New energy vehicle charging control method and system based on NFC tag

Abstract

The invention provides a new energy automobile charging control method and system based on an NFC label in the technical field of new energy automobile charging control, and the method comprises the steps: S1, a server carries out the registration operation of a mobile terminal, encrypts a distributed user ID into an encrypted ID, and transmits the encrypted ID to the mobile terminal; s2, the mobile terminal decrypts the encrypted ID to obtain the user ID; s3, the mobile terminal executes a login operation, and generates a dynamic key based on the user ID; s4, when the mobile terminal is close to the charging pile, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, the dynamic key and the login information into authentication ciphertext information, and uploads the authentication ciphertext information to the server; and S5, the server decrypts the authentication ciphertext information to obtain the tag ID, the dynamic key and the login information to execute identity authentication operation, and sends a charging starting instruction based on the tag ID after the authentication is passed. The method has the advantages that the safety and the operation convenience of charging control of the new energy automobile are greatly improved.

Description

Technical Field

[0001] This invention relates to the field of new energy vehicle charging control technology, and in particular to a new energy vehicle charging control method and system based on NFC tags. Background Technology

[0002] As a crucial alternative to traditional gasoline-powered vehicles, the development of new energy vehicles relies on the continuous improvement of supporting charging infrastructure. During the charging process, to ensure safe and reliable energy replenishment, users must complete identity authentication and authorization before starting the charging operation to initiate the process and ensure accurate billing and status recording. Currently, the mainstream authentication method involves establishing a communication connection between a mobile terminal (such as a smartphone) and the charging station, with common technologies including QR code scanning and Bluetooth pairing. However, these traditional identity authentication mechanisms have revealed several shortcomings in practical applications, limiting the improvement of user experience and the large-scale development of the industry.

[0003] First, existing authentication methods have significant security vulnerabilities. QR codes and Bluetooth communication are inherently susceptible to man-in-the-middle attacks, data theft, or forgery during transmission, especially given the lack of end-to-end encryption and multi-layered verification mechanisms in open network environments. Malicious third parties can intercept authentication data packets and impersonate legitimate terminals to perform unauthorized operations, causing financial losses to users or even illegal control of the charging system, seriously impacting operational security.

[0004] Secondly, the user operation process is cumbersome and the experience is poor. When using QR code authentication, users often need to go through multiple steps, such as opening the application, aligning the QR code, waiting for recognition, and manually entering the amount or confirming charging parameters; Bluetooth pairing often faces problems such as unstable device search, pairing timeouts, or the need for repeated connection. Especially in situations with poor ambient light or weak network signals, the failure rate is high, seriously affecting user satisfaction and hindering the promotion and popularization of new energy vehicles.

[0005] Therefore, how to provide a new energy vehicle charging control method and system based on NFC tags to improve the safety and ease of operation of new energy vehicle charging control has become an urgent technical problem to be solved. Summary of the Invention

[0006] The technical problem to be solved by the present invention is to provide a new energy vehicle charging control method and system based on NFC tags, so as to improve the safety and ease of operation of new energy vehicle charging control.

[0007] In a first aspect, the present invention provides a new energy vehicle charging control method based on NFC tags, comprising the following steps: Step S1: The APP on the mobile terminal sends a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. Step S2: The mobile terminal decrypts the received encrypted ID to obtain the user ID and stores the user ID; Step S3: When charging is required, the mobile terminal performs a login operation using the login information set during the registration process, and generates a dynamic key based on the user ID; Step S4: When the mobile terminal is close to the charging pile connected to the new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication ciphertext information, and uploads the authentication ciphertext information to the server. Step S5: The server decrypts the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, it performs an identity authentication operation. After successful authentication, it sends a charging start command to the corresponding charging pile based on the tag ID.

[0008] Furthermore, step S1 specifically includes: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the mobile terminal's hardware security module. Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

[0009] Furthermore, step S2 specifically includes: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

[0010] Furthermore, step S3 specifically includes: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

[0011] Furthermore, step S4 specifically includes: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. Step S5 specifically involves: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

[0012] Secondly, the present invention provides a new energy vehicle charging control system based on NFC tags, comprising the following modules: The registration module is used for the mobile terminal's APP to send a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. The user ID storage module is used by the mobile terminal to decrypt the received encrypted ID to obtain the user ID and store the user ID; The login module is used to enable the mobile terminal to perform a login operation based on the login information set during the registration process when charging is required, and to generate a dynamic key based on the user ID. The authentication encrypted information upload module is used when a mobile terminal is close to a charging pile connected to a new energy vehicle. The NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication encrypted information, and uploads the authentication encrypted information to the server. The charging command issuance module is activated, which is used by the server to decrypt the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, an identity authentication operation is performed. After successful authentication, a charging start command is sent to the corresponding charging pile based on the tag ID.

