Communication ID assignment method and system providing the same

Abstract

A communication ID assignment system according to one embodiment of the present invention includes a plurality of slave BMSs that store a plurality of first certificates, and a master BMS that includes a certificate chain, wherein the master BMS includes a memory that stores the certificate chain, and a processor that, when a communication connection with the plurality of slave BMSs is detected, transmits a certificate transmission request signal to the plurality of slave BMSs, receives the plurality of first certificates from each of the plurality of slave BMSs, verifies the integrity of each of the plurality of first certificates using the certificate chain, determines the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact, and assigns a first communication ID to the valid slave BMS among the plurality of slave BMSs.

Description

Technical Field

[0001] [Cross-Reference to Related Applications] This application claims the benefit of priority based on Korean Patent Application No. 10-2024-0119468 filed on September 3, 2024, and all contents disclosed in the documents of the said Korean patent application are included as part of the present specification.

[0002] The present invention relates to a method for assigning communication IDs for communication between a master BMS (Battery Management System) and a plurality of slave BMSs, and a system for providing the same.

Background Art

[0003] In a battery pack composed of a plurality of battery modules, the Battery Management System (BMS) may include a plurality of slave BMSs that monitor and manage each of the plurality of battery modules, and a master BMS that integrates and manages the plurality of slave BMSs. The plurality of slave BMSs can transmit battery data including voltage and temperature information of battery cells to the master BMS via various communication methods.

[0004] In communication between the master BMS and the plurality of slave BMSs, since the master BMS is connected to the plurality of slave BMSs that perform the same operation, it is necessary to assign a communication ID for distinguishing each of the plurality of slave BMSs.

[0005] Conventionally, at the time of initial connection between the slave BMS and the master BMS, a manual assignment method is used in which a professional engineer is dispatched to set the current configuration position and communication connection ID of each slave BMS every time, or a method is used in which a predetermined voltage is applied to each of the plurality of slave BMSs to wake them up in sequence and assign communication IDs.

[0006] However, the conventional method of assigning communication IDs has a problem in that, when the master BMS assigns a communication ID to each slave BMS, the communication ID is assigned to all slave BMS connected to the entire battery pack, even if one of the multiple battery modules in the battery pack is replaced with a battery module whose security has not been verified, resulting in low security for the battery pack.

[0007] In response to this, the reality is that a method is needed to improve the security and stability of the battery pack by blocking the assignment of communication IDs to untrusted battery modules among the multiple battery modules within the battery pack. [Overview of the Initiative] [Problems that the invention aims to solve]

[0008] The present invention aims to provide a communication ID assignment method and a system that provides it, which improve security and stability by determining the validity of multiple slave BMSs before assigning communication IDs to multiple slave BMSs. [Means for solving the problem]

[0009] A communication ID assignment system according to one embodiment of the present invention includes a plurality of slave BMSs that store a plurality of first certificates, and a master BMS that includes a certificate chain, wherein the master BMS includes a memory that stores the certificate chain, and a processor that, when a communication connection with the plurality of slave BMSs is detected, transmits a certificate transmission request signal to the plurality of slave BMSs, receives the plurality of first certificates from each of the plurality of slave BMSs, verifies the integrity of each of the plurality of first certificates using the certificate chain, determines the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact, and assigns a first communication ID to the valid slave BMS among the plurality of slave BMSs.

[0010] The processor can verify the signatures of the second and third certificates included in the certificate chain, determine whether the certificate chain is complete or not, and if it is determined that the certificate chain is complete, determine that the second certificate is valid, verify the signatures of each of the multiple first certificates using the public key of the valid second certificate, and verify the integrity of each of the multiple first certificates.

[0011] The processor can determine that, among the plurality of slave BMSs, the slave BMS that stores the first certificate whose integrity has been verified is valid, and the slave BMS that stores the first certificate whose integrity has not been verified is not valid.

[0012] The processor can assign the first communication ID using the voltage difference or communication signal value of the valid slave BMS.

[0013] When the processor detects the replacement of at least one of the plurality of slave BMSs, it can transmit a communication ID reset signal to the non-replaced slave BMS to reset the first communication ID, and transmit a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS to receive the first certificate from the non-replaced slave BMS and the replaced slave BMS.

[0014] The processor can determine the validity of the non-replaced slave BMS based on whether or not the integrity of the first certificate received from the non-replaced slave BMS can be verified, and can determine the validity of the replaced slave BMS based on whether or not the integrity of the first certificate received from the replaced slave BMS can be verified.

