A communication module for self-organizing network charging piles and a method for monitoring secure access through key negotiation.

Abstract

This invention relates to the field of charging pile technology and discloses a self-organizing network charging pile communication module, including a communication unit, a control unit, a storage unit, and a security unit. This self-organizing network charging pile communication module provides efficient and stable communication even in complex environments. The radio frequency module and protocol conversion module of the communication unit work together to ensure stable communication. The radio frequency module can intelligently adjust the receiving sensitivity and transmitting power based on factors such as environmental interference and transmission distance, ensuring signal penetration through obstacles or reducing energy consumption. The protocol conversion module supports multiple mainstream communication protocols and can quickly adapt to external devices such as power grid management systems and payment platforms, breaking down communication barriers and achieving efficient interconnection between charging piles and different devices, thus improving communication compatibility. This invention constructs a security system from multiple aspects. Data transmission uses high-strength encryption algorithms and quantum key distribution technology to prevent data interception and cracking, and provides early warnings for known and unknown threats, ensuring data and network security.

Description

Technical Field

[0001] This invention relates to the field of charging pile technology, specifically to a self-organizing network charging pile communication module and a key negotiation secure access monitoring method. Background Technology

[0002] With the rapid development of the new energy vehicle industry, charging piles, as a key infrastructure, are constantly expanding in number and application scope. In order to achieve efficient management and resource optimization of charging piles, self-organizing network communication technology is gradually being applied to the field of charging piles, enabling charging piles to establish network connections autonomously and realize data interaction and collaborative work.

[0003] However, current self-organizing network charging pile communication still faces many challenges. In terms of communication stability, the complex and ever-changing network environment often leads to unstable signal transmission. The compatibility issues of different communication protocols also limit the interconnection between charging piles and external devices. In terms of data security, if the configuration information transmitted by the charging pile and user charging data are stolen or tampered with, it will bring risks such as privacy leaks and billing disputes. Moreover, traditional security protection mechanisms are difficult to resist new types of network attacks. In terms of secure access management, there is a lack of effective identity authentication and key negotiation mechanisms, which can easily cause network security risks when new charging piles are connected. At the same time, the means of monitoring communication traffic and data integrity need to be improved. These problems seriously restrict the safe and stable operation and large-scale promotion and application of self-organizing network charging piles. There is an urgent need for a reliable self-organizing network charging pile communication module and secure access monitoring method to solve the above problems. Summary of the Invention

[0004] The purpose of this invention is to provide a communication module for self-organizing network charging piles and a secure access monitoring method for key negotiation, so as to solve the problems mentioned in the background art, such as poor stability of self-organizing network charging piles during communication, easy data theft and tampering, lack of effective identity authentication and key negotiation mechanism for new device access, and insufficient monitoring of communication traffic and data integrity.

[0005] To achieve the above objectives, the present invention provides the following technical solution: a self-organizing network charging pile communication module, including a communication unit: having wireless communication function, used for data transmission with other charging piles and external devices, supporting multiple communication protocols, and able to adapt to different network environments to ensure stable communication;

[0006] Control unit: Responsible for managing the overall operation of the communication module, coordinating the work between various units, processing and scheduling the received and transmitted data, and adjusting the working parameters according to the communication status;

[0007] Storage unit: Stores the charging pile's configuration information, communication keys, historical communication data, and relevant rules and records for secure access monitoring. It has data backup and recovery functions to ensure data security and integrity.

[0008] Security Unit: Employs encryption algorithms to encrypt and decrypt transmitted data, preventing data theft or tampering, implementing an identity authentication mechanism to verify the legitimacy of communication objects, possessing the ability to resist common network attacks, and maintaining the secure operation of the communication module.

[0009] Preferably, the communication unit further includes:

[0010] Radio frequency module: Responsible for transmitting and receiving wireless signals, with adjustable transmission power and receiving sensitivity, and can automatically adjust the working mode according to the signal strength to adapt to different communication distances and environmental interference;

[0011] Protocol conversion module: Supports conversion between various communication protocols, such as converting specific protocols used within an ad hoc network into standard protocols compatible with external networks, enabling interconnection and interoperability with different types of devices.

[0012] A method for monitoring secure access to key negotiation in a self-organizing network charging pile communication module, the method comprising the following steps:

[0013] S1. Initialization Phase:

[0014] S1.1 Each charging pile's communication module generates its own public-private key pair and broadcasts the public key to other charging piles in the self-organizing network.

