Lightweight dynamic robust authentication method for electric vehicle and charging pile and medium

Abstract

The invention relates to a lightweight dynamic robust authentication method for an electric vehicle and a charging pile and a medium, and the method specifically comprises the following steps: constructing a trusted authentication center, registering the charging pile and the electric vehicle, and generating and storing registration data; when the electric vehicle is connected with the charging pile, registration information is read, first verification information is generated and sent to the charging pile, and the charging pile uploads the information to the authentication center to verify whether the electric vehicle is legal; if yes, the charging pile generates second verification information and sends the second verification information to the electric vehicle, and the electric vehicle verifies whether the charging pile is legal or not by combining the two types of verification information; if yes, the electric vehicle generates a charging secret key and sends a charging request, the charging pile returns a response and then starts charging, and identity credibility and safe charging of the two parties are achieved.

Description

TECHNICAL FIELD

[0001] The application relates to a lightweight dynamic robust authentication method for an electric vehicle and a charging pile and a medium, and belongs to the technical field of vehicle-network interaction. BACKGROUND

[0002] The large-scale deployment of electric vehicles and charging piles leads to a sharp increase in the number of access terminals, and the data interaction between electric vehicles and power grids is increasingly frequent, and the vehicle-to-grid (V2G) interaction brings a typical "massive heterogeneous device security access" problem.

[0003] These terminal devices are generally limited in computing and storage capabilities, and are difficult to support traditional complex encryption authentication mechanisms; at the same time, static key mechanisms are easy to be cloned or replayed, and the security is weak; the authentication process is also affected by environmental noise, temperature changes and device aging, etc., resulting in a decrease in authentication accuracy or even failure. Under this background, how to guarantee the lightweight, dynamic and robustness of authentication and realize the security access of massive heterogeneous devices has become a key technical problem to be broken through at present.

[0004] In the face of the above challenges, the first concern is the realistic demand for lightweight authentication. In the scenario of massive vehicle-pile terminal access, electric vehicles and charging piles are generally limited in computing, storage and energy consumption. Traditional authentication mechanisms relying on public key infrastructure (PKI) or symmetric encryption algorithms are difficult to run efficiently on such devices due to the involvement of large number operations and complex protocol interactions. Some systems use static keys or pre-installed certificates to reduce the load, but at the same time, they sacrifice the security of the key, which poses a risk of being copied or extracted.

[0005] Secondly, the connection between vehicle and pile is not a one-time operation, but occurs frequently throughout the life cycle. Most current authentication schemes use static keys or fixed identity parameters, which, once leaked or copied, will expose all subsequent authentication interactions to risk, making them vulnerable to replay attacks and identity forgery. Therefore, the dynamic nature of the authentication mechanism is also a key factor affecting system security. However, existing schemes generally lack dynamic evolution design of authentication state, making it difficult to automatically update security parameters based on interaction behavior or time lapse.

[0006] In summary, the large number of electric vehicles and charging devices in the vehicle-to-grid interaction context has brought a series of problems such as limited terminal resources, static authentication mechanism vulnerable to attack, and unstable authentication in complex environments. SUMMARY

[0007] In order to solve the problems existing in the prior art, the application provides a lightweight dynamic robust authentication method for an electric vehicle and a charging pile and a medium.

