Equipment management system, management device, communication equipment, and equipment management method

Abstract

To provide a technique for simplifying initial settings of equipment while ensuring sufficient security.SOLUTION: An equipment management system comprises: equipment to be managed; and a management device which performs initial settings of the equipment by communicating with the equipment. The equipment includes a first storage unit which stores first equipment information identifying the equipment, and has equipment information attached thereto. The management device includes a second storage unit which can communicate with the equipment through a first communication path used by the equipment for initial settings, and a second communication path used by the equipment to acquire qualification information for starting the initial settings on the equipment, and stores second equipment information obtained by reading the attached equipment information; an authentication unit which receives the first equipment information and the qualification information from the equipment through the first communication path, and authenticates the equipment using the second equipment information in the second storage unit; and an equipment setting unit which provides the initial setting information of the equipment to the equipment when the authentication of the equipment is successful.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an equipment management system, a management device, a communication device, and an equipment management method. This application claims priority based on Japanese Patent Application No. 2020-205884 filed on December 11, 2020, and incorporates its content herein by reference.

Background Art

[0002] When starting the use of equipment, the initial settings that need to be performed first to use the equipment are called initial settings. For example, Patent Document 1 describes a method of constructing and setting a virtual environment based on an initial setting file that describes the initial setting procedure, and saving the setting file generated in the virtual environment in the storage area of the equipment as a method of initial setting.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the conventional method, for each device that performs initial settings, it was necessary to prepare an initial setting file describing the setting contents corresponding to that device. Therefore, the larger the number of target devices, the higher the work load might be. As one method of solving such problems, a method of configuring an initial setting program to obtain information necessary for initial settings from a prepared external device can be considered. In this case, an operator who performs initial settings on a target device first needs to perform communication settings so that the target device can communicate with the external device at the installation site. However, communication settings may not work well due to various factors during the implementation of the initial settings. In addition, for a device without initial settings, the security function may not function sufficiently. For these reasons, a technology that enables the initial settings of target devices to be performed safely and easily is required.

[0005] The present invention has been made in consideration of such circumstances, and one of its objectives is to provide a device management system, a management device, a communication device, and a device management method that can perform initial settings of devices more easily while ensuring sufficient security.

Means for Solving the Problems

[0006] The device management system, management device, communication device, and device management method according to this invention adopt the following configuration. (1): A device management system according to one aspect of the present invention includes a device to be managed and a management device that performs initial settings of the device through communication with the device. The management device can communicate via each of a first communication path used when the device communicates with the management device and a second communication path different from the first communication path and used when obtaining qualification information necessary for starting the initial settings in the device.

[0007] (2) In the aspect of (1) above, the first communication path includes a first communication device communicably connected to the device and the management device, and the first communication device holds information necessary for enabling the device connected to itself to communicate with the management device via itself.

[0008] (3) In the aspect of (1) or (2) above, the management device includes a device information registration unit that acquires device information including the identification information of the device from a device other than the device and records it in a first storage unit, and the device information recorded in the first storage unit is information read from an image attached to the device by image recognition processing.

[0009] (4) In the aspect of (3) above, the device includes a second storage unit in which the device information is recorded in advance, the device information registration unit acquires the device information recorded in the second storage unit from the device via the first communication path, and the management device further includes an authentication unit that authenticates the device based on the device information recorded in the first storage unit by the device information registration unit and the device information acquired from the device via the first communication path.

[0010] (5) In the aspect of (4) above, the device further includes an initial setting unit that performs the initial setting by communicating with the management device, the management device further includes a device setting unit that performs the initial setting of the device in cooperation with the initial setting unit, and the initial setting unit and the device setting unit start cooperation regarding the initial setting when the device is authenticated by the authentication unit.

[0011] (6) In the aspect of (5) above, the initial setting unit transmits the qualification information acquired from the management device via the second communication path to the management device together with the device information recorded in the second storage unit, and the authentication unit authenticates the device based on the device information received from the device, the device information recorded in the first storage unit, and the qualification information received from the device.

[0012] (7): In the aspects (3) to (6) above, the second communication path includes a second communication device communicably connected to the management device.

[0013] (8): In the aspect (7) above, the management device further includes an authentication information issuing unit that provides the authentication information to the second communication device via the second communication path.

[0014] (9): A communication device according to an aspect of the present invention is a communication device that performs its initial settings by communicating with a management device, and includes an initial setting unit that performs the initial settings of the communication device in cooperation with the management device through communication via a first communication path, a storage unit that stores device information including identification information of the communication device, an input unit that receives input of authentication information obtained via a second communication path and required for starting the initial settings, an authentication unit that requests authentication of the communication device to the management device in response to the input of the authentication information, and an initial setting unit that starts cooperation regarding the initial settings with the management device when the communication device is authenticated by the management device.

