A dynamic authorization leasing system of energy storage equipment under network-free working condition

Abstract

This application relates to a dynamic authorization leasing system for energy storage equipment under offline operating conditions, aiming to solve the problems of difficult authorization determination and lack of offline receipts in offline environments. The system includes a cloud-based authorization management platform, a mobile interactive relay unit, and a local control system for the energy storage equipment. Through cloud-generated encrypted messages, mobile relay transmission, local decryption verification, and multi-source time verification, coupled with an offline evidence storage message return mechanism, it achieves refined management and control of energy storage assets under offline operating conditions. This application effectively prevents clock tampering and illegal overuse, ensuring closed-loop auditing of leasing operations and asset security.

Description

Technical Field

[0001] This invention belongs to the field of power system automation and energy leasing technology, specifically relating to a dynamic authorized leasing system for energy storage equipment under network-free operating conditions. Background Technology

[0002] Against the backdrop of the rapid development of the energy internet and power electronics technology, distributed energy storage devices, as core units for power security and energy regulation, are widely used in key areas such as infrastructure construction, emergency repair, and power supply in remote areas. Energy storage technology not only effectively solves the problem of mismatch between power supply and demand in time and space, but also provides efficient peak shaving and valley filling and frequency response support for the power system through flexible modular deployment. With the continuous innovation of energy service models, the leasing of energy storage devices has become an important way to improve asset liquidity and reduce users' initial investment. Its intelligent management level directly determines the efficiency and security of energy operations.

[0003] Among them, the dynamic authorization leasing technology for energy storage equipment under special operating conditions aims to ensure the rigid execution of leasing contracts and the operational safety of equipment assets by digitally encapsulating and controlling the equipment's output power, usage period, and functional permissions. This technology typically involves server-side permission generation, transmission medium interaction, and local verification on the device side, aiming to establish a reliable authorization verification logic under conditions without communication network coverage, and to realize lifecycle management of large-scale discrete distributed energy storage assets.

[0004] Existing technologies, when addressing environments with insufficient mobile communication network coverage, such as tunnels, mines, or remote mountain construction sites, largely rely on offline authorization schemes combining unique hardware identifiers and encrypted activation codes. However, this model faces multiple severe challenges in practical applications: the system's tamper-proof reliability is significantly insufficient, as users often illegally extend the device's lifespan by removing the real-time clock battery to reset the system time or manually reverting the local clock, rendering the authorization restriction mechanism ineffective. Simultaneously, the real-time clock in offline environments is affected by physical factors such as environmental temperature drift, easily accumulating significant deviations over long periods of operation. Without rigorous time window comparison and clock calibration mechanisms, this can lead to disorder in the authorization judgment logic. Furthermore, existing technical solutions often exhibit one-way authorization characteristics, preventing the management end from timely obtaining the actual remaining power, workload, and operating status of offline devices. The lack of effective offline information feedback and subsequent data synchronization loops hinders the achievement of refined management goals for energy storage leased assets. These shortcomings significantly increase the risk of asset misuse and reduce operation and maintenance efficiency in dynamic leasing scenarios. Therefore, an optimized dynamic authorization leasing system for energy storage devices in network-free operating conditions is desired. Summary of the Invention

[0005] The purpose of this invention is to provide a dynamic authorization leasing system for energy storage devices in the absence of a network, so as to solve the technical problems mentioned in the background art, such as difficulty in time calibration, clock tampering fraud, disordered authorization judgment logic, and lack of offline information feedback closed loop faced by energy storage leasing devices in environments without mobile communication network coverage.

[0006] The technical solution of the present invention includes: The cloud-based authorization management platform is used to store device identity information, maintain rental agreement logic, and generate highly encrypted dynamic authorization messages. The mobile interactive relay unit is used to download dynamic authorization messages generated by the cloud authorization management platform in a network environment, and transmit the dynamic authorization messages to the energy storage device through the near field communication protocol in a network-free environment, while reading the offline operation certificate messages of the energy storage device. The local control system for energy storage devices is used to receive dynamic authorization messages and decrypt and verify them, control the on / off state and output power of the energy storage power output unit according to the authorization instructions, and record operating data in real time to generate offline operation certificate messages.

[0007] Furthermore, the cloud-based authorization management platform includes: The equipment asset digital twin module is used to build a digital model that corresponds one-to-one with the physical energy storage equipment, and to update the equipment's unique hardware identifier, cumulative charge and discharge cycle count, current battery health status, and estimated remaining power in real time. The key distribution and management center is used to generate and manage asymmetric key pairs based on national cryptographic algorithms, including private keys for issuing authorization instructions and public keys pre-installed in the security chip of energy storage devices. A dynamic leasing strategy generator is used to encapsulate and form an original authorization instruction sequence based on the time span, power limit, total energy quota, and allowed geofence coordinates stipulated in the leasing contract. The message encapsulation and signing module is used to calculate the digest of the original authorization instruction sequence using a hash algorithm, and to sign the digest using the private key of the key distribution and management center. Finally, the original instruction, the signature result and the random interference sequence are encapsulated into a standardized dynamic authorization message.

[0008] Furthermore, the mobile interactive relay unit uses a mobile terminal with near-field communication or wireless local area network access capabilities as the data carrier at the physical layer. The mobile interactive relay unit is pre-installed with an offline interactive application, which has a two-way caching mechanism. In areas with network connectivity, the application establishes an encrypted communication tunnel with the cloud-based authorization management platform, retrieves the authorization dataset of the specified device, and stores it in a local encrypted database. When entering an area where energy storage devices are deployed without network coverage, the application establishes a logical connection with the local control system of the energy storage device through near-field coupling or short-range wireless communication at the physical layer, and performs one-way push of authorized data and reverse capture of operation evidence data. When the mobile interactive relay unit returns to the network coverage area, the application automatically triggers a synchronization task to upload the captured offline operation evidence message to the cloud authorization management platform, completing the closed-loop audit of the leasing business.

[0009] Furthermore, the local control system for the energy storage device includes: The embedded security processing core integrates a hardware security module that conforms to national cryptographic standards, which is used to perform decryption, signature verification, and message integrity checks of dynamic authorization messages. A multi-source time-aware and verification unit is used to build a reliable reference time that does not rely on external networks, ensuring the accuracy of authorization validity determination; The energy metering and power regulation module is used to sample the output voltage and current of the battery pack at high frequency, calculate the cumulative released energy in real time, and regulate the output power of the bidirectional converter through pulse width modulation signal. The non-volatile operational evidence storage device uses a storage medium with power-loss protection to cyclically store the device's operating status, authorization consumption progress, and system alarm logs with time stamp information, serving as the data source for generating offline operational evidence messages.