[0013] Furthermore, the registration module is specifically used for: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the mobile terminal's hardware security module. Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

[0014] Furthermore, the user ID storage module is specifically used for: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

[0015] Furthermore, the login module is specifically used for: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

[0016] Furthermore, the authentication encrypted information upload module is specifically used for: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. The charging start command issuing module is specifically used for: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

[0017] The advantages of this invention are: 1. The mobile terminal sends a registration request carrying encrypted registration information to the server via the mobile app. The server performs registration on the mobile terminal based on the request, assigns a user ID, encrypts it into an encrypted ID, and sends it to the mobile terminal. The mobile terminal decrypts the encrypted ID to obtain the user ID and stores it. When charging is required, the mobile terminal performs a login operation using the login information set during the registration process, generating a dynamic key based on the user ID. When the mobile terminal is near a charging station connected to the new energy vehicle, the mobile terminal's NFC chip reads the tag ID stored in the charging station's NFC tag, encrypts the tag ID, dynamic key, and login information into encrypted authentication information, and uploads it to the server. The server decrypts the encrypted authentication information to obtain the tag ID, dynamic key, and login information. The system performs identity authentication based on the tag ID, dynamic key, and login information. After successful authentication, it sends a charging start command to the corresponding charging pile based on the tag ID. This method, where a mobile terminal is placed near the charging pile's NFC tag to automatically read the tag ID and immediately encrypts and uploads the information to the server for centralized authentication, greatly improves both ease of use and security. Users only need to "tap" the tag to trigger charging, eliminating the cumbersome steps of scanning, pairing, or inputting information. Simultaneously, the backend server uses dynamic keys and multi-factor authentication, and encrypts all transmitted data, effectively preventing data theft, replay attacks, and unauthorized operations. This achieves a high degree of balance between convenience and security, ultimately greatly improving the security and ease of use of new energy vehicle charging control.

[0018] 2. By bringing a mobile device close to the NFC tag on the charging station, the authentication process is automatically triggered, replacing the cumbersome scanning or Bluetooth pairing operations and greatly improving the convenience of operation. At the same time, the entire system integrates PKI two-way authentication, hardware security module storage, timestamp-based dynamic keys, and multiple composite encryption technologies in the registration, login, and authentication stages, forming a multi-layered, end-to-end security verification system that effectively defends against data theft, replay attacks, and unauthorized access, fundamentally enhancing the security of the charging process.

[0019] 3. The system's security is significantly enhanced through multi-layered encryption algorithms and authentication mechanisms: During the registration phase, multiple algorithms such as Hash256, AES256, SM4, and RC6 are used to encrypt and XOR login information, device serial numbers, and timestamps to generate ciphertext registration information, ensuring the confidentiality and integrity of data transmission; the server performs two-way authentication through PKI technology to prevent unauthorized access; during the authentication phase, dynamic keys are generated based on timestamps and user IDs and reinforced by the PBKDF2 algorithm to effectively resist replay attacks and brute-force attacks; in addition, login information is stored in a hardware security module, reducing the risk of sensitive information leakage; overall, this multi-factor encryption and real-time verification mechanism provides enterprise-level security protection for the charging process of new energy vehicles.

[0020] 4. Utilizing NFC near-field communication technology, users can trigger the charging process simply by bringing their mobile device close to the NFC tag of the charging station, eliminating the need to manually enter a password or scan a QR code, greatly simplifying the operation. The mobile app automatically handles the registration, login, and authentication process. Users only need to initially set up login information (such as account password or biometric identification), and no repeated intervention is required during subsequent charging. This seamless interactive design enhances the user experience and is particularly suitable for high-frequency charging scenarios, reducing waiting time, improving charging efficiency, and reducing the risk of human error.

[0021] 5. By introducing timestamps (such as first timestamp, second timestamp, etc.) and hash value verification, this scheme ensures the real-time nature and validity of requests. In each stage of registration, login, and authentication, both the server and the mobile terminal verify the timestamp to prevent outdated requests from being maliciously exploited, such as replay attacks. Time period division rules and random salt values ​​are used to generate dynamic keys, making the keys time-sensitive and further enhancing the system's anti-attack capabilities. This timeliness mechanism not only improves security but also ensures the timely execution of charging instructions, avoiding charging failures caused by delays.

[0022] 6. By using the Hash256 algorithm multiple times during data transmission to calculate hash values ​​(such as the first hash value, the third hash value, and the fourth hash value), and performing integrity verification after decryption; for example, during the registration phase, the server verifies the first hash value after parsing the registration ciphertext to ensure that the data has not been tampered with; during the authentication phase, a similar verification is performed on the authentication ciphertext; this design ensures that the data from the mobile terminal to the server remains intact during transmission, preventing man-in-the-middle attacks or data tampering. Combined with the HTTPS protocol for uploading authentication ciphertext, an additional transport layer of security is added, enabling the entire system to operate reliably even in harsh network environments.

[0023] 7. The identity authentication process integrates multiple factors: device serial number, user ID, login information (such as biometrics), dynamic key, and timestamp. The server matches the tag ID through the charging pile management table and verifies the login information and dynamic key, realizing multi-level authentication. The dynamic key is generated based on the PBKDF2 algorithm, introducing a random salt value to increase the difficulty of cracking. This multi-factor authentication mechanism not only improves the accuracy of identity verification but also adapts to different security needs, such as preventing unauthorized use in public charging stations and ensuring that only legitimate users can start charging.

