Method for acquiring electronic certificate

Abstract

To suppress storing of an electronic certificate from a malicious third party in a control device.SOLUTION: A method for acquiring an electronic certificate of downloading, via communication, certificate data including at least an electronic certificate that is used when charging a power storage device of a vehicle which includes the power storage device and a control device that performs control related to traveling with electric power from an external charging device, comprises: a first step of adding an electronic signature to the certificate data when the downloaded certificate data does not have an electronic signature; and a second step of storing the certificate data in the control device when the certificate data has an electronic signature and the electronic signature is the signature of a trusted party.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present disclosure relates to a method for obtaining an electronic certificate.

Background Art

[0002] Conventionally, as a method for obtaining this type of electronic certificate, an electronic certificate used when charging a power storage device of a vehicle including a power storage device (rechargeable battery) and a storage device capable of storing information with power from a charging device (charging facility) installed in a charging stand (charging station) is downloaded from an external server via communication (see, for example, Patent Document 1). In this method, the downloaded electronic certificate is stored in the storage device.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the above-described method for obtaining an electronic certificate, if an electronic certificate created by a malicious third party is downloaded, the vehicle may perform an unintended operation due to the downloaded electronic certificate.

[0005] The main object of the method for obtaining an electronic certificate of the present disclosure is to suppress the storage of an electronic certificate from a malicious third party in a control device of a vehicle.

Means for Solving the Problems

[0006] The method for obtaining an electronic certificate of the present disclosure has adopted the following means in order to achieve the above main object.

[0007] The method for obtaining an electronic certificate of the present disclosure is A method for acquiring an electronic certificate that downloads, via communication, certificate data including at least an electronic certificate used when charging a power storage device of a vehicle including the power storage device and a control device that performs control related to traveling with electric power from an external charging device. When the certificate data to be downloaded is not provided with an electronic signature, a first step of providing the electronic signature to the certificate data. When the certificate data is provided with the electronic signature and the provided electronic signature is a signature of a person who can be trusted, a second step of storing the certificate data in the control device. The gist is to include the above.

[0008] In the method for acquiring an electronic certificate of the present disclosure, when the certificate data to be downloaded is not provided with an electronic signature, an electronic signature is provided to the certificate data. And when the certificate data is provided with an electronic signature and the provided electronic signature is a signature of a person who can be trusted, the certificate data is stored in the control device. As a result, it is possible to suppress storing an electronic certificate from a malicious third party in the control device of the vehicle.

Brief Description of the Drawings

[0009]

Figure 1

Figure 2

Embodiments for Carrying Out the Invention

[0010] Embodiments of the present disclosure will be described with reference to the drawings. FIG. 1 is a schematic configuration diagram showing a vehicle charging system 1 according to an embodiment of the present disclosure. The vehicle charging system 1 according to the embodiment includes a charging device 2 capable of charging a battery B of an electric vehicle (vehicle) V from the outside, a management server 3, and an authentication server 4.

[0011] The electric vehicle V is configured as a battery electric vehicle (BEV) or a plug-in hybrid vehicle (PHEV) that includes a motor MG that exchanges power with a battery B via a power control unit (PCU) not shown, in addition to the battery B as an energy storage device. The electric vehicle V includes, in addition to the battery B and the motor MG, a communication device DCM capable of wireless communication with a management server 3, and an electronic control unit (control device) ECU that controls the motor MG and the communication device DCM.

[0012] The electronic control unit ECU includes a computer (not shown) having a CPU, ROM, RAM, input / output ports, communication ports, a storage device, etc. The electronic control unit ECU controls the motor MG. The electronic control unit ECU exchanges information with the communication device DCM via a communication port. The electronic control unit ECU performs control related to driving, such as drive control of the motor MG. At least one public key for verifying an electronic signature given to an electronic certificate described later is stored in the storage device.

[0013] The charging device 2 is installed in a so-called charging stand 10. The charging device 2 includes a housing 20, a charging cable 22 including a charging connector 21, a power conversion device (not shown) that has a rectifier circuit, a transformer, a switching circuit, etc., and converts AC power supplied from an AC power source such as a commercial power source into DC power and supplies it to the charging cable 22, a display device 24, and an electronic control unit 26. The charging cable 22 includes a power line for supplying power and a communication line for exchanging information. The display device 24 is attached to the housing 20 and is configured as a touch panel type display. The display device 24 is controlled by the electronic control unit 26.