[0010] As one embodiment of the present invention, the multi-source time sensing and verification unit includes: The main real-time clock module uses a temperature-compensated crystal oscillator with temperature compensation as the clock source, providing absolute timestamps at the second level; A backup hardware timer is integrated into the embedded security processing core. It uses the system clock frequency to count and serves as a verification reference for the main real-time clock module. The clock tampering detection circuit is used to monitor the power supply status of the real-time clock module. When it detects that the external power supply battery of the real-time clock module has been removed or replaced, it immediately generates a hardware interrupt signal and records the tampering flag bit. The time logic consistency check logic is used to compare the current system time, the last running timestamp recorded in non-volatile memory, and the time sequence contained in the authorization message each time the system wakes up or receives a new authorization message; When the current system time is found to be earlier than the last recorded running timestamp, it is determined that there is a clock rollback behavior, and the system automatically locks the authorization and refuses to execute power output.

[0011] As one embodiment of the present invention, the authorization verification logic executed by the embedded security processing core is as follows: Read the device private key pre-installed in the hardware security module, decrypt the dynamic authorization message, and extract the target hardware unique identifier; The decrypted target hardware unique identifier is compared with the locally embedded hardware unique identifier. If the two do not match, the verification is terminated. The public key in the hardware security module is used to verify the digital signature of the authorized message, ensuring the authority and non-repudiation of the instruction source; Parse the authorization parameters to obtain the allowed start time, end time, maximum output power threshold, and total energy consumption quota.

[0012] Furthermore, the local control system of the energy storage device also includes a dynamic permission decay algorithm module; The dynamic permission decay algorithm module dynamically corrects the maximum output power threshold in the authorization message based on real-time collected battery state of charge, ambient temperature, and health indicators. If the battery is in a low state of charge or in a high-temperature environment, the system will force a reduction in output power by a preset ratio, even if the authorized message allows for higher power output, in order to prioritize the safety of equipment assets. Meanwhile, the energy metering and power regulation module accumulates the released electricity in real time and compares it with the total energy consumption quota in the authorized message in real time. When the discharged electricity reaches 95% of the total energy consumption quota, the system triggers an early warning signal; when it reaches 100%, the system automatically cuts off the output contactor and terminates the energy supply.

[0013] As one embodiment of the present invention, the logic for generating and interacting with offline evidence storage messages is as follows: The non-volatile operational evidence storage device records the charge / discharge curve characteristics, maximum operating temperature, average load rate, and illegal operation attempts in encrypted form for each authorized cycle. The embedded security processing core periodically performs hash operations on the above data and uses the device private key to perform digital signatures, generating an immutable offline evidence storage message; When the mobile interactive relay unit initiates a data read request, the local control system of the energy storage device first verifies the access rights of the mobile terminal. After successful verification, the offline operation certificate message is pushed to the mobile terminal. After receiving the returned evidence storage message, the cloud-based authorization management platform analyzes the data characteristics and compares them with the digital twin model to identify potential hardware failures or signs of human sabotage, and adjusts the risk level and authorization strategy of the device in subsequent leasing periods accordingly.

[0014] Furthermore, the local control system for energy storage devices also includes an emergency manual authorization mechanism; In the event of damage to the mobile interactive relay unit or in an extreme emergency, the cloud-based authorization management platform will issue a dynamic password consisting of numbers and letters to on-site personnel via satellite phone or other low-bandwidth voice channels. On-site personnel input dynamic passwords through the physical button interface built into the energy storage device; The embedded security processing core integrates a password evolution algorithm, which is updated synchronously with the cloud-based authorization management platform. By verifying the legality of the input password, it grants the device emergency operation permissions with time and power limits.

[0015] Furthermore, the local control system of the energy storage device operates within a multi-level task scheduling framework, which includes: The real-time task layer performs battery status acquisition, power closed-loop control, and safety threshold monitoring at a cycle of no more than 10 milliseconds, and has the highest priority. The authorized management layer performs message decryption, permission comparison, and time consistency checks at intervals not exceeding 100 milliseconds, and responds to external interaction requests. The storage audit layer writes system operating parameters to a non-volatile operating evidence storage device at a cycle of no more than 1 second, and performs historical data cleaning and archiving.

[0016] Furthermore, the energy metering and power regulation module adopts a bidirectional analog-to-digital conversion architecture to monitor the energy flow on the DC and AC sides in real time; The DC-side monitoring branch includes a high-precision shunt or Hall current sensor to capture current fluctuations in individual battery cells and perform energy integration using coulomb calculation. The AC side monitoring branch includes a dedicated power metering chip to acquire active power, reactive power and harmonic components, ensuring that the output power quality meets the standards for grid connection or independent power supply. The power regulation module, based on the maximum output power threshold in the authorized instruction, adjusts the duty cycle of the converter power transistor to achieve a rigid limit on the output power, preventing users from exceeding the permitted range of equipment usage.

[0017] Furthermore, the multi-source time sensing and verification unit also includes a compensation algorithm based on the temperature-frequency characteristic curve; The embedded security processing core reads ambient temperature sensor data in real time and calculates the clock drift compensation value at the current temperature based on the temperature-compensated crystal oscillator frequency deviation curve pre-mapped and stored in read-only memory. The system automatically fine-tunes the count value of the real-time clock module based on the frequency of temperature changes or at fixed intervals, controlling the cumulative time deviation caused by physical factors to within 100 milliseconds per day. This ensures that the time reference error between the device and the cloud remains within an acceptable range during an offline authorization period of more than 3 months.

[0018] As one embodiment of the present invention, the local control system of the energy storage device also has a geofence-assisted determination function. The energy storage device has a built-in low-power GPS receiver to periodically acquire latitude and longitude coordinate information; When generating dynamic authorization messages, the cloud-based authorization management platform includes definitions of permitted geofence regions. Before executing authorization, the local control system of the energy storage device compares the current location coordinates with the authorized geofence; If the device is illegally moved outside the authorized area, the system will immediately lock the energy output channel and issue a local audible and visual alarm, while recording the illegal displacement event in the non-volatile operating evidence storage memory.

