Wireless BMS Protocol Using Freshness Counters Against Replay Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional wired battery management systems for electric vehicles face limitations such as inflexibility in pack design, wasted space due to connectors and cabling, and increased challenges for battery second life usage, while wireless technologies are vulnerable to interference and cyber-attacks.
Innovation Solution
A secure wireless protocol is implemented within the battery management system using a freshness value counter, encryption, and message authentication codes to prevent replay attacks and 'man in the middle' attacks, ensuring secure communication over unsecured wireless transmission mediums.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If wired battery management system is used, then reliability of data transmission is improved, but device complexity and space consumption increase due to connectors and cabling
Solution Approach 1:
The patent replaces the mechanical wired connection system with a wireless communication system. Wireless components transmit battery monitoring data using wireless protocols, eliminating the need for physical connectors and cabling while maintaining data transmission functionality. This substitution reduces device complexity and space consumption associated with wired systems.
Solution Approach 2:
The patent introduces wireless communication protocols and encryption mechanisms as intermediaries between battery monitoring components and the central controller. These intermediaries enable secure data transmission without direct physical connections, resolving the contradiction between reliability and complexity by providing a wireless pathway that maintains security while reducing mechanical complexity.
2Device complexity
If wireless technology is used to connect battery monitoring components, then device complexity is reduced, but security against interference and cyber-attacks worsens
Solution Approach 1:
The patent applies preliminary anti-action by implementing encryption algorithms and authentication protocols before data transmission occurs. Freshness values are generated and embedded in messages beforehand to prevent replay attacks. This proactive security measures counteract potential interference and cyber-attacks before they can compromise the wireless communication, thus improving security reliability while maintaining reduced device complexity.
Solution Approach 2:
The patent performs preliminary actions by pre-establishing security parameters, encryption keys, and freshness value counters before wireless communication begins. These preliminary security configurations enable the wireless system to operate securely without adding significant complexity during runtime, addressing the contradiction between simplicity and security.
3Reliability
If freshness value counter is used to prevent replay attacks, then security reliability is improved, but loss of time increases due to authentication overhead
Solution Approach 1:
The patent uses parameter changes by implementing counters with different bit lengths (e.g., 8-bit, 16-bit, 32-bit freshness values) that can be adjusted based on security requirements and performance needs. By changing the parameter of counter size, the system balances security reliability against time loss, allowing optimization for specific application scenarios without fundamentally altering the authentication mechanism.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, apparatuses, and computer program products for using a secure wireless protocol within a wireless battery management system are disclosed. In a particular embodiment, a first wireless component of the BMS determines, based on a freshness value counter, a first freshness value. The first wireless component generates a message body comprising the first freshness value and a data payload. In this embodiment, the first wireless component uses a first session key shared with a second wireless component of the BMS, to encrypt the message body and generate a message authentication code based on the encrypted message body and the first session key. The first wireless component transmits to the second wireless component, a message that includes the encrypted message body and the message authentication tag.