Granted Patent B2

US 12,229,244 · App. 17/978,903 · Granted Feb 18, 2025

Inventors: Chao Wang (Ningde, CN); Tingda Lin (Ningde, CN); Jihai Xie (Ningde, CN)

Assignee: CONTEMPORARY AMPEREX TECHNOLOGY (HONG KONG) LIMITED

G06F21/45G06F21/572G06F21/6218G06F2221/034

Abstract

Claims (45)

1. A manufacturing method for a battery management system comprising a plurality of battery management units, the plurality of battery management units comprising a first battery management unit and a second battery management unit, the first battery management unit comprising a main core micro control unit, a first data transmission micro control unit and a hardware security module, the second battery management unit comprising a second data transmission micro control unit, and the method comprising:

obtaining, by a manufacturing apparatus for the battery management system, a main core message authentication code based on firmware data of the main core micro control unit;

obtaining, by the manufacturing apparatus, a first data transmission message authentication code based on firmware data of the first data transmission micro control unit, and obtaining a second data transmission message authentication code based on firmware data of the second data transmission micro control unit; and

configuring, by the manufacturing apparatus, the hardware security module based on the main core message authentication code, the first data transmission message authentication code and the second data transmission message authentication code, including writing the main core message authentication code, the first data transmission message authentication code and the second data transmission message authentication code into the hardware security module, so that the battery management system verifies the plurality of battery management units based on using the hardware security module at starting up.

2. The method of claim 1 , wherein the obtaining a main core message authentication code based on firmware data of the main core micro control unit comprises:

generating, by the manufacturing apparatus, a secret key uniquely corresponding to the main core micro control unit; and

obtaining, by the manufacturing apparatus, the main core message authentication code based on the secret key and the firmware data of the main core micro control unit,

wherein configuring, by the manufacturing apparatus, the hardware security module based on the main core message authentication code, the first data transmission message authentication code and the second data transmission message authentication code further comprises:

configuring, by the manufacturing apparatus, the hardware security module based on the secret key, the main core message authentication code, the first data transmission message authentication code and the second data transmission message authentication code.

3. The method of claim 1 , wherein the obtaining, by the manufacturing apparatus, a first data transmission message authentication code based on firmware data of the first data transmission micro control unit, and obtaining a second data transmission message authentication code based on firmware data of the second data transmission micro control unit comprise:

for each of the first data transmission micro control unit and the second data transmission micro control unit:

obtaining, by the manufacturing apparatus, firmware data and hardware data of the data transmission micro control unit; and

obtaining, by the manufacturing apparatus, a data transmission message authentication code of the data transmission micro control unit based on the firmware data and the hardware data of the data transmission micro control unit.

4. A method for starting up a battery management system comprising a plurality of battery management units, the plurality of battery management units comprising a first battery management unit and a second battery management unit, the first battery management unit comprising a main core micro control unit and a first data transmission micro control unit, the second battery management unit comprising a second data transmission micro control unit, the main core micro control unit having a corresponding main core message authentication code, the first data transmission micro control unit having a corresponding first data transmission message authentication code and the second data transmission micro control unit having a corresponding second data transmission message authentication code, and the method comprising:

obtaining, by a hardware security module for starting up the battery management system, firmware data from the main core micro control unit in response to a starting up instruction for the battery management system;

verifying, by the hardware security module, the main core micro control unit based on the firmware data of the main core micro control unit and the main core message authentication code;

obtaining, by the hardware security module, verification data from the main core micro control unit in response to the main core micro control unit passing the verification, the verification data being corresponding to one of the first data transmission micro control unit and the second data transmission micro control unit and comprising firmware data of the one of the first data transmission micro control unit and the second data transmission micro control unit; and

verifying, by the hardware security module, the one of the first data transmission micro control unit and the second data transmission micro control unit based at least on the verification data.

5. The method of claim 4 , wherein the main core micro control unit has a unique corresponding secret key, and verifying, by the hardware security module, the main core micro control unit based on the firmware data of the main core micro control unit and the main core message authentication code comprises:

verifying, by the hardware security module, the main core micro control unit based on the firmware data of the main core micro control unit, the secret key and the main core message authentication code.

