Method for providing authentication data of a user to an energy-transforming device and energy-transforming device - Patents.com

Abstract

The invention relates to a method for defining authentication data of a user in an energy-transforming device via a network connection, the energy-transforming device being connected to a grid and to a source, the method comprising the steps of: receiving (S1) a request from a user via the network connection for a new allocation of authentication data, receiving (S2) the desired authentication data of the user via the network connection, and persistently storing (S4) the desired authentication data in the energy-transforming device for authentication of the user during subsequent access attempts to the energy-transforming device only if the energy-transforming device is disconnected from the grid to which it is connected within a first pre-defined time window (A) after receiving the request. The invention also relates to an energy-transforming device designed to execute the method.

Description

[Technical field]

[0001] The present invention relates to a method for providing authentication data of a user to an energy transforming device connected to a grid and to a source via a network connection. The present invention further relates to an energy transforming device, in particular an energy transforming device in the form of an inverter, configured to perform the method. [Background technology]

[0002] User access to energy-changing devices, especially inverters, via a network connection is a widespread functionality and is often required for operation and maintenance. For this purpose, user authentication data required during an access attempt is stored in the energy-changing device in order to authenticate the user, e.g. the device owner or a service technician. It can be, for example, a password that allows the user to log in to the energy-changing device.

[0003] For example, document US2011 / 0184575A1 describes a method in which the supply of power in a connection in a smart grid is dependent on successful authentication of a user or device.Furthermore, document JP2008-108022A describes a misuse-protected management system for maintaining devices, with which a service technician pre-registers and specifies a maintenance plan, and retrieves individual components of the maintenance plan at the time of maintenance via URLs assigned to each component of the maintenance plan.

[0004] However, if a user loses or forgets the authentication data, or if an unauthorized third party obtains the authentication data, the user may lose access to the energy transforming device, or an unauthorized third party may gain access to the energy transforming device. Therefore, there is a need to provide a method for a user to send new authentication data to the energy transforming device so that the authentication data is accepted in subsequent access attempts. Such a method is intended to be merely easily executable by the user, but at the same time to satisfy security requirements to prevent unauthorized users from misusing the method, for example to store their own authentication data on the energy transforming device and be able to use it in subsequent access attempts, or to lock unauthorized users out of the energy transforming device. Summary of the Invention

[0005] The object of the present invention is therefore to show a method for defining user authentication data in an energy-transforming device that is easy to implement but protected from misuse, as well as an energy-transforming device configured to be able to define user authentication data in this way.

[0006] This object is achieved by a method having the features of claim 1 and by an energy-converting device having the features of claim 13. Preferred embodiments are set out in the claims dependent thereon.

[0007] According to a first aspect of the invention, a method for providing authentication data of a user to an energy converting device connected to a grid and to a source via a network connection comprises the steps of: - receiving, by the energy-transforming device, via a network connection, a request from a user for newly allocating authentication data; - receiving by the energy-transforming device via a network connection desired authentication data of a user; - persistently storing the desired authentication data in the energy transforming device for authentication of the user during subsequent attempts to access the energy transforming device only if the energy transforming device is disconnected from the grid to which it is connected within a first preset time window after receiving the request.

[0008] The authentication data and / or the request from the user for a new allocation of the desired authentication data may include information related to the user's identity. Upon completion of the method, the user may later log into the energy-transforming device as an authorized user with the persistently stored authentication data. The authentication data may include, for example, a password, a certificate, or a token generated by the user.

[0009] The method is preferably executed in a communication processor of the energy-transforming device which manages the network connection of the energy-transforming device. The communication processor can preferably be powered as needed from the grid and the source for this purpose, so as to ensure a sufficient supply of the communication processor even while the energy-transforming device is disconnected from the grid. It is also conceivable to temporarily power the communication processor while disconnected from the grid and / or source by an energy source, e.g. a battery, integrated in the energy-transforming device.

