Communication id allocation system and system for providing same

Abstract

A communication ID allocation system according to an embodiment of the present disclosure comprises a plurality of slave BMSs for storing a plurality of first certificates, respectively, and a master BMS including a certificate chain, wherein the master BMS includes a memory for storing the certificate chain, and a processor for: receiving a plurality of first certificates from the plurality of slave BMSs, respectively, by transmitting a certificate transmission request signal to the plurality of slave BMSs when communication connections to the plurality of slave BMSs are detected; verifying integrity of each of the plurality of first certificates by using the certificate chain; determining the validity of each of the plurality of slave BMSs on the basis of whether the integrity of each of the plurality of first certificates is secured; and allocating first communication IDs to valid slave BMSs among the plurality of slave BMSs.

Description

Method for assigning a communication ID and a system for providing the same

[0001] Cross-citation with related application(s)

[0002] This application claims the benefit of priority to Korean Patent Application No. 10-2024-0119468, filed September 3, 2024, the entire contents of which are incorporated herein by reference.

[0003] The present invention relates to a method for assigning a communication ID for communication between a master BMS (Battery Management System) and a plurality of slave BMSs, and a system providing the same.

[0004] In a battery pack comprising multiple battery modules, a battery management system (BMS) may include multiple slave BMSs that monitor and manage each of the multiple battery modules, and a master BMS that manages the multiple slave BMSs in an integrated manner. The multiple slave BMSs may transmit battery data, including battery cell voltage and temperature information, to the master BMS via various communication methods.

[0005] In communication between a master BMS and multiple slave BMSs, since the master BMS is connected to multiple slave BMSs that perform the same operation, it is necessary to assign a communication ID to distinguish each of the multiple slave BMSs.

[0006] In the past, a manual assignment method was used in which a specialized engineer was involved in the initial connection of the slave BMS and the master BMS to individually set the current configuration location and communication connection ID of each slave BMS, or a method was used in which a predetermined voltage was applied to each of the multiple slave BMSs to sequentially wake them up and assign a communication ID.

[0007] However, the conventional communication ID allocation method assigns a communication ID to each slave BMS without a separate authentication process when assigning a communication ID from the master BMS, so even if one of the multiple battery modules in the battery pack is replaced with a battery module whose security has not been confirmed, the communication ID is assigned to multiple slave BMSs connected to the entire battery module, which has a problem in that the security of the battery pack is low.

[0008] Accordingly, there is a need for a method to improve the security and stability of a battery pack by blocking the assignment of communication IDs to untrusted battery modules among multiple battery modules within a battery pack.

[0009] The present invention aims to provide a communication ID assignment method and a system providing the same, which have improved security and stability by determining the validity of a plurality of slave BMSs before assigning communication IDs to the plurality of slave BMSs.

[0010] A communication ID allocation system according to one embodiment of the present invention includes a plurality of slave BMSs storing a plurality of first certificates, and a master BMS including a certificate chain, wherein the master BMS includes a memory storing the certificate chain, and a processor configured to transmit a certificate transmission request signal to the plurality of slave BMSs when a communication connection with the plurality of slave BMSs is detected, thereby receiving the plurality of first certificates from each of the plurality of slave BMSs, verifying the integrity of each of the plurality of first certificates using the certificate chain, determining the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact, and allocating a first communication ID to valid slave BMSs among the plurality of slave BMSs.

[0011] The processor can verify the signatures of the second certificate and the third certificate included in the certificate chain to determine whether the certificate chain is intact, and if the certificate chain is determined to be intact, determine that the second certificate is valid, and verify the signatures of each of the plurality of first certificates using the public key of the valid second certificate to verify the integrity of each of the plurality of first certificates.

[0012] The above processor may determine that, among the plurality of slave BMSs, a slave BMS storing a first certificate whose integrity has been verified is valid, and a slave BMS storing a first certificate whose integrity has not been verified is invalid.

[0013] The processor can assign the first communication ID using the voltage difference or communication signal value of the valid slave BMSs.

[0014] The processor, when a replacement of at least one slave BMS among the plurality of slave BMSs is detected, transmits a communication ID reset signal to a non-replaced slave BMS among the plurality of slave BMSs to reset the first communication ID, and transmits a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS to receive the first certificate from the non-replaced slave BMS and the replaced slave BMS.

[0015] The processor may determine the validity of the non-replaced slave BMS based on whether the integrity of the first certificate received from the non-replaced slave BMS is verified, and may determine the validity of the replaced slave BMS based on whether the integrity of the first certificate received from the replaced slave BMS is verified.

