Energy communication system and communication method
Through short-range communication technology intervened by user terminals, the credential identification operation permissions are dynamically updated, which solves the problem of convenient recovery after the communication between the inverter and the management system is interrupted, and the convenient connection and secure recovery between the inverter and the access point is realized.
Patent Information
- Application Number
- CN202510269461.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-03-06
- Publication Date
- 2025-07-18
AI Technical Summary
In the prior art, after the communication connection between the inverter and the management system is interrupted, restoring the connection requires complex operations, especially after the router is replaced or the password is modified, making it difficult for the owner to resume communication by himself.
Through the intervention of user terminals, short-range communication technology is used to establish a wireless link between the inverter and the user terminal, transmit verification messages to identify operation permissions, and re-establish communication connection between the inverter and the access point when the permissions are available, and dynamically update the credentials to improve security.
It realizes convenient connection between the inverter and the access point, simplifies owner operations, improves network security and communication recovery efficiency, and reduces complexity and cost.
Smart Images

Figure CN120343547A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of wireless communication technologies, and particularly to an energy communication system and a communication method. Background Art
[0002] The communication connection of energy devices is gradually evolving towards wireless. The currently used typical wireless access method is the wireless-fidelity (Wi-Fi) access technology. For example, in Figure 1 the energy communication system 100 shown, the energy device (e.g., the inverter 130) includes two wireless links. Among them, the wireless link L1 means that the inverter 130 communicates with the management system 110 deployed in the cloud through the access point 120 (e.g., a router), and the wireless link L2 means that the inverter 130 communicates with the user terminal 140 through Wi-Fi.
[0003] However, when the password of the router is modified, or a new router is replaced due to reasons such as upgrade / damage, the communication connection between the inverter 130 and the access point 120 will be interrupted, which will cause the inability to communicate between the inverter 130 and the management system 110. To restore the connection between the inverter 130 and the management system 110, relatively complex operations need to be performed on the inverter 130 according to a predetermined procedure, which is difficult for most owners to do. In actual scenarios, professional service providers usually need to come to the door for service.
[0004] Therefore, how to more conveniently restore the communication connection between the energy device and the management system is a technical problem that needs to be urgently solved by those skilled in the art. Summary of the Invention
[0005] This application provides an energy communication system and a communication method, which can more conveniently realize the connection between the inverter and the access point through the signaling interaction between the devices in the energy communication system, and restore the communication connection between the inverter and the management system.
[0006] The following introduces this application from different aspects. It should be understood that the implementation manners and beneficial effects of the following different aspects can be referred to each other.
[0007] In a first aspect, an embodiment of the present application provides an energy communication system, which includes: an access point, an inverter, and a management system. The inverter is used to establish a communication connection with the management system through the access point; in the case where the communication connection between the inverter and the access point is interrupted, the management system is used to receive authorization request information from a user terminal, and the authorization request information is used to request a management message; the management system is used to send a management message to the user terminal, so that the user terminal sends a verification message to the inverter, and the verification message is used to determine the operation permission for an operation instruction for the inverter; the inverter is used to receive the verification message from the user terminal, and when it is determined that the operation permission is available, the inverter re - establishes the communication connection between the inverter and the access point according to the operation instruction.
[0008] Exemplarily, the authorization request information here may include at least one of the following: device information of the inverter, an operation instruction for the inverter (for example, a network re - configuration instruction). The device information here may include at least one of the following: an account identifier corresponding to the inverter (for example, an owner account identifier or a service provider account identifier), the model of the inverter, or a device identifier (for example, a product serial number).
[0009] In the above solution, the user terminal can be communicatively connected to both the management system and the inverter. Therefore, when the communication connection between the inverter and the access point is interrupted, although the inverter and the management system cannot communicate, the identification of the operation permission can be achieved through the intervention of the user terminal. That is, the user terminal can request a management message from the management system and send the verification message to the inverter, so that the inverter can more conveniently identify the operation permission for the operation instruction for the inverter. When the inverter determines that the operation permission is available, it re - establishes the communication connection between the inverter and the access point according to the operation instruction. The entire process does not require the owner to touch the relevant controls of the inverter, nor does it require the owner to perform complex operations on the user terminal. Instead, through the signaling interaction between devices, the connection between the inverter and the access point can be more conveniently achieved, and the communication connection between the inverter and the management system can be restored.
[0010] In a possible implementation manner, the inverter is used to establish a first wireless link with the user terminal through a short - range communication technology, and the first wireless link is used to transmit the verification message.
[0011] In the above implementation manner, the inverter establishes the first wireless link through the short - range communication technology, which can ensure the communication connection between the inverter and the user terminal. Using the first wireless link to transmit the verification message reduces the probability of encountering obstacles, has a low transmission power, and the air interface design and high - layer protocols are relatively simple. In this way, the transmission of the verification message can be achieved with lower cost, lower power consumption, and higher efficiency.
[0012] In a possible implementation, the inverter is also used to establish a second wireless link with the user terminal through Wi-Fi access technology. In the case of interruption of the second wireless link, the inverter is used to establish a first wireless link with the user terminal through a short-range communication technology different from Wi-Fi access technology.
[0013] In the above implementation, there are mainly two types of wireless links for the inverter to communicate with the user terminal. One is the second wireless link established by using Wi-Fi access technology, and the other is the first wireless link established by using a short-range communication technology different from Wi-Fi access technology. By establishing the first wireless link, the inverter can still ensure normal communication between the user terminal and the inverter when the second wireless link is disconnected, enabling the verification message to be successfully transmitted.
[0014] In a possible implementation, the short-range communication technology includes: Bluetooth, XingShan, Near Field Communication, Ultra Wide Band, or ultrasonic wave.
[0015] In the above implementation, the inverter can flexibly select any one of the above four short-range communication technologies to establish the first wireless link with the user terminal, which can improve the success rate of establishing the first wireless link.
[0016] In a possible implementation, the inverter and the management system can interact to synchronize the credentials held by both parties. Therefore, when the management system receives an authorization request message, the management system can return a management message to the user terminal based on the credentials it holds.
[0017] Exemplarily, the management message may include an operation authorization credential, and the operation authorization credential includes a secret key and / or a token for interaction between the inverter and the management system. In a possible implementation, having the operation permission includes the matching of the operation authorization credential and the first credential held by the inverter.
[0018] In the above implementation, the identification of the operation permission is mainly limited by whether the operation authorization credential matches the first credential held by the inverter, which can more securely establish the connection between the inverter and the access point and restore the communication connection between the inverter and the management system.
[0019] In a possible implementation, the first credential is the credential of the last interaction between the inverter and the management system. The first credential is different from the second credential, and the second credential is the credential of the historical interaction between the inverter and the management system, and the occurrence time of the historical interaction is earlier than the occurrence time of the last interaction.
[0020] In the above implementation, if the first certificate is different from the second certificate, it means that the certificate held by the inverter will change. In other words, the certificate synchronized between the inverter and the management system is dynamic, not fixed. Compared with using a static secret key to identify the operation authority, this dynamically updated certificate increases the difficulty for illegal terminals to obtain the certificate and reduces the possibility of leakage, thus improving network security.
[0021] In a possible implementation, having the operation authority further includes that the distance between the inverter and the user terminal is less than or equal to a preset threshold.
[0022] Exemplarily, the distance between the inverter and the user terminal can be detected by the inverter or by the user terminal, and it will not be limited here.
[0023] In the above implementation, when the communication connection between the inverter and the access point is interrupted, the identification of the operation authority of the operation instruction for the inverter is not only limited by the operation authorization certificate from the management system, but also limited by the distance between the user terminal and the inverter. When the distance between the user terminal and the inverter is close enough (i.e., the distance is less than or equal to the preset threshold) and the operation authorization certificate matches the first certificate held by the inverter, the inverter can determine that the user terminal has the operation authority. Generally speaking, the inverter is a private device and it is difficult for other users to approach. Therefore, the identification of the operation authority adds the limitation of the distance between the user terminal and the inverter, and can more safely restore the communication connection between the inverter and the access point.
[0024] In a possible implementation, the inverter or the management system is also used to broadcast a network disconnection notice, and the network disconnection notice is used to indicate that the communication connection between the inverter and the access point is interrupted.
[0025] Exemplarily, the network disconnection notice here can also be described as: used to indicate that communication between the inverter and the management system is unavailable.