[0015] (10): A management device according to an aspect of the present invention is a management device that performs initial settings of a communication device by communicating with the communication device, and includes a device setting unit that performs the initial settings of the communication device in cooperation with the communication device through communication via a first communication path, a device information registration unit that acquires device information including identification information of the communication device from a device other than the communication device and records it in a storage unit, an authentication information issuing unit that issues authentication information required for the communication device to start the initial settings via a second communication path, and an authentication unit that authenticates the communication device based on the first device information pre-stored in the communication device, the authentication information input to the communication device, and second device information registered by the device information registration unit. When the communication device is authenticated by the authentication unit, the device setting unit starts cooperation regarding the initial settings with the communication device.

[0016] (11): The device management method according to one aspect of the present invention is a device management method in which a management device and a device to be managed by the management device perform communication related to initial settings of the device via a first communication path, and the management device provides qualification information required for starting the initial settings in the device via a second communication path different from the first communication path.

Advantages of the Invention

[0017] (1)-(11) According to the present invention, a management device and a device to be managed by the management device perform communication related to initial settings of the device via a first communication path, and the management device provides qualification information required for starting the initial settings in the device via a second communication path different from the first communication path, thereby enabling easier initial settings of the device while ensuring high security.

Brief Description of the Drawings

[0018]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Best Mode for Carrying Out the Invention

[0019] Hereinafter, embodiments of the device management system, management device, communication device, and device management method of the present invention will be described with reference to the drawings.

[0020] FIG. 1 is a system configuration diagram showing a configuration example of a device management system 100 according to this embodiment. The device management system 100 is a management system for information regarding initial settings performed on a battery replacement machine 600, which is an example of a device to be managed. The initial setting is to perform basic settings on a device in the state after factory shipment to make the device usable. The device management system 100 includes an SP terminal 200, a code reader 210, an FW terminal 300, a router 400, a management server 500, and a battery replacement machine 600. The SP terminal 200 is a terminal device used by a service provider (SP: Service Provider) who uses the battery replacement machine 600. The code reader 210 is a device that reads encoded information such as barcodes and two-dimensional codes attached to the battery replacement machine 600 in the factory shipment state. The code reader 210 can be connected to the SP terminal 200, decrypt the read encoded information, and supply the information obtained by decryption to the SP terminal 200. That is, the code reader 210 can read device information from an image attached to the battery replacement machine 600 through image recognition processing.

[0021] The FW terminal 300 is a terminal device used by a field worker (FW: Field Worker) who performs initial settings on the battery replacement machine 600. The router 400 is a router that communicably connects the battery replacement machine 600 to the management server 500. The battery replacement machine 600 is a device that replaces a used battery with a fully charged battery. When a used battery is inserted, the battery replacement machine 600 discharges a fully charged battery and charges the inserted battery. The battery replacement machine 600 is an example of a device to be managed by the device management system 100 of this embodiment.

[0022] Here, the SP terminal 200 is communicably connected to the management server 500 via the network NW1. For example, the network NW1 is a WAN (Wide Area Network) including a public network such as a cellular network or the Internet. The SP terminal 200 may be connected to the network NW1 by wired communication or may be connected to the network NW1 by wireless communication. Instead of the network NW1, the SP terminal 200 may be communicably connected to the management server 500 via the network NW2. For example, the network NW2 is a WAN configured using a closed network such as a wide area Ethernet or a dedicated line. It can be said that the network NW2 is a network with higher security than the network NW1. The FW terminal 300 is communicably connected to the management server 500 via the network NW1. The FW terminal 300 is connected to the network NW1 by wireless communication.

[0023] The router 400 is connected to the network NW2 and is communicably connected to the management server 500 via the network NW2. Also, the router 400 is communicably connected to the battery charger 600. The router 400 relays communication between the management server 500 and the battery charger 600. Note that the router 400 may be a wireless router. For example, it may function as a wireless LAN access point based on a wireless LAN (Local Area Network) standard such as Wi-Fi (registered trademark, the same applies hereinafter), and may be configured to accommodate the battery charger 600 as a wireless LAN client.

[0024] The management server 500 is communicably connected to the router 400 via the network NW2. The management server 500 may be connected to NW2 by wired communication or may be connected to the network NW2 by wireless communication. The management server 500 is communicably connected to the battery charger 600 via the router 400. On the other hand, the management server 500 is communicably connected to the SP terminal 200 and the FW terminal 300 via the network NW1. The management server 500 may be connected to the network NW1 by wired communication or may be connected to the network NW1 by wireless communication.

[0025] The battery exchanger 600 is communicably connected to the router 400. The battery exchanger 600 and the management server 500 may be connected by wired communication or wireless communication.

[0026] As described above, the device management system 100 of the embodiment includes a battery exchanger 600 to be managed, a management server 500 that performs initial settings of the battery exchanger 600 by communicating with the battery exchanger 600, a first communication path used when the battery exchanger 600 communicates with the management server 500, and a second communication path that is different from the first communication path and is used when the battery exchanger 600 acquires qualification information necessary for starting the initial settings. The first communication path is a path through which the management server 500 and the battery exchanger 600 communicate via the network NW2. The second communication path is a path through which the FW terminal 300 and the management server 500 communicate via the network NW1.

