Multi-factor vehicle pile identity authentication module and authentication method based on block chain technology

Abstract

The invention relates to the field of identity authentication, and particularly provides a block chain technology-based multi-factor vehicle pile identity authentication module and method, and the method comprises the steps: carrying out the analysis of the digital identities of a to-be-authenticated electric vehicle and a charging pile through an authentication module installed at the charging pile or a charging station, obtaining multi-factor digital identities of the to-be-authenticated electric vehicle and the charging pile; and based on the multi-factor digital identities of the to-be-authenticated electric vehicle and the charging pile, determining whether the to-be-authenticated electric vehicle and the charging pile pass authentication. According to the invention, the authentication module ensures that the digital identity information is not accessed or stolen by an unauthorized third party. Meanwhile, the key information can be safely processed, so that the key information is prevented from being tampered or damaged by malicious software or attackers.

Description

Technical Field

[0001] The present invention relates to the field of identity authentication, and particularly to a multi-factor vehicle-pile identity authentication module and authentication method based on blockchain technology. Background Art

[0002] Traditional identity verification usually relies on centralized institutions or third-party service providers. A blockchain-based digital identity system can achieve decentralized identity verification, enabling individuals to independently manage and verify their identity information. Such a system can ensure the security and authenticity of personal identities through encryption and distributed storage, while reducing the participation of intermediaries and improving the efficiency and credibility of verification.

[0003] Traditional centralized identity management systems are at risk of single points of failure. Once the centralized database is attacked or tampered with, personal identity information will face the risk of leakage and tampering.

[0004] In recent years, with the rapid development and popularization of electric vehicle-related technologies, the number of electric vehicles and charging facilities has increased sharply. As a result, the problem of electric vehicle charging safety has become increasingly prominent. The vehicle networking platform serving electric vehicle charging is applied in an open network environment, and the network topology changes rapidly. Traditional vehicle-pile identity authentication is connected by a central server, which has a simple structure and is easy to control the terminal.

[0005] For centralized vehicle-pile identity authentication, once an attacker attacks the central server, it is easy to cause the entire system to collapse. In addition, as the network scale continues to expand, the burden on the central server is also constantly increasing, which can easily lead to an increase in network latency and even network collapse. Summary of the Invention

[0006] To solve the problem that in the prior art, for centralized vehicle-pile identity authentication, once an attacker attacks the central server, it is easy to cause the entire system to collapse, and as the network scale continues to expand, the burden on the central server is also constantly increasing, which can easily lead to an increase in network latency and even network collapse, the present invention proposes a multi-factor vehicle-pile identity authentication module based on blockchain technology, including: an authentication module;

[0007] The authentication module is installed in a charging pile or a charging station;

[0008] The authentication module is used to obtain information of an electric vehicle and a charging pile to be authenticated, generate multi-factor digital identities of the electric vehicle and the charging pile to be authenticated based on the information, and determine whether the electric vehicle and the charging pile to be authenticated pass the authentication based on the multi-factor digital identities of the electric vehicle and the charging pile to be authenticated.

[0009] Optionally, the authentication module is further configured to: process the data of the electric vehicle and the charging pile at the centers of the vehicle and the pile, generate multi-factor digital identities of the electric vehicle and the charging pile, construct a digital identity trusted identifier based on the multi-factor digital identities, and save the digital identity trusted identifier on the blockchain in a trusted execution environment.

[0010] On the other hand, the present application also provides a multi-factor vehicle-pile identity authentication method based on blockchain technology, including:

[0011] Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile; determine whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile.

[0012] Optionally, the step of analyzing the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile includes:

[0013] Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain factor parameters;

[0014] Construct a trusted identifier for the identity of the electric vehicle to be authenticated and the charging pile based on the factor parameters;

[0015] Generate the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile based on the identity trusted identifier and the identity authentication mechanism.

[0016] Optionally, the step of analyzing the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain factor parameters includes:

[0017] Generate the digital identity of the electric vehicle by the authentication module based on the VIN code of the electric vehicle to be authenticated, and use the digital identity of the electric vehicle as a factor parameter;

[0018] Generate the digital identity of the charging pile based on the location and number of the charging pile, and use the digital identity of the charging pile as a factor parameter.

