Managing systems and storage

Abstract

A management system and a memory can suppress the amount of calculation and appropriately set the recognition level for the autonomous mobile body. The management system has an acquisition unit for acquiring internal data of the robot (2). In addition, the management system has a determination unit (44) and a reset unit (45). The determination unit (44) determines the reliability of the robot (2) based on the internal data acquired by the acquisition unit. The reset unit (45) resets the recognition level of the robot (2) based on the reliability determined by the determination unit (44).

Description

Technical Field

[0001] The present invention relates to management systems and memories. Background Art

[0002] Patent Document 1 describes a device for monitoring suspicious individuals. In the device described in Patent Document 1, a person is captured by a camera. The device uses the image captured by the camera to determine the person's reliability. If the determined reliability falls below a threshold, the person is determined to be suspicious.

[0003] Patent Document 1: Japanese Patent Application Laid-Open No. 2011-81735

[0004] The device described in Patent Document 1 uses camera images to identify and analyze people's behavior to determine their reliability. The need to process camera images in the device described in Patent Document 1 increases the amount of computation required. Furthermore, the device cannot be applied to objects such as robots, which appear to be identical. Summary of the Invention

[0005] The present invention was developed to address the aforementioned issues. An object of the present invention is to provide a management system that, in granting building equipment access rights to autonomous mobile objects, reduces the amount of computation required and appropriately sets authorization levels for autonomous mobile objects. Another object of the present invention is to provide a memory storing a program for implementing such functions in the management system.

[0006] The management system of the present invention grants permission to use the building equipment to an autonomous mobile object in a building having a set security level and an autonomous mobile object having a set authorization level, if the authorization level is higher than the security level. The management system includes an acquisition unit that acquires internal data of the autonomous mobile object; a determination unit that determines the reliability of the autonomous mobile object based on the internal data acquired by the acquisition unit; and a reset unit that resets the authorization level based on the reliability determined by the determination unit.

[0007] In the memory storing the program of the present invention, the program is used to enable the processor to execute the following steps: an acquisition step, obtaining internal data of an autonomous mobile body with a set recognition level; a determination step, determining the reliability of the autonomous mobile body based on the internal data obtained through the acquisition step; and a re-setting step, re-setting the recognition level based on the reliability determined through the determination step.

[0008] According to the present invention, in a management system that grants building equipment utilization rights to autonomous mobile bodies, it is possible to appropriately set authorization levels for autonomous mobile bodies while suppressing the amount of calculation. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 This is a diagram showing an example of the management system in the first embodiment.

[0010] Figure 2 This is a flowchart showing an example of the operation of the management system.

[0011] Figure 3 This is a diagram for explaining the function of the determination unit.

[0012] Figure 4 This is a diagram showing another example of a building system.

[0013] Figure 5 This is a diagram showing another example of a building system.

[0014] Figure 6 This is a diagram showing an example of hardware resources of a building system.

[0015] Figure 7 This is a diagram showing another example of hardware resources of a building system.

[0016] Description of labels

[0017] 1: Building equipment; 2: Robot; 3: Management server; 4: Building system; 21: Storage unit; 22: Control unit; 23: Communication unit; 31: Information management unit; 32: Communication unit; 41: First monitoring unit; 42: Second monitoring unit; 43: Third monitoring unit; 44: Decision unit; 45: Resetting unit; 46: Communication unit; 50: Processing circuit; 51: Processor; 52: Memory; 53: Dedicated hardware. DETAILED DESCRIPTION

[0018] The following is a detailed description with reference to the accompanying drawings. Repeated descriptions are appropriately simplified or omitted. In each figure, the same reference numerals represent the same parts or corresponding parts.

[0019] Implementation Method 1

[0020] Figure 1 This diagram illustrates an example of a management system in Embodiment 1. A building includes building equipment 1 and a robot 2. Robot 2 is an example of a mobile object that moves autonomously within the building. Robot 2 can autonomously move within the building after receiving instructions from the management system. The building includes one or more robots 2.

[0021] The robot 2 utilizes the building equipment 1 while moving within the building. Figure 1 An elevator is shown as an example of the building equipment 1. Table 1 shows the building equipment 1 and the manner in which the robot 2 utilizes the building equipment 1.

