Multi-terminal charging control method and device
By establishing a secure channel between the user terminal and the charging pile terminal during the charging process of new energy vehicles, and using identity code to generate interactive passwords, the problem of user payment information being intercepted or tampered with is solved, and the security of charging data transmission and user information protection is realized.
Patent Information
- Application Number
- CN202510265550.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-03-07
- Publication Date
- 2025-05-13
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
During the charging process of new energy vehicles, the user's payment information is easily intercepted or tampered, resulting in illegal users who may obtain charging permissions and use charging piles to charge without paying.
During the charging interaction process, a secure channel is established between the user terminal and the charging pile terminal, an identity code is used to generate interactive passwords, and the session key is randomly determined through the chaotic mapping step, and the identity code is encrypted to ensure the security of communication data.
It effectively ensures the security of data transmission during the charging interaction, prevents illegal users from obtaining charging permissions, and protects users' personal sensitive data and charging costs.
Smart Images

Figure CN119975078A_ABST
Abstract
Description
Technical Field
[0001] The embodiments of the present application relate to the field of data security, and in particular to a multi-terminal charging control method and device. Background Art
[0002] With the development of new energy, new energy vehicles have gradually taken a leading position in the market. Compared with traditional fuel vehicles that generate energy by burning fossil fuels, new energy vehicles are powered by electricity, which greatly reduces carbon emissions.
[0003] Currently, new energy vehicles that use electricity as power need to be charged through charging piles. During the charging process, users need to first pay through the charging platform. After receiving the user's payment information, the charging platform communicates with the charging pile and controls the corresponding charging pile to charge the user's new energy vehicle.
[0004] In the above-mentioned charging interaction process, after receiving the user's payment information, the charging platform controls the charging pile to charge the vehicle. In this process, the user's payment information is personal sensitive data. If it is intercepted or tampered with, it may cause illegal users to obtain the user's charging authority, thereby causing illegal users to use the charging pile for charging without paying. There is currently no better solution to this problem. Summary of the invention
[0005] The embodiments of the present application provide a multi-terminal charging control method and device for improving the security of data transmission in charging interaction.
[0006] To achieve the above objectives, the embodiments of the present application adopt the following technical solutions:
[0007] In a first aspect, a multi-terminal charging control method is provided, which is applied to a charging pile terminal, and the method includes:
[0008] In response to a charging instruction sent by a user terminal, an identity code of the user terminal is obtained, and an interaction password is generated according to the identity code, wherein the charging instruction is used to request the charging pile terminal to establish a secure channel;
[0009] Send an interactive command to the user terminal so that the user terminal can establish a secure channel with the charging pile terminal according to the interactive command;
[0010] Sending a positioning request to a user terminal via a secure channel;
[0011] In response to receiving the positioning data sent by the user terminal, determining the vehicle location;
[0012] Sending the vehicle location and identity code to the control terminal, wherein the control terminal is used to verify the identity code;
[0013] After the control terminal authenticates the identity code, in response to receiving the charging control instruction of the target vehicle sent by the control terminal, the target vehicle is charged according to the charging control instruction, wherein the charging control instruction is obtained by comparing the vehicle positioning of the control terminal with the current position of the target vehicle sent by the user terminal.
[0014] In a possible implementation manner of the first aspect, obtaining an identity code of a user terminal and generating an interaction password according to the identity code includes:
[0015] Obtain the identity code of the user terminal;
[0016] The identity code is input as an initial condition into the chaotic mapping step, and a session key is randomly determined from at least one session key candidate;
[0017] The identity code is encrypted using the session key to obtain the interactive password;
[0018] The chaotic mapping step includes:
[0019] Iteratively calculate Chebyshev polynomials according to initial conditions to generate chaotic sequences;
[0020] dividing the chaotic sequence into blocks of a preset length to obtain at least one session key candidate;
[0021] The Chebyshev polynomials include:
[0022] x n+1 =cos(n×cos -1 (x n ));
[0023] In the formula, x n is the value of the current iteration, x n+1 The value for the next iteration.
[0024] In another possible implementation manner of the first aspect, sending an interactive command to a user terminal so that the user terminal can establish a secure channel with a charging pile terminal according to the interactive command includes:
[0025] Obtaining a first public key of the user terminal, and using the first public key to encrypt a session key of the interactive password to obtain a strong interactive password;
[0026] Send a strong interactive password to the user terminal, and after the user terminal verifies that the strong interactive password has passed, establish a secure channel with the user terminal;
[0027] The steps for the user terminal to verify that the strong interactive password is passed include:
[0028] The user terminal decrypts the strong interactive password using the first private key corresponding to the first public key to obtain the session key;
[0029] The user terminal decrypts the interactive password using the session key to obtain the identity code to be tested;
[0030] When the identity code to be tested is consistent with the identity code of the user terminal, the user terminal determines that the strong interactive password verification is passed.
[0031] In another possible implementation manner of the first aspect, before sending the vehicle location and identity code to the control terminal, the method includes:
[0032] Receiving a second ciphertext sent by the user terminal, wherein the second ciphertext is encrypted based on a second public key of the charging pile terminal;
[0033] decrypting the second ciphertext according to the second private key corresponding to the second public key to obtain the first public key fragment of the control terminal;
[0034] A third ciphertext sent by a receiving control terminal is obtained by encrypting the third ciphertext based on a second public key of the charging pile terminal;
[0035] Decrypt the third ciphertext according to the second private key to obtain a second public key fragment of the control terminal;
[0036] A complete public key of the control terminal is obtained according to the first public key fragment and the second public key fragment.