[0010] By associating the persistent storage of the desired authentication data in the energy-transforming device with the disconnection of the energy-transforming device from the connected grid within a preset time window, it can be ensured that the user has to remain in the immediate vicinity of the energy-transforming device when sending a request for a new allocation of authentication data to the energy-transforming device. Otherwise, the user cannot targetably disconnect the energy-transforming device from the connected grid within the preset time window. The user can send the request for a new allocation of authentication data when in the immediate vicinity of the energy-transforming device, for example via a mobile data device such as a smartphone or laptop. The user then manually disconnects the energy-transforming device from the connected grid, for example by activating a disconnect switch or by blowing a fuse.

[0011] In order to ensure that a temporary power outage does not result in a falsely successful request from an unauthorized user for a new allocation of authentication data, a reconnection of the energy-transforming device to the grid can additionally be required within a second time window relative to the time of disconnection of the energy-transforming device from the connected grid. The second time window can preferably be preset for this purpose, for example, to start 10 seconds after the energy-transforming device is disconnected from the connected grid. Furthermore, the duration of the second time window can be limited, for example, to a duration of 20 seconds or less. This ensures that randomly occurring short power outages, typically less than 10 seconds, as well as long power outages of more than 30 seconds, do not allow a successful storage of authentication data by an unauthorized user. Such misuse of the method can generally be precluded, since it is almost impossible to remotely and targetedly cause a power outage that starts within the preset first time window and has a duration defined by the second time window.

[0012] However, in order to persistently store the desired authentication data, it is only necessary to disconnect the energy transforming device from the grid to which it is connected, and it is also conceivable that the energy transforming device may be left disconnected from the grid until the persistent storage has been performed.

[0013] In order to facilitate the user to perform the disconnection and / or reconnection of the energy-transforming device from the grid within the first time window, the energy-transforming device can signal the start and / or end of the first time window. This type of notification can be performed visually or audibly. The user can then manually activate a disconnecting element, typically a disconnecting switch or a fuse, within the indicated period of time. If the energy-transforming device signals the start and / or end of the first time window in any case, the start and / or end of the time window can also be chosen randomly within a range of preset values. This further prevents misuse of the method.

[0014] The start and end of the second time window may likewise be indicated visually or audibly so that the user can easily select the correct time for reconnection of the energy conversion device to the grid.

[0015] In an advantageous aspect, the desired authentication data can be received prior to disconnecting the energy-transforming device from the connected grid, in particular together with the request for new allocation of authentication data, in which case the desired authentication data is persistently stored immediately after disconnecting or reconnecting the energy-transforming device to the grid.

[0016] In a further advantageous embodiment, it can be provided that the desired authentication data must be received within a third preset time window after disconnection of the energy transforming device from the connected grid in order to store the desired authentication data persistently in the energy transforming device. The start of this time window can be linked to the time of disconnection or reconnection of the energy transforming device from the grid and can coincide with either of these times or occur after a preset duration. To further increase the security of the method against misuse in this embodiment, it can be provided that the third preset time window ends at the latest 10 minutes after the energy transforming device is disconnected from the grid.

[0017] To further prevent possible misuse of the method by unauthorized users, it may be provided that if the communication processor of the energy-transforming device involved in the execution of the method is rebooted within a first time window, the method is terminated and the received desired authentication data is discarded.

[0018] To increase security against misuse of the method, it is further possible and expedient to record in the energy-transforming device the number of consecutive received events including requests for fresh allocation of authentication data that did not result in persistently storing the desired authentication data in the energy-transforming device, i.e. also to count the number of unsuccessful requests. The persistent storage of the desired authentication data in the energy-transforming device is blocked permanently or for a predefined period of time if this number exceeds a maximum number. This maximum number can be specified, for example, as 2 or 3. However, it is recommended to block the method only for a predefined period of time to prevent possible permanent blocking of an authorized user due to fraudulent unsuccessful attempts.