[0015] S1.2 Charging piles exchange public keys and use a key negotiation algorithm to generate a shared key for subsequent encryption and decryption of communication data.

[0016] S2, Secure Access Monitoring Phase:

[0017] S2.1 When a new charging pile attempts to connect to the self-organizing network, the existing charging piles in the network authenticate it. The authentication includes checking whether the new charging pile's public key is valid, whether it is in the trust list, and confirming its identity through a specific challenge-response mechanism.

[0018] S2.2 During the communication process, continuously monitor the integrity and accuracy of data transmission, and verify whether the received data has been tampered with by calculating the hash value of the data or using the Message Authentication Code (MAC) method.

[0019] S2.3. The shared key is updated periodically. The new key is generated based on the existing keys of both parties and a new random number, through a key negotiation algorithm, to enhance the security of communication.

[0020] S2.4. Monitor communication traffic in real time, analyze traffic characteristics, and identify abnormal traffic behaviors, such as a sudden increase in traffic or abnormal data transmission frequency. Once an anomaly is detected, take appropriate security measures in a timely manner, such as blocking communication or issuing an alarm.

[0021] The authentication process specifically includes:

[0022] Existing charging stations send challenge messages containing random numbers to newly connected charging stations;

[0023] The newly connected charging pile uses its own private key to sign the random number in the challenge message and returns the signed result to the charging pile that initiated the challenge.

[0024] The charging station that initiates the challenge uses the public key of the newly connected charging station to verify the signature result. If the verification is successful, the identity of the newly connected charging station is confirmed as legitimate, and it is allowed to access the self-organizing network; otherwise, access is rejected.

[0025] Regarding data transmission integrity monitoring, specific implementation methods include:

[0026] When sending data, the sender calculates the hash value of the data and encrypts and sends the hash value along with the data.

[0027] After receiving the data, the receiver decrypts it, recalculates the hash value of the data, and compares it with the received hash value. If they match, the data transmission is considered complete and has not been tampered with. If they do not match, the data is deemed to have a problem, and the sender is required to resend the data.

[0028] The specific key negotiation algorithm in the shared key update step is as follows:

[0029] Both parties use the existing shared key as a seed, combine it with newly generated random numbers, and generate a new shared key through a specific key derivation function;

[0030] During the generation of a new key, both parties exchange intermediate calculation results to ensure that the generated new key is consistent, and the security of the new key is based on the security of the original key and the randomness of the random number.

[0031] For abnormal traffic monitoring, the following methods are used:

[0032] Establish a normal traffic model and determine the characteristic parameters under normal conditions by analyzing historical communication traffic data, including traffic mean, standard deviation, and data transmission interval.

[0033] The system monitors various characteristic parameters of the current communication traffic in real time and compares them with the normal traffic model. When the current traffic characteristic parameters exceed a certain threshold of the normal range, it is judged as abnormal traffic and the corresponding security response mechanism is triggered.

[0034] The security unit further includes:

[0035] Intrusion Detection Subunit: Based on machine learning algorithms, it performs real-time analysis of network behavior to identify potential intrusion behaviors and abnormal operation patterns;

[0036] Security Audit Subunit: Records and analyzes all system activities, generates security audit logs for post-incident tracking and security incident investigation.

[0037] This monitoring method also includes:

[0038] Physical layer security enhancement steps: Beamforming technology is used to transmit wireless signals in a directional manner, reducing the risk of signal interception;

[0039] Quantum key distribution auxiliary steps: In key communication links, quantum key distribution technology is introduced to generate unconditionally secure one-time encryption keys.

[0040] This monitoring method also includes:

[0041] Dynamic trust assessment steps: Based on the charging pile's historical behavior, communication quality, and security performance, dynamically adjust its trust level and implement stricter access control for charging piles with low trust levels.

[0042] Blockchain evidence storage steps: Key security events and communication records are stored in the blockchain to ensure that the data is immutable and to provide a reliable basis for security audits.

[0043] Compared with the prior art, the beneficial effects of the present invention are: the self-organizing network charging pile communication module:

[0044] 1. High-efficiency and stable communication: In complex environments, the radio frequency module and protocol conversion module of the communication unit work together to ensure stable communication. The radio frequency module can intelligently adjust the receiving sensitivity and transmitting power according to environmental interference, transmission distance and other factors to ensure that the signal penetrates obstacles or reduces energy consumption. The protocol conversion module supports a variety of mainstream communication protocols and can be quickly adapted to external devices such as power grid management systems and payment platforms, breaking down communication barriers and realizing efficient interconnection between charging piles and different devices, thus improving communication compatibility.