[0037] In another possible implementation manner of the first aspect, sending the vehicle location and identity code to the control terminal includes:
[0038] Encrypting the vehicle location and identity code according to the complete public key of the control terminal to obtain a fourth ciphertext;
[0039] The fourth ciphertext is sent to the control terminal so that the control terminal can decrypt the fourth ciphertext based on the third private key corresponding to the complete public key.
[0040] In a second aspect, the present application provides a multi-terminal charging control method, which is applied to a control terminal, and the method includes:
[0041] In response to the positioning instruction sent by the user terminal, the control terminal obtains the identity code of the user terminal and the current position of the target vehicle through the positioning instruction;
[0042] Receive the vehicle location and identity code to be tested sent by the charging pile terminal;
[0043] Verify whether the identity code to be tested is consistent with the identity code, and if the identity code to be tested is consistent with the identity code, compare the current position of the target vehicle with the vehicle positioning to determine whether the current position of the target vehicle and the vehicle positioning are both located in the same preset area;
[0044] When the current position of the target vehicle and the vehicle positioning are both located in the same preset area, a charging control instruction of the target vehicle is sent so that the charging pile terminal charges the target vehicle according to the charging control instruction.
[0045] In a possible implementation manner of the second aspect, before receiving the vehicle location and the identity code to be tested sent by the charging pile terminal, the method includes:
[0046] Randomly extracting n data bits from the public key of the control terminal to obtain a first public key fragment and a first data bit sequence, wherein n is less than the total number of data bits of the public key, and the first data bit sequence is used to represent the order of each data bit of the first public key fragment in the public key;
[0047] Using the public key after extracting n data bits as the second public key fragment, and obtaining the second data bit sequence of the second public key fragment;
[0048] Obtain the second public key of the charging pile terminal;
[0049] Encrypt the first public key fragment and the first data bit sequence according to the second public key to obtain a second ciphertext, and send the second ciphertext to the user terminal so that the user terminal forwards the second ciphertext to the charging pile terminal;
[0050] The second public key fragment and the second data bit sequence are encrypted according to the second public key to obtain a third ciphertext, and the third ciphertext is sent to the charging pile terminal.
[0051] In another possible implementation of the second aspect, receiving the vehicle location and the identity code to be tested sent by the charging pile terminal includes:
[0052] Receiving a fourth ciphertext sent by the charging pile terminal, wherein the fourth ciphertext is obtained by encrypting based on the public key of the control terminal;
[0053] The fourth ciphertext is decrypted according to the third private key corresponding to the public key to obtain the vehicle location and the identity code to be tested.
[0054] In a third aspect, the present application provides a charging pile terminal, including:
[0055] a memory configured to store instructions; and
[0056] The processor is configured to call instructions from the memory and implement the multi-terminal charging control method of the first aspect when executing the instructions.
[0057] In a fourth aspect, the present application provides a control terminal, including:
[0058] a memory configured to store instructions; and
[0059] The processor is configured to call instructions from the memory and implement the multi-terminal charging control method of the second aspect when executing the instructions.
[0060] Through the above technical solution, at the beginning of the charging interaction, the user terminal sends a charging instruction request to establish a secure channel. The charging pile terminal obtains the identity code of the user terminal and generates an interactive password for the establishment of a secure channel between the user terminal and the charging pile terminal, which can effectively ensure the legitimacy of the identities of both parties in communication and ensure data security during the communication process; the charging pile terminal sends the vehicle positioning and identity code to the control terminal, and the control terminal is used to verify the identity code. After the identity code verification is passed, the control terminal sends a charging control instruction, and the charging pile terminal charges the target vehicle according to the charging control instruction. At the same time, the control terminal ensures that only the target vehicle corresponding to the user terminal whose identity code verification is passed is charged through the confirmation of the vehicle positioning and current position, effectively preventing illegal users from obtaining charging permissions and protecting the security of users' personal sensitive data and charging fees. BRIEF DESCRIPTION OF THE DRAWINGS
[0061] Figure 1 A flowchart of a multi-terminal charging control method provided in an embodiment of the present application;
[0062] Figure 2 A flowchart of another multi-terminal charging control method provided in an embodiment of the present application;
[0063] Figure 3 A flowchart of a multi-terminal charging control method provided in an embodiment of the present application;
[0064] Figure 4 A schematic diagram of the structure of a charging pile terminal provided in an embodiment of the present application;
[0065] Figure 5 A schematic diagram of a multi-terminal charging control system provided in an embodiment of the present application. DETAILED DESCRIPTION
[0066] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It should be understood that the specific implementation methods described herein are only used to illustrate and explain the embodiments of the present application, and are not used to limit the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.
[0067] It should be noted that if the embodiments of the present application involve directional indications (such as up, down, left, right, front, back...), the directional indications are only used to explain the relative position relationship, movement status, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.
[0068] In addition, if there are descriptions involving "first", "second", etc. in the embodiments of the present application, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or suggesting their relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such combination of technical solutions does not exist and is not within the scope of protection required by this application.
[0069] The multi-terminal charging control method provided in the embodiment of the present application is described in detail below through specific embodiments and their application scenarios in conjunction with the accompanying drawings.
[0070] An embodiment of the present application discloses a multi-terminal charging control method.
[0071] Reference Figure 1 , a multi-terminal charging control method, applied to a charging pile terminal, comprises the following steps:
[0072] S110. In response to the charging instruction sent by the user terminal, the charging pile terminal obtains the identity code of the user terminal and generates an interactive password according to the identity code.
[0073] S120: The charging pile terminal sends an interactive command to the user terminal, and the user terminal is used to perform secure interaction with the charging pile terminal according to the interactive command.
[0074] S130: The charging pile terminal sends a positioning request to the user terminal.
[0075] S140: In response to receiving the positioning data sent by the user terminal, the charging pile terminal determines the vehicle positioning.