[0026] In the above implementation, the user terminal can be used to receive the above network disconnection notice, which means that after the inverter or the management system broadcasts the network disconnection notice, the user terminal can promptly sense that the communication connection between the inverter and the access point is interrupted, so as to more promptly send an authorization request message to the management system and improve the efficiency of restoring the communication connection.
[0027] In a possible implementation, the network disconnection notice carries a security level identifier, and the security level identifier is used to indicate the influencing factors corresponding to the operation authority. The influencing factors include the operation authorization certificate and / or distance detection information, and the distance detection information is used to indicate the distance between the inverter and the user terminal.
[0028] In the above implementation manner, the influencing factors of the operation authority may include the operation authorization certificate, may also include the distance detection information, or may include both the operation authorization certificate and the distance detection information. This flexible way of identifying the operation authority can achieve business adaptation in more scenarios. For example, according to the differences in the terminal capabilities of the user terminal (such as whether it has the short-distance detection capability or the ability to communicate with the management system), the influencing factors of the operation authority can be configured more flexibly.
[0029] In a possible implementation manner, the inverter is further configured to receive an operation instruction from the user terminal through short-range communication technology.
[0030] In the above implementation manner, the operation instruction is transmitted through short-range communication technology, which can not only share the communication pressure of other types of links, but also reduce the cost, power consumption, and transmission time of the operation instruction transmission, etc.
[0031] Optionally, if the management message includes an encrypted operation instruction, the verification message may also include an encrypted operation instruction, which is obtained by encrypting the operation instruction with a third certificate held by the management system. In a possible implementation manner, having the operation authority includes: decrypting the encrypted operation instruction with the first certificate held by the inverter to obtain the operation instruction, and both the third certificate and the first certificate are the certificates of the last interaction between the inverter and the management system.
[0032] In the above implementation manner, after the user terminal receives the encrypted operation instruction from the management system, it can directly forward the encrypted operation instruction to the inverter. When the encrypted operation instruction is successfully decrypted with the first certificate held by the inverter, the inverter can determine that it has the operation authority. Throughout the process, the user terminal acts as a communication bridge between the inverter and the management system, playing the role of signaling forwarding, and does not need to obtain and store the certificates of the interaction between the management system and the inverter, which can reduce the memory occupancy of the user terminal. In addition, the entire process also simplifies the operations performed by the owner on the user terminal, thereby reducing the complexity of restoring the communication connection.
[0033] Second aspect, an embodiment of the present application provides an energy communication system, which includes: an access point, a plurality of parallel-connected inverters, a home energy management device, and a management system. The home energy management device is used to establish a communication connection with the management system through the access point; in the case where the communication connection between the home energy management device and the access point is interrupted, the management system is used to receive authorization request information from a user terminal, and the authorization request information is used to request a management message; the management system is used to send a management message to the user terminal, so that the user terminal sends a verification message to the home energy management device, and the verification message is used to determine the operation permission of an operation instruction for the home energy management device; the home energy management device is used to receive the verification message from the user terminal; the home energy management device is used to, when determining that the operation permission is available, re-establish the communication connection between the home energy management device and the access point according to the operation instruction.
[0034] In the above solution, the user terminal can communicate with both the management system and the inverter. Therefore, when the communication connection between the home energy management device and the access point is interrupted, although the home energy management device and the management system cannot communicate, the identification of the operation permission can be achieved through the intervention of the user terminal. That is, the user terminal can request a management message from the management system and send the verification message to the home energy management device, so that the home energy management device can more conveniently identify the operation permission of the operation instruction for the home energy management device. When the home energy management device determines that the operation permission is available, it re-establishes the communication connection between the home energy management device and the access point according to the operation instruction. The whole process does not require the owner to touch the relevant controls of the home energy management device, nor does it require the owner to perform complex operations on the user terminal. Instead, through the signaling interaction between devices, the connection between the home energy management device and the access point is more conveniently realized, and the communication connection between the home energy management device and the management system is restored.
[0035] Third aspect, an embodiment of the present application provides a communication method, which is applied to an inverter. The method includes: in the case where the communication connection between the inverter and the access point is interrupted, receiving a verification message from a user terminal. The inverter is used to establish a communication connection with the management system through the access point, and the verification message is used to determine the operation permission of an operation instruction for the inverter; when determining that the operation permission is available, re-establish the communication connection between the inverter and the access point according to the operation instruction.
[0036] Fourthly, an embodiment of the present application provides a communication method, which is applied to a home energy management device. The method includes: when the communication connection between the home energy management device and an access point is interrupted, receiving a verification message from a user terminal, where the home energy management device is used to implement a communication connection with a management system through the access point, and the verification message is used to determine the operation authority for an operation instruction for the home energy management device; when it is determined that the operation authority is available, re - establishing the communication connection between the home energy management device and the access point according to the operation instruction.
[0037] The technical effects achieved by the above - mentioned aspects can be referred to each other or refer to the beneficial effects in the method embodiments shown below. Details are not described herein again. BRIEF DESCRIPTION OF THE DRAWINGS
[0038] Figure 1 is a simplified schematic diagram of an energy communication system provided by the prior art;
[0039] Figure 2 is a simplified schematic diagram of an energy communication system provided by an embodiment of the present application Figure 1 ;
[0040] Figure 3 is a simplified schematic diagram of an energy communication system provided by an embodiment of the present application Figure 2 ;
[0041] Figure 4 is a schematic flowchart corresponding to a communication method provided by an embodiment of the present application;
[0042] Figure 5 is an interaction schematic diagram for restoring the communication connection between an inverter and an access point provided by an embodiment of the present application Figure 1 ;
[0043] Figure 6 is an interaction schematic diagram for restoring the communication connection between an inverter and an access point provided by an embodiment of the present application Figure 2 ;
[0044] Figure 7 is an interaction schematic diagram for restoring the communication connection between an inverter and an access point provided by an embodiment of the present application Figure 3 ;
[0045] Figure 8 is an interaction schematic diagram for restoring the communication connection between an inverter and an access point provided by an embodiment of the present application Figure 4 。 DETAILED DESCRIPTION OF THE EMBODIMENTS
[0046] Next, the technical solutions in the embodiments of the present application will be clearly and completely described with reference to the drawings in the embodiments of the present application.
[0047] In the description of the present application, terms such as "first" and "second" are only used to distinguish different objects, rather than to describe a specific order. In addition, unless otherwise specified, " / " means "or". For example, A / B may mean A or B. The "and / or" herein is merely an association relationship describing associated objects, indicating that there can be three relationships. For example, A and / or B may mean: A exists alone, A and B exist simultaneously, or B exists alone. In addition, "at least one" means one or more, and "a plurality" means two or more. "One (or more) of the following items (or a plurality of items)" or its similar expressions refer to any combination of these items, including any combination of a single item (or one) or plural items (or a plurality). For example, at least one of a, b, or c may mean: a, b, c; a and b; a and c; b and c; or a, b, and c. Wherein a, b, and c can be single or multiple.
[0048] The terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device, etc. that includes a series of steps or units is not limited to the listed steps or units, but optionally further includes steps or units not listed, etc., or optionally further includes other steps or units inherent to these processes, methods, products, or devices, etc.
[0049] In the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as "exemplary", "for example", or "such as" in the present application should not be construed as being more preferred or having more advantages than other embodiments or designs. Rather, the use of words such as "exemplary", "for example", or "such as" is intended to present relevant concepts in a specific manner.
[0050] It can be understood that in the present application, "when", "if", and "in case" all refer to the device making corresponding processing under a certain objective situation, not limited to time, and it is not required that the device must have a judgment action when implemented, nor does it mean there are other limitations. Among them, the device making corresponding processing under a certain objective situation includes: meeting the objective situation, that is, being able to perform the corresponding processing; or meeting the objective situation and other situations before being able to perform the corresponding processing.
[0051] The "simultaneously" in the present application can be understood as "in parallel", or at the same time point, or can also be understood as within a period of time, or can also be understood as within the same cycle, and can be specifically understood in combination with the context.
[0052] In the present application, elements represented in the singular are intended to mean "one or more", rather than "one and only one", unless otherwise specified.
[0053] It can be understood that in the embodiments of the present application, expressions such as "B corresponding to A", "A corresponding to B", or similar expressions mean that B is associated with A, and B can be determined according to A. This includes both determining information B only according to A and determining B according to A and other information. In addition, the use of A to determine information B can also include indirect determination. For example, B is determined according to C, and C is determined according to A.
