Method, apparatus, and energy storage system for managing root keys

Abstract

The present invention relates to a method, apparatus, and energy storage system for managing root keys for an energy storage system. [Solution] The root key management method is applied to a management control terminal of an energy storage system where an energy storage root key is installed. After detecting that the energy storage system has generated an energy storage root key, the method includes: dividing the energy storage root key into multiple root key shares; storing each root key share in a memory area managed by a corresponding root key authority; positioning multiple target memory areas necessary for the reduction of the energy storage root key in all memory areas in response to a root key reduction operation triggered by a root key reducer; and, if it is detected that the root key reducer has access rights to multiple target memory areas, reducing and obtaining the energy storage root key based on the selected target root key shares in the multiple target memory areas. This method improves the management effectiveness of root key management in the energy storage system.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and particularly to a method and apparatus for managing a root key of an energy storage system and an energy storage system.

Background Art

[0002] With the development of science and technology, energy storage systems are widely applied in many fields. To ensure the security of energy storage data in an energy storage system, a key protection system is usually installed in the energy storage system. In the key management protection system, since the root key is used for the derivation of encryption keys and integrity protection keys, it is necessary to perform security management on the root key of the energy storage system.

[0003] Currently, in the process of managing the root key of an energy storage system, the root key is usually stored by installing physical hardware such as a Hardware Security Module (HSM) or an encrypted USB disk. However, the hardware cost is often relatively high. On the other hand, the root key that depends on being managed by a single piece of hardware is likely to have a risk of leakage when the device is attacked. Therefore, the management effect of the current root key management of the energy storage system is low.

Summary of the Invention

Problems to be Solved by the Invention

[0004] Based on this, it is necessary to provide a method and apparatus for managing the root key of an energy storage system and an energy storage system that can improve the management effect of the root key management of the energy storage system for the above technical problems.

Means for Solving the Problems

[0005] In a first embodiment, the present invention provides a method for managing the root key of an energy storage system, which is applied to a management control terminal of the energy storage system. The root key management method for the energy storage system includes, after detecting that the energy storage system has generated an energy storage root key, dividing the energy storage root key into a plurality of root key shares, having a first management authority for the energy storage root key jointly held by a plurality of root key authority holders who manage the energy storage system, each of the plurality of root key authority holders holding a second management authority for their respective root key share, the plurality of second management authorities being isolated from each other, and the plurality of root key authority holders including at least two of four: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. Each root key share is stored in a memory area managed by the corresponding root key authority holder, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. In response to a root key reduction operation triggered by a root key reducer, multiple target storage areas necessary for the reduction of the energy storage root key are positioned in all storage areas, and the multiple target storage areas correspond one-to-one with the multiple root key authority holders. If the root key restorer detects that it has access rights to access the multiple target storage areas, the energy storage root key is reduced and obtained based on the target root key share selected in the multiple target storage areas.

[0006] In a second embodiment, the present invention further provides a root key management device for an energy storage system that is applied to a management control terminal of an energy storage system. The root key management device of the energy storage system includes a partition module, a storage module, a decision module, and a reduction module. The division module is used to divide the energy storage root key into multiple root key shares after detecting that the energy storage system has generated an energy storage root key, the first administrative authority of the energy storage root key is jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holds a second administrative authority for the corresponding root key share, the multiple second administrative authorities are isolated from each other, and the multiple root key authority holders include at least two of four: a root key management entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. The memory module is used to store each root key share in a memory area managed by the corresponding root key authority, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. The decision module is used to locate multiple target storage areas necessary for the reduction of the energy storage root key in all storage areas in response to a root key reduction operation triggered by a root key reducer, and the multiple target storage areas correspond one-to-one with the multiple root key grantors. The reduction module is used to reduce and obtain the energy storage root key based on the target root key share selected in the multiple target storage areas, when it detects that the root key reducer has access rights to access the multiple target storage areas.

[0007] In a third embodiment, the present invention further provides a computer device including a memory in which a computer program is stored and a processor, wherein when the processor executes the computer program, The process involves detecting that the energy storage system has generated an energy storage root key, dividing the energy storage root key into multiple root key shares, having a first administrative authority for the energy storage root key jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holding a second administrative authority for their respective root key share, the multiple second administrative authorities being isolated from each other, and the multiple root key authority holders including at least two of four entities: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. Each root key share is stored in a memory area managed by the corresponding root key authority holder, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. In response to a root key reduction operation triggered by a root key reducer, the following steps are taken: positioning multiple target storage areas in all storage areas necessary for the reduction of the energy storage root key; and ensuring that the multiple target storage areas correspond one-to-one with the multiple root key grantors. If it is detected that the root key restorer has access rights to the multiple target storage areas, the following steps are performed: restore the energy storage root key based on the target root key share selected in the multiple target storage areas.

[0008] In a fourth embodiment, the present invention further provides a computer-readable storage medium in which a computer program is stored, and when the computer program is executed by a processor, The process involves detecting that the energy storage system has generated an energy storage root key, dividing the energy storage root key into multiple root key shares, having a first administrative authority for the energy storage root key jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holding a second administrative authority for their respective root key share, the multiple second administrative authorities being isolated from each other, and the multiple root key authority holders including at least two of four entities: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. Each root key share is stored in a memory area managed by the corresponding root key authority holder, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. In response to a root key reduction operation triggered by a root key reducer, the following steps are taken: positioning multiple target storage areas in all storage areas necessary for the reduction of the energy storage root key; and ensuring that the multiple target storage areas correspond one-to-one with the multiple root key grantors. If it is detected that the root key restorer has access rights to the multiple target storage areas, the following steps are performed: restore the energy storage root key based on the target root key share selected in the multiple target storage areas.

[0009] In a fifth embodiment, the present application further provides a computer program product including a computer program, wherein when the computer program is executed by a processor, The process involves detecting that the energy storage system has generated an energy storage root key, dividing the energy storage root key into multiple root key shares, having a first administrative authority for the energy storage root key jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holding a second administrative authority for their respective root key share, the multiple second administrative authorities being isolated from each other, and the multiple root key authority holders including at least two of four entities: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. Each root key share is stored in a memory area managed by the corresponding root key authority holder, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. In response to a root key reduction operation triggered by a root key reducer, the following steps are taken: positioning multiple target storage areas in all storage areas necessary for the reduction of the energy storage root key; and ensuring that the multiple target storage areas correspond one-to-one with the multiple root key grantors. If it is detected that the root key restorer has access rights to the multiple target storage areas, the following steps are performed: restore the energy storage root key based on the target root key share selected in the multiple target storage areas.

[0010] In the aforementioned root key management method, apparatus, and energy storage system for an energy storage system, the management control terminal of the energy storage system first detects the energy storage system in real time, and after detecting that the energy storage system has generated an energy storage root key, it divides the energy storage root key into multiple root key shares. Here, the management authority for the energy storage root key is jointly held by multiple root key authority holders who manage the energy storage system, and the management authority for the root key shares divided from the energy storage root key is held by different root key authority holders, and the management authority held by different root key authority holders is isolated from each other. The multiple root key authority holders include at least two of the following four: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. In other words, it is possible to divide the energy storage root key into multiple root key shares managed by at least two root key authority holders related to the energy storage system. Furthermore, each root key share is stored in a memory area managed by the corresponding root key authority. Here, if the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to reduce the energy storage root key, multiple root key shares are stored in memory areas managed by different root key authority. In addition, in response to a root key reduction operation triggered by the root key reducer, multiple target memory areas required to reduce the energy storage root key are positioned in all memory areas. Finally, if it is detected that the root key reducer has access rights to multiple target memory areas, the energy storage root key is reduced and obtained based on the target root key shares selected in the multiple target memory areas. The root key shares managed by multiple root key authority are isolated from each other, and the energy storage root key cannot be reduced and obtained using only the root key shares corresponding to root key shares that any of the root key authority can manage.Furthermore, after receiving a root key redemption request, the system can collaborate with at least two of the following four elements—the root key management target, the root key usage target, the management control terminal, and the cloud—to locate multiple target storage areas necessary for the redemption of the energy storage root key. Finally, by extracting multiple target root key shares from target storage areas managed by multiple root key authority holders, the energy storage root key can be redeemed. This prevents the root key from being leaked if a single root key authority holder is attacked, thus achieving the goal of securely managing the root key at the software level. Consequently, although hardware costs are often relatively high, this system improves the management effectiveness of root key management in energy storage systems by eliminating the technical flaw that root keys, which rely on encryption by a single piece of hardware, are susceptible to leakage if the equipment is attacked. [Brief explanation of the drawing]