[0022]

Table 1

[0023] Building Services How to use elevator Elevator call registration and boarding security door pass electronic lock Unlock Room Move, stay corridor Move, stay

[0024] Robot 2 utilizes one or more of the building equipment 1 shown in Table 1. Robot 2 may also utilize building equipment 1 not shown in Table 1. Robot 2 may also utilize only building equipment 1 not shown in Table 1. Building equipment 1 is not limited to the examples shown in Table 1. Utilization of building equipment 1 is not limited to the examples shown in Table 1.

[0025] A security level is set for each building device 1. An authorization level is set for each robot 2. The robot 2 is permitted or not permitted to use the building device 1 according to the set authorization level.

[0026] If the authorization level set for a robot 2 is higher than the security level set for a building device 1, the management system grants permission to use the building device 1 to the robot 2. In other words, the robot 2 can use the building device 1. If the authorization level set for a robot 2 is lower than the security level set for a building device 1, the management system does not grant permission to use the building device 1 to the robot 2. In other words, the robot 2 cannot use the building device 1.

[0027] Each robot 2 includes a storage unit 21, a control unit 22, and a communication unit 23. The robot 2 communicates with a management server 3 (described later) via the communication unit 23. The robot 2 also communicates with a building system 4 (described later) via the communication unit 23. The control unit 22 controls the operation of the robot 2 based on instructions from the management server 3 and the building system 4.

[0028] Figure 1 The management system shown includes a management server 3 and a building system 4. The management server 3 includes an information management unit 31 and a communication unit 32. For example, the management server 3 is located within a building. Alternatively, the management server 3 may be a cloud server. The management server 3 communicates with the robots 2 via the communication unit 32. The management server 3 also communicates with the building system 4 via the communication unit 32. The information management unit 31 acquires and manages the information held by each robot 2.

[0029] The building system 4 includes a first monitoring unit 41, a second monitoring unit 42, a third monitoring unit 43, a determination unit 44, a reset unit 45, and a communication unit 46. For example, the building system 4 is installed on a personal computer within the building. Alternatively, the building system 4 may be installed on a server computer within the building. Alternatively, the building system 4 may be installed on a cloud server. The building system 4 communicates with the robot 2 via the communication unit 46. The building system 4 also communicates with the management server 3 via the communication unit 46.

[0030] Below, also refer to Figure 2 and Figure 3 right Figure 1 The operations and functions of the management system shown are explained in detail. Figure 2 This is a flowchart showing an example of the operation of the management system. Figure 2 The following is an example of the operation performed on one robot 2. In the case where a building has multiple robots 2, Figure 2 The action shown.

[0031] In the building system 4, the internal data of the robot 2 is collected (S101). The communication unit 46 is connected to the communication unit 23 to obtain the internal data from the robot 2. The communication unit 46 can also be connected to the communication unit 32 to obtain the internal data of the robot 2 from the management server 3. The communication unit 46 is an example of a means for obtaining the internal data of the robot 2.

[0032] As an example, the communication unit 46 acquires data related to the communication log of the robot 2 as internal data of the robot 2. Hereinafter, this data table will be referred to as first data.

[0033] The first data is stored as communication information in the storage unit 21 of the robot 2. The communication information includes data related to communication between the robot 2 and the management server 3. The communication information may also include data related to communication between the robot 2 and the building system 4. The communication information may also include data related to communication performed by the robot 2 to utilize the building equipment 1. The information management unit 31 of the management server 3 may also store the communication information of each robot 2.

[0034] For example, the communication unit 46 acquires the first data via the communication unit 23. The first data acquired by the communication unit 46 is stored in the first monitoring unit 41. Table 2 shows an example of data stored in the first monitoring unit 41.

[0035]

Table 2

[0036]

[0037] In the example shown in Table 2, information indicating recording date and time, robot ID, and received data is associated and stored in the first monitoring unit 41. The top column of Table 2 indicates that robot 2 with robot ID R1 received data D11 at date and time T11.

[0038] As another example, the communication unit 46 acquires data related to a program installed in the robot 2 as internal data of the robot 2. Hereinafter, this data table will be referred to as second data.

[0039] The second data is stored as software information in the storage unit 21 of the robot 2. The software information includes information such as the software's creation date and time, its electronic signature, and the software's update date and time. The software information may also include the IP address assigned to the robot 2. The software information may also include the AP (Access Point) information of the wireless LAN (Local Area Network) to which the robot 2 is connected. The information management unit 31 of the management server 3 manages the software information of each robot 2. Therefore, the information management unit 31 stores the software information of each robot 2.