[0016] The processor may determine that, among the non-replaced slave BMS and the replaced slave BMS, a slave BMS storing a first certificate whose integrity has been verified is valid, and a slave BMS storing a first certificate whose integrity has not been verified is invalid.

[0017] The processor may reassign a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS.

[0018] A method for assigning a communication ID according to one embodiment of the present invention may include a step of a master BMS transmitting a certificate transmission request signal to a plurality of slave BMSs when a communication connection with the plurality of slave BMSs is detected, a step of receiving a plurality of first certificates from each of the plurality of slave BMSs, a step of verifying the integrity of each of the plurality of first certificates using a certificate chain stored in a memory, and a step of determining the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact, and a step of assigning a first communication ID to valid slave BMSs among the plurality of slave BMSs.

[0019] The step of determining the validity of each of the plurality of slave BMSs may include a step of the master BMS verifying the integrity of the certificate chain to confirm the validity of a second certificate included in the certificate chain, and a step of verifying the integrity of each of the plurality of first certificates by verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate.

[0020] The step of assigning the first communication ID may include a step in which the master BMS transmits a communication ID assignment signal to the valid slave BMSs to instruct assignment of the first communication ID.

[0021] The method may include a step of resetting a first communication ID assigned to a non-replaced slave BMS among the plurality of slave BMSs when the replacement of at least one slave BMS among the plurality of slave BMSs to which the first communication ID is assigned is detected, generating and transmitting a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS, receiving a first certificate from each of the non-replaced slave BMS and the replaced slave BMS, verifying the integrity of the first certificate using the certificate chain and determining the validity of each of the non-replaced slave BMS and the replaced slave BMS based on whether the first certificate is intact, and a step of reassigning a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS.

[0022] The step of determining the validity of the non-replaced slave BMS and the replaced slave BMS may include a step of the master BMS verifying the integrity of the certificate chain to confirm the validity of the second certificate included in the certificate chain, and a step of verifying the integrity of each of the plurality of first certificates by verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate.

[0023] The step of reallocating the second communication ID may include a step of instructing reallocation of the second communication ID by transmitting a communication ID reallocation signal to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS.

[0024] According to one embodiment of the present invention, the security and stability of the battery pack can be improved by blocking the assignment of a communication ID to an unreliable battery module among a plurality of battery modules in the battery pack.

[0025] The effects that can be obtained from the present disclosure are not limited to the effects mentioned above, and other effects that are not mentioned will be clearly understood by a person having ordinary skill in the art to which the present disclosure pertains from the description below.

[0026] FIG. 1 is a drawing for explaining a communication ID allocation system according to one embodiment of the present invention.

[0027] FIG. 2 is a diagram illustrating a process in which a master BMS verifies the integrity of a first certificate using a certificate chain according to one embodiment of the present invention.

[0028] Figure 3 is a flowchart illustrating a process of assigning communication IDs to multiple slave BMSs.

[0029] Figure 4 is a flowchart illustrating a process in which a master BMS reallocates a communication ID when one of multiple slave BMSs is replaced.

[0030] FIG. 5 is a flowchart of a battery module communication ID assignment method according to one embodiment of the present invention.

[0031] In describing the embodiments disclosed in this specification, detailed descriptions of related known technologies will be omitted if it is determined that such detailed descriptions may obscure the gist of the embodiments disclosed in this specification. In addition, the attached drawings are provided solely to facilitate understanding of the embodiments disclosed in this specification, and the technical concepts disclosed in this specification are not limited by the attached drawings, and should be understood to include all modifications, equivalents, and substitutes included within the spirit and technical scope of the present invention.

[0032] Terms that include ordinal numbers, such as first, second, etc., may be used to describe various components, but the components are not limited by these terms. These terms are used solely to distinguish one component from another.

[0033] When a component is referred to as being "connected" or "connected" to another component, it should be understood that it may be directly connected or connected to that other component, but that there may be other components intervening. Conversely, when a component is referred to as being "directly connected" or "connected" to another component, it should be understood that there are no other components intervening.

[0034] In this application, terms such as “include” or “have” are intended to specify the presence of a feature, number, step, operation, component, part or combination thereof described in the specification, but should be understood not to exclude in advance the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts or combinations thereof.

[0035] The present invention will be described in detail with reference to the attached drawings below.