[0019] Compared with the prior art, the advantages and positive effects of the present invention are as follows: 1. This invention achieves reliable issuance and verification of leasing permissions for energy storage devices in a completely offline environment by constructing an asymmetric encryption system based on hardware security modules. The dynamic authorization message not only includes time-based restrictions but also integrates multi-dimensional control features such as power limits, energy quotas, and geofencing, upgrading the original single-function on / off authorization to a refined dynamic control system with multi-parameter fusion. This digital encapsulation mechanism ensures the rigid execution of the leasing agreement at the physical level, fundamentally eliminating the risk of illegal and unauthorized use of assets in offline environments and greatly enhancing the asset management capabilities of energy service providers.

[0020] 2. This invention constructs a robust time tamper-proof and self-calibration system through multi-source time sensing and verification units. Utilizing a multi-redundant design including a master clock, backup timer, tamper detection circuit, and logic consistency checks, it effectively blocks common fraudulent methods such as resetting the time by removing the battery or manually rewinding the clock. Simultaneously, a temperature compensation algorithm is introduced to proactively correct clock temperature drift, resolving the issue of accumulated time errors during long-term offline operation, ensuring the absolute objectivity and fairness of authorization invalidation determination, and protecting the legitimate rights and interests of both the lessor and lessee.

[0021] 3. This invention establishes an offline information receipt closed-loop mechanism based on a mobile interactive relay unit, breaking the unidirectional information flow constraint of traditional offline authorization schemes. Through encrypted offline operation evidence messages, the management terminal can asynchronously obtain the actual load, health status, and operation records of the equipment during offline periods. This design not only provides tamper-proof data support for accurate billing in leasing businesses, but also provides key dimensions of data assets for predictive maintenance, fault diagnosis, and full lifecycle value assessment of distributed energy storage assets.

[0022] 4. This invention deeply integrates device operational security into the authorization logic through a multi-level task scheduling framework and a dynamic permission decay algorithm. The system can dynamically adjust authorization parameters based on the real-time physical characteristics of the battery. This principle of "safety first, authorization second" ensures that the device will not experience safety accidents such as thermal runaway or over-discharge due to blindly executing leasing instructions under extreme and harsh operating conditions. Combined with geofencing functionality and an emergency password mechanism, it constructs a safety barrier for energy storage leasing across all scenarios and operating conditions, possessing extremely high industrial application value and economic benefits. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only for this invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1 This is a schematic diagram of the overall technical architecture of the dynamic authorized leasing system for energy storage devices under network-free conditions proposed in this invention. Figure 2 This is a schematic diagram of the core principle framework for the secure encryption and decryption verification of dynamic authorization messages in this invention; Figure 3 This is a schematic diagram illustrating the multi-level interaction relationship and data flow between the cloud platform, mobile relay, and energy storage device in this invention; Figure 4 This is a logical flowchart of the multi-source time perception and time logic consistency check in this invention. Figure 5 This is a logical flowchart of the offline operation evidence storage message generation and closed-loop audit of leasing business in this invention. Detailed Implementation

[0025] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to specific embodiments.

[0026] Example 1 Please refer to the attached document. Figure 1 This embodiment discloses a dynamic authorization leasing system for energy storage devices in network-free environments. This system aims to solve the challenge of refined leasing management of energy storage devices in completely mobile communication network-free environments such as remote areas, underground spaces, or areas without communication base station coverage. The entire system is logically divided into three core layers: a cloud-based authorization management platform, a mobile interactive relay unit, and a local control system for the energy storage devices.

[0027] The cloud-based authorization management platform, serving as the decision-making brain and data source for the entire system, is deployed in a server cluster with public network access. Beyond storing device identity information and maintaining leasing agreement logic, its core task is generating highly secure dynamic authorization messages. To achieve precise mapping of physical devices, the platform integrates a digital twin module for device assets. This module constructs a full-lifecycle digital model for each physical energy storage device entering the leasing market. This model synchronizes and stores the device's unique hardware identifier in real time; this identifier is permanently stored in the hardware's read-only memory at the time of manufacture and is immutable. Furthermore, the digital twin model tracks the cumulative number of charge-discharge cycles, current battery health status, and estimated remaining capacity in real time. Through this digital twin mechanism, the cloud platform can perceive the physical degradation of each device and dynamically adjust its maximum output power limit in subsequent leasing authorizations.

[0028] In terms of security architecture, the cloud-based authorization management platform is equipped with a key distribution and management center. This center strictly adheres to the domestic symmetric and asymmetric encryption algorithm standards promulgated by the State Cryptography Administration, and is responsible for generating and managing asymmetric key pairs. The private key is securely stored by the cloud platform and is strictly prohibited from being leaked; it is specifically used for digitally signing issued authorization commands. The corresponding public key is pre-installed in the hardware security chip inside the energy storage device during the factory initialization phase, and is used to perform subsequent identity verification and message signature verification.

[0029] When a leasing transaction occurs, a dynamic leasing strategy generator intervenes. It considers the specific constraints of the leasing contract, including but not limited to the start date and precise time, end date and deadline, maximum allowed output current and power thresholds, the total allowed power consumption quota for this lease, and the geographical latitude and longitude range within which the equipment is permitted to operate. These parameters are encapsulated into an original authorization instruction sequence. Subsequently, the message encapsulation and signing module uses a hash algorithm to calculate a digest of the original authorization instruction sequence, and the digest result is then encrypted and signed using a private key. To further enhance the message's resistance to replay attacks, the system also adds a randomly generated interference sequence and a time-sensitive serial number to the message, ultimately encapsulating it into a standardized dynamic authorization message.

[0030] Since the energy storage equipment is deployed in a network-free environment, this system introduces a mobile interactive relay unit as the physical layer data carrier. Please refer to the appendix. Figure 3Mobile interactive relay units are typically smartphones, tablets, or dedicated handheld terminals equipped with near-field communication (NFC) or wireless LAN (WLAN) capabilities. These relay units come pre-installed with a customized offline interactive application, whose core technical feature is a two-way caching mechanism. In areas with cellular or broadband connectivity, maintenance personnel or users connect to a cloud-based authorization management platform via this application, retrieve dynamic authorization messages for designated energy storage devices through an encrypted communication tunnel, and encrypt and store them in the mobile terminal's local secure database.