[0027] The functional configurations of the respective devices included in the device management system 100 will be described in detail below. First, the configuration of the FW terminal 300 will be described. The FW terminal 300 includes a wireless communication unit 310, an input unit 320, a display unit 330, a storage unit 340, and a control unit 350. Among these components, the control unit 350 is realized, for example, by a hardware processor such as a CPU (Central Processing Unit) executing a program (software). Some or all of these components may be realized by hardware (including a circuit unit; circuitry) such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a GPU (Graphics Processing Unit), or may be realized by the cooperation of software and hardware. The program may be stored in advance in a storage device (a storage device having a non-transitory storage medium) such as an HDD (Hard Disk Drive) or a flash memory, or may be stored in a removable storage medium (a non-transitory storage medium) such as a DVD or a CD-ROM, and may be installed by mounting the storage medium on a drive device.

[0028] The wireless communication unit 310 is a wireless communication interface that wirelessly connects the FW terminal 300 to the network NW1. For example, the wireless communication unit 310 is configured using a wireless LAN interface connectable to the network NW1. The wireless communication unit 310 is communicably connected to the management server 500 via the network NW1.

[0029] The input unit 320 is configured using input devices such as buttons, switches, keyboards, mice, touch panels, etc. The input unit 320 receives input of operations on the FW terminal 300. The input unit 320 outputs input information indicating the content of the received operation input to the control unit 350.

[0030] The display unit 330 is configured using a display device such as a liquid crystal display, an organic EL display, or a touch panel. The display unit 330 can display arbitrary information based on an instruction from the control unit 350.

[0031] The storage unit 340 is configured using a storage device such as an HDD or a flash memory. In the storage unit 340, in addition to the data of the program executed by the FW terminal 300 and the communication data transmitted and received with other devices, various types of information related to the operation of the FW terminal 300 are stored.

[0032] The control unit 350 has a function of inputting and outputting information between the wireless communication unit 310, the input unit 320, the display unit 330, and the storage unit 340, and controlling the operation of the FW terminal 300. Here, the control function of the control unit 350 includes a function of acquiring a one-time password (hereinafter sometimes abbreviated as "OTPW") from the management server 500. As a configuration for realizing this function, the control unit 350 includes, for example, an OTPW acquisition unit 351.

[0033] The OTPW acquisition unit 351 requests the management server 500 to issue a one-time password, and acquires the one-time password from the management server 500 as a response to the request. When the one-time password is issued by the management server 500, the OTPW acquisition unit 351 causes the display unit 330 to display the acquired one-time password. For example, the OTPW acquisition unit 351 is realized by an application for on-site workers (hereinafter referred to as the "OTPW app"). For example, the OTPW app is activated when an on-site worker operates the FW terminal 300, and causes the display unit 330 to display an input screen for information (for example, the ID and password of the on-site worker, etc.) necessary for issuing the one-time password. The OTPW app transmits a request for issuing a one-time password to the management server 500 together with the information input on the input screen. When the one-time password is normally issued, the OTPW app notifies the on-site worker of the issued one-time password by causing the display unit 330 to display a display screen of the issued one-time password.

[0034] Next, the configuration of the router 400 will be described. The router 400 includes a first communication unit 411, a second communication unit 412, an input unit 420, a display unit 430, a storage unit 440, and a control unit 450. Among these components, the control unit 450 is realized, for example, by a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including a circuit unit; circuitry) such as an LSI, ASIC, FPGA, or GPU, or may be realized by the cooperation of software and hardware. The program may be stored in advance in a storage device (a storage device having a non-transitory storage medium) such as an HDD or a flash memory, or may be stored in a removable storage medium (a non-transitory storage medium) such as a DVD or a CD-ROM, and may be installed by mounting the storage medium on a drive device.

[0035] The first communication unit 411 is a communication interface for connecting the router 400 to the network NW2. For example, the first communication unit 411 is configured using a LAN interface connectable to the network NW2. The first communication unit 411 is communicably connected to the management server 500 via the network NW2. Note that the first communication unit 411 may be a wireless communication interface that connects the router 400 to the network NW2 via wireless communication.

[0036] The second communication unit 412 is a communication interface for connecting the router 400 to the battery exchanger 600. For example, the second communication unit 412 is configured using a LAN interface connectable to the network NW2. The second communication unit 412 may be configured to accept a connection request from a pre-registered battery exchanger 600. Note that the second communication unit 412 may be a wireless communication interface that connects the router 400 to the battery exchanger 600 via wireless communication.

[0037] The input unit 420 is configured using an input device such as buttons, switches, keyboards, mice, touch panels, etc. The input unit 420 receives an input of an operation on the router 400. The input unit 420 outputs input information indicating the content of the received operation input to the control unit 450.