[0015] The processor can determine that, among the non-replaced slave BMS and the replaced slave BMS, the slave BMS that stores a first certificate whose integrity has been verified is valid, and the slave BMS that stores a first certificate whose integrity has not been verified is not valid.

[0016] The processor can reassign a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS.

[0017] A communication ID assignment method according to one embodiment of the present invention may include the steps of: when a master BMS senses a communication connection with a plurality of slave BMSs, transmitting a certificate transmission request signal to the plurality of slave BMSs; receiving a plurality of first certificates from each of the plurality of slave BMSs; verifying the integrity of each of the plurality of first certificates using a certificate chain stored in memory, and determining the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is flawless; and assigning a first communication ID to a valid slave BMS among the plurality of slave BMSs.

[0018] The step of determining the validity of each of the plurality of slave BMSs may include the step of the master BMS verifying the integrity of the certificate chain and confirming the validity of the second certificate included in the certificate chain, and verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate and verifying the integrity of each of the plurality of first certificates.

[0019] The step of assigning the first communication ID may include the step of the master BMS transmitting a communication ID assignment signal to the valid slave BMS to instruct it to assign the first communication ID.

[0020] The method may include the steps of: when the master BMS 200 detects the replacement of at least one of the multiple slave BMSs to which the first communication ID has been assigned, resetting the first communication ID assigned to the non-replaced slave BMS among the multiple slave BMSs, generating and transmitting a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS; receiving the first certificate from the non-replaced slave BMS and the replaced slave BMS, respectively; verifying the integrity of the first certificate using the certificate chain, and determining the validity of the non-replaced slave BMS and the replaced slave BMS, respectively, based on whether the first certificate is flawless; and reassigning the second communication ID to the valid slave BMS among the non-replaced slave BMS and the replaced slave BMS.

[0021] The steps for determining the validity of the non-replaced slave BMS and the replaced slave BMS may include the steps for the master BMS to verify the integrity of the certificate chain and confirm the validity of the second certificates included in the certificate chain, and to verify the signature of each of the plurality of first certificates using the public key of the valid second certificate and to verify the integrity of each of the plurality of first certificates.

[0022] The step of reassigning the second communication ID may include transmitting a communication ID reassignment signal to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS to instruct it to reassign the second communication ID. [Effects of the Invention]

[0023] According to one embodiment of the present invention, communication ID assignment can be blocked for untrusted battery modules among the multiple battery modules in the battery pack, thereby enhancing the security and safety of the battery pack.

[0024] The effects obtainable by the present disclosure are not limited to the aforementioned effects, and other non-mentioned effects will be clearly understood by those having ordinary skill in the art to which the present disclosure pertains from the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] [Figure 1] This is a drawing for explaining a communication ID allocation system according to an embodiment of the present invention. [Figure 2] This is a drawing for explaining a process in which a master BMS according to an embodiment of the present invention verifies the integrity of a first certificate using a certificate chain. [Figure 3] This is a flowchart for explaining a process of allocating communication IDs to a plurality of slave BMSs. [Figure 4] This is a flowchart for explaining a process in which the master BMS reallocates communication IDs when any one of the plurality of slave BMSs is replaced. [Figure 5] This is a flowchart of a battery module communication ID allocation method according to an embodiment of the present invention. MODE FOR CARRYING OUT THE INVENTION

[0026] In describing the embodiments disclosed in the present specification, if it is determined that the specific description of related known technologies may obscure the gist of the embodiments disclosed in the present specification, the detailed description will be omitted. In addition, the accompanying drawings are provided to facilitate understanding of the embodiments disclosed in the present specification, and the technical ideas disclosed in the present specification are not limited by the accompanying drawings, and it should be understood that the present invention covers all modifications, equivalents or alternatives falling within the spirit and technical scope of the present invention.

[0027] Terms including ordinal numbers such as "first," "second," etc., can be used to describe various components, but the components are not limited to those terms. These terms are used solely for the purpose of distinguishing one component from another.

[0028] When one component is described as being "linked" or "connected" to another component, it should be understood that this may mean that the other component is directly linked or connected, or that another component may be in between. On the other hand, when one component is described as being "directly linked" or "directly connected" to another component, it should be understood that there is no other component in between.

