Vehicle Energy Payment Tokenization for Secure Charging Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing energy supply systems for vehicles face challenges such as the risk of credential theft, the need for multiple terminal adaptations for different payment methods, compliance with security standards like PCI-DSS, and inefficiencies in charging infrastructure and transaction authorization.
Innovation Solution
A method and system where a vehicle establishes a communication session with an energy supply terminal, generates an encrypted data packet containing a credential or token, and transmits it to the terminal, which then forwards it to a service provider computer for decryption and transaction processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If credential information is transmitted in plaintext from vehicle to energy supply terminal, then the payment process is simple and fast, but the security risk increases due to potential theft by unauthorized users
Solution Approach 1:
The patent introduces an encrypted data packet as an intermediary between the credential and the energy supply terminal. The credential is wrapped in encryption within the data packet, which is then transmitted to the terminal. The terminal cannot directly access the credential without the decryption key, thus preventing skimming and interception attacks while maintaining the automated payment flow.
Solution Approach 2:
The patent creates an encrypted copy of the credential information within the data packet structure. Instead of transmitting the actual credential directly, the system transmits an encrypted representation that contains the necessary payment information but is protected against unauthorized access. This encrypted copy serves the same functional purpose while eliminating security vulnerabilities.
2Adaptability or versatility
If multiple different payment methods are supported at energy supply terminals, then customer convenience is improved, but terminal complexity and maintenance difficulty increase
Solution Approach 1:
The patent implements a universal encrypted data packet format that can carry credential information for multiple different payment methods and authentication schemes. The energy supply terminal receives this standardized encrypted format and processes it through a single decryption and validation pathway, eliminating the need for separate processing logic for each payment method while maintaining broad compatibility.
Solution Approach 2:
The patent changes the parameter of credential transmission from plaintext to encrypted format, and from method-specific formats to a unified encrypted data packet structure. This parameter transformation allows the terminal to handle diverse payment methods through a consistent processing framework, reducing complexity while maintaining versatility.
3Productivity
If card credentials are processed at energy supply terminals, then direct payment is enabled, but PCI-DSS compliance requirements increase terminal security burden
Solution Approach 1:
The patent extracts the sensitive credential processing function from the energy supply terminal and relocates it to the vehicle's onboard system. The terminal only receives and validates the encrypted data packet without ever accessing or storing the actual credential information. This extraction eliminates the terminal's need for PCI-DSS compliance while maintaining full transaction processing capability.
Solution Approach 2:
The encrypted data packet serves as an intermediary that carries credential information without exposing it to the terminal. The terminal interacts with the encrypted package as a secure token, performing validation and processing without direct access to sensitive data. This intermediary mechanism enables transaction processing while removing the security compliance burden from the terminal.
4Reliability
If pre-authorization of standard amount is performed for electric vehicle charging, then transaction security is improved, but user funds are unnecessarily blocked
Solution Approach 1:
The patent implements a feedback mechanism where the encrypted data packet contains dynamic credential information that reflects the actual charging session parameters. The system receives feedback about the actual energy consumed and adjusts the authorization amount accordingly, rather than using fixed pre-authorization amounts. This ensures that only the necessary funds are blocked, matching the actual service provided.
Solution Approach 2:
The patent transitions from static pre-authorization amounts to dynamic credential-based authorization. The encrypted data packet contains information that adapts to the specific charging session requirements, allowing the authorization amount to vary based on actual energy consumption, vehicle battery capacity, and charging rate, thereby optimizing fund utilization while maintaining security.
Data Source
AI summary
A method is disclosed. It includes establishing a communication session between a vehicle comprising a first processor and an energy supply terminal comprising a second processor. The method includes obtaining, by the first processor in the vehicle, a credential or token, and then generating an encrypted data packet including the credential or token. The method also includes providing the encrypted data packet to the energy supply terminal. The energy supply terminal transmits the encrypted data packet to a service provider computer, which decrypts the encrypted data packet to obtain the credential or token, and then processes a transaction for supplying the vehicle with energy using the credential or the token.