[0038] The display unit 430 is configured using a display device such as a liquid crystal display, an organic EL display, a touch panel, etc. The display unit 430 can display arbitrary information based on an instruction from the control unit 450.

[0039] The storage unit 440 is configured using a storage device such as an HDD or a flash memory. In the storage unit 440, in addition to program data executed by the router 400 and communication data transmitted and received with other devices, various types of information related to the operation of the router 400 are stored.

[0040] The control unit 450 has a function of inputting and outputting information to and from the first communication unit 411, the second communication unit 412, the input unit 420, the display unit 430, and the storage unit 440, and controlling the operation of the router 400. Here, the control function of the control unit 450 includes a function as a router that relays communication and a function of connecting the battery exchanger 600 and the router 400 so that the battery exchanger 600 can communicate with the management server 500. As a configuration for realizing these functions, the control unit 450 includes, for example, a connection control unit 451 and a relay processing unit 452.

[0041] The connection control unit 451 has a function of connecting the battery replacement machine 600 to the router 400 so that the battery replacement machine 600 can communicate with the management server 500. Here, it is assumed that the battery replacement machine 600 in the state at the time of factory shipment has not been set (hereinafter referred to as "management communication setting") for communication necessary for initial setting with the management server 500, and information for performing the management communication setting is not stored either. This is for the purpose of suppressing the product supply cost by having the on-site worker perform the setting that may vary depending on the usage environment as the initial setting, and the device management system 100 of the present embodiment supports the on-site worker in performing the initial setting. Here, considering that the circumstances of the country or region where the battery replacement machine 600 is used can vary widely, the management server 500 may also need to be provided in consideration of the events for each of those countries or regions. Therefore, in the device management system 100 of the present embodiment, the management communication setting is also performed locally as part of the initial setting. The connection control unit 451 connects the battery replacement machine 600 to the router 400 while performing such management communication setting, and it is assumed that the information necessary for the management communication setting is stored in the storage unit 440 in advance.

[0042] For example, the connection control unit 451 may be configured to set a DNS (Domain Name System) server capable of name resolution of the management server 500 in the battery replacement machine 600 when connecting the router 400 and the battery replacement machine 600. In this case, the DNS server may be the router 400 or another device capable of communicating with the router 400. Also, for example, the connection control unit 451 may be configured to notify the battery replacement machine 600 of the address information of the management server 500 when connecting the router 400 and the battery replacement machine 600. By performing such management communication setting, the battery replacement machine 600 is connected to the router 400 in a state where it can communicate with the management server 500. That is, the router 400 holds the information necessary for enabling the battery replacement machine 600 connected to itself to communicate with the management server 500 via itself.

[0043] The relay processing unit 452 has a function of relaying communication between the battery replacement machine 600 connected to the router 400 and the management server 500. This function may be equivalent to the relay function of a conventional router.

[0044] Note that the router 400 is used for performing initial settings for the battery replacement machine 600, is prepared prior to the implementation of the on-site initial setting work, and is handed over to on-site workers. The on-site workers go to the site with the handed-over router 400 and turn on the power of the router 400 and the battery replacement machine 600 when they arrive at the site. The battery replacement machine 600 attempts to connect to the router 400 during the startup process after power-on, and is connected to the router 400 in a state where it can communicate with the management server 500 by the above function of the connection control unit 451.

[0045] Subsequently, the configuration of the management server 500 will be described. The management server 500 is an example of the management device in the present invention. For example, the management server 500 includes a first communication unit 511, a second communication unit 512, a storage unit 540, and a control unit 550. Among these components, the control unit 550 is realized, for example, by a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including a circuit unit; circuitry) such as an LSI, an ASIC, an FPGA, or a GPU, or may be realized by the cooperation of software and hardware. The program may be stored in advance in a storage device (a storage device including a non-transitory storage medium) such as an HDD or a flash memory, or may be stored in a removable storage medium (a non-transitory storage medium) such as a DVD or a CD-ROM, and may be installed by mounting the storage medium on a drive device.

[0046] The first communication unit 511 is a communication interface that connects the management server 500 to the network NW2. For example, the first communication unit 511 is configured using a wired communication interface connectable to the network NW2. The first communication unit 511 is communicably connected to the router 400 via the network NW2. Note that the first communication unit 511 may be a wireless communication interface that connects the management server 500 to the network NW2 via wireless communication.

[0047] The second communication unit 512 is a communication interface that connects the management server 500 to the network NW1. For example, the second communication unit 512 is configured using a wired communication interface connectable to the network NW1. The second communication unit 512 is communicably connected to the SP terminal 200 and the FW terminal 300 via the network NW1. Note that the second communication unit 512 may be a wireless communication interface that connects the management server 500 to the network NW1 via wireless communication.

[0048] The storage unit 540 is configured using a storage device such as an HDD or a flash memory. In the storage unit 540, in addition to the data of the program executed by the management server 500 and the communication data transmitted and received between the management server 500 and other devices, various types of information related to the operation of the management server 500 are stored.