[0029] In this application, terms such as "includes" or "has" indicate the presence of features, figures, steps, actions, components, parts, or combinations thereof described in the specification, and should be understood as not precluding the presence or possibility of the addition of one or more other features or figures, steps, actions, components, parts, or combinations thereof.

[0030] The present invention will be described in detail below with reference to the attached drawings.

[0031] Figure 1 is a diagram illustrating a communication ID assignment system according to one embodiment of the present invention.

[0032] Referring to Figure 1, a communication ID assignment system according to one embodiment of the present invention can include a plurality of slave BMS 100 (100-1, 100-2, 100-3) and a master BMS 200. Although Figure 1 illustrates a communication ID assignment system that includes three slave BMS 100 and one master BMS 200, the present invention is not limited thereto. A communication ID assignment system can include one or more slave BMS 100. The plurality of slave BMS 100 included in the communication ID assignment system can correspond to the master BMS 200 in a plurality:1 ratio. Although Figure 1 illustrates a wired connection between the slave BMS 100 and the master BMS 200, the present invention is not limited thereto, and the slave BMS 100 and the master BMS 200 can transmit and receive data via wireless communication.

[0033] The slave BMS 100 may be electrically connected to the battery module 10 (10-1, 10-2, 10-3) in a configuration that monitors and controls the battery module 10. For example, the slave BMS 100 can measure or predict the state of the battery cells contained in the battery module 10 and transmit the state information of the battery cells to the master BMS 200. The slave BMS 100 can control the battery module 10 according to the control signals received from the master BMS 200.

[0034] A first certificate may be stored in the slave BMS100. Here, the first certificate is generated to determine the validity of the slave BMS100, is generated at the time of manufacture of the slave BMS100, and may be stored in the memory of the slave BMS100 (not shown in the drawing). The first certificate may be generated by the manufacturer of the slave BMS100 or by a Certificate Authority (CA) that has been commissioned by the manufacturer to generate the certificate chain. Here, the memory of the slave BMS100 may be built into the MUC or BMIC.

[0035] The master BMS200 can manage multiple slave BMS100s in an integrated manner. The master BMS200 can control the operation of the battery module 10 by utilizing the battery cell status information received from multiple slave BMS100s. The master BMS200 can generate signals to control the operation of the battery module 10 and transmit them to multiple slave BMS100s. For example, the master BMS200 can use the cell voltage, temperature, etc., of the battery module 10 to perform power limiting, cell balancing, cooling control, etc. for the battery module 10.

[0036] The master BMS 200 can sense communication connections with multiple slave BMS 100s and the replacement of at least one of the multiple slave BMS 100s. The master BMS 200 can determine the validity of the multiple slave BMS 100s and assign a first communication ID to the valid slave BMS 100s or reassign a second communication ID. Here, the first communication ID means the communication ID assigned to the multiple slave BMS 100s before at least one of the multiple slave BMS 100s is replaced. The second communication ID means the communication ID reassigned to the valid slave BMS 100s after at least one of the multiple slave BMS 100s has been replaced. According to the embodiment, the master BMS 200 may include a processor 210 and memory 220.

[0037] The processor 210 can detect communication connections with multiple slave BMS 100s. Various conventionally known methods may be applied to the method by which the processor 210 detects communication connections with multiple slave BMS 100s.

[0038] When the processor 210 detects a communication connection with multiple slave BMS 100s, it can transmit a certificate transmission request signal to the multiple slave BMS 100s. Here, the certificate transmission request signal means a control signal requesting the transmission of the first certificate stored in the multiple slave BMS 100s. According to the embodiment, the processor 210 can broadcast the certificate transmission request signal to the multiple slave BMS 100s.

[0039] The processor 210 can determine the validity of each of the multiple slave BMS 100s by using multiple first certificates received from multiple slave BMS 100s. According to the embodiment, the processor 210 can verify the integrity of the first certificate using the certificate chain described below. Here, the certificate chain may be stored in memory 220. The processor 210 can determine the validity of the slave BMS 100 based on the integrity of the first certificate. For example, if the integrity of the first certificate received from the slave BMS 100 is verified, the processor 210 can determine that the slave BMS 100 is valid, and if the integrity of the first certificate received from the slave BMS 120 is not verified, the processor 210 can determine that the slave BMS 100 is not valid. The process by which the processor 210 verifies the integrity of the first certificate will be described in detail below with reference to Figure 2.