[0031] When the mobile relay unit accompanies personnel into an area where energy storage devices are deployed without network coverage, the application establishes a logical connection with the local control system of the energy storage device through physical layer near-field coupling technology, such as near-field communication at a frequency of 13.56 MHz, or through a short-range wireless LAN access point. At this time, the relay unit performs unidirectional push of authorization data, transmitting pre-stored dynamic authorization messages to the energy storage device. Simultaneously, to complete the business loop, the relay unit also retrieves offline operation verification messages recorded by the energy storage device. When personnel return to an area with network coverage carrying the relay unit, the application automatically triggers a background synchronization task, uploading the retrieved operation verification data to the cloud-based authorization management platform. By parsing the verification messages, the cloud platform can accurately determine whether the device experienced over-power usage, whether it operated outside of authorized hours, and the actual battery wear during offline periods, thereby completing the audit of the leasing business.

[0032] The local control system of an energy storage device is the physical terminal that executes authorized commands and ensures operational safety. Its integrated embedded security processing core is the command center of the entire control system, containing hardware security modules compliant with domestic cryptographic standards. Upon receiving a message from a mobile relay unit, this core first decrypts it using the device's private key, extracting the target hardware's unique identifier from the message. The core then compares the extracted identifier bit-by-bit with the identifier embedded in the local hardware circuitry. Only if both match completely will the subsequent verification process continue. Subsequently, the system uses a pre-set public key to verify the message's digital signature, recalculates the message digest using a digest algorithm, and compares it with the decrypted digest. If they match, the system confirms the command's legitimate origin and that it has not been tampered with during transmission.

[0033] To ensure absolute fairness in authorization time determination and prevent users from extending the service life by modifying the system clock, the local control system of the energy storage device integrates a multi-source time sensing and verification unit. This unit constructs a self-consistent time reference that does not rely on external satellite signals or network time synchronization. Please refer to the appendix. Figure 4, the multi-source time perception and verification unit includes a main real-time clock module, a backup hardware timer, and a clock tampering monitoring circuit. The main real-time clock module uses a temperature-compensated crystal oscillator with temperature compensation function as the clock source. In the wide temperature range from -40 degrees Celsius to 85 degrees Celsius, its frequency deviation is strictly controlled within a very small range, and it can provide an absolute timestamp accurate to the second level. The backup hardware timer is integrated inside the embedded security processing core, and it directly uses the system main frequency for counting as a redundant reference for the main real-time clock. The clock tampering monitoring circuit is an independent hardware protection mechanism. It continuously monitors the external power supply battery status of the real-time clock module. Once a power supply interruption is detected, it determines that there may be an act of violently resetting the clock such as battery removal, and immediately generates a non-erasable hardware interrupt signal.

[0034] Upon each system wake-up or receipt of a new authorization message, the time logic consistency check logic performs a deep timing audit. It compares the current system time, the timestamp of the last normal operation recorded in the non-volatile memory, and the effective time sequence in the authorization message. The time logic consistency check logic performs the following steps: (a) If the current system time T_sys < T_last_run - ΔT_max, it is determined that the clock has been rolled back and the authorization is locked; (b) If T_sys > T_last_run + T_offline_max, it enters the grace period mode and only allows reading of the evidence; (c) If the effective time T_start of the authorization message > T_sys + ΔT_allow, the activation is rejected; where ΔT_max is 10 seconds, T_offline_max is 90 days, and ΔT_allow is 5 minutes. Based on the logical manifestation of the second law of thermodynamics in the information flow, the system time must increase unidirectionally. If it is found that the currently read system time is earlier than the recorded last run timestamp, the system will immediately determine that a clock rollback behavior has occurred. At this time, the system will automatically lock all authorizations and reject the execution of the power output instruction until a legitimate maintenance personnel performs a hardware reset through high-level permissions.

[0035] To further improve the long-term stability of the clock, the multi-source time perception and verification unit also introduces a compensation algorithm based on the temperature-frequency characteristic curve. The embedded security processing core reads the data of the ambient temperature sensors distributed at key positions on the circuit board in real time, and calls the temperature-compensated crystal oscillator frequency deviation curve pre-surveyed and固化 in the read-only memory for calculation. The specific compensation logic follows the following formula: In this formula, represents the estimated value of the frequency drift at the current ambient temperature, with the unit of Hertz, represents the inherent quadratic temperature coefficient of the crystal oscillator, which is determined during factory calibration; represents the currently measured ambient temperature by the sensor, The zero-deviation reference temperature for the crystal oscillator is typically set to 25 degrees Celsius. This represents the initial frequency deviation at the reference temperature. Using this formula, the system automatically fine-tunes the real-time clock module's count value based on the frequency of temperature changes or at fixed intervals (preferably 24 hours), controlling the cumulative time deviation caused by physical factors to within 100 milliseconds per day. This high-precision time compensation mechanism ensures that even during offline rental periods exceeding three months, the cumulative error between the device's internal time base and the cloud-based standard time remains within a controllable range, effectively preventing premature authorization expiration or unauthorized extensions due to time drift. The embedded security processing core is based on... Calculate daily cumulative time deviation = 86400 × / f0 (where f0 is the nominal frequency of the crystal oscillator), and The daily compensation pulse count N_comp converted to an RTC counter = round( × f_RTC), where f_RTC is the RTC clock frequency; the system injects or subtracts N_comp pulses into the RTC counter every 24 hours to achieve fine-tuning.

[0036] The local control system for energy storage devices also includes an energy metering and power regulation module. This module employs a bidirectional analog-to-digital converter architecture to monitor the energy flow between the DC-side battery pack and the AC-side load in real time. The DC-side monitoring branch includes a high-precision Hall current sensor capable of capturing current fluctuations from as low as 10 mA to as high as 500 amps, and uses a coulomb calculation method to perform high-frequency integration of the current to obtain the total energy released by the battery pack. The AC side uses a dedicated energy metering chip to obtain the root mean square values ​​of the output voltage and current, as well as the active power, in real time. The power regulation module, based on the maximum output power threshold set in the authorized instructions, adjusts the duty cycle of the pulse width modulation signal of the inverter's power switching transistors to achieve a rigid limit on the output power. If the load power connected by the user exceeds the authorized limit, the system will automatically enter current-limiting mode or directly shut down the output to prevent the user from using the equipment beyond its authorized limits.