[0054] In the present application, "send" and "receive" indicate the direction of signal transmission. For example, "sending information to XX" can be understood as the destination of the information being XX, which can include directly sending through the air interface or indirectly sending through other units or modules via the air interface. "Receiving information from YY" can be understood as the source of the information being YY, which can include directly receiving from YY through the air interface or indirectly receiving from YY through other units or modules via the air interface. "Send" can also be understood as the "output" of the chip interface, and "receive" can also be understood as the "input" of the chip interface. In other words, sending and receiving can be carried out between devices. For example, sending or receiving between components within a device, between modules, between chips, between software modules, or between hardware modules through a bus, trace, or interface.
[0055] The technical solutions of the embodiments of the present application can be applied to the wireless local area network (WLAN) scenario, and this wireless local area network can adopt the 802.11 series of protocols. Among them, the 802.11 series of protocols include but are not limited to: 802.11ax protocol, 802.11be protocol, Wi-Fi 7 or the next-generation protocol, such as Wi-Fi 8, ultra-high reliability (UHR), or 802.11bn protocol, or Wi-Fi artificial intelligence (AI), or millimeter wave, etc., which are not listed one by one here.
[0056] The technical solutions of the embodiments of the present application can be applicable to the communication scenario between an access point (AP) and a station (STA), can also be applied to the communication scenario between access points, and can also be applied to the communication scenario between stations. In the embodiments of the present application, the term "communication" can also be described as "data transmission", "information transmission", or "transmission". In the embodiments of the present application, the term "transmission" can also be described as "send" and / or "receive".
[0057] In a possible implementation, the AP may be a device with wireless communication capabilities, supporting communication using the WLAN protocol and having the function of communicating with other devices (such as STAs or other APs) in the WLAN network. The device with wireless communication capabilities can be a complete device, or can also be a chip or processing system installed in the complete device. The device installed with these chips or processing systems can, under the control of the chip or processing system, implement the methods and functions of the embodiments of the present application. The AP can be deployed in homes, inside buildings, and inside campuses, with a coverage radius of dozens of meters to hundreds of meters. Of course, it can also be deployed outdoors. The AP can be understood as a bridge connecting a wired network and a wireless network. Its main function is to connect various wireless network clients together and then connect the wireless network to the Ethernet. Exemplarily, the AP can be a terminal device (such as a mobile phone) with a Wi-Fi chip or a network device (such as communication entities like communication servers, routers, switches, bridges, etc.).
[0058] In a possible implementation, the STA may be a device with wireless communication capabilities, supporting communication using the WLAN protocol and having the ability to communicate with other STAs or access points in the WLAN network. The device with wireless communication capabilities can be a complete device, or can also be a chip or processing system installed in the complete device. The device installed with these chips or processing systems can, under the control of the chip or processing system, implement the methods and functions of the embodiments of the present application. The STA can also be a wireless communication chip, a wireless sensor, or a wireless communication terminal, etc., and can also be referred to as a user terminal. For example, the STA can be a mobile phone supporting Wi-Fi communication function, a tablet computer supporting Wi-Fi communication function, a set-top box supporting Wi-Fi communication function, a smart TV supporting Wi-Fi communication function, a smart wearable device supporting Wi-Fi communication function, a vehicle-mounted communication device supporting Wi-Fi communication function, a computer supporting Wi-Fi communication function, an energy device supporting Wi-Fi communication function, etc.
[0059] Among them, energy devices usually can include power generation devices of the power type (for example, inverters) or power consumption devices (for example, charging piles, heat pumps, etc.), communication management devices (for example, home energy management devices, data acquisition devices, smart communication sticks, etc.). Examples will not be given one by one here. The embodiments of the present application may refer to a communication system including energy devices as an energy communication system. In practical applications, the present application does not limit the number of APs and STAs in the energy communication system.
[0060] The system architecture applied in the embodiments of the present application will be introduced below. It should be noted that the system architecture and application scenarios described in the embodiments of the present application are for more clearly explaining the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those skilled in the art know that with the evolution of the system architecture or application scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.
[0061] The energy communication system provided by the present application can be applicable to various application fields such as the photovoltaic power generation field, the photovoltaic and energy storage power generation field, the new energy intelligent microgrid field, and the power transmission and distribution field. The energy devices provided by the present application are applicable to different application scenarios. For example, photovoltaic power generation scenarios (such as household photovoltaic scenarios), photovoltaic and energy storage hybrid power generation scenarios, uninterrupted power supply (UPS) power generation scenarios, etc. The household photovoltaic scenario will be taken as an example for illustration below.
[0062] Please refer to Figure 2 , Figure 2 which is a simplified schematic diagram of an energy communication system provided by an embodiment of the present application. Figure 1 As Figure 2 shown, the energy communication system 200 may include a management system 210, an access point 220 (such as a router), and an inverter. Among them, the number of inverters here may include one or more. Here, four inverters may be taken as an example, specifically including inverter 230a, inverter 230b, inverter 230c, and inverter 230d. It can be understood that Figure 2 this is just a schematic diagram, and the energy communication system 200 may also include other devices, such as power consumption devices such as charging piles and heat pumps, which are not drawn in Figure 2 .
[0063] Among them, the wireless access method adopted by the energy communication system 200 may take the Wi-Fi access technology as an example. The management system 210 mainly refers to the energy management software deployed in the cloud, which is used to provide centralized management services for photovoltaic power stations, and realizes remote detection, intelligent operation and maintenance, and energy management of inverters through technical means such as cloud computing and big data.
[0064] It can be understood that each inverter in the energy communication system 200 can be used to communicate with a user terminal. The user terminal mainly refers to an intelligent terminal (such as a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, a vehicle terminal, etc.) for controlling, managing, and configuring the inverter.
[0065] Taking Figure 2Taking the inverter 230d shown as an example, it can be used to communicate with the user terminal 240. Exemplarily, business software (such as a PV APP) can be installed in the user terminal 240. When the business software runs on the user terminal, it can perform data interaction with the management system 210 or the inverter 230d. As Figure 2 shown, the inverter 230d in the embodiment of the present application can establish three different types of wireless links, which can specifically include a wireless link L1, a wireless link L2, and a wireless link L3, and the details are as follows:
[0066] Wireless link L1: It means that the inverter 230d accesses the local area network by using a Wi-Fi access method or a network cable access method to realize communication connection with the management system 210.
[0067] Wireless link L2: It means a wireless link established by the inverter 230d with the user terminal 240 through Wi-Fi access technology, which is mainly used for proximal debugging (such as data configuration, password configuration, etc.). For example, the inverter 230d can provide Wi-Fi soft access (soft AP) capability for the user terminal 240 to access. Correspondingly, the user terminal 240 can connect to the soft AP of the inverter 230d through Wi-Fi, so as to realize communication connection with the inverter 230d based on Wi-Fi.
[0068] Wireless link L3: It means a wireless link established by the inverter 230d with the user terminal 240 through a short-range communication technology different from the Wi-Fi access technology, which can be used to share the transmission pressure of the wireless link L2, or can also be used to ensure normal communication between the user terminal 240 and the inverter 230d when the wireless link L2 is disconnected. It should be understood that the short-range communication technology here can include: Bluetooth (such as Bluetooth Low Energy, BLE), SparkLink (such as SparkLink Low Energy, SLE), Near Field Communication (NFC), Ultra Wide Band (UWB), or ultrasonic wave.
[0069] In other words, the above inverter can not only be used to realize communication connection with the management system 210 through the wireless link L1, but also be used to realize communication connection with the user terminal 240 through the wireless link L2 or the wireless link L3.
[0070] In a possible implementation manner, please refer to Figure 3 , Figure 3 is a simplified schematic diagram of an energy communication system provided by an embodiment of the present application Figure 2 . As Figure 3As shown, the energy communication system 300 may include a management system 310, an access point 320 (e.g., a router), multiple paralleled inverters, and a home energy management device 350. Among them, the number of inverters here may take 4 as an example, specifically including inverter 330a, inverter 330b, inverter 330c, and inverter 330d. It can be understood that Figure 3 This is just a schematic diagram. The energy communication system 300 may also include other devices, such as power charging piles, heat pumps and other electrical equipment, which Figure 3 are not drawn in the figure.
