Identity authentication method, device and system and computer readable storage medium

Abstract

The embodiment of the invention relates to the technical field of identity authentication, and discloses an identity authentication method, device and system and a computer readable storage medium, and the method comprises the steps: receiving a charging request transmitted by a BMS; based on the charging request, requesting first identity data for performing identity authentication with the charging pile from a cloud server; and after the first identity data is received, transmitting the first identity data to a BMS (Battery Management System), so that the BMS transmits the first identity data to a charging pile for identity authentication of the charging pile. According to the technical scheme, the connection between the charging pile and the BMS is encrypted through the identity data transmitted by the cloud server, the VIN code can be bypassed, the risk that the VIN code is tampered and stolen is avoided, and then the interaction safety of the BMS and the charging pile is improved.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of identity authentication technology, and specifically to an identity authentication method, device, system and computer-readable storage medium. Background Art

[0002] At present, new energy vehicle companies provide charging services for their own brand models by building their own charging piles and charging stations, but they are basically based on the verification of the VIN code of the charging vehicle. The VIN code is provided from the interactive data protocol package when the charging BMS system interacts with the charging pile. After receiving the VIN code, the charging pile reports it to the brand's power station service cloud platform, and then transmits it to the company's tsp car cloud to query whether the VIN code belongs to this brand. There is a risk of VIN code being tampered with in the whole process. Even if some brands let the BMS transmit the VIN code to the charging pile, the VIN code is encrypted and calculated to a certain extent, but because the encryption calculation party is the on-board BMS system, this part of the encryption is hard-coded in the BMS system. If the BMS firmware of a car is leaked and reversed, the entire brand is leaked, and dynamic real-time verification cannot be achieved. Summary of the invention

[0003] In view of the above problems, the embodiments of the present invention provide an identity authentication method, device, system and computer-readable storage medium, which are used to solve the problem of low security caused by the interaction between BMS and charging pile based on VIN code in the prior art.

[0004] According to one aspect of an embodiment of the present invention, there is provided an identity authentication method, which is applied to a vehicle TBOX, and the method comprises:

[0005] Receive a charging request transmitted by the BMS;

[0006] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0007] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0008] According to another aspect of an embodiment of the present invention, there is provided an identity authentication device applied to a vehicle TBOX, comprising:

[0009] A data transmission module, used for receiving a charging request transmitted by the BMS;

[0010] A data acquisition module, configured to request, from a cloud server, first identity data for identity authentication with a charging pile based on a charging request;

[0011] The identity authentication module is used to transmit the first identity data to the BMS after receiving the first identity data, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0012] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0013] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0014] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0015] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0016] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0017] Obtain several image frames corresponding to the vehicle-mounted images;

[0018] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0019] Extracting charging pile identification data from the charging pile image;

[0020] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0021] According to one aspect of an embodiment of the present invention, there is provided an identity authentication method, which is applied to a charging pile, and the method includes:

[0022] receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0023] The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

[0024] According to one aspect of an embodiment of the present invention, there is provided an identity authentication device, which is applied to a charging pile, and the device includes:

[0025] A data receiving module, used for receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0026] The data control module is used to decrypt the second identity data and the third identity data, and then perform charging control based on the decryption result.

[0027] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0028] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0029] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0030] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0031] According to another aspect of an embodiment of the present invention, an identity authentication system is provided, the system comprising: a vehicle TBOX, a BMS, a charging pile and a cloud server; wherein the vehicle TBOX is connected to the BMS and the cloud server respectively; the charging pile is connected to the BMS and the cloud server respectively; wherein the vehicle TBOX performs the following operations:

[0032] Receive a charging request transmitted by the BMS;

[0033] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0034] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0035] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0036] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0037] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0038] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0039] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0040] Obtain several image frames corresponding to the vehicle-mounted images;

[0041] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0042] Extracting charging pile identification data from the charging pile image;

[0043] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0044] The charging pile performs the following operations:

[0045] receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0046] The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

[0047] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0048] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0049] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0050] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0051] According to another aspect of an embodiment of the present invention, a vehicle TBOX is provided, comprising: a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other via the communication bus;