[0037] To ensure safe operation of the equipment in complex environments, the system also integrates a dynamic permission attenuation algorithm module. This module prioritizes security over authorization, dynamically adjusting the maximum output power threshold in authorization messages based on real-time collected health indicators such as battery state of charge, ambient temperature, and individual battery voltage differences. The specific attenuation logic follows the formula below: In the formula, This refers to the maximum allowable output power actually performed by the energy storage device. The original power limit agreed upon in the dynamic authorization message; The attenuation coefficient is based on the state of charge. When the state of charge is below 20%, the coefficient decreases linearly from 1 to 0.2 to prevent the battery from over-discharging. When the discharged power reaches 95% of the total energy consumption quota, the system triggers a warning signal. When it reaches 100%, the system triggers a controlled shutdown procedure or issues a power lockout command. The attenuation coefficient is based on ambient temperature. When the ambient temperature exceeds 45 degrees Celsius or falls below 0 degrees Celsius, this coefficient is reduced according to a preset heat dissipation efficiency model to avoid the risk of battery thermal runaway. This dynamic correction mechanism ensures that even if the authorized message allows for higher power output, the system will protect itself based on the actual load-bearing capacity of the physical entity. The attenuation coefficient α_SOC based on state of charge is defined as follows: when SOC ≥ 20%, α_SOC = 1; when SOC < 20%, α_SOC = max(0.2, 1 - 0.8 × (20% - SOC) / 20%). The attenuation coefficient α_Temp based on ambient temperature is obtained from a temperature-coefficient mapping table pre-stored in ROM using linear interpolation. The mapping table contains at least the following data points: (-20℃, 0.3), (0℃, 0.8), (25℃, 1.0), (45℃, 0.9), (60℃, 0.5).

[0038] During offline operation, the non-volatile operational record storage plays a crucial recording role. This storage uses a magnetoresistive random access memory with power-loss protection to cyclically store device operating parameters with time-stamped information in encrypted form. Please refer to the appendix. Figure 5 The records cover the characteristics of charge / discharge voltage and current curves, maximum and minimum operating temperatures, average load rate, illegal operation attempts, and geographic location change logs for each authorized cycle. The embedded security processing core periodically performs hash calculations on these data blocks and uses the device-specific private key to digitally sign them, generating tamper-proof offline operational evidence messages. These messages are read after two-way authentication when the mobile interaction relay unit approaches.

[0039] The local control system of the energy storage device in this embodiment operates within a multi-level task scheduling framework. This framework divides system tasks into three levels based on response time and importance. The real-time task layer executes at a cycle of no more than 10 milliseconds, primarily responsible for high-frequency sampling of battery status, proportional-integral-derivative control of the power loop, and hardware-level overcurrent and overvoltage protection. The authorization management layer runs at a cycle of no more than 100 milliseconds, responsible for listening to message requests from the near-field communication interface, executing decryption and signature verification algorithms, and processing time consistency checks. The storage audit layer runs at a cycle of no more than 1 second, responsible for organizing and encapsulating instantaneous operational data in memory, writing it to non-volatile memory, and performing cleanup and archiving of historical outdated data. This hierarchical scheduling mechanism ensures that the system's real-time response to underlying battery protection commands is not affected when processing complex encryption algorithms.

[0040] Furthermore, the local control system of the energy storage device also has a geofence-assisted determination function; the energy storage device has a built-in low-power GPS receiver, used to periodically acquire latitude and longitude coordinate information during the authorization activation period; when the cloud authorization management platform generates a dynamic authorization message, it includes the definition of the allowed polygonal geofence area in the message; before executing the authorization, the local control system of the energy storage device compares the current positioning coordinates with the polygonal geofence area; the polygonal geofence area is composed of the vertex coordinate sequence {(lat1,lon1), (lat2,lon2), ...,(lat1,lon1), (lat2,lon2), ...,(lat1,lon1), (lat2,lon2), ...,(lat2,lon2), ( ... n ,lon n The embedded security processing core uses an improved ray crossing method or a surround number algorithm for determination: A ray is emitted from the current coordinates (lat, lon) in a due east direction, and the number of intersections with the polygon boundary is counted. If the number is odd, the device is within the region. Coordinate calculation uses the WGS-84 ellipsoid model, with an angle accuracy of no less than 1e-6 degrees. If the device is detected to be outside the polygon's geofence area, the system immediately locks the energy output channel and issues a local audible and visual alarm, while simultaneously recording the illegal displacement event in the non-volatile operational evidence storage memory. The embedded security processing core converts the WGS-84 latitude and longitude coordinates to the ECEF rectangular coordinate system, projects the polygon vertices and the current coordinates onto a local tangent plane, and then executes the standard ray crossing algorithm on this plane. For polygons that cross a 180° meridian, they are first split into two non-crossing sub-polygons for separate determination. If either sub-polygon is determined to be inside, the entire polygon is considered to be within the region.

[0041] To address potential extreme situations, such as damage or loss of the mobile interactive relay unit, the system also includes an emergency manual authorization mechanism. In such cases, on-site personnel can contact the cloud management center via satellite phone. The cloud platform uses a password generation algorithm that evolves synchronously with the device to issue a dynamic emergency password consisting of 8 digits and letters. On-site personnel input this password through the miniature physical button interface on the energy storage device. After successful verification, the embedded security processing core temporarily grants the device a short-term emergency operating permission, such as allowing it to operate at 20% of its rated power for 24 hours to cope with sudden power demands.

[0042] In summary, this embodiment constructs a three-in-one architecture consisting of a cloud platform, mobile relays, and local secure terminals. Utilizing high-strength asymmetric encryption algorithms and multi-dimensional physical operational constraints, it achieves refined management and control of energy storage leasing operations in network-free environments. The system not only prevents time tampering, unauthorized movement, and over-power usage, but also achieves a closed-loop audit of operations through offline evidence storage messages, providing energy service providers with robust asset security and a solid basis for billing.

[0043] Example 2 Based on Example 1, this embodiment further optimizes the data flow logic of the mobile interactive relay unit and the energy precision metering strategy of the local control system of the energy storage device for large-scale distributed energy storage leasing scenarios.