[0049] The control unit 550 has a function of inputting and outputting information to and from the first communication unit 511, the second communication unit 512, and the storage unit 540, and controlling the operation of the management server 500. Here, the control functions of the control unit 550 include a function of registering device information provided from the SP terminal 200, a function of issuing a one-time password, a function of authenticating the battery replacement machine 600 that starts the initial setting, and a function of executing processing related to the initial setting of the battery replacement machine 600. As a configuration for realizing these functions, the control unit 550 includes, for example, a device information registration unit 551, an OTPW issuing unit 552, a device authentication unit 553, and a device setting unit 554.

[0050] The device information registration unit 551 has a function of registering the device information provided from the SP terminal 200 in the storage unit 540. The device information is information that enables identification of the battery replacement machine 600. The device information provided from the SP terminal 200 is information read using the code reader 210. The factory-shipped battery replacement machine 600 is attached with device information.

[0051] For example, the manufacturer of the battery replacement machine 600 displays device information encoded in a barcode, a two-dimensional code, etc. on a box for packing the battery replacement machine 600 and ships the battery replacement machine 600 to the service provider. The service provider acquires the device information by reading the code displayed on the delivered goods using the code reader 210, and transmits the acquired device information to the management server 500 via the SP terminal 200. The device information registration unit 551 registers the device information received from the SP terminal 200 in the storage unit 540. Note that the device information provided from the SP terminal 200 is an example of the second device information in the present invention.

[0052] The OTPW issuing unit 552 has a function of issuing a one-time password. Specifically, the OTPW issuing unit 552 issues a one-time password in response to an issuing request from the FW terminal 300 and manages the issued one-time password to be valid for a predetermined period.

[0053] The device authentication unit 553 has a function of authenticating the battery replacement device 600. Specifically, when the device authentication unit 553 receives an authentication request from the battery replacement device 600, it attempts to authenticate the source battery replacement device 600 based on the device information and the one-time password provided together with the authentication request. Here, the device information provided by the battery replacement device 600 is pre-recorded in the storage unit 640 at the time of shipment of the battery replacement device 600, and the one-time password is obtained by the on-site worker who performs the initial setting of the battery replacement device 600 from the management server 500 using the FW terminal 300. For example, when it is determined that the source battery replacement device 600 of the device information is pre-registered in the management server 500 and the provided one-time password is valid, the device authentication unit 553 authenticates the source battery replacement device 600. The device authentication unit 553 notifies the source battery replacement device 600 of the authentication result.

[0054] The device setting unit 554 has a function of executing processing related to the initial setting of the battery replacement device 600 (hereinafter referred to as "initial setting processing"). Specifically, by executing the initial setting processing, the device setting unit 554 reads out the initial setting information pre-registered in the management server 500 from the storage unit 540 and provides the read initial setting information to the battery replacement device 600. The initial setting information is information necessary for the initial setting of the battery replacement device 600 and includes the setting values of various setting items to be set in the battery replacement device 600 in the initial setting. For example, in the present embodiment, the device setting unit 554 cooperates with the initial setting unit 653 of the battery replacement device 600 to perform a predetermined procedure, and exchanges the necessary setting information in each procedure, so as to provide the battery replacement device 600 with one initial setting information as a whole procedure.

[0055] Note that such a method for providing initial setting information is merely an example, and the method for providing initial setting information in the present invention is not limited thereto. For example, the initial setting may be configured as a process that the battery exchanger 600 performs alone based on the initial setting information. In such a case, the initial setting information may be provided from the management server 500 to the battery exchanger 600 by one transmission and reception. In the battery exchanger 600, the initial setting is completed by registering the initial setting information provided from the management server 500 in this way.

[0056] Subsequently, the configuration of the battery exchanger 600 will be described. The battery exchanger 600 includes a charger 601, a drive unit 602, a power supply unit 603, a communication unit 610, an input unit 620, a display unit 630, a storage unit 640, and a control unit 650. Among these components, the control unit 650 is realized, for example, by a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including a circuit unit; circuitry) such as an LSI, an ASIC, an FPGA, or a GPU, or may be realized by the cooperation of software and hardware. The program may be stored in advance in a storage device (a storage device having a non-transitory storage medium) such as an HDD or a flash memory, or may be stored in a removable storage medium (a non-transitory storage medium) such as a DVD or a CD-ROM, and may be installed by mounting the storage medium on a drive device.

[0057] The charger 601 is a charger that charges the battery inserted into the battery exchanger 600. The charger 501 charges the battery inserted into the battery exchanger 600 as an exchange target using the power supplied by the power supply unit 603.

[0058] The drive unit 602 is a functional unit that realizes the physical operations related to the charging of the battery, and is composed of a combination of various structural members and electronic components. For example, the drive unit 602 includes structural members (not shown) such as doors and pedestals that constitute the battery insertion and removal parts. Also, for example, the drive unit 602 includes components (not shown) such as motors, gears, and shafts that realize the opening and closing of the door and the movement of the battery inside the battery exchanger 600. By the operation of the drive unit 602, the battery exchanger 600 can collect the battery to be exchanged into the device and discharge the charged battery outside the device in place of the collected battery. Also, by the operation of the drive unit 602, the battery exchanger 600 can connect the battery collected in the device to the charger 601 and remove the battery that has completed charging from the charger 601.

