A wireless private pile sharing security protection method and related device

Abstract

The present application relates to the field of new energy vehicle charging technology, in particular to a wireless private pile sharing security protection method and related equipment, the method comprising: initiating a private pile sharing request through a mobile terminal of a vehicle owner user to a vehicle background service platform; the vehicle background service platform checks the validity of the shared account associated vehicle and establishes a multi-element association; the vehicle background service platform generates a temporary vehicle key and a temporary vehicle authentication identifier and transmits them to the vehicle-mounted wireless communication controller; the vehicle-mounted wireless communication controller establishes a wireless network connection with the charging pile and completes the first binding; in subsequent charging connection, identity authentication is completed through a random number challenge-response mechanism and the charging process is started. The present application combines the multi-layer security protection mechanism of encrypted transmission, two-way authentication and access control, effectively prevents information leakage and illegal access, and protects the property safety of the pile owner and the shared user.

Description

Technical Field

[0001] This invention relates to the field of new energy vehicle charging technology, and in particular to a method and related equipment for secure protection of wireless private charging station sharing. Background Technology

[0002] With the rapid development of the new energy vehicle industry, the number of private charging stations has increased dramatically. To improve the utilization efficiency of charging stations, wireless private charging station sharing functions have emerged, allowing car owners to share charging access with other users, enabling other vehicles to charge. However, this sharing process involves the transmission of a large amount of sensitive, confidential, and control data, including charging function information of the user's private charging station and wireless network interaction information between the charging station and the mobile terminal. Since private charging stations are typically used and paid for by the car owner, if the corresponding interaction information is illegally obtained by others, it could lead to the unauthorized use of the charging station's power, causing financial losses to the user.

[0003] Existing wireless private charging station sharing solutions primarily focus on the convenience of charging connection, with insufficient attention to information security and authentication mechanisms. Some solutions transmit wireless network passwords in plaintext, posing a risk of interception; others lack effective authentication mechanisms, failing to ensure the legitimacy of connected vehicles and leaving room for unauthorized users to crack and steal data. Therefore, there is an urgent need for a wireless private charging station sharing method that provides comprehensive security protection to safeguard the property of both the charging station owner and the user being shared with. Summary of the Invention

[0004] To address the aforementioned technical issues, this invention proposes a secure protection method and related equipment for sharing wireless private charging stations. By constructing a multi-layered security protection system, combined with encrypted transmission, identity authentication, and access control mechanisms, it achieves comprehensive security protection for the sharing process of wireless private charging stations, effectively preventing information leakage and unauthorized access, and safeguarding users' property security.

[0005] On one hand, embodiments of the present invention provide a method for secure protection of wireless private dock sharing, the method comprising the following steps: The vehicle owner initiates a private charging station sharing request to the vehicle's backend service platform via their mobile terminal. The vehicle back-end service platform receives the private charging pile sharing request, verifies the validity of the vehicle associated with the shared account, establishes the association between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name and the charging pile wireless network password ciphertext, generates a temporary vehicle key, uses a preset encryption key to encrypt the shared vehicle identification code and the temporary vehicle key to generate a temporary vehicle authentication identifier, and transmits the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password and the charging pile wireless network name to the vehicle's on-board wireless communication controller. The vehicle wireless communication controller uses the charging pile wireless network password and charging pile wireless network name to establish a wireless network connection with the charging pile and sends a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed. During subsequent charging connections, the charging pile initiates an authentication request to the vehicle wireless communication controller. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext of the random number are then sent to the charging pile. The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

[0006] Optionally, the vehicle backend service platform uses a preset encryption key to encrypt the shared vehicle identification code and temporary vehicle key to generate a temporary vehicle authentication identifier, and transmits the temporary vehicle key, temporary vehicle authentication identifier, charging pile wireless network password, and charging pile wireless network name to the vehicle's onboard wireless communication controller, including: The vehicle back-end service platform uses a preset encryption key to encrypt a string containing the shared vehicle identification code, temporary vehicle key, and validity period to generate a temporary vehicle authentication identifier. The vehicle back-end service platform and the vehicle wireless communication controller establish an encrypted transmission link using Transport Layer Security Protocol 1.2 to transmit the temporary vehicle key, temporary vehicle authentication identifier, charging pile wireless network password and charging pile wireless network name to the vehicle wireless communication controller. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code, temporary vehicle key, and validity period. After the consistency verification is passed, the temporary vehicle key is stored securely and non-volatilely in accordance with the validity period requirements.