[0044] In multi-device collaborative leasing scenarios, the offline interactive application within the mobile interactive relay unit employs a priority queue-based data exchange mechanism. When a maintenance personnel enters a centralized control area containing multiple energy storage devices with a mobile terminal, the application automatically generates an interaction priority based on the remaining authorization time for each device in the local database and the backlog of evidence storage messages. For devices whose authorizations are about to expire or whose evidence storage space is about to overflow, the mobile interactive relay unit prioritizes allocating communication bandwidth for pushing authorization messages and retrieving evidence storage data. To improve data transmission reliability, a segmented verification and breakpoint resumption protocol is introduced into the near-field communication process between the relay unit and the energy storage devices. Each transmitted data packet contains a cyclic redundancy check (CRC) code. Once a bit error is detected due to physical jitter or interference, the system immediately triggers a retransmission mechanism to ensure the integrity and losslessness of the authorization message.

[0045] Within the local control system of the energy storage device, the energy metering and power regulation module has been further enhanced. To cope with more complex load characteristics, the AC side monitoring branch not only records the basic active power but also introduces harmonic analysis logic based on Fast Fourier Transform. The energy metering chip acquires voltage and current waveforms at a sampling frequency of 4000 times per second, analyzing the 3rd, 5th, and 7th harmonic components generated by the load. If harmonic pollution generated by a nonlinear load exceeds the preset power quality standard, the system will actively compensate by dynamically adjusting the switching frequency and filtering characteristics of the converter. Simultaneously, this power quality data is also recorded in the offline operation record message. The cloud-based authorization management platform can use this data to assess whether the lessee has connected a substandard load and use it as a reference for subsequent rental pricing or deposit deduction.

[0046] Regarding the energy integration algorithm, this embodiment employs a bidirectional correlation calibration strategy. The system not only utilizes the coulomb counter on the DC side for energy accumulation but also references the output energy data from the AC side metering chip. Considering heat loss during the inverter process, the system has a pre-set efficiency mapping table. This table retrieves the current inverter efficiency based on the measured output power and ambient temperature. The embedded safety processing core compares the ratio of energy released on the DC side to the output energy on the AC side in real time. If the deviation between the two exceeds the reasonable range determined by the inverter efficiency model—for example, if the DC side discharges extremely quickly while the AC side output is minimal—the system will determine whether the battery pack has an energy balance anomaly or an internal / external leakage fault based on the pre-set inverter efficiency mapping table. It will immediately generate a safety warning and automatically reduce the total permitted energy quota in the authorization policy to protect asset safety.

[0047] For long-term offline operation, the multi-source time sensing and verification unit in this embodiment adds compensation logic based on the aging characteristics of the crystal oscillator. Because temperature-compensated crystal oscillators undergo irreversible physical aging during long-term operation, their center frequency slowly drifts. The embedded security processing core records the total operating hours of the device since its manufacture and, combined with the aging deviation curve provided by the crystal oscillator manufacturer, adds a time-dimensional correction to the temperature compensation. This correction follows this logic: as operating time accumulates, the system automatically fine-tunes the clock frequency calibration coefficient every 1000 hours. Through this two-dimensional compensation, the annualized time error of the device in a time-insensitive environment is further reduced to less than 10 seconds.

[0048] In the parsing logic of dynamic authorization messages, this embodiment introduces tiered access control. The messages generated by the dynamic leasing strategy generator not only contain a single power limit but also a set of power curves that change over time. For example, higher output power is allowed during peak electricity consumption periods, while the limit is automatically lowered during off-peak periods or sensitive periods when the battery is under high temperature and pressure. When executing authorization, the local control system of the energy storage device dynamically switches the power limit parameters strictly according to the time axis in the message. This refined authorization mechanism enables energy service providers to implement refined leasing strategies similar to time-of-use pricing, improving the utilization efficiency of energy storage assets.

[0049] The logic for generating offline evidence storage messages was also extended in Example 2. To facilitate fault prediction by the cloud platform, a battery cell voltage consistency distribution map was added to the evidence storage message. Before the end of each authorization cycle, the embedded security processing core statistically analyzes the voltage difference distribution between the highest and lowest voltage points of all battery cells and calculates the standard deviation. This key characteristic reflecting the battery pack's equilibrium state is included in the evidence storage message. When the mobile relay unit transmits this data back to the cloud, the digital twin module of the cloud authorization management platform compares it with historical benchmark data. If a trend of increasing standard deviation is detected, the system will automatically trigger a maintenance work order and adjust the risk level of the device in the next rental cycle, restricting it from performing high-rate discharge tasks.

[0050] Furthermore, the emergency manual authorization mechanism in this embodiment adds an interaction process based on physical challenge values. When on-site personnel input a request command, the energy storage device screen displays a randomly generated 6-digit challenge code. The on-site personnel then inform the cloud administrator of this challenge code. After the administrator inputs it into the cloud management platform, the platform generates a response code based on the challenge code and the device's private key. The on-site personnel then input the response code into the device. This challenge-and-response-based secondary authentication mechanism effectively prevents the risk of emergency passwords being reused multiple times, ensuring the uniqueness and security of emergency operations. The embedded security processing core and the cloud authorization management platform share the same initial seed S0, and each independently maintains its own hash chain node H. n = Hash(H n-1 The cloud generates an emergency password OTP = H at time t. k Where k is determined by the current UTC timestamp modulo N; after receiving the input password, the device calculates the local H. kThe OTP is compared with the data. If they match and k is greater than the last used index, emergency access is granted for 24 hours at 20% of the rated power, and the local index is updated. The device maintains a sliding window [k_min, k_max], where k_max = k_last_used + W, and W is the preset window width (e.g., W=100). The device calculates H_{k_min} to H_{k_max} sequentially and compares them with the input OTP. If they match and k>k_last_used, authorization is successful and k_last_used = k is updated. When the cloud generates the OTP, k = floor(current_UTC_timestamp / T_interval) mod N, and T_interval is the password validity period (e.g., 60 seconds).

[0051] Through the above improvements, Example 2 not only enhances the data processing efficiency of the system in large-scale distributed applications, but also significantly improves the perception accuracy and control depth of the physical state of energy storage assets, enabling it to adapt to more complex and ever-changing commercial leasing needs.

[0052] Example 3 This embodiment focuses on a reliability enhancement scheme for a dynamic authorized leasing system for energy storage devices in extremely harsh environments, such as extremely cold or extremely high altitude areas, where there is no network.