[0076] S150. The charging pile terminal sends the vehicle location and identity code to the control terminal, and the control terminal is used to verify the identity code.
[0077] S160, after the control terminal verifies the identity code, in response to receiving the charging control instruction of the target vehicle sent by the control terminal, the charging pile terminal charges the target vehicle according to the charging control instruction;
[0078] The charging control instruction is obtained by comparing the vehicle positioning of the control terminal with the current position of the target vehicle sent by the user terminal.
[0079] In this embodiment, the user terminal can be a mobile phone, a tablet, a computer, etc., and the user can communicate with the charging pile through the user terminal. Specifically, the communication interaction between the user terminal and the charging pile terminal includes: the user terminal sends a charging instruction to the charging pile terminal and requests to establish a secure channel; the charging pile terminal responds to the charging instruction and obtains the identity code of the user terminal; the charging pile terminal generates an interactive command according to the identity code and sends the interactive command to the user terminal; the user terminal establishes a secure channel with the charging pile terminal according to the interactive command; the charging pile terminal sends a positioning request to the user terminal through the secure channel; the user terminal receives the positioning request and sends the positioning data to the charging pile terminal.
[0080] In the above-mentioned communication interaction between the user terminal and the charging pile terminal, the identity code of the user terminal is a unique identifier used to identify and verify the user's identity. It can be a combination of the user name and password used by the user to register the user terminal, or it can be a digital certificate of the user terminal, a token used for user login, etc. This application does not restrict this. After obtaining the identity code, the charging pile terminal will generate an interaction password based on the code. The interaction password is a temporarily generated encryption key used for subsequent secure communications between the user terminal and the charging pile terminal. The generation process of the interaction password usually uses an encryption algorithm (such as AES, RSA, etc.) to ensure the uniqueness and security of the password. After the interaction password is generated, the charging pile terminal will send it to the user terminal for subsequent secure interactions.
[0081] The user terminal can interact securely with the charging pile terminal according to the interactive command through a secure channel, where a secure channel refers to a secure connection established through encryption and other security mechanisms in network communication to ensure the confidentiality, integrity and reliability of communication data. The secure channel is used for communication between the user terminal and the charging pile terminal to ensure the security and privacy of the communication data. By establishing a secure channel, both parties (user terminal and charging pile terminal) can exchange information securely, including positioning requests and positioning data, without being affected by unauthorized access or tampering. Through the secure channel, the user terminal and the charging pile terminal can exchange information securely, including positioning requests, positioning data, etc. The establishment of a secure channel not only prevents unauthorized access or tampering, but also ensures data privacy and security during the charging process.
[0082] The charging pile terminal sends a positioning request to the user terminal through the established secure channel. The purpose of the positioning request is to obtain the location information of the vehicle where the user terminal is located for subsequent charging control. The positioning request usually contains a timestamp and request identifier to ensure the uniqueness and timeliness of the request.
[0083] After receiving the positioning request, the user terminal will start the positioning function (such as GPS, Beidou, etc.) to obtain the current location of the vehicle and send the positioning data back to the charging pile terminal. After receiving the positioning data sent by the user terminal, the charging pile terminal will determine the current location of the vehicle based on the data. The positioning data usually includes the latitude and longitude coordinates, timestamp and other information of the vehicle. After determining the vehicle location, the charging pile terminal will send the positioning information together with the identity code of the user terminal to the control terminal for subsequent identity authentication and charging control.
[0084] The charging pile terminal sends the vehicle location and the user terminal's identity code to the control terminal. The control terminal is the management device of the charging platform, responsible for verifying the user's identity and controlling the charging process.
[0085] After receiving the vehicle location and identity code, the control terminal will first verify the validity of the identity code. The verification process usually includes checking whether the identity code matches the locally stored user information. Specifically, the communication interaction between the control terminal and the charging pile terminal includes: the charging pile terminal sends the vehicle location and identity code to the control terminal; the control terminal verifies the validity of the identity code; after the control terminal authenticates the identity code, it sends a charging control instruction to the charging pile terminal; the charging pile terminal charges the target vehicle according to the charging control instruction. Among them, the charging control instruction is obtained by comparing the vehicle location of the control terminal with the current position of the target vehicle sent by the user terminal.
[0086] After verifying the identity code, the control terminal will compare the vehicle positioning with the current position of the target vehicle sent by the user terminal. If the vehicle positioning is consistent with the current position of the target vehicle, the control terminal will generate a charging control instruction and send it to the charging pile terminal.
[0087] The charging control instruction usually includes information such as the charging start time, charging duration, and charging power. After receiving the charging control instruction, the charging pile terminal will charge the target vehicle according to the instruction. During the charging process, the charging pile terminal will monitor the charging status in real time and feed back the charging progress to the user terminal and the control terminal to ensure the smooth progress of the charging process.
[0088] In the communication interaction between the control terminal and the charging pile terminal, in order to ensure the legitimacy and security of the user's identity, the control terminal needs to verify the identity code to prevent unauthorized users from accessing the charging platform. The control terminal can determine whether the identity code is verified by whether it matches the locally stored ID.
[0089] The communication interaction between the user terminal and the control terminal includes: the user terminal sends the current position of the target vehicle to the control terminal in real time; the control terminal compares the vehicle positioning sent by the charging pile terminal with the current position of the target vehicle to determine whether to send a charging control instruction to the charging pile terminal.