[0045] 2. This invention constructs a security system from multiple stages. Data transmission adopts high-strength encryption algorithms and quantum key distribution technology to prevent data interception and cracking. When a new device is connected, triple authentication is performed through public-private key pairing, trust list verification, and challenge-response mechanism to ensure the trustworthiness of network members. The intrusion detection subunit based on machine learning analyzes network behavior in real time, which can accurately identify anomalies such as DDoS attacks and provide early warnings for known and unknown threats, forming a comprehensive protection system to ensure data and network security.

[0046] 3. The intelligent and convenient management and control unit serves as the core, collecting data from each module in real time, dynamically optimizing system parameters, and rationally allocating communication resources. The dynamic trust assessment mechanism adjusts the trust level in real time based on the charging pile's historical behavior, communication quality, and other multi-dimensional performance, restricting access to low-trust devices and allocating resources to high-trust devices. Blockchain evidence storage technology permanently stores key security events and communication records, facilitating auditing and traceability. The system can also analyze historical data, predict charging peaks, optimize scheduling, reduce operation and maintenance costs, and achieve efficient and intelligent management of charging piles. Attached Figure Description

[0047] Figure 1 This is a schematic diagram of the communication module composition of the present invention;

[0048] Figure 2 This is a schematic diagram of the monitoring method of the present invention. Detailed Implementation

[0049] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0050] Please see Figures 1-2 The present invention provides a technical solution: a self-organizing network charging pile communication module, comprising: a communication unit: having wireless communication function, used for data transmission with other charging piles and external devices, supporting multiple communication protocols, and able to adapt to different network environments to ensure stable communication;

[0051] Control unit: Responsible for managing the overall operation of the communication module, coordinating the work between various units, processing and scheduling the received and transmitted data, and adjusting the working parameters according to the communication status;

[0052] Storage unit: Stores the charging pile's configuration information, communication keys, historical communication data, and relevant rules and records for secure access monitoring. It has data backup and recovery functions to ensure data security and integrity.

[0053] Security Unit: Employs encryption algorithms to encrypt and decrypt transmitted data, preventing data theft or tampering, implementing an identity authentication mechanism to verify the legitimacy of communication objects, possessing the ability to resist common network attacks, and maintaining the secure operation of the communication module.

[0054] The communication unit also includes:

[0055] Radio frequency module: Responsible for transmitting and receiving wireless signals, with adjustable transmission power and receiving sensitivity, and can automatically adjust the working mode according to the signal strength to adapt to different communication distances and environmental interference;

[0056] Protocol conversion module: Supports conversion between various communication protocols, such as converting specific protocols used within an ad hoc network into standard protocols compatible with external networks, enabling interconnection and interoperability with different types of devices.

[0057] A method for monitoring secure access to key negotiation in a self-organizing network charging pile communication module, the method comprising the following steps:

[0058] S1. Initialization Phase:

[0059] S1.1 Each charging pile's communication module generates its own public-private key pair and broadcasts the public key to other charging piles in the self-organizing network.

[0060] S1.2 Charging piles exchange public keys and use a key negotiation algorithm to generate a shared key for subsequent encryption and decryption of communication data.

[0061] S2, Secure Access Monitoring Phase:

[0062] S2.1 When a new charging pile attempts to connect to the self-organizing network, the existing charging piles in the network authenticate it. The authentication includes checking whether the new charging pile's public key is valid, whether it is in the trust list, and confirming its identity through a specific challenge-response mechanism.

[0063] S2.2 During the communication process, continuously monitor the integrity and accuracy of data transmission, and verify whether the received data has been tampered with by calculating the hash value of the data or using the Message Authentication Code (MAC) method.

[0064] S2.3. The shared key is updated periodically. The new key is generated based on the existing keys of both parties and a new random number, through a key negotiation algorithm, to enhance the security of communication.

[0065] S2.4. Monitor communication traffic in real time, analyze traffic characteristics, and identify abnormal traffic behaviors, such as a sudden increase in traffic or abnormal data transmission frequency. Once an anomaly is detected, take appropriate security measures in a timely manner, such as blocking communication or issuing an alarm.

[0066] The authentication process specifically includes:

[0067] Existing charging stations send challenge messages containing random numbers to newly connected charging stations;

[0068] The newly connected charging pile uses its own private key to sign the random number in the challenge message and returns the signed result to the charging pile that initiated the challenge.