[0019] In order to monitor the network connection of the energy-transforming device, it is possible for the energy-transforming device to report received events, including requests for new allocation of authentication data, to the portal via the network connection, and whether each request resulted in a persistent storage of the desired authentication data in the energy-transforming device or remained unsuccessful. In this way, fraudulent attempts can be quickly detected and an appropriate response to this type of security threat can be initiated.

[0020] In a further aspect of the invention, an energy-transforming device is configured to carry out the method described above. The energy-transforming device may be an inverter and the source is a direct current source, in particular a battery or a photovoltaic generator. The energy-transforming device is advantageously configured to be powered from the source during disconnection from the grid. However, it is also conceivable to provide a dedicated energy source in the energy-transforming device for powering the communication processor, which source ensures the powering of the communication processor during disconnection of the energy-transforming device from the grid and / or from the source in the described method.

[0021] Since grid-connected energy-transforming devices usually have a sensor system allowing them to monitor in some way the active connection to the grid, no additional hardware is usually required to enable the energy-transforming device to execute the method. For example, the adaptation of a communication software executable on a communication processor that manages the network connection of the energy-transforming device is often sufficient. This makes the method according to the invention also attractive in terms of cost.

[0022] In one aspect of the present invention not currently claimed, it is also possible for the check for disconnection from the connected grid to be replaced or supplemented by a check to determine whether an activation sensor of the energy-transforming device has been activated within a first preset time window. An activation sensor of this type can be a switch or a button of the energy-transforming device. It is particularly advantageous to implement the activation sensor as a knocking sensor, whereby a knocking of the energy-transforming device can be used for the permanent storage of the desired authentication data. This makes it possible to avoid wear of the disconnecting element for disconnecting the energy-transforming device from the grid. In this case, the method for defining authentication data of a user in an energy-transforming device connected to a grid and to a source via a network connection comprises: - receiving, by the energy-transforming device, via a network connection, a request from a user for a new allocation of authentication data; - receiving by the energy-transforming device via a network connection desired authentication data of a user; - permanently storing the desired authentication data in the energy-transforming device for authentication of the user during subsequent attempts to access the energy-transforming device only if an activation sensor, in particular a knock sensor, of the energy-transforming device is activated within a first preset time window after receiving the request.

[0023] Further embodiments disclosed in the description of the method according to the invention can likewise be used in this method aspect. [Brief description of the drawings]

[0024] The present invention will now be described in detail with reference to the drawings. [Figure 1] FIG. 1 shows a flow diagram of a first embodiment of the method according to the invention. [Diagram 2] FIG. 2 shows a flow diagram of a second embodiment of the method according to the invention. [Diagram 3]FIG. 3 shows an example of a sequence of events during the execution of the method according to the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] Fig. 1 shows a flow diagram of a first embodiment of the method according to the invention. The method starts with a first step S1 (ST), in which a request from a user to newly allocate authentication data is received at the transforming device via a network connection. In response to receiving the request, the energy transforming device can invalidate the user's previous authentication data permanently or for a pre-defined period of time, this action can also be taken depending on whether a previous execution of the method was unsuccessful or not. This action can also be taken depending on how long ago the last successful execution of the method was for this user or for users in general. However, in order to prevent fraudulent blocking of authorized users, the previous user data can also remain valid.

[0026] In a subsequent second step S2, the energy-transforming device receives the desired authentication data of the user via the network connection. The first step S1 and the second step S2 can be performed consecutively in separate communication procedures or together in one communication procedure.

[0027] In a third step S3, a check is performed to determine whether the energy-transforming device has been disconnected from the connected grid within a first preset time window. Optionally, in the third step S3, an additional check can also be performed to determine whether a reconnection to the grid has also been made within the first time window. The first time window starts immediately or after a preset period after the request is received. A second time window within the first time window defines an acceptable period for disconnection of the energy-transforming device from the connected grid, which period is a minimum of 10 seconds and a maximum of 30 seconds. The start of the first time window and optionally also the end of the second time window can be indicated by the energy-transforming device, for example in an audible or visual form. This allows a user at the energy-transforming device to easily manually perform a disconnection of the energy-transforming device from the grid within the first time window in order to confirm the request to newly allocate authentication data.