[0090] In the communication interaction between the user terminal and the control terminal, the control terminal can ensure that the charging control instruction is triggered only when the target vehicle is at the specified location by comparing the current location of the target vehicle with the vehicle location sent by the charging pile terminal, avoiding misoperation on the wrong vehicle or location, thereby enhancing the safety of charging. In addition, sending the current location of the target vehicle in real time and comparing it based on the vehicle location can make the charging process more intelligent and automated, improve the user's charging experience, reduce the user's waiting time and operation complexity, and by real-time monitoring of vehicle location information and comparing vehicle locations, the control terminal can avoid conflicts between different vehicles on the same charging pile, ensure that each vehicle is charged at the appropriate time and location, and avoid resource waste and charging pile conflicts. In summary, it is not difficult to understand that the control terminal can make more efficient use of charging piles through precise charging control, avoid charging piles being idle due to erroneous charging requests or conflicts, and the improvement of charging pile utilization means that more vehicles can be charged in a shorter time, improving the utilization efficiency of charging piles.
[0091] In this embodiment, at the beginning of the charging interaction, the user terminal sends a charging instruction request to establish a secure channel. The charging pile terminal obtains the identity code of the user terminal and generates an interaction password for establishing a secure channel between the user terminal and the charging pile terminal, which can effectively ensure the legitimacy of the identities of the communicating parties and ensure data security during the communication process; the charging pile terminal sends the vehicle positioning and identity code to the control terminal, and the control terminal is used to verify the identity code. After the identity code verification is passed, the control terminal sends a charging control instruction, and the charging pile terminal charges the target vehicle according to the charging control instruction. At the same time, the control terminal ensures that only the target vehicle corresponding to the user terminal whose identity code verification is passed is charged through the confirmation of the vehicle positioning and current position, effectively preventing illegal users from obtaining charging permissions and protecting the security of users' personal sensitive data and charging fees.
[0092] In one implementation of this embodiment, generating an interaction password according to the identity code includes the following steps:
[0093] S210, inputting the identity code as an initial condition into the chaotic mapping step, and randomly determining a session key from at least one session key candidate.
[0094] S220. Use the session key to encrypt the identity code to obtain an interactive password.
[0095] The chaotic mapping step includes:
[0096] S230, iteratively calculating Chebyshev polynomials according to initial conditions to generate a chaotic sequence.
[0097] S240: Divide the chaotic sequence into blocks of a preset length to obtain at least one session key candidate.
[0098] The Chebyshev polynomials include:
[0099] x n+1 =cos(n×cos -1 (x n ));
[0100] In the formula, x n is the value of the current iteration, x n+1 The value for the next iteration.
[0101] In order to effectively ensure the security of the identity code during transmission, the communication interaction between the charging pile terminal and the user terminal includes: the charging pile terminal obtains the identity code of the user terminal; the charging pile terminal inputs the identity code as an initial condition into the chaotic mapping step, randomly determines a session key from at least one session key candidate, and uses the session key to encrypt the identity code to obtain an interaction command; the charging pile terminal sends the interaction command to the user terminal; the user terminal establishes a secure channel with the charging pile terminal according to the interaction command.
[0102] In the communication interaction between the above-mentioned charging pile terminal and the user terminal, chaotic mapping is a type of nonlinear dynamic system, which is characterized by high sensitivity to initial conditions, randomness and determinism. Specifically, identity coding is used as the initial condition of chaotic mapping, and a chaotic sequence is generated through iterative calculation. The generation process of the chaotic sequence is unpredictable and random, ensuring the security of the session key. After generating the chaotic sequence, the charging pile terminal randomly determines a session key from at least one session key candidate. The session key candidate is obtained by dividing the chaotic sequence into blocks of a preset length, and each block can be used as a candidate for the session key.
[0103] The charging pile terminal uses a randomly determined session key to encrypt the identity code and generate an interactive password. The encryption process usually uses a symmetric encryption algorithm (such as AES) to ensure the security and confidentiality of the interactive password.
[0104] The interactive password is the key to establishing a secure channel between the user terminal and the charging pile terminal. By encrypting the identity code with the session key, the interactive password can not only verify the user's identity, but also ensure the security of subsequent communication data. After the interactive password is generated, the charging pile terminal will send it to the user terminal so that the user terminal can establish a secure channel with the charging pile terminal based on the interactive password.
[0105] In the chaotic mapping step, Chebyshev polynomials are used for iterative calculation. Through continuous iterative calculation, a chaotic sequence can be generated; the generated chaotic sequence is divided according to a preset length to obtain multiple blocks, where each block can be used as a candidate for the session key. Specifically, in the chaotic mapping, each part obtained by dividing the generated chaotic sequence according to the preset length is a block. The block is a subsequence of the chaotic sequence, and each block contains elements of a preset length. The generation process of the chaotic sequence is highly sensitive to the initial conditions. Even if the initial conditions change slightly, the generated chaotic sequence will be completely different. This feature ensures the uniqueness and security of the session key.
[0106] For example, if the preset length is 2, when the chaotic sequence is divided into blocks, each block will contain two consecutive chaotic sequence elements.
[0107] The charging pile terminal divides the generated chaotic sequence into multiple blocks according to the preset length, and each block is used as a session key candidate. The preset length can be set according to actual needs, such as 2, 4, 8, etc.
[0108] Specifically, a chaotic sequence is a continuous sequence of values. After it is divided into blocks of a preset length, each block contains continuous elements of the preset length. For example, if the preset length is 2, each block after the chaotic sequence is divided will contain two continuous elements. These blocks can be used as candidates for session keys, and the charging pile terminal randomly selects one from them as the session key.
[0109] By dividing the chaotic sequence into blocks, the charging pile terminal can generate multiple session key candidates, further improving the randomness and security of the session key.
[0110] This implementation method can effectively increase the security of data transmission by using chaotic mapping to generate random session key candidates and using one of the session keys to encrypt the identity code. The randomness and unpredictability of chaotic mapping make the session key have a certain degree of security. At the same time, the encrypted identity code can protect the identity information of the user terminal, effectively ensuring the security of identity authentication and data transmission between the user terminal and the charging pile terminal.