[0040] The processor 210 can assign a first communication ID to a valid slave BMS 100. According to one embodiment, the processor 210 can assign the first communication ID using the voltage difference or communication signal value of a valid slave BMS 100. However, the process by which the processor 210 assigns the first communication ID to a valid slave BMS 100 is not limited to this, and various conventionally known methods may be applied. In this case, the processor 210 can transmit a communication ID assignment signal to the valid slave BMS 100 to instruct it to assign the first communication ID. According to one embodiment, the processor 210 can broadcast the communication ID assignment signal to the valid slave BMS 100.

[0041] The processor 210 can detect the replacement of at least one of the multiple slave BMS 100s. Various conventionally known methods may be applied to how the processor 210 detects the replacement of at least one of the multiple slave BMS 100s. In this case, the multiple slave BMS 100s include slave BMS 110 that have not been replaced (hereinafter referred to as "unreplaced slave BMS") and slave BMS 120 that have been replaced.

[0042] When the processor 210 detects the replacement of at least one of the multiple slave BMS 100s, it can reset the first communication ID pre-assigned to the non-replaced slave BMS 110. According to the embodiment, the processor 210 can generate a communication ID reset signal to reset the first communication ID to the non-replaced slave BMS 110 and transmit it to the non-replaced slave BMS 110. At this time, the non-replaced slave BMS 110 can reset the first communication ID assigned to it in response to the communication ID reset signal.

[0043] The processor 210 can generate a certificate transmission request signal and transmit it to the non-replaced slave BMS 110 and the replaced slave BMS 120. According to the embodiment, the processor 210 can broadcast the certificate transmission request signal to the non-replaced slave BMS 110 and the replaced slave BMS 120.

[0044] The processor 210 can use the first certificates received from the non-replaced slave BMS 110 and the replaced slave BMS 120 to determine the validity of the non-replaced slave BMS 110 and the replaced slave BMS 120, respectively.

[0045] According to the embodiment, the processor 210 can determine the validity of the non-replaced slave BMS 110 based on whether or not the integrity of the first certificate received from the non-replaced slave BMS 110 can be verified, and can determine the validity of the replaced slave BMS 120 based on whether or not the integrity of the first certificate received from the replaced slave BMS 120 can be verified. For example, if the integrity of the first certificate received from the non-replaced slave BMS 110 can be verified, the processor 210 can determine that the non-replaced slave BMS 110 is valid. As another example, if the integrity of the first certificate received from the replaced slave BMS 120 cannot be verified, the processor 210 can determine that the replaced slave BMS 120 is not valid.

[0046] The processor 210 can reassign the second communication ID to the valid slave BMS 100 among the non-replaced slave BMS 110 and the replaced slave BMS 120. For example, if the processor 210 determines that the non-replaced slave BMS 110 is valid and the replaced slave BMS 120 is invalid, it can reassign the second communication ID only to the non-replaced slave BMS 110. In another example, if the processor 210 determines that the non-replaced slave BMS 110 is invalid and the replaced slave BMS 120 is valid, it can reassign the second communication ID only to the replaced slave BMS 120. According to the embodiment, the processor 210 can reassign the second communication ID using the voltage difference or communication signal value of the valid slave BMS 100.

[0047] The processor 210 can transmit a communication ID reassignment signal to the valid slave BMS 100 among the non-replaced slave BMS 110 and replaced slave BMS 120, instructing the reassignment of the second communication ID. For example, the processor 210 can broadcast the communication ID reassignment signal to the valid slave BMS 100 among the non-replaced slave BMS 110 and replaced slave BMS 120.

[0048] Memory 220 may store a certificate chain. Here, the certificate chain is generated to determine the validity of the master BMS 200 and may be generated at the time of manufacture of the master BMS 200 and stored in the master BMS 200's memory 220. In this case, the certificate chain may be generated by the manufacturer of the master BMS 200 or by a Certificate Authority (CA) that has been requested by the manufacturer to generate the certificate chain. According to the embodiment, the certificate chain can be used to verify the integrity of the first certificate. The process of verifying the integrity of the first certificate using the certificate chain will be described in detail below with reference to Figure 2.

[0049] Figure 2 is a diagram illustrating the process by which a master BMS200 according to one embodiment of the present invention verifies the integrity of a first certificate using a certificate chain.

[0050] Referring to Figure 2, a first certificate C' according to one embodiment of the present invention may include identification information for the slave BMS 100 where the first certificate C' is stored, a signature created by a certification authority (CA) to verify the first certificate C', a signature code, and a public key used for verification, etc.