[0024] 8. Mobile terminals store sensitive information (such as user ID and login information) in a hardware security module instead of a regular storage area. This provides hardware-level security protection to prevent malware or physical attacks from extracting data. The hardware security module usually has anti-tampering features, which enhances the overall system security. This design conforms to best practices for mobile device security and ensures the confidentiality of user credentials. In particular, it can effectively protect user data even if the mobile APP is cracked or the device is lost.

[0025] 9. By adopting standardized protocols and algorithms (such as NFC, HTTPS, AES256, SM4, etc.), it can be easily integrated into existing new energy vehicle charging infrastructure; the server manages charging piles based on tag IDs and matches them through the charging pile management table, supporting large-scale deployment and dynamic addition of new charging piles; the mobile terminal APP can be adapted to multiple operating systems and devices, improving the universality of the solution; in addition, the modular design of the encryption algorithm allows for future upgrades to more advanced algorithms, ensuring the long-term sustainability and adaptability of the system.

[0026] 10. The tag ID stored in the NFC tag is used to uniquely identify the charging pile. Combined with encrypted authentication, it prevents the impersonation or cloning attacks of the charging pile. The server verifies the legality of the tag ID during the authentication stage to ensure that only registered charging piles can receive the start command. This mechanism improves the reliability of the charging infrastructure, avoids energy theft or equipment abuse, and provides operators with better management and auditing capabilities.

[0027] 11. By integrating NFC near-field communication, multi-layer encryption algorithms (such as AES256, SM4, Hash256) and real-time timeliness verification, the system achieves high security, ease of operation, and data integrity in the charging process of new energy vehicles. Among them, the two-way authentication between the mobile terminal and the server, dynamic key generation, and hardware security module storage of sensitive information effectively prevent unauthorized access and attacks. At the same time, the automatic identification of NFC tags simplifies user interaction and improves charging efficiency. Furthermore, the solution adopts standardized protocols to ensure scalability and compatibility. Overall, it provides a robust and tamper-proof multi-factor authentication solution for charging piles. Attached Figure Description

[0028] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0029] Figure 1 This is a flowchart of a new energy vehicle charging control method based on NFC tags according to the present invention.

[0030] Figure 2 This is a schematic diagram of the structure of a new energy vehicle charging control system based on NFC tags according to the present invention. Detailed Implementation

[0031] The technical solution in this application embodiment has the following general idea: By automatically reading the tag ID when the mobile terminal is close to the NFC tag of the charging pile, and immediately encrypting and uploading the information to the server for centralized authentication, the convenience and security of operation are greatly improved. Users only need to "tap" the tag to trigger charging, eliminating the cumbersome steps of scanning, pairing, or inputting information. At the same time, the backend server uses dynamic keys and multi-factor authentication, and encrypts all transmitted data, effectively preventing data theft, replay attacks, and unauthorized operations. This achieves a high degree of unity between convenience and security, thereby improving the security and ease of operation of new energy vehicle charging control.

[0032] Please refer to Figures 1 to 2 As shown, a preferred embodiment of the new energy vehicle charging control method based on NFC tags of the present invention includes the following steps: Step S1: The APP on the mobile terminal sends a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. Step S2: The mobile terminal decrypts the received encrypted ID to obtain the user ID and stores the user ID; Step S3: When charging is required, the mobile terminal performs a login operation using the login information set during the registration process, and generates a dynamic key based on the user ID; Step S4: When the mobile terminal is close to the charging pile connected to the new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication ciphertext information, and uploads the authentication ciphertext information to the server. Step S5: The server decrypts the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, it performs an identity authentication operation. After successful authentication, it sends a charging start command to the corresponding charging pile based on the tag ID.

[0033] The tag ID stored in the NFC tag is used to uniquely identify the charging pile. Combined with encrypted authentication, it prevents the charging pile from being impersonated or cloned. The server verifies the legitimacy of the tag ID during the authentication phase to ensure that only registered charging piles can receive the start command. This mechanism improves the reliability of the charging infrastructure, avoids energy theft or equipment abuse, and provides operators with better management and auditing capabilities.

[0034] By bringing a mobile device close to the NFC tag on the charging station, the authentication process is automatically triggered, replacing the cumbersome scanning or Bluetooth pairing operations and greatly improving the convenience of operation. At the same time, the entire system integrates PKI two-way authentication, hardware security module storage, timestamp-based dynamic keys, and multiple composite encryption technologies in the registration, login, and authentication stages, forming a multi-layered, end-to-end security verification system that effectively defends against data theft, replay attacks, and unauthorized access, fundamentally enhancing the security of the charging process.

[0035] Step S1 specifically involves: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the mobile terminal's hardware security module. Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

[0036] The system's security is significantly enhanced through multi-layered encryption algorithms and authentication mechanisms: During the registration phase, multiple algorithms such as Hash256, AES256, SM4, and RC6 are used to encrypt and XOR login information, device serial numbers, and timestamps to generate ciphertext registration information, ensuring the confidentiality and integrity of data transmission; the server performs two-way authentication through PKI technology to prevent unauthorized access; during the authentication phase, dynamic keys are generated based on timestamps and user IDs and reinforced with the PBKDF2 algorithm to effectively resist replay attacks and brute-force attacks; in addition, login information is stored in a hardware security module, reducing the risk of sensitive information leakage; overall, this multi-factor encryption and real-time verification mechanism provides enterprise-level security protection for the charging process of new energy vehicles.