[0071] Compared with Figure 2 the energy communication system 200 shown, a home energy management device 350 is additionally deployed in the energy communication system 300. The home energy management device 350 can manage light, storage, charging, and usage in one stop, that is, the home energy management device 350 can be used to centrally manage electrical equipment such as inverters and power charging piles. Among them, the home energy management device 350 may be an energy management assistant, which may refer to the general term of intelligent energy management services for intelligent photovoltaic around the household green electricity scenario, and is used to provide services such as light-storage-charging coordination, AI light storage, and intelligent power consumption for household owners. Optionally, in the case where there is no energy management assistant in the energy communication system, the home energy management device 350 may also be a certain inverter or the main inverter among multiple inverters in the energy communication system 300, which will not be limited here.
[0072] As Figure 3 shown, the home energy management device 350 can achieve communication connection with the management system 310 through the wireless link L1, and can also achieve communication connection with the user terminal 340 through the wireless link L3 or the wireless link L3. For the description of the three wireless links of the home energy management device 350, specifically, reference can be made to the description of the wireless link of the inverter 230d shown in the above Figure 2 figure, which will not be elaborated here.
[0073] It can be understood that due to the presence of the home energy management device 350 in the energy communication system 300, when these multiple managed inverters (e.g., inverter 330a, inverter 330b, inverter 330c, and inverter 330d) interact with the management system 310, they can be centrally reported through the home energy management device 350, so as to realize the unified scheduling and management of household energy.
[0074] It should be understood that in this application, an energy device (e.g., an inverter or a home energy management device) may perform some or all of the steps in the embodiments. These steps or operations are merely examples, and the embodiments of this application may also perform other operations or variations of various operations. In addition, the various steps may be executed in different orders presented in the embodiments, and it is possible that not all the operations in the embodiments of this application need to be executed. For ease of understanding, the energy device in this application may take an inverter as an example to illustrate the specific implementation manner of how to restore the communication connection between the energy device and the access point.
[0075] In a possible implementation, during the operation of the inverter, the inverter may synchronize the credentials held by both parties with the management system at a preset interval (e.g., half an hour) to facilitate subsequent identification of the operation authority for the operation instructions directed to the inverter. Here, the credentials may include a secret key and / or a token. Among them, the credentials for identifying the operation authority may be dynamically updated through two-way negotiation. Exemplarily, if the encryption method adopted subsequently is symmetric encryption, the number of secret keys here may be one, and this secret key is held by both parties. Optionally, if the encryption method adopted subsequently is asymmetric encryption, the number of secret keys here may be four, that is, the management system and the inverter each have a pair of public and private keys. Among them, the public key is public, and the private key is reserved by each party. That is to say: after one synchronization, for the management system, the secret keys it holds may include the private key of the management system, the public key of the management system, and the public key of the inverter. For the inverter, the secret keys it holds may include the private key of the inverter, the public key of the inverter, and the public key of the management system.
[0076] Exemplarily, please refer to Table 1. Table 1 is a schematic table showing the credentials held by the inverter and the management system in this application embodiment at different timestamps. As shown in Table 1:
[0077] Table 1
[0078]
[0079] Among them, both Timestamp 1 and Timestamp 2 can be used to represent the timestamps when the inverter and the management system synchronize the credentials, and Timestamp 1 is earlier than Timestamp 2. As can be seen from Table 1 above, the credentials held by the inverter during validity period a match those held by the management system during validity period a, and the credentials held by the inverter during validity period b match those held by the management system during validity period b.
[0080] For ease of explanation, after the last interaction certificate between the inverter and the management system, the certificate held by the inverter in the embodiments of this application can be referred to as the first certificate, the certificate held by the management system can be referred to as the third certificate, and the certificates of the historical interactions between the inverter and the management system can be referred to as the second certificates. Among them, the occurrence time of the historical interaction is earlier than the occurrence time of the last interaction. Exemplarily, in the case where the communication connection between the inverter and the access point is interrupted, if the time stamp of the last interaction certificate between the inverter and the management system is the above-mentioned time stamp 2, then the first certificate here refers to the certificate held by the inverter during the validity period b, the second certificate refers to the certificate held by the inverter during the validity period a, and the third certificate refers to the certificate held by the management system during the validity period b.
[0081] According to Table 1 above, it can be seen that the certificate held by the inverter during the validity period b is different from the certificate held by the inverter during the validity period a. That is, during the operation of the inverter, the certificate is not fixed, but can be dynamically updated through the wireless link between the inverter and the management system (for example, the above-mentioned Figure 2 shown wireless link L1), which increases the difficulty for illegal terminals to obtain certificates and effectively improves network security. In the case where the communication connection between the inverter and the access point is interrupted, the certificate of the last interaction between the inverter and the management system will participate in the subsequent process of identifying the operation authority, so as to safely restore the communication connection between the inverter and the access point.
[0082] For ease of understanding the above process of restoring the communication connection, exemplarily, please refer to Figure 4 , Figure 4 is a schematic flowchart corresponding to a communication method provided by the embodiments of this application. As Figure 4 shown, this method can be jointly executed by relevant devices (such as inverters, access points, and management systems) in a user terminal and an energy communication system (for example, the energy communication system 200 shown above Figure 2 ). This method can at least include steps S401 - step S404:
[0083] Step S401, in the case where the communication connection between the inverter and the access point is interrupted, the user terminal sends an authorization request message to the management system.
[0084] Correspondingly, the management system can receive the authorization request message from the user terminal.
[0085] Among them, the authorization request information herein is used to request management messages, and the authorization request information may include at least one of the following: device information of the inverter, operation instructions for the inverter (for example, network reconfiguration instructions). The device information herein may include at least one of the following: account identifier corresponding to the inverter (for example, owner account identifier or service provider account identifier), model of the inverter, or device identifier (for example, product serial number).
[0086] It can be understood that the authorization request information is obtained by the user terminal in response to a reconfiguration operation for the inverter. Here, the reconfiguration operation may be a triggering operation for reconfiguring the network. The triggering operation may be a contact operation such as clicking or long pressing, or a non-contact operation such as voice or gesture. It will not be limited herein.
[0087] Exemplarily, the reconfiguration operation herein may be initiated by the owner in the business software of the user terminal (for example, PV APP), or may be initiated by the owner in the business software after receiving a network disconnection notice (used to indicate that the communication connection between the inverter and the access point is interrupted). It will not be limited herein. Among them, the network disconnection notice herein may be sent by the service provider to the user terminal through contact methods such as phone calls, text messages, or emails, or may be broadcast by the inverter or the management system when detecting that the communication connection between the inverter and the access point is interrupted.
[0088] In a possible implementation manner, the network disconnection notice broadcast by the inverter or the management system may carry a security level identifier, and the security level identifier is used to indicate influencing factors corresponding to the operation authority. In the embodiments of the present application, the influencing factors corresponding to the operation authority may include an operation authorization credential and / or distance detection information. Among them, the operation authorization credential may include a secret key and / or a token for interaction between the inverter and the management system, and the distance detection information may be used to indicate the distance between the inverter and the management system, and the distance detection information may be detected by short-range communication technology.
[0089] Step S402, the management system sends a management message to the user terminal.
[0090] In a possible implementation manner, after receiving the authorization request information, the management system may directly determine a third credential for its last interaction with the inverter according to the device information carried in the authorization request information, and then may determine the management message based on the third credential.
[0091] Exemplarily, the management system may directly send the third certificate to the user terminal as an operation authorization certificate, or may encrypt the operation instruction based on the third certificate and then send the encrypted operation instruction obtained after encryption to the user terminal, which will not be limited herein. That is to say: the management message here may include an operation authorization certificate (for example, the third certificate held by the management system), or may include an encrypted operation instruction (that is, obtained after encrypting the operation instruction with the third certificate).
[0092] In a possible implementation manner, in order to reduce the possibility of an illegal terminal manipulating the inverter, after receiving the authorization request information, the management system needs to verify the legality of the user terminal according to the device information carried in the authorization request information. If it is determined that the user terminal is legal, the management system may send the above management message to the user terminal. If it is determined that the user terminal is illegal, a notification (also called a permission notification) for indicating that the user terminal does not have the operation permission is directly sent to the user terminal.