[0007] Optionally, the vehicle-mounted wireless communication controller uses the charging pile's wireless network password and wireless network name to establish a wireless network connection with the charging pile and sends a shared vehicle identification code and temporary vehicle authentication identifier, including: The vehicle-mounted wireless communication controller uses the charging pile wireless network password and the charging pile wireless network name to connect to the charging pile wireless network. After the wireless network connection is established, the charging pile and the vehicle wireless communication controller synchronize their clocks and the connection result is fed back. The vehicle-mounted wireless communication controller sends a shared vehicle identification code and a temporary vehicle authentication identifier to the charging pile via a wireless network channel. The charging pile checks whether a temporary vehicle key has been associated and stored based on the shared vehicle identification code. If it has been stored, it reports that the key has been bound and requests verification; otherwise, it reports that the key has not been bound and requests binding.

[0008] Optionally, the charging pile securely stores the temporary vehicle key based on the temporary vehicle authentication identifier, including: The charging pile decrypts the temporary vehicle authentication identifier to obtain a shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed.

[0009] Optionally, during subsequent charging connections, the charging pile initiates an authentication request to the vehicle-mounted wireless communication controller. The vehicle-mounted wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext are then sent to the charging pile, including: The vehicle-mounted wireless communication controller uses the charging pile wireless network password and the charging pile wireless network name to connect to the charging pile wireless network. After the wireless network connection is established, the charging pile and the vehicle wireless communication controller synchronize their clocks and the connection result is fed back. The vehicle-mounted wireless communication controller sends a shared vehicle identification code to the charging pile through a wireless network channel. The charging pile queries the stored temporary vehicle key based on the shared vehicle identification code and returns a successful identification message; The charging pile initiates an authentication request to the vehicle wireless communication controller; The vehicle-mounted wireless communication controller generates a random number and encrypts the random number using the temporary vehicle key to generate a random number ciphertext; The vehicle-mounted wireless communication controller sends the random number and the encrypted random number to the charging pile.

[0010] Optionally, the charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process, including: The charging station uses the temporary vehicle key to decrypt the random number ciphertext; The charging pile determines whether the decrypted random number matches the received random number; If they match, the charging pile returns authentication success information and starts the alignment detection process; If there is a discrepancy, the charging station will return an authentication failure message and the reason for the failure.

[0011] Optionally, before initiating a private charging pile sharing request to the vehicle's backend service platform via the vehicle owner's mobile terminal, the method further includes: The vehicle back-end service platform receives the request for sharing account key and identity information sent by the mobile terminal; The vehicle back-end service platform distributes authentication keys and identity information to the shared users.

[0012] On the other hand, embodiments of the present invention provide a wireless private dock sharing security protection device, comprising: The request module is used to initiate a private charging pile sharing request to the vehicle backend service platform through the vehicle owner's mobile terminal; The association establishment module is used by the vehicle back-end service platform to receive the private charging pile sharing request, verify the validity of the vehicle associated with the shared account, establish the association relationship between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name and the charging pile wireless network password encrypted text, generate a temporary vehicle key, encrypt the shared vehicle identification code and the temporary vehicle key with a preset encryption key to generate a temporary vehicle authentication identifier, and transmit the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password and the charging pile wireless network name to the vehicle's on-board wireless communication controller. The binding module is used by the vehicle wireless communication controller to establish a wireless network connection with the charging pile using the charging pile wireless network password and the charging pile wireless network name and send a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed. The authentication module is used to initiate an authentication request to the vehicle wireless communication controller during subsequent charging connections. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext of the random number are sent to the charging pile. The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

[0013] On the other hand, embodiments of the present invention provide a wireless private dock sharing security protection system, including: At least one processor; At least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor performs the method described above.