[0011] To more clearly explain the embodiments of this application or related technologies, the following drawings necessary for describing the embodiments or related technologies are briefly introduced. Clearly, the drawings described below represent only a few embodiments of this application, and those skilled in the art can obtain other drawings based on these drawings without requiring any creative effort. [Figure 1] This is a flowchart illustrating the root key management method for an energy storage system in one embodiment. [Figure 2] This is a flowchart illustrating the root key management method for an energy storage system in another embodiment. [Figure 3] This is a flowchart for dividing the energy storage root key in a root key management method for an energy storage system in another embodiment. [Figure 4] This is a schematic diagram illustrating a scenario in which different root key redeemers redeem an energy storage root key in a root key management method for an energy storage system in another embodiment. [Figure 5] This is a block diagram of the configuration of the root key management device for an energy storage system in one embodiment. [Figure 6] This is an internal structure diagram of a computer device in one embodiment. [Modes for carrying out the invention]

[0012] To further clarify the purpose, technical proposal and advantages of this application, the application will be described in more detail below with reference to the drawings and embodiments. The specific embodiments described herein should be understood to be used solely for interpretation purposes and not to limit the application.

[0013] First, it's important to understand that an Energy Storage System (ESS) is a system that stores energy in a specific format using a particular medium or device and releases it in a specific format as needed. To ensure the security of energy storage data in an ESS, a hardware security module is typically installed to store a root key. Here, the root key is at the highest level of the key protection system and is used to generate and manage subsequent keys such as master keys and work keys. By setting the root key, each unit and battery pack within the ESS can be protected in advance, thereby ensuring the secure storage and management of keys. Currently, the root key is always stored in an HSM or trusted execution environment, dynamically updated as needed, and used in scenarios such as data transmission, firmware updates, and status monitoring of the ESS. However, in the highly competitive energy storage industry, managing root keys using hardware such as HSMs often results in high hardware costs, and relying on a single piece of hardware to manage the root key increases the risk of leakage if the device is attacked. Therefore, from the perspective of both management costs and security, the current effectiveness of root key management in energy storage systems cannot be considered superior. For this reason, there is an urgent need for a root key management method that improves the effectiveness of root key management in energy storage systems.

[0014] In one embodiment, as shown in Figure 1, a method for managing the root key of an energy storage system is provided, and this embodiment takes the example of applying the method to a management control terminal of the energy storage system, where the management control terminal of the energy storage system refers to a terminal located on the user side of the energy storage system, which can not only collect data on the user side of the energy storage system but also provide interactive control to the user side of the energy storage system. Here, the user side of the energy storage system refers to the location of the energy storage system on the user side, and may specifically consist of an energy storage cabinet, an energy management system, communication equipment, and a management control terminal of the energy storage system. The management control equipment of the energy storage system may specifically be a personal computer, a laptop computer, a smartphone, and a tablet computer, and the management control terminal of the energy storage system monitors the energy storage system. To understand this, in the process of the operation and maintenance personnel placing the energy storage system at the management control terminal of the energy storage system, the hardware security module of the energy storage system dynamically generates an energy storage root key, and further obtains an encryption key and an integrity protection key based on the derivation of the energy storage root key, and finally ensures the secure transmission and storage of data related to the energy storage system with the above keys. The management and control terminal for the energy storage system includes a partitioning module, a storage module, a decision module, and a reduction module.The division module is used to divide the energy storage root key into multiple root key shares after detecting that the energy storage system has generated an energy storage root key, where the first administrative authority of the energy storage root key is jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holds a second administrative authority for the corresponding root key share, and the multiple second administrative authorities are isolated from each other, and the multiple root key authority holders include at least two of four things: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. The storage module is used to store each root key share in a storage area managed by the corresponding root key authority holder, where the amount of the first root key share stored in any of the storage areas is smaller than the amount of the second root key share required to return the energy storage root key. The decision module is used to locate multiple target storage areas necessary for the reduction of the energy storage root key in all storage areas, in response to a root key reduction operation triggered by the root key reducer, where the multiple target storage areas correspond one-to-one with multiple root key authority holders. The reduction module is used to reduce and obtain the energy storage root key based on the target root key shares selected in the multiple target storage areas, when it detects that the root key reducer has access rights to multiple target storage areas. To understand this, in the process of managing the root key of the energy storage system, information is exchanged between the division module, storage module, decision module, and reduction module to first receive the energy storage root key, then divide the energy storage root key into multiple root key shares, and at least two of the following four entities—the root key management entity, the root key user, the management control terminal of the energy storage system, and the cloud providing cloud services to the energy storage system—have management rights over different root key shares.The root key shares with management authorities held by multiple root key authorities are isolated from each other, and only the root key shares corresponding to the root key shares that can be managed by any one root key authority cannot restore the energy storage root key alone. Furthermore, after receiving a root key restoration request, at least two of the four, namely, the root key management target, the root key usage target, the management control terminal, and the cloud, are collaborated with to locate multiple target storage areas necessary for restoring the energy storage root key. Finally, by extracting multiple target root key shares from the target storage areas managed by multiple root key authorities, the energy storage root key can be obtained by restoration, thereby avoiding the leakage of the root key due to an attack on a single root key authority and improving the root key management effect of the energy storage system. In this embodiment, the method includes the following steps 202 to 208.

[0015] In step 202, after detecting that the energy storage system has generated an energy storage root key, the energy storage root key is divided into multiple root key shares. Here, the first management authority of the energy storage root key is jointly held by multiple root key authorities that manage the energy storage system. The multiple root key authorities each hold the second management authority of the corresponding root key share, and the multiple second management authorities are isolated from each other. The multiple root key authorities include at least two of the four, namely, the root key management target that manages the energy storage system, the root key usage target that uses the energy storage system, the management control terminal of the energy storage system, and the cloud that provides cloud services to the energy storage system. Furthermore, the operation and maintenance personnel can complete the generation and division flow of the energy storage root key through interaction between the energy storage system's management control terminal and the energy storage system itself. Specifically, the operation and maintenance personnel deploy the energy storage system using the energy storage system's management control terminal. During the initialization phase of deploying the energy storage system, the energy storage system's hardware security module generates the energy storage root key using its internal secure random number generator. Here, the hardware security module may be integrated into the energy storage system's controller or gateway device. While the generation of the energy storage root key is performed entirely by a security hardware module such as an HSM or encrypted USB disk to prevent malicious theft, the energy storage root key, which relies on being managed by a single piece of hardware, is still susceptible to leakage after the device is attacked. Therefore, after generating the energy storage root key, key division technology can be used to divide the energy storage root key into multiple root key shares, and multiple root key authority holders can each have management authority over their respective root key shares. This increases the difficulty for hackers to compromise the system's confidentiality by attacking the energy storage cabinet.

[0016] Furthermore, the management control terminal of the energy storage system detects when the energy storage system generates an energy storage root key. Specifically, the management control terminal of the energy storage system detects the generation of the energy storage root key in the hardware security module, and after the energy storage root key is generated, issues a control command to divide the energy storage root key into multiple root key shares. To make it clear, the entity that divides the energy storage root key is the hardware security module in the energy storage system, and the multiple root key shares may be five, six, or seven, etc. The amount of each root key share can be determined specifically by the division command issued by the management control terminal of the energy storage system. Here, after the energy storage root key is divided into multiple root key shares, the first management authority for the entire energy storage root key is jointly held by multiple root key authority holders who manage the energy storage root key, and different root key authority holders each hold a second management authority for their corresponding root key share. These different second management authorities are isolated from each other, and a root key authority holder refers to an entity that has management authority over the energy storage root key, which may specifically be an object, system, or terminal. Multiple root key authority holders include root key managed entities that manage the energy storage system, root key users that use the energy storage system, management and control terminals for the energy storage system, and a cloud that provides cloud services to the energy storage system. Here, the root key managed entities that manage the energy storage system may specifically be suppliers, the root key users that use the energy storage system may specifically be customer site administrators, the management and control terminals for the energy storage system may specifically be computers or mobile phones, and the cloud may specifically be cloud servers. To make it clear, since the different root key authority holders are independent of each other, the secondary management authority of multiple root key shares is isolated from each other, and the amount of root key shares that different root key authority holders have management authority over may be the same or different.For example, in one feasible form, the energy storage route key is divided into route key share 1, route key share 2, route key share 3, route key share 4, and route key share 5. Here, the second management authority of route key share 1 may be held by the operation and maintenance personnel of the supplier, the second management authority of route key share 2 may be held by the customer site administrator, the second management authorities of route key share 3 and route key share 4 may be held by the management control terminal of the energy storage system, and the management authority of route key share 5 may be held by the cloud server.