[0028] Only if the check in the third step S3 ends with a positive result, i.e. only if the disconnection of the energy transforming device from the connected grid and possibly reconnection to the grid has taken place within the first time window, is the desired authentication data permanently stored in the energy transforming device in a fourth step S4 instead of the user's previous authentication data in order to authenticate the user during subsequent attempts to access the energy transforming device. The method then ends (EN).

[0029] If the result of the check in the third step S3 is negative, the method ends (AB).

[0030] The successful outcome and / or completion of the method may be indicated visually or audibly by the energy transforming device in an appropriate manner.

[0031] Fig. 2 shows a flow diagram of a second embodiment of the method according to the invention. The second embodiment differs from the first embodiment of the method according to the invention in that the desired authentication data of the user is received at the energy transforming device in a second step S2 only after a successful execution of the check according to a third step S3. A third time window is provided for receiving the desired authentication data, which may start immediately after the successful completion of the check in step S3. The duration of the third time window is such that an authorized user can easily transmit the desired authentication data to the energy transforming device within the time window. The time window may last for example between 1 minute and 10 minutes.

[0032] A result of the check in step S3 with a positive result temporarily switches the energy transforming device to a state in which it can receive the desired authentication data and store them persistently in the energy transforming device for use in future access attempts by the user. In a fourth step S4, the received valid authentication data is stored persistently in the energy transforming device and the method is terminated (EN). If no valid authentication data is received within a third time window, the method is terminated (EN) by continuing to use the previous authentication data.

[0033] If the check in step S3 ends with a negative result, any received desired authentication data of the user is ignored and the method ends (AB).

[0034] Along with the notification of the start and / or end of the first time window as described in relation to the first design, the energy-transforming device may also in the second design visually or audibly notify the start and / or end of the second time window and also the start and / or end of the third time window. Furthermore, a successful outcome of the method with persistent storage of the desired authentication data and / or the end of the method without persistent storage may be indicated visually or audibly. This makes it easier for the user to timely transmit the desired authentication data to the energy-transforming device via the network connection and receive notification of the successful completion of the new allocation of authentication data.

[0035] The chronological sequence of events for a successful execution of the method according to the invention is shown more precisely in Fig. 3, where time is plotted on the X-axis and the state of the connection of the energy-transforming device to the grid is plotted on the Y-axis. The connection of the energy-transforming device to the grid is represented by the value 1 and the disconnection from the grid by the value 0. At time t0, the energy-transforming device receives a request from the user for a new allocation of authentication data. As a result, a first time window A is defined, which extends from time t1 to time t7, within which a disconnection and possibly a reconnection of the energy-transforming device to the grid must take place in order for the new allocation of authentication data to take effect. Time t1 occurs after a preset duration from time t0, for example 10 seconds, but can also be identical to time t0. Time t7 can occur 20 minutes after time t0 (or after time t1).

[0036] In the illustrated case, the disconnection from the grid actually takes place at time t2. A second time window B is then defined starting from time t3 and ending at time t5, within which the reconnection of the energy conversion device to the grid must take place in order for the new allocation of authentication data to take effect. Time t3 occurs after a preset duration, for example 10 seconds, after time t2. Time t5 can then occur, for example, 30 seconds after time t2 (or time t3).

[0037] In the illustrated case, the reconnection to the grid actually takes place at time t4. A third time window C is then defined starting from time t4 and ending at time t6, within which the desired authentication data of the user must be received by the energy conversion device in order for the new allocation of authentication data to take effect. Time t6 can then occur, for example, 2 minutes after time t4 (or time t2).

[0038] If one of the required events, i.e. disconnection of the energy converting device from the grid, reconnection to the grid and receipt of the desired authentication data, does not occur within the corresponding time window A, B, C, the desired authentication data will not be persistently stored in the energy converting device for authenticating the user during subsequent access attempts.