[0093] Exemplarily, after the inverter is installed and running, the management system may obtain the device information of the inverter and establish a mapping relationship between the device identifier and the account identifier based on the device information. For easy understanding, please refer to Table 2, which is a relationship mapping table stored by the management system in an embodiment of the present application. Among them, the energy communication system where the management system is located may take the energy communication system 200 shown above Figure 2 as an example. The relationship mapping table may specifically include the mapping relationships corresponding to the inverters 230a, 230b, 230c, and 230d respectively, as specifically shown in Table 2:
[0094] Table 2
[0095]
[0096]
[0097] Among them, for the device identifier of the same inverter, it may establish a mapping relationship with at least one account identifier. For example, the product serial number a may establish a mapping relationship with the owner account 1, may also establish a mapping relationship with the business account 2, and may also establish a mapping relationship with the service provider account x. This can be understood as: user terminals logged in with the owner account 1, the owner account 2, or the service provider account x are all legal user terminals when initiating an operation instruction for the inverter 230a.
[0098] For an account identifier, it can establish a mapping relationship with the device identifiers of at least one inverter. For example, the owner account 1 can establish mapping relationships with product serial number a, product serial number b, and product serial number c. This can be understood as: the user terminal logged in with the owner account 1 can legally initiate operation instructions for inverter 230a, inverter 230b, or inverter 230c.
[0099] It should be noted that the items shown in Table 2 are only a reference form. In actual business scenarios, other items (such as the model of the inverter, etc.) can also be established according to requirements. The embodiments of the present application do not limit the specific form of Table 2. Among them, the "table" is only a form. In fact, other configuration structures such as a list or a sequence can also be used, which will not be limited here.
[0100] Exemplarily, if the authorization request information received by the management system includes product serial number a and owner account 1, the management system can look up the mapping relationship corresponding to product serial number a in the relationship mapping table shown in Table 2 above. Since the mapping relationship corresponding to product serial number a indicates that there is a mapping relationship between product serial number a and owner account 1, the management system can determine the user terminal that sent the authorization request information as a legal user terminal (i.e., a legal terminal) and send the above management message to the user terminal.
[0101] Step S403, the user terminal sends a verification message to the inverter.
[0102] Correspondingly, the inverter can receive the above verification message. Here, the verification message is related to the management message received by the user terminal, and the verification message is used to determine the operation authority of the operation instruction for the inverter.
[0103] In a possible implementation manner, if there is no communication link between the user terminal and the inverter, the inverter can directly establish a first wireless link (such as the wireless link L3 shown above) with the user terminal through a short-range communication technology different from the Wi-Fi access technology, and then can receive the verification message from the user terminal through the first wireless link. The short-range communication technology can include: Bluetooth, XingShan, near-field communication, ultra-wideband, or ultrasonic wave. Figure 2 shown wireless link L3), and then can receive the verification message from the user terminal through the first wireless link. The short-range communication technology can include: Bluetooth, XingShan, near-field communication, ultra-wideband, or ultrasonic wave.
[0104] In another possible implementation manner, the inverter can establish a second wireless link with the user terminal through the Wi-Fi access technology (such as the above Figure 2The wireless link L2) shown, and then through the second wireless link, the inverter can receive the verification message from the user terminal. Of course, in the case where the second wireless link is interrupted, the inverter can also establish a first wireless link with the user terminal through a short-range communication technology different from the Wi-Fi access technology (for example, the wireless link L3) shown above), and then through the first wireless link, receive the verification message from the user terminal. Figure 2 That is to say, the above verification message can be transmitted through the first wireless link or the second wireless link, and no limitation will be made here.
[0105] In other words, the above verification message can be transmitted through the first wireless link or the second wireless link, and no limitation will be made here.
[0106] It should be understood that after receiving the verification message, the inverter can identify the operation permission for the operation instruction. If it is determined that the operation permission is not available, the inverter can generate a permission notice indicating that the user terminal does not have the operation permission and send the permission notice to the user terminal, or through the user terminal, send the permission notice to the management system. Optionally, if it is determined that the operation permission is available, the inverter can continue to execute step S404:
[0107] Step S404, when the inverter determines that it has the operation permission, according to the operation instruction, re-establish the communication connection between the inverter and the access point.
[0108] Among them, the operation instruction here can carry at least one of the following: the identifier of the access point or the new password, and the identifier of the access point can be the Service Set Identifier (SSID) of the new router.
[0109] Generally speaking, the influencing factors corresponding to the operation permission can include the account identifier to prevent other property owners from illegally controlling the inverter. In the embodiments of the present application, in order to adapt to the requirements of different service scenarios, realize the service adaptation of more scenarios, and more safely restore the communication connection between the inverter and the access point, the influencing factors corresponding to the operation permission can also include the operation authorization certificate and / or the distance detection information.
[0110] For example, under the condition that security is acceptable, the embodiments of the present application can also identify the operation permission through the operation authorization certificate. For another example, when the user terminal has the short-range communication function, the embodiments of the present application can jointly identify the operation permission through the operation authorization certificate and the distance detection information. For another example, if the user terminal has the short-range communication function, but the communication connection between the user terminal and the management system cannot be guaranteed, then under the condition that security is acceptable, the embodiments of the present application can also identify the operation permission through the distance detection information.
[0111] The following will be described in different cases according to the different influencing factors of the operation permission:
[0112] Implementation Method 1:
[0113] Exemplarily, please refer to Figure 5 , Figure 5 which is an interaction diagram provided by an embodiment of the present application for restoring the communication connection between an inverter and an access point Figure 1 . As Figure 5 shown, this method can be jointly executed by a user terminal and relevant devices (such as an inverter, an access point, and a management system) in an energy communication system (for example, the energy communication system 200 shown above Figure 2 ). During the duration of the communication connection between the inverter and the management system, the inverter can synchronize credentials with the management system and store them respectively. This method can at least include steps S501 - S507:
[0114] Step S501, the inverter broadcasts a network disconnection notice.
[0115] Correspondingly, the user terminal can receive the network disconnection notice from the inverter. Optionally, the network disconnection notice received by the user terminal can also be broadcast by the management system, which will not be limited here.
[0116] Exemplarily, the inverter can broadcast a network disconnection notice to the communication network where the inverter is located through a wireless short - range technology (such as BLE). Among them, this network disconnection notice is used to indicate that the communication connection between the inverter and the access point is interrupted.
[0117] In a possible implementation, this network disconnection notice can carry a security level identifier, and here the security level identifier can be used to indicate the influencing factors corresponding to the operation authority (such as an operation authorization credential).
[0118] Step S502, the user terminal obtains an operation instruction for the inverter.
[0119] Among them, this operation instruction can be obtained by the user terminal in response to a re - configuration operation performed by the owner on the user terminal, or can be obtained by the management system in response to a re - configuration operation performed by the management user on the management system, which will not be limited here.
[0120] Step S503, the user terminal sends an authorization request message to the management system.
[0121] Step S504, the management system sends an operation authorization credential to the user terminal.
[0122] Among them, this operation authorization credential can be referred to as a management message sent by the management system.
[0123] Among them, the specific implementation manners of steps S503 - S504 can be referred to the above Figure 4The descriptions of steps S401 - S402 in the corresponding embodiments will not be elaborated here.
[0124] Step S505, the user terminal establishes a first wireless link with the inverter through short - range communication technology.
[0125] Correspondingly, the inverter can establish a first wireless link with the user terminal through short - range communication technology.
[0126] Exemplarily, after receiving the management message, the user terminal can send short - range communication establishment information to the inverter. The inverter can establish a first wireless link with the user terminal through short - range communication technology. Here, the short - range communication technology can include Bluetooth, XingShan, Near - Field Communication, Ultra - Wideband, or ultrasonic wave.
[0127] It can be understood that after receiving the network disconnection notice, the user terminal can also execute step S505. Among them, the order of step S505 and steps S502 - S504 is not limited. They can be executed synchronously, or steps S502 - S504 can be executed first and then step S505, or step S505 can be executed first and then steps S502 - S504.
[0128] Step S506, the user terminal sends a verification message to the inverter through the first wireless link.
[0129] Correspondingly, the inverter can also receive the verification message from the user terminal through the first wireless link.
[0130] In a possible implementation, the user terminal can interact with the inverter one or more times through the first wireless link to send the verification message corresponding to the management message to enable the inverter to identify whether the user terminal has the operation permission. Here, the verification message can include an operation authorization certificate or encrypted information encrypted with the operation authorization certificate.
[0131] Among them, having the operation permission here can include that the operation authorization certificate matches the first certificate held by the inverter (for example, including the private key or token of the inverter).
