Charging station for electric vehicles
By distributing submodules into different VLANs within electric vehicle charging stations, the complexity and security risks of network communication are reduced, enhancing the overall IT security of the charging stations.
Patent Information
- Application Number
- DE102023130952
- Authority / Receiving Office
- DE · DE
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2023-11-08
- Publication Date
- 2025-05-08
AI Technical Summary
The increasing complexity of access options and communication within electric vehicle charging stations poses a challenge to improving IT security, particularly as more components and systems are integrated into the network.
The solution involves distributing submodules of the first group into different VLANs, allowing for the separation of functional units with varying security requirements. This configuration simplifies network communication by reducing the complexity of IP address management and enhances security by isolating sensitive components.
This approach improves IT security by segregating components with different security needs, reduces network complexity, and facilitates efficient production and maintenance of charging stations.
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
[0001] The present invention relates to a charging station for electric vehicles according to the preamble of claim 1, a charging station arrangement for electric vehicles according to the preamble of claim 11 and a method for operating a charging station according to claim 15.
[0002] Charging stations for electric vehicles are becoming increasingly widespread. This proliferation brings with it various challenges. The number of people with access to charging stations from any manufacturer is constantly growing. In addition to individuals, backend systems, load management systems, and similar components are also becoming more common, and these can originate from different manufacturers due to standardized protocols. Communication between charging stations and, consequently, network connectivity between charging stations and local networks are also increasing. Furthermore, card terminals for debit and credit cards are becoming more prevalent, and their data privacy implications are considered higher than those of the RFID charging cards previously often used for identification.This growing complexity of access options to charging stations and also to communication within a charging station means that the IT security of charging stations needs to be improved.
[0003] There are known charging stations in which at least some components communicate with each other via Ethernet. One of these components can be a central control unit that communicates with several submodules via an Ethernet switch. For the purposes of this discussion, these submodules are grouped into a first group.
[0004] The invention is based on the problem of designing and further developing known charging stations in such a way as to improve IT security.
[0005] The above problem is solved by the features of the characterizing part of claim 1.
[0006] The fundamental consideration is that the submodules of the first group can be distributed across different VLANs, thus separating functional units with varying security requirements. However, different VLANs within a charging station also offer further advantages. To increase efficiency in charging station production, as many standard components as possible should be used, and modules should be reused. This can complicate the configuration of network communication, such as assigning IP addresses to components. Some standard components do not allow the IP address to be changed.When increasing modularity of the charging station allows for many different combinations of modules, and the charging station is potentially even integrated into an external Ethernet network, maintaining an overview of all conceivable IP configurations becomes increasingly challenging. However, if submodules are separated by VLANs, the complexity is reduced to addressing the correct VLAN, ideally regardless of which actual component is located within that VLAN.
[0007] Specifically, it is proposed that the submodules of the first group be divided into at least two different VLANs, and that the central control unit communicates in the at least two different VLANs.
[0008] In an embodiment according to claim 2, it is proposed that the submodules of the first group and the control unit communicate via the Ethernet switch. Preferably, no further Ethernet switches are provided. This proposes a relatively simple network architecture in which VLANs are not typically used. At the same time, correct communication within the charging station is preferably ensured by very simple cabling steps between the central control unit or the submodules and the Ethernet switch.
[0009] Claims 3 to 8 preferably relate to existing submodules and related embodiments. According to claim 3, a card terminal can be integrated into its own VLAN, which may not contain any other participants. This advantageously isolates the card terminal from other submodules.
[0010] According to claim 4, a service backend router can be provided through which a service backend communicates with the charging station, specifically the central control unit. This service backend router can be used additionally or alternatively for communication with a portable device outside the charging station, for example, a technician's tablet. This communication can take place wirelessly or, according to claim 5, via a service port of the Ethernet switch. For this purpose, this service port can be integrated into the same VLAN as the service backend router. This isolates the charging station's service connection from other submodules.
