all wired transmissions, which can largely ensure the security and reliability of data transmission and reduce the risk of eavesdropping on the transmitted data.

[0086] Figure 3 1 is a flowchart of a quantum key injection method applied to a quantum key injection system according to an embodiment of the present invention. The method includes the following steps.

[0087] Step 301: The quantum random number generator generates the quantum key to be charged and charges it into the charging pile, and sends it to the quantum key service platform for unified management.

[0088] Step 302: The charging pile establishes a connection with the vehicle and configures corresponding charging parameters.

[0089] Step 303: The vehicle generates a first random number through its own configured cryptographic security module, encrypts the first random number and vehicle information using a first preset quantum key, obtains a first message and sends it to the charging pile.

[0090] Step 304: The charging pile uses the second preset quantum key to decrypt the first message. If the decryption is successful, it is determined that the identity information of the vehicle is successfully verified.

[0091] Step 305: The charging pile generates a second random number through the cryptographic security module configured by itself, generates a new quantum key based on the first random number and the second random number, encrypts the second random number using the second preset quantum key, obtains a second message and sends it to the vehicle.

[0092] Step 306: The vehicle uses the first prefabricated quantum key to decrypt the second message to obtain a second random number, and generates a new quantum key based on the first random number and the second random number.

[0093] Step 307: The vehicle generates a quantum key total status message and a quantum key requirement message, which are sent by the BMS to the charging pile.

[0094] Step 308: The charging pile determines the required number of quantum keys according to the quantum key requirement message, and determines the number of remaining quantum keys whose generation time is earlier than the preset time according to the quantum key total status message. If the sum of this number and the required number of quantum keys is not greater than the total number of quantum keys to be charged, the charging pile sends a quantum key message to the vehicle's BMS via the CAN bus.

[0095] Step 309: The BMS obtains the device identifier PGN from the extended frame field of the quantum key message, identifies the PGN to determine whether the charging pile is a designated charging pile, and identifies the message instruction type to determine whether the quantum key message is a designated type of message. If both are true, the verification is determined to be successful, and the quantum key to be charged is obtained from the data field of the quantum key message.

[0096] Step 310: The BMS sends a quantum key file including the quantum key to be injected to the MCU of the TBOX in the form of a CAN message according to a specific message identification code in the vehicle CAN bus.

[0097] Step 311: The MCU determines whether the message identification code is a preset identification code related to quantum key transmission. If so, it determines that the message identification code is correct and obtains the quantum key to be injected from the data field of the quantum key file.

[0098] Step 312: The MCU sends the quantum key to be injected to the Flash storage space of the cryptographic security module through the serial port or SPI communication for secure storage.

[0099] It should be noted that the specific implementation process of steps 301-312 is the same as the implementation process of the above embodiment. For the contents not described in detail in this embodiment, please refer to the relevant description of the above embodiment, and this embodiment will not be repeated here.

[0100] The quantum key filling method provided by the embodiment of the present invention combines the filling process of the quantum key with the vehicle charging process, and greatly improves the convenience for the owner to obtain vehicle communication security services without increasing other operations of the owner. During the entire communication interaction process on the CAN bus, the identity reliability of the message sender is ensured by identifying the PGN segment of the message and the message identification code of the CAN message. In the entire data stream transmission line, except for the quantum key generator filling the charging pile with the quantum key to be filled, the wireless transmission method may be adopted. The process data streams from the charging pile to the vehicle's BMS, from the BMS through the vehicle-mounted CAN bus to the vehicle's microcontroller (MCU), and from the vehicle's microcontroller (MCU) to the Flash storage space of the cryptographic security module through the serial port are all wired transmission, which can largely ensure the security and reliability of data transmission and reduce the risk of eavesdropping on the transmission data.

[0101] Figure 4 : is a flowchart of a quantum key injection method applied to a charging pile provided according to an embodiment of the present invention. The method may include the following steps.

[0102] Step 401: Receive a first message sent by a vehicle, and verify the identity information of the vehicle based on the first message, wherein the first message includes a first random number and is encrypted using a first preset quantum key.

[0103] In some embodiments, a second preset quantum key is pre-configured in the charging pile, and the second preset quantum key can be used to decrypt the first message. If the decryption is successful, it is determined that the identity information verification is successful, wherein the second preset quantum key is the same as or corresponds to the first preset quantum key.

[0104] Furthermore, before executing this step, a connection may be established with a quantum key generator, and the quantum key to be injected sent by the quantum key generator may be received.

[0105] Step 402: When the identity information verification is successful, a second message is sent to the vehicle, wherein the second message includes a second random number and is encrypted using a second preset quantum key.

[0106] Step 403: Generate a new quantum key based on the first random number and the second random number.