[0040] For example, the communication unit 46 acquires the second data via the communication unit 23. The second data acquired by the communication unit 46 is stored in the second monitoring unit 42. Table 3 shows an example of data stored in the second monitoring unit 42.

[0041]

Table 3

[0042]

[0043] In the example shown in Table 3, information indicating the robot ID, recording date and time, software name, creation date and time, signature, and software update date and time is associated and stored in the second monitoring unit 42. Information indicating the signature may also be stored as a value obtained by converting the binary string of the software execution file into a hash value using a hash function.

[0044] As another example, the communication unit 46 acquires data related to a user who executes a program installed in the robot 2 as internal data of the robot 2. Hereinafter, this data table will be referred to as third data.

[0045] The third data is stored as user information in the storage unit 21 of the robot 2. The user information includes the recording date and time, the robot ID, and the user who executed the program installed in the robot 2. The user information of each robot 2 may be stored in the information management unit 31 of the management server 3.

[0046] For example, the communication unit 46 acquires the third data via the communication unit 23. The third data acquired by the communication unit 46 is stored in the third monitoring unit 43. Table 4 shows an example of data stored in the third monitoring unit 43.

[0047]

Table 4

[0048]

[0049] In the example shown in Table 4, information indicating the robot ID, recording date and time, executing user, and user group is associated and stored in the third monitoring unit 43. The user group indicates the group to which the executing user belongs.

[0050] Next, the building system 4 determines whether it is time to determine the reliability of the robot 2 (S102). Reliability is an indicator used to set the certification level of the robot 2. As an example, a "Yes" determination in S102 may occur when a certain amount of time has passed since the previous "Yes" determination in S102. Alternatively, a "Yes" determination in S102 may occur when the building system 4 receives a specific signal. Alternatively, a "Yes" determination in S102 may occur when other conditions are met.

[0051] If the determination in S102 is "YES", the determination unit 44 determines the reliability of the robot 2 (S103). The determination unit 44 determines the reliability of the robot 2 based on the internal data acquired in S101, namely, the first data stored in the first monitoring unit 41, the second data stored in the second monitoring unit 42, and the third data stored in the third monitoring unit 43.

[0052] Figure 3 This is a diagram for explaining the function of the determination unit 44 . Figure 3 An example of the processing performed in S103 is shown.

[0053] If the determination in S102 is "Yes," the determination unit 44 first extracts the first data whose recording date and time are included in the period [Tt, T] from the first data stored in the first monitoring unit 41 (S201). The period [Tt, T] is the period from time Tt to the current time T, where time Tt is the time retroactively measured by time t from the current time T.

[0054] Next, the determination unit 44 calculates specific statistical information based on the first data of the period [Tt, T] extracted in S201 ( S202 ).

[0055] For example, the determination unit 44 calculates statistics related to the communication cycle within the period [Tt, T] as statistical information based on the extracted first data. When the first data shown in Table 2 is extracted in S201, the determination unit 44 first calculates the time interval during which communication occurred for robot 2 with robot ID R1 based on the recorded date and time T12 and the recorded date and time T11. The determination unit 44 calculates other time intervals during which communication occurred for robot 2 with robot ID R1 using the same method.

[0056] The determination unit 44 calculates the average value of the calculated time intervals, i.e., the communication cycles, as a statistic related to the communication cycles within the period [Tt, T]. The determination unit 44 may also calculate the median value or variance of the calculated time intervals as the statistic. The determination unit 44 may also calculate the statistic by treating the distribution of the calculated time intervals as a probability distribution. In this case, the determination unit 44 may also calculate the statistic based on the mode, maximum value, minimum value, median value, interquartile range, moment, or cumulative value of the probability distribution.

[0057] The determination unit 44 may calculate the distribution of the calculated time intervals as statistical information.

[0058] As another example, the determination unit 44 may calculate, as statistical information, a statistic related to the data size of communications during the period [Tt, T] based on the extracted first data. When the first data shown in Table 2 is extracted in S201, the determination unit 44 first determines the data size of received data D11 for robot 2 with robot ID R1. Similarly, the determination unit 44 determines the data size of other received data, including the data size of received data D12, for robot 2 with robot ID R1.

[0059] The determination unit 44 calculates the average value of the determined data size as a statistic related to the communication data size during the period [Tt, T]. The determination unit 44 may also calculate the median value or variance of the determined data size as the statistic. The determination unit 44 may also calculate the statistic by treating the distribution of the determined data size as a probability distribution. In this case, the determination unit 44 may calculate the statistic based on the mode, maximum value, minimum value, median value, interquartile range, moment, or cumulative value of the probability distribution.