[0008] The technical solution of the application is as follows: In one aspect, the application provides a lightweight dynamic robust authentication method for electric vehicles and charging piles, comprising the following steps: A trusted authentication center is constructed, and registration information of the charging pile is input into the trusted authentication center for registration to generate registration data of the charging pile and return to the charging pile for storage, and the charging pile completes registration; The registration information of the electric vehicle is input into the trusted authentication center for registration to generate registration data of the electric vehicle and store in the trusted authentication center, and the electric vehicle completes registration; When the electric vehicle is connected with the charging pile, the electric vehicle reads the registration information and registration data of the charging pile, combines its own registration information to generate first verification information, and inputs the first verification information into the charging pile; The charging pile extracts the registration information of the electric vehicle based on the received first verification information and uploads to the trusted authentication center to query the registration record, if no registration record is queried, the electric vehicle is registered, otherwise, the registration data of the electric vehicle is requested from the trusted authentication center and based on the registration data, whether the electric vehicle is legal is verified; If the electric vehicle is legal, the charging pile generates second verification information based on the received first verification information and sends it to the electric vehicle, and the electric vehicle verifies whether the charging pile is legal according to the first verification information and the second verification information; If the charging pile is legal, the electric vehicle verifies and generates a charging key according to the first verification information and the second verification information and stores it; The electric vehicle generates a charging request based on the charging key and sends it to the charging pile, the charging pile generates a charging response and returns to the electric vehicle and starts charging.

[0009] Preferably, the specific steps of the charging pile registered in the trusted authentication center are: The charging pile inputs its registration information into the trusted authentication center, and the registration information of the charging pile includes the unique identifier of the charging pile; The trusted authentication center generates a first random parameter after receiving the unique identifier, and generates the registration data of the charging pile by splicing the first random parameter with the unique identifier and then through a hash algorithm, and returns to the charging pile for storage.

[0010] Preferably, the specific steps of the electric vehicle registered in the trusted authentication center are: The electric vehicle inputs its first registration information after encryption into the trusted authentication center, and the first registration information of the electric vehicle includes the unique identity of the electric vehicle; The trusted authentication center receives the encrypted first registration information of the electric vehicle, randomly generates a first challenge value and sends it to the electric vehicle; The electric vehicle generates a corresponding first response value based on the first challenge value through a physically unclonable function and stores it; The electric vehicle randomly generates a key, splices the key with the first response value, and generates a first key through a hash algorithm, stores the first key locally, and sends second registration information, which is a combination of the encrypted first registration information, the first response value, and the first key, to the trusted authentication center; The trusted authentication center stores the second registration information as registration data of the electric vehicle.

[0011] Preferably, when the electric vehicle is connected to the charging pile, the electric vehicle reads the registration information and registration data of the charging pile, combines the first verification information with its own registration information to generate the first verification information, and inputs the first verification information into the charging pile, wherein the first verification information includes the twice-encrypted first registration information of the electric vehicle, the first verification random number, the encrypted first key, and the first local check value. The twice-encrypted first registration information of the electric vehicle is specifically obtained by splicing the registration information of the charging pile, the encrypted registration data, and the first verification random number, calculating a hash value through a hash algorithm, and then performing an exclusive or operation on the hash value and the encrypted first registration information of the electric vehicle. The encrypted first key is specifically obtained by storing a first random number generated by the electric vehicle, and then performing an exclusive or operation on the first random number and the first key. The first verification random number is randomly generated by the electric vehicle. The first local check value is specifically obtained by splicing the encrypted first key and the first key, and then calculating through a hash algorithm.

[0012] Preferably, the specific steps for the charging pile to verify the legality of the electric vehicle are as follows: After receiving the first verification information, the charging pile decrypts the first verification information to extract the encrypted first registration information of the electric vehicle. The charging pile uploads the encrypted first registration information of the electric vehicle to the trusted authentication center to query the registration record, and if no registration record is found, the electric vehicle is registered, otherwise, the registration data of the electric vehicle is requested from the trusted authentication center. The charging pile splices the first key in the requested registration data of the electric vehicle with the encrypted first key in the first verification information, and then performs a hash operation to obtain a second local check value. The second local check value is compared with the first local check value in the first verification information for consistency, and if the comparison result is consistent, the electric vehicle is considered to be legal.