[0132] For example, if the operation authorization certificate received by the user terminal includes the secret key and token for the interaction between the inverter and the management system, the user terminal can first encrypt the token with the secret key (e.g., the public key of the inverter) to obtain the encrypted information, and send the encrypted information and the operation instruction to the inverter together. Here, both the encrypted information and the operation instruction belong to the verification message. After receiving the verification message, the inverter can use the private key of the inverter to decrypt the encrypted information to obtain the token (i.e., the first token). If there is a token in the first certificate held by the inverter that is the same as the first token, it can be determined that the operation authorization certificate matches the first certificate held by the inverter. At this time, it can be understood that the user terminal has the operation permission.
[0133] If the operation authorization certificate includes the secret key, the user terminal can send an operation instruction (e.g., an instruction in plain text type) to the inverter. After receiving the operation instruction, the inverter generates and stores an authentication information (e.g., a random number), and sends the authentication information to the user terminal. Then, the user terminal can encrypt the authentication information with the secret key to obtain the encrypted information, and send the encrypted information to the inverter. After receiving the encrypted information, the inverter can obtain the private key of the inverter from the first certificate held by the inverter, and use the private key of the inverter to decrypt the encrypted information to obtain the decrypted authentication information. If the decrypted authentication information is the same as the stored authentication information, it can be determined that the operation authorization certificate matches the first certificate held by the inverter. At this time, it can be understood that the user terminal has the operation permission.
[0134] If the operation authorization certificate includes the token, the user terminal can directly send the token and the operation instruction to the inverter. Here, both the token and the operation instruction belong to the verification message. After receiving the verification message, the inverter can compare the token in the verification information with the token (i.e., the second token) in the first certificate held by the inverter. When the two tokens are the same, it can be determined that the operation authorization certificate matches the first certificate held by the inverter. At this time, it can be understood that the user terminal has the operation permission.
[0135] Step S507, when the inverter determines that it has the operation permission, it re - establishes the communication connection between the inverter and the access point according to the operation instruction.
[0136] In the embodiments of the present application, after the communication connection between the inverter and the access point is interrupted, the operation authorization credential from the management system can be used to identify the operation authority of the user terminal. When the operation authorization credential matches the first credential held by the inverter, the inverter determines that it has the operation authority, and then can re - establish the communication connection between the inverter and the access point according to the operation instruction. The whole process does not require the owner to touch the relevant controls of the inverter, simplifies the complex operations of the owner on the user terminal, and more conveniently realizes the connection between the inverter and the access point and restores the communication connection between the inverter and the management system. In addition, since the operation authorization credential of the management system is dynamically updated, it increases the difficulty for illegal terminals to obtain the credential and effectively improves network security.
[0137] Implementation method two:
[0138] Exemplarily, please refer to Figure 6 , Figure 6 which is an interaction diagram provided by the embodiments of the present application for restoring the communication connection between the inverter and the access point. Figure 2 As Figure 6 shown, this method can be jointly executed by the user terminal and relevant devices (such as the inverter, the access point, and the management system) in the energy communication system (for example, the energy communication system 200 shown above). Figure 2 During the period when the communication connection between the inverter and the management system lasts, the inverter can synchronize the credential with the management system and store them respectively. This method can at least include steps S601 - step S609:
[0139] Step S601, the inverter broadcasts a network disconnection notice.
[0140] Among them, the network disconnection notice is used to indicate that the communication connection between the inverter and the access point is interrupted, and the network disconnection notice can carry a security level identifier, and here the security level identifier can be used to indicate the influencing factors corresponding to the operation authority (such as the operation authorization credential and the distance detection information).
[0141] Step S602, the user terminal obtains an operation instruction for the inverter.
[0142] Step S603, the user terminal sends an authorization request message to the management system.
[0143] Among them, the specific implementation manners of steps S601 - step S603 can refer to the descriptions of steps S501 - step S503 in the corresponding embodiments above, and will not be elaborated here. Figure 5 Step S604, the management system sends a distance detection request to the user terminal.
[0144]
[0145] Among them, the distance detection request here is used to indicate the detection of the distance between the user terminal and the inverter.
[0146] It can be understood that the distance detection technology involved in the embodiments of this application may include: ranging methods based on signal strength (such as Bluetooth or XingFlash, etc.), ranging methods based on phase (such as ultrasonic high-precision ranging), ranging methods based on time delay (such as ultra-wideband), and NFC touch-and-go, etc. Examples will not be given one by one here.
[0147] Exemplarily, the user terminal can interact with the inverter through ranging methods such as Bluetooth or XingFlash to obtain the distance detection information detected by the inverter. For example, after receiving the distance detection request, the user terminal can send a sensing signal to the inverter. After receiving the sensing signal, the inverter can determine the distance between the user terminal and the inverter according to the signal strength of the received sensing signal, obtain the distance detection information, and return the distance detection information to the user terminal.
[0148] In a possible implementation, after obtaining the distance detection information, the user terminal needs to perform an initial identification of the operation authority of the user terminal. Exemplarily, if the distance detection information indicates that the distance between the user terminal and the inverter is greater than a preset threshold, it can be directly determined that the user terminal does not have the operation authority. At this time, the user terminal can generate an authority notification indicating that the user terminal does not have the operation authority and send the authority notification to the management system. If the distance detection information indicates that the distance between the user terminal and the inverter is less than or equal to the preset threshold, the user terminal can continue to execute step S605 to enable the inverter to perform further identification of the operation authority of the user terminal.
[0149] In another possible implementation, after obtaining the distance detection information, the user terminal can also directly execute step S605:
[0150] Step S605, the user terminal sends the distance detection information to the management system.
[0151] Step S606, if the distance detection information indicates that the distance between the inverter and the user terminal is less than or equal to the preset threshold, the management system sends an operation authorization certificate to the user terminal.
[0152] Step S607, the user terminal establishes a first wireless link with the inverter through short-range communication technology.
[0153] Correspondingly, the inverter can establish a first wireless link with the user terminal through short-range communication technology.
[0154] Step S608, the user terminal sends a verification message to the inverter through the first wireless link.
[0155] Correspondingly, the inverter can also receive the verification message from the user terminal through the first wireless link.
[0156] Here, the verification information is determined based on the operation authorization credential (i.e., the management message). Exemplarily, the verification message may include the operation authorization credential or the encrypted information encrypted by using the operation authorization credential.
[0157] Step S609: When the inverter determines that it has the operation permission, it re - establishes the communication connection between the inverter and the access point according to the operation instruction.
[0158] Among them, the specific implementation manners of steps S607 - S609 can refer to the description of steps S505 - S507 in the corresponding embodiments above. Figure 5 It will not be repeated here.
[0159] In a possible implementation manner, in order to reduce the number of transmissions between the inverter and the user terminal and reduce the transmission overhead, the disconnection notice broadcast by the above - mentioned inverter may also carry a distance detection request. Therefore, in the embodiments of the present application, after receiving the disconnection notice, the user terminal can first detect the distance between itself and the inverter according to the distance detection request carried in the disconnection notice, and then decide whether to request the operation authorization credential from the management system according to the detected distance. In other words, the step sequence of the user terminal detecting the distance between itself and the inverter and the step sequence of the user terminal requesting the operation authorization credential from the management system are not limited.
[0160] Exemplarily, if the distance between the user terminal and the inverter is greater than the distance threshold, the user terminal does not need to execute step S603 to send an authorization request message to the management system, but can directly determine that the user terminal does not have the operation permission, which can effectively reduce the number of invalid requests received by the management system and improve the operation performance of the management system.
[0161] If the distance between the user terminal and the inverter is less than or equal to the distance threshold, the user terminal needs to continue to execute step S603 to send an authorization request message to the management system. After receiving the authorization request message, the management system needs to send an operation authorization credential to the user terminal to further identify whether the user terminal has the operation permission. Specifically, it can refer to the description of steps S504 - S507 shown above. Figure 5 It will not be repeated here.
[0162] In the embodiment of the present application, after the communication connection between the inverter and the access point is interrupted, the identification of the operation authority for the operation instruction of the inverter is not only limited by the operation authorization certificate from the management system, but also limited by the distance between the user terminal and the inverter. When the distance between the user terminal and the inverter is close enough (i.e., the distance is less than or equal to the preset threshold), and the operation authorization certificate matches the first certificate held by the inverter, the inverter can determine that the user terminal has the operation authority, and then realize the connection between the inverter and the access point, and restore the communication connection between the inverter and the management system. Generally speaking, the inverter belongs to private equipment and it is difficult for other users to approach. Therefore, compared with the first implementation method, the identification of the operation authority adds the limitation of the distance between the user terminal and the inverter, improving the security of the operation authority identification.