[0059] The power supply unit 603 is a functional unit that supplies driving power to the battery exchanger 600. For example, the power supply unit 603 may be an internal battery, or may be a power supply circuit that inputs the power supplied by an external power source. The internal battery may be a battery or a generator.

[0060] The communication unit 610 is a communication interface that connects the battery exchanger 600 to the router 400. Note that the communication unit 610 has its management communication settings made when establishing a connection with the router 400 by the function of the connection control unit 451 of the router 400. Thereby, after the communication unit 610 establishes a connection with the router 400, communication with the management server 500 becomes possible. Note that the communication unit 610 may be a wireless communication interface that connects the battery exchanger 600 to the router 400 via wireless communication.

[0061] The input unit 620 is configured using input devices such as buttons, switches, keyboards, mice, and touch panels. The input unit 620 receives the input of operations on the battery exchanger 600. The input unit 620 outputs input information indicating the content of the received operation input to the control unit 650.

[0062] The display unit 630 is configured using a display device such as a liquid crystal display, an organic EL display, or a touch panel. The display unit 630 can display arbitrary information based on an instruction from the control unit 650.

[0063] The storage unit 640 is configured using a storage device such as an HDD or a flash memory. The storage unit 640 stores data of programs executed by the battery exchanger 600, communication data transmitted and received with other devices, and various types of information related to the operation of the battery exchanger 600.

[0064] The control unit 650 has a function of inputting and outputting information to and from the communication unit 610, the input unit 620, the display unit 630, and the storage unit 640, and controlling the operation of the battery exchanger 600. Here, the control function of the control unit 650 includes a function of controlling various physical operations related to battery charging and replacement, a function of authenticating the implementation of initial settings for the battery exchanger 600, and a function of performing initial settings for the battery exchanger 600. As a configuration for realizing these functions, the control unit 650 includes, for example, a drive control unit 651, an authentication unit 652, and an initial setting unit 653.

[0065] The drive control unit 651 has a function of controlling various physical operations related to battery charging and replacement. For example, the drive control unit 651 causes the drive unit 602 to perform a predetermined operation in response to an operation of inserting the battery to be replaced, thereby recovering the battery to be replaced into the device of the battery exchanger 600 and discharging a fully charged battery outside the device instead of the recovered battery. Also, for example, the drive control unit 651 can start charging the battery by causing the drive unit 602 to perform an operation of connecting the newly recovered battery to the charger 601. Also, for example, the drive control unit 651 may cause the drive unit 602 to perform an operation of removing the fully charged battery from the charger 601.

[0066] The authentication unit 652 has a function of authenticating the execution of the initial settings for the battery replacement machine 600. Specifically, the authentication unit 652 requests the management server 500 to authenticate the execution of the initial settings, and causes the initial setting unit 653 to start the initial setting process when the authentication is successful.

[0067] When the execution of the initial settings is authenticated by the authentication unit 652, the initial setting unit 653 executes the initial setting process of the battery replacement machine 600 in cooperation with the device setting unit 554 of the management server 500. In the initial setting process, the initial setting unit 653 registers the setting values of various setting items supplied from the management server 500 in the battery replacement machine 600 in the communication of each procedure performed with the management server 500. The initial setting unit 653 completes the initial settings of the battery replacement machine 600 by registering the setting values for all essential items.

[0068] FIG. 2 is a sequence diagram showing an example of the flow of the process in which the device management system 100 of the present embodiment performs the initial settings of the battery replacement machine 600. Further, FIG. 3 is an image diagram showing an outline of the flow of operations from when the battery replacement machine 600 is shipped from the factory until it is delivered to the operation site (hereinafter simply referred to as "the site") and the initial settings are performed at the site. Hereinafter, the flow of the process in FIG. 2 will be described with appropriate reference to the image diagram in FIG. 3.

[0069] First, at the time of factory shipment in FIG. 3, the battery replacement machine 600 is not set assuming a specific country, operator, etc. The battery replacement machine 600 is shipped from the factory with common settings for the whole world. Since the information necessary for connecting to the management server 500 (for example, the client certificate for connecting to the management server 500) is not registered in the battery replacement machine 600 in this state, even if the power is turned on in this state, the battery replacement machine 600 cannot access the management server 500 and thus cannot be used.

[0070] On the one hand, the battery exchanger 600 stores in advance in the storage unit 640 device information that can identify itself, and encoded information indicating this device information is attached in a readable manner and shipped from the factory. For example, the encoded information is described on the surface of a seal P attached to a predetermined position L on the surface of a box material B that packages the battery exchanger 600. In FIG. 3, the fact that the same mark as the encoded information M displayed on the seal P is described in the storage unit 640 of the battery exchanger 600 indicates that the device information M is registered in advance in the storage unit 640 of the battery exchanger 600. The device information registered in advance in the storage unit 640 of the battery exchanger 600 is an example of the first device information in the present invention.