[0052] The memory is used to store at least one executable instruction, and the executable instruction enables the processor to perform the following operations:

[0053] Receive a charging request transmitted by the BMS;

[0054] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0055] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0056] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0057] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0058] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0059] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0060] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0061] Obtain several image frames corresponding to the vehicle-mounted images;

[0062] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0063] Extracting charging pile identification data from the charging pile image;

[0064] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0065] The embodiment of the present invention authenticates the charging pile based on the charging request initiated by the BMS, and directly authenticates the BMS and the charging pile through the identity data transmitted by the cloud server. Compared with the prior art that directly connects the BMS and the charging pile based on the VIN code, the present invention encrypts the connection between the charging pile and the BMS based on the identity data transmitted by the cloud server, which can bypass the VIN code and avoid the risk of the VIN code being tampered with and stolen, thereby improving the interaction security between the BMS and the charging pile.

[0066] Furthermore, the embodiment of the present invention initiates a two-way authentication between the vehicle TBOX and the cloud server, and performs a secure interaction in advance before encrypting the interaction with the BOMS charging pile, thereby further improving the interaction security between the BMS and the charging pile.

[0067] Furthermore, the embodiment of the present invention identifies the position of the charging pile by acquiring the on-board image, completes the connection between the BMS and the charging pile when reversing, and performs key configuration; compared with the VIN code, the setting here can speed up the charging efficiency while ensuring safety.

[0068] The above description is only an overview of the technical solution of the embodiment of the present invention. In order to more clearly understand the technical means of the embodiment of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the embodiment of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are specifically listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] The accompanying drawings are only used to illustrate the embodiments and are not to be considered as limiting the present invention. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings. In the accompanying drawings:

[0070] Figure 1 A schematic diagram showing a flow chart of a first embodiment of an identity authentication method provided by the present invention;

[0071] Figure 2 A schematic diagram showing a flow chart of a second embodiment of the identity authentication method provided by the present invention;

[0072] Figure 3 A schematic diagram showing the structure of a first embodiment of an identity authentication device provided by the present invention;

[0073] Figure 4 A schematic diagram showing the structure of a second embodiment of an identity authentication device provided by the present invention;

[0074] Figure 5 A schematic structural diagram of an embodiment of a vehicle TBOX provided by the present invention is shown;

[0075] Figure 6A schematic structural diagram of an embodiment of a charging pile provided by the present invention is shown;

[0076] Figure 7 A schematic diagram showing the structure of an embodiment of an identity authentication system provided by the present invention;

[0077] Figure 8 A structural schematic diagram of an embodiment of an interaction timing diagram of a vehicle TBOX, a cloud server, a BMS and a charging pile provided by the present invention is shown. DETAILED DESCRIPTION

[0078] Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein.

[0079] Figure 1 FIG. 1 is a flow chart showing a first embodiment of the identity authentication method of the present invention, which is executed by a vehicle TBOX. Figure 1 As shown, the method comprises the following steps:

[0080] Step 110: Receive a charging request transmitted by the BMS.

[0081] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0082] It can be understood that the data transmission between BMS and charging pile is established through VIN code. Since VIN code is transmitted through hardware connection, high speed and stability of data transmission can be guaranteed.

[0083] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0084] Obtain several image frames corresponding to the vehicle-mounted images;

[0085] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0086] Extracting charging pile identification data from the charging pile image;

[0087] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0088] It is understandable that the VIN code needs to be inserted into the car before the charging gun can interact, and the key configuration and decryption based on the VIN code are required after the charging gun is inserted into the car. Charging can only be performed after these steps are completed. Here, the location of the charging pile is identified by obtaining the on-board image, and the connection between the BMS and the charging pile can be completed when the car is parked in the charging position, and the key configuration and decryption are performed, so that charging can start immediately after the charging gun is connected to the car; compared with the VIN code, the setting here can speed up the overall charging efficiency of the system while ensuring safety.

[0089] In a specific embodiment, the vehicle-mounted image can also be judged according to the setting direction of the vehicle charging port: if it is at the front of the vehicle, the impact of the parking recorder is retrieved; if it is at the rear of the vehicle, the reversing image is retrieved.