[0036] FIG. 1 is a drawing for explaining a communication ID allocation system according to one embodiment of the present invention.

[0037] Referring to FIG. 1, a communication ID allocation system according to an embodiment of the present invention may include a plurality of slave BMSs (100: 100-1, 100-2, 100-3) and a master BMS (200). Although FIG. 1 illustrates that the communication ID allocation system includes three slave BMSs (100) and one master BMS (200), the present invention is not limited thereto. The communication ID allocation system may include one or more slave BMSs (100). The plurality of slave BMSs (100) included in the communication ID allocation system may correspond to the master BMS (200) in a many-to-one ratio. Although FIG. 1 illustrates that the slave BMSs (100) and the master BMS (200) are connected by wires, the present invention is not limited thereto, and the slave BMSs (100) and the master BMS (200) may transmit and receive data via wireless communication.

[0038] The slave BMS (100) may be electrically connected to the battery module (10) in a configuration that monitors and controls the battery modules (10: 10-1, 10-2, 10-3). For example, the slave BMS (100) may measure or predict the status of a battery cell included in the battery module (10) and transmit the status information of the battery cell to the master BMS (200). The slave BMS (100) may control the battery module (10) according to a control signal received from the master BMS (200).

[0039] A first certificate may be stored in the slave BMS (100). Here, the first certificate is generated to determine the validity of the slave BMS (100), and may be generated at the time of manufacturing the slave BMS (100) and stored in the memory (not shown in the drawing) of the slave BMS (100). The first certificate may be generated by the manufacturer of the slave BMS (100) or a certificate authority (CA) that has been requested to generate a certificate chain by the manufacturer. Here, the memory of the slave BMS (100) may be built into the MUC or BMIC.

[0040] The master BMS (200) can manage multiple slave BMSs (100) in an integrated manner. The master BMS (200) can control the operation of the battery module (10) using the status information of the battery cell received from multiple slave BMSs (100). The master BMS (200) can generate a signal for controlling the operation of the battery module (10) and transmit the signal to multiple slave BMSs (100). For example, the master BMS (200) can perform power limiting, cell balancing, cooling control, etc. for the battery module (10) using the cell voltage, temperature, etc. of the battery module (10).

[0041] The master BMS (200) can detect a communication connection with a plurality of slave BMSs (100) and the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100). The master BMS (200) can determine the validity of the plurality of slave BMSs (100) and assign a first communication ID to the valid slave BMSs (100) or reassign a second communication ID. Here, the first communication ID refers to a communication ID assigned to the plurality of slave BMSs (100) before at least one of the plurality of slave BMSs (100) is replaced. The second communication ID refers to a communication ID reassigned to the valid slave BMSs (100) after at least one of the plurality of slave BMSs (100) is replaced. According to an embodiment, the master BMS (200) may include a processor (210) and memory (220).

[0042] The processor (210) can detect communication connections with a plurality of slave BMSs (100). Various conventionally known methods can be applied to the method by which the processor (210) detects communication connections with a plurality of slave BMSs (100).

[0043] When a communication connection with a plurality of slave BMSs (100) is detected, the processor (210) may transmit a certificate transmission request signal to the plurality of slave BMSs (100). Here, the certificate transmission request signal refers to a control signal requesting transmission of a first certificate stored in the plurality of slave BMSs (100). According to an embodiment, the processor (210) may broadcast the certificate transmission request signal to the plurality of slave BMSs (100).

[0044] The processor (210) can determine the validity of each of the plurality of slave BMSs (100) using the plurality of first certificates received from the plurality of slave BMSs (100). According to an embodiment, the processor (210) can verify the integrity of the first certificate using a certificate chain to be described later. Here, the certificate chain may be stored in the memory (220). The processor (210) can determine the validity of the slave BMS (100) based on the integrity of the first certificate. For example, if the integrity of the first certificate received from the slave BMS (100) is verified, the processor (210) can determine that the corresponding slave BMS (100) is valid, and if the integrity of the first certificate received from the slave BMS (120) is not verified, the processor (210) can determine that the corresponding slave BMS (100) is invalid. The process of verifying the integrity of the first certificate by the processor (210) will be described in detail below with reference to FIG. 2.

[0045] The processor (210) may assign a first communication ID to valid slave BMSs (100). According to an embodiment, the processor (210) may assign the first communication ID using a voltage difference or a communication signal value of valid slave BMSs (100). However, the process of assigning the first communication ID to the valid slave BMSs (100) by the processor (210) is not limited thereto, and various conventionally known methods may be applied. At this time, the processor (210) may instruct the assignment of the first communication ID by transmitting a communication ID assignment signal to the valid slave BMSs (100). According to an embodiment, the processor (210) may broadcast the communication ID assignment signal to the valid slave BMSs (100).