[0107] Step 404: Send a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be charged and is encrypted using a new quantum key, and the quantum key to be charged is generated by a quantum key generator and sent to the charging pile.

[0108] In some embodiments, the charging pile determines whether it has received the quantum key total status message sent by the vehicle's BMS. If not, it will feedback the quantum key filling failure information. If yes, it will determine whether the quantum key demand message has been received. If not, it will feedback the quantum key filling failure information. If yes, it will determine whether the number of quantum keys to be filled stored in the charging pile can meet the quantum key filling demand sent by the BMS. If not, it will feedback the key filling failure information. If yes, it will send a quantum key message including the quantum key to be filled to the vehicle's BMS to achieve quantum key filling of the vehicle.

[0109] It should be noted that the specific implementation process of steps 401-404 is the same as the implementation process of the above embodiment. For the contents not described in detail in this embodiment, please refer to the relevant description of the above embodiment, and this embodiment will not be repeated here.

[0110] The quantum key charging method provided in the embodiment of the present invention combines quantum key charging with the vehicle charging scenario. It does not require special charging equipment and can achieve quantum key charging during the charging process, which is more convenient. Before quantum key charging, the charging pile and the vehicle are authenticated according to the preset quantum key, and a new quantum key is generated according to the random numbers generated by the two. The quantum key charging process is encrypted with the new quantum key, which improves the security of quantum key charging.

[0111] Figure 5 1 is a flow chart of a quantum key injection method applied to a vehicle provided according to an embodiment of the present invention. The method may include the following steps.

[0112] Step 501: Send a first message to a charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key.

[0113] Step 502: Receive a second message sent by the charging pile in response to the first message, wherein the second message includes a second random number and is encrypted using a second preset quantum key.

[0114] Step 503: Generate a new quantum key based on the first random number and the second random number.

[0115] Step 504: Receive a quantum key message sent by the charging pile, wherein the quantum key message includes the quantum key to be injected and is encrypted using a new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile.

[0116] In some embodiments, the vehicle includes a battery management device and an on-board terminal, and the on-board terminal also includes a controller and a cryptographic security module. The charging pile sends the quantum key message to the battery management device, and the battery management device decrypts the quantum key message using a new quantum key to obtain the quantum key to be charged and the device identifier. When the charging pile is determined to be a designated charging pile based on the device identifier, and the quantum key message is a message of a designated type, the quantum key file including the quantum key to be charged is sent to the microcontroller of the on-board terminal according to a specific message identification code. When the microcontroller determines that the message identification code is correct, it obtains the quantum key to be charged from the data field of the quantum key file, and sends the quantum key to be charged to the secure storage space of the cryptographic security module for storage, completing the quantum key charging process.

[0117] It should be noted that the specific implementation process of steps 501-504 is the same as the implementation process of the above embodiment. For the contents not described in detail in this embodiment, please refer to the relevant description of the above embodiment, and this embodiment will not be repeated here.

[0118] The quantum key charging method provided in the embodiment of the present invention combines quantum key charging with the vehicle charging scenario. It does not require special charging equipment and can achieve quantum key charging during the charging process, which is more convenient. Before quantum key charging, the charging pile and the vehicle are authenticated according to the preset quantum key, and a new quantum key is generated according to the random numbers generated by the two. The quantum key charging process is encrypted with the new quantum key, which improves the security of quantum key charging.

[0119] Figure 6 1 is a schematic diagram of the structure of a quantum key injection device provided according to an embodiment of the present invention, which is applied to a charging pile. The device may include:

[0120] A first receiving unit 601 is configured to receive a first message sent by a vehicle and verify the identity information of the vehicle based on the first message, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0121] The first sending unit 602 is configured to send a second message to the vehicle when the identity information verification is successful, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0122] A first generating unit 603 is configured to generate a new quantum key based on the first random number and the second random number;

[0123] The second sending unit 604 is configured to send a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be injected and is encrypted using a new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile.

[0124] According to one embodiment of the present invention, the first generating unit 603 is further configured to:

[0125] During the connection between the vehicle and the charging pile, new quantum keys are generated periodically, and the new quantum keys are used for encryption and decryption during data interaction.

[0126] According to one embodiment of the present invention, the first receiving unit 601 is further configured to:

[0127] The first message is decrypted based on the second preset quantum key. If the decryption is successful, it is determined that the identity information verification is successful, wherein the second preset quantum key is the same as or corresponds to the first preset quantum key.

[0128] According to one embodiment of the present invention, the second sending unit 604 is further configured to:

[0129] Receiving a quantum key requirement message sent by a vehicle, wherein the quantum key requirement message includes a required quantum key quantity and is encrypted using a new quantum key;

[0130] If the required number of quantum keys is not greater than the total number of quantum keys to be injected, a quantum key message is sent to the vehicle.