[0111] In one implementation of this embodiment, the charging pile terminal sends an interactive command to the user terminal, and the user terminal is used to perform secure interaction with the charging pile terminal according to the interactive command, including the following steps:
[0112] S310: The charging pile terminal obtains the first public key of the user terminal, and uses the first public key to encrypt the session key of the interactive password to obtain a strong interactive password.
[0113] S320: The charging pile terminal sends a strong interactive command to the user terminal.
[0114] S330. The user terminal decrypts the strong interactive password using the first private key corresponding to the first public key to obtain a session key.
[0115] S340: The user terminal decrypts the interaction code using the session key to obtain the identity code to be tested.
[0116] S350: When the identity code to be tested is consistent with the identity code of the user terminal, the user terminal determines that the strong interactive password verification is passed.
[0117] S360: After the user terminal verifies that the strong interactive password is passed, the charging pile terminal establishes a secure channel with the user terminal.
[0118] In this embodiment, the secure channel ensures the security of data transmission between the user terminal and the charging pile terminal through encryption technology, preventing it from being read or stolen by unauthorized personnel, thereby protecting the confidentiality of the communication content.
[0119] Specifically, the steps of establishing a secure channel include: the charging pile terminal obtains the first public key of the user terminal, and uses the first public key to encrypt the session key of the interactive command to obtain a strong interactive command; the charging pile terminal sends the strong interactive command to the user terminal; the user terminal decrypts the strong interactive command through the first private key corresponding to the first public key to obtain the session key; the user terminal decrypts the interactive command through the session key to obtain the identity code to be tested, and when the identity code to be tested is consistent with the identity code of the user terminal, the user terminal determines that the strong interactive command verification has passed; a secure channel is established between the charging pile terminal and the user terminal.
[0120] Among them, the charging pile terminal first obtains the first public key of the user terminal. The first public key is the public key generated by the user terminal during the key exchange process, which is used to encrypt sensitive information to ensure the security of transmission. The charging pile terminal uses the public key to encrypt the session key of the interactive password to generate a strong interactive password. The charging pile terminal sends the generated strong interactive password to the user terminal through the communication network. As a double-encrypted ciphertext, the strong interactive password not only contains the encrypted session key, but also ensures that only the user terminal with the corresponding private key can decrypt and obtain the session key. This step is a key link in establishing a secure channel, ensuring the identity authentication of both parties in communication and the security of data transmission. The user terminal uses the first private key corresponding to the first public key to decrypt the received strong interactive password and obtain the session key. Since only the user terminal has the first private key, only it can successfully decrypt the strong interactive password, thereby ensuring the security and uniqueness of the session key. The user terminal uses the session key obtained from the strong interactive password to decrypt the interactive password to obtain the identity code to be tested. The identity code to be tested is generated by the charging pile terminal in the initial stage and is used to verify the identity of the user terminal. By decrypting the interactive password, the user terminal can obtain the identity code to be tested and compare it with its own identity code to complete the identity authentication. The user terminal compares the identity code to be tested with its own identity code. If the two are consistent, it means that the strong interactive password verification is passed and the identity of the user terminal is confirmed. This step ensures the authenticity of the identities of both parties in communication and prevents unauthorized devices from accessing the communication network, thereby protecting the security and integrity of the communication data. After confirming that the user terminal has passed the identity authentication, the charging pile terminal establishes a secure channel with it. The secure channel uses encryption technology to ensure the security of data transmission between the user terminal and the charging pile terminal to prevent it from being read or stolen by unauthorized personnel. Through the secure channel, the communicating parties can exchange data securely to ensure the confidentiality and integrity of the communication content. This step is the ultimate goal of communication interaction and provides users with safe and reliable charging services.
[0121] In the above process of establishing a secure channel, the strong interactive password is a double encrypted ciphertext. Specifically, when establishing a secure channel, the sender (charging pile terminal) generates a session key for encrypting communication data. In order to ensure that the session key is not stolen or tampered with during transmission and to ensure the security of communication data, the sender uses the first public key of the receiver (user terminal) to encrypt the session key to generate a strong interactive password. After receiving the strong interactive password, the receiver uses its first private key to decrypt it and obtains the session key and the interactive password encrypted by the session key, thereby ensuring that only the receiver can decrypt the interactive password, effectively ensuring the security of the communication process and preventing third parties from maliciously obtaining the session key. By using strong interactive passwords, the communicating parties can securely exchange session keys, establish a secure channel, and protect the confidentiality and integrity of communication data.
[0122] This implementation effectively ensures the security and reliability of communication between the charging pile terminal and the user terminal by establishing a secure channel between the charging pile terminal and the user terminal, thereby effectively protecting the communication privacy and data integrity between the user terminal and the charging pile terminal.
[0123] In one implementation of this embodiment, before sending the vehicle location and identity code to the control terminal, the following steps are included:
[0124] S410. Receive a second ciphertext sent by a user terminal, wherein the second ciphertext is encrypted based on a second public key of the charging pile terminal.
[0125] S420. Decrypt the second ciphertext according to the second private key corresponding to the second public key to obtain the first public key fragment of the control terminal.
[0126] S430, receiving a third ciphertext sent by the control terminal, where the third ciphertext is encrypted based on the second public key of the charging pile terminal.
[0127] S440. Decrypt the third ciphertext according to the second private key to obtain a second public key fragment of the control terminal.
[0128] S450. Obtain a complete public key of the control terminal according to the first public key fragment and the second public key fragment.