[0046] The processor (210) can detect the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100). Various conventionally known methods can be applied to the method by which the processor (210) detects the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100). At this time, the plurality of slave BMSs (100) include a slave BMS (110) that has not been replaced (hereinafter referred to as a 'non-replaced slave BMS') and a replaced slave BMS (120).

[0047] When the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100) is detected, the processor (210) may reset the first communication ID assigned to the non-replaced slave BMS (110). According to an embodiment, the processor (210) may generate a communication ID reset signal for resetting the first communication ID for the non-replaced slave BMS (110) and transmit the signal to the non-replaced slave BMSs (110). At this time, the non-replaced slave BMSs (110) may reset the assigned first communication ID in response to the communication ID reset signal.

[0048] The processor (210) may generate a certificate transmission request signal and transmit it to the non-replaced slave BMS (110) and the replaced slave BMS (120). According to an embodiment, the processor (210) may broadcast the certificate transmission request signal to the non-replaced slave BMS (110) and the replaced slave BMS (120).

[0049] The processor (210) can determine the validity of the non-replaced slave BMS (110) and the replaced slave BMS (120) using the first certificate received from the non-replaced slave BMS (110) and the replaced slave BMS (120), respectively.

[0050] In some embodiments, the processor (210) may determine the validity of the non-replaced slave BMS (110) based on whether the integrity of the first certificate received from the non-replaced slave BMS (110) is verified, and may determine the validity of the replaced slave BMS (120) based on whether the integrity of the first certificate received from the replaced slave BMS (120) is verified. For example, if the integrity of the first certificate received from the non-replaced slave BMS (110) is verified, the processor (210) may determine that the non-replaced slave BMS (110) is valid. As another example, if the integrity of the first certificate received from the replaced slave BMS (120) is not verified, the processor (210) may determine that the replaced slave BMS (120) is invalid.

[0051] The processor (210) may reallocate the second communication ID to valid slave BMSs (100) among the non-replaced slave BMS (110) and the replaced slave BMS (120). For example, if the non-replaced slave BMS (110) is determined to be valid and the replaced slave BMS (120) is determined to be invalid, the processor (210) may reallocate the second communication ID only to the non-replaced slave BMS (110). As another example, if the non-replaced slave BMS (110) is determined to be invalid and the replaced slave BMS (120) is determined to be valid, the processor (210) may reallocate the second communication ID only to the replaced slave BMS (120). According to an embodiment, the processor (210) may reallocate the second communication ID using the voltage difference or communication signal value of valid slave BMSs (100).

[0052] The processor (210) may transmit a communication ID reallocation signal to valid slave BMSs (100) among the non-replaced slave BMSs (110) and the replaced slave BMSs (120) to instruct reallocation of the second communication ID. For example, the processor (210) may broadcast the communication ID reallocation signal to valid slave BMSs (100) among the non-replaced slave BMSs (110) and the replaced slave BMSs (120).

[0053] A certificate chain may be stored in the memory (220). Here, the certificate chain is generated to determine the validity of the master BMS (200), and may be generated at the time of manufacturing the master BMS (200) and stored in the memory (220) of the master BMS (200). At this time, the certificate chain may be generated by the manufacturer of the master BMS (200) or a certificate authority (CA) that has been requested to generate the certificate chain by the manufacturer. According to an embodiment, the certificate chain may be used to verify the integrity of the first certificate. A process of verifying the integrity of the first certificate using the certificate chain will be described in detail below with reference to FIG. 2.

[0054] FIG. 2 is a drawing illustrating a process in which a master BMS (200) verifies the integrity of a first certificate using a certificate chain according to one embodiment of the present invention.

[0055] Referring to FIG. 2, a first certificate (C') according to one embodiment of the present invention may include identification information for a slave BMS (100) in which the first certificate (C') is stored, a signature created by a certification authority (CA) to verify the first certificate (C'), a public key used for encryption and verification of the signature, etc.

[0056] A certificate chain according to one embodiment of the present invention may include multiple certificates. In one embodiment, the certificate chain may include a second certificate (C), a third certificate (B), and a fourth certificate (A). The multiple certificates (A, B, C) included in the certificate chain may have a chain structure that is connected vertically. In one embodiment, the fourth certificate (A) may correspond to a superior certificate of the third certificate (B), and the third certificate (B) may correspond to a superior certificate of the second certificate (C).