[0011] In a particularly preferred embodiment according to claim 6, the charging station is a fast-charging station comprising a power converter arrangement for converting an alternating voltage into a direct voltage. The charging station may include a power control unit that controls the power converter arrangement. Preferably, this unit communicates with the power converter arrangement or multiple power converter arrangements of several power modules via a CAN bus. According to claim 7, the power control unit may be integrated into a third VLAN and thus also shielded from other submodules. In particular, the power control unit and the power electronics behind it, which are especially protected here and preferably via the CAN bus, could lead to fatal errors if tampered with. Therefore, by switching between communication methods, increased safety is achieved in addition to the advantages of simpler CAN bus communication.
[0012] According to claim 8, the central control unit can include a cellular modem with which it can communicate with a control backend. This design leads to increased efficiency through the possible use of a central control unit with an integrated cellular modem.
[0013] Claim 9 provides that a second group of submodules is provided, which communicates with the central control unit via a CAN bus, in particular a further CAN bus. A CAN bus allows for more efficient communication, especially for the submodules that cannot or should not accommodate the complexity of Ethernet communication. It also further separates the submodules into different communication domains.
[0014] In an embodiment according to claim 10, powerline communication with the electric vehicle is controlled by the central control unit via a PLC modem. Since this is a direct function of the central control unit, this communication preferably does not run via the Ethernet switch. The powerline communication can be secured in such a way that it only allows the necessary communication, so that access to the charging station's internal networks is not readily possible, even via the powerline communication.
[0015] According to a further teaching as claimed in claim 11, which has independent significance, a charging station arrangement for electric vehicles is claimed. This arrangement comprises at least two charging stations as proposed.
[0016] It is essential that the Ethernet switches of the charging stations are interconnected via Ethernet.
[0017] Reference may be made to all statements regarding the proposed charging station.
[0018] To facilitate communication between the Ethernet switches of the charging station, and especially between their central control units, the Ethernet switches can be configured to communicate via a separate VLAN. This configuration is particularly advantageous when at least two submodules of different charging stations, such as the card terminals of different charging stations, have a fixed IP address that cannot be easily changed. Without VLAN separation, multiple modules with the same IP address would exist within the same Ethernet network. This also simplifies communication between multiple charging stations overall. The charging stations can simply use multiple VLANs for internal communication and one VLAN for external communication, without having to make detailed adjustments depending on the number of charging stations in the network.
[0019] According to claim 13, the charging station arrangement can include a payment station located externally to the charging stations. This payment station can communicate with the charging stations via the additional VLAN. Alternatively, the payment station can also be connected to the port of the Ethernet switch intended for the card terminal. This increases the aforementioned modularity while keeping the communication implementation simple.
[0020] Furthermore, it may be provided that the Ethernet switches of the charging stations are configured identically in such a way that they are interchangeable without modification. An actual exchange will be rare, but this design concerns the basic configuration of the Ethernet switches, which enables simple production of the charging stations (claim 14).
[0021] According to a further teaching as claimed in claim 15, which also has independent significance, a method for operating a proposed charging station is claimed as a proposed charging station arrangement.
[0022] Reference may be made to all statements regarding the proposed charging station and the proposed charging station arrangement.
[0023] The invention will now be explained in more detail with reference to a drawing that merely illustrates exemplary embodiments. The drawing shows Fig. 1. A view of a proposed charging station, here a fast charging station. Fig. 2 an interior view of the fast charging station according to Fig. 1, Fig. 3 the network architecture of the fast charging station according to Fig. 1 and Fig. 4 a fast charging station arrangement.
[0024] The embodiment shown in the figures, which is the preferred embodiment, relates to a charging station 1 for electric vehicles. This charging station 1 is, and preferably is, a fast charging station. Fast charging stations, also known as high-performance chargers, are direct current charging stations for electric vehicles, especially automobiles, but also trucks, ships, and the like. All embodiments of the charging station 1 are therefore particularly preferred for a single fast charging station, especially within the scope of the further teachings to be explained, in which several fast charging stations can also be provided as charging stations 1.
[0025] Fig. Figure 1 shows an external view of a proposed fast charging station for electric vehicles. This station has at least one connection point 2 for an electric vehicle, in this case a permanently attached charging cable 3. Preferably, the fast charging station has at least, and in this case exactly, two connection points 2. A fast charging station is used to charge an electric vehicle using direct current and a power output of usually at least 50 kW. The fast charging station is typically connected to an alternating current network.