[0131] According to one embodiment of the present invention, the second sending unit 604 is further configured to:

[0132] Receiving a quantum key total state message sent by the vehicle, wherein the quantum key total state message includes the generation time of each remaining quantum key in the vehicle and is encrypted using a new quantum key;

[0133] After decrypting the quantum key total state message, determining the number of remaining quantum keys whose generation time is earlier than a preset time;

[0134] If the sum of the quantity and the required quantity of quantum keys is not greater than the total quantity of quantum keys to be injected, a quantum key message is sent to the vehicle.

[0135] By applying the quantum key charging method provided in the embodiment of the present invention, quantum key charging is combined with the vehicle charging scenario. No special charging equipment is required, and quantum key charging can be achieved during the charging process, which is more convenient. Before quantum key charging, the charging pile and the vehicle are authenticated according to the preset quantum key, and a new quantum key is generated according to the random numbers generated by the two. The quantum key charging process is encrypted with the new quantum key, which improves the security of quantum key charging.

[0136] The above is a schematic scheme of a quantum key charging device applied to a charging pile according to an embodiment of the present invention. It should be noted that the technical scheme of the quantum key charging device applied to the charging pile and the technical scheme of the quantum key charging method applied to the charging pile belong to the same concept, and the details of the technical scheme of the quantum key charging device applied to the charging pile that are not described in detail can be found in the description of the technical scheme of the quantum key charging method applied to the charging pile.

[0137] Figure 7 1 is a schematic diagram of the structure of another quantum key injection device provided according to an embodiment of the present invention, which is applied to a vehicle and may include:

[0138] The third sending unit 701 is configured to send a first message to the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key;

[0139] A second receiving unit 702 is configured to receive a second message sent by the charging pile in response to the first message, wherein the second message includes a second random number and is encrypted using a second preset quantum key;

[0140] A second generating unit 703 is configured to generate a new quantum key based on the first random number and the second random number;

[0141] The third receiving unit 704 is configured to receive a quantum key message sent by the charging pile, wherein the quantum key message includes the quantum key to be injected and is encrypted using a new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile.

[0142] By applying the quantum key charging method provided in the embodiment of the present invention, quantum key charging is combined with the vehicle charging scenario. No special charging equipment is required, and quantum key charging can be achieved during the charging process, which is more convenient. Before quantum key charging, the charging pile and the vehicle are authenticated according to the preset quantum key, and a new quantum key is generated according to the random numbers generated by the two. The quantum key charging process is encrypted with the new quantum key, which improves the security of quantum key charging.

[0143] The above is a schematic scheme of a quantum key charging device applied to a vehicle according to an embodiment of the present invention. It should be noted that the technical scheme of the quantum key charging device applied to a vehicle and the technical scheme of the quantum key charging method applied to a vehicle belong to the same concept, and the details not described in detail in the technical scheme of the quantum key charging device applied to a vehicle can be referred to the description of the technical scheme of the quantum key charging method applied to a vehicle.

[0144] Figure 8800 is a block diagram of a computing device provided according to an embodiment of the present invention. The computing device 800 includes: a memory 801, a processor 802, and a computer program stored in the memory 801 and executable on the processor 802. When the processor 802 executes the computer program, the quantum key injection method proposed in any of the above embodiments is implemented.

[0145] The present invention also provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the quantum key injection method proposed in any of the above embodiments is implemented.

[0146] It should be noted that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wirings (electronic devices), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM, Erasable Programmable Read-Only Memory or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM, Compact Disk Read Only Memory). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0147] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiment, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA, Programmable Gate Array), a field programmable gate array (FPGA, Field Programmable Gate Array), etc.

[0148] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0149] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0150] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements, unless otherwise clearly defined. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0151] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A quantum key injection system, characterized in that: The system includes a quantum key generator, a charging station and a vehicle; The quantum key generator is configured to generate a quantum key to be charged and send it to the charging pile; The vehicle is configured to send a first message to the charging pile, and receive a second message sent by the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key, and the second message includes a second random number and is encrypted using a second preset quantum key; and generate a new quantum key based on the first random number and the second random number; The charging pile is configured to verify the identity information of the vehicle based on the first message, send a second message to the vehicle if the identity information verification is successful, and generate a new quantum key based on the first random number and the second random number; send a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be charged and is encrypted using the new quantum key; The charging pile is further configured as: Receiving a quantum key total state message sent by the vehicle, wherein the quantum key total state message includes the generation time of each remaining quantum key in the vehicle and is encrypted using the new quantum key; After decrypting the quantum key total state message, determining the number of remaining quantum keys whose generation time is earlier than a preset time; If the sum of the quantity and the required quantity of quantum keys is not greater than the total quantity of quantum keys to be injected, the quantum key message is sent to the vehicle.