[0069] The charging station that initiates the challenge uses the public key of the newly connected charging station to verify the signature result. If the verification is successful, the identity of the newly connected charging station is confirmed as legitimate, and it is allowed to access the self-organizing network; otherwise, access is rejected.

[0070] Regarding data transmission integrity monitoring, specific implementation methods include:

[0071] When sending data, the sender calculates the hash value of the data and encrypts and sends the hash value along with the data.

[0072] After receiving the data, the receiver decrypts it, recalculates the hash value of the data, and compares it with the received hash value. If they match, the data transmission is considered complete and has not been tampered with. If they do not match, the data is deemed to have a problem, and the sender is required to resend the data.

[0073] The specific key negotiation algorithm in the shared key update step is as follows:

[0074] Both parties use the existing shared key as a seed, combine it with newly generated random numbers, and generate a new shared key through a specific key derivation function;

[0075] During the generation of a new key, both parties exchange intermediate calculation results to ensure that the generated new key is consistent, and the security of the new key is based on the security of the original key and the randomness of the random number.

[0076] For abnormal traffic monitoring, the following methods are used:

[0077] Establish a normal traffic model and determine the characteristic parameters under normal conditions by analyzing historical communication traffic data, including traffic mean, standard deviation, and data transmission interval.

[0078] The system monitors various characteristic parameters of the current communication traffic in real time and compares them with the normal traffic model. When the current traffic characteristic parameters exceed a certain threshold of the normal range, it is judged as abnormal traffic and the corresponding security response mechanism is triggered.

[0079] The security unit further includes:

[0080] Intrusion Detection Subunit: Based on machine learning algorithms, it performs real-time analysis of network behavior to identify potential intrusion behaviors and abnormal operation patterns;

[0081] Security Audit Subunit: Records and analyzes all system activities, generates security audit logs for post-incident tracking and security incident investigation.

[0082] This monitoring method also includes:

[0083] Physical layer security enhancement steps: Beamforming technology is used to transmit wireless signals in a directional manner, reducing the risk of signal interception;

[0084] Quantum key distribution auxiliary steps: In key communication links, quantum key distribution technology is introduced to generate unconditionally secure one-time encryption keys.

[0085] This monitoring method also includes:

[0086] Dynamic trust assessment steps: Based on the charging pile's historical behavior, communication quality, and security performance, dynamically adjust its trust level and implement stricter access control for charging piles with low trust levels.

[0087] Blockchain evidence storage steps: Key security events and communication records are stored in the blockchain to ensure that the data is immutable and to provide a reliable basis for security audits.

[0088] Example 1: Combined Application of Quantum Key Distribution and Blockchain Evidence Storage

[0089] In the power grid's demonstration charging pile project, 50 charging piles were selected to form a self-organizing network. The communication unit adopted a hybrid communication mode of 5G and Wi-Fi 6 to ensure high-speed data transmission. In response to the power grid's stringent requirements for data security, quantum key distribution technology was introduced into the key communication link to generate an absolutely secure one-time encryption key for each charging transaction, fundamentally eliminating the risk of key cracking. At the same time, key data such as charging orders and equipment operating status were stored in the blockchain in real time. Utilizing the immutable and traceable characteristics of the blockchain, the authenticity and integrity of the data were ensured. During the six-month operation, no data leakage or tampering incidents occurred. Moreover, when disputes arose over charging fees, data could be quickly retrieved for verification based on the blockchain evidence, improving dispute resolution efficiency by 80% and providing a solid guarantee for establishing trust between the power grid and users.

[0090] Example 2: Application of Machine Learning and Beamforming Technology

[0091] In a high-density commercial area parking lot, 40 charging piles were deployed. Due to the complex electromagnetic environment and significant wireless signal interference in the area, the radio frequency module of the communication unit adopted beamforming technology to direct the wireless signal to the target charging pile, reducing the probability of signal interference by 75%. At the same time, the security unit used machine learning algorithms to analyze network behavior in real time and build a dynamic network behavior model. By learning from multi-dimensional data such as the charging data interaction frequency, data traffic size, and communication protocol characteristics of the charging piles, it can not only accurately identify known attack patterns but also provide early warnings for new abnormal behaviors. In actual operation, it successfully identified and intercepted 5 unknown attack attempts against the charging piles while ensuring the stability of data transmission. The communication interruption rate was only 0.2%, effectively improving the security and reliability of the charging pile network in the commercial area.