[0051] A certificate chain according to one embodiment of the present invention may include multiple certificates. According to the embodiment, the certificate chain may include a second certificate C, a third certificate B, and a fourth certificate A. The multiple certificates A, B, and C included in the certificate chain may have a chain structure in which they are connected vertically. According to the embodiment, the fourth certificate A may correspond to a higher-level certificate than the third certificate B, and the third certificate B may correspond to a higher-level certificate than the second certificate C.

[0052] The second certificate C may include identification information for the slave BMS 100 linked to the master BMS 200 where the second certificate C is stored, a signature created by a certification authority (CA) to verify the second certificate C, a signature code, and a public key used for verification, etc.

[0053] Third Certificate B may include identification information for the master BMS200 where Third Certificate B is stored, a signature created by a Certificate Authority (CA) to verify Third Certificate B, a signature code, and a public key used for verification, etc.

[0054] The 4th Certificate A may include identification information for the battery system containing the master BMS200 on which the 4th Certificate A is stored, a signature created by a certification authority (CA) to verify the 4th Certificate A, a signature code, and a public key used for verification, etc.

[0055] According to the embodiment, the first certificate C', the second certificate C, the third certificate B, and the fourth certificate A may be issued simultaneously by a certification body (CA). In this case, the certification body (CA) may be provided with all the identification information for the components of the battery system in which the first to fourth certificates A, B, C, and C' are installed from the battery system manufacturer. For example, the certification body (CA) may receive information from the battery system manufacturer regarding a specific battery system, and information regarding a specific master BMS and a specific slave BMS included in that specific battery system. The certification body (CA) may issue the first to fourth certificates A, B, C, and C' and generate a certificate chain, taking into account the information regarding the specific battery system and the information regarding the specific master BMS and the specific slave BMS included in that specific battery system.

[0056] In one embodiment of the present invention, the processor 210 of the master BMS 200 can verify the integrity of the first certificate C' by utilizing the certificate chain stored in the memory 220 of the master BMS 200. The process by which the processor 210 verifies the integrity of the first certificate C' using the certificate chain is as follows.

[0057] First, the processor 210 can verify the integrity of the certificate chain to confirm the validity of the second certificate C. For example, if the certificate chain is complete, the processor 210 can determine that the second certificate C is valid, and if the certificate chain is not complete, it can determine that the second certificate C is not valid.

[0058] The processor 210 can verify the signatures of the second certificate C and the third certificate B and determine whether the certificate chain is complete. According to the embodiment, the processor 210 can verify the signature of the second certificate C using the public key of the third certificate B, and verify the signature of the third certificate B using the public key of the fourth certificate A, to determine the integrity of the certificate chain. For example, if the signature verification of the second certificate C and the third certificate B is successful, the processor 210 can determine that the second certificate C, the third certificate B, and the fourth certificate A form a trustworthy certificate chain, and that the second certificate C is valid.

[0059] In other words, the processor 210 can ensure the reliability of the verification of the integrity of the first certificate C' by confirming the validity of the second certificate C, which is used to verify the integrity of the first certificate C', before verifying the integrity of the first certificate C'.

[0060] Next, the processor 210 can verify the integrity of the first certificate C' using a valid second certificate C. According to the embodiment, the processor 210 can verify the integrity of the first certificate C' by verifying the signature of the first certificate C' using the public key of a valid second certificate C. For example, if the signature verification of the first certificate C' is successful, the processor 210 can determine that the first certificate C' is flawless.

[0061] Figure 3 is a flowchart illustrating the process of assigning communication IDs to multiple slave BMS100s.

[0062] Referring to Figure 3, the process of assigning communication IDs to multiple slave BMS 100 when a communication connection between the master BMS 200 and multiple slave BMS 100 is detected is illustrated.

[0063] The master BMS200 can detect communication connections with multiple slave BMS100 (S210). Various conventionally known methods may be applied to the master BMS200 for detecting communication connections with multiple slave BMS100.

[0064] When the master BMS200 detects a communication connection with multiple slave BMS100s, it can generate a certificate transmission request signal to receive each of the multiple first certificates stored in each of the multiple slave BMS100s and transmit it to each of the multiple slave BMS100s (S220).

[0065] Each of the multiple slave BMS100 can transmit each of the multiple first certificates to the master BMS200 in response to the certificate transmission request signal (S230).