[0039] In the first embodiment of the method, there is no need to receive the desired authentication data within the time window C, since the authentication data has in fact already been received by the energy transforming device before it is disconnected from the connected grid.

[0040] The beginning and end of the time windows A and B may be indicated by the energy transforming device in a preferably mutually distinguishable visual or audible form. Completion of the storage of the desired authentication data may also be indicated in an audible or visual form.

[0041] The method according to the invention can be complemented by further measures known to those skilled in the art to increase security against misuse, for example by encrypted transmission of data between the user and the energy-converting device, two-factor authentication or similar means.

Claims

1. 1. A method for defining authentication data of a user in an energy conversion device connected to a grid and a source via a network connection, comprising: - receiving (S1) a request for new allocation of authentication data from a user via said network connection; - receiving (S2) by said energy-transforming device via said network connection desired authentication data of a user; - persistently storing (S4) the desired authentication data in the energy conversion device for authentication of the user during subsequent attempts to access the energy conversion device only if the energy conversion device is disconnected from the grid to which it is connected within a first preset time window (A) after receiving the request (S3).

2. 10. The method of claim 1 , 13. The method according to claim 12, further comprising: receiving (S2) the desired authentication data before the energy conversion device is disconnected from the grid to which it is connected in order to achieve persistent storage of the desired authentication data in the energy conversion device.

3. 10. The method of claim 1 , The method according to claim 1, characterized in that in order to achieve persistent storage of the desired authentication data in the energy transforming device, the desired authentication data must be received (S2) within a third preset time window (C) after the energy transforming device is disconnected from the grid to which it is connected.

4. 4. The method of claim 3, The method, characterized in that the third preset time window (C) ends after a preset duration, in particular at the latest 10 minutes, after the energy conversion device is disconnected from the grid to which it is connected.

5. The method according to any one of claims 1 to 4, wherein, in order to effect a persistent storage (S4) of the desired authentication data in the energy transforming device within the first pre-defined time window (A), it is also necessary to reconnect the energy transforming device to the connected grid within a second time window (B) relative to a time when the energy transforming device is disconnected from the connected grid.

6. 6. The method of claim 5, 4. The method of claim 3, wherein the second time window (B) begins at the earliest 10 seconds after the energy conversion device is disconnected from the grid to which it is connected.

7. 6. The method of claim 5, The method of claim 1, wherein the second time window (B) has a duration of 20 seconds or less.

8. The method according to any one of claims 1 to 4, 11. A method according to claim 10, characterized in that the first pre-defined time window (A) ends at the latest 20 minutes after receiving a request for new allocation of authentication data in the energy-transforming device.

9. The method according to any one of claims 1 to 4, 13. A method according to claim 12, characterized in that the energy-transforming device signals the start and end of the first time window (A) and / or the second time window (B).

10. The method according to any one of claims 1 to 4, A method characterized in that if a communication processor of an energy-transforming device involved in the execution of the method is rebooted, the method is terminated and the received desired authentication data is discarded.

11. The method according to any one of claims 1 to 4, A method according to claim 1, characterized in that in the energy conversion device, a number of consecutive received events, including requests for newly allocating authentication data, which have not resulted in the desired authentication data being permanently stored in the energy conversion device, is identified, and if said number exceeds a maximum number, persistent storage (S4) of the desired authentication data in the energy conversion device is prevented permanently or for a pre-defined period of time.

12. The method according to any one of claims 1 to 4, A method comprising: identifying a received event including a request for new allocation of authentication data that did not result in the desired authentication data being persistently stored in the energy-converting device; and reporting the received event by the energy-converting device to a portal via the network connection.

13. An energy-transforming device adapted to carry out the method according to any one of claims 1 to 4.

14. 14. The energy-transforming device according to claim 13, 10. An energy conversion device, characterized in that it is realized as an inverter and said source is a direct current source, in particular a battery or a photovoltaic generator.

15. 14. The energy-transforming device according to claim 13, 13. An energy conversion device configured to be powered by the source during disconnection from the grid.

Images