[0037] Step S2 specifically involves: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

[0038] Mobile terminals store sensitive information (such as user IDs and login information) in a hardware security module, rather than in a regular storage area. This provides hardware-level security protection, preventing malware or physical attacks from extracting data. The hardware security module typically has tamper-proof features, enhancing the overall system security. This design conforms to best practices for mobile device security, ensuring the confidentiality of user credentials, and effectively protecting user data, especially in the event that the mobile app is hacked or the device is lost.

[0039] Step S3 specifically involves: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

[0040] By introducing timestamps (such as first timestamp, second timestamp, etc.) and hash value verification, this scheme ensures the real-time nature and validity of requests. In each stage of registration, login, and authentication, both the server and the mobile terminal verify the timestamp to prevent outdated requests from being maliciously exploited, such as replay attacks. Time period division rules and random salt values ​​are used to generate dynamic keys, making the keys time-sensitive and further enhancing the system's anti-attack capabilities. This timeliness mechanism not only improves security but also ensures the timely execution of charging instructions, avoiding charging failures caused by delays.

[0041] Step S4 specifically involves: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. By utilizing NFC near-field communication technology, users can trigger the charging process simply by bringing their mobile device close to the NFC tag of the charging station, eliminating the need to manually enter a password or scan a QR code, greatly simplifying the operation. The mobile app automatically handles the registration, login, and authentication process. Users only need to initially set up login information (such as account password or biometric identification), and no further intervention is required during subsequent charging. This seamless interactive design enhances the user experience and is particularly suitable for high-frequency charging scenarios, reducing waiting time, improving charging efficiency, and reducing the risk of human error.

[0042] By using the Hash256 algorithm multiple times during data transmission to calculate hash values ​​(such as the first, third, and fourth hash values), and performing integrity verification after decryption; for example, during the registration phase, the server verifies the first hash value after parsing the registration ciphertext to ensure that the data has not been tampered with; during the authentication phase, a similar verification is performed on the authentication ciphertext; this design ensures that the data from the mobile terminal to the server remains intact during transmission, preventing man-in-the-middle attacks or data tampering. Combined with the HTTPS protocol for uploading authentication ciphertext, an additional transport layer of security is added, enabling the entire system to operate reliably even in harsh network environments.

[0043] Step S5 specifically involves: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

[0044] The authentication process integrates multiple factors: device serial number, user ID, login information (such as biometrics), dynamic key, and timestamp. The server matches the tag ID with the charging pile management table and verifies the login information and dynamic key, achieving multi-level authentication. The dynamic key is generated based on the PBKDF2 algorithm, introducing a random salt value to increase the difficulty of cracking. This multi-factor authentication mechanism not only improves the accuracy of identity verification but also adapts to different security scenarios, such as preventing unauthorized use in public charging stations and ensuring that only legitimate users can start charging.

[0045] By adopting standardized protocols and algorithms (such as NFC, HTTPS, AES256, SM4, etc.), it can be easily integrated into existing new energy vehicle charging infrastructure; the server manages charging piles based on tag IDs and matches them through a charging pile management table, supporting large-scale deployment and dynamic addition of new charging piles; the mobile terminal APP can be adapted to multiple operating systems and devices, improving the universality of the solution; in addition, the modular design of the encryption algorithm allows for future upgrades to more advanced algorithms, ensuring the long-term sustainability and adaptability of the system.

[0046] By integrating NFC near-field communication, multi-layer encryption algorithms (such as AES256, SM4, and Hash256), and real-time timeliness verification, the system achieves high security, ease of operation, and data integrity in the charging process of new energy vehicles. The two-way authentication between the mobile terminal and the server, dynamic key generation, and hardware security module storage of sensitive information effectively prevent unauthorized access and attacks. At the same time, the automatic identification of NFC tags simplifies user interaction and improves charging efficiency. Furthermore, the solution adopts standardized protocols to ensure scalability and compatibility. Overall, it provides a robust and tamper-proof multi-factor authentication solution for charging piles.

[0047] A preferred embodiment of the NFC tag-based charging control system for new energy vehicles of the present invention includes the following modules: The registration module is used for the mobile terminal's APP to send a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. The user ID storage module is used by the mobile terminal to decrypt the received encrypted ID to obtain the user ID and store the user ID; The login module is used to enable the mobile terminal to perform a login operation based on the login information set during the registration process when charging is required, and to generate a dynamic key based on the user ID. The authentication encrypted information upload module is used when a mobile terminal is close to a charging pile connected to a new energy vehicle. The NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication encrypted information, and uploads the authentication encrypted information to the server. The charging command issuance module is activated, which is used by the server to decrypt the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, an identity authentication operation is performed. After successful authentication, a charging start command is sent to the corresponding charging pile based on the tag ID.