[0026] As seen in the open view in Fig. As can be seen from Figure 2, the fast charging station has at least one individually controllable power module 4. Here, the fast charging station has seven power modules 4, each of which provides a portion of the total power of the fast charging station, for example, 30 kW each. The power modules 4 can be flexibly distributed among the connection points 2.
[0027] The term "individually manageable" is to be interpreted broadly here. For example, power module 4 weighs approximately 39 kg, so it is not easy to handle. However, it can be removed individually, and the components of power module 4 are not individually installed in the fast charging station.
[0028] The power module 4 includes power electronics. The power electronics include a converter assembly 5. The converter assembly 5 serves here, and preferably, to convert a three-phase mains voltage as the input voltage of the fast charging station into a DC voltage. Here, and preferably, the power electronics include a rectifier and a downstream DC-DC converter, which are not shown in detail. DC bus bars 6 for distributing the output power of the power modules 4 to the connection points 2 are visible in the upper area of the fast charging station. The AC voltage input is located in the lower area and is not shown.
[0029] Fig. Figure 3 schematically shows various components of charging station 1. Charging station 1 comprises a central control unit 7, an Ethernet switch 8, and several submodules, which are assigned to a first group 9. The central control unit 7 and the submodules of the first group 9 are connected via Ethernet. The central control unit 7 communicates with the submodules of the first group 9 via Ethernet. It is conceivable, though not included in all configurations, that some of the submodules of the first group 9 also communicate with each other via Ethernet.
[0030] It is essential that the submodules of the first group 9 are divided into at least two different VLANs 10, and that the central control unit 7 communicates in the at least two different VLANs 10. Fig. Figure 3 shows, as an example, the physical ports 11 of the Ethernet switch 8. The VLANs 10 are indicated by different hatching patterns. It should be noted, however, that some ports 11 can enable communication to multiple VLANs 10 via tagged communication. This applies here, and preferably to the port 11 to which the central control unit 7 is connected, which communicates via this port 11 in several, preferably all, VLANs 10.
[0031] Here, and preferably, the submodules of the first group 9 and the control unit communicate via the Ethernet switch 8. Preferably, no further Ethernet switches 8 are interposed in this communication. Here, and preferably, the charging station 1 even has exactly one Ethernet switch 8.
[0032] Based on Fig. 3. The preferably intended submodules can now be considered.
[0033] Here, and preferably, one of the submodules is a card terminal 12 for card payments, in particular at least for credit card payments. The card terminal 12 is integrated into a first VLAN 13 and communicates with the central control unit 7 in the first VLAN 13. Preferably, no other participant communicates in the first VLAN 13 besides the control unit and the card terminal 12. This can be implemented, in particular, by ensuring that no other participant is present in the first VLAN 13. A port 11 of the Ethernet switch 8, to which the card terminal 12 is preferably connected, can be an untagged port 11.
[0034] Additionally or alternatively, one of the submodules can be a service backend router 14. The service backend router 14 is integrated into a second VLAN 15 and communicates with the central control unit 7 in this second VLAN 15. The numbering of the VLANs 10 serves only for linguistic differentiation. In particular, the second VLAN 15 can also exist even if the first VLAN 13 does not exist, and so on.
[0035] The service backend router 14 can communicate with a service backend 16 via cellular network and / or with a portable device outside the charging station 1 via WLAN, enabling communication between the service backend 16 and / or the portable device and the central control unit 7. The service backend 16 is preferably assigned to the manufacturer of the charging station 1 and collects general operating data, enables remote maintenance, and the like. The portable device can be a laptop, tablet, or smartphone, allowing a service technician to connect to the charging station 1 on-site. Port 11 of the Ethernet switch 8, to which the service backend router 14 is preferably connected, can be an untagged port 11.