[0057] The second certificate (C) may include identification information for slave BMSs (100) connected to the master BMS (200) where the second certificate (C) is stored, a signature created by a certification authority (CA) to verify the second certificate (C), a public key used for encryption and verification of the signature, etc.

[0058] The third certificate (B) may include identification information for the master BMS (200) in which the third certificate (B) is stored, a signature created by a certification authority (CA) to verify the third certificate (B), a public key used for encryption and verification of the signature, etc.

[0059] The fourth certificate (A) may include identification information for a battery system including a master BMS (200) in which the fourth certificate (A) is stored, a signature created by a certification authority (CA) to verify the fourth certificate (A), a public key used for encryption and verification of the signature, etc.

[0060] In some embodiments, the first certificate (C'), the second certificate (C), the third certificate (B), and the fourth certificate (A) may be issued simultaneously by a certification authority (CA). In this case, the certification authority (CA) may receive from the manufacturer of the battery system all identification information about components of the battery system in which the first to fourth certificates (A, B, C, C') are installed. For example, the certification authority (CA) may receive from the battery system manufacturer information about a specific battery system and information about a specific master BMS and a specific slave BMS included in the specific battery system. The certification authority (CA) may issue the first to fourth certificates (A, B, C, C') and generate a certificate chain by taking into account the information about the specific battery system and the information about the specific master BMS and the specific slave BMS included in the specific battery system.

[0061] According to one embodiment of the present invention, the processor (210) of the master BMS (200) can verify the integrity of the first certificate (C') using the certificate chain stored in the memory (220) of the master BMS (200). The process by which the processor (210) verifies the integrity of the first certificate (C') using the certificate chain is as follows.

[0062] First, the processor (210) can verify the validity of the second certificate (C) by verifying the integrity of the certificate chain. For example, if the certificate chain is intact, the processor (210) can determine that the second certificate (C) is valid, and if the certificate chain is not intact, the processor (210) can determine that the second certificate (C) is invalid.

[0063] The processor (210) can verify the signatures of the second certificate (C) and the third certificate (B) to determine whether the certificate chain is intact. In some embodiments, the processor (210) can verify the signature of the second certificate (C) using the public key of the third certificate (B) and can verify the signature of the third certificate (B) using the public key of the fourth certificate (A) to determine the integrity of the certificate chain. For example, if the signature verification of both the second certificate (C) and the third certificate (B) is successful, the processor (210) can determine that the second certificate (C), the third certificate (B), and the fourth certificate (A) form a trustworthy certificate chain, and can determine that the second certificate (C) is valid.

[0064] That is, the processor (210) can secure the reliability of the integrity verification of the first certificate (C') by verifying the validity of the second certificate (C) used for the integrity verification of the first certificate (C') before verifying the integrity of the first certificate (C').

[0065] Next, the processor (210) can verify the integrity of the first certificate (C') using a valid second certificate (C). In some embodiments, the processor (210) can verify the integrity of the first certificate (C') by verifying the signature of the first certificate (C') using the public key of the valid second certificate (C). For example, if the signature verification of the first certificate (C') is successful, the processor (210) can determine that the first certificate (C') is intact.

[0066] Figure 3 is a flowchart for explaining the process of assigning a communication ID to multiple slave BMSs (100).

[0067] Referring to FIG. 3, a process of assigning communication IDs to multiple slave BMSs (100) when a communication connection between a master BMS (200) and multiple slave BMSs (100) is detected is illustrated.

[0068] The master BMS (200) can detect communication connections with multiple slave BMSs (100) (S210). Various conventionally known methods can be applied to detect communication connections with multiple slave BMSs (100) in the master BMS (200).

[0069] When a communication connection with a plurality of slave BMSs (100) is detected, the master BMS (200) can generate a certificate transmission request signal to receive each of the plurality of first certificates stored in the plurality of slave BMSs (100) and transmit the signal to each of the plurality of slave BMSs (100) (S220).

[0070] Each of the plurality of slave BMSs (100) can transmit each of the plurality of first certificates to the master BMS (200) in response to the certificate transmission request signal (S230).

