Incazelo eningiliziwe yesimiso sokusebenza kobuchwepheshe sesevisi yokushaja i-PnC Plug&Charge -1

1, isigaba sokwakha ukwethembana phakathi kwezimoto neziteshi zokushaja

Ukuqinisekiswa kobunikazi:Isiteshi sokushaja siqinisekisa ubuwena baso ngesitifiketi se-SECC (Supply Equipment Communication Controller), kuyilapho imoto isebenzisa isitifiketi sempande se-V2G esisethwe ngaphambili embonini (Trust Anchor) ukuze kuqinisekiswe ngokuphambene. Ukuze kuvinjelwe ukuhlaselwa kwesitifiketi okungelona iqiniso, uhlelo lwethule i-OCSP (Online Certificate Status Protocol). Ezingeni lakamuva le-ISO15118-20, ukuqinisekiswa kokuhoxiswa kwesikhathi sangempela kuyimpoqo kuzo zonke izitifiketi (kufaka phakathi izitifiketi ze-Sub CA kanye ne-Leaf) ukuqinisekisa ukuthi zonke izixhumanisi zokuxhumana zingaphansi kokuqapha okuqinile kokuthobela imithetho.

Kulesi sigaba, imoto (i-EV) kanye nesiteshi sokushaja (i-EVSE) baxhawulana ngezandla ngokusekelwe kuphrothokholi ye-ISO 15118. Ngemva kokuqeda umsebenzi wokufaka isibhamu nokwakha isixhumanisi sokuxhumana sedijithali, bobabili abathintekayo bazoxoxisana ukuze kunqunywe inguqulo yesicelo se-Transport Layer Security Protocol (TLS):

• I-TLS 1.2isetshenziswa ku-ISO 15118-2 standard;
• Uma usebenzisaI-ISO 15118-20ejwayelekile,I-TLS 1.3yamukelwa;

1. Isiteshi sokushaja sinikeza uchungechunge lwaso lwesitifiketi emotweni kagesi, okuhlanganisa isitifiketi se-Supply Equipment Communication Controller (SECC) kanye nesitifiketi se-Charge Operator (CPO) Intermediate Certificate Authority (Sub CA), ukuze kuqedwe ukuqinisekiswa kobunikazi bemoto okuthembekile.
2. Izimoto zikagesi zisebenzisa ama-trust anchor afakwe ngaphambilini (okungukuthi izitifiketi zezimpande ze-V2G ezisethwe ngaphambilini ngaphambi kokulethwa kwemoto kubasebenzisi) ukuqinisekisa uchungechunge oluphelele lwezitifiketi oluthunyelwe yiziteshi zokushaja.
3. Izimoto zikagesi zizoqinisekiswa ngesimo sokuhoxiswa kwesitifiketi: Ngaphansi kwendinganiso ye-ISO 15118-2, izitifiketi ze-SECC zakhiwe ngesikhathi sokusebenza kwesikhashana (izinyanga ezingu-2-3), kanti isimo sokuhoxiswa kwezitifiketi ze-CPO Sub CA siqinisekiswa nge-Online Certificate Status Protocol (OCSP); indinganiso ye-ISO 15118-20 idinga ukuthi zonke izitifiketi ziqinisekiswe ngesimo sokuhoxiswa nge-OCSP.
4. Ngemva kokuba zonke izinyathelo zokuqinisekisa sezidlulile, imoto kagesi ingaqinisekisa ukuthi isiteshi sokushaja sithembekile, futhi idatha yokuxhumana egcwele elandelayo izodluliselwa kusetshenziswa izindlela ezibethelwe.

2, isigaba sokuxoxisana ngendlela yokubona ubuwena

Umqondo ohlukile phakathi kwe-EIM ne-PnC: Le phrothokholi ivimbela ngokuqinile ukwenza "ukuqashelwa kobunikazi obubili" kubasebenzisi. Uma kutholwa ukuthi umsebenzisi uqale ngesandla nge-RFID noma i-App (imodi ye-EIM), isiteshi sokushaja kumele siqede ngokuzenzakalelayo inqubo yokuqalisa i-PnC ukuze sigweme ingozi yebhizinisi yokukhokha okuphindwe kabili.

Izinga le-ISO 15118 lichaza izindlela ezimbili zokuqaphela ubunikazi besikhathi sokushaja:

• 1. Izindlela Zokuhlonza Zangaphandle (i-EIM):ukumboza amakhadi okuhlonza i-Radio Frequency (RFID), amakhadi esikweletu, izinhlelo zokusebenza zeselula, amakhodi e-QR, njll.;
• 2. Ipulaki Nokushaja:Indlela yokuqinisekisa ezenzakalelayo ngokuphelele esekelwe ezitifiketini.

Umkhawulo oyinhloko:Iziteshi zokushaja akumele zenze ukuqashelwa kobunikazi obubili kubasebenzisi. Uma umsebenzisi eqeda ukuqinisekiswa ngezindlela zangaphandle njengekhadi le-RFID ngaphambi kokuxhuma isibhamu sokushaja, isiteshi sokushaja kufanele siqede umsebenzi we-plug and play oqalayo; Ngaphandle kwalokho, kungabangela ukuthi imoto iqinisekiswe ngokuphindaphindiwe ngesitifiketi senkontileka, okuholela engcupheni yokukhokhiswa okuphindwe kabili.