[0036] Furthermore, and preferably, the Ethernet switch 8 is provided with a service port 17, which serves for communication with a portable device and which is, in particular, only integrated into the second VLAN 15. Preferably, during operation of the charging station 1, an Ethernet cable 18 is connected to the service port 17 for connection to the portable device. The Ethernet cable 18 thus remains in the charging station 1 and is accessible to a service technician if necessary. The service port 17 can be an untagged port 11.
[0037] As mentioned, charging station 1 is preferably a fast charging station. The fast charging station preferably has a power converter 5 for converting an alternating voltage as the input voltage of the fast charging station into a direct voltage as the output voltage of the fast charging station. Furthermore, the fast charging station preferably has a power control unit 19 that controls the power converter 5. Preferably, the fast charging station has several power modules 4, each with a power converter 5, and the power control unit 19 controls the power modules 4 and, in particular indirectly, their power converter assemblies 5, preferably via a CAN bus 20. It should be mentioned in advance that the fast charging station preferably has two CAN buses 20, which are configured separately from each other. Both are in Fig. 3 shown.
[0038] The power control unit 19 is integrated here and preferably into a third VLAN 21 and communicates with the central control unit 7 in the third VLAN 21.
[0039] Furthermore, it is preferably provided that the central control unit 7 includes a cellular modem 22 and that the cellular modem 22 communicates with a control backend via cellular network, enabling communication between the control backend and the central control unit 7. The control backend is preferably assigned to a charging station operator. This allows the operator to configure, monitor, and otherwise manage the charging station 1. The cellular modem 22 is not connected to the central control unit 7 via the Ethernet switch 8, but is integrated into the central control unit. This takes into account the fact that central control units 7 of charging stations 1 may already have an integrated cellular modem 22.
[0040] As also in Fig. As shown in Figure 3, the charging station 1 can be provided with at least one sub-module assigned to a second group 23, and the central control unit 7 communicates with the sub-module of the second group 23 via a CAN bus 20. This CAN bus 20 is preferably a different CAN bus 20 than the one mentioned above.
[0041] Preferably, the submodules of the second group 23 comprise an LED controller 24 for LEDs of the charging station 1 and / or a temperature monitoring device 25 and / or one, in particular two, charging point controllers 26. Although the plural is used here, it is possible that only one submodule of the second group 23 is present. It is further preferably provided that the charging point controllers 26 establish PWM communication with an electric vehicle. The PWM communication is used here, and preferably, as Control Pilot (CP) 27 communication.
[0042] In particular, it is evident from the described and illustrated network architecture that submodules with network functionality and communication to the outside of charging station 1 preferably communicate with each other via the Ethernet switch 8 and are separated by the VLANs 10, while internal communication between charging station 1 and submodules used for control, which do not communicate externally or communicate at a lower hardware level (PLC, CP), communicate via at least one CAN bus 20. This allows for a more cost-effective design of these submodules, as Ethernet capability is not required. Furthermore, a higher level of IT security is achieved, since a hypothetical attacker would have to overcome different networks to access electrically critical areas of charging station 1.
[0043] Preferably, and as shown, the charging station 1 has a PLC modem 28, and the PLC modem 28 establishes power line communication with an electric vehicle. Preferably, the PLC modem 28 is directly connected to the central control unit 7 and / or acts as an Ethernet interface to the central control unit 7. In the latter case, the PLC modem 28 is preferably connected to the central control unit 7 without using a VLAN 10 and / or not via the Ethernet switch 8. In contrast to the Ethernet connections described so far, the central control unit 7 is preferably not physically connected to the PLC modem 28 via Ethernet at OSI layer 1, but uses the Ethernet protocol at OSI layer 2 for communication. However, an Ethernet connection at OSI layer 1, either directly or via the Ethernet switch 8, is also conceivable.
[0044] According to a further teaching, a charging station arrangement 29 for electric vehicles is proposed with at least two, preferably at least three, charging stations 1 according to the proposal, in particular fast charging stations.
[0045] Essentially, according to this further teaching, the Ethernet switches 8 of the charging stations 1 are interconnected via Ethernet. Fig. Figure 3 schematically shows two further charging stations 1 and their Ethernet switches 8.
[0046] Reference may be made to all statements regarding the proposed charging station 1.