[0014] On the other hand, embodiments of the present invention provide a computer-readable storage medium storing a processor-executable program, which, when executed by a processor, is used to perform the above-described method.

[0015] The embodiments of the present invention have the following beneficial effects: This invention provides comprehensive information security for the wireless private charging pile sharing function by designing a multi-layered security protection mechanism. At the information transmission level, the charging pile wireless network password is transmitted in encrypted form. Key information is encrypted and then combined with other information to generate a QR code. The mobile terminal scans this code to obtain the encrypted ciphertext, effectively preventing easy interception and cracking of information. The vehicle's backend service platform holds the decryption key, which is then securely transmitted to the vehicle's wireless communication controller, ensuring the security of the information transmission link. At the authentication level, a two-way authentication mechanism is added during the connection process between the vehicle controller and the charging pile. A temporary vehicle key is used to encrypt and decrypt random numbers for verification, ensuring that only legitimate registered users can establish a connection and start charging, effectively preventing unauthorized use. Furthermore, by establishing a multi-element association relationship between the shared account, vehicle identification number, and charging pile serial number, and setting an expiration date, refined management of sharing permissions is achieved. This invention employs an encryption system combining RSA2048 asymmetric encryption algorithm and AES128 symmetric encryption algorithm, balancing security and efficiency. The vehicle's backend service platform and the vehicle's wireless communication controller use the TLS1.2 protocol for encrypted transmission, further enhancing the security of the communication link. This invention can effectively solve the risks of information leakage and unauthorized access in the process of wireless private charging station sharing, comprehensively protect the property security of the station owner and the shared user, and improve the reliability of wireless charging sharing function and user trust. Attached Figure Description

[0016] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 This is a flowchart illustrating the steps of a wireless private dock sharing security protection method provided in an embodiment of the present invention; Figure 2 This is a flowchart of the information interaction process during the initial binding phase provided in an embodiment of the present invention; Figure 3This is a flowchart of the information interaction process during the authentication stage provided in an embodiment of the present invention; Figure 4 This is a structural block diagram of a wireless private dock sharing security protection device provided in an embodiment of the present invention. Detailed Implementation

[0018] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0019] It should be noted that although the device diagram shows a modular division and the flowchart illustrates a logical order, in some cases, the steps shown or described may be performed in a different order than the modular division in the device or the order shown in the flowchart. The terms "first," "second," etc., used in the specification, claims, and the aforementioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0020] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein is for the purpose of describing embodiments of the invention only and is not intended to limit the invention.

[0021] Furthermore, the described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. Numerous specific details are provided in the following description to give a full understanding of embodiments of the invention. However, those skilled in the art will recognize that the technical solutions of the invention can be practiced without one or more of the specific details, or other methods, components, apparatuses, steps, etc., can be employed. In other instances, well-known methods, apparatuses, implementations, or operations are not shown or described in detail to avoid obscuring various aspects of the invention.

[0022] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0023] The flowcharts shown in the accompanying drawings are merely illustrative and do not necessarily include all content and operations / steps, nor do they necessarily have to be performed in the described order. For example, some operations / steps can be broken down, while others can be combined or partially combined; therefore, the actual execution order may change depending on the specific circumstances.

[0024] like Figure 1 As shown, Figure 1 A secure protection method for wireless private dock sharing is provided in this embodiment of the invention. The method includes the following steps: S100 initiates a private charging station sharing request to the vehicle back-end service platform via mobile terminal; S200, the vehicle back-end service platform receives the private charging pile sharing request, verifies the validity of the vehicle associated with the shared account, establishes the association relationship between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name and the charging pile wireless network password ciphertext, generates a temporary vehicle key, uses a preset encryption key to encrypt the shared vehicle identification code and the temporary vehicle key to generate a temporary vehicle authentication identifier, and transmits the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password and the charging pile wireless network name to the vehicle's on-board wireless communication controller. S300, the vehicle wireless communication controller uses the charging pile wireless network password and the charging pile wireless network name to establish a wireless network connection with the charging pile and sends a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile securely stores the temporary vehicle key based on the temporary vehicle authentication identifier. S400, during subsequent charging connections, the charging pile initiates an authentication request to the vehicle wireless communication controller. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext of the random number are sent to the charging pile. The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