2. The system according to claim 1, characterized in that The charging pile is further configured as: The first message is decrypted based on the second preset quantum key. If the decryption is successful, it is determined that the identity information verification is successful, wherein the second preset quantum key is the same as or corresponds to the first preset quantum key.

3. The system according to claim 1, characterized in that During the process of connecting the vehicle to the charging pile, both the vehicle and the charging pile are configured to: periodically generate new quantum keys, and use the new quantum keys for encryption and decryption during data interaction.

4. The system according to claim 1, characterized in that The quantum key generator is further configured to: The quantum key to be filled is sent to the quantum cryptographic service platform in the cloud for management, so as to encrypt the data transmission between the cloud and the vehicle.

5. The system according to any one of claims 1 to 4, characterized in that: The charging pile is further configured as: Receiving a quantum key requirement message sent by the vehicle, wherein the quantum key requirement message includes a required quantum key quantity and is encrypted using the new quantum key; If the required number of quantum keys is not greater than the total number of quantum keys to be injected, the quantum key message is sent to the vehicle.

6. The system according to any one of claims 1 to 4, characterized in that: The vehicle includes a battery management device and a vehicle-mounted terminal; The battery management device is configured to receive the quantum key message, and use the new quantum key to decrypt the quantum key message to obtain the quantum key to be charged and the device identifier; when it is determined based on the device identifier that the charging pile is a designated charging pile and the quantum key message is a message of a designated type, send a quantum key file to the vehicle terminal according to a specific message identification code, wherein the quantum key file includes the quantum key to be charged; The vehicle-mounted terminal is configured to parse the quantum key file to obtain the quantum key to be injected and store it.

7. The system according to claim 6, characterized in that The vehicle-mounted terminal includes a microcontroller and a password security module; The microcontroller is configured to obtain the quantum key to be injected from the data field of the quantum key file when determining that the message identification code is correct, and send the quantum key to be injected to the secure storage space of the cryptographic security module for storage.

8. The system according to claim 6, characterized in that The charging pile communicates with the battery management device of the vehicle via the CAN bus, and the on-board terminal communicates with the battery management device via the CAN bus.

9. The system according to any one of claims 1 to 4, characterized in that: The quantum key to be injected includes data of multiple quantum keys to be injected and key information of each quantum key to be injected, wherein the key information at least includes a key identifier, a key length and a key sequence number.

10. A quantum key injection method, characterized in that: Applied to a charging pile, the method comprises: Receiving a first message sent by a vehicle, and verifying identity information of the vehicle based on the first message, wherein the first message includes a first random number and is encrypted using a first preset quantum key; If the identity information verification is successful, sending a second message to the vehicle, wherein the second message includes a second random number and is encrypted using a second preset quantum key; Generate a new quantum key based on the first random number and the second random number; Sending a quantum key message to the vehicle, wherein the quantum key message includes the quantum key to be injected and is encrypted using the new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile; Receiving a quantum key total state message sent by the vehicle, wherein the quantum key total state message includes the generation time of each remaining quantum key in the vehicle and is encrypted using the new quantum key; After decrypting the quantum key total state message, determining the number of remaining quantum keys whose generation time is earlier than a preset time; If the sum of the quantity and the required quantity of quantum keys is not greater than the total quantity of quantum keys to be injected, the quantum key message is sent to the vehicle.

11. A quantum key injection method, characterized in that: Applied to a vehicle, the method comprises: Sending a first message to the charging pile, wherein the first message includes a first random number and is encrypted using a first preset quantum key; Receiving a second message sent by the charging pile in response to the first message, wherein the second message includes a second random number and is encrypted using a second preset quantum key; Generate a new quantum key based on the first random number and the second random number; Receiving a quantum key message sent by the charging pile, wherein the quantum key message includes the quantum key to be injected and is encrypted using the new quantum key, and the quantum key to be injected is generated by a quantum key generator and sent to the charging pile; Sending a quantum key total status message to the charging pile, wherein the quantum key total status message includes the generation time of each remaining quantum key in the vehicle and is encrypted using the new quantum key; After the charging pile decrypts the quantum key total state message, it determines the number of remaining quantum keys whose generation time is earlier than a preset time; If the sum of the number and the required number of quantum keys is not greater than the total number of quantum keys to be charged, the quantum key message sent by the charging pile is received.

12. A computing device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the quantum key injection method as claimed in claim 10 or 11 is implemented.

Images