[0060] The determination unit 44 may calculate the distribution of the calculated data sizes as statistical information.

[0061] Next, the determination unit 44 determines the first reliability of the robot 2 based on the statistical information calculated in S202 ( S203 ).

[0062] For example, if statistics related to the communication cycle are calculated in S202, the decision unit 44 compares the calculated statistics with past statistics related to the communication cycle to determine the first reliability. Past statistics related to the communication cycle are stored in the first monitoring unit 41. For example, the decision unit 44 determines the first reliability based on the difference between the currently calculated average value of the communication cycle and the past average value of the communication cycle. If the currently calculated average value of the communication cycle increases by more than a specific threshold value compared to the past average value of the communication cycle, the decision unit 44 lowers the first reliability.

[0063] If the statistics related to data size are calculated in S202, the decision unit 44 may compare the calculated statistics with past statistics related to data size to determine the first reliability. The past statistics related to data size are stored in the first monitoring unit 41. As an example, the decision unit 44 determines the first reliability based on the difference between the average value of the data size calculated this time and the average value of the data size in the past. If the average value of the data size calculated this time increases by more than a specific threshold value compared to the average value of the data size in the past, the decision unit 44 lowers the first reliability.

[0064] When comparing the currently calculated statistic with the past statistic to determine the first reliability, the determination unit 44 may use the following formula.

[0065] r=f(Sc,Sp)…(1)

[0066] The function of the determination unit 44 using the formula (1) can be realized by a correspondence table between statistical differences and the first reliability. Table 5 shows an example of the correspondence table.

[0067]

Table 5

[0068] Statistical Difference 1st reliability DIFF1 RE1 DIFF2 RE2 DIFF3 RE3 DIFF4 RE4 DIFF5 RE5

[0069] In the example shown in Table 5, if the difference between the currently calculated statistic and the past statistic is DIFF1, the decision unit 44 decides the first reliability to be RE1.

[0070] As another example, the decision unit 44 may also increase the first reliability under certain conditions. For example, the period [T1-t, T1] is a period during which a first reliability higher than the current first reliability is obtained. The period [T2-t, T2] is a period during which a first reliability lower than the current first reliability is obtained. Time T1 is in the past compared to time Tt. Time T2 is in the past compared to time Tt. The period [Tt, T] is the most recent period. The decision unit 44 may also increase the first reliability if the difference between the statistic in the period [Tt, T] and the statistic in the period [T1-t, T1] is smaller than the difference between the statistic in the period [Tt, T] and the statistic in the period [T2-t, T2].

[0071] As another example, if the distribution of time intervals or data sizes is calculated as statistical information in S202, the decision unit 44 may compare the currently calculated distribution with past distributions to determine the reliability. The decision unit 44 may also compare the distances between distributions using the Kullbeck-Leibler divergence information entropy or the Akaike information entropy criterion. If the distance between distributions exceeds a specific threshold, the decision unit 44 lowers the first reliability.

[0072] This function of the determination unit 44 can also be implemented using equation (1). In this case, the function of the determination unit 44 using equation (1) can be implemented using a correspondence table between the inter-distribution distance and the first reliability. That is, the determination unit 44 calculates the inter-distribution distance using a method such as the Kullbeck-Leibler divergence information entropy, and converts the inter-distribution distance calculated based on the correspondence table into the first reliability.

[0073] As another example, the decision unit 44 may also determine the first reliability using a learned model. In this case, machine learning is performed using the first data or statistical information based on the first data as input to generate the model. In addition, machine learning is performed using the first data or statistical information based on the first data as input to update the model. For example, the decision unit 44 outputs the difference between the statistic calculated this time and the corresponding past statistic from the learned model by using the first data or statistical information based on the first data as input. The decision unit 44 determines the first reliability based on the difference output from the learned model. The decision unit 44 may also output the first reliability directly from the learned model.

[0074] Next, the decision unit 44 extracts the second data whose recording date and time are included in the period [Tt, T] from the second data stored in the second monitoring unit 42 (S204). The decision unit 44 determines the second reliability based on the second data in the period [Tt, T] extracted in S204 (S205).