[0048] The tag ID stored in the NFC tag is used to uniquely identify the charging pile. Combined with encrypted authentication, it prevents the charging pile from being impersonated or cloned. The server verifies the legitimacy of the tag ID during the authentication phase to ensure that only registered charging piles can receive the start command. This mechanism improves the reliability of the charging infrastructure, avoids energy theft or equipment abuse, and provides operators with better management and auditing capabilities.

[0049] By bringing a mobile device close to the NFC tag on the charging station, the authentication process is automatically triggered, replacing the cumbersome scanning or Bluetooth pairing operations and greatly improving the convenience of operation. At the same time, the entire system integrates PKI two-way authentication, hardware security module storage, timestamp-based dynamic keys, and multiple composite encryption technologies in the registration, login, and authentication stages, forming a multi-layered, end-to-end security verification system that effectively defends against data theft, replay attacks, and unauthorized access, fundamentally enhancing the security of the charging process.

[0050] The registration module is specifically used for: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the mobile terminal's hardware security module. Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

[0051] The system's security is significantly enhanced through multi-layered encryption algorithms and authentication mechanisms: During the registration phase, multiple algorithms such as Hash256, AES256, SM4, and RC6 are used to encrypt and XOR login information, device serial numbers, and timestamps to generate ciphertext registration information, ensuring the confidentiality and integrity of data transmission; the server performs two-way authentication through PKI technology to prevent unauthorized access; during the authentication phase, dynamic keys are generated based on timestamps and user IDs and reinforced with the PBKDF2 algorithm to effectively resist replay attacks and brute-force attacks; in addition, login information is stored in a hardware security module, reducing the risk of sensitive information leakage; overall, this multi-factor encryption and real-time verification mechanism provides enterprise-level security protection for the charging process of new energy vehicles.

[0052] The user ID storage module is specifically used for: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

[0053] Mobile terminals store sensitive information (such as user IDs and login information) in a hardware security module, rather than in a regular storage area. This provides hardware-level security protection, preventing malware or physical attacks from extracting data. The hardware security module typically has tamper-proof features, enhancing the overall system security. This design conforms to best practices for mobile device security, ensuring the confidentiality of user credentials, and effectively protecting user data, especially in the event that the mobile app is hacked or the device is lost.

[0054] The login module is specifically used for: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

[0055] By introducing timestamps (such as first timestamp, second timestamp, etc.) and hash value verification, this scheme ensures the real-time nature and validity of requests. In each stage of registration, login, and authentication, both the server and the mobile terminal verify the timestamp to prevent outdated requests from being maliciously exploited, such as replay attacks. Time period division rules and random salt values ​​are used to generate dynamic keys, making the keys time-sensitive and further enhancing the system's anti-attack capabilities. This timeliness mechanism not only improves security but also ensures the timely execution of charging instructions, avoiding charging failures caused by delays.

[0056] The authentication encrypted information upload module is specifically used for: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. By utilizing NFC near-field communication technology, users can trigger the charging process simply by bringing their mobile device close to the NFC tag of the charging station, eliminating the need to manually enter a password or scan a QR code, greatly simplifying the operation. The mobile app automatically handles the registration, login, and authentication process. Users only need to initially set up login information (such as account password or biometric identification), and no further intervention is required during subsequent charging. This seamless interactive design enhances the user experience and is particularly suitable for high-frequency charging scenarios, reducing waiting time, improving charging efficiency, and reducing the risk of human error.

[0057] By using the Hash256 algorithm multiple times during data transmission to calculate hash values ​​(such as the first, third, and fourth hash values), and performing integrity verification after decryption; for example, during the registration phase, the server verifies the first hash value after parsing the registration ciphertext to ensure that the data has not been tampered with; during the authentication phase, a similar verification is performed on the authentication ciphertext; this design ensures that the data from the mobile terminal to the server remains intact during transmission, preventing man-in-the-middle attacks or data tampering. Combined with the HTTPS protocol for uploading authentication ciphertext, an additional transport layer of security is added, enabling the entire system to operate reliably even in harsh network environments.

[0058] The charging start command issuing module is specifically used for: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

[0059] The authentication process integrates multiple factors: device serial number, user ID, login information (such as biometrics), dynamic key, and timestamp. The server matches the tag ID with the charging pile management table and verifies the login information and dynamic key, achieving multi-level authentication. The dynamic key is generated based on the PBKDF2 algorithm, introducing a random salt value to increase the difficulty of cracking. This multi-factor authentication mechanism not only improves the accuracy of identity verification but also adapts to different security scenarios, such as preventing unauthorized use in public charging stations and ensuring that only legitimate users can start charging.

[0060] By adopting standardized protocols and algorithms (such as NFC, HTTPS, AES256, SM4, etc.), it can be easily integrated into existing new energy vehicle charging infrastructure; the server manages charging piles based on tag IDs and matches them through a charging pile management table, supporting large-scale deployment and dynamic addition of new charging piles; the mobile terminal APP can be adapted to multiple operating systems and devices, improving the universality of the solution; in addition, the modular design of the encryption algorithm allows for future upgrades to more advanced algorithms, ensuring the long-term sustainability and adaptability of the system.