[0066] The master BMS200 can determine the validity of each of the multiple slave BMS100s by using each of the multiple first certificates (S240). According to the embodiment, the master BMS200 can verify the integrity of each of the multiple first certificates by using the certificate chain stored in memory 220 (S241). The master BMS200 can determine whether each of the multiple slave BMS100s is valid or not based on whether each of the multiple first certificates is flawless or not (S242).

[0067] The master BMS200 can assign a first communication ID to a valid slave BMS100 from among several slave BMS100s (S250).

[0068] The master BMS200 can transmit a communication ID assignment signal to one of the multiple slave BMS100s that is valid, thereby instructing the valid slave BMS100 to assign the first communication ID (S260).

[0069] Figure 4 is a flowchart illustrating the process by which the master BMS200 reassigns a communication ID when one of the multiple slave BMS100s is replaced.

[0070] Referring to Figure 4, the process of reassigning communication IDs to the non-replaced slave BMS 110 and the replaced slave BMS 120 is illustrated when one of the slave BMS 100 is replaced after communication IDs have been assigned to multiple slave BMS 100.

[0071] The master BMS200 can detect the replacement of at least one of the multiple slave BMS100s (S310). At this time, the multiple slave BMS100s will include the non-replaced slave BMS110 and the replaced slave BMS120.

[0072] If the master BMS200 detects the replacement of a specific slave BMS100, it can reset the first communication ID assigned to the non-replaced slave BMS110 (S320).

[0073] The master BMS200 can generate a communication ID reset signal to reset the first communication ID for the non-replaced slave BMS110 and transmit it to the non-replaced slave BMS110 (S330). At this time, the non-replaced slave BMS110 can reset the first communication ID that was assigned in response to the communication ID reset signal.

[0074] The master BMS200 can generate a certificate transmission request signal and transmit it to the non-exchanged slave BMS110 and the exchanged slave BMS120 (S340).

[0075] The non-replaced slave BMS110 and the replaced slave BMS120 can transmit the first certificate to the master BMS200 in response to the certificate transmission request signal (S350).

[0076] The master BMS200 can determine the validity of the non-replaced slave BMS110 and the replaced slave BMS120 using the first certificate (S360). According to the embodiment, the master BMS200 can verify the integrity of the first certificate using the certificate chain stored in memory 220 (S361). The master BMS200 can determine whether the non-replaced slave BMS110 and the replaced slave BMS120 are valid based on whether the first certificate is flawless or not (S362).

[0077] The master BMS200 can reassign the second communication ID to the valid slave BMS100 among the non-replaced slave BMS110 and replaced slave BMS120 (S370).

[0078] The master BMS200 can transmit a communication ID reassignment signal to the valid slave BMS100 among the non-replaced slave BMS110 and replaced slave BMS120, and instruct the valid slave BMS100 to reassign the second communication ID (S380).

[0079] Figure 5 is a flowchart of a battery module 10 communication ID assignment method according to one embodiment of the present invention.

[0080] Referring to Figure 5, a communication ID assignment method according to one embodiment of the present invention may include a communication connection detection step (S4100), a first certificate reception step (S4200), a slave BMS validity determination step (S4300), and a communication ID assignment step (S4400).

[0081] In the communication connection detection step (S4100), the master BMS 200 can detect communication connections with multiple slave BMS 100s. When the master BMS 200 detects communication connections with multiple slave BMS 100s, it can generate a certificate transmission request signal. The master BMS 200 can then transmit the certificate transmission request signal to the multiple slave BMS 100s that have been connected.

[0082] In the first certificate reception step (S4200), the master BMS200 can receive multiple first certificates from each of the multiple slave BMS100s.

[0083] In the slave BMS validity determination step (S4300), the master BMS 200 can determine the validity of each of the multiple slave BMS 100s using each of the multiple first certificates.

[0084] According to the embodiment, the slave BMS validity determination step (S4300) may include a step (S4310) in which the master BMS 200 uses the certificate chain stored in memory 220 to verify the integrity of each of the multiple first certificates, and a step (S4320) in which the master BMS 200 determines whether each of the multiple slave BMS 100 is valid based on whether each of the multiple first certificates is flawless.

[0085] According to the embodiment, the step of verifying the integrity of each of the multiple first certificates (S4310) may include the step of the master BMS200 verifying the integrity of the certificate chain and confirming the validity of the second certificate (S4311), and the step of verifying the integrity of the first certificate using the valid second certificate (S4312).