[0075] As an example, the decision unit 44 verifies the information representing the signature. The information representing the signature is pre-registered and managed in the information management unit 31 of the management server 3. The second monitoring unit 42 stores the information obtained from the information management unit 31 as registered information. The decision unit 44 compares the information representing the signature extracted in S204 with the corresponding registered information, i.e., the information managed by the information management unit 31. If the information extracted this time has changed from the registered information, the decision unit 44 lowers the second reliability. The second reliability may also be a relative value. The second reliability may also be expressed as a numerical value indicating the amount or degree of reduction in the reliability of the robot 2.

[0076] After temporarily lowering the second reliability, if the information representing the signature extracted this time matches the corresponding registered information again, the decision unit 44 may increase the second reliability.

[0077] As another example, the determination unit 44 verifies the information indicating date and time. This information indicating date and time includes, for example, the creation date and time and the software update date and time. If the information indicating date and time obtained in S204 matches information previously set as fraudulent information, the determination unit 44 lowers the second reliability. This fraudulent information may also include information indicating a date and time in the future compared to the current date and time. This fraudulent information may also include information represented by a representation that deviates from the standard for representing date and time. For example, March 13 may match fraudulent information.

[0078] After temporarily lowering the second reliability, if the information indicating the date and time extracted this time does not match the information preset as fraudulent information, the decision unit 44 may increase the second reliability.

[0079] As another example, the decision unit 44 verifies information indicating an IP address or information indicating a wireless LAN access point (AP). The second monitoring unit 42 stores past information indicating IP addresses and APs. The decision unit 44 compares the information indicating the IP address extracted this time in S204 with the corresponding past information. The decision unit 44 compares the information indicating the AP extracted this time in S204 with the corresponding past information. If the information extracted this time has changed from the past information, the decision unit 44 lowers the second reliability.

[0080] Information management unit 31 of management server 3 pre-registers and manages information representing IP addresses. If the information representing the IP address extracted this time matches the corresponding registered information after temporarily lowering the second reliability, decision unit 44 may also raise the second reliability. If the information representing the IP address extracted this time returns to the information before the second reliability was lowered after temporarily lowering the second reliability, decision unit 44 may also raise the second reliability. The same applies to information representing the AP.

[0081] Next, the decision unit 44 extracts the third data whose recording date and time are included in the period [Tt, T] from the third data stored in the third monitoring unit 43 (S206). The decision unit 44 determines the third reliability based on the third data in the period [Tt, T] extracted in S206 (S207).

[0082] For example, the decision unit 44 verifies the information indicating the executing user. Past information indicating the executing user is stored in the third monitoring unit 43. The decision unit 44 compares the information indicating the executing user extracted this time in S206 with the corresponding past information, i.e., the past information stored in the third monitoring unit 43. If the information extracted this time has changed from the past information, the decision unit 44 lowers the third reliability.

[0083] If the information extracted this time has changed from previous information and the current executing user belongs to a privileged group, the decision unit 44 may determine a third reliability level to reduce the reliability of the robot 2. A privileged group is a user group whose users have full authority over the operating system (OS) installed on the robot 2. Whether the executing user belongs to the privileged group can be determined based on information indicating the user group stored in association with the information indicating the executing user. The third reliability level may also be a relative value. The third reliability level may also be expressed as a numerical value indicating the amount or degree of reduction in the reliability of the robot 2.

[0084] Information indicating the executing user and information indicating the user group to which the executing user belongs are pre-registered and managed in the information management unit 31 of the management server 3. After temporarily lowering the third reliability, if the information indicating the executing user and the information indicating the user group to which the executing user belongs extracted this time match the corresponding registered information, the decision unit 44 may raise the third reliability.

[0085] The processing shown in S201, the processing shown in S204, and the processing shown in S206 may be performed simultaneously. The processing shown in S203, the processing shown in S205, and the processing shown in S207 may be performed in advance or in parallel.

[0086] Next, the determination unit 44 determines a new reliability of the robot 2 based on the first reliability determined in S203, the second reliability determined in S205, and the third reliability determined in S207 (S208). For example, when the first reliability is an absolute value and the second and third reliabilities are relative values, the determination unit 44 determines the new reliability of the robot 2 by adding the second and third reliabilities to the first reliability.

[0087] When one or more of the first reliability, the second reliability, and the third reliability are relative values, the determination unit 44 may convert the relative values into absolute values and then determine the statistics thereof as the new reliability of the robot 2. In this case, the average of the three absolute values may be determined as the new reliability. Alternatively, the median of the three absolute values may be determined as the new reliability. The determination unit 44 may also use other aggregation methods to determine the new reliability of the robot 2.