[0090] It is understandable that the clarity varies with the distance between the vehicle and the charging station. The smaller the distance, the greater the clarity.

[0091] In a specific embodiment, the clarity threshold needs to be determined based on the peripheral characteristics of the charging pile: first, based on the first clarity threshold, search whether there is a QR code feature in the vehicle-mounted image. If the QR code feature cannot be obtained after reaching the first clarity threshold, the first clarity threshold is adjusted to the second clarity threshold. When the vehicle-mounted image meets the second clarity threshold, the device code of the charging pile is obtained.

[0092] It should be noted that, based on the analysis of historical on-board images, the clarity calibration is performed by changing the distance between the vehicle and the charging pile with the QR code. When the on-board image can clearly identify the QR code, the current clarity threshold is determined to be the first clarity threshold. Similarly, based on the analysis of historical on-board images, the clarity calibration is performed by changing the distance between the vehicle and the charging pile with the device code. When the on-board image can clearly identify the device code, the current clarity threshold is determined to be the second clarity threshold.

[0093] In another optional method, the GPS data is transmitted from the vehicle TBOX to the BMS to locate the specific charging pile, and then establish data transmission between the BMS and the charging pile. However, since the distance between a row of charging piles in the charging station is very close, higher-precision GPS data is required.

[0094] In another optional method, data transmission between the BMS and the charging pile can be established through Bluetooth, WiFi, etc.

[0095] Step 120: Based on the charging request, request the cloud server for first identity data for identity authentication with the charging pile.

[0096] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0097] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0098] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0099] It is understandable that based on the charging request initiated by BMS, a two-way authentication is initiated between TBOX and the cloud server: when the first identity data of the cloud server is authenticated and the second identity data of the BMS is authenticated, TBOX is identified as a legitimate device at this time. After passing the first identity authentication, the transmission encryption between BMS and the charging pile can be completed based on the key generated by the cloud server. Before encrypting the charging pile and the cloud server, the identity of TBOX and the cloud server can be authenticated first, which further improves the security of the interaction between the BMS charging pile.

[0100] Step 130: after receiving the first identity data, transmitting the first identity data to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0101] Figure 2 FIG. 1 is a flow chart showing another embodiment of the identity authentication method of the present invention, which is executed by a charging pile. Figure 2 As shown, the method comprises the following steps:

[0102] Step 210: Receive the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server.

[0103] Step 220: decrypt the second identity data and the third identity data, and then perform charging control based on the decryption result.

[0104] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0105] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0106] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0107] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0108] It can be understood that the identity data is decrypted and compared for consistency through randomly generated dynamic decryption parameters, so as to make a judgment on the BMS charging control. Since the dynamic decryption parameters are always sent by the cloud server with different decryption parameters, the unified key generates different decryption results under different decryption parameters. Based on the randomly generated dynamic decryption parameters, it can avoid the problem of BMS charging being cracked due to the interception of the key, thereby improving the security of data interaction between BMS and charging piles.

[0109] In a specific embodiment, if the first decrypted data is consistent with the second decrypted data, the match is successful, and the charging pile starts to control the charging of the BMS; if the first decrypted data is inconsistent with the second decrypted data, the match fails, the charging pile is prohibited from controlling the charging of the BMS, and a warning is issued.

[0110] Preferably, the random algorithm is aseCDC (RandA|RandB), wherein RandA is dynamically issued once to TBOX and charging piles. For example, RandA is defined once = using 14234 for rand (generating random numbers using the randomness of hash functions). In this way, when the vehicle TBOX, BMS, and charging pile are reversely stolen and the algorithm is taken out, the factors involved in the calculation are also in the form of a single effective change and cannot be applied to the next charging use, thereby increasing the attack cost of illegal users.