[0071] Next, the battery exchanger 600 shipped from the factory is delivered to, for example, the business office of a service provider. The service provider reads the encoded information attached to the shipped battery exchanger 600 with a code reader 210 (step S101), and transmits the read device information to the management server 500 via the SP terminal 200 (step S102). The management server 500 receives the device information transmitted by the SP terminal 200 and registers the received device information in the storage unit 540 (step S103). Note that the processing up to this point is performed before the on-site worker FW starts working on-site.

[0072] FIG. 4 is a diagram showing an example of device information in the present embodiment. For example, the device information is stored in the storage unit 540 of the management server 500 as a device information table T1 composed of one or more records having respective values such as a device ID, a device name, a model number, a shipping date, a shipping origin, and a shipping destination. Here, the device ID represents the identification information of the battery exchanger 600 to be registered. When the registration of the device information is completed, the service provider delivers the battery exchanger 600 shipped from the factory to the site. When the battery exchanger 600 is delivered to the site, the service provider dispatches an on-site worker FW to the site. The on-site worker FW goes to the site with the FW terminal 300 and performs preparatory work for initial setting on the battery exchanger 600 delivered to the site.

[0073] First, for example, on-site worker FW unpacks the battery exchanger 600, connects the battery exchanger 600 to the local power supply, and turns on the power (step S104). In the battery exchanger 600, in the startup process after power-on, the communication unit 610 performs connection processing with the router 400 (step S105), and at the same time, the authentication unit 652 causes the display unit 630 to display a password input screen for requesting the input of a one-time password (step S106). Note that in step S105, when the connection processing with the router 400 is completed, the battery exchanger 600 becomes communicable with the management server 500. This is, for example, due to the following management communication settings being made.

[0074] FIG. 5 is a diagram showing an example of setting information regarding communication with the management server 500 set in the battery exchanger 600 at the time of factory shipment. The network ID is identification information of the network provided by the router 400 installed locally, and the connection password is a password for connecting to that network. The management server name represents the name of the management server 500 on the network. When the battery exchanger 600 is not connected to the router 400, it cannot communicate with the management server 500 because it cannot resolve the name of the management server. However, it becomes possible to communicate with the management server 500 by making management communication settings when connecting to the router 400. Specifically, in the example of FIG. 5, by setting a default gateway and a DNS server that can resolve the management server name for the battery exchanger 600, the battery exchanger 600 can communicate with the management server 500.

[0075] On the one hand, the on-site worker FW inputs an operation to obtain a one-time password for the FW terminal 300. In response to this operation input, in the FW terminal 300, the OTPW acquisition unit 351 requests the management server 500 to issue a one-time password (step S107). In the management server 500, the OTPW issuing unit 552 issues a one-time password to the FW terminal 300 (step S108). At this time, the OTPW issuing unit 552 manages the issued one-time password so that it is valid for a predetermined period.

[0076] FIG. 6 is a diagram showing an example of the management of a one-time password in the present embodiment. For example, the one-time password is stored in the storage unit 540 of the management server 500 as a password management table T2 composed of one or more records having the values of the worker ID, password, and issue date and time. Here, the worker ID represents the identification information of the on-site worker who requested the issuance of the one-time password. The password represents the character string of the issued one-time password, and the issue date and time represents the date and time when the one-time password was issued. In the FW terminal 300, the OTPW acquisition unit 351 causes the display unit 330 to display the one-time password issued from the management server 500 (step S109). The on-site worker FW visually confirms the one-time password displayed on the display unit 330 and inputs it into the password input screen displayed on the battery replacement machine 600.

[0077] On the other hand, in the battery replacement machine 600, the input unit 620 receives an input operation of the one-time password (step S110) and outputs the input information (hereinafter referred to as "password information") to the authentication unit 652. The authentication unit 652 generates authentication information based on the input password information and the device information registered in advance in the storage unit 640 (step S111). The authentication information is information for requesting authentication for the implementation of the initial setting to the management server 500, and is information including the password information and the device information. The authentication unit 652 requests authentication from the management server 500 by transmitting the generated authentication information to the management server 500 (step S112).

[0078] Subsequently, in the management server 500, the device authentication unit 553 executes an authentication process to attempt to authenticate the requesting battery replacement device 600 based on the authentication information received from the battery replacement device 600 (step S113). For example, based on the password information included in the authentication information, the device authentication unit 553 determines whether the password entered by the on-site worker is a valid one-time password registered in the management server 500, and also determines whether the device information included in the authentication information is registered in the management server 500. When it is determined that both of these two determination results are true, the device authentication unit 553 authenticates the requesting battery replacement device 600. The device authentication unit 553 determines whether the authentication of the battery replacement device 600 has been successful (step S114). Here, if it is determined that the authentication of the battery replacement device 600 has failed, the device authentication unit 553 performs predetermined error processing and ends the series of processes (step S115). In this case, the initial settings are not performed on the battery replacement device 600.