[0086] In step S4311, where the master BMS200 verifies the integrity of the certificate chain and confirms the validity of the second certificate, the master BMS200 can determine the integrity of the certificate chain by using the public key of the third certificate included in the certificate chain to verify the signature of the second certificate, and by using the public key of the fourth certificate included in the certificate chain to verify the signature of the third certificate.

[0087] In the step of verifying the integrity of the first certificate using a valid second certificate (S4312), the master BMS200 can verify the integrity of the first certificate by using the public key of the valid second certificate to verify the signature of the first certificate.

[0088] In the communication ID assignment step (S4400), the master BMS200 can assign a first communication ID to a valid slave BMS100 from among the multiple slave BMS100s. At this time, the master BMS200 can transmit a communication ID assignment signal to the valid slave BMS100 to instruct it to assign the first communication ID.

[0089] According to the embodiment, the communication ID assignment method may further include an exchange detection step (S4500), a first certificate re-reception step (S4600), a slave BMS validity re-determination step (S4700), and a communication ID re-assignment step (S4800).

[0090] In the exchange detection step (S4500), the master BMS 200 can detect the exchange of at least one of the multiple slave BMS 100s to which the first communication ID has been assigned. If the master BMS 200 detects the exchange of at least one of the multiple slave BMS 100s, it can reset the first communication ID assigned to the non-exchanged slave BMS 110. For example, the master BMS 200 can transmit a communication ID reset signal to the non-exchanged slave BMS 110. The master BMS 200 can generate and transmit a certificate transmission request signal to the non-exchanged slave BMS 110 and the exchanged slave BMS 120.

[0091] In the first certificate re-reception step (S4600), the master BMS200 can receive the first certificate from the non-replaced slave BMS110 and the replaced slave BMS120, respectively.

[0092] In the slave BMS validity reassessment step (S4700), the master BMS 200 can use the first certificates received from the non-replaced slave BMS 110 and the replaced slave BMS 120 to determine the validity of the non-replaced slave BMS 110 and the replaced slave BMS 120, respectively.

[0093] According to the embodiment, the slave BMS validity reassessment step (S4700) may include a step (S4710) in which the master BMS 200 verifies the integrity of the first certificate using the certificate chain stored in memory 220, and a step (S4720) in which the master BMS 200 determines whether the non-replaced slave BMS 110 and the replaced slave BMS 120 are valid, respectively, based on whether the first certificate is flawless.

[0094] According to the embodiment, the step of verifying the integrity of the first certificate (S4710) may include the step of the master BMS200 verifying the integrity of the certificate chain and confirming the validity of the second certificate (S4711), and the step of verifying the integrity of the first certificate using the valid second certificate (S4712).

[0095] In step S4711, where the master BMS200 verifies the integrity of the certificate chain and confirms the validity of the second certificate, the master BMS200 can verify the signature of the second certificate using the public key of the third certificate included in the certificate chain, and verify the signature of the third certificate using the public key of the fourth certificate included in the certificate chain, thereby determining the integrity of the certificate chain.

[0096] In the step of verifying the integrity of the first certificate using a valid second certificate (S4712), the master BMS200 can verify the integrity of the first certificate by using the public key of the valid second certificate to verify the signature of the first certificate.

[0097] In the communication ID reassignment step (S4800), the master BMS200 can reassign the second communication ID to the valid slave BMS100 from among the non-replaced slave BMS110 and the replaced slave BMS120. At this time, the master BMS200 can transmit a communication ID reassignment signal to the valid slave BMS100 from among the non-replaced slave BMS110 and the replaced slave BMS120 to instruct the reassignment of the second communication ID.

[0098] On the other hand, the above method can be created with a computer-executable program and may be implemented on a general-purpose digital computer that runs the program using a computer-readable recording medium. The computer-readable recording medium may include magnetic storage media such as ROM, RAM, USB, floppy disks, and hard disks, or optical reading media such as CD-ROMs and DVDs.

[0099] The scope of the present invention is indicated not by the detailed description above, but by the claims set forth below, and all modifications or altered forms derived from the meaning and scope of the claims and the concept of equivalents should be interpreted as being included within the scope of the present invention.

Claims

1. Multiple slave BMSs that store multiple first certificates, and Includes a master BMS containing a certificate chain, The aforementioned master BMS is Memory for storing the aforementioned certificate chain; and A processor that, when a communication connection with the plurality of slave BMSs is detected, transmits a certificate transmission request signal to the plurality of slave BMSs, receives the plurality of first certificates from each of the plurality of slave BMSs, verifies the integrity of each of the plurality of first certificates using the certificate chain, determines the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is flawless, and assigns a first communication ID to the valid slave BMS among the plurality of slave BMSs, Communication ID assignment system.