[0047] In this further teaching, it is preferably provided that the Ethernet switches 8 of the charging stations 1 communicate via, in particular, another VLAN 30 (in Fig. (3, designated as VLAN 4). Preferably, at least two submodules of different charging stations 1 in the additional VLAN 30 have the same IP address and do not communicate via the additional VLAN 30. This means that the charging stations 1 themselves are located in the additional VLAN 30, not the submodules. If two charging stations 1 located in the additional VLAN 30 have submodules with the same IP address, for example, because this is specified by the manufacturer, these charging stations 1 cannot be easily connected via Ethernet without the proposed VLAN 10 approach, at least not if this would result in the two submodules with the same IP address being located in the same network. However, if the charging station manufacturer is not the manufacturer of the aforementioned submodules, a change is also complex. This complexity can be avoided here.Here, and preferably only here, the central control units 7 of the charging stations 1 communicate with each other and potentially with other components, which need not be charging stations 1, via the additional VLAN 30. The Ethernet switches 8 and thus the VLANs 10 of the charging stations 1 are configured identically here, preferably also with regard to the physical arrangement of their ports 11.
[0048] Preferably and in Fig.As shown schematically in Figure 4, the charging station arrangement 29 includes a payment station 31 external to the charging stations 1. Payment station 31 communicates with the charging stations 1 via the second VLAN 30, or alternatively, payment station 31 communicates with the charging stations 1 via the first VLAN 13. Payment station 31 is connected to port 11 of the respective Ethernet switches 8, which is assigned to the first VLAN 13. The charging stations 1 are configured to communicate with the card terminal 12 via this port 11, but a card terminal 12 is not provided in each case. The control configuration of the central control unit 7 is particularly simple if it knows that a billing-relevant component is always located in a specific VLAN 10 and that, during the installation of the charging station 1, either payment station 31 or a card terminal 12 is connected to port 11 assigned to this VLAN 10.Configuring the communication between card terminal 12 or payment station 31 and central control unit 7 can then preferably be omitted.
[0049] Furthermore, it is preferably intended that the Ethernet switches 8 of the charging stations 1 are configured identically so that they can be interchanged without modification.
[0050] According to a further teaching, a method for operating a charging station 1 according to the proposed method is suggested, preferably for operating several charging stations 1 according to the proposed method as a charging station arrangement 29 according to the proposed method.
[0051] Reference may be made to all statements concerning the proposed charging station 1 and the proposed charging station arrangement 29. Reference symbol list 1 charging station 2 connection point 3 charging cables 4 Power module 5 Power converter arrangement 6 DC rail 7 central control unit 8 Ethernet Switch 9 first group 10 VLAN 11 Port 12 card terminals 13 first VLAN 14 Service backend routers 15 second VLAN 16 Service backend 17 Service ports 18 Ethernet cables 19 Power control unit 20 CAN bus 21 third VLAN 22 Mobile modem 23 second group 24 LED controller 25 Temperature monitoring device 26 charging point controllers 27 Control Pilot (CP) 28 PLC Modem 29 Charging station arrangement 30 additional VLANs 31 Payment Station
Claims
[1] Charging station for electric vehicles, wherein the charging station (1) has a central control unit (7), an Ethernet switch (8) and a plurality of submodules, wherein the submodules are assigned to a first group (9), wherein the central control unit (7) and the submodules of the first group (9) are connected via Ethernet, wherein the central control unit (7) communicates with the submodules of the first group (9) via Ethernet, characterized by that the submodules of the first group (9) are divided into at least two different VLANs (10), and that the central control unit (7) communicates in the at least two different VLANs (10). [2] Charging station according to claim 1, characterized by that the submodules of the first group (9) and the control unit communicate via the Ethernet switch (8), preferably without the interposition of further Ethernet switches (8). [3] Charging station according to claim 1 or 2, characterized bythat one of the submodules is a card terminal (12) for card payment, that the card terminal (12) is integrated into a first VLAN (13) and communicates with the central control unit (7) in the first VLAN (13), preferably that apart from the control unit and the card terminal (12) no other participant communicates in the first VLAN (13). [4] Charging station according to one of the preceding claims, characterized by that one of the submodules is a service backend router (14), that the service backend router (14) is integrated into a second VLAN (15) and