[0019] Optionally, the step of determining whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile includes:

[0020] Judge whether the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile are on the blockchain. If they are on the blockchain, the electric vehicle to be authenticated and the charging pile pass the authentication; otherwise, they do not pass the authentication.

[0021] Optionally, it further includes:

[0022] The authentication module processes the data of the electric vehicle and the charging pile at the center of the vehicle and the pile to generate multi-factor digital identities of the electric vehicle and the charging pile, constructs a digital identity trusted identifier based on the multi-factor digital identities, and saves the digital identity trusted identifier on the blockchain and then stores it in a trusted execution environment.

[0023] Optionally, the step of saving the digital identity trusted identifier on the blockchain and then storing it in a trusted execution environment includes:

[0024] The authentication module processes the digital identity identifiers of the electric vehicle and the charging pile by using an identity authentication mechanism;

[0025] Upload the processed digital identity identifiers to the blockchain and store them in the trusted execution environment of the authentication module;

[0026] Wherein, the identity authentication mechanism includes: public algorithms, trusted computing, and computing signatures.

[0027] On the other hand, the present application also provides a computing device, including: one or more processors;

[0028] The processor is configured to execute one or more programs;

[0029] When the one or more programs are executed by the one or more processors, the multi-factor vehicle-pile identity authentication method based on blockchain technology as described above is implemented.

[0030] On the other hand, the present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed, the multi-factor vehicle-pile identity authentication method based on blockchain technology as described above is implemented.

[0031] Compared with the prior art, the beneficial effects of the present invention are:

[0032] The present invention provides a multi-factor vehicle-pile identity authentication method based on blockchain technology, including analyzing the digital identities of the electric vehicle to be authenticated and the charging pile by an authentication module installed in the charging pile or the charging station to obtain the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile; determining whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile. The present invention ensures that these digital identity information is not accessed or stolen by unauthorized third parties through the authentication module. At the same time, it can also perform secure processing on these key information to prevent them from being tampered with or damaged by malware or attackers. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1Flowchart of the multi-factor vehicle-pile identity authentication method based on blockchain technology of the present invention;

[0034] Figure 2 Schematic diagram of the multi-factor digital identity authentication process of the vehicle and pile of the present invention. Detailed implementation manner

[0035] Blockchain technology dispersedly stores identity information on multiple nodes and ensures the security and integrity of data through cryptographic algorithms. Even if someone attempts to tamper with the data, it will be recognized by other nodes in the network and cannot reach an agreement through the consensus mechanism, thus ensuring the immutability of information.

[0036] Blockchain technology dispersedly stores identity information on multiple nodes and ensures the security and integrity of data through cryptographic algorithms. Even if someone attempts to tamper with the data, it will be recognized by other nodes in the network and cannot reach an agreement through the consensus mechanism, thus ensuring the immutability of information.

[0037] Embodiment 1

[0038] The multi-factor vehicle-pile identity authentication module based on blockchain technology, as Figure 2 shown, includes: an authentication module;

[0039] The authentication module is installed in a charging pile or a charging station;

[0040] The authentication module is used to obtain information of the electric vehicle to be authenticated and the charging pile, generate multi-factor digital identities of the electric vehicle to be authenticated and the charging pile based on the information, and determine whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile.

[0041] Further, the authentication module is further used to: generate multi-factor digital identities of the electric vehicle and the charging pile, construct a digital identity trusted identifier based on the multi-factor digital identities, and save the digital identity trusted identifier on the blockchain in a trusted execution environment.

[0042] Based on the blockchain public key infrastructure, the present invention integrates the identity authentication module in the charging pile control terminal. First, analyze the parameter factors of the digital identities of the electric vehicle and the charging pile; secondly, construct a digital identity trusted identifier for the vehicle and the pile based on the digital identity composition factors, design a "bottom-up" identity authentication mechanism, and generate multi-factor digital identities of the vehicle and the pile; finally, save the digitally authenticated vehicle and pile identities in the trusted execution environment of the identity authentication module integrated in the charging pile control terminal after they are uploaded to the blockchain.