[0092] Example 3: Collaborative Application of Dynamic Trust Assessment and Protocol Conversion

[0093] In a large logistics park with multiple operators, 60 charging piles from different manufacturers need to be networked. The protocol conversion module of the communication unit supports the conversion of multiple protocols, including TCP / IP, MQTT, and CoAP, enabling seamless data integration between charging piles from different manufacturers and the park management system and operator backend. At the same time, based on a dynamic trust assessment mechanism, the trust level of each charging pile is adjusted in real time according to factors such as the historical charging service quality, data interaction stability, and security incident occurrences. For charging piles with lower trust levels, their access to sensitive data is restricted, allowing only basic charging service data interaction. For charging piles with higher trust levels, higher data access permissions and resource scheduling priority are granted. In this way, network risks caused by insufficient security performance of some charging piles are effectively avoided. The overall service quality of charging piles in the park is improved by 30%, and the equipment failure rate is reduced by 25%.

[0094] Example 4: Integrated Application of Edge Computing and Intelligent Scheduling Technologies

[0095] In a large industrial park, 80 charging piles were deployed. Considering the high-frequency charging needs of electric forklifts, logistics vehicles, and other equipment in the park, a combination of edge computing and intelligent scheduling technologies was adopted. Edge computing nodes were deployed near the charging piles to process charging data in real time, reducing the latency of data transmission back to the cloud and improving the response speed of charging control commands by 60%. The intelligent scheduling algorithm dynamically allocated charging resources based on factors such as vehicle charging demand, charging pile load, and peak and off-peak periods of the power grid. During off-peak periods, priority was given to fast charging vehicles with shorter ranges, while during peak periods, power was evenly distributed to avoid grid overload. After three months of operation, the average utilization rate of the charging piles in the park increased from 45% to 70%, while electricity costs were reduced by 18%.

[0096] Example 5: Linked Application of BeiDou Positioning and Abnormal Traffic Monitoring

[0097] At a dedicated charging station for new energy taxis in the city, 35 charging piles were deployed. Combining BeiDou positioning technology with an abnormal traffic monitoring mechanism, the charging piles obtain real-time vehicle location information through BeiDou positioning and bind it to charging order data to prevent malicious occupation of charging piles or data forgery. The abnormal traffic monitoring system analyzes the data traffic during the charging process in real time. When it detects a mismatch between the vehicle location and the charging location, or abnormal fluctuations in data traffic (such as data transmission volume exceeding three times the normal level in a short period of time), it immediately triggers an alert and suspends the charging service. In practical applications, 12 abnormal charging behaviors were successfully identified and handled, effectively ensuring the standardization and safety of the charging service, and reducing the user complaint rate by 65%.

[0098] Example 6: Collaborative Application of Digital Twin and Security Audit

[0099] At the testing ground of a new energy vehicle manufacturing company, 20 charging piles were deployed for charging test vehicles. A digital twin system for the charging piles was built, and sensors collected real-time operating data such as voltage, current, and temperature of the charging piles. A 1:1 digital model was built in virtual space to achieve real-time simulation and predictive maintenance of the charging piles' operating status. The accuracy rate of early detection of potential faults reached 85%. The safety audit subunit combined the digital twin data to record and analyze every operation of the charging piles in detail, including charging start and stop, parameter adjustment, and abnormal events. Once a safety problem occurs, the entire process can be traced back based on the digital twin model to quickly locate the cause of the fault and the responsible party. Within six months of operation, the fault diagnosis time was reduced from an average of 4 hours to 1 hour, which greatly improved the operation and maintenance management efficiency of the charging piles at the testing ground.

[0100] The above specific embodiments further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above are merely specific embodiments of the present invention and do not limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the protection scope of the present invention.