[0163] Implementation method three:
[0164] Exemplarily, please refer to Figure 7 , Figure 7 which is an interaction diagram provided by the embodiment of the present application for restoring the communication connection between the inverter and the access point. Figure 3 As Figure 7 shown, this method can be jointly executed by the user terminal and relevant devices (such as the inverter, the access point, and the management system) in the energy communication system (for example, the energy communication system 200 shown above). Figure 2 During the period when the communication connection between the inverter and the management system lasts, the inverter can synchronize the certificates with the management system and store them respectively. This method can at least include step S701 - step S707:
[0165] Step S701, the management system broadcasts a network disconnection notice.
[0166] Among them, the network disconnection notice is used to indicate that the communication connection between the inverter and the access point is interrupted.
[0167] In a possible implementation, the network disconnection notice can carry a security level identifier, and here the security level identifier can be used to indicate the influencing factors corresponding to the operation authority (such as distance detection information).
[0168] Step S702, the user terminal obtains an operation instruction for the inverter.
[0169] Step S703, the user terminal detects the distance between the user terminal and the inverter to obtain distance detection information.
[0170] Among them, the specific method for detecting the distance between the user terminal and the inverter can refer to the description of step S604 in the corresponding embodiment above, and will not be elaborated here. Figure 6
[0171] Step S704: The user terminal establishes a first wireless link with the inverter through short-range communication technology.
[0172] Correspondingly, the inverter can also be used to receive a verification message from the user terminal through the first wireless link.
[0173] Step S705: The user terminal sends an operation instruction to the inverter through the first wireless link.
[0174] Correspondingly, the inverter can also be used to receive an operation instruction from the user terminal through the first wireless link, so as to achieve specific service control of the inverter.
[0175] Step S706: The user terminal sends distance detection information to the inverter through the first wireless link.
[0176] Correspondingly, the inverter can also be used to receive distance detection information from the user terminal through the first wireless link.
[0177] Herein, the operation instruction and the distance detection information can be encapsulated by the user terminal in a message (e.g., the verification message) and sent to the inverter together, or can be encapsulated in different messages and sent to the inverter separately, which will not be limited herein.
[0178] Step S707: When the inverter determines that it has the operation permission, it re-establishes the communication connection between the inverter and the access point according to the operation instruction.
[0179] Exemplarily, if the distance detection information indicates that the distance between the user terminal and the inverter is greater than the distance threshold, the inverter can directly determine that the user terminal does not have the operation permission. If the distance detection information indicates that the distance between the user terminal and the inverter is less than or equal to the distance threshold, the inverter can determine that the user terminal has the operation permission, and then can, according to the operation instruction, establish the connection between the inverter and the access point and restore the communication connection between the inverter and the management system.
[0180] In an alternative manner, after receiving the network disconnection notice, the user terminal can jump to execute Step S704, establish a first wireless link with the inverter through short-range communication technology, and then execute Step S705 to send an operation instruction to the inverter through the first wireless link. After receiving the operation instruction, the inverter can also detect the distance between the user terminal and the inverter to obtain the distance detection information, and then, when the distance detection information indicates that the distance between the user terminal and the inverter is less than or equal to the distance threshold, determine that the user terminal has the operation permission, and then execute the above-mentioned Step S707. In other words, the distance between the user terminal and the inverter can be detected by the inverter or obtained by the inverter from the user terminal, which will not be limited herein.
[0181] In an embodiment of the present application, after the communication connection between the inverter and the access point is interrupted, the operation authority of the user terminal can be identified based on the distance between the inverter and the user terminal. When the distance between the user terminal and the inverter is close enough, the inverter can determine that the user terminal has the operation authority, and then, according to the operation instruction, re - establish the communication connection between the inverter and the access point. Throughout this process, the user terminal does not need to interact with the management system. Therefore, the embodiment of the present application can realize the connection between the inverter and the access point in the case of no network connection for the device.
[0182] In any one of the above - mentioned implementation manners 1, 2, or 3, during the process of restoring the communication connection between the inverter and the access point, it may be necessary to detect the distance between the user terminal and the inverter, or it may be necessary for the user terminal to determine the verification information sent to the inverter according to the operation authorization certificate. In other words, in the above - mentioned implementation manners, the user terminal needs to have certain computing resources to participate in the identification of the operation authority. Optionally, during the process of restoring the communication connection between the inverter and the access point, the user terminal can also be used as an intermediate communication medium, that is, the management system directly manages (for example, issues) the operation instructions for the inverter, saving the computing resources of the user terminal.
[0183] Exemplarily, please refer to Figure 8 , Figure 8 which is an interaction schematic for restoring the communication connection between the inverter and the access point provided by the embodiment of the present application. Figure 4 As Figure 8 shown, this method can be jointly executed by the user terminal and related devices (such as the inverter, the access point, and the management system) in the energy communication system (for example, the energy communication system 200 shown above). Figure 2 This method can at least include steps S801 - step S807:
[0184] Step S801, the management system broadcasts a network disconnection notice.
[0185] Exemplarily, the management system can send a network disconnection notice to the user terminal through a push notification service. Here, the network disconnection notice can be used to indicate that the communication connection between the inverter and the access point is interrupted, or that the inverter and the management system cannot communicate.
[0186] Step S802, the user terminal obtains an operation instruction for the inverter.
[0187] Step S803, the user terminal sends an authorization request message to the management system.
[0188] The authorization request information here may include device information of the inverter and operation instructions for the inverter (for example, network reconfiguration instructions).
[0189] The specific implementation of steps S802 to S803 can be found in the above Figure 5 The description of step S502 to step S503 in the corresponding embodiment will not be repeated here.
[0190] Step S804: The management system sends an encryption operation instruction to the user terminal.
[0191] The encryption operation instruction here can be called a management message sent by the management system.
[0192] Exemplarily, after receiving the authorization request information, the management system can verify the legitimacy of the user terminal according to the device information carried in the authorization request information. If it is determined that the user terminal is legitimate, the management system can use a third credential held by the management system (for example, the public key of the inverter and / or the private key of the management system) to encrypt the operation instruction, obtain the encrypted operation instruction, and send it to the user terminal.
[0193] Step S805: The user terminal establishes a first wireless link with the inverter through short-range communication technology.
[0194] Accordingly, the inverter can be used to establish a first wireless link with the user terminal through the short-range communication technology.
[0195] Step S806: The user terminal forwards the encryption operation instruction to the inverter via the first wireless link.
[0196] Correspondingly, the inverter can also be used to receive the encrypted operation instruction from the user terminal through the first wireless link. The encrypted operation instruction here can be called a verification message sent by the user terminal.
[0197] Step S807: When the inverter determines that it has the operation authority, the inverter re-establishes the communication connection between the inverter and the access point according to the operation instruction.
[0198] Exemplarily, after receiving the encrypted operation instruction, the inverter can use the first credential it holds to decrypt the encrypted operation instruction. For example, the inverter can use the private key of the inverter to decrypt the encrypted operation instruction. If the encrypted operation instruction is encrypted by the management system according to the public key of the inverter it holds, the inverter can successfully decrypt and obtain the operation instruction.
[0199] It can be understood that when the inverter can successfully decrypt the operation instruction, it can be determined that the user terminal has the operation permission. On the contrary, when the inverter fails to successfully decrypt the encrypted operation instruction, it can be determined that the user terminal does not have the operation permission.
[0200] In a possible implementation, after the management system detects the interruption of the communication connection between the inverter and the access point, it can respond to the reconfiguration operation of the management user for the inverter, obtain the operation instruction, and then encrypt the operation instruction using the third credential held by the management system to obtain the encrypted operation instruction, and send it to the user terminal. The user terminal can forward the encrypted operation instruction to the inverter so that when the inverter determines that it has the operation permission, it can re - establish the communication connection between the inverter and the access point according to the operation instruction. In other words, the operation instruction obtained by the management system is not initiated by the owner on the user terminal, but directly by the management user on the management system, which simplifies the operations performed by the owner on the user terminal.