[0043] In the identity authentication module, the module computing contract and the key information guardianship technology are innovatively applied. The authentication module can process the authoritative authentication identity data of the vehicle and pile CA (certificate authority) centers based on trusted identifiers. At the same time, by introducing methods such as public algorithms, trusted computing, and computing signatures, it can ensure the authenticity and credibility of the entire computing process.

[0044] The public algorithm refers to the public key encryption algorithm. The characteristic of this algorithm is that the encryption key and the decryption key are different, and only the decryption key can decrypt. Anyone can encrypt data with the public key and send it to the user, but the user only uses one key to decrypt the data.

[0045] Trusted computing means that throughout the computing process, the computing itself and the services it executes have no malicious behavior, will not be infected with viruses or malicious programs, and can resist hacker attacks; computing signature is a type of digital signature, which is a digital string that can only be generated by the sender of the information and cannot be forged by others. This digital string is also a valid proof of the authenticity of the information sent by the sender of the information. Based on the secure asset guardianship function of the identity authentication module, the digital identity information of the vehicle and pile can be securely stored and processed. This technology uses the secure storage technology in the identity authentication module to ensure that this digital identity information is not accessed or stolen by unauthorized third parties. At the same time, it can also securely process these key information to prevent them from being tampered with or damaged by malware or attackers.

[0046] The overall appearance of the identity authentication module has rich peripheral interfaces, including GPIO, SPI, UART, etc., provides 8MB flash and 2MB PSRAM, the working environment temperature is -40°C to 85°C, and the overall size of the module is 18.0×25.5×3.1 (mm).

[0047] (1) Module pin layout

[0048] The module provides a total of 41 pins, as shown in Table 1.

[0049] Some of the pin definitions are as follows:

[0050] Table 1

[0051]

[0052] P: Power supply; I: Input; O: Output; T: Can be set to high impedance. The bold font is the default function of the pin.

[0053] (2) Electrical characteristics

[0054] Exceeding the absolute maximum ratings may cause permanent damage to the device. These are stress ratings only and do not imply functional operation of the device beyond the recommended operating conditions under these or other conditions. Prolonged exposure to absolute maximum rating conditions may affect the reliability of the module.

[0055] 1. The absolute maximum ratings are shown in Table 2:

[0056] Table 2

[0057] Symbol Parameter Minimum value Maximum value Unit VDD33 Power supply pin voltage -0.3 3.6 V <![CDATA[T STORE > Storage temperature -40 105 ℃

[0058] 2. The recommended operating conditions are shown in Table 3:

[0059] Table 3

[0060] Symbol Parameter Minimum value Typical value Maximum value Unit VDD33 Power supply pin voltage 3.0 3.3 3.6 V <![CDATA[I VDD > Supply current of external power supply 0.5 - - A <![CDATA[T A > Ambient temperature -40 - 85 ℃

[0061] 3. DC electrical characteristics (3.3V, 25°C) are shown in Table 4:

[0062] Table 4

[0063]

[0064] VDD 1 is the power supply for I / O.

[0065] and are the measured values under the condition that the load is in a high-impedance state.

[0066] The present invention mainly aims at the characteristic of the blockchain that once written, it cannot be changed, and malicious attackers cannot attack and tamper with the information already stored on the chain. On the basis of ensuring the authenticity of digital identity information, the present invention can minimize the exposure of privacy data in all links of digital identity verification, and ultimately greatly improve the protection level of user privacy data. At the same time, the situation where some third-party platforms abuse user privacy data will also change, and the whole process of data use will be traceable and auditable.

[0067] Example 2

[0068] The process of performing identity authentication using the multi-factor vehicle-pile identity authentication module based on blockchain technology introduced in Example 1:

[0069] The following Figure 1 introduces the multi-factor vehicle-pile identity authentication method based on blockchain technology provided by the present invention. This identity authentication method is implemented using the multi-factor vehicle-pile identity authentication module based on blockchain technology introduced in Example 1.