[0061] By integrating NFC near-field communication, multi-layer encryption algorithms (such as AES256, SM4, and Hash256), and real-time timeliness verification, the system achieves high security, ease of operation, and data integrity in the charging process of new energy vehicles. The two-way authentication between the mobile terminal and the server, dynamic key generation, and hardware security module storage of sensitive information effectively prevent unauthorized access and attacks. At the same time, the automatic identification of NFC tags simplifies user interaction and improves charging efficiency. Furthermore, the solution adopts standardized protocols to ensure scalability and compatibility. Overall, it provides a robust and tamper-proof multi-factor authentication solution for charging piles.

[0062] In summary, the advantages of this invention are: 1. The mobile terminal sends a registration request carrying encrypted registration information to the server via the mobile app. The server performs registration on the mobile terminal based on the request, assigns a user ID, encrypts it into an encrypted ID, and sends it to the mobile terminal. The mobile terminal decrypts the encrypted ID to obtain the user ID and stores it. When charging is required, the mobile terminal performs a login operation using the login information set during the registration process, generating a dynamic key based on the user ID. When the mobile terminal is near a charging station connected to the new energy vehicle, the mobile terminal's NFC chip reads the tag ID stored in the charging station's NFC tag, encrypts the tag ID, dynamic key, and login information into encrypted authentication information, and uploads it to the server. The server decrypts the encrypted authentication information to obtain the tag ID, dynamic key, and login information. The system performs identity authentication based on the tag ID, dynamic key, and login information. After successful authentication, it sends a charging start command to the corresponding charging pile based on the tag ID. This method, where a mobile terminal is placed near the charging pile's NFC tag to automatically read the tag ID and immediately encrypts and uploads the information to the server for centralized authentication, greatly improves both ease of use and security. Users only need to "tap" the tag to trigger charging, eliminating the cumbersome steps of scanning, pairing, or inputting information. Simultaneously, the backend server uses dynamic keys and multi-factor authentication, and encrypts all transmitted data, effectively preventing data theft, replay attacks, and unauthorized operations. This achieves a high degree of balance between convenience and security, ultimately greatly improving the security and ease of use of new energy vehicle charging control.

[0063] 2. By bringing a mobile device close to the NFC tag on the charging station, the authentication process is automatically triggered, replacing the cumbersome scanning or Bluetooth pairing operations and greatly improving the convenience of operation. At the same time, the entire system integrates PKI two-way authentication, hardware security module storage, timestamp-based dynamic keys, and multiple composite encryption technologies in the registration, login, and authentication stages, forming a multi-layered, end-to-end security verification system that effectively defends against data theft, replay attacks, and unauthorized access, fundamentally enhancing the security of the charging process.

[0064] 3. The system's security is significantly enhanced through multi-layered encryption algorithms and authentication mechanisms: During the registration phase, multiple algorithms such as Hash256, AES256, SM4, and RC6 are used to encrypt and XOR login information, device serial numbers, and timestamps to generate ciphertext registration information, ensuring the confidentiality and integrity of data transmission; the server performs two-way authentication through PKI technology to prevent unauthorized access; during the authentication phase, dynamic keys are generated based on timestamps and user IDs and reinforced by the PBKDF2 algorithm to effectively resist replay attacks and brute-force attacks; in addition, login information is stored in a hardware security module, reducing the risk of sensitive information leakage; overall, this multi-factor encryption and real-time verification mechanism provides enterprise-level security protection for the charging process of new energy vehicles.

[0065] 4. Utilizing NFC near-field communication technology, users can trigger the charging process simply by bringing their mobile device close to the NFC tag of the charging station, eliminating the need to manually enter a password or scan a QR code, greatly simplifying the operation. The mobile app automatically handles the registration, login, and authentication process. Users only need to initially set up login information (such as account password or biometric identification), and no repeated intervention is required during subsequent charging. This seamless interactive design enhances the user experience and is particularly suitable for high-frequency charging scenarios, reducing waiting time, improving charging efficiency, and reducing the risk of human error.

[0066] 5. By introducing timestamps (such as first timestamp, second timestamp, etc.) and hash value verification, this scheme ensures the real-time nature and validity of requests. In each stage of registration, login, and authentication, both the server and the mobile terminal verify the timestamp to prevent outdated requests from being maliciously exploited, such as replay attacks. Time period division rules and random salt values ​​are used to generate dynamic keys, making the keys time-sensitive and further enhancing the system's anti-attack capabilities. This timeliness mechanism not only improves security but also ensures the timely execution of charging instructions, avoiding charging failures caused by delays.

[0067] 6. By using the Hash256 algorithm multiple times during data transmission to calculate hash values ​​(such as the first hash value, the third hash value, and the fourth hash value), and performing integrity verification after decryption; for example, during the registration phase, the server verifies the first hash value after parsing the registration ciphertext to ensure that the data has not been tampered with; during the authentication phase, a similar verification is performed on the authentication ciphertext; this design ensures that the data from the mobile terminal to the server remains intact during transmission, preventing man-in-the-middle attacks or data tampering. Combined with the HTTPS protocol for uploading authentication ciphertext, an additional transport layer of security is added, enabling the entire system to operate reliably even in harsh network environments.