[0071] The master BMS (200) can determine the validity of each of the plurality of slave BMSs (100) using each of the plurality of first certificates (S240). According to an embodiment, the master BMS (200) can verify the integrity of each of the plurality of first certificates using the certificate chain stored in the memory (220) (S241). The master BMS (200) can determine whether each of the plurality of slave BMSs (100) is valid based on whether each of the plurality of first certificates is intact (S242).

[0072] The master BMS (200) can assign a first communication ID to valid slave BMSs (100) among multiple slave BMSs (100) (S250).

[0073] The master BMS (200) can transmit a communication ID assignment signal to valid slave BMSs (100) among a plurality of slave BMSs (100) to instruct the valid slave BMSs (100) to assign a first communication ID (S260).

[0074] FIG. 4 is a flowchart for explaining a process in which a master BMS (200) reallocates a communication ID when one of a plurality of slave BMSs (100) is replaced.

[0075] Referring to FIG. 4, a process of reallocating a communication ID to a non-replaced slave BMS (110) and a replaced slave BMS (120) is illustrated when one of the multiple slave BMSs (100) is replaced after a communication ID has been assigned to the multiple slave BMSs (100).

[0076] The master BMS (200) can detect the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100) (S310). At this time, the plurality of slave BMSs (100) include a non-replaced slave BMS (110) and a replaced slave BMS (120).

[0077] When a replacement of a specific slave BMS (100) is detected, the master BMS (200) can reset the first communication ID assigned to the non-replaced slave BMS (110) (S320).

[0078] The master BMS (200) can generate a communication ID reset signal for resetting the first communication ID for the non-swapped slave BMS (110) and transmit the signal to the non-swapped slave BMS (110) (S330). At this time, the non-swapped slave BMS (110) can reset the assigned first communication ID in response to the communication ID reset signal.

[0079] The master BMS (200) can generate a certificate transmission request signal and transmit it to the non-replaced slave BMS (110) and the replaced slave BMS (120) (S340).

[0080] The non-replaced slave BMS (110) and the replaced slave BMS (120) can transmit the first certificate to the master BMS (200) in response to the certificate transmission request signal (S350).

[0081] The master BMS (200) can determine the validity of the non-replaced slave BMS (110) and the replaced slave BMS (120) using the first certificate (S360). According to an embodiment, the master BMS (200) can verify the integrity of the first certificate using the certificate chain stored in the memory (220) (S361). The master BMS (200) can determine whether the non-replaced slave BMS (110) and the replaced slave BMS (120) are valid based on whether the first certificate is intact (S362).

[0082] The master BMS (200) can reassign a second communication ID to valid slave BMSs (100) among the non-replaced slave BMSs (110) and the replaced slave BMSs (120) (S370).

[0083] The master BMS (200) can transmit a communication ID reallocation signal to valid slave BMSs (100) among the non-replaced slave BMSs (110) and the replaced slave BMSs (120) to instruct the reallocation of the second communication ID to the valid slave BMSs (100) (S380).

[0084] Figure 5 is a flowchart of a method for assigning a communication ID to a battery module (10) according to one embodiment of the present invention.

[0085] Referring to FIG. 5, a communication ID assignment method according to one embodiment of the present invention may include a communication connection detection step (S4100), a first certificate reception step (S4200), a slave BMS validity determination step (S4300), and a communication ID assignment step (S4400).

[0086] In the communication connection detection step (S4100), the master BMS (200) can detect a communication connection with multiple slave BMSs (100). At this time, the master BMS (200) can generate a certificate transmission request signal when a communication connection with multiple slave BMSs (100) is detected. The master BMS (200) can transmit the certificate transmission request signal to multiple slave BMSs (100) with which the communication connection is established.

[0087] In the first certificate receiving step (S4200), the master BMS (200) can receive each of the plurality of first certificates from each of the plurality of slave BMSs (100).

[0088] In the slave BMS validity determination step (S4300), the master BMS (200) can determine the validity of each of the plurality of slave BMSs (100) using each of the plurality of first certificates.

[0089] According to an embodiment, the slave BMS validity determination step (S4300) may include a step (S4310) in which the master BMS (200) verifies the integrity of each of the plurality of first certificates using the certificate chain stored in the memory (220), and a step (S4320) in which the master BMS (200) determines whether each of the plurality of slave BMSs (100) is valid based on whether each of the plurality of first certificates is intact.

[0090] According to an embodiment, the step of verifying the integrity of each of the plurality of first certificates (S4310) may include a step of verifying the validity of the second certificate by verifying the integrity of the certificate chain by the master BMS (200) (S4311), and a step of verifying the integrity of the first certificate using a valid second certificate (S4312).