[0088] Next, the reset unit 45 resets the authorization level of the robot 2 (S104). The reset unit 45 resets the authorization level based on the reliability determined by the determination unit 44. Table 6 shows an example of a setting table used by the reset unit 45.

[0089]

Table 6

[0090] Reliability Recognition level Permitted equipment Permitted areas RE1 P1 PE1 PA1 RE2 P2 PE2 PA2 RE3 P3 PE3 PA3 RE4 P4 PE4 PA4 RE5 P5 PE5 PA5

[0091] In the example shown in Table 6, if the reliability determined by the determination unit 44 is RE1, the resetting unit 45 sets the authorization level of robot 2 to P1. Table 6 shows that robot 2 with the authorization level set to P1 can use building equipment 1 with a security level set to PE1 or PA1. For example, robot 2 with the authorization level set to P1 can ride in an elevator with a security level set to PE1. Robot 2 with the authorization level set to P1 can enter a room with a security level set to PA1.

[0092] In the example shown in this embodiment, the determination unit 44 determines the reliability of the robot 2 based on its internal data. The reset unit 45 resets the approval level of the robot 2 based on the reliability determined by the determination unit 44. There is no need to use image data to reset the approval level. According to the example shown in this embodiment, the amount of computation can be reduced, and the approval level for the robot 2 can be appropriately set.

[0093] Next, another example in which the present management system can be used will be described.

[0094] Figure 4 FIG. 4 is a diagram showing another example of the building system 4. Figure 4 In the illustrated example, the building system 4 includes a first monitoring unit 41 , a determination unit 44 , a reset unit 45 , and a communication unit 46 . Figure 4 The illustrated building system 4 does not include the second monitoring unit 42 and the third monitoring unit 43 .

[0095] exist Figure 4 In the example shown, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3 In the case of the operation shown in FIG. 2 , the processing shown in S204 to S207 is not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the first reliability decided in S203 .

[0096] As another example, the building system 4 may include the second monitoring unit 42, the determination unit 44, the reset unit 45, and the communication unit 46. That is, the building system 4 may not include the first monitoring unit 41 and the third monitoring unit 43.

[0097] In this example, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3During the operation shown, the processes shown in S201 to S203 and the processes shown in S206 and S207 are not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the second reliability decided in S205.

[0098] As another example, the building system 4 may include the third monitoring unit 43, the determination unit 44, the reset unit 45, and the communication unit 46. That is, the building system 4 may not include the first monitoring unit 41 and the second monitoring unit 42.

[0099] In this example, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3 In the case of the operation shown in FIG. 2 , the processing shown in S201 to S205 is not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the third reliability decided in S207.

[0100] Figure 5 FIG. 4 is a diagram showing another example of the building system 4. Figure 5 In the illustrated example, the building system 4 includes a first monitoring unit 41 , a second monitoring unit 42 , a determination unit 44 , a reset unit 45 , and a communication unit 46 . Figure 5 The illustrated building system 4 does not include the third monitoring unit 43 .

[0101] exist Figure 5 In the example shown, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3 In the case of the operation shown in S206 and S207, the processes shown in S206 and S207 are not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the first reliability decided in S203 and the second reliability decided in S205.

[0102] As another example, the building system 4 may include the second monitoring unit 42, the third monitoring unit 43, the determination unit 44, the reset unit 45, and the communication unit 46. That is, the building system 4 may not include the first monitoring unit 41.

[0103] In this example, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3 In the case of the operation shown in FIG. 2 , the processing shown in S201 to S203 is not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the second reliability decided in S205 and the third reliability decided in S207.

[0104] As another example, the building system 4 may include the first monitoring unit 41, the third monitoring unit 43, the determination unit 44, the reset unit 45, and the communication unit 46. That is, the building system 4 may not include the second monitoring unit 42.

[0105] In this example, the management system also performs Figure 2 However, the decision unit 44 is performing Figure 3 In the case of the operation shown in S204 and S205, the processes shown in S205 are not performed. The decision unit 44 decides a new reliability of the robot 2 in S208 based on the first reliability decided in S203 and the third reliability decided in S207.

[0106] Figure 6 1 is a diagram showing an example of hardware resources of the building system 4. The building system 4 includes a processing circuit 50 including a processor 51 and a memory 52 as hardware resources. The processing circuit 50 may include a plurality of processors 51. The processing circuit 50 may also include a plurality of memories 52.