[0201] In the embodiment of the present application, after the communication connection between the inverter and the access point is interrupted, the inverter can obtain the encrypted operation instruction from the management system through the user terminal to more conveniently identify the operation permission. When the encrypted operation instruction is decrypted using the first credential held by the inverter to obtain the operation instruction, the inverter can determine that it has the operation permission, and then can more conveniently establish the connection between the inverter and the access point and restore the communication connection between the inverter and the management system. Throughout the process, the user terminal serves as a communication bridge between the inverter and the management system, playing the role of signaling forwarding, and does not need to obtain and store the credentials for the interaction between the management system and the inverter. This not only reduces the memory occupation of the user terminal but also reduces the complexity of restoring the communication connection. Among them, the first credential and the third credential are both the credentials for the last interaction between the inverter and the management system, that is, the credentials here are dynamic and not fixed, which increases the difficulty for illegal terminals to obtain the credentials and effectively improves network security.
[0202] It can be understood that the above - mentioned method for identifying the operation permission can be applied not only in the network re - configuration scenario but also in the password reset scenario. For example, resetting the login password of the inverter (such as the access password of the inverter's Wi - Fi soft AP or the system login password). Of course, it can also be applied to scenarios where other operation instructions are executed on the inverter, and no further examples will be given here. That is to say, under the condition of controlled permissions, the user terminal can directly perform operations such as password reset and network re - configuration on the inverter without performing complex operations on the relevant controls on the inverter or logging in to the system for complex settings, enabling ordinary owners to conveniently control the inverter.
[0203] Exemplarily, regardless of whether the communication connection between the inverter and the access point is interrupted, the user terminal can send an authorization request message to the management system, and the authorization request message can be used to request a management message, which includes at least one of the following: device information of the inverter, operation instructions for the inverter (e.g., password reset instruction). Here, the device information can include at least one of the following: the account identifier corresponding to the inverter (e.g., the owner account identifier or the service provider account identifier), the model of the inverter, or the device identifier (e.g., the product serial number).
[0204] The management system can send a management message to the user terminal so that the user terminal can send a verification message to the inverter, and the verification message is used to determine the operation authority for the password reset instruction for the inverter. Further, when the inverter determines that it has the operation authority, it can reconfigure the login password of the inverter according to the password reset instruction. Exemplarily, the inverter can update its login password to the password carried in the password reset instruction.
[0205] Herein, the management message can include an operation authorization voucher (e.g., the third voucher held by the management system), or can also include an encrypted operation instruction (i.e., obtained after encrypting the password configuration instruction with the third voucher), and it will not be limited herein. If the management message here includes an operation authorization voucher, the influencing factors corresponding to the operation authority can include the operation authorization voucher and / or distance detection information. For details, reference can be made to the description of the identification of the operation authority in the corresponding embodiments above Figure 5 、 Figure 6 or Figure 7 and will not be elaborated herein. If the management message here includes an encrypted operation instruction, the identification method of the operation authority can be referred to the description of the corresponding embodiment above Figure 8 and will not be elaborated herein.
[0206] In a possible implementation manner, if there is a home energy management device in the energy communication system (e.g., the home energy management device 350 shown above Figure 3 ), then this home energy management device may also need to reconfigure the network or reset the password. At this time, the home energy management device can also receive a verification message from the user terminal, and the verification message is used to determine the operation authority for the operation instruction (e.g., network reconfiguration instruction or password reset instruction) for the home energy management device. When it determines that it has the operation authority, the home energy management device executes the operation instruction. For example, it can re - establish the communication connection between the home energy management device and the access point according to the network reconfiguration instruction, or reconfigure the login password of the home energy management device according to the password reset instruction.
[0207] Herein, the specific steps executed by the home energy management device can be referred to the above Figure 5 、Figure 6 , Figure 7 or Figure 8 The descriptions of the inverters in the corresponding embodiments will not be elaborated here.
[0208] In each embodiment of the present application, without special instructions and logical conflicts, the terms and / or descriptions between different embodiments are consistent and can be referenced to each other. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.
[0209] It can be understood that the various numerical numbers involved in the embodiments of the present application are only for the convenience of description and are not used to limit the scope of the embodiments of the present application. The magnitudes of the serial numbers of the above processes do not mean the sequence of execution, and the execution sequence of each process should be determined by its function and inherent logic.
[0210] The above is only a preferred embodiment of the technical solution of the present application, and is not used to limit the protection scope of the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall be included within the protection scope of the present application.
Claims
1. An energy communication system, characterized in that, Including: An access point, an inverter, and a management system, where the inverter is used to establish a communication connection with the management system through the access point; In the case where the communication connection between the inverter and the access point is interrupted, the management system is used to receive authorization request information from a user terminal, and the authorization request information is used to request a management message; The management system is used to send the management message to the user terminal, so that the user terminal sends a verification message to the inverter, and the verification message is used to determine the operation permission for an operation instruction for the inverter; The inverter is used to receive the verification message from the user terminal; The inverter is used to re - establish the communication connection between the inverter and the access point according to the operation instruction when it is determined that the operation permission is available.
2. The energy communication system according to claim 1, wherein The inverter is used to establish a first wireless link with the user terminal through short - range communication technology, and the first wireless link is used to transmit the verification message.
3. The energy communication system according to claim 2, wherein The inverter is further used to establish a second wireless link with the user terminal through Wi - Fi access technology. In the case where the second wireless link is interrupted, the inverter is used to establish a first wireless link with the user terminal through short - range communication technology different from the Wi - Fi access technology.
4. The energy communication system according to claim 2 or 3, characterized in that, The short - range communication technology includes: Bluetooth, XingShan, Near Field Communication (NFC), Ultra - Wideband (UWB), or ultrasonic wave.
5. The energy communication system according to any one of claims 1-4, characterized in that, The management message includes an operation authorization certificate, and the operation authorization certificate includes a secret key and / or a token for interaction between the inverter and the management system.
6. The energy communication system according to claim 5, wherein The availability of the operation permission includes the matching of the operation authorization certificate and a first certificate held by the inverter.
7. The energy communication system according to claim 6, characterized in that, The first certificate is the certificate of the last interaction between the inverter and the management system, and the first certificate is different from a second certificate, where the second certificate is the certificate of historical interaction between the inverter and the management system, and the occurrence time of the historical interaction is earlier than the occurrence time of the last interaction.
8. The energy communication system according to claim 6 or 7, characterized in that The availability of the operation permission further includes that the distance between the inverter and the user terminal is less than or equal to a preset threshold.
9. The energy communication system according to any one of claims 1-8, characterized in that, The inverter or the management system is further used to broadcast a network disconnection notice, and the network disconnection notice is used to indicate the interruption of the communication connection between the inverter and the access point.
10. The energy communication system according to claim 9, characterized in that, The network disconnection notice carries a security level identifier, and the security level identifier is used to indicate influencing factors corresponding to the operation permission. The influencing factors include an operation authorization certificate and / or distance detection information, and the distance detection information is used to indicate the distance between the inverter and the user terminal.
11. The energy communication system according to any one of claims 1-10, characterized in that, The inverter is further used to receive the operation instruction from the user terminal through short - range communication technology.
12. The energy communication system according to any one of claims 1-4, characterized in that, If the management message includes an encrypted operation instruction, the verification message includes the encrypted operation instruction, and the encrypted operation instruction is obtained by encrypting the operation instruction with a third certificate held by the management system.
13. The energy communication system according to claim 12, wherein The possession of the operation authority includes: decrypting the encrypted operation instruction with the first certificate held by the inverter to obtain the operation instruction, and both the third certificate and the first certificate are the certificates of the last interaction between the inverter and the management system.
14. An energy communication system, characterized in that, Including: An access point, a plurality of paralleled inverters, a home energy management device, and a management system, where the home energy management device is used to realize communication connection with the management system through the access point; When the communication connection between the home energy management device and the access point is interrupted, the management system is used to receive authorization request information from the user terminal, and the authorization request information is used to request a management message; The management system is used to send the management message to the user terminal, so that the user terminal sends a verification message to the home energy management device, and the verification message is used to determine the operation authority for the operation instruction for the home energy management device; The home energy management device is used to receive the verification message from the user terminal; When it is determined that the operation authority is available, the home energy management device is used to re - establish the communication connection between the home energy management device and the access point according to the operation instruction.
15. A communication method, characterized in that, Applied to an inverter, the method includes: When the communication connection between the inverter and the access point is interrupted, receiving a verification message from the user terminal. The inverter is used to realize communication connection with the management system through the access point, and the verification message is used to determine the operation authority for the operation instruction for the inverter; When it is determined that the operation authority is available, re - establish the communication connection between the inverter and the access point according to the operation instruction.