[0053] In extreme low-temperature environments, the electrochemical activity of batteries decreases significantly. Blindly executing conventional authorization logic can easily lead to permanent capacity decay. Therefore, this embodiment introduces a preheating management and authorization linkage mechanism into the local control system of the energy storage device. When the energy storage device receives a dynamic authorization message and completes verification, the energy metering and power regulation module does not immediately activate external power output. Instead, it first reads the internal temperature distribution of the battery pack. If the average temperature is below 5 degrees Celsius, the system automatically enters preheating mode, utilizing some battery energy to drive the built-in heating film. At this time, the dynamic permission decay algorithm module locks the output contactor in real time and sends a waiting signal to the mobile interactive relay unit. Only when the battery temperature rises back to a safe operating range will the system gradually release power output permissions according to the authorization instructions. The heating energy consumption during this process is accurately measured and used as a special field in the offline operation evidence message, which is considered by the cloud platform when settling rental fees, reflecting the fairness of the lease agreement.

[0054] In the low-pressure environment of high-altitude areas, the heat dissipation efficiency of power devices such as inverters will decrease significantly. The energy storage device in this embodiment integrates an atmospheric pressure sensor. The dynamic derating algorithm module incorporates atmospheric pressure as a key correction factor when calculating the actual allowable output power. Based on the preset altitude power derating curve, the system automatically reduces the maximum continuous output power under high-altitude conditions to prevent power transistors from burning out due to overheating.

[0055] Regarding data security, Example 3 introduces a multi-layered non-volatile storage backup mechanism. Considering the potential increase in electronic component failure rates under extreme environments, the non-volatile operational evidence storage memory employs dual physical media backup. One copy of the data is stored in a high-performance magnetoresistive random access memory (MRAM) for high-frequency real-time writing; the other copy is compressed, encrypted, and backed up to a highly durable ferroelectric random access memory (FRAM) after each authorization cycle. The embedded security processing core periodically performs consistency checks on the two storage media. If a hardware failure is detected in the main memory, the system automatically switches to the backup media and uses evidence storage messages to send a hardware damage warning to the mobile relay unit, thereby significantly improving the survival rate of offline data.

[0056] In the enhanced design of the time-aware unit, this embodiment considers the extreme scenario of long-term failure of the main real-time clock module. An ultra-low-power watchdog timer based on a low-frequency oscillator is added to the system. This timer has a completely independent power supply branch, maintaining basic timing functionality even when both the main power supply and the main clock backup battery are simultaneously depleted. When the system is woken up by external power, the time span during the downtime can be roughly compensated by reading the overflow count of the watchdog timer. Although its accuracy is lower than that of a temperature-compensated crystal oscillator, it effectively prevents the risk of time returning to zero due to a complete system power failure, providing a final line of defense for time consistency checks.

[0057] To address the concurrent interaction needs of large-scale leasing groups, the cloud-based authorization management platform in Example 3 introduces a blockchain-based ledger for evidence storage. The hash digest of each generated dynamic authorization message and each returned offline evidence storage message is synchronously written into the distributed ledger. This design ensures the immutability and traceability of leasing records. Even if the energy service provider's internal database malfunctions or is attacked, the lessee can prove their legitimate usage rights through the ledger data. Simultaneously, this mechanism provides technical support for multi-party collaborative energy leasing financial services, such as asset securitization products based on energy storage revenue, which can utilize the evidence storage data on the blockchain for real-time cash flow settlement.

[0058] Finally, the emergency manual authorization mechanism in this embodiment is reinforced at the algorithm level. The embedded security processing core integrates a password sequence based on a hash chain. Each emergency password issued by the cloud platform is a node on the hash chain. Each time a password is used on the device, the corresponding node is automatically destroyed and moved to the next verification point. This one-way, irreversible password mechanism completely eliminates the possibility of intercepting passwords for unauthorized secondary authorization.

[0059] Through the supplementary design of Example 3, this system has achieved an extremely high industrial level in terms of physical environment adaptability, data survivability and business transparency, and can meet the commercial energy storage leasing needs under various extreme geographical conditions.

Claims

1. A dynamic authorization and leasing system for energy storage devices under network-free operating conditions, characterized in that, include: The cloud-based authorization management platform is used to store device identity information, maintain rental agreement logic, and generate encrypted dynamic authorization messages. The cloud-based authorization management platform includes: a digital twin module for equipment assets, used to construct a digital model corresponding one-to-one with the physical energy storage equipment, and to update the equipment's unique hardware identifier, cumulative charge-discharge cycle count, current battery health status, and estimated remaining power in real time; a key distribution and management center, used to manage asymmetric key pairs based on domestic cryptographic algorithms, the asymmetric key pairs including a private key for issuing authorization instructions and a public key pre-installed in the security chip inside the energy storage equipment; a dynamic leasing strategy generator, used to encapsulate and form an original authorization instruction sequence according to the time span, power limit, total energy quota, and geofence coordinates stipulated in the leasing contract; and a message encapsulation and signature module, used to perform digest calculation on the original authorization instruction sequence using a hash algorithm, and to digitally sign the digest using the private key, encapsulating the original instruction, signature result, and random interference sequence into a standardized dynamic authorization message; The mobile interactive relay unit adopts a mobile terminal with near-field communication or wireless local area network access capabilities. The mobile terminal is pre-installed with an offline interactive application with a two-way caching mechanism. In areas with network connectivity, the offline interactive application retrieves dynamic authorization messages through an encrypted communication tunnel and stores them in a local encrypted database. When entering an area without network coverage, it transmits the dynamic authorization messages to the energy storage device through a near-field communication protocol and simultaneously reads the offline operation certificate messages of the energy storage device. The local control system for the energy storage device includes: an embedded security processing core for performing decryption verification and message integrity checks on dynamic authorization messages; a multi-source time sensing and verification unit for constructing a self-consistent reference time independent of external networks; an energy metering and power regulation module for sampling the output voltage and current of the battery pack to calculate the cumulative released energy in real time and adjusting the output power of the converter through pulse width modulation signals; and a non-volatile operation evidence storage memory for cyclically storing the device operating status, authorization consumption progress, and system alarm logs with time stamp information, serving as the data source for generating the offline operation evidence message.

2. The dynamic authorization and leasing system for energy storage devices under network-free operating conditions according to claim 1, characterized in that, The message encapsulation and signature module of the cloud-based authorization management platform is used to add a time-sensitive serial number to the message when generating dynamic authorization messages to enhance the message's resistance to replay attacks; the original authorization instruction sequence generated by the dynamic leasing strategy generator contains multiple sets of time-varying tiered power limit parameters, and the local control system of the energy storage device dynamically switches the corresponding power limit value according to the current system time axis during the authorization execution period.