[0013] Preferably, the second verification information generated by the charging pile based on the received first verification information includes an encrypted first challenge value, an encrypted first response value, a second key, and a third local check value. The encrypted first challenge value is obtained by performing XOR operation between the first challenge value and the first key in the requested registration data; The encrypted first response value is obtained by performing XOR operation between the first response value and the first key in the requested registration data; The second key is obtained by performing XOR operation between the second random number randomly generated by the charging pile and the first key, and the second random number is stored in the charging pile; The specific steps for constructing the third local check value are as follows: The charging pile restores the first random number by performing XOR operation between the encrypted first key in the first verification information and the first key in the requested registration data; The third local check value is obtained by performing splicing between the second key, the first key in the requested registration data, the encrypted first response value and the restored first random number, and then performing calculation through a hash algorithm.

[0014] Preferably, the specific steps for the electric vehicle to verify the legality of the charging pile are as follows: The electric vehicle restores the first response value by performing XOR operation between the encrypted first response value in the received second verification information and the first key stored in the electric vehicle; The first response value stored in the electric vehicle is divided into two segments according to a fixed length, and the restored first response value is also divided into two segments according to the fixed length; The first half of the first response value stored in the electric vehicle is calculated with the first half of the restored first response value according to the fractional Hamming distance, and if the calculation result is less than a preset fractional Hamming distance threshold, the current charging pile is considered to be legal.

[0015] Preferably, the charging key includes an electric vehicle charging key and a charging pile charging key, and the specific construction steps are as follows: The electric vehicle restores the second random number by performing XOR operation between the second key in the received second verification information and the first key stored in the electric vehicle; The electric vehicle restores the second random number by performing XOR operation between the second key in the received second verification information and the first key stored in the electric vehicle; The charging pile divides the first response value in the requested electric vehicle registration data into two segments according to a fixed length, and then splices the restored first random number, the locally stored second random number and the second half of the first response value in the requested electric vehicle registration data to obtain the charging pile charging key through a hash algorithm.

[0016] On the other hand, the application also provides a computer readable storage medium, which stores a computer program, and the program is executed by a processor to realize the method as described in the application.

[0017] The present application has the following beneficial effects: 1、The present application uses physical unclonable function (PUF) to extract the inherent characteristics of electric vehicle hardware to generate authentication credentials, without relying on traditional key storage and complex encryption operations, greatly reducing the calculation and storage pressure of vehicle-mounted and charging equipment in the authentication process, and improving the adaptability and operation efficiency of the system in a resource-limited environment.

[0018] 2、The present application constructs a dynamic authentication mechanism based on a chain challenge-response generation, so that the authentication parameters used in each authentication interaction are updated over time and behavior evolution, effectively preventing static keys from being copied, misused or replayed, and significantly enhancing the dynamic security and attack protection capability of the authentication system.

[0019] 3、The present application introduces a fractional Hamming distance (FHD) mechanism, which tolerates small response deviations through FHD comparison, enhances the adaptability of the system to environmental fluctuations and device aging instability, and improves the authentication robustness. BRIEF DESCRIPTION OF DRAWINGS

[0020] Figure 1 The present application is a method flowchart. DETAILED DESCRIPTION

[0021] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0022] It should be understood that the step numbers used herein are only for the convenience of description, and are not limited to the execution sequence of the steps.

[0023] It should be understood that the terms used in the present application are only for the purpose of describing specific embodiments and are not intended to limit the present application. As used in the present application specification and the appended claims, unless otherwise clear from the context, the singular forms "a", "an" and "the" are intended to include the plural forms.

[0024] The terms "comprise" and "include" indicate the presence of the described features, whole, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, whole, steps, operations, elements, components and / or sets thereof.

[0025] The term "and / or" means any combination of one or more of the associated listed items and all possible combinations, and includes these combinations.