[0091] In the step (S4311) where the master BMS (200) verifies the integrity of the certificate chain to confirm the validity of the second certificate, the master BMS (200) can verify the signature of the second certificate using the public key of the third certificate included in the certificate chain and verify the signature of the third certificate using the public key of the fourth certificate included in the certificate chain to determine the integrity of the certificate chain.

[0092] In the step (S4312) of verifying the integrity of the first certificate using a valid second certificate, the master BMS (200) can verify the integrity of the first certificate by verifying the signature of the first certificate using the public key of the valid second certificate.

[0093] In the communication ID assignment step (S4400), the master BMS (200) can assign a first communication ID to valid slave BMSs (100) among a plurality of slave BMSs (100). At this time, the master BMS (200) can instruct the assignment of the first communication ID by transmitting a communication ID assignment signal to the valid slave BMSs (100).

[0094] According to an embodiment, the communication ID assignment method may further include a replacement detection step (S4500), a first certificate re-receiver step (S4600), a slave BMS validity re-determination step (S4700), and a communication ID re-assignment step (S4800).

[0095] In the replacement detection step (S4500), the master BMS (200) can detect the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100) to which a first communication ID is assigned. When the replacement of at least one slave BMS (100) among the plurality of slave BMSs (100) is detected, the master BMS (200) can reset the first communication ID assigned to the non-replaced slave BMS (110). For example, the master BMS (200) can transmit a communication ID reset signal to the non-replaced slave BMSs (110). The master BMS (200) can generate and transmit a certificate transmission request signal to the non-replaced slave BMSs (110) and the replaced slave BMSs (120).

[0096] In the first certificate re-receiver step (S4600), the master BMS (200) can receive the first certificate from the non-replaced slave BMS (110) and the replaced slave BMS (120), respectively.

[0097] In the slave BMS validity re-evaluation step (S4700), the master BMS (200) can determine the validity of the non-replaced slave BMS (110) and the replaced slave BMS (120) using the first certificates received from the non-replaced slave BMS (110) and the replaced slave BMS (120), respectively.

[0098] According to an embodiment, the slave BMS validity re-determination step (S4700) may include a step (S4710) in which the master BMS (200) verifies the integrity of the first certificate using the certificate chain stored in the memory (220), and a step (S4720) in which the master BMS (200) determines whether the replaced slave BMS (110) and the replaced slave BMS (120) are valid based on whether the first certificate is intact.

[0099] According to an embodiment, the step of verifying the integrity of the first certificate (S4710) may include a step of verifying the validity of the second certificate by verifying the integrity of the certificate chain by the master BMS (200) (S4711), and a step of verifying the integrity of the first certificate using a valid second certificate (S4712).

[0100] In the step (S4711) where the master BMS (200) verifies the integrity of the certificate chain to confirm the validity of the second certificate, the master BMS (200) can verify the signature of the second certificate using the public key of the third certificate included in the certificate chain and verify the signature of the third certificate using the public key of the fourth certificate included in the certificate chain to determine the integrity of the certificate chain.

[0101] In the step (S4712) of verifying the integrity of the first certificate using a valid second certificate, the master BMS (200) can verify the integrity of the first certificate by verifying the signature of the first certificate using the public key of the valid second certificate.

[0102] In the communication ID reallocation step (S4800), the master BMS (200) can reallocate a second communication ID to a valid slave BMS (100) among the non-replaced slave BMS (110) and the replaced slave BMS (120). At this time, the master BMS (200) can instruct the reallocation of the second communication ID by transmitting a communication ID reallocation signal to a valid slave BMS (100) among the non-replaced slave BMS (110) and the replaced slave BMS (120).

[0103] Meanwhile, the above-described method can be written as a program that can be executed on a computer, and can be implemented on a general-purpose digital computer that operates the program using a computer-readable recording medium. The computer-readable recording medium may include a storage medium such as a magnetic storage medium such as a ROM, RAM, USB, floppy disk, or hard disk, or an optical readable medium such as a CD-ROM or DVD.

[0104] The scope of the present invention is indicated by the claims described below rather than the detailed description above, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be interpreted as being included in the scope of the present invention.