[0079] On the other hand, in step S114, if it is determined that the authentication of the battery replacement device 600 has been successful, the device authentication unit 553 notifies the battery replacement device 600 to that effect (step S116: initial setting start notification), and instructs the device setting unit 554 to execute the initial setting process for the battery replacement device 600. The initial setting unit 653 of the battery replacement device 600 that has received the initial setting start notification starts cooperation with the device setting unit 554 of the management server 500 and executes the initial setting process (step S117). In FIG. 2, the initial setting process on the battery replacement device 600 side is represented by step S117-1, and the initial setting process on the management server 500 side is represented by step S117-2.

[0080] FIG. 7 is a diagram showing an example of initial setting information in the present embodiment. For example, the initial setting information is stored in the storage unit 540 of the management server 500 as an initial setting table T3 composed of one or more records having a model number and values of setting information for each item. For example, in the example of FIG. 7, the device setting unit 554 identifies the initial setting information to be set according to the model number of the battery replacement machine 600 for which the initial setting is to be performed. For example, when the procedures to be executed in the initial setting process correspond to each item, the initial setting unit 653 inquires of the device setting unit 554 about the value of the initial setting to be set for each procedure to be performed, and the device setting unit 554 responds to the initial setting unit 653 with the value set for the item corresponding to the procedure being executed. By repeating such inquiries and responses to execute all the procedures, the initial setting unit 653 completes the initial setting for the battery replacement machine 600.

[0081] In the device management system 100 of the embodiment configured as described above, the FW terminal 300 acquires a one-time password from the management server 500, and the battery replacement machine 600 receives authentication from the management server 500 based on the acquired one-time password and the device information stored in advance. Also, in the device management system 100 of the embodiment, the battery replacement machine 600 does not store in advance the setting information for communicating with the management server 500, and is configured to be able to communicate with the management server 500 by connecting to the router 400 on-site. Also, in the device management system 100 of the embodiment, the device information stored in advance in the battery replacement machine 600 has been registered in the management server 500 before the battery replacement machine 600 is delivered on-site. By having such a configuration, the device management system 100 of the embodiment can more easily perform the initial setting of the device while ensuring sufficient security.

[0082] Note that in the above embodiment, the router 400 is an example of the first communication device in the present invention, and the FW terminal 300 is an example of the second communication device in the present invention. Further, the OTPW issuing unit 552 is an example of the qualification information issuing unit in the present invention. Also, the storage unit 540 of the management server 500 is an example of the first storage unit in the present invention. Further, the storage unit 640 of the battery exchanger 600 is an example of the second storage unit in the present invention.

[0083] As described above, the embodiments for implementing the present invention have been described using the embodiments. However, the present invention is not limited to such embodiments, and various modifications and substitutions can be made without departing from the gist of the present invention.

Explanation of Reference Numerals

[0084] 100... Device management system, 200... SP (Service Provider) terminal, 210... Code reader, 300... FW (Field Worker) terminal, 310... Wireless communication unit, 320... Input unit, 330... Display unit, 340... Storage unit, 350... Control unit, 351... OTPW (One-time Password) acquisition unit, 400... Router, 411... First communication unit, 412... Second communication unit, 420... Input unit, 430... Display unit, 440... Storage unit, 450... Control unit, 451... Connection control unit, 452... Relay processing unit, 500... Management server, 501... Charger, 511... First communication unit, 512... Second communication unit, 540... Storage unit, 550... Control unit, 551... Device information registration unit, 552... OTPW issuing unit, 553... Device authentication unit, 554... Device setting unit, 600... Battery exchanger, 601... Charger, 602... Driving unit, 603... Power supply unit, 610... Communication unit, 620... Input unit, 630... Display unit, 640... Storage unit, 650... Control unit, 651... Driving control unit, 652... Authentication unit, 653... Initial setting unit

Claims

[Claim 1] The devices to be managed, a management device that performs initial settings of the device through communication with the device; An equipment management system comprising: The device has a first storage unit that stores first device information that is device information that can identify the device, and the device information is readably attached to the device or a box that packs the device, The management device includes: a first communication path that is a communication path used when the device communicates with the management device to execute processing related to the initial setting; a second communication path used when the device acquires qualification information required to start the initial setting in the device, the second communication path being different from the first communication path; and a second storage unit configured to store second device information obtained by reading the device information attached to the device or a box or the like that packs the device; an authentication unit that receives the first device information from the device via the first communication path and the qualification information acquired via the second communication path, and authenticates the device using the second device information stored in the second storage unit; a device setting unit that provides, when the authentication unit has succeeded in authenticating the device, initial setting information that is information regarding the initial setting of the device to the device; having Equipment management system.

Images