[0017] Furthermore, after the hardware security module of the energy storage system receives a partitioning command issued by the management control terminal of the energy storage system, the hardware security module may generate multiple root key shares based on a pre-configured partitioning algorithm that operates internally. Here, the pre-configured partitioning algorithm may specifically be a Shamir polynomial difference algorithm, and the shares obtained by partitioning can be represented as K1, K2, K3…Kn. Here, n represents the total amount of root key shares. After partitioning and obtaining multiple root key shares, the management control terminal of the energy storage system can construct a mapping relationship between different root key shares and different root key authority holders such that different root key authority holders each have second management authority over their respective root key shares. Specifically, a mapping relationship between different key shares and different root key authority holders can be constructed based on the share identification information of the root key shares and the authority holder identity information of the root key authority holders. Here, the share identification information may specifically be a share number, and the authority holder identity information may specifically be target identity information or terminal number information. To make it understandable, there are at least two root key authority holders with secondary administrative authority, and multiple root key authority holders with secondary administrative authority jointly hold primary administrative authority over the energy storage root key, for example, in one working form, multiple root key authority holders may be root key managed entities and root key users, root key managed entities and management control terminals of the energy storage system, management control terminals of the energy storage system and the cloud, or root key managed entities, root key users and management control terminals of the energy storage system, etc.

[0018] As an example, step 202 includes the following steps: after confirming that the hardware security module of the energy storage system has generated an energy storage root key based on root key generation progress information fed back by the energy storage system, it generates a root key splitting command, and based on the root key splitting command, it controls the hardware security module to split the energy storage root key into multiple root key shares, where the root key generation progress information is used to represent the generation progress of the hardware security module of the energy storage system in generating the energy storage root key, and the root key splitting command is used to instruct the splitting of the energy storage root key.

[0019] In one feasible configuration, if the energy storage root key generated by the hardware security module is K, and the number of shares of the energy storage root key partition instructed by the root key partitioning command is 4, then the hardware security module partitions the energy storage root key into K1, K2, K3, and K4 based on the root key partitioning command.

[0020] In step 204, each root key share is stored in a memory area managed by the corresponding root key authority, where the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key.

[0021] Furthermore, after the hardware security module has completed the division of the energy storage root key and acquired multiple root key shares, in order to ensure physical isolation between different root key shares when they are managed by multiple root key authorized holders, the management control terminal of the energy storage system can control the allocation and storage of the multiple root key shares in the storage area managed by the root key authorized holder. For example, in one feasible configuration, if an energy storage root key is divided into four root key shares, and the root key manager, root key user, management control terminal, and cloud each have second management authority over one root key share, then root key share 1 can be stored in the first pre-configured storage area of ​​the first related terminal associated with the root key manager, root key share 2 can be stored in the second pre-configured storage area of ​​the second related terminal associated with the root key user, root key share 3 can be stored in the third pre-configured storage area of ​​the management control terminal, and root key share 4 can be stored in the fourth pre-configured storage area of ​​the cloud. Here, the first related terminal associated with the root key manager may be a mobile phone terminal owned by the root key manager, and the second related terminal associated with the root key user may be a mobile phone terminal owned by the root key user. In this way, since the storage spaces of different terminals have independent storage media, actual isolation from physically different root key shares can be achieved.

[0022] Furthermore, to prevent the leakage of the energy storage root key by a single root key authority holder, it is possible to configure the system so that the energy storage root key cannot be reduced and obtained by the amount of root key shares that each root key authority holder can manage. Without the cooperation of two or more root key authority holders, the reduction of the energy storage root key cannot be completed. In other words, it is possible to configure the system so that the amount of first root key shares stored in any of the storage areas is smaller than the amount of second root key shares required to reduce the energy storage root key. For example, in one feasible configuration, if the energy storage root key generated by the hardware security module is K, the number of shares of the energy storage root key division instructed by the root key division command is 7, and the minimum amount of shares required to reduce the energy storage root key, synchronously instructed by the root key division command, is 4, then in the process of establishing a mapping relationship between root key shares and root key authority holders and allocating and storing the root key in different storage areas, the amount of root key shares stored in any of the storage areas will be less than 4.

[0023] As an example, step 204 includes the following steps: extracting share allocation policy information from the root key splitting command; determining the amount of root key shares allocated to each of the multiple root key authority holders based on the share allocation policy information; receiving the mapping relationships between the multiple root key shares and the multiple root key authority holders; and controlling the hardware security module to store the multiple root key shares in the corresponding root key authority holders based on the root key share allocation amounts and mapping relationships, where the root key share allocation amount is used to represent the number of root key shares allocated to different root key authority holders.

[0024] In step 206, in response to a root key reduction operation triggered by a root key reducer, multiple target memory areas necessary for the reduction of the energy storage root key are positioned in all memory areas, where the multiple target memory areas correspond one-to-one with multiple root key grantors. The root key returner refers to the entity that returns the energy storage root key, and may specifically be a character, object, or terminal. To make it clear, the root key return operation may be manually triggered by a character such as a supplier operations and maintenance personnel, a customer site administrator, or a hacker, or it may be automatically triggered by a terminal such as a management control terminal or the cloud. After receiving a root key return operation triggered by the root key returner, multiple target storage areas necessary for returning the energy storage root key can be positioned in all storage areas, that is, the multiple root key shares combined in the multiple target storage areas can satisfy the minimum amount of root key shares required for returning the energy storage root key, and there is a one-to-one correspondence between the multiple target storage areas and the multiple root key authorityes. For example, in one feasible configuration, if the energy storage root key generated by the hardware security module is K, the number of shares of the energy storage root key partition instructed by the root key partitioning command is 7, and the minimum number of shares of the reduced energy storage root key synchronously instructed by the root key partitioning command is 4, then the 7 root key shares are each stored in the memory area of ​​the matching root key authority, specifically, root key share 1 is stored in the first memory area of ​​the management control terminal, root key share 2 is stored in the second memory area of ​​the management control terminal, root key share 3 is stored in the third memory area of ​​the management control terminal, and When root key share 4 is stored in the fourth storage area of ​​the cloud, root key share 5 is stored in the fifth storage area of ​​the cloud, root key share 6 is stored in the sixth storage area of ​​the cloud, and root key share 7 is stored in the seventh storage area of ​​the first associated terminal associated with the root key management, the multiple target storage areas may be the first storage area, second storage area, third storage area and fourth storage area, or the first storage area, second storage area, third storage area and seventh storage area, or the first storage area, second storage area, fourth storage area and fifth storage area, or the first storage area, second storage area, third storage area, fourth storage area and sixth storage area, etc.Therefore, if we do not consider the root key restorer's access rights to all memory areas, there are multiple combinations of target memory areas, and it is sufficient that the total root key share of the combined target memory areas reaches at least the amount of the second root key share.

[0025] As an example, step 206 includes the following steps: In response to a root key reduction operation triggered by a root key reducer, in all memory areas, locating multiple target memory areas required for the reduction of the energy storage root key based on the amount of second root key share required for the reduction of the energy storage root key, where the multiple target memory areas correspond one-to-one with multiple root key authority persons, and the root key authority persons corresponding to different target memory areas may be the same or different.

[0026] In step 208, if it is detected that the root key restorer has access rights to multiple target storage areas, the energy storage root key is restored and obtained based on the selected target root key shares in the multiple target storage areas.