Claims

1. Multiple slave BMSs each storing multiple first certificates; and Includes a master BMS with a certificate chain, The above master BMS is, Memory for storing the above certificate chain; and A processor including a processor that transmits a certificate transmission request signal to the plurality of slave BMSs when a communication connection with the plurality of slave BMSs is detected, receives each of the plurality of first certificates from each of the plurality of slave BMSs, verifies the integrity of each of the plurality of first certificates using the certificate chain, determines the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact, and assigns a first communication ID to valid slave BMSs among the plurality of slave BMSs. Communication ID assignment system.

2. In paragraph 1, The above processor, By verifying the signatures of the second and third certificates included in the above certificate chain, it is determined whether the above certificate chain is intact, and if the above certificate chain is determined to be intact, the second certificate is determined to be valid. Verifying the integrity of each of the plurality of first certificates by verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate. Communication ID assignment system.

3. In paragraph 1, The above processor, Among the above multiple slave BMSs, a slave BMS storing a first certificate whose integrity has been verified is determined to be valid, and a slave BMS storing a first certificate whose integrity has not been verified is determined to be invalid. Communication ID assignment system.

4. In paragraph 1, The above processor, Assigning the first communication ID using the voltage difference or communication signal value of the valid slave BMSs. Communication ID assignment system.

5. In paragraph 1, The above processor, When replacement of at least one slave BMS among the plurality of slave BMSs is detected, a communication ID reset signal is transmitted to a non-replaced slave BMS among the plurality of slave BMSs to reset the first communication ID, Transmitting a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS, and receiving the first certificate from the non-replaced slave BMS and the replaced slave BMS. Communication ID assignment system.

6. In paragraph 5, The above processor, The validity of the non-replaced slave BMS is determined based on whether the integrity of the first certificate received from the non-replaced slave BMS is verified, The validity of the replaced slave BMS is determined based on whether the integrity of the first certificate received from the replaced slave BMS is verified. Communication ID assignment system.

7. In paragraph 6, The above processor, Among the above-mentioned non-replaced slave BMS and the above-mentioned replaced slave BMS, the slave BMS storing the first certificate whose integrity has been verified is determined to be valid, and the slave BMS storing the first certificate whose integrity has not been verified is determined to be invalid. Communication ID assignment system.

8. In paragraph 7, The above processor, Reassigning a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS. Communication ID assignment system.

9. A step of the master BMS transmitting a certificate transmission request signal to the plurality of slave BMSs when a communication connection with the plurality of slave BMSs is detected; A step of receiving each of a plurality of first certificates from each of the plurality of slave BMSs; A step of verifying the integrity of each of the plurality of first certificates using a certificate chain stored in memory, and determining the validity of each of the plurality of slave BMSs based on whether each of the plurality of first certificates is intact; and A step of allocating a first communication ID to valid slave BMSs among the plurality of slave BMSs, How to assign a communication ID.

10. In paragraph 9, The step of determining the validity of each of the above multiple slave BMSs is as follows: A step in which the master BMS verifies the integrity of the certificate chain to confirm the validity of the second certificate included in the certificate chain; and A step of verifying the integrity of each of the plurality of first certificates by verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate, How to assign a communication ID.

11. In paragraph 9, The step of assigning the above first communication ID is: A step in which the master BMS transmits a communication ID assignment signal to the valid slave BMSs to instruct assignment of the first communication ID, How to assign a communication ID.

12. In paragraph 9, A step of the master BMS (200) resetting the first communication ID assigned to a non-replaced slave BMS among the plurality of slave BMSs when the replacement of at least one slave BMS is detected, and generating and transmitting a certificate transmission request signal to the non-replaced slave BMS and the replaced slave BMS; A step of receiving a first certificate from each of the non-replaced slave BMS and the replaced slave BMS; A step of verifying the integrity of the first certificate using the certificate chain and determining the validity of the non-replaced slave BMS and the replaced slave BMS based on whether the first certificate is intact; and A step of reassigning a second communication ID to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS, How to assign a communication ID.

13. In paragraph 12, The step of determining the validity of the above-mentioned non-replaced slave BMS and the above-mentioned replaced slave BMS, respectively, is as follows: A step in which the master BMS verifies the integrity of the certificate chain to confirm the validity of the second certificate included in the certificate chain; and A step of verifying the integrity of each of the plurality of first certificates by verifying the signature of each of the plurality of first certificates using the public key of the valid second certificate, How to assign a communication ID.

14. In paragraph 12, The step of reassigning the above second communication ID is: A step of instructing reassignment of a second communication ID by transmitting a communication ID reassignment signal to a valid slave BMS among the non-replaced slave BMS and the replaced slave BMS, How to assign a communication ID.

Images