[0107] In this embodiment, the components 41 to 46 represent functions of the building system 4. These functions can be implemented using software, firmware, or a combination of software and firmware described as programs. These programs are stored in the memory 52. The building system 4 implements the functions of the components 41 to 46 by having the processor 51 execute the programs stored in the memory 52.

[0108] Processor 51 is also known as a CPU (Central Processing Unit), central processing unit, processing unit, computing unit, microprocessor, microcomputer, or DSP. Memory 52 may also be a semiconductor memory, a magnetic disk, a floppy disk, an optical disk, a high-density disk, a minidisc, or a DVD. Examples of semiconductor memories include RAM, ROM, flash memory, EPROM, and EEPROM.

[0109] Figure 7 FIG. 4 is a diagram showing another example of hardware resources of the building system 4. Figure 7 In the example shown, the building system 4 has a processing circuit 50 including a processor 51 , a memory 52 and dedicated hardware 53 . Figure 7 The example in which a portion of the functions of the building system 4 is implemented by dedicated hardware 53 is shown. Alternatively, all of the functions of the building system 4 may be implemented by dedicated hardware 53. The dedicated hardware 53 may be a single circuit, a complex circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof.

[0110] The hardware resources of robot 2 are Figure 6 or Figure 7 The example shown is the same. For example, robot 2 includes a processing circuit comprising a processor and memory as hardware resources. Robot 2 implements the functions of the components 22 and 23 by having the processor execute programs stored in the memory. Robot 2 may also include a processing circuit comprising a processor, memory, and dedicated hardware as hardware resources. Alternatively, some or all of the functions of robot 2 may be implemented using dedicated hardware.

[0111] Management server 3 hardware resources and Figure 6 or Figure 7 The example shown is the same. For example, the management server 3 includes a processing circuit comprising a processor and memory as hardware resources. The management server 3 implements the functions of the components denoted by reference numerals 31 and 32 by having the processor execute programs stored in the memory. The management server 3 may also include a processing circuit comprising a processor, memory, and dedicated hardware as hardware resources. Alternatively, some or all of the functions of the management server 3 may be implemented using dedicated hardware.

Claims

1. A management system, wherein, in a building having building equipment with a set security level and autonomous mobile bodies with set authorization levels, the management system grants the autonomous mobile body access to the building equipment if the authorization level is higher than the security level, wherein: The management system has: an acquiring unit configured to acquire internal data of the autonomous mobile object; a determination unit that determines the reliability of the autonomous mobile object based on the internal data acquired by the acquisition unit; and a resetting unit that resets the approval level based on the reliability determined by the determining unit, The acquiring unit acquires first data related to the communication log of the autonomous mobile object as internal data of the autonomous mobile object. The decision unit calculates specific statistical information based on the first data obtained by the acquisition unit, determines a first reliability based on the statistical information, and determines the reliability of the autonomous mobile body based on the first reliability. The determination of the reliability of the autonomous mobile body includes increasing or decreasing the reliability of the autonomous mobile body.

2. The management system according to claim 1, wherein: The autonomous mobile body includes a storage unit. The acquisition unit acquires the data stored in the storage unit as internal data of the autonomous mobile object.

3. The management system according to claim 1, wherein: The determination unit calculates statistical information on the communication cycle or the data size based on the first data acquired by the acquisition unit.

4. The management system according to claim 2, wherein: The determination unit calculates statistical information on the communication cycle or the data size based on the first data acquired by the acquisition unit.

5. The management system according to claim 1, wherein: The determining unit calculates a statistic based on the first data of the specific period acquired by the acquiring unit, If the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability higher than the current first reliability is smaller than the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability lower than the current first reliability, the first reliability is increased.

6. The management system according to claim 2, wherein: The determining unit calculates a statistic based on the first data of the specific period acquired by the acquiring unit, If the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability higher than the current first reliability is smaller than the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability lower than the current first reliability, the first reliability is increased.

7. The management system according to claim 3, wherein: The determining unit calculates a statistic based on the first data of the specific period acquired by the acquiring unit, If the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability higher than the current first reliability is smaller than the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability lower than the current first reliability, the first reliability is increased.

8. The management system according to claim 4, wherein: The determining unit calculates a statistic based on the first data of the specific period acquired by the acquiring unit, If the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability higher than the current first reliability is smaller than the difference between the statistics in the latest period and the statistics in the past period that obtained a first reliability lower than the current first reliability, the first reliability is increased.