[0111] In a specific embodiment, see Figure 8 , Figure 8 The interaction sequence diagram of the vehicle TBOX, cloud server, BMS and charging pile is shown; the cloud server includes: vehicle cloud server, charging pile service cloud platform, cloud key platform; the sequence diagram includes:

[0112] S1: BMS detects the connection status of the charging pile, and executes S2 after the connection is successful;

[0113] S2: BMS sends a charging request to the vehicle TBOX and executes S3;

[0114] S3: The vehicle TBOX performs two-way identity authentication with the vehicle cloud server. After the vehicle TBOX successfully performs two-way authentication with the vehicle cloud server, S4 and S8 are executed at the same time;

[0115] S4: The vehicle TBOX sends a key request to the vehicle cloud server and executes S5;

[0116] S5: After the vehicle cloud server verifies the request of the vehicle TBOX, it triggers the first identity data to be sent to the vehicle TBOX and executes S6;

[0117] S6: The vehicle TBOX transparently transmits the received first identity data to the BMS and executes S7;

[0118] S7: The BMS transmits the first identity data to the charging pile and executes S10;

[0119] S8: While the vehicle cloud server verifies the request of the vehicle TBOX, the cloud key platform sends the third identity data identical to the first identity data to the charging pile service cloud platform, and executes S9;

[0120] S9: The charging pile service cloud platform sends the received third identity data to the charging pile and executes S10;

[0121] S10: After receiving the second identity data (i.e. the first identity data transmitted by the vehicle TBOX to the charging pile) and the third identity data, the charging pile verifies and compares the second identity data and the third identity data, and performs charging control based on the comparison result.

[0122] In a specific embodiment, the first identity data, the second identity data and the third identity data may be keys.

[0123] It should be noted that the vehicle TBOX to BMS performs local transmission via a private protocol within the vehicle.

[0124] Beneficial Effects

[0125] The embodiment of the present invention effectively prevents the security issues of VIN code tampering and key theft by utilizing two-way authentication between TBOX and vehicle cloud server, encrypted transmission of keys, and near-end transmission using private protocols in the vehicle, thus greatly improving the security of communication between the vehicle and the charging pile. At the same time, the embodiment of the present invention does not need to carry HSM in the BMS for VIN encryption, which saves hardware costs and reduces the complexity of the system.

[0126] Figure 3 FIG. 2 shows a schematic diagram of the structure of an embodiment of the identity authentication device of the present invention. Figure 3 As shown, the device 300 is applied to a vehicle TBOX and includes: a data transmission module 310 , a data acquisition module 320 and an identity authentication module 330 .

[0127] A data transmission module, used for receiving a charging request transmitted by the BMS;

[0128] A data acquisition module, configured to request, from a cloud server, first identity data for identity authentication with a charging pile based on a charging request;

[0129] The identity authentication module is used to transmit the first identity data to the BMS after receiving the first identity data, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0130] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0131] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0132] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0133] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0134] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0135] Obtain several image frames corresponding to the vehicle-mounted images;

[0136] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0137] Extracting charging pile identification data from the charging pile image;

[0138] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0139] Figure 4 FIG. 2 shows a schematic diagram of the structure of an embodiment of the identity authentication device of the present invention. Figure 4 As shown, the device 400 is applied to a charging pile and includes: a data receiving module 410 and a data control module 420 .

[0140] A data receiving module, used for receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0141] The data control module is used to decrypt the second identity data and the third identity data, and then perform charging control based on the decryption result.

[0142] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0143] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0144] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0145] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0146] Beneficial Effects

[0147] The embodiment of the present invention authenticates the charging pile based on the charging request initiated by the BMS, and directly authenticates the BMS and the charging pile through the identity data transmitted by the cloud server. Compared with the prior art that directly connects the BMS and the charging pile based on the VIN code, the present invention encrypts the connection between the charging pile and the BMS based on the identity data transmitted by the cloud server, which can bypass the VIN code and avoid the risk of the VIN code being tampered with and stolen, thereby improving the interaction security between the BMS and the charging pile.

[0148] Furthermore, the embodiment of the present invention initiates a two-way authentication between the vehicle TBOX and the cloud server, and performs a secure interaction in advance before encrypting the interaction with the BOMS charging pile, thereby further improving the interaction security between the BMS and the charging pile.