[0025] This invention proposes a secure protection method and related equipment for wireless private charging pile sharing. By constructing a three-in-one security protection architecture encompassing the platform, vehicle, and charging pile, it organically combines encrypted transmission, two-way authentication, and access control to form a complete security protection chain. Specifically, the vehicle's backend service platform, acting as a trusted third party, is responsible for key generation, identity management, and encryption operations, ensuring that sensitive information is protected before transmission. The vehicle-mounted wireless communication controller, acting as a vehicle-side security agent, is responsible for establishing a secure connection with the charging pile and executing the authentication process. The charging pile, as the charging pile-side security entity, is responsible for verifying the vehicle's identity and controlling charging permissions. Through a two-factor authentication mechanism using a temporary vehicle key and a temporary vehicle authentication identifier, combined with a random number challenge-response protocol, high-strength identity verification is achieved, effectively preventing replay attacks and identity forgery. This method significantly improves the security of wireless private charging pile sharing while ensuring charging convenience.

[0026] In this embodiment, the entire security protection process is divided into three stages: the private pile sharing stage, the initial binding stage, and the authentication stage.

[0027] I. Private Lot Sharing Phase; The specific process for the private pile sharing phase is as follows: S110, a private charging pile sharing request is initiated to the vehicle back-end service platform through the vehicle owner's mobile terminal, and the private charging pile sharing request includes the identity information of the shared account. S120, the vehicle back-end service platform receives the private charging station sharing request and verifies whether the vehicle associated with the shared account is valid and whether the sharing conditions are met. S130, if the verification fails, the vehicle back-end service platform sends a failure message to the mobile terminal; if the verification passes, proceed with the next steps. S140, the vehicle back-end service platform establishes the association between the shared account, the vehicle, and the charging pile, that is, establishes the association between the shared vehicle owner account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name, and the charging pile wireless network password ciphertext. S150, the vehicle back-end service platform generates a temporary vehicle key key-tempVin for the vehicle associated with the shared account; S160, the vehicle back-end service platform uses a preset encryption key Key to encrypt a string containing three pieces of information: the shared account vehicle identification code, key-tempVin, and validity period, to generate a temporary vehicle authentication identifier AuID-tempVin; S170, the vehicle backend service platform feeds back key-tempVin, AuID-tempVin, charging pile wireless network password, and charging pile wireless network name to the vehicle's onboard wireless communication controller associated with the shared user.

[0028] In some embodiments, the communication link between the vehicle back-end service platform and the vehicle wireless communication controller is encrypted using Transport Layer Security Protocol 1.2 (TLS 1.2) to ensure the security of the communication link.

[0029] In some embodiments, the encryption algorithm used by the preset encryption key includes an asymmetric encryption algorithm and a symmetric encryption algorithm. The asymmetric encryption algorithm is RSA2048, and the symmetric encryption algorithm is AES128. By combining asymmetric and symmetric encryption, both security and computational efficiency are taken into account.

[0030] II. Initial Binding Phase; refer to Figure 2 When a user whose right to use a shared charging station is first connected to the charging station via the vehicle's wireless communication controller, the user needs to complete the binding process between the charging station and the shared vehicle's wireless communication controller. The specific process is as follows: S210, the vehicle wireless communication controller connects to the charging pile wireless network using the charging pile wireless network password and the charging pile wireless network name; S220, After the wireless network connection is established, the charging pile and the vehicle wireless communication controller complete clock synchronization and feedback the connection result; S230, the vehicle wireless communication controller sends the vehicle identification code information to the charging pile through the wireless network channel; S240, the charging pile checks whether a temporary vehicle key key-tempVin has been associated and stored based on the shared vehicle identification code information. If it has, it reports that it has been bound and requests verification; if not, the charging pile reports a request to bind. S250, the vehicle wireless communication controller sends a temporary vehicle authentication identifier AuID-tempVin to the charging pile; S260, the charging pile uses a preset encryption key Key to decrypt AuID-tempVin to obtain the shared vehicle identification code, key-tempVin, and validity period; S270, the charging pile verifies whether the decrypted shared vehicle identification code information is consistent with the received shared vehicle identification code information; S280, if consistent, the charging pile stores the key-tempVin securely and non-volatilely according to the validity period requirements; S290, After binding is completed, the charging pile sends a binding success message to the vehicle wireless communication controller.