[0027] Furthermore, since multiple root key shares are physically isolated by different memory areas, the root key restorer does not have the ability to access all memory areas. That is, no single root key restorer has the ability to extract the root key share for all combinations of multiple target memory areas, and it is necessary to detect the root key restorer's access rights to multiple target memory areas for different combinations of areas. For example, in one feasible configuration, the energy storage root key generated by the hardware security module is K, the number of shares of the energy storage root key partition instructed by the root key partitioning command is 7, the minimum amount of energy storage root key shares synchronously instructed by the root key partitioning command is 4, and the root key If the returner is a management control terminal, and the root key returner has access rights to root key shares 1, 2, and 3 to access its own storage area, and also has root key share 7 to access the cloud storage area, then it is confirmed that the root key returner has access rights to multiple target storage areas. Here, the access rights for the root key returner to access different storage areas can be obtained by pre-configuring them based on the returner's identity information. For example, if the root key returner needs to access storage area that is not on its own terminal, it is possible to detect, based on the root key returner's identity information, whether the terminal belonging to the storage area that the root key returner needs to access is on the access whitelist.

[0028] As an example, step 208 includes the following steps: if it detects that the root key restorer has access rights to multiple target storage areas, it sends the selected target root key shares in the multiple target storage areas to the hardware security module of the energy storage system and controls the hardware security module to restore the multiple target root key shares in order to obtain the energy storage root key.

[0029] For example, in one feasible form, a hardware security module can divide an energy storage root key into multiple root key shares by constructing a single m-1 polynomial when performing a key splitting flow, where each root key share may be understood as a fixed (x,y) coordinate. Here, the value of x originates from data interacted with in the local operation, maintenance environment, or cloud of the energy storage cabinet under specified rules, i.e., share generation data for different root key shares, and the value of y is obtained by polynomial calculation, and if m is 4, this indicates that the hardware security module can successfully perform the root key reduction flow and reduce the energy storage root key only after the root key reducer has obtained four fixed (x,y) coordinates and performed polynomial interpolation.

[0030] In the root key management method for the energy storage system, the management control terminal of the energy storage system first detects the energy storage system in real time, and after detecting that the energy storage system has generated an energy storage root key, it divides the energy storage root key into multiple root key shares. Here, the management authority for the energy storage root key is jointly held by multiple root key authority holders who manage the energy storage system, and the management authority for the root key shares divided from the energy storage root key is held by different root key authority holders, and the management authority held by different root key authority holders is isolated from each other. The multiple root key authority holders include at least two of the following four: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, the management control terminal of the energy storage system, and a cloud that provides cloud services to the energy storage system. In other words, it is possible to divide the energy storage root key into multiple root key shares managed by at least two root key authority holders related to the energy storage system. Furthermore, each root key share is stored in a memory area managed by the corresponding root key authority, and if the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to reduce the energy storage root key, then multiple root key shares are stored in memory areas managed by different root key authority. Furthermore, in response to a root key reduction operation triggered by the root key reducer, multiple target memory areas required to reduce the energy storage root key are positioned in all memory areas, and finally, if it is detected that the root key reducer has access rights to multiple target memory areas, the energy storage root key is reduced and obtained based on the target root key shares selected in the multiple target memory areas. The root key shares managed by multiple root key authority are isolated from each other, and the energy storage root key cannot be reduced by only the root key shares corresponding to the root key shares that any of the root key authority can manage.Furthermore, after receiving a root key redemption request, the system can collaborate with at least two of the following four elements—the root key management target, the root key usage target, the management control terminal, and the cloud—to locate multiple target storage areas necessary for the redemption of the energy storage root key. Finally, by extracting multiple target root key shares from target storage areas managed by multiple root key authority holders, the energy storage root key can be redeemed. This prevents the root key from being leaked if a single root key authority holder is attacked, thus achieving the goal of securely managing the root key at the software level. Consequently, while hardware costs are often relatively high, this system overcomes the technical flaw that root keys, which rely on encryption by a single piece of hardware, are susceptible to leakage if the equipment is attacked. Therefore, the management effectiveness of root key management for energy storage systems is improved in two dimensions: hardware cost reduction and improved security of root key management.

[0031] In one embodiment, as shown in Figure 2, the multiple root key shares include multiple root key management shares jointly managed by the management control terminal and the root key managed, and a third root key usage share used by the root key usage target, and dividing the energy storage root key into multiple root key shares includes the following steps.

[0032] In step 302, the management control terminal, root key managed persons, and root key users are all provided with a common share configuration information, and the management control terminal, root key managed persons, and root key users are each provided with their respective authority level information. Here, the share configuration information is used to identify the total amount of root key shares obtained by dividing the energy storage root key. Furthermore, in a flow where only the management control terminal, root key managed devices, and root key management users participate jointly in root key authority management as root key authority holders, the management control terminal, in the process of generating key splitting commands, can synchronously set the total amount of necessary root key shares obtained by splitting the energy storage root key, and can also set in detail the amount of root key shares that can be managed by different root key authority holders.

[0033] As an example, step 302 includes the following steps: extracting share configuration information necessary for the management control terminal, the root key managed object, and the root key user in the root key splitting command; and extracting authority level information corresponding to the management control terminal, the root key managed object, and the root key user, respectively, where the share configuration information is used to identify the total amount of root key shares obtained by splitting the energy storage root key.

[0034] In step 304, the energy storage root key is divided into multiple pre-configured root key shares based on the share configuration information. As an example, step 304 includes the following steps, controlling the hardware security module to divide the energy storage root key into a number of pre-configured root key shares identified by share configuration information using a pre-configured key splitting algorithm. Here, the share configuration information may specifically be 7, 8, or 9, etc. To make it clear, a pre-configured root key share refers to a root key share that has not established a mapping relationship with any of the root key authority holders.

[0035] In step 306, based on the share mapping relationship between multiple pre-configured root key shares and authority level information, multiple pre-configured root key shares are divided to obtain multiple root key management shares and root key usage shares, where the share mapping relationship is used to represent the root key share component of the total root key share amount that is assigned to any of the root key authority holders.

[0036] Furthermore, because different root key authority holders have different security capabilities, different authority levels can be assigned to different root key authority holders based on their different roles, and a share mapping relationship can be established between these different authority levels and pre-configured root key shares. Here, the share mapping relationship is used to represent the root key share component assigned to any of the root key authority holders in the total amount of root key shares; that is, different authority levels correspond to different numbers of divided root key shares. For example, in one feasible configuration, all root key authority holders include the management control terminal, the supplier managing the energy storage root key, and the customer site administrator using the energy storage root key, where the authority levels corresponding to the management control terminal and the customer site administrator are both identified as level 2, the authority level corresponding to the supplier managing the energy storage root key is identified as level 3, and seven root key shares are sequentially assigned to the management control terminal, the supplier, and the customer site administrator in a 2, 3, and 2 arrangement order.

[0037] As an example, step 306 includes the following steps: Based on the share mapping relationship between multiple pre-configured root key shares and permission level information, it assigns a pre-configured number of pre-configured root key shares to each of the management control terminal, root key managed, and root key users, thereby obtaining multiple root key management shares and root key usage shares.

[0038] In this embodiment, in an application scenario where three parties—a management control terminal, a root key management target, and a root key user—participate in energy storage root key management, if the management control terminal needs to control a hardware security module to execute the energy storage root key division flow, first, based on the share configuration information generated by the management control terminal, the total amount of root key shares obtained by dividing the energy storage root key is determined, thereby dividing the energy storage root key into multiple pre-configured root key shares. Furthermore, considering the differences in the security protection capabilities of different root key authority holders, a share mapping relationship can be constructed between the authority level information of different root key authority holders generated by the management control terminal and the multiple pre-configured root key shares to clarify the root key share components for which different root key authority holders should have second management authority. This achieves the objective of sequentially assigning multiple pre-configured root key shares with security considerations in order for different root key authority holders to perform authority management, thereby improving the management effectiveness of root key management for the energy storage system and further enhancing the security of root key management for the energy storage system.