[0149] Furthermore, the embodiment of the present invention identifies the position of the charging pile by acquiring the on-board image, completes the connection between the BMS and the charging pile when reversing, and performs key configuration; compared with the VIN code, the setting here can speed up the charging efficiency while ensuring safety.

[0150] Figure 5 The schematic diagram of the structure of an embodiment of the vehicle TBOX of the present invention is shown. The specific embodiment of the present invention does not limit the specific implementation of the vehicle TBOX.

[0151] like Figure 5As shown, the vehicle TBOX may include: a processor 502 , a communications interface 504 , a memory 506 , and a communications bus 508 .

[0152] The first processor 502, the first communication interface 504, and the first memory 506 communicate with each other via the first communication bus 508. The first communication interface 504 is used to communicate with other devices such as a client or other server. The first processor 502 is used to execute the first program 510, which can specifically execute the relevant steps in the above-mentioned embodiment of the identity authentication method.

[0153] Specifically, the first program 510 may include program code including computer executable instructions.

[0154] The first processor 502 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiment of the present invention. The one or more processors included in the vehicle TBOX may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0155] The first memory 506 is used to store the first program 510. The first memory 506 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0156] The first program 510 can be specifically called by the first processor 502 to enable the vehicle TBOX to perform the following operations:

[0157] Receive a charging request transmitted by the BMS;

[0158] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0159] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0160] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0161] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0162] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0163] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0164] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0165] Obtain several image frames corresponding to the vehicle-mounted images;

[0166] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0167] Extracting charging pile identification data from the charging pile image;

[0168] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0169] Figure 6 A schematic structural diagram of an embodiment of a charging pile of the present invention is shown, and the specific embodiment of the present invention does not limit the specific implementation of the charging pile.

[0170] like Figure 6 As shown, the charging pile may include: a second processor (processor) 602 , a second communication interface (Communications Interface) 604 , a second memory (memory) 606 , and a second communication bus 608 .

[0171] The second processor 602, the second communication interface 604, and the second memory 606 communicate with each other via the second communication bus 608. The second communication interface 604 is used to communicate with other devices such as a client or other server. The second processor 602 is used to execute the second program 610, which can specifically execute the relevant steps in the above-mentioned embodiment of the identity authentication method.

[0172] Specifically, the second program 610 may include program codes including computer executable instructions.

[0173] The second processor 602 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiment of the present invention. The one or more processors included in the charging pile may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0174] The second memory 606 is used to store the second program 610. The second memory 606 may include a high-speed RAM memory, and may also include a non-volatile memory, such as at least one disk memory.

[0175] The second program 610 can be specifically called by the second processor 602 to enable the charging pile to perform the following operations:

[0176] receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0177] The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

[0178] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0179] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0180] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0181] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0182] Beneficial Effects

[0183] The embodiment of the present invention authenticates the charging pile based on the charging request initiated by the BMS, and directly authenticates the BMS and the charging pile through the identity data transmitted by the cloud server. Compared with the prior art that directly connects the BMS and the charging pile based on the VIN code, the present invention encrypts the connection between the charging pile and the BMS based on the identity data transmitted by the cloud server, which can bypass the VIN code and avoid the risk of the VIN code being tampered with and stolen, thereby improving the interaction security between the BMS and the charging pile.

[0184] Furthermore, the embodiment of the present invention initiates a two-way authentication between the vehicle TBOX and the cloud server, and performs a secure interaction in advance before encrypting the interaction with the BOMS charging pile, thereby further improving the interaction security between the BMS and the charging pile.

[0185] Furthermore, the embodiment of the present invention identifies the position of the charging pile by acquiring the on-board image, completes the connection between the BMS and the charging pile when reversing, and performs key configuration; compared with the VIN code, the setting here can speed up the charging efficiency while ensuring safety.