[0031] During the initial binding phase, a secure association is established between the charging station and the shared vehicle, and the temporary vehicle key is securely stored in the charging station, laying the foundation for the subsequent authentication process.

[0032] In some embodiments, the charging pile securely stores the temporary vehicle key based on the temporary vehicle authentication identifier, including: The charging pile decrypts the temporary vehicle authentication identifier to obtain a shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed.

[0033] By decrypting and verifying the consistency of the temporary vehicle authentication identifier, it is ensured that the temporary vehicle key is credible and has not been tampered with. Only after successful verification is the temporary vehicle key allowed to be written into the secure storage area of ​​the charging pile, preventing the injection and storage of illegal keys.

[0034] III. Authentication Stage; refer to Figure 3After the shared vehicle wireless communication controller is successfully bound to the charging pile's control functions, the charging pile and the vehicle wireless communication controller should complete an authentication process. If this is not the user's first time connecting the vehicle wireless communication controller to the charging pile, only the authentication process is needed to start charging. The specific process is as follows: S310, the vehicle wireless communication controller connects to the charging pile wireless network using the charging pile wireless network password and the charging pile wireless network name; S320, After the wireless network connection is established, the charging pile and the vehicle wireless communication controller complete clock synchronization and feedback the connection result; S330, the vehicle wireless communication controller sends the vehicle identification code information to the charging pile through the wireless network channel; S340, the charging pile queries the stored temporary vehicle key key-tempVin based on the shared vehicle identification code information and returns a successful identification message; S350, the charging pile initiates an authentication request to the vehicle wireless communication controller; S360, the vehicle wireless communication controller generates a random number rand and encrypts the random number using a temporary vehicle key key-tempVin to generate a random number ciphertext Enc(rand). S370, the vehicle wireless communication controller sends a random number rand and a random number ciphertext Enc(rand) to the charging pile. S380, the charging pile uses the temporary vehicle key key-tempVin to decrypt the random number ciphertext Enc(rand), and determines whether the decrypted string is consistent with the received random number; S390, if they match, the charging pile returns authentication success information and starts the alignment detection process; if they do not match, it returns authentication failure information and the reason for failure.

[0035] By implementing a random number challenge-response mechanism during the authentication phase, two-way identity verification is achieved, effectively preventing replay attacks and man-in-the-middle attacks, and ensuring that only legitimate vehicles holding the correct temporary vehicle key can initiate the charging process.

[0036] See Figure 4 This invention provides a wireless private dock sharing security protection device, comprising: The request module is used to initiate a private charging pile sharing request to the vehicle backend service platform through the vehicle owner's mobile terminal; The association establishment module is used by the vehicle back-end service platform to receive the private charging pile sharing request, verify the validity of the vehicle associated with the shared account, establish the association relationship between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name and the charging pile wireless network password encrypted text, generate a temporary vehicle key, encrypt the shared vehicle identification code and the temporary vehicle key with a preset encryption key to generate a temporary vehicle authentication identifier, and transmit the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password and the charging pile wireless network name to the vehicle's on-board wireless communication controller. The binding module is used by the vehicle wireless communication controller to establish a wireless network connection with the charging pile using the charging pile wireless network password and the charging pile wireless network name and send a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed. The authentication module is used to initiate an authentication request to the vehicle wireless communication controller during subsequent charging connections. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext of the random number are sent to the charging pile. The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

[0037] It is evident that the content of the above method embodiments is applicable to the present device embodiments. The specific functions implemented in the present device embodiments are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0038] This invention provides a wireless private dock sharing security protection system, comprising: At least one processor; At least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor performs the method described above.