Claims

1. A self-organizing network charging pile communication module, characterized in that, include: Communication unit: It has wireless communication function, which is used to transmit data with other charging piles and external devices. It supports multiple communication protocols and can adapt to different network environments to ensure stable communication. Control unit: Responsible for managing the overall operation of the communication module, coordinating the work between various units, processing and scheduling the received and transmitted data, and adjusting the working parameters according to the communication status; Storage unit: Stores the charging pile's configuration information, communication keys, historical communication data, and relevant rules and records for secure access monitoring. It has data backup and recovery functions to ensure data security and integrity. Security Unit: Employs encryption algorithms to encrypt and decrypt transmitted data, preventing data theft or tampering, implementing an identity authentication mechanism to verify the legitimacy of communication objects, possessing the ability to resist common network attacks, and maintaining the secure operation of the communication module; The self-organizing network charging pile communication module can be applied to the following methods: S1. Initialization Phase: S1.1 Each charging pile's communication module generates its own public-private key pair and broadcasts the public key to other charging piles in the self-organizing network; S1.2 Charging piles exchange public keys and use a key negotiation algorithm to generate a shared key for subsequent encryption and decryption of communication data; S2, Secure Access Monitoring Phase: S2.1 When a new charging pile attempts to access the ad hoc network, the existing charging piles in the network authenticate it. The authentication process specifically includes: the existing charging piles in the network send a challenge message containing a random number to the newly accessing charging pile; the newly accessing charging pile uses its own private key to sign the random number in the challenge message and returns the signed result to the charging pile that initiated the challenge; the charging pile that initiated the challenge uses the public key of the newly accessing charging pile to verify the signature result. If the verification is successful, the identity of the newly accessing charging pile is confirmed as legitimate, and it is allowed to access the ad hoc network; otherwise, access is rejected. S2.2 During the communication process, continuously monitor the integrity and accuracy of data transmission, and verify whether the received data has been tampered with by calculating the hash value of the data or using the Message Authentication Code (MAC) method. S2.

3. The shared key is updated regularly. The new key is generated based on the existing keys of both parties and a new random number through a key negotiation algorithm to enhance the security of communication. S2.

4. Monitor communication traffic in real time, analyze traffic characteristics, and establish a normal traffic model. The normal traffic model determines characteristic parameters under normal conditions by analyzing historical communication traffic data, including traffic mean, standard deviation, and data transmission interval. Monitor the various characteristic parameters of the current communication traffic in real time and compare them with the normal traffic model. When the current traffic characteristic parameters exceed a certain threshold within the normal range, it is determined to be abnormal traffic, and the corresponding security response mechanism is triggered.

2. The self-organizing network charging pile communication module according to claim 1, characterized in that: The communication unit further includes: Radio frequency module: Responsible for transmitting and receiving wireless signals, with adjustable transmission power and receiving sensitivity, and can automatically adjust the working mode according to the signal strength to adapt to different communication distances and environmental interference; Protocol conversion module: Supports conversion between multiple communication protocols, converting specific protocols used within the ad hoc network into standard protocols compatible with external networks, enabling interconnection and interoperability with different types of devices.

3. The self-organizing network charging pile communication module according to claim 1, characterized in that: Regarding data transmission integrity monitoring, specific implementation methods include: When sending data, the sender calculates the hash value of the data and encrypts and sends the hash value along with the data. After receiving the data, the receiver decrypts it, recalculates the hash value of the data, and compares it with the received hash value. If they match, the data transmission is considered complete and has not been tampered with. If they do not match, the data is deemed to have a problem, and the sender is required to resend the data.

4. The self-organizing network charging pile communication module according to claim 1, characterized in that: The specific key negotiation algorithm in the shared key update step is as follows: Both parties use the existing shared key as a seed, combine it with newly generated random numbers, and generate a new shared key through a specific key derivation function; During the generation of a new key, both parties exchange intermediate calculation results to ensure that the generated new key is consistent, and the security of the new key is based on the security of the original key and the randomness of the random number.

5. The self-organizing network charging pile communication module according to claim 1, characterized in that: The security unit further includes: Intrusion Detection Subunit: Based on machine learning algorithms, it performs real-time analysis of network behavior to identify potential intrusion behaviors and abnormal operation patterns; Security Audit Subunit: Records and analyzes all system activities, generates security audit logs for post-incident tracking and security incident investigation.

6. The self-organizing network charging pile communication module according to claim 1, characterized in that: This monitoring method also includes: Physical layer security enhancement steps: Beamforming technology is used to transmit wireless signals in a directional manner, reducing the risk of signal interception; Quantum key distribution auxiliary steps: In key communication links, quantum key distribution technology is introduced to generate unconditionally secure one-time encryption keys.

7. The self-organizing network charging pile communication module according to claim 1, characterized in that: This monitoring method also includes: Dynamic trust assessment steps: Based on the charging pile's historical behavior, communication quality, and security performance, dynamically adjust its trust level and implement stricter access control for charging piles with low trust levels. Blockchain evidence storage steps: Key security events and communication records are stored in the blockchain to ensure that the data is immutable and to provide a reliable basis for security audits.

Images