[0129] In order to ensure the security of communication and interaction between the charging pile terminal and the control terminal, this embodiment needs to establish a secure channel with the control terminal before the charging pile terminal sends the vehicle positioning and identity code to the control terminal, including: the control terminal encrypts the first public key fragment based on the second public key of the charging pile terminal to obtain the second ciphertext, and sends the second ciphertext to the user terminal; the control terminal encrypts the second public key fragment based on the second public key of the charging pile terminal to obtain the third ciphertext, and transmits the third ciphertext to the charging pile terminal; the user terminal forwards the second ciphertext to the charging pile terminal; the charging pile terminal receives the second ciphertext sent by the user terminal, and decrypts the second ciphertext according to the second private key corresponding to the second public key to obtain the first public key fragment of the control terminal; the charging pile terminal receives the third ciphertext sent by the control terminal, and decrypts the third ciphertext according to the second private key to obtain the second public key fragment of the control terminal; the charging pile terminal obtains the complete public key of the control terminal based on the first public key fragment and the second public key fragment.
[0130] In the secure channel between the charging pile terminal and the control terminal, the control terminal can increase the security of the overall communication by encrypting the public key separately and sending the ciphertext through different paths. Even if a ciphertext is intercepted, the attacker cannot obtain the complete information because two ciphertexts are required to restore the complete public key. In addition, the control terminal encrypts the public key separately and sends it through different paths, which can increase the difficulty of security authentication. This method requires the charging pile terminal and the user terminal to work together, making it more difficult for attackers to crack the security mechanism of communication.
[0131] In this embodiment, the control terminal encrypts the public key separately and sends the ciphertext through different paths to effectively ensure the establishment of a secure communication channel between the charging pile terminal and the control terminal to protect the confidentiality of the communication data, prevent various potential attacks and theft risks, and ensure the confidentiality and integrity of the communication data.
[0132] In one implementation of this embodiment, sending the vehicle location and identity code to the control terminal includes the following steps:
[0133] S510. Encrypt the vehicle location and identity code according to the complete public key of the control terminal to obtain a fourth ciphertext.
[0134] S520. Send a fourth ciphertext to the control terminal, so that the control terminal can decrypt the fourth ciphertext based on a third private key corresponding to the complete public key.
[0135] In this embodiment, the charging pile terminal first encrypts the vehicle location and identity code according to the complete public key of the control terminal to obtain the fourth ciphertext, and sends the fourth ciphertext to the control terminal, thereby ensuring the security of communication between the charging pile terminal and the control terminal. Using the complete public key to encrypt the vehicle location and identity code ensures that the vehicle location and identity code can only be decrypted by the control terminal.
[0136] This implementation method can effectively protect the security of communications, prevent data leakage and ensure the confidentiality of communications by encrypting the vehicle positioning and identity code and using the complete public key and private key of the control terminal for encryption and decryption.
[0137] Reference Figure 2 The embodiment of the present application also discloses a multi-terminal charging control method, which is applied to a control terminal and includes the following steps:
[0138] S610: In response to the positioning instruction sent by the user terminal, the control terminal obtains the identity code of the user terminal and the current position of the target vehicle through the positioning instruction.
[0139] S620. The control terminal receives the vehicle location and the identity code to be tested sent by the charging pile terminal.
[0140] S630, the control terminal verifies whether the identity code to be tested is consistent with the identity code, and when the identity code to be tested is consistent with the identity code, compares the current position of the target vehicle with the vehicle positioning to determine whether the current position of the target vehicle and the vehicle positioning are both located in the same preset area.
[0141] S640. When the current position of the target vehicle and the vehicle positioning are both located in the same preset area, the control terminal sends a charging control instruction of the target vehicle, so that the charging pile terminal charges the target vehicle according to the charging control instruction.
[0142] In this embodiment, the communication interaction between the user terminal, the control terminal and the charging pile terminal includes: the user terminal sends a charging instruction to the control terminal; the control terminal obtains the identity code of the user terminal and the current position of the target vehicle through the charging instruction; the charging pile terminal sends the vehicle positioning and the identity code to be tested to the control terminal; the control terminal receives the vehicle positioning and the identity code to be tested sent by the charging pile terminal, and verifies whether the identity code to be tested is consistent with the identity code, and when the identity code to be tested is consistent with the identity code, compares the current position of the target vehicle with the vehicle positioning, and determines whether the current position of the target vehicle and the vehicle positioning are both located in the same preset area; when the current position of the target vehicle and the vehicle positioning are both located in the same preset area, the control terminal sends a charging control instruction of the target vehicle to the charging pile terminal; the charging pile terminal charges the target vehicle according to the charging control instruction.
[0143] In the communication interaction between the user terminal, the control terminal and the charging pile terminal, the control terminal verifies whether the identity code to be tested is consistent with the identity code, and compares whether the current position of the target vehicle and the vehicle location are in the same preset area, which can effectively enhance the security of the charging interaction process and prevent unauthorized charging operations. In addition, confirming that the position of the target vehicle is consistent with the preset area can avoid incorrect charging behavior caused by misoperation or system failure.
[0144] In this embodiment, the charging control instruction will be sent to the charging pile terminal only after the control terminal verifies the identity code of the user terminal and the location of the target vehicle, which can effectively ensure that only verified target vehicles can be charged, thereby effectively ensuring the security of communication between the user terminal and the control terminal.
[0145] In one implementation of this embodiment, before receiving the vehicle location and the identity code to be tested sent by the charging pile terminal, the following steps are included:
[0146] S710. Randomly extract n data bits from the public key of the control terminal to obtain a first public key fragment and a first data bit sequence, wherein n is less than the total number of data bits of the public key, and the first data bit sequence is used to characterize the order of each data bit of the first public key fragment in the public key.
[0147] S720: Use the public key after extracting n data bits as the second public key fragment, and obtain a second data bit sequence of the second public key fragment.