[0039] In one embodiment, the multiple root key management shares include a first root key management share managed by a management control terminal. Based on the share mapping relationship between the pre-configured root key shares and the authority level information, the multiple pre-configured root key shares are divided, and the root key management shares and multiple root key usage shares are obtained. The above steps include determining a first root key management share component corresponding to a management control terminal based on the share mapping relationship; obtaining system authentication information and system installation information generated in the process of the management control terminal managing the energy storage system; extracting first share generation data from the system authentication information and second share generation data from the system installation information; and obtaining the first root key management share by dividing a plurality of pre-configured root key shares based on the first root key management share component, the first share generation data and the second share generation data.

[0040] Furthermore, the first root key management share managed by the management control terminal may be stored entirely locally on the management control terminal, or a portion of the first root key management share may be stored locally on the management control terminal, and the other portion may be stored in the cloud, with the portion of the first root key management share being obtained through interaction between the management control terminal and the cloud. In this case, both the management control terminal and the cloud are root key authority holders, meaning that multiple root key authority holders include four entities: the management control terminal, the cloud, the root key managed entity, and the root key usage entity.

[0041] Furthermore, the first root key management share component managed by the management control terminal can be retrieved and obtained through the share mapping relationship. Specifically, it can be obtained by identifying a specific field in the root key partitioning encryption command. For example, in one feasible form, if the identified field is 2, then the first root key management share component managed by the management control terminal is 2. Here, system authentication information is used to represent the relevant content in the process of the energy storage system first going online and performing cloud authentication. The first share generation data may specifically be the first random value generated when the system first goes online. System installation information is used to represent the relevant content in the installation process of the energy storage system. Specifically, this may be the system installation log. The second share generation data may specifically be the installation time in the system installation log.

[0042] As an example, in a share mapping table constructed based on share mapping relationships, the system searches for the first root key management share component managed by the management control terminal, obtains system installation information generated during the process of the management control terminal installing the energy storage system, and obtains system authentication information transmitted from the cloud, which was generated by the management control terminal in the authentication process of the energy storage system in the cloud. The system extracts the installation time from the system installation information as first share generation data, and extracts random values ​​from the system authentication information as second share generation data. Based on the first root key management share component, the first share generation data, and the second share generation data, the system divides multiple pre-configured root key shares to obtain the first root key management share.

[0043] In this embodiment, in the process of dividing the first root key management share managed by the management control terminal, the divided first root key management share is further divided into a first partial root key management share and a second partial root key management share. Here, the management authority for the first partial root key management share is held by the management control terminal, and the management authority for the second partial root key management share is held by the cloud. In other words, the first root key management share managed by the management control terminal is further divided into a root key share jointly managed by the management control terminal and the cloud. By generating share generation data using different operating information of the energy storage system, the first root key management share managed by the management control terminal is accurately divided, thereby laying the foundation for improving the management effectiveness of root key management for the energy storage system.

[0044] In one embodiment, multiple root key management shares include a second root key management share managed by a root key management entity, and the multiple pre-configured root key shares are divided based on a share mapping relationship between pre-configured root key shares and privilege level information to obtain root key management shares and multiple root key usage shares. The above steps include determining a second root key management share component corresponding to a root key management entity based on the share mapping relationship; obtaining system hardcoded information set by the root key management entity in the energy storage system; extracting third share generation data from the system hardcoded information; searching for and obtaining fourth share generation data based on first search information entered by the root key management entity; and obtaining the second root key management share by dividing a plurality of pre-configured root key shares based on the second root key management share component, the third share generation data, and the fourth share generation data.

[0045] Furthermore, through the share mapping relationship, the second root key management share component managed by the root key management entity can be retrieved and obtained. System hardcoded information is used to represent sensitive parameters in the source code, and specifically, such sensitive parameters may be passwords or placement parameters. The first search information is used to search for confidential technical files stored in the management control terminal. To make it understandable, both the system hardcoded information and the first search information have storage rules set independently by the root key management entity, which are privacy-protected and cannot be known to other entities. Moreover, in the stage of acquiring share generation data corresponding to the second root key management share, only the root key management entity can acquire specific third and fourth share generation data. Here, the third share generation data may specifically be a hardcoded value, and the fourth share generation data may specifically be a second random value stored in a confidential technical file.

[0046] As an example, in a share mapping table constructed based on share mapping relationships, the second root key management share component managed by the root key management entity is searched, system hardcoding information set by the root key management entity in the energy storage system is obtained, the hardcoding value stored in the system hardcoding information is used as the third share generation data, the first search information entered by the root key management entity is used as an index, the confidential technology file is positioned, and the second random value stored in the confidential technology file is used as the fourth share generation data, where the first search information may specifically be search path information for searching the second random value, and the second root key management share is obtained by dividing multiple pre-configured root key shares based on the second root key management share component, the third share generation data, and the fourth share generation data.

[0047] In this embodiment, during the process of dividing the second root key management share managed by the root key management system, the divided second root key management share is further divided into a third partial root key management share and a fourth partial root key management share. Here, the third share generation data for the third partial root key management share is generated, which is hardcoded into the source code by the root key management system and cannot be directly read during the actual operation of the energy storage system. It is only returned after being accessed by the root key management system via a specific access interface. The fourth share generation data for the fourth partial root key management share is generated, and the root key management system independently possesses the search path information for searching the second random value. Therefore, both the third share generation data and the fourth share generation data are transparent, ensuring accurate division of the second root key management share managed by the root key management system, thus laying the foundation for improving the management effectiveness of root key management for the energy storage system.

[0048] In one embodiment, multiple pre-configured root key shares are divided based on a share mapping relationship between pre-configured root key shares and privilege level information, and a root key management share and multiple root key usage shares are obtained. The above steps include determining the root key usage share component corresponding to the root key usage target based on the share mapping relationship; obtaining system login information set by the root key usage target in the energy storage system; extracting fifth share generation data from the system login information; searching for target battery state information associated with the key generation time from the battery state information of the energy storage system based on the key generation time of the energy storage root key; generating sixth share generation data based on the target battery state information; and obtaining root key usage shares by dividing a plurality of pre-set root key shares based on the root key usage share component, fifth share generation data, and sixth share generation data.

[0049] Furthermore, based on the share mapping relationship, the root key usage share component managed by the root key management entity can be retrieved. Here, system login information is used to represent the login details of a client system logging into the energy storage system, and specifically may include the login password and login welcome message. To make it clear, system login information is usually used to prevent system services from being imitated, and is a measure for users to identify the authenticity of the service. System login information is entered into the account management by the root key usage entity and stored in the database. The fifth share generation data may specifically be a first fixed value set in the system login information, and battery state information is used to represent the operating state of the battery, and specifically may be the health of the battery cluster or the average voltage of the battery cluster. Battery state information changes over time, but has a numerical value determined at a certain point in time. This characteristic can be used to introduce the battery state information of the energy storage system into the root key partitioning process, and it can be used as the generated data for some of the root key shares. In the energy storage root key partitioning process, in order to partition and obtain the root key usage share, the management control terminal first obtains the State of Health (SOH) curve of a specific battery cluster in the energy storage system. Although this battery health curve may exhibit some differences depending on the algorithm used, regardless of whether the degradation curve is looked up or corrected in real time, there is only a single value for the same cell or corresponding cluster statistics at the same time point. Therefore, by establishing a specific relationship between the generation time of the energy storage root key and the battery health curve, a unique target battery state information can be retrieved and obtained, and furthermore, sixth share generation data can be generated depending on the target battery state information.For example, in one feasible configuration, if key generation time A is later than the initial collection time of the battery SOH curve, the battery state information is the SOH value collected at each collection point on the SOH curve. Furthermore, by default, the SOH value corresponding to the collection point closest to key generation time A is used as the target battery state information, and sixth share generation data can be generated according to a pre-configured rule based on the SOH value. For example, in another feasible configuration, if key generation time is B, the average voltage of the battery cluster in the real-time curve collected at key generation time B is used as the battery state information, and sixth share generation data can be generated according to a pre-configured rule based on the average voltage. To understand this, the pre-configured rule for generating sixth share generation data based on the target battery state information may be hardcoded into the database as source code beforehand, or it may be stored in the database.