[0026] Referring to Figure 1 A lightweight dynamic robust authentication method for electric vehicles and charging piles, comprising the following steps: A trusted authentication center is constructed, and the registration information of the charging pile is input into the trusted authentication center for registration to generate registration data of the charging pile and return to the charging pile for storage, and the charging pile completes registration; The registration information of the electric vehicle is input into the trusted authentication center for registration to generate the registration data of the electric vehicle and store it in the trusted authentication center, and the electric vehicle completes registration; When the electric vehicle is connected with the charging pile, the electric vehicle reads the registration information and registration data of the charging pile, combines its own registration information to generate first verification information, and inputs the charging pile; The charging pile extracts the registration information of the electric vehicle based on the received first verification information and uploads it to the trusted authentication center to query the registration record, and if no registration record is found, the electric vehicle is registered, otherwise the registration data of the electric vehicle is requested from the trusted authentication center and based on the registration data The electric vehicle is verified whether it is legal; If the electric vehicle is legal, the charging pile generates second verification information based on the received first verification information and sends it to the electric vehicle, and the electric vehicle verifies whether the charging pile is legal according to the first verification information and the second verification information; If the charging pile is legal, the electric vehicle verifies the charging key according to the first verification information and the second verification information and stores it; The electric vehicle generates a charging request based on the charging key and sends it to the charging pile, and the charging pile generates a charging response and returns to the electric vehicle and starts charging.

[0027] In one specific embodiment, the trusted authentication center serves as a management and storage platform for device registration information, for unified management of device identity and authentication data.

[0028] In some embodiments, the specific steps for the charging pile to register in the trusted authentication center are: The charging pile inputs its registration information into the trusted authentication center, and the registration information of the charging pile includes the unique identifier of the charging pile; The trusted authentication center receives the unique identifier, generates a first random parameter, and concatenates the first random parameter with the unique identifier to generate the registration data of the charging pile through a hash algorithm and returns to the charging pile for storage.

[0029] In some embodiments, the specific steps for the electric vehicle to register in the trusted authentication center are: The electric vehicle inputs its first registration information after encryption into the trusted authentication center, and the first registration information of the electric vehicle includes the unique identity of the electric vehicle; The trusted authentication center receives the encrypted first registration information of the electric vehicle, generates a first challenge value at random, and sends the first challenge value to the electric vehicle; The electric vehicle generates a corresponding first response value based on the first challenge value through a physically unclonable function (PUF) and stores the first response value; The electric vehicle generates a key at random, concatenates the key with the first response value, and generates a first key through a hash algorithm, stores the first key locally, and sends second registration information to the trusted authentication center, wherein the second registration information is obtained by combining the encrypted first registration information, the first response value, and the first key; The trusted authentication center stores the second registration information as registration data of the electric vehicle.

[0030] In some embodiments, when the electric vehicle is connected to the charging pile, the electric vehicle reads the registration information and the registration data of the charging pile, combines the registration information and the registration data with its own registration information to generate first verification information, and inputs the first verification information into the charging pile, wherein the first verification information includes twice-encrypted first registration information of the electric vehicle, a first verification random number, an encrypted first key, and a first local check value; The twice-encrypted first registration information of the electric vehicle is obtained by performing XOR operation on a hash value calculated through a hash algorithm by concatenating the registration information of the charging pile, the encrypted registration data, and the first verification random number, and the encrypted first registration information of the electric vehicle; The encrypted first key is obtained by performing XOR operation on the first random number and the first key after storing the first random number generated at random by the electric vehicle; The first verification random number is generated at random by the electric vehicle; The first local check value is obtained by performing hash calculation on the encrypted first key and the first key after concatenating the encrypted first key and the first key.

[0031] In a specific embodiment, the encrypted registration data of the charging pile is obtained by performing hash calculation on the registration data of the charging pile.

[0032] In some embodiments, the specific steps for the charging pile to verify the legitimacy of the electric vehicle are as follows: The charging pile receives the first verification information, decrypts the first verification information, and extracts the encrypted first registration information of the electric vehicle; The charging pile uploads the encrypted first registration information of the electric vehicle to the trusted authentication center to query the registration record, registers the electric vehicle if no registration record is found, or requests the registration data of the electric vehicle from the trusted authentication center; The charging pile concatenates the first key in the requested electric vehicle registration data and the encrypted first key in the first verification information, and then performs a hash operation to obtain a second local check value; The second local check value is compared with the first local check value in the first verification information for consistency. If the comparison result is consistent, the electric vehicle is considered to be legal.