3, isigaba sokuqinisekisa ubuwena bemoto

Ngemva kokuthi uhlelo lukhethe imodi yokushaja ye-plug and play, imoto kagesi ithumela isitifiketi senkontileka kanye nesitifiketi se-Mobile Service Provider (MSP) Sub CA esiteshini sokushaja. Izitifiketi ezingenhla zihlanganiswe kuchungechunge lwesitifiketi oluphelele, futhi inqubo yokuqinisekisa ubunikazi eyinhloko iqaliswa ngokusemthethweni. I-backend izokwenza ukuhlolwa okuningi kokuphepha ngesikhathi esisodwa ukuqinisekisa ngokuphelele ukuba semthethweni kwezikhathi zokushaja, ukuba semthethweni kwama-akhawunti okukhokhisa, nokuvimbela ingozi yokukhwabanisa ubunikazi bemoto.

Ukuze kuvinjelwe ukuhlaselwa kokuphinda kusetshenziswe (okungukuthi abaphangi be-hacker ababamba imiyalezo yokugunyazwa bese beyithumela ngokuphindaphindiwe), uhlelo lukhiqiza ikhodi yokuphonsela inselelo engahleliwe engu-128 bit. Imoto kumele isebenzise ukhiye wangasese ukusayina ikhodi yokuphonsela inselelo, futhi isiteshi sokushaja sizokwenza ukuqinisekiswa kwesiginesha yezinga le-millisecond endaweni kusetshenziswa ukhiye womphakathi wesitifiketi senkontileka. Lokhu kubethela okungalingani kuqinisekisa ukuhlukile nokungalahlwa kokugunyazwa okusheshayo.

1. Ukuqinisekiswa kokufaneleka kwezinqwaba zokushaja ezintanjeni zesitifiketi

Isiteshi sokushaja noma uhlelo lwe-CPO backend ludinga ukuqedela ukuqinisekiswa okubili okulandelayo okuyinhloko:

• Ukuqinisekiswa kobuqiniso:Qinisekisa ukuthi zonke izitifiketi ezikuchungechunge lwezitifiketi zingaphakathi kwesikhathi sazo sokusebenza;
• Ukuqinisekiswa kobuqiniso:Qinisekisa ukuthi isiginesha yedijithali egcwele kusukela esitifiketini senkontileka kuya esitifiketini esiyinhloko iyasebenza.

Imfuneko yokusebenzisa ukuqinisekiswa kwendawo ukuthi isiteshi sokushaja simise kusengaphambili isitifiketi sempande esihambisanayo - ngokuvamile isitifiketi sempande ye-V2G esinikezwa ngumsebenzisi we-PKI, futhi kwezinye izimo, isitifiketi sempande ye-MSP uqobo (esinesilinganiso esiphansi sesicelo).

2. Ukuqinisekiswa kwesimo sokuhoxiswa kwesitifiketi ku-inthanethi

Ingxenye yenqubo yokuqinisekisa incike ekusebenzisaneni kwe-inthanethi, futhi ukuqinisekiswa kwesimo sokuhoxiswa kwesitifiketi kungenye yezinqubo eziyinhloko. Isiteshi sokushaja sizoqala umbuzo kumphenduli we-OCSP osethiwe kusengaphambili esitifiketini ukuqinisekisa ukuthi izinhlobo ezimbili ezilandelayo zezitifiketi azikahoxiswa:

• Isitifiketi se-CPO Sub CA (sisebenza kuzo zombili izindinganiso ze-ISO 15118-2 kanye ne-ISO 15118-20);
• Isitifiketi senkontileka (sisebenza kuphela kumazinga e-ISO 15118-20);

3. Ukuqinisekiswa kwesimo se-akhawunti yokukhokha

Ngemva kokushaja sekuqediwe, uhlelo luqeda ngokuzenzakalelayo inqubo kusukela ekushintshisaneni kwedatha kuya ekwamukelweni kwemali: Ngemva kokuqinisekisa ubuqiniso besitifiketi, i-CPO izoqinisekisa isimo sokuba semthethweni kwenkontileka yokukhokha yomsebenzisi. Uhlelo luzokhipha i-ID yomhlinzeki wesevisi kusihlonzi se-akhawunti yokuxhumana kwezimoto (EMAID), kanti i-CPMS izohlobanisa i-MSP ehambisanayo nale ID ukuqinisekisa ukuthi i-akhawunti ayikho esimweni sokumiswa noma sokukhanselwa.

4. Inqubo yokushaja iqalile

Ngemva kokuqinisekisa ukuthi imoto kagesi ingubani, imoto kanye nesiteshi sokushaja kuzolandela inqubo yokushintshana ngemiyalezo yezinga le-ISO 15118, kuxoxiswane ngemingcele yokushaja nesikhathi, bese kuqala ngokusemthethweni isevisi yokushaja.

Ukuze uqedele umsebenzi we-PnC (Plug&Charge) plug and charge, kubalulekile ukusetha kusengaphambili, ukugcina, nokuqinisekisa isitifiketi senkontileka, nokuqinisekisa uhlelo lwezinto ezibethelwe olufakwe ngaphakathi emphethweni wemoto (EV) kanye nasemphethweni wenqwaba (EVSE).

Njengoba kushiwo ngenhla, ohlelweni lwephrothokholi ye-TLS:I-TLS 1.2:ivumelaniswe ne-ISO 15118-2;I-TLS 1.3:Iyahambisana ne-ISO 15118-20; Womabili amaqembu okuxhumana kudingeka abe nezinhlobo ezimbili zedatha eyinhloko:Izinto zobunikazifuthiizinto zokwethembaPhakathi kwazo, indawo yokugcina ukhiye igcina ukhiye wangasese wedivayisi kanye nesitifiketi seqabunga esihambisanayo, esisetshenziselwa ukufakazela "ubuqiniso bobunikazi"; isitokwe se-trust sigcina izitifiketi ze-CA ezithembekile (ama-trust anchors), ezisetshenziselwa ukuqinisekisa ubuqiniso bezitifiketi zomunye umuntu nokuphendula umbuzo "womngcele we-trust".