[0014] The electronic control unit 26 includes a computer (not shown) having a CPU, ROM, RAM, input / output ports, communication ports, etc. When the charging connector 21 is plugged into the charging inlet I of the electric vehicle V, information is exchanged with the electronic control unit ECU of the electric vehicle V via the communication line of the charging cable 22. Examples of the information to be exchanged include information regarding the state of the battery B, such as the battery current from a current sensor that detects the charge and discharge current of the battery B and the battery voltage from a voltage sensor that detects the voltage between the terminals of the battery B. The electronic control unit 26 controls the power conversion device based on the battery current and the voltage between the terminals of the battery B received via the charging cable 22, and supplies power to the charging cable 22. Further, the electronic control unit 26 controls the display device 24 so that information for the user of the electric vehicle V parked in the parking space of the charging stand 10 is displayed. The information displayed on the display device 24 includes guidance on the use of the charging device 2 and guidance on the payment (charging) of the charging fee by cash or credit card.

[0015] The management server 3 is installed and managed, for example, by a management company or the like that manages a plurality of electric vehicles V. The management server 3 includes a computer (not shown) having a CPU 31, ROM, RAM (not shown), input / output ports, communication ports, a relatively large-capacity storage device 32 for storing data, etc. The management server 3 exchanges various information with the electric vehicle V and the authentication server 4 through communication via the communication port. The storage device stores at least one public key and at least one private key for verifying the electronic signature given to the electronic certificate described later.

[0016] The authentication server 4 is installed and managed by, for example, a service provider company that provides services such as issuing electronic certificates, and functions as a certification authority that issues electronic certificates. The authentication server 4 includes a computer (not shown) having a CPU 41, ROM, RAM, input / output ports, communication ports, and a storage device 42. The authentication server 4 exchanges various information with the management server 3 through communication via the communication ports. The storage device stores issued electronic certificates, public keys, private keys, and a list of reliable issuers.

[0017] In the vehicle charging system 1 of the embodiment configured in this way, when the charging connector 21 of the charging device 2 is inserted into the charging inlet I of the electric vehicle V, user authentication is performed using the electronic certificate stored in the storage device of the electronic control unit ECU of the electric vehicle V through the cooperation between the electronic control unit ECU of the electric vehicle V and the electronic control unit 26 of the charging device 2. When the user authentication is successful, charging by the charging device 2 is permitted, and external charging for charging the battery B with the power from the charging device 2 through the charging cable 22 is executed. When the user authentication fails, charging by the charging device 2 is not permitted, and external charging is not executed.

[0018] Next, the operation of the vehicle charging system 1 of the embodiment configured in this way will be described, particularly the operation when storing an electronic certificate for external charging in the electric vehicle V. FIG. 2 is a flowchart showing an example of a transmission processing routine executed by the CPU 31 of the management server 3. This routine is executed when the management server 3 receives a request for obtaining an electronic certificate transmitted from the electronic control unit ECU of the electric vehicle V, transmits a request for issuing an electronic certificate to the authentication server 4, and downloads certificate data including the electronic certificate from the authentication server 4. The request for obtaining an electronic certificate from the electronic control unit ECU is transmitted to the management server 3 when the electronic certificate is not stored in the storage device of the electronic control unit ECU. The request for obtaining an electronic certificate may be transmitted via communication during the running of the electric vehicle V, or may be transmitted via the communication line of the charging cable 22 when the electric vehicle V arrives at the charging stand 10 and the charging connector 21 is inserted into the charging inlet I of the electric vehicle V.

[0019] When this routine is executed, the CPU 31 of the management server 3 waits until certificate data including an electronic certificate is downloaded from the authentication server 4 (S100). When the certificate data is downloaded, it is determined whether the electronic certificate is issued by the management company where the management server 3 is installed based on the information of the issuer of the electronic certificate included in the downloaded certificate data (S110). When the issuing source is the management company where the management server 3 is installed, an electronic signature of the management company is added to the certificate data (S170), the certificate data is transmitted to the electric vehicle V (S180), and this routine ends. The electric vehicle V that has received the certificate data with the electronic signature verifies the electronic signature using the public key stored in the storage device of the electronic control unit ECU. Then, when the electronic signature is made using the private key corresponding to the public key stored, it is determined that the electronic signature is the signature of a trustworthy person, and the certificate data is stored in the storage device of the electronic control unit ECU. When the electronic signature is not made using the private key corresponding to the public key stored, it is determined that the electronic signature is not the signature of a trustworthy person, and the certificate data is discarded without being stored in the storage device of the electronic control unit ECU.

[0020] If, at S110, the electronic certificate is not issued by the management company where the management server 3 is installed, it is determined whether an electronic signature is attached to the certificate data (S120). If an electronic signature is attached to the certificate data, it is determined whether the electronic signature attached is the signature of a trustworthy person using the public key stored in the storage device of the management server 3 (S130). If the electronic signature is the signature of a trustworthy person, the certificate data is transmitted to the electric vehicle V (S180), and this routine ends. The electric vehicle V that has received the certificate data with the attached electronic signature verifies the electronic signature using the public key stored in the storage device of the electronic control unit ECU. If the electronic signature is made using the private key corresponding to the stored public key, the certificate data is stored in the storage device of the electronic control unit ECU. If the electronic signature is not made using the private key corresponding to the stored public key, the certificate data is discarded without being stored in the storage device of the electronic control unit ECU.