[0186] Figure 7 The schematic diagram of the structure of the embodiment of the identity authentication system of the present invention is shown. The specific embodiment of the present invention does not limit the specific implementation of the identity authentication system. According to another aspect of the embodiment of the present invention, an identity authentication system 700 is provided, the system comprising: a vehicle TBOX 701, a BMS 702, a charging pile 703 and a cloud server 704; wherein the vehicle TBOX 701 is connected to the BMS 702 and the cloud server 704 respectively; the charging pile 703 is connected to the BMS 702 and the cloud server 704 respectively; wherein the vehicle TBOX 701 performs the following operations:

[0187] Receive a charging request transmitted by the BMS;

[0188] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0189] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0190] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0191] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0192] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0193] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0194] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0195] Obtain several image frames corresponding to the vehicle-mounted images;

[0196] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0197] Extracting charging pile identification data from the charging pile image;

[0198] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0199] The charging pile 703 performs the following operations:

[0200] receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0201] The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

[0202] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0203] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0204] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0205] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0206] An embodiment of the present invention provides a computer-readable storage medium, which stores at least one executable instruction. When the executable instruction is run on an identity authentication device / vehicle TBOX / charging pile, the identity authentication device / vehicle TBOX performs the operations of the above-mentioned identity authentication method applied to the vehicle TBOX, and the identity authentication device / charging pile performs the operations of the above-mentioned identity authentication method applied to the charging pile.

[0207] The executable instructions may be specifically used to enable the identity authentication device / vehicle TBOX to perform the following operations:

[0208] Receive a charging request transmitted by the BMS;

[0209] Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server;

[0210] After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

[0211] In an optional manner, the requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes:

[0212] Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX;

[0213] After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

[0214] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

[0215] In an optional manner, before receiving the charging request transmitted by the BMS, the method further includes:

[0216] Obtain several image frames corresponding to the vehicle-mounted images;

[0217] An image frame whose clarity meets a clarity threshold is selected as a charging pile image;

[0218] Extracting charging pile identification data from the charging pile image;

[0219] Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

[0220] Furthermore, the executable instructions enable the identity authentication device / charging pile to perform the following operations:

[0221] receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server;

[0222] The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

[0223] In an optional manner, the decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes:

[0224] Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm;

[0225] Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data;

[0226] The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

[0227] Beneficial Effects

[0228] The embodiment of the present invention authenticates the charging pile based on the charging request initiated by the BMS, and directly authenticates the BMS and the charging pile through the identity data transmitted by the cloud server. Compared with the prior art that directly connects the BMS and the charging pile based on the VIN code, the present invention encrypts the connection between the charging pile and the BMS based on the identity data transmitted by the cloud server, which can bypass the VIN code and avoid the risk of the VIN code being tampered with and stolen, thereby improving the interaction security between the BMS and the charging pile.

[0229] Furthermore, the embodiment of the present invention initiates a two-way authentication between the vehicle TBOX and the cloud server, and performs a secure interaction in advance before encrypting the interaction with the BOMS charging pile, thereby further improving the interaction security between the BMS and the charging pile.

[0230] Furthermore, the embodiment of the present invention identifies the position of the charging pile by acquiring the on-board image, completes the connection between the BMS and the charging pile when reversing, and performs key configuration; compared with the VIN code, the setting here can speed up the charging efficiency while ensuring safety.

[0231] The algorithms or displays provided herein are not inherently related to any particular computer, virtual system or other device. In addition, the embodiments of the present invention are not directed to any particular programming language.

[0232] In the description provided herein, a large number of specific details are described. However, it is understood that embodiments of the present invention can be practiced without these specific details. Similarly, in order to simplify the present invention and help understand one or more of the various inventive aspects, in the above description of exemplary embodiments of the present invention, the various features of the embodiments of the present invention are sometimes grouped together into a single embodiment, figure, or description thereof. Wherein, the claims that follow the specific embodiment are hereby expressly incorporated into the specific embodiment, wherein each claim itself is a separate embodiment of the present invention.

[0233] Those skilled in the art will appreciate that the modules in the devices in the embodiments may be adaptively changed and arranged in one or more devices different from the embodiments. The modules or units or components in the embodiments may be combined into one module or unit or component, and further may be divided into a plurality of submodules or subunits or subcomponents. Except that at least some of such features and / or processes or units are mutually exclusive.