[0148] S730: Obtain the second public key of the charging pile terminal.
[0149] S740: Encrypt the first public key fragment and the first data bit sequence according to the second public key to obtain a second ciphertext, and send the second ciphertext to the user terminal so that the user terminal forwards the second ciphertext to the charging pile terminal.
[0150] S750: Encrypt the second public key fragment and the second data bit sequence according to the second public key to obtain a third ciphertext, and send the third ciphertext to the charging pile terminal.
[0151] Similar to S410 to S450, in this embodiment, before receiving the vehicle positioning and the identity code to be tested sent by the charging pile terminal, the control terminal needs to establish a secure channel with the charging pile, including: in the public key of the control terminal, the control terminal randomly extracts n data bits to obtain a first public key fragment and a first data bit sequence; the control terminal uses the public key after extracting n data bits as the second public key fragment, and obtains the second data bit sequence of the second public key fragment, and obtains the second public key of the charging pile terminal; the control terminal encrypts the first public key fragment and the first data bit sequence according to the second public key to obtain a second ciphertext, and sends the second ciphertext to the user terminal; the user terminal forwards the second ciphertext to the charging pile terminal; the control terminal encrypts the second public key fragment and the second data bit sequence according to the second public key to obtain a third ciphertext, and sends the third ciphertext to the charging pile terminal.
[0152] In the above-mentioned secure channel between the control terminal and the charging pile, the first data bit sequence and the second data bit sequence are used to represent the sequence of each data bit in the public key fragment in the complete public key. In actual operation, each data bit in the public key fragment is randomly extracted and may not be extracted in sequence. By randomly extracting data bits in the public key fragment, the complexity of the encryption process can be increased, making it difficult for crackers to predict and crack the encryption algorithm, and randomly extracting data bits can increase the security of encryption, because even if the attacker obtains part of the public key information, it is difficult to infer the structure of the complete public key based on this information, thereby protecting the security of the encryption process.
[0153] This implementation can reduce the risk of sensitive information being intercepted or tampered with by dividing the public key, encrypting data fragments and sequences, and transmitting them between different terminals, effectively improving the security of communication interactions and ensuring the confidentiality and integrity of data.
[0154] In one implementation of this embodiment, receiving the vehicle location and the identity code to be tested sent by the charging pile terminal includes the following steps:
[0155] S810. Receive a fourth ciphertext sent by the charging pile terminal, wherein the fourth ciphertext is encrypted based on a public key of the control terminal.
[0156] S820. Decrypt the fourth ciphertext according to the third private key corresponding to the public key to obtain the vehicle location and the identity code to be tested.
[0157] In this embodiment, the control terminal receives the fourth ciphertext sent by the charging pile terminal, and decrypts the fourth ciphertext according to the third private key corresponding to the public key, thereby obtaining the vehicle positioning and the identity code to be tested.
[0158] This implementation uses public key encryption and private key decryption to ensure the security of information during transmission. Only the control terminal with the corresponding private key can decrypt and obtain the original information, thereby protecting the confidentiality of sensitive data (vehicle positioning and identity code to be tested).
[0159] In summary, Figure 3 A schematic diagram of a multi-terminal charging control method provided in an embodiment of the present application is shown, as shown in the figure:
[0160] The user terminal sends a charging instruction to the charging pile terminal, requesting to establish a secure channel; the user terminal sends a positioning instruction to the control terminal; the charging pile terminal responds to the charging instruction and obtains the identity code of the user terminal; the control terminal obtains the identity code of the user terminal and the current position of the target vehicle through the positioning instruction; the charging pile terminal generates an interactive command according to the identity code, and sends the interactive command to the user terminal; the user terminal establishes a secure channel with the charging pile terminal according to the interactive command; the charging pile terminal sends a positioning request to the user terminal through the secure channel; the user terminal receives the positioning request and sends positioning data to the charging pile terminal; the charging pile terminal sends the vehicle positioning and the identity code to be tested to the control terminal; the control terminal receives the vehicle positioning and the identity code to be tested sent by the charging pile terminal, and verifies whether the identity code to be tested is consistent with the identity code, and when the identity code to be tested is consistent with the identity code, compares the current position of the target vehicle with the vehicle positioning, and determines whether the current position of the target vehicle and the vehicle positioning are both located in the same preset area; when the current position of the target vehicle and the vehicle positioning are both located in the same preset area, the control terminal sends the charging control instruction of the target vehicle to the charging pile terminal; the charging pile terminal charges the target vehicle according to the charging control instruction.
[0161] The present application also discloses a charging pile terminal, such as Figure 4 As shown, including:
[0162] A memory 10 configured to store instructions; and
[0163] The processor 20 is configured to call instructions from the memory and to implement the above-mentioned Figure 1 The multi-terminal charging control method shown.
[0164] The present application also discloses a control terminal, including:
[0165] a memory configured to store instructions; and
[0166] A processor configured to call instructions from a memory and to implement the above when executing the instructions Figure 2 The multi-terminal charging control method shown.
[0167] The present application also discloses a multi-terminal charging control system. Figure 5 As shown, the user terminal can be connected to the charging pile terminal through wireless communication, the charging pile terminal can be connected to the control terminal through wireless communication, and the user terminal can be connected to the control terminal through wireless communication. The wireless communication method can be Wi-Fi, Bluetooth or mobile network (such as 4G, 5G), etc.
[0168] An embodiment of the present application also provides a machine-readable storage medium, on which instructions are stored, and the instructions are used to enable a machine to execute the above-mentioned multi-terminal charging control method.
[0169] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
[0170] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0171] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0172] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0173] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.
[0174] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.
[0175] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include transitory media such as modulated data signals and carrier waves.
[0176] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.
[0177] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.