[0050] As an example, in a share mapping table constructed based on share mapping relationships, the third root key management share component used by the root key user is searched, system login information set by the root key user in the energy storage system is obtained, a second fixed value is extracted from the system login information as fifth share generation data, multiple information collection points for the battery state information of the energy storage system are obtained, each of the multiple information collection points is subtracted from the key generation point to obtain multiple time differences, the battery state information corresponding to the information collection point with the smallest time difference is set as the target battery state information, a third fixed value is extracted from the target battery state information as sixth share generation data, and the root key usage share is obtained by dividing multiple pre-configured root key shares based on the root key usage share component, fifth share generation data, and sixth share generation data.

[0051] In this embodiment, in the process of dividing the root key usage share managed by the root key user, the divided root key usage share is further divided into a first partial root key usage share and a second partial root key usage share. Here, fifth share generation data is generated for the first partial root key usage share, which can be extracted from system login information independently provided for the root key user. Sixth share generation data is then generated for the second partial root key usage share, which is obtained after the root key user independently knows the pre-set search rules and generation rules, along with the uniqueness of the battery status information at a single point in time. Therefore, both the fifth share generation data and the sixth share generation data have privacy, ensuring accurate division of the root key usage share managed by the root key user, thus laying the foundation for improving the management effectiveness of root key management in the energy storage system.

[0052] In one feasible form, referring to Figure 3, which is a flowchart for splitting an energy storage root key, the root key shares obtained by splitting the energy storage root key may specifically be root key share x1, root key share x2, root key share x3, root key share x4, root key share x5, root key share x6, and root key share x7. Referring to the above embodiment, the first share generation data for root key share x1 is obtained by cloud transmission when the hardware first accesses the cloud, where the cloud permanently stores it in a database and extracts the first share generation data from system authentication information in a manner in which the cloud specifies rules based on the device identifier, or it may be an array of numbers automatically calculated based on time. The second share generation data for root key share x2 is extracted from the installation time of the system installation information and is only obtainable locally, and can be obtained if the customer site administrator has permission to read local files, and the safe time is usually stored in the installation log file or database and is used for positioning during the operation and maintenance phase, and is usually used to attempt to obtain the installation time. The third root key share generation data for root key share x3 is hardcoded into the source code, held by the root key manager, and only supports being returned after accessing a specific interface via the key splitting flow. The fourth root key share generation data for root key share x4 and root key share x5 may both be extracted from different files in the private technology folder, and the search path is known only to the root key manager. The sixth share generation data for root key share x6 is obtained in combination with the battery status information of the energy storage system. The seventh share generation data for root key share x7 is set in the system login information of the energy storage system by the root key user, and the acquisition method is known only to the root key user. In this way, the energy storage root key can be divided into seven root key shares, stored in the storage areas of different terminals, and managed by the corresponding root key authority.

[0053] In one feasible form, in one embodiment, storing each root key share in a storage area managed by the corresponding root key authority includes a selection step. In the selection step, a target energy storage root key share is selected from multiple energy storage root key shares, the share identification information of the target energy storage root key share is obtained, and the target energy storage root key shares are stored in a memory area managed by the root key authority holder identified by the share identification information until all energy storage root key shares have been selected, and then the execution of the selection step returns.

[0054] As an example, the selection step includes the following steps: randomly selecting one of several energy storage root key shares as the target energy storage root key share; determining a storage area managed by the root key authority that will store the target energy storage root key share based on the share identification information of the target energy storage root key share; storing the target energy storage root key share in the storage area; returning to the execution of the step and randomly selecting one of several energy storage root key shares as the target energy storage root key share.

[0055] In this embodiment, the root key authority holders and their storage areas for managing different energy storage root key shares are determined by the share identification information corresponding to each of the different energy storage root key shares. Furthermore, by storing all energy storage root key shares in one-to-one corresponding storage areas, in subsequent energy storage root key redemption scenes, different root key redeemers can extract the corresponding root key shares and redeem the energy storage root key based on their access rights. This lays the foundation for further improving the management effectiveness of root key management for energy storage systems.

[0056] In one embodiment, in response to a root key reduction operation triggered by a root key reducer, the positioning of multiple target memory regions required for the reduction of the energy-storage root key in all memory regions is as follows: The root key reduction operation includes extracting identity information of the root key reducer, determining a first target memory area to store the first root key management share in all memory areas, generating share path information for the target root key usage share necessary for reducing the energy storage root key based on the identity information, determining a second target memory area to store the target root key usage share in all memory areas based on the share path information, and ensuring that both the first and second target memory areas are multiple target memory areas.

[0057] Furthermore, the identity information of the root key restorer allows for the determination of a portion of the root key shares that can be restored by the root key restorer. This enables the generation of share path information for restoring this portion of the root key shares. This portion of the root key shares is extracted from a designated memory area and used to restore the energy storage root key. By combining this with other portions of the root key shares managed by the management control terminal, the energy storage root key can be successfully restored and obtained. For example, in one feasible configuration, if the energy storage root key generated by the hardware security module is K, and the number of shares in the energy storage root key partition instructed by the root key partition command is 4, then two root key shares are stored in the memory area of ​​the first associated terminal associated with the root key management device, and three root key shares are stored in the memory area of ​​the management control terminal. By randomly selecting four root key shares from these five root key shares, the energy storage root key can be restored and obtained. Here, the shared route information is used to identify different routes that store different root key shares in the memory area of ​​the first related terminal, and the root key redemption operation may be manually triggered or automatically triggered by the root key redemptor.

[0058] As an example, in a root key return operation, the identity information of the root key returner is extracted, and in response to the root key return operation, a search is automatically triggered to find the first target memory area that stores the first root key management share among all memory areas. Based on the identity information and the return information entered by the root key returner, share path information for the target root key usage share necessary for returning the energy storage root key is generated, and using the share path information as an index, a search is performed to find the second target memory area that stores the target root key usage share among all memory areas, and both the first and second target memory areas are set to multiple target memory areas.

[0059] In this embodiment, by coordinating with the management control terminal and the root key returner, the first and second target storage areas for the root key share necessary for returning the energy storage root key can be positioned in all storage areas. This achieves the objective of accurately positioning the target storage area that can be obtained by returning the energy storage root key after the root key returner triggers the root key return operation, thereby laying the foundation for accurately returning the energy storage root key.

[0060] In one feasible form, referring to Figure 4, Figure 4 is a schematic diagram showing a scenario in which different root key reducers reduce the energy storage root key. Here, (a) is a schematic diagram showing a scenario in which the root key manager reduces the root key, (b) is a schematic diagram showing a scenario in which the root key user reduces the root key, and (c) is a schematic diagram showing a scenario in which the root key thief reduces the root key. As shown in Figure 3, if the energy storage root key is divided into a total of seven root key shares, namely root key share x1, root key share x2, root key share x3, root key share x4, root key share x5, root key share x6, and root key share x7, then the root key manager can smoothly reduce five of the seven root key shares (root key share x1, root key share x2, root key share x3, root key share x4, and root key share x5), and thus the root key manager can accurately reduce and obtain the energy storage root key. Because the user of the root key can smoothly revert four of the seven root key shares (root key share x1, root key share x2, root key share x6, and root key share x7), the user of the root key can accurately revert and obtain the energy storage root key. The target of the root key theft cannot obtain root key share x3, root key share x4, and root key share x5, nor can they obtain root key share x6 and root key share x7, nor can they infiltrate the cloud to obtain root key share x1. As a result, they cannot obtain the access rights to access the storage areas of the four root key shares, and therefore cannot successfully revert and obtain the energy storage root key.

[0061] In one embodiment, determining a second target storage area that stores the target root key usage share in all storage areas based on shared path information is: This includes retrieving the root key returner's return level information based on identity information, and determining a second target memory area that stores the target root key usage share in all memory areas based on the return level information.

[0062] Furthermore, different root key reducers have different reduction capabilities. While a larger number of root key shares acting on the reduction of the energy storage root key does not necessarily mean an increase in reduction capability, it can improve the robustness of reducing the energy storage root key to some extent. For example, if root key reducer y1 can only acquire four root key shares and root key reducer y2 can acquire six root key shares, then root key reducer y2 can guarantee a share level for the energy storage root key even if they cannot acquire any two of the six root key shares. Thus, different reduction levels can be released to different root key reducers, taking into account their different identities. For example, in one feasible form, a root key reducer with a high level of authority can know all of the secondary target memory areas that store the target root key usage shares, while a root key reducer with a low level of authority can only know some of the secondary target memory areas that store the target root key usage shares.