[0070] The multi-factor vehicle-pile identity authentication method based on blockchain technology includes:

[0071] Step 1: Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through the authentication module installed in the charging pile or charging station to obtain the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile;

[0072] Step 2: Determine whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile.

[0073] Step 1: The analysis of the digital identities of the electric vehicle to be authenticated and the charging pile through the authentication module installed in the charging pile or charging station to obtain the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile specifically includes:

[0074] Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through the authentication module installed in the charging pile or charging station to obtain factor parameters;

[0075] Construct a credible identity label for the electric vehicle to be authenticated and the charging pile based on the factor parameters;

[0076] Generate the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile based on the credible identity label and the identity authentication mechanism.

[0077] Further, the analysis of the digital identities of the electric vehicle to be authenticated and the charging pile through the authentication module installed in the charging pile or charging station to obtain factor parameters includes:

[0078] Generate the digital identity of the electric vehicle by the authentication module based on the VIN code of the electric vehicle to be authenticated, and use the digital identity of the electric vehicle as the factor parameter;

[0079] Generate the digital identity of the charging pile based on the location and number of the charging pile, and use the digital identity of the charging pile as the factor parameter.

[0080] Step 2: The determination of whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile specifically includes:

[0081] Judge whether it is on the blockchain based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile. If it is on the blockchain, the electric vehicle to be authenticated and the charging pile pass the authentication, otherwise they do not pass the authentication.

[0082] Further, it also includes:

[0083] The authentication module processes the data of electric vehicles and charging piles at the centers of vehicles and piles to generate multi-factor digital identities of electric vehicles and charging piles, constructs a digital identity trusted identifier based on the multi-factor digital identities, and saves the digital identity trusted identifier on the blockchain and then stores it in a trusted execution environment.

[0084] Further, the step of saving the digital identity trusted identifier on the blockchain and then storing it in a trusted execution environment includes:

[0085] The authentication module processes the digital identity identifiers of electric vehicles and charging piles by using an identity authentication mechanism;

[0086] Upload the processed digital identity identifiers to the blockchain and store them in the trusted execution environment of the authentication module;

[0087] Among them, the identity authentication mechanism includes: public algorithms, trusted computing, and computing signatures.

[0088] Embodiment 3:

[0089] Based on the same inventive concept, the present invention also provides a computer device, which includes a processor and a memory. The memory is used to store a computer program, the computer program includes program instructions, and the processor is used to execute the program instructions stored in the computer storage medium. The processor may be a central processing unit (CPU), or may also be other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. It is the computing core and control core of the terminal, and is suitable for implementing one or more instructions. Specifically, it is suitable for loading and executing one or more instructions in the computer storage medium to implement the corresponding method flow or corresponding function, so as to implement the steps of the multi-factor vehicle-pile identity authentication method based on blockchain technology in the above embodiments.

[0090] Embodiment 4:

[0091] Based on the same inventive concept, the present invention also provides a storage medium, specifically a computer-readable storage medium (Memory). The computer-readable storage medium is a memory device in a computer device, used to store programs and data. It can be understood that the computer-readable storage medium here can include both the built-in storage medium in the computer device and, of course, the extended storage medium supported by the computer device. The computer-readable storage medium provides a storage space, and this storage space stores the operating system of the terminal. Moreover, in this storage space, there is also stored one or more instructions suitable for being loaded and executed by the processor. These instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory. The one or more instructions stored in the computer-readable storage medium can be loaded and executed by the processor to implement the steps of the multi-factor vehicle-pile identity authentication method based on blockchain technology in the above embodiments.

[0092] Those skilled in the art should understand that the embodiments of the present invention can be provided as a method, a system, or a computer program product. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk memories, CD-ROMs, optical memories, etc.) containing computer-usable program codes.

[0093] The present invention is described with reference to the flowcharts and / or block diagrams of methods, apparatuses (systems), and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flowchart and / or block diagram, as well as the combination of flows and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate a device for implementing the specified functions in Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0094] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including an instruction device, and this instruction device implements the specified functions in Figure 1 one process or multiple processes and / or blocksFigure 1 The functions specified in one or more boxes.