communicates with the central control unit (7) in the second VLAN (15), preferably that the service backend router (14) communicates via mobile radio with a service backend (16) and / or via WLAN with a portable device outside the charging station (1) and enables communication between the service backend (16) and / or the portable device and the central control unit (7). [5] Charging station according to claim 4, characterized by that the Ethernet switch (8) has a service port (17) which serves for communication with a portable device and which is, in particular only, integrated into the second VLAN (15), preferably that during operation of the charging station (1) an Ethernet cable (18) is connected to the service port (17) for connection to the portable device. [6] Charging station according to one of the preceding claims, characterized bythat the charging station (1) is a rapid charging station, that the rapid charging station has a power converter arrangement (5) for converting an alternating voltage as the input voltage of the rapid charging station into a direct voltage as the output voltage of the rapid charging station, that the rapid charging station has a power control device (19) which controls the power converter arrangement (5), preferably that the rapid charging station has a plurality of power modules (4), each with a power converter arrangement (5), that the power control device (19) controls the power modules (4) and, in particular indirectly, their power converter arrangements (5), preferably via a CAN bus (20). [7] Charging station according to claim 6, characterized by that the power control unit (19) is integrated into a third VLAN (21) and communicates with the central control unit (7) in the third VLAN (21). [8] Charging station according to one of the preceding claims, characterized bythat the central control unit (7) has a mobile radio modem (22), that the mobile radio modem (22) communicates with a control backend via mobile radio and enables communication between the control backend and the central control unit (7). [9] Charging station according to one of the preceding claims, characterized by that the charging station (1) has at least one sub-module which is assigned to a second group (23), that the central control unit (7) communicates with the sub-module of the second group (23) via a CAN bus (20), preferably that the sub-modules of the second group (23) have an LED controller (24) for LEDs of the charging station (1) and / or a temperature monitoring device (25) and / or one, in particular two, charging point controllers (26), further preferably that the charging point controllers (26) establish a PWM communication with an electric vehicle. [10] Charging station according to one of the preceding claims, characterized bythat the charging station (1) has a PLC modem (28), that the PLC modem (28) establishes a power line communication with an electric vehicle, preferably that the PLC modem (28) is connected directly to the central control unit (7) and / or acts as an Ethernet interface to the central control unit (7). [11] Charging station arrangement for electric vehicles with at least two, preferably at least three, charging stations (1) according to one of the preceding claims, characterized by that the Ethernet switches (8) of the charging stations (1) are connected to each other via Ethernet. [12] Charging station arrangement according to claim 11, characterized by that the Ethernet switches (8) of the charging stations (1) communicate via, in particular precisely, a further VLAN (30), preferably that at least two submodules of different ones of the charging stations (1) in the further VLAN (30) have the same IP address and do not communicate via the further VLAN (30). [13] Charging station arrangement according to claim 11 or 12, characterized by that the charging station arrangement (29) has a payment station (31) external to the charging stations (1), that the payment station (31) communicates with the charging stations (1) via the further VLAN (30), or that the payment station (31) communicates with the charging stations (1) via the first VLAN (13), such that the payment station (31) is connected to a port (11) of the respective Ethernet switches (8) assigned to the first VLAN (13) and the charging stations (1) are set up to communicate alternatively with the card terminal (12) via this port (11), but a card terminal (12) is not provided in each case. [14] Charging station arrangement according to one of claims 11 to 13, characterized by that the Ethernet switches (8) of the charging stations (1) are configured in such a way that they can be exchanged without changes. [15] Method for operating a charging station (1) according to one of claims 1 to 10, preferably for operating a plurality of charging stations (1) according to one of claims 1 to 10 as a charging station arrangement (29) according to one of claims 11 to 14.
Citation Information
Patent Citations
Charging station for electric vehicles with a tamper-proof payment device
DE102020124154A1
Charging point for electric vehicles
EP4183618A1
ATM charging station
US20120262112A1
Intelligent electric-vehicle charging station
US20210237610A1