[0063] As an example, using identity information as an index, root key reduction level information is searched, and all memory areas where the target root key usage share is selected based on the reduction level information are designated as the second target memory area.

[0064] In this embodiment, in the process of determining the second target storage area that stores the target root key usage share, different restitution levels can be appropriately set for root key restituters based on the identity of the root key restituters. This allows for different amounts of root key shares to be restituted for energy storage root keys that can be obtained by root key restituters, thereby enabling dynamic control over the restitution authority of different root key restituters and improving the management flexibility of root key management in the energy storage system.

[0065] To ensure clarity, the steps in the flowcharts for each of the above embodiments are shown sequentially according to the arrows; however, these steps are not necessarily performed sequentially according to the arrows. Unless otherwise explicitly stated in this application, the execution of these steps is not limited to a strict order and may be performed in other orders. Furthermore, at least some of the steps in the flowcharts for each of the above embodiments may include multiple steps or stages, and these steps or stages do not necessarily need to be completed at the same time; they may be performed at different times. The execution order of these steps or stages also does not necessarily need to be sequential; they may be performed sequentially or alternately with other steps or at least some of the steps or stages in other steps.

[0066] Based on a similar inventive concept, embodiments of the present application further provide a root key management device for an energy storage system to realize the root key management method for an energy storage system described above. Since the means for solving the problems provided by the device are similar to the means for solving the problems described in the above method, specific limitations in the embodiments of one or more root key management devices for an energy storage system provided below can refer to the limitations for the root key management method for an energy storage system described above, and are therefore omitted from this description.

[0067] In one exemplary embodiment, as shown in Figure 5, a root key management device for an energy storage system is provided. The device includes a partition module 401, a storage module 402, a determination module 403, and a reduction module 404. The split module 401 is used to split the energy storage root key into multiple root key shares after detecting that the energy storage system has generated an energy storage root key, wherein the first administrative authority of the energy storage root key is jointly held by multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holds a second administrative authority for the corresponding root key share, the multiple second administrative authorities are isolated from each other, and the multiple root key authority holders include at least two of four: a root key managed entity that manages the energy storage system, a root key user that uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. The memory module 402 is used to store each root key share in a memory area managed by the corresponding root key authority, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. The decision module 403 is used to position multiple target storage areas in all storage areas necessary for the reduction of the energy storage root key in response to a root key reduction operation triggered by a root key reducer, and the multiple target storage areas correspond one-to-one with the multiple root key authorityrs. The reduction module 404 is used to reduce and obtain the energy storage root key based on the target root key share selected in the multiple target storage areas, when it detects that the root key reducer has access rights to access the multiple target storage areas.

[0068] In one embodiment, the plurality of root key shares include a plurality of root key management shares jointly managed by the management control terminal and the root key managed entity, and a third root key usage share used by the root key user. The division module 401 is further used to acquire share configuration information that is common to the management control terminal, the root key managed object, and the root key user, as well as to acquire authority level information corresponding to the management control terminal, the root key managed object, and the root key user, respectively. Here, the share configuration information is used to identify the total amount of root key shares obtained by dividing the energy storage root key, and based on the share configuration information, the energy storage root key is divided into a plurality of pre-configured root key shares, and based on the share mapping relationship between the plurality of pre-configured root key shares and the authority level information, the plurality of pre-configured root key shares are divided to obtain the plurality of root key management shares and the root key usage shares, where the share mapping relationship is used to represent the root key share component assigned to any of the root key authority holders in the total amount of root key shares.

[0069] In one embodiment, the plurality of root key management shares include a first root key management share managed by the management control terminal. The aforementioned split module 401 further, Based on the share mapping relationship, a first root key management share component corresponding to the management control terminal is determined, system authentication information and system installation information generated in the process of the management control terminal managing the energy storage system are obtained, first share generation data is extracted from the system authentication information, and second share generation data is extracted from the system installation information. Based on the first root key management share component, the first share generation data, and the second share generation data, the plurality of pre-configured root key shares are divided and used to obtain the first root key management share.

[0070] In one embodiment, the plurality of root key management shares include a second root key management share managed by the root key management entity. The aforementioned split module 401 further, Based on the share mapping relationship, a second root key management share component corresponding to the root key management unit is determined; system hardcoding information set by the root key management unit in the energy storage system is obtained; the third share generation data is extracted from the system hardcoding information; and a fourth share generation data is retrieved based on the first search information input by the root key management unit. This is used to divide the plurality of pre-configured root key shares and obtain the second root key management share based on the second root key management share component, the third share generation data, and the fourth share generation data.

[0071] In one embodiment, the divided module 401 further comprises Based on the share mapping relationship, the root key usage share component corresponding to the root key usage target is determined, system login information set by the root key usage target in the energy storage system is obtained, the fifth share generation data is extracted from the system login information, target battery state information related to the key generation time is searched from the battery state information of the energy storage system based on the key generation time of the energy storage root key, sixth share generation data is generated based on the target battery state information, and the root key usage share component, the fifth share generation data and the sixth share generation data are used to divide the plurality of pre-set root key shares and obtain the root key usage share.

[0072] In one embodiment, the storage module 402 is further used in a selection step. In the selection step, a target energy storage root key share is selected from the plurality of energy storage root key shares, share identification information for the target energy storage root key share is obtained, the target energy storage root key share is stored in a storage area managed by the root key authority holder identified by the share identification information, and the process returns to the selection step and continues until all energy storage root key shares have been selected.

[0073] In one embodiment, the decision module 403 further, The system extracts identity information of the root key returner from the root key return operation, determines a first target storage area to store the first root key management share in all the storage areas, generates share path information for the target root key usage share necessary for returning the energy storage root key based on the identity information, determines a second target storage area to store the target root key usage share in all the storage areas based on the share path information, and uses both the first and second target storage areas to form the plurality of target storage areas.

[0074] In one embodiment, the decision module 403 further, Based on the aforementioned identity information, the return level information of the root key returner is retrieved, and based on the return level information, a second target storage area is used to determine which storage area stores the target root key usage share in all of the aforementioned storage areas.

[0075] All or part of each module in the root key management device of the energy storage system described above can be implemented by software, hardware, or a combination thereof. Each of the above modules may be embedded in the processor of a computer device in hardware form, or it may be independent of the processor of the computer device, or it may be stored in the memory of the computer device in software form so that the processor can call and execute the operations corresponding to each of the above modules.

[0076] In one exemplary embodiment, an energy storage system is provided that includes a management and control terminal for the energy storage system, the internal structure diagram of which is shown in Figure 6. The management and control terminal for the energy storage system includes a processor, memory, an input / output interface, a communication interface, display means, and an input device. Here, the processor, memory, and input / output interface are connected via a system bus, and the communication interface, display means, and input device are connected to the system bus via the input / output interface. Here, the processor of the management and control terminal for the energy storage system is used to provide computing and control capabilities. The memory of the management and control terminal for the energy storage system includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system and computer programs. The internal memory provides an environment for the execution of the operating system and computer programs on the non-volatile storage medium. The input / output interface of the management and control terminal for the energy storage system is used to exchange information between the processor and external devices. The communication interface of the management and control terminal of the energy storage system is used to communicate with external terminals by wired or wireless means, and the wireless method can be implemented by Wi-Fi, mobile cellular network, NFC (Near Field Communication), or other technology. When the computer program is executed by the processor, a root key management method for the energy storage system can be implemented. As will be understood by those skilled in the art, the structure shown in Figure 6 is merely a block diagram of some of the structures related to the solution of the present invention and does not form a limitation on the management and control terminal of the energy storage system to which the solution of the present invention applies, and a specific energy storage system management and control terminal may contain more or fewer parts than those shown in the figure, or may have a combination of some parts or a different arrangement of parts.