[0234] It should be noted that the above embodiments illustrate the present invention rather than limit it, and that those skilled in the art may devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference symbol between brackets shall not be construed as a limitation on the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "one" or "an" preceding an element does not exclude the presence of a plurality of such elements. The present invention may be implemented by means of hardware comprising a number of different elements and by means of a suitably programmed computer. In a unit claim enumerating a number of devices, several of these devices may be embodied by the same hardware item. The use of the words first, second, and third, etc. does not indicate any order. These words may be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be understood as limitations on the order of execution.

Claims

1. An identity authentication method, characterized in that: Applied to a vehicle TBOX, the method comprises: Receive a charging request transmitted by the BMS; Based on the charging request, requesting first identity data for identity authentication with the charging pile from the cloud server; After receiving the first identity data, the first identity data is transmitted to the BMS, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

2. The method according to claim 1, characterized in that: The step of requesting the cloud server for first identity data for identity authentication with the charging pile based on the charging request includes: Based on the charging request, the first authentication data is transmitted to the cloud server, and the authentication is performed based on the second authentication data fed back by the cloud server; wherein, after the cloud server authenticates the first authentication data, the second authentication data is transmitted to the vehicle TBOX; After the second authentication data is authenticated, the key data is requested from the cloud server, and the first identity data transmitted by the cloud server based on the key data is received; wherein the first identity data is used for identity authentication with the charging pile.

3. The method according to any one of claims 1 to 2, characterized in that: Before receiving the charging request transmitted by the BMS, the method further includes: establishing data transmission between the BMS and the charging pile based on the VIN code generated by the BMS.

4. The method according to any one of claims 1 to 2, characterized in that: Before receiving the charging request transmitted by the BMS, the method further includes: Obtain several image frames corresponding to the vehicle-mounted images; An image frame whose clarity meets a clarity threshold is selected as a charging pile image; Extracting charging pile identification data from the charging pile image; Establish data transmission of the charging pile corresponding to the BMS and the charging pile identification data.

5. An identity authentication device, characterized in that: Applied to vehicle TBOX, the device comprises: A data transmission module, used for receiving a charging request transmitted by the BMS; A data acquisition module, configured to request, from a cloud server, first identity data for identity authentication with a charging pile based on a charging request; The identity authentication module is used to transmit the first identity data to the BMS after receiving the first identity data, so that the BMS transmits the first identity data to the charging pile for the charging pile to perform identity authentication.

6. An identity authentication method, characterized in that: Applied to a charging pile, the method comprises: receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server; The second identity data and the third identity data are decrypted, and charging control is performed based on the decryption result.

7. The method according to claim 6, characterized in that The decryption result includes: first decrypted data and second decrypted data; the decrypting the second identity data and the third identity data, and then performing charging control based on the decryption result, includes: Obtain dynamic decryption parameters issued by the cloud server; wherein the dynamic decryption parameters are decryption parameters generated by the cloud server based on a random algorithm; Decrypting the second identity data and the third identity data based on the dynamic decryption parameter to obtain first decrypted data corresponding to the second identity data and second decrypted data corresponding to the third identity data; The charging of the BMS is controlled according to the consistency between the first decrypted data and the second decrypted data.

8. An identity authentication device, characterized in that: Applied to a charging pile, the method comprises: A data receiving module, used for receiving the second identity data transmitted by the BMS and the third identity data transmitted by the cloud server; The data control module is used to decrypt the second identity data and the third identity data, and then perform charging control based on the decryption result.

9. An identity authentication system, characterized in that: The system includes: a vehicle TBOX, a BMS, a charging pile and a cloud server; wherein the vehicle TBOX is connected to the BMS and the cloud server respectively; the charging pile is connected to the BMS and the cloud server respectively; wherein the vehicle TBOX executes the identity authentication method as described in any one of claims 1 to 4; the charging pile executes the identity authentication method as described in any one of claims 6 to 7.

10. A vehicle TBOX, characterized in that: include: A processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other via the communication bus; The memory is used to store at least one executable instruction, and the executable instruction enables the processor to perform the operation of the identity authentication method as described in any one of claims 1-4.

Images