[0039] It is evident that the content of the above method embodiments is applicable to this system embodiment. The specific functions implemented in this system embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0040] Furthermore, embodiments of the present invention also disclose a computer program product or computer program stored in a computer-readable storage medium. A processor of a computer device can read the computer program from the computer-readable storage medium, and the processor executes the computer program, causing the computer device to perform the described method. Similarly, the content of the above method embodiments is applicable to this storage medium embodiment. The specific functions implemented in this storage medium embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0041] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0042] Those skilled in the art will understand that all or some of the steps in the methods disclosed above, as well as the functional modules / units in the systems and devices, can be implemented as software, firmware, hardware, or suitable combinations thereof.

[0043] The terms "first," "second," "third," "fourth," etc. (if present) in the specification and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0044] It should be understood that in this invention, "at least one (item)" refers to one or more, and "more than one" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0045] In the several embodiments provided by this invention, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0046] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0047] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0048] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes multiple instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing programs, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0049] The preferred embodiments of the present invention have been described above with reference to the accompanying drawings, but this does not limit the scope of the claims of the present invention. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and spirit of the present invention should be within the scope of the claims of the present invention.

Claims

1. A wireless private pile sharing security protection method, characterized in that, The method includes the following steps: The vehicle owner initiates a private charging station sharing request to the vehicle's backend service platform via their mobile terminal. The vehicle back-end service platform receives the private charging pile sharing request, establishes an association between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name, and the charging pile wireless network password ciphertext, generates a temporary vehicle key, uses a preset encryption key to encrypt the shared vehicle identification code and the temporary vehicle key to generate a temporary vehicle authentication identifier, and transmits the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password, and the charging pile wireless network name to the vehicle's on-board wireless communication controller. The vehicle wireless communication controller uses the charging pile wireless network password and charging pile wireless network name to establish a wireless network connection with the charging pile and sends a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile securely stores the temporary vehicle key based on the temporary vehicle authentication identifier. The charging pile initiates an authentication request to the vehicle wireless communication controller. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext of the random number. The random number and the ciphertext of the random number are sent to the charging pile. The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

2. The method of claim 1, wherein, The vehicle backend service platform uses a preset encryption key to encrypt the shared vehicle identification code and temporary vehicle key to generate a temporary vehicle authentication identifier, and transmits the temporary vehicle key, temporary vehicle authentication identifier, charging pile wireless network password, and charging pile wireless network name to the vehicle's onboard wireless communication controller, including: The vehicle back-end service platform uses a preset encryption key to encrypt a string containing the shared vehicle identification code, temporary vehicle key, and validity period to generate a temporary vehicle authentication identifier. The vehicle back-end service platform and the vehicle wireless communication controller establish an encrypted transmission link using Transport Layer Security Protocol 1.2 to transmit the temporary vehicle key, temporary vehicle authentication identifier, charging pile wireless network password and charging pile wireless network name to the vehicle wireless communication controller. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code, temporary vehicle key, and validity period. After the consistency verification is passed, the temporary vehicle key is stored securely and non-volatilely in accordance with the validity period requirements.

3. The method of claim 1, wherein, The vehicle-mounted wireless communication controller uses the charging pile's wireless network password and wireless network name to establish a wireless network connection with the charging pile and sends a shared vehicle identification code and temporary vehicle authentication identifier, including: The vehicle-mounted wireless communication controller uses the charging pile wireless network password and the charging pile wireless network name to connect to the charging pile wireless network. After the wireless network connection is established, the charging pile and the vehicle wireless communication controller synchronize their clocks and the connection result is fed back. The vehicle-mounted wireless communication controller sends a shared vehicle identification code and a temporary vehicle authentication identifier to the charging pile via a wireless network channel. The charging pile checks whether a temporary vehicle key has been associated and stored based on the shared vehicle identification code. If it has been stored, it reports that the key has been bound and requests verification; otherwise, it reports that the key has not been bound and requests binding.