[0033] In some embodiments, the second verification information generated by the charging pile based on the received first verification information includes an encrypted first challenge value, an encrypted first response value, a second key, and a third local check value; The encrypted first challenge value is obtained by performing an exclusive or operation on the first challenge value and the first key in the requested registration data; The encrypted first response value is obtained by performing an exclusive or operation on the first response value and the first key in the requested registration data; The second key is obtained by performing an exclusive or operation on the first key and a second random number randomly generated by the charging pile, and the second random number is stored in the charging pile; The specific steps for constructing the third local check value are as follows: The charging pile restores the first random number by performing an exclusive or operation on the encrypted first key in the first verification information and the first key in the requested registration data; The second key, the first key in the requested registration data, the encrypted first response value, and the restored first random number are concatenated and calculated by a hash algorithm to obtain the third local check value.

[0034] In some embodiments, the specific steps for the electric vehicle to verify the legality of the charging pile are as follows: The electric vehicle performs an exclusive or operation on the encrypted first response value in the received second verification information and the first key stored internally to obtain a restored first response value; The first response value stored locally in the electric vehicle is divided into two segments according to a fixed length, and the restored first response value is also divided into two segments according to a fixed length; The first half of the locally stored first response value and the first half of the restored first response value are calculated by the fractional Hamming distance. If the calculation result is less than a preset fractional Hamming distance threshold, the current charging pile is considered to be legal.

[0035] In some embodiments, the charging key includes an electric vehicle charging key and a charging pile charging key, and the specific construction steps are as follows: The electric vehicle performs an exclusive or operation on the second key in the received second verification information and the first key stored internally to obtain a restored second random number; The electric vehicle concatenates the locally-stored first random number, the locally-stored first challenge value, the restored second random number, and the restored second half of the first response value, and calculates an electric vehicle charging key through a hash algorithm; The charging pile divides the first response value in the requested electric vehicle registration data into two parts according to a fixed length, and then concatenates the restored first random number, the locally-stored second random number, and the second half of the first response value in the requested electric vehicle registration data, and calculates a charging pile charging key through a hash algorithm.

[0036] In some embodiments, whenever the current legitimacy authentication between the electric vehicle and the charging pile succeeds, the trusted authentication center updates the registration data of the electric vehicle, and the specific steps are as follows: After the current legitimacy authentication between the electric vehicle and the charging pile succeeds, the electric vehicle performs an exclusive-OR operation on the encrypted first challenge value in the received second verification information and the internally-stored first key, to obtain a restored first challenge value; The electric vehicle concatenates the restored first challenge value, the locally-stored first random number, and the restored second random number, and calculates a new first challenge value through a hash algorithm, and then performs an exclusive-OR operation on the new first challenge value and the locally-stored first key to obtain an encrypted new first challenge value; The electric vehicle calculates a new first response value based on the new first challenge value through a physically unclonable function, and then performs an exclusive-OR operation on the new first response value and the locally-stored first key to obtain an encrypted new first response value; The electric vehicle performs an exclusive-OR operation on the second half of the restored first response value and the internally-stored first key, to obtain the second half of the encrypted first response value; The electric vehicle combines the encrypted new first challenge value, the encrypted new first response value, and the second half of the encrypted first response value into third verification information, and sends the third verification information to the charging pile; The charging pile performs an exclusive-OR operation on the second half of the encrypted first response value in the received third verification information and the first key in the requested electric vehicle registration data, to obtain the second half of the restored first response value; The charging pile calculates a fractional Hamming distance between the second half of the first response value in the requested electric vehicle registration data and the second half of the restored first response value, and when the calculated fractional Hamming distance is less than a preset fractional Hamming distance threshold, the third verification information is considered to be legitimate; After judging that the third verification information is legal, the charging pile performs XOR operation on the encrypted new first challenge value and the encrypted new first response value in the third verification information and the first key in the requested electric vehicle registration data respectively to obtain the restored new first challenge value and the restored new first response value, and the charging pile performs splicing on the first response value in the requested electric vehicle registration data and the first key and then calculates a new first key through a hash algorithm; The charging pile uploads the restored new first challenge value, the restored new first response value and the new first key to the trusted authentication center to replace the registration data of the electric vehicle for next time authentication.