[0068] 7. The identity authentication process integrates multiple factors: device serial number, user ID, login information (such as biometrics), dynamic key, and timestamp. The server matches the tag ID through the charging pile management table and verifies the login information and dynamic key, realizing multi-level authentication. The dynamic key is generated based on the PBKDF2 algorithm, introducing a random salt value to increase the difficulty of cracking. This multi-factor authentication mechanism not only improves the accuracy of identity verification but also adapts to different security needs, such as preventing unauthorized use in public charging stations and ensuring that only legitimate users can start charging.

[0069] 8. Mobile terminals store sensitive information (such as user ID and login information) in a hardware security module instead of a regular storage area. This provides hardware-level security protection to prevent malware or physical attacks from extracting data. The hardware security module usually has anti-tampering features, which enhances the overall system security. This design conforms to best practices for mobile device security and ensures the confidentiality of user credentials. In particular, it can effectively protect user data even if the mobile APP is cracked or the device is lost.

[0070] 9. By adopting standardized protocols and algorithms (such as NFC, HTTPS, AES256, SM4, etc.), it can be easily integrated into existing new energy vehicle charging infrastructure; the server manages charging piles based on tag IDs and matches them through the charging pile management table, supporting large-scale deployment and dynamic addition of new charging piles; the mobile terminal APP can be adapted to multiple operating systems and devices, improving the universality of the solution; in addition, the modular design of the encryption algorithm allows for future upgrades to more advanced algorithms, ensuring the long-term sustainability and adaptability of the system.

[0071] 10. The tag ID stored in the NFC tag is used to uniquely identify the charging pile. Combined with encrypted authentication, it prevents the impersonation or cloning attacks of the charging pile. The server verifies the legality of the tag ID during the authentication stage to ensure that only registered charging piles can receive the start command. This mechanism improves the reliability of the charging infrastructure, avoids energy theft or equipment abuse, and provides operators with better management and auditing capabilities.

[0072] 11. By integrating NFC near-field communication, multi-layer encryption algorithms (such as AES256, SM4, Hash256) and real-time timeliness verification, the system achieves high security, ease of operation, and data integrity in the charging process of new energy vehicles. Among them, the two-way authentication between the mobile terminal and the server, dynamic key generation, and hardware security module storage of sensitive information effectively prevent unauthorized access and attacks. At the same time, the automatic identification of NFC tags simplifies user interaction and improves charging efficiency. Furthermore, the solution adopts standardized protocols to ensure scalability and compatibility. Overall, it provides a robust and tamper-proof multi-factor authentication solution for charging piles.

[0073] While specific embodiments of the present invention have been described above, those skilled in the art should understand that the specific embodiments described are merely illustrative and not intended to limit the scope of the present invention. Equivalent modifications and variations made by those skilled in the art in accordance with the spirit of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A charging control method for new energy vehicles based on NFC tags, characterized in that: Includes the following steps: Step S1: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. Step S2: The mobile terminal decrypts the received encrypted ID to obtain the user ID and stores the user ID; Step S3: When charging is required, the mobile terminal performs a login operation using the login information set during the registration process, and generates a dynamic key based on the user ID; Step S4: When the mobile terminal is close to the charging pile connected to the new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication ciphertext information, and uploads the authentication ciphertext information to the server. Step S5: The server decrypts the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, it performs an identity authentication operation. After successful authentication, it sends a charging start command to the corresponding charging pile based on the tag ID.

2. The new energy vehicle charging control method based on NFC tags as described in claim 1, characterized in that: Step S1 specifically involves: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; a first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the hardware security module of the mobile terminal; Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

3. The new energy vehicle charging control method based on NFC tags as described in claim 1, characterized in that: Step S2 specifically involves: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

4. The new energy vehicle charging control method based on NFC tags as described in claim 1, characterized in that: Step S3 specifically involves: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

5. The new energy vehicle charging control method based on NFC tags as described in claim 1, characterized in that: Step S4 specifically involves: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. Step S5 specifically involves: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

6. A new energy vehicle charging control system based on NFC tags, characterized in that: Includes the following modules: The registration module is used for the mobile terminal's APP to send a registration request carrying encrypted registration information to the server. Based on the received registration request, the server performs a registration operation on the mobile terminal, assigns a user ID, and encrypts the user ID into an encrypted ID and sends it to the mobile terminal. The user ID storage module is used by the mobile terminal to decrypt the received encrypted ID to obtain the user ID and store the user ID; The login module is used to enable the mobile terminal to perform a login operation based on the login information set during the registration process when charging is required, and to generate a dynamic key based on the user ID. The authentication encrypted information upload module is used when a mobile terminal is close to a charging pile connected to a new energy vehicle. The NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile, encrypts the tag ID, dynamic key and login information into authentication encrypted information, and uploads the authentication encrypted information to the server. The charging command issuance module is activated, which is used by the server to decrypt the received authentication ciphertext information to obtain the tag ID, dynamic key, and login information. Based on the tag ID, dynamic key, and login information, an identity authentication operation is performed. After successful authentication, a charging start command is sent to the corresponding charging pile based on the tag ID.