2. The aforementioned processor, The signatures of the second and third certificates included in the certificate chain are verified, and it is determined whether the certificate chain is complete or not. If the certificate chain is determined to be complete, the second certificate is determined to be valid. The signature of each of the multiple first certificates is verified using the public key of the valid second certificate, and the integrity of each of the multiple first certificates is verified. The communication ID assignment system according to claim 1.

3. The aforementioned processor, Of the aforementioned multiple slave BMSs, the slave BMS on which the first certificate, whose integrity has been verified, is stored is deemed valid, and the slave BMS on which the first certificate, whose integrity has not been verified, is deemed invalid. A communication ID assignment system according to claim 1 or 2.

4. The aforementioned processor, The first communication ID is assigned using the voltage difference or communication signal value of the valid slave BMS. A communication ID assignment system according to claim 1 or 2.

5. The aforementioned processor, When the replacement of at least one of the plurality of slave BMS is detected, a communication ID reset signal is transmitted to the non-replaced slave BMS among the plurality of slave BMS to reset the first communication ID. A certificate transmission request signal is transmitted to the non-replaced slave BMS and the replaced slave BMS, and the plurality of first certificates are received from the non-replaced slave BMS and the replaced slave BMS. A communication ID assignment system according to claim 1 or 2.

6. The aforementioned processor, The validity of the non-replaced slave BMS is determined based on whether or not the integrity of the first certificate received from the non-replaced slave BMS can be verified. The validity of the replaced slave BMS is determined based on whether or not the integrity of the first certificate received from the replaced slave BMS can be verified. The communication ID assignment system according to claim 5.

7. The aforementioned processor, Of the non-replaced and replaced slave BMSs, the slave BMS on which the verified first certificate is stored is deemed valid, and the slave BMS on which the unverified first certificate is stored is deemed invalid. The communication ID assignment system according to claim 6.

8. The aforementioned processor, The second communication ID is reassigned to the valid slave BMS among the non-replaced slave BMS and the replaced slave BMS. The communication ID assignment system according to claim 7.

9. If the master BMS detects a communication connection with multiple slave BMSs, it transmits a certificate transmission request signal to the multiple slave BMSs; The step of receiving each of the multiple first certificates from each of the multiple slave BMSs; A step of verifying the integrity of each of the plurality of first certificates using the certificate chain stored in memory, and determining the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is flawless or not; and The step includes assigning a first communication ID to a valid slave BMS among the plurality of slave BMSs, Communication ID assignment method.

10. The step of determining the validity of each of the aforementioned multiple slave BMSs is as follows: The steps include: the master BMS verifying the integrity of the certificate chain and confirming the validity of the second certificate included in the certificate chain; and The process includes the step of verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate, and verifying the integrity of each of the plurality of first certificates. The method for assigning a communication ID according to claim 9.

11. The step of assigning the first communication ID is: The master BMS includes the step of transmitting a communication ID assignment signal to the valid slave BMS to instruct it to assign the first communication ID, A method for assigning a communication ID according to claim 9 or 10.

12. If the master BMS detects the replacement of at least one of the multiple slave BMS to which the first communication ID has been assigned, it resets the first communication ID assigned to the non-replaced slave BMS among the multiple slave BMS, and generates and transmits a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS; Steps include receiving a first certificate from the non-replaced slave BMS and the replaced slave BMS, respectively; A step of verifying the integrity of the first certificate using the certificate chain, and determining the validity of the non-replaced slave BMS and the replaced slave BMS based on whether or not the first certificate is flawless; and The step includes reassigning a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS, A method for assigning a communication ID according to claim 9 or 10.

13. The step of determining the validity of the non-replaced slave BMS and the replaced slave BMS is as follows: The steps include: the master BMS verifying the integrity of the certificate chain and confirming the validity of the second certificate included in the certificate chain; and The process includes the step of verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate, and verifying the integrity of each of the plurality of first certificates. The method for assigning a communication ID according to claim 12.

14. The step of reassigning the second communication ID is: The step includes transmitting a communication ID reassignment signal to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS to instruct the reassignment of the second communication ID, The method for assigning a communication ID according to claim 12.

Images