6. The method of claim 4 , wherein the obtaining, by the hardware security module, verification data from the main core micro control unit comprises:

sending, by the hardware security module, an instruction for starting up the main core micro control unit to start up the main core micro control unit, wherein after the main core micro control unit is started up, a communication connection is established between the main core micro control unit and the first data transmission micro control unit; and

obtaining, by the hardware security module, the verification data in response to the communication connection being established between the main core micro control unit and the first data transmission micro control unit, wherein the verification data is corresponding to the first data transmission micro control unit.

7. The method of claim 4 , wherein after the main core micro control unit is started up, a communication connection is established between the first data transmission micro control unit and the second data transmission micro control unit, and obtaining, by the hardware security module, verification data from the main core micro control unit further comprises:

obtaining, by the hardware security module, the verification data in response to the first data transmission micro control unit passing the verification and the communication connection being established between the first data transmission micro control unit and the second data transmission micro control unit, wherein the verification data is corresponding to the second data transmission micro control unit.

8. The method of claim 4 , wherein the verification data further comprises hardware data of the one of the first data transmission micro control unit and the second data transmission micro control unit.

9. The method of claim 4 , further comprising:

sending, by the hardware security module in response to the main core micro control unit failing to pass the verification, a starting up termination instruction to terminate the starting up of the battery management system.

10. A hardware security module for starting up a battery management system comprising a plurality of battery management units, the plurality of battery management units comprising a first battery management unit and a second battery management unit, the first battery management unit comprising a main core micro control unit and a first data transmission micro control unit, the second battery management unit comprising a second data transmission micro control unit, the main core micro control unit having a corresponding main core message authentication code, the first data transmission micro control unit having a corresponding first data transmission message authentication code and the second data transmission micro control unit having a corresponding second data transmission message authentication code, and the hardware security module comprising:

at least one processor; and

a memory storing instructions that, when executed by the at least one processor, cause the at least one processor to:

obtain firmware data from the main core micro control unit in response to a starting up instruction for the battery management system;

verify the main core micro control unit based on the firmware data of the main core micro control unit and the main core message authentication code;

obtain verification data from the main core micro control unit in response to the main core micro control unit passing the verification, the verification data being corresponding to one of the first data transmission micro control unit and the second data transmission micro control unit and comprising firmware data of the one of the first data transmission micro control unit and the second data transmission micro control unit; and

verify the one of the first data transmission micro control unit and the second data transmission micro control unit based at least on the verification data.

11. The hardware security module of claim 10 , wherein the main core micro control unit has a unique corresponding secret key, and the instructions, when executed by the at least one processor, further cause the at least one processor to:

verify the main core micro control unit based on the firmware data of the main core micro control unit, the secret key and the main core message authentication code.

12. The hardware security module of claim 10 , wherein the instructions, when executed by the at least one processor, further cause the at least one processor to:

send an instruction for starting up the main core micro control unit to start up the main core micro control unit, wherein after the main core micro control unit is started up, a communication connection is established between the main core micro control unit and the first data transmission micro control unit; and

obtain the verification data in response to the communication connection being established between the main core micro control unit and the first data transmission micro control unit, wherein the verification data is corresponding to the first data transmission micro control unit.

13. The hardware security module of claim 10 , wherein after the main core micro control unit is started up, a communication connection is established between the first data transmission micro control unit and the second data transmission micro control unit, and the instructions, when executed by the at least one processor, further cause the at least one processor to:

obtain the verification data in response to the first data transmission micro control unit passing the verification and the communication connection being established between the first data transmission micro control unit and the second data transmission micro control unit, wherein the verification data is corresponding to the second data transmission micro control unit.

14. The hardware security module of claim 10 , wherein the verification data further comprises hardware data of the one of the first data transmission micro control unit and the second data transmission micro control unit.

15. The hardware security module of claim 10 , wherein the instructions, when executed by the at least one processor, further cause the at least one processor to:

send, in response to the main core micro control unit failing to pass the verification, a starting up termination instruction to terminate the starting up of the battery management system.

Assignments (2)

Priority Claims (1)

Continuity (2)

References Cited (31)