[0021] When no electronic signature is attached to the certificate data at S120, or when the electronic signature is attached to the certificate data at S120 but the electronic certificate is not the signature of a trustworthy person at S130, a request for authentication of the issuer of the electronic certificate is transmitted to the authentication server 4 based on the information of the issuer of the electronic certificate in the certificate data (S140). The authentication server 4 that has received the request for authentication of the issuer of the electronic certificate determines whether it can authenticate the issuer of the electronic certificate based on the list of trustworthy issuers stored in the storage device, and transmits the determination result (authentication result) to the management server 3. The management server 3 waits until the determination result (authentication result) is received (S150).

[0022] When the determination result (authentication result) is received at S150, it is determined whether the issuer has been authenticated (S160). When the issuer has been authenticated, an electronic signature of the management company is attached to the certificate data (S170), the certificate data is transmitted to the electric vehicle V (S180), and this routine ends. When the issuer has been authenticated, this routine ends without transmitting the certificate data to the electric vehicle V.

[0023] As described above, when the certificate data to be downloaded is not provided with an electronic signature, when the issuer of the electronic certificate is authenticated, an electronic signature is added to the certificate data, and then the certificate data is transmitted to the electric vehicle V (S120, S140 to S180). This can prevent a malicious third party's electronic certificate from being stored in the electric vehicle V. Further, when the certificate data is provided with an electronic signature and the provided electronic signature is the signature of a person who can be trusted, the certificate data is transmitted to the electric vehicle V (S120, S130, S170, S180). This can prevent a malicious third party's electronic certificate from being stored in the electric vehicle V. Also, at this time, since the management server 3 does not apply an electronic signature to the certificate data, the certificate data can be transmitted by a simpler method.

[0024] In the vehicle charging system 1 of the present embodiment described above, when the certificate data to be downloaded is not provided with an electronic signature, when the issuer of the electronic certificate is authenticated, an electronic signature is added to the certificate data. When the certificate data is provided with an electronic signature and the provided electronic signature is the signature of a person who can be trusted, the electric vehicle V is caused to store the certificate data. Therefore, it is possible to prevent a malicious third party's electronic certificate from being stored in the electric vehicle V.

[0025] In the above-described embodiment, when the certificate data to be downloaded is not provided with an electronic signature, when the issuer of the electronic certificate is authenticated, an electronic signature is added to the certificate data. However, when the certificate data to be downloaded is not provided with an electronic signature, an electronic signature may be added to the certificate data regardless of whether the issuer of the electronic certificate is authenticated.

[0026] The correspondence between the main elements of the embodiment and the main elements of the invention described in the column of the means for solving the problems will be described. In the embodiment, S120, S140 to S180 correspond to the "first step", and S120, S130, S170, S180 correspond to the "second step".

[0027] Note that the correspondence between the main elements of the embodiment and the main elements of the invention described in the column of means for solving the problems is an example for specifically explaining the mode for carrying out the invention described in the column of means for solving the problems in the embodiment. Therefore, it does not limit the elements of the invention described in the column of means for solving the problems. That is, the interpretation of the invention described in the column of means for solving the problems should be made based on the description in that column, and the embodiment is merely a specific example of the invention described in the column of means for solving the problems.

[0028] As described above, the embodiments for carrying out the present disclosure have been described. However, the present disclosure is not limited to such embodiments, and it goes without saying that it can be implemented in various forms without departing from the gist of the present disclosure.

Industrial Applicability

[0029] The present disclosure can be used in the manufacturing industry for manufacturing an apparatus for acquiring an electronic certificate.

Explanation of Signs

[0030] 1 Vehicle charging system, 2 Charging device, 3 Management server, 4 Authentication server, 10 Charging stand, 20 Housing, 21 Charging connector, 22 Charging cable, 24 Display device, 26, ECU Electronic control unit, 31, 41 CPU, 32, 42 Storage device, B Battery, I Charging inlet, V Electric vehicle.

Claims

【Claim 1】 A method for acquiring an electronic certificate that downloads, via communication, certificate data including at least an electronic certificate used when charging a power storage device of a vehicle including the power storage device and a control device that performs control related to traveling, with electric power from an external charging device, a first step of applying the electronic signature to the certificate data when the electronic signature is not applied to the downloaded certificate data; a second step of storing the certificate data in the control device when the electronic signature is applied to the certificate data and the applied electronic signature is a signature of a person who can be trusted; A method for acquiring an electronic certificate including the above.

Images