3. The dynamic authorization and leasing system for energy storage devices under network-free operating conditions according to claim 1, characterized in that, The multi-source time sensing and verification unit includes: The main real-time clock module uses a temperature-compensated crystal oscillator with temperature compensation as the clock source, providing absolute timestamps at the second level; A backup hardware timer is integrated inside the embedded security processing core. It uses the system's main frequency to count and serves as a redundancy check reference for the main real-time clock module. The clock tampering detection circuit is used to continuously monitor the power supply status of the main real-time clock module. When it detects that the external power supply battery has been removed or replaced, it generates a hardware interrupt signal and records the tampering flag bit. The time logic consistency check logic is used to compare the current system time, the last running timestamp recorded in the non-volatile running evidence storage, and the effective time sequence in the authorization message when the system wakes up or receives a new message; when it is found that the current system time is earlier than the recorded last running timestamp, it is determined that there is a clock rollback behavior and the authorization is automatically locked.

4. The dynamic authorization and leasing system for energy storage equipment under network-free operating conditions according to claim 3, characterized in that, The multi-source time sensing and verification unit also executes a compensation algorithm based on the temperature-frequency characteristic curve; the embedded security processing core reads ambient temperature sensor data in real time and calculates the clock drift compensation value at the current temperature according to the temperature-compensated crystal oscillator frequency deviation curve pre-embedded in the read-only memory; the specific process of the compensation algorithm is as follows: obtain the difference between the current ambient temperature and the crystal oscillator zero-deviation reference temperature, calculate the product of the square of the difference and the inherent quadratic temperature coefficient of the crystal oscillator, and superimpose it on the initial frequency deviation at the reference temperature to obtain the frequency drift estimate; the embedded security processing core fine-tunes the count value of the main real-time clock module once according to the temperature change frequency or at fixed intervals, and controls the cumulative time deviation to within 100 milliseconds per day.

5. The dynamic authorization and leasing system for energy storage equipment under network-free operating conditions according to claim 1, characterized in that, The authorization verification logic executed by the embedded security processing core is as follows: Read the device private key pre-installed in the security chip, decrypt the dynamic authorization message, and extract the target hardware unique identifier from the message; The target hardware unique identifier is compared with the hardware unique identifier embedded in the local hardware circuit. If the two are inconsistent, the verification is terminated. The public key in the security chip is used to verify the digital signature of the authorized message to ensure the authority of the instruction source; Parse the authorization parameters to obtain the allowed start time, end time, maximum output power threshold, and total energy consumption quota.

6. The dynamic authorization leasing system for energy storage equipment under network-free operating conditions according to claim 1, characterized in that, The local control system of the energy storage device also includes a dynamic permission decay algorithm module. This module dynamically lowers the maximum output power threshold in the authorization message based on real-time collected battery state of charge and ambient temperature. The correction process follows this logic: the original power limit in the dynamic authorization message is multiplied by a decay coefficient based on state of charge and a decay coefficient based on ambient temperature to obtain the actual maximum allowed output power. When the battery state of charge is below 20%, the decay coefficient based on state of charge decreases linearly from 1 to 0.

2. When the released power reaches 95% of the total energy consumption quota, the system triggers a warning signal. When it reaches 100%, the system triggers a controlled shutdown procedure or issues a power blockade command.

7. The dynamic authorization leasing system for energy storage equipment under network-free operating conditions according to claim 1, characterized in that, The energy metering and power regulation module adopts a bidirectional analog-to-digital conversion architecture; the bidirectional analog-to-digital conversion architecture includes a DC-side monitoring branch and an AC-side monitoring branch; the DC-side monitoring branch includes a Hall current sensor, which is used to capture the current fluctuation of the battery cell and perform energy integration using the coulomb calculation method; the AC-side monitoring branch includes a dedicated energy metering chip, which is used to obtain active power, reactive power and harmonic components. The embedded safety processing core compares the ratio of energy released from the DC side to energy output from the AC side in real time, and determines whether the battery pack has an energy balance abnormality or internal or external leakage faults based on the preset inverter efficiency mapping table.

8. The dynamic authorization leasing system for energy storage equipment under network-free operating conditions according to claim 1, characterized in that, The logic for generating and interacting with the offline operation evidence storage message is as follows: The non-volatile operation evidence storage memory records the charge and discharge curve characteristics, maximum operating temperature, average load rate, illegal operation attempt records, and battery cell voltage consistency distribution map in each authorized cycle in encrypted form. The embedded security processing core periodically performs hash operations on the above data and uses the device private key to perform digital signatures to generate tamper-proof offline running evidence storage messages. When the mobile interactive relay unit initiates a data read request, the local control system of the energy storage device pushes the offline operation certificate message to the mobile terminal after completing two-way identity authentication.

9. A dynamic authorized leasing system for energy storage devices under network-free operating conditions according to claim 1, characterized in that, The local control system of the energy storage device also has a geofence-assisted determination function; the energy storage device has a built-in low-power GPS receiver, which is used to periodically acquire latitude and longitude coordinate information during the authorization activation period; when the cloud authorization management platform generates a dynamic authorization message, it includes the definition of the allowed polygonal geofence area in the message; before executing the authorization, the local control system of the energy storage device compares the current positioning coordinates with the polygonal geofence area. If the device is detected to be outside the polygonal geofence area, the system immediately locks the energy output channel and issues a local audible and visual alarm, while simultaneously recording the illegal displacement event in the non-volatile operational evidence storage memory.

10. A dynamic authorized leasing system for energy storage devices under network-free operating conditions according to claim 1, characterized in that, The local control system of the energy storage device operates within a multi-level task scheduling framework and integrates an emergency manual authorization mechanism. This multi-level task scheduling framework includes a real-time task layer, an authorization management layer, and a storage audit layer. The real-time task layer performs battery status acquisition and hardware protection at intervals not exceeding 10 milliseconds. The authorization management layer performs message verification and interactive request response at intervals not exceeding 100 milliseconds. The storage audit layer performs data writing to the memory at intervals not exceeding 1 second. When the mobile interactive relay unit is unavailable, the emergency manual authorization mechanism, through dynamic password verification based on Time-to-Pattern (TOTP) or hash chain truncation algorithms, grants the device time-limited and power-limited emergency operation permissions by the embedded security processing core.

Images