9. The management system according to any one of claims 1 to 8, wherein: The acquiring unit acquires second data related to a program installed in the autonomous mobile object as internal data of the autonomous mobile object. The determination unit determines a second reliability based on the second data acquired by the acquisition unit, and determines the reliability of the autonomous mobile object based on the second reliability.

10. The management system according to claim 9, wherein: The second data acquired by the acquisition unit includes information indicating a signature. The determination unit lowers the second reliability if the information indicating the signature acquired by the acquisition unit is changed from pre-registered information.

11. The management system according to claim 9, wherein: The second data acquired by the acquisition unit includes information indicating date and time. The determination unit lowers the second reliability when the information indicating the date and time acquired by the acquisition unit matches information preset as fraudulent information.

12. The management system according to any one of claims 1 to 8, wherein: The acquiring unit acquires third data related to a user who executes a program installed in the autonomous mobile object as internal data of the autonomous mobile object. The determination unit determines a third reliability based on the third data acquired by the acquisition unit, and determines the reliability of the autonomous mobile object based on the third reliability.

13. The management system according to claim 9, wherein: The acquiring unit acquires third data related to a user who executes a program installed in the autonomous mobile object as internal data of the autonomous mobile object. The determination unit determines a third reliability based on the third data acquired by the acquisition unit, and determines the reliability of the autonomous mobile object based on the third reliability.

14. The management system according to claim 10, wherein: The acquiring unit acquires third data related to a user who executes a program installed in the autonomous mobile object as internal data of the autonomous mobile object. The determination unit determines a third reliability based on the third data acquired by the acquisition unit, and determines the reliability of the autonomous mobile object based on the third reliability.

15. The management system according to claim 11, wherein: The acquiring unit acquires third data related to a user who executes a program installed in the autonomous mobile object as internal data of the autonomous mobile object. The determination unit determines a third reliability based on the third data acquired by the acquisition unit, and determines the reliability of the autonomous mobile object based on the third reliability.

16. The management system according to claim 12, wherein: The third data acquired by the acquisition unit includes information indicating the user who executes the program. If the information indicating the executing user obtained by the obtaining unit has changed from the corresponding past information and the current executing user is a user belonging to a privileged group, the determining unit lowers the third reliability, wherein the privileged group is a user group to which the user belongs that has full authority over the operating system mounted on the autonomous mobile body.

17. The management system according to claim 13, wherein: The third data acquired by the acquisition unit includes information indicating the user who executes the program. If the information indicating the executing user obtained by the obtaining unit has changed from the corresponding past information and the current executing user is a user belonging to a privileged group, the determining unit lowers the third reliability, wherein the privileged group is a user group to which the user belongs that has full authority over the operating system mounted on the autonomous mobile body.

18. The management system according to claim 14, wherein: The third data acquired by the acquisition unit includes information indicating the user who executes the program. If the information indicating the executing user obtained by the obtaining unit has changed from the corresponding past information and the current executing user is a user belonging to a privileged group, the determining unit lowers the third reliability, wherein the privileged group is a user group to which the user belongs that has full authority over the operating system mounted on the autonomous mobile body.

19. The management system according to claim 15, wherein: The third data acquired by the acquisition unit includes information indicating the user who executes the program. If the information indicating the executing user obtained by the obtaining unit has changed from the corresponding past information and the current executing user is a user belonging to a privileged group, the determining unit lowers the third reliability, wherein the privileged group is a user group to which the user belongs that has full authority over the operating system mounted on the autonomous mobile body.

20. A memory storing a program, the program being configured to cause a processor to execute the following steps: an acquiring step of acquiring first data related to a communication log of an autonomous mobile object for which an authorization level is set as internal data of the autonomous mobile object; a determining step of determining the reliability of the autonomous mobile object based on the internal data obtained in the obtaining step, wherein the determining the reliability of the autonomous mobile object includes increasing or decreasing the reliability of the autonomous mobile object; and The resetting step is to re-set the approval level based on the reliability determined in the determining step.

21. The memory according to claim 20, wherein The memory stores the program for acquiring, in the acquiring step, second data related to a program installed in the autonomous mobile object as internal data of the autonomous mobile object.

22. The memory according to claim 20 or 21, wherein: The memory stores the program for acquiring, in the acquiring step, third data related to a user who executes a program installed in the autonomous mobile object as internal data of the autonomous mobile object.

Images