Claims
1. A multi-terminal charging control method, characterized in that: Applied to charging pile terminals, the method includes: In response to the charging instruction sent by the user terminal, the charging pile terminal obtains the identity code of the user terminal and generates an interactive password according to the identity code; The charging pile terminal sends an interactive command to the user terminal, and the user terminal is used to interact securely with the charging pile terminal according to the interactive command; The charging pile terminal sends a positioning request to the user terminal; In response to receiving the positioning data sent by the user terminal, the charging pile terminal determines the vehicle location; The charging pile terminal sends the vehicle location and identity code to the control terminal, which verifies the identity code; After the control terminal verifies the identity code, in response to receiving the charging control instruction of the target vehicle sent by the control terminal, the charging pile terminal charges the target vehicle according to the charging control instruction; The charging control instruction is obtained by comparing the vehicle positioning of the control terminal with the current position of the target vehicle sent by the user terminal.
2. The method according to claim 1, characterized in that Generate interactive passwords based on identity codes, including: The identity code is input as an initial condition into the chaotic mapping step, and a session key is randomly determined from at least one session key candidate; The identity code is encrypted using the session key to obtain the interactive password; The chaotic mapping step includes: Iteratively calculate Chebyshev polynomials according to initial conditions to generate chaotic sequences; dividing the chaotic sequence into blocks of a preset length to obtain at least one session key candidate; The Chebyshev polynomials include: x n+1 =cos(n×cos -1 (x n )); In the formula, x n is the value of the current iteration, x n+1 The value for the next iteration.
3. The method according to claim 2, characterized in that The charging pile terminal sends an interactive command to the user terminal, and the user terminal is used to interact securely with the charging pile terminal according to the interactive command, including: The charging pile terminal obtains the first public key of the user terminal, and uses the first public key to encrypt the session key of the interactive password to obtain a strong interactive password; The charging pile terminal sends a strong interactive command to the user terminal; The user terminal decrypts the strong interactive password using the first private key corresponding to the first public key to obtain the session key; The user terminal decrypts the interactive password using the session key to obtain the identity code to be tested; When the identity code to be tested is consistent with the identity code of the user terminal, the user terminal determines that the strong interactive password verification is passed; After the user terminal verifies the strong interactive password, the charging pile terminal establishes a secure channel with the user terminal.
4. The method according to claim 1, characterized in that Before sending the vehicle location and identity code to the control terminal, including: Receiving a second ciphertext sent by the user terminal, wherein the second ciphertext is encrypted based on a second public key of the charging pile terminal; decrypting the second ciphertext according to the second private key corresponding to the second public key to obtain the first public key fragment of the control terminal; A third ciphertext sent by a receiving control terminal is obtained by encrypting the third ciphertext based on a second public key of the charging pile terminal; Decrypt the third ciphertext according to the second private key to obtain a second public key fragment of the control terminal; A complete public key of the control terminal is obtained according to the first public key fragment and the second public key fragment.
5. The method according to claim 4, characterized in that Send vehicle location and identity code to the control terminal, including: Encrypting the vehicle location and identity code according to the complete public key of the control terminal to obtain a fourth ciphertext; The fourth ciphertext is sent to the control terminal so that the control terminal can decrypt the fourth ciphertext based on the third private key corresponding to the complete public key.
6. A multi-terminal charging control method, characterized in that: Applied to a control terminal, the method comprises: In response to the positioning instruction sent by the user terminal, the control terminal obtains the identity code of the user terminal and the current position of the target vehicle through the positioning instruction; The control terminal receives the vehicle location and the identity code to be tested sent by the charging pile terminal; The control terminal verifies whether the identity code to be tested is consistent with the identity code, and when the identity code to be tested is consistent with the identity code, compares the current position of the target vehicle with the vehicle positioning to determine whether the current position of the target vehicle and the vehicle positioning are both located in the same preset area; When the current position of the target vehicle and the vehicle positioning are both located in the same preset area, the control terminal sends a charging control instruction of the target vehicle, so that the charging pile terminal charges the target vehicle according to the charging control instruction.
7. The method according to claim 6, characterized in that Before receiving the vehicle location and identity code to be tested sent by the charging pile terminal, it includes: Randomly extracting n data bits from the public key of the control terminal to obtain a first public key fragment and a first data bit sequence, wherein n is less than the total number of data bits of the public key, and the first data bit sequence is used to represent the order of each data bit of the first public key fragment in the public key; Using the public key after extracting n data bits as the second public key fragment, and obtaining the second data bit sequence of the second public key fragment; Obtain the second public key of the charging pile terminal; Encrypt the first public key fragment and the first data bit sequence according to the second public key to obtain a second ciphertext, and send the second ciphertext to the user terminal so that the user terminal forwards the second ciphertext to the charging pile terminal; The second public key fragment and the second data bit sequence are encrypted according to the second public key to obtain a third ciphertext, and the third ciphertext is sent to the charging pile terminal.
8. The method according to claim 7, characterized in that Receive the vehicle location and identity code to be tested sent by the charging pile terminal, including: Receiving a fourth ciphertext sent by the charging pile terminal, wherein the fourth ciphertext is obtained by encrypting based on the public key of the control terminal; The fourth ciphertext is decrypted according to the third private key corresponding to the public key to obtain the vehicle location and the identity code to be tested.
9. A charging pile terminal, characterized in that: include: a memory configured to store instructions; as well as A processor is configured to call instructions from a memory and implement a multi-terminal charging control method according to any one of claims 1 to 5 when executing the instructions.
10. A control terminal, characterized in that: include: a memory configured to store instructions; as well as A processor is configured to call instructions from a memory and implement a multi-terminal charging control method according to any one of claims 6 to 8 when executing the instructions.