[0037] In a specific embodiment, the construction step of the charging request sent by the electric vehicle to the charging pile is as follows: The electric vehicle performs splicing on the encrypted electric vehicle first registration information, the extracted charging pile registration data, the electric vehicle charging key and the constructed charging information and then calculates a charging request through a hash algorithm. The charging information includes information related to this time of charging, such as charging power, charging duration, charging fee, etc.

[0038] In a specific embodiment, the charging pile constructs a charging response and returns it to the charging vehicle after receiving the charging request; The charging response is obtained by performing splicing on the encrypted electric vehicle first registration information extracted by the charging pile, the charging pile registration data, the charging pile charging key and the constructed charging request state and then calculating through a hash algorithm; The charging request state indicates the state of this time of charging request, including success, failure and end, and the charging request state judgment step is as follows: After decrypting the charging request through a hash algorithm, a decrypted charging request is obtained, and the electric vehicle charging key and the charging pile charging key are compared for consistency. If the comparison result is consistent, it is judged that the request is valid, and the charging request state is output as success, otherwise the charging request state is output as failure; If the state is success, the charging pile charges the electric vehicle according to the charging information in the decrypted charging request.

[0039] In a specific embodiment, when the electric vehicle is fully charged, a charging end request is sent to the charging pile, and the charging pile stops charging after receiving the charging end request; The charging end request is obtained by performing splicing on the encrypted electric vehicle first registration information, the extracted charging pile registration data, the electric vehicle charging key, the charging request state with the state of end and the charging information and then calculating through a hash algorithm.

[0040] In a specific embodiment, the hash algorithm is MD5 algorithm.

[0041] In one specific embodiment, the hash algorithm is a SHA hash algorithm.

[0042] In some embodiments, a computer readable storage medium is provided, having stored thereon a computer program which, when executed by a processor, implements the method according to any of the embodiments of the application.

[0043] In the embodiments of the present application, "at least one" means one or more, and "multiple" means two or more. The "and / or" describes the association relationship of the associated objects, which means that there can be three kinds of relationships, for example, A and / or B, which can represent the cases of A alone, A and B together, and B alone. Wherein A, B can be singular or plural. The character " / " generally represents that the associated objects before and after it are in an "or" relationship. "At least one of the following" and the like expressions mean any combination of these items, including any combination of single or multiple items. For example, at least one of a, b and c can represent: a, b, c, a and b, a and c, b and c, or a and b and c, wherein a, b, c can be single or multiple.

[0044] Those of ordinary skill in the art can be aware that each unit and algorithm step described in the embodiments disclosed herein can be implemented by electronic hardware, computer software and a combination of the two. Whether the functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present application.

[0045] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be described here.

[0046] In several embodiments provided in the present application, any function, if realized in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or the parts of the technical solutions that essentially contribute to the prior art or the parts of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in the embodiments of the present application. The aforementioned storage medium includes a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0047] The above description is only some embodiments of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation, or direct or indirect application in other related technical fields, based on the content of the specification and drawings of the present application, are also included in the patent protection scope of the present application.