[0095] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process. Thus, the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one Figure 1 process or multiple processes and / or boxes Figure 1 or more boxes.

[0096] The above are only embodiments of the present invention and are not used to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention are included within the scope of the claims of the present invention pending approval.

Claims

1. A multi-factor vehicle-pile identity authentication module based on blockchain technology, characterized in that Including: Authentication module; The authentication module is installed in a charging pile or a charging station; The authentication module is used to obtain information of an electric vehicle to be authenticated and a charging pile, generate multi-factor digital identities of the electric vehicle to be authenticated and the charging pile based on the information, and determine whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile.

2. The multi-factor vehicle-pile identity authentication module based on blockchain technology according to claim 1, characterized in that, The authentication module is further used to: process data of the electric vehicle and the charging pile at the vehicle and pile center, generate multi-factor digital identities of the electric vehicle and the charging pile, construct a digital identity trusted identifier based on the multi-factor digital identities, and save the digital identity trusted identifier on the blockchain and then in a trusted execution environment.

3. A multi-factor vehicle-pile identity authentication method based on blockchain technology, characterized in that, Including: Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain multi-factor digital identities of the electric vehicle to be authenticated and the charging pile; determine whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile.

4. The method according to claim 3, characterized in that, The analyzing, through an authentication module installed in the charging pile or the charging station, the digital identities of the electric vehicle to be authenticated and the charging pile to obtain multi-factor digital identities of the electric vehicle to be authenticated and the charging pile includes: Analyze the digital identities of the electric vehicle to be authenticated and the charging pile through an authentication module installed in the charging pile or the charging station to obtain factor parameters; Construct a trusted identifier for the identity of the electric vehicle to be authenticated and the charging pile based on the factor parameters; Generate multi-factor digital identities of the electric vehicle to be authenticated and the charging pile based on the trusted identifier for the identity and an identity authentication mechanism.

5. The method according to claim 4, wherein The analyzing, through an authentication module installed in the charging pile or the charging station, the digital identities of the electric vehicle to be authenticated and the charging pile to obtain factor parameters includes: Generate a digital identity of the electric vehicle by the authentication module based on the VIN code of the electric vehicle to be authenticated, and use the digital identity of the electric vehicle as a factor parameter; Generate a digital identity of the charging pile based on the location and number of the charging pile, and use the digital identity of the charging pile as a factor parameter.

6. The method according to claim 3, wherein The determining whether the electric vehicle to be authenticated and the charging pile pass the authentication based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile includes: Judge whether it is on the blockchain based on the multi-factor digital identities of the electric vehicle to be authenticated and the charging pile. If it is on the blockchain, the electric vehicle to be authenticated and the charging pile pass the authentication; otherwise, they do not pass the authentication.

7. The method according to claim 3, wherein Further including: Process data of the electric vehicle and the charging pile at the vehicle and pile center through an authentication module, generate multi-factor digital identities of the electric vehicle and the charging pile, construct a digital identity trusted identifier based on the multi-factor digital identities, and save the digital identity trusted identifier on the blockchain and then in a trusted execution environment.

8. The method according to claim 7, wherein The saving the digital identity trusted identifier on the blockchain and then in a trusted execution environment includes: Process the digital identity identifier of the electric vehicle and the charging pile through an authentication module using an identity authentication mechanism; Upload the processed digital identity identifier to the blockchain and save it in the trusted execution environment of the authentication module; Among them, the identity authentication mechanism includes: a public algorithm, trusted computing, and computing signatures.

9. A computer device, characterized in that, Including: One or more processors; The processor is used to store one or more programs; When the one or more programs are executed by the one or more processors, the multi-factor vehicle-pile identity authentication method based on blockchain technology described in any one of claims 3 to 8 is implemented.

10. A computer-readable storage medium, characterized in that, A computer program is stored thereon, and when the computer program is executed, the multi-factor vehicle-pile identity authentication method based on blockchain technology described in any one of claims 3 to 8 is implemented.

Images