7. A new energy vehicle charging control system based on an NFC tag as described in claim 6, characterized in that: The registration module is specifically used for: The mobile terminal's APP sends a registration request carrying encrypted registration information to the server. This encrypted registration information is obtained by encrypting login information and the device serial number. The specific encryption process is as follows: First timestamp is obtained; a first hash value is calculated using the Hash256 algorithm based on the login information, device serial number, and first timestamp; the login information, device serial number, first timestamp, and first hash value are encrypted into ciphertext A1 using the AES256 algorithm; ciphertext A1 is XORed with the device serial number to obtain ciphertext A2; ciphertext A2 is encrypted into ciphertext A3 using the SM4 algorithm; and ciphertext A3 and the device serial number are encrypted into encrypted registration information using the RC6 algorithm. The login information includes at least one of an account password and biometric information. The login information is entered through the APP and stored in the hardware security module of the mobile terminal; Based on the received registration request, the server performs a two-way authentication operation with the mobile terminal through PKI technology. After successful authentication, the server parses the registration request to obtain the encrypted registration information. The server decrypts the registration ciphertext information using the RC6 algorithm to obtain ciphertext A3 and the device serial number. It then decrypts ciphertext A3 using the SM4 algorithm to obtain ciphertext A2. The server XORs ciphertext A2 with the device serial number to obtain ciphertext A1. Finally, the server decrypts ciphertext A1 using the AES256 algorithm to obtain login information, the device serial number, a first timestamp, and a first hash value. After performing integrity verification using the first hash value, the server performs timeliness verification using the first timestamp. If the timeliness verification passes, the second hash value of the device serial number is calculated using the Hash256 algorithm. The last 64 bits of the second hash value are taken as the user ID, and the login information is bound and stored with the user ID. The server obtains the current second timestamp, calculates the third hash value of the user ID and the second timestamp using the Hash256 algorithm, and encrypts the user ID, the second timestamp, and the third hash value into an encrypted ID using the AES256 algorithm before sending it to the mobile terminal.

8. A new energy vehicle charging control system based on an NFC tag as described in claim 6, characterized in that: The user ID storage module is specifically used for: The mobile terminal receives the encrypted ID in real time, decrypts the encrypted ID using the AES256 algorithm to obtain the user ID, the second timestamp, and the third hash value, performs integrity verification using the third hash value, performs timeliness verification using the second timestamp, and then stores the user ID in the hardware security module.

9. A new energy vehicle charging control system based on an NFC tag as described in claim 6, characterized in that: The login module is specifically used for: When charging is required, the mobile terminal sends a login request to the server using the login information set during the registration process to perform the login operation. After successful login, it obtains the current third timestamp, expands the third timestamp into the corresponding first time period based on the preset time period division rules, reads the user ID from the hardware security module, concatenates the user ID with the first time period to obtain the first concatenated data, uses the last two digits of the first time period as the first random salt value, and uses the PBKDF2 algorithm to encrypt the first concatenated data based on the first random salt value to obtain the dynamic key.

10. A new energy vehicle charging control system based on an NFC tag as described in claim 6, characterized in that: The authentication encrypted information upload module is specifically used for: When a mobile terminal is brought close to a charging pile connected to a new energy vehicle, the NFC chip of the mobile terminal reads the tag ID stored in the NFC tag of the charging pile; The mobile terminal obtains the current fourth timestamp, calculates the tag ID, dynamic key, login information, and fourth hash value of the fourth timestamp using the Hash256 algorithm, encrypts the tag ID, dynamic key, login information, fourth timestamp, and fourth hash value into ciphertext B1 using the AES256 algorithm, shifts the last 64 characters of ciphertext B1 6 bits to the right to obtain ciphertext B2, encrypts ciphertext B2 into ciphertext B3 using the 3DES algorithm, divides ciphertext B3 in a 1:6 ratio and swaps the order to obtain authentication ciphertext information, and uploads the authentication ciphertext information to the server via the HTTPS protocol. The charging start command issuing module is specifically used for: The server receives the authentication ciphertext information in real time, and after decrypting and verifying the authentication ciphertext information, obtains the tag ID, dynamic key, and login information; After matching and verifying the tag ID through the preset charging pile management table, the legitimacy is verified through the login information, and then the user ID is matched through the login information. The current fifth timestamp is obtained, and the fifth timestamp is expanded into a corresponding second time period based on a preset time period division rule. The user ID is concatenated with the second time period to obtain the second concatenated data. The last two digits of the second time period are used as the second random salt value. The PBKDF2 algorithm performs encryption calculation on the second concatenated data based on the second random salt value. The dynamic key is verified based on the calculation result to perform identity authentication. After successful authentication, the corresponding charging pile ID is matched from the charging pile management table based on the tag ID, and then a charging start command is sent to the corresponding charging pile.

Images