Claims

1. A lightweight dynamic robust authentication method for electric vehicles and charging piles, characterized in that, The method comprises the following steps: A trusted authentication center is constructed, and registration information of the charging pile is input into the trusted authentication center for registration to generate registration data of the charging pile and return to the charging pile for storage, and the charging pile completes the registration; Registration information of the electric vehicle is input into the trusted authentication center for registration to generate registration data of the electric vehicle and store in the trusted authentication center, and the electric vehicle completes the registration; When the electric vehicle is connected with the charging pile, the electric vehicle reads the registration information and the registration data of the charging pile, combines the registration information of the electric vehicle to generate first verification information and inputs the first verification information into the charging pile; The charging pile extracts the registration information of the electric vehicle based on the received first verification information and uploads to the trusted authentication center to query the registration record, if the registration record is not queried, the electric vehicle is registered, otherwise, the trusted authentication center is requested for the registration data of the electric vehicle, and whether the electric vehicle is legal is verified based on the registration data; If the electric vehicle is legal, the charging pile generates second verification information based on the received first verification information and sends the second verification information to the electric vehicle, and the electric vehicle verifies whether the charging pile is legal according to the first verification information and the second verification information; If the charging pile is legal, the electric vehicle verifies and generates a charging key according to the first verification information and the second verification information and stores the charging key; The electric vehicle generates a charging request based on the charging key and sends the charging request to the charging pile, the charging pile generates a charging response and returns to the electric vehicle and starts charging.

2. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 1, characterized in that, The specific steps of the charging pile registered in the trusted authentication center are: The charging pile inputs its registration information into the trusted authentication center, and the registration information of the charging pile includes a unique identifier of the charging pile; The trusted authentication center generates a first random parameter after receiving the unique identifier, splices the first random parameter with the unique identifier, generates the registration data of the charging pile through a hash algorithm and returns to the charging pile for storage.

3. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 2, characterized in that, The specific steps of the electric vehicle registered in the trusted authentication center are: The electric vehicle inputs the encrypted first registration information into the trusted authentication center, and the first registration information of the electric vehicle includes a unique identifier of the electric vehicle; The trusted authentication center receives the encrypted first registration information of the electric vehicle, randomly generates a first challenge value and sends the first challenge value to the electric vehicle; The electric vehicle generates a corresponding first response value through a physically unclonable function based on the first challenge value and stores the first response value; The electric vehicle randomly generates a key, splices the key with the first response value, generates a first key through a hash algorithm, stores the first key locally, combines the encrypted first registration information, the first response value and the first key as second registration information and sends the second registration information to the trusted authentication center; The trusted authentication center stores the second registration information as the registration data of the electric vehicle.

4. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 3, characterized in that, When the electric vehicle is connected with the charging pile, the electric vehicle reads the registration information and the registration data of the charging pile, combines the registration information of the electric vehicle to generate first verification information and inputs the first verification information into the charging pile, and the first verification information includes twice-encrypted first registration information of the electric vehicle, a first verification random number, an encrypted first key and a first local check value; The twice-encrypted electric vehicle first registration information is specifically obtained by performing XOR operation on a hash value obtained by splicing charging pile registration information, encrypted registration data and a first verification random number and performing the hash algorithm on the encrypted electric vehicle first registration information. The encrypted first key is specifically obtained by performing XOR operation on the first random number and the first key after the first random number is stored by the electric vehicle. The first verification random number is randomly generated by the electric vehicle. The first local check value is specifically obtained by performing the hash algorithm on the spliced encrypted first key and the first key.

5. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 4, characterized in that, The specific steps for the charging pile to verify the legality of the electric vehicle are as follows: After receiving the first verification information, the charging pile decrypts the first verification information to extract the encrypted electric vehicle first registration information; The charging pile uploads the encrypted electric vehicle first registration information to the trusted authentication center to query the registration record, and if no registration record is found, the electric vehicle is registered, otherwise, the registration data of the electric vehicle is requested from the trusted authentication center; The first key in the requested electric vehicle registration data and the encrypted first key in the first verification information are spliced and then hashed to obtain a second local check value; The second local check value and the first local check value in the first verification information are compared for consistency, and if the comparison result is consistent, the electric vehicle is considered to be legal.

6. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 5, characterized in that, The second verification information generated by the charging pile based on the received first verification information includes an encrypted first challenge value, an encrypted first response value, a second key and a third local check value; The encrypted first challenge value is obtained by performing XOR operation on the first challenge value and the first key in the requested registration data; The encrypted first response value is obtained by performing XOR operation on the first response value and the first key in the requested registration data; The second key is obtained by performing XOR operation on the second random number randomly generated by the charging pile and the first key, and the second random number is stored in the charging pile; The specific steps for constructing the third local check value are as follows: The charging pile restores the first random number by performing XOR operation on the encrypted first key in the first verification information and the first key in the requested registration data; The second key, the first key in the requested registration data, the encrypted first response value and the restored first random number are spliced and then hashed to obtain the third local check value.

7. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 6, characterized in that, The specific steps for the electric vehicle to verify the legality of the charging pile are as follows: The electric vehicle obtains the restored first response value by performing XOR operation on the encrypted first response value in the received second verification information and the first key stored in the electric vehicle; The first response value stored locally in the electric vehicle is divided into two segments according to a fixed length, and the restored first response value is also divided into two segments according to the fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length, and the first response value stored locally is divided into two segments according to a fixed length; The first response value stored locally is divided into two segments according to a fixed length 8. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 7, characterized in that, The charging key includes an electric vehicle charging key and a charging pile charging key, and the specific construction steps are as follows: The electric vehicle performs exclusive OR operation on the second key in the received second verification information and the internally stored first key to obtain a restored second random number; The electric vehicle splices the locally stored first random number, the locally stored first challenge value, the restored second random number and the back half of the restored first response value, and then calculates an electric vehicle charging key through a hash algorithm; The charging pile divides the first response value in the requested electric vehicle registration data into two segments according to a fixed length, and then splices the restored first random number, the locally stored second random number and the back half of the first response value in the requested electric vehicle registration data, and then calculates a charging pile charging key through a hash algorithm.

9. The lightweight dynamic robust authentication method for electric vehicles and charging piles according to claim 8, characterized in that, When the current legality authentication between the electric vehicle and the charging pile succeeds, the trusted authentication center updates the registration data of the electric vehicle, and the specific steps are as follows: When the current legality authentication between the electric vehicle and the charging pile succeeds, the electric vehicle performs exclusive OR operation on the encrypted first challenge value in the received second verification information and the internally stored first key to obtain a restored first challenge value; The electric vehicle splices the restored first challenge value, the locally stored first random number and the restored second random number, and then calculates a new first challenge value through a hash algorithm, and then performs exclusive OR operation on the new first challenge value and the locally stored first key to obtain an encrypted new first challenge value; The electric vehicle calculates a new first response value based on the new first challenge value through a physically unclonable function, and then performs exclusive OR operation on the new first response value and the locally stored first key to obtain an encrypted new first response value; The electric vehicle performs exclusive OR operation on the back half of the restored first response value and the internally stored first key to obtain the back half of the encrypted first response value; The electric vehicle combines the encrypted new first challenge value, the encrypted new first response value and the back half of the encrypted first response value into third verification information, and sends the third verification information to the charging pile; The charging pile performs exclusive OR operation on the back half of the encrypted first response value in the received third verification information and the first key in the requested electric vehicle registration data to obtain the back half of the restored first response value; The charging pile calculates the fractional Hamming distance between the back half of the first response value in the requested electric vehicle registration data and the back half of the restored first response value, and when the calculated fractional Hamming distance is less than a preset fractional Hamming distance threshold, it is considered that the third verification information is legal; After judging that the third verification information is legal, the charging pile performs exclusive OR operation on the encrypted new first challenge value and the encrypted new first response value in the third verification information and the first key in the requested electric vehicle registration data to obtain the restored new first challenge value and the restored new first response value, and then splices the first response value in the requested electric vehicle registration data and the first key, and then calculates a new first key through a hash algorithm; The charging pile uploads the reduced new first challenge value, the reduced new first response value and the new first key to the trusted authentication center to replace the registration data of the electric vehicle for next time authentication.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program, when executed by the processor, implements the method of any one of claims 1 to 9.

Images