4. The method of claim 1, wherein, The charging pile securely stores the temporary vehicle key based on the temporary vehicle authentication identifier, including: The charging pile decrypts the temporary vehicle authentication identifier to obtain a shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed.

5. The method according to claim 1, characterized in that, The charging pile initiates an authentication request to the vehicle-mounted wireless communication controller. The vehicle-mounted wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a ciphertext random number. The random number and the ciphertext random number are then sent to the charging pile, including: The vehicle-mounted wireless communication controller uses the charging pile wireless network password and the charging pile wireless network name to connect to the charging pile wireless network. After the wireless network connection is established, the charging pile and the vehicle wireless communication controller synchronize their clocks and the connection result is fed back. The vehicle-mounted wireless communication controller sends a shared vehicle identification code to the charging pile through a wireless network channel. The charging pile queries the stored temporary vehicle key based on the shared vehicle identification code and returns a successful identification message; The charging pile initiates an authentication request to the vehicle wireless communication controller; The vehicle-mounted wireless communication controller generates a random number and encrypts the random number using the temporary vehicle key to generate a random number ciphertext; The vehicle-mounted wireless communication controller sends the random number and the encrypted random number to the charging pile.

6. The method according to claim 5, characterized in that, The charging pile decrypts the ciphertext of the random number and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process, including: The charging station uses the temporary vehicle key to decrypt the random number ciphertext; The charging pile determines whether the decrypted random number matches the received random number; If they match, the charging pile returns authentication success information and starts the alignment detection process; If there is a discrepancy, the charging station will return an authentication failure message and the reason for the failure.

7. The method according to claim 1, characterized in that, Before initiating a private charging pile sharing request to the vehicle's backend service platform via the vehicle owner's mobile terminal, the method further includes: The vehicle back-end service platform receives the request for sharing account key and identity information sent by the mobile terminal; The vehicle back-end service platform distributes authentication keys and identity information to the shared users.

8. A wireless private docking station sharing security protection device, characterized in that, include: The request module is used to initiate a private charging pile sharing request to the vehicle backend service platform through the vehicle owner's mobile terminal; The association establishment module is used by the vehicle back-end service platform to receive the private charging pile sharing request, verify the validity of the vehicle associated with the shared account, establish the association relationship between the shared account, the shared vehicle identification code, the charging pile serial number, the charging pile wireless network name and the charging pile wireless network password encrypted text, generate a temporary vehicle key, encrypt the shared vehicle identification code and the temporary vehicle key with a preset encryption key to generate a temporary vehicle authentication identifier, and transmit the temporary vehicle key, the temporary vehicle authentication identifier, the charging pile wireless network password and the charging pile wireless network name to the vehicle's on-board wireless communication controller. The binding module is used by the vehicle wireless communication controller to establish a wireless network connection with the charging pile using the charging pile wireless network password and the charging pile wireless network name and send a shared vehicle identification code and a temporary vehicle authentication identifier. The charging pile decrypts the temporary vehicle authentication identifier to obtain the shared vehicle identification code and a temporary vehicle key, verifies the consistency between the decrypted shared vehicle identification code and the received shared vehicle identification code, and securely stores the temporary vehicle key after the consistency verification is passed. The authentication module is used for the charging pile to initiate an authentication request to the vehicle wireless communication controller. The vehicle wireless communication controller generates a random number and encrypts it using the temporary vehicle key to obtain a random number ciphertext. The random number and the random number ciphertext are sent to the charging pile. The charging pile decrypts the random number ciphertext and verifies the consistency between the decrypted random number and the received random number. After the consistency verification is successful, it returns an authentication success message and starts the charging process.

9. A wireless private docking station sharing security protection system, characterized in that, include: At least one processor; At least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor performs the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a processor-executable program, characterized in that, The processor-executable program, when executed by the processor, is used to perform the method as described in any one of claims 1 to 7.

Images