[0077] As those skilled in the art will understand, all or part of the flows in the methods of the above embodiments can be implemented by instructing the relevant hardware by a computer program, which can be stored in a non-volatile computer-readable storage medium, and when the computer program is executed, it can include flows such as those in the embodiments of each of the above embodiments. Here, any reference to memory, database, or other medium used in each embodiment provided by this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (Re RAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. For illustrative purposes only, rather than being limited, RAM may be in various forms such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases relating to each embodiment provided by this application may include at least one of relational databases and non-relational databases. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors relating to each embodiment provided by this application may include, but are not limited to, general-purpose processors, central processing units, graphics processors, digital signal processors, programmable logic, quantum computing-based data processing logic, and the like.

[0078] The technical features of the embodiments described above can be combined in any way, and for the sake of brevity, not all possible combinations of the technical features in the embodiments described above will be explained. However, as long as these combinations of technical features are not contradictory, they should be considered to fall within the scope described herein.

[0079] The above-described embodiments not only illustrate several embodiments of the present application, but their descriptions are specific and detailed, yet should not be understood as limiting the scope of the patent application. A person skilled in the art to which the present application belongs should point out that several modifications and improvements can be made without departing from the concept of the present application, and all of these fall within the scope of protection. Therefore, the scope of protection of the present application is based on the claims.

Claims

1. A method for managing the root key of an energy storage system, which is performed by a management control terminal of the energy storage system, The root key management method for the aforementioned energy storage system is: After detecting that the energy storage system has generated an energy storage root key, the energy storage root key is divided into multiple root key shares, the first administrative authority of the energy storage root key is granted to multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holds a second administrative authority for their respective root key share, the multiple second administrative authorities are isolated from each other, and the multiple root key authority holders include at least two of four entities: a root key administrator who manages the energy storage system, a root key user who uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. Each root key share is managed by the corresponding root key authority holder and stored in the memory area of ​​the energy storage system, and the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. In response to a root key redemption operation triggered by a root key redeemer, multiple target storage areas necessary for the redemption of the energy storage root key are positioned in all storage areas, and these multiple target storage areas correspond one-to-one with the multiple root key authorized persons, and the root key redeemer has access rights to access storage areas on their own terminal, and, if it is necessary to access storage areas that are not on their own terminal, access rights pre-configured based on the identity information of the root key redeemer. A root key management method for an energy storage system, characterized in that, when the root key restorer detects that it has access rights to access the plurality of target storage areas, the method includes restoring the energy storage root key based on the target root key share selected in the plurality of target storage areas.

2. The aforementioned plurality of root key shares include a plurality of root key management shares managed by the management control terminal and the root key administrator, and a third root key usage share used by the root key user. Dividing the aforementioned energy storage root key into multiple root key shares means The management control terminal, the root key administrator, and the root key user all acquire the same share configuration information, and each of them acquires the respective authority level information, and the share configuration information is used to identify the total amount of root key shares obtained by dividing the energy storage root key. Based on the share configuration information, the energy storage root key is divided into a plurality of pre-configured root key shares, A root key management method for an energy storage system according to claim 1, characterized in that, based on a share mapping relationship between the plurality of pre-configured root key shares and the authority level information, the plurality of pre-configured root key shares are divided to obtain the plurality of root key management shares and the root key usage shares, and the share mapping relationship is used to represent the root key share component assigned to any of the root key authority holders in the total amount of the root key shares.

3. The plurality of root key management shares include a first root key management share managed by the management control terminal, and the plurality of pre-configured root key shares are divided based on the share mapping relationship between the pre-configured root key shares and the authority level information to obtain the root key management shares and the plurality of root key usage shares. Based on the aforementioned share mapping relationship, the first root key management share component corresponding to the management control terminal is determined, The management control terminal acquires system authentication information and system installation information generated in the process of managing the energy storage system, The system authentication information is used to extract first share generation data, and the system installation information is used to extract second share generation data. The root key management method for an energy storage system according to claim 2, characterized in that it includes dividing the plurality of pre-set root key shares and obtaining the first root key management share based on the first root key management share component, the first share generation data, and the second share generation data.

4. The plurality of root key management shares include a second root key management share managed by the root key administrator, and the plurality of pre-configured root key shares are divided based on the share mapping relationship between the pre-configured root key shares and the permission level information to obtain the root key management shares and the plurality of root key usage shares. Based on the aforementioned share mapping relationship, the second root key management share component corresponding to the root key administrator is determined, The root key administrator obtains the system hardcoded information set in the energy storage system, Extracting the third share generation data from the system hardcoded information, Based on the first search information entered by the aforementioned root key administrator, the fourth share generation data is searched and obtained. The root key management method for an energy storage system according to claim 2, characterized in that it includes dividing the plurality of pre-set root key shares and obtaining the second root key management share based on the second root key management share component, the third share generation data, and the fourth share generation data.

5. Based on the share mapping relationship between the pre-configured root key share and the authority level information, dividing the multiple pre-configured root key shares to obtain the root key management share and the multiple root key usage shares is: Based on the aforementioned share mapping relationship, the root key usage share component corresponding to the root key user is determined, The user of the root key obtains the system login information set in the energy storage system, Extracting fifth share generation data from the aforementioned system login information, Based on the key generation time of the energy storage route key, the target battery state information related to the key generation time is retrieved from the battery state information of the energy storage system, Based on the aforementioned target battery state information, generate the sixth share generation data, The root key management method for an energy storage system according to claim 2, characterized in that it includes dividing the plurality of pre-set root key shares and obtaining the root key usage shares based on the root key usage share component, the fifth share generation data and the sixth share generation data.

6. Storing each of the aforementioned root key shares in a storage area managed by the corresponding root key authority holder is: A selection step of selecting a target energy storage route key share from the aforementioned multiple energy storage route key shares, To obtain the share identification information of the aforementioned target energy storage route key share, The root key management method for an energy storage system according to claim 1, characterized by including storing the target energy storage root key share in a storage area managed by the root key authority holder identified by the share identification information, and returning to the selection step and executing until all energy storage root key shares are selected.

7. In response to a root key reduction operation triggered by the root key reducer, positioning multiple target memory regions necessary for reducing the energy storage root key in all memory regions is: Extracting the identity information of the root key returner from the aforementioned root key return operation, Determine a first target storage area in which the first root key management share is stored in all of the aforementioned storage areas, Based on the aforementioned identity information, share path information for the target route key usage share necessary for the return of the energy storage route key is generated, Based on the shared path information, a second target storage area is determined in which the target root key usage share is stored in all of the storage areas. The root key management method for an energy storage system according to claim 3, characterized in that both the first target storage area and the second target storage area are the plurality of target storage areas.

8. Based on the aforementioned shared path information, determining a second target storage area that stores the target root key usage share in all of the aforementioned storage areas is: Based on the aforementioned identity information, the return level information of the root key returner is searched, The root key management method for an energy storage system according to claim 7, characterized in that it includes determining a second target storage area for storing the target root key usage share in all the storage areas based on the reduction level information.

9. A root key management device for an energy storage system, The root key management device of the energy storage system includes a partition module, a storage module, a decision module, and a reduction module. The division module is used to divide the energy storage root key into multiple root key shares after detecting that the energy storage system has generated an energy storage root key, the first administrative authority of the energy storage root key is granted to multiple root key authority holders who manage the energy storage system, each of the multiple root key authority holders holds a second administrative authority for the corresponding root key share, the multiple second administrative authority holders are isolated from each other, and the multiple root key authority holders include at least two of four: a root key administrator who manages the energy storage system, a root key user who uses the energy storage system, a management control terminal for the energy storage system, and a cloud that provides cloud services to the energy storage system. The memory module is used to manage each root key share, which is matched to the root key authority holder, and to store it in the memory area of ​​the energy storage system, wherein the amount of the first root key share stored in any of the memory areas is smaller than the amount of the second root key share required to return the energy storage root key. The decision module is used to position multiple target storage areas necessary for the reduction of the energy storage root key in all storage areas in response to a root key reduction operation triggered by a root key reducer, and the multiple target storage areas correspond one-to-one with the multiple root key holders. The root key management device for an energy storage system is characterized in that, when the reduction module detects that the root key reducer has access rights to access the multiple target storage areas, it is used to reduce and obtain the energy storage root key based on the target root key shares selected in the multiple target storage areas.

10. An energy storage system including a memory in which computer programs are stored and a processor, An energy storage system characterized in that when the processor executes the computer program, the steps of the root key management method for the energy storage system described in any one of claims 1 to 8 are performed.

Images