Data management system and disclosure server, and methods and programs used therein

Abstract

To provide a data management system that ensures non-falsifiability for a disclosed index indicating a state of a battery, while concealing information for calculating an index indicating a state of the battery, a disclosure server, method and program.SOLUTION: In a data management system 1, a data management device of a data management server 100 stores, when acquiring battery information form a vehicle 40, the battery information on a storage apparatus 18, and transmits transaction data including a hash value of the battery information to a blockchain network NW1. The data management apparatus 10A transmits the battery information to an arithmetic device 20. The arithmetic device 20 updates arithmetic information 26 using the battery information, and calculates SOH of the battery 45 from the updated arithmetic information 26 and an arithmetic equation 27. The arithmetic device 20 transmits output information 36 including the SOH and a battery ID of the battery 45 to a disclosure server 30.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a data management system and disclosure server that manage data using distributed ledger technology, as well as methods and programs used therein. [Background technology]

[0002] International Publication No. 2021 / 064818 (Patent Document 1) discloses an exchange battery system including a management server, a battery station, and an electric motorcycle powered by a battery. In this exchange battery system, a battery that is fully charged in the battery station is loaned to the user of the electric motorcycle. The management server records the charging and discharging of the battery and the value generated by the battery in one charging and discharging cycle in the blockchain network. The management server calculates the value that the battery will generate in the future from the charging and discharging record and the value generated by the battery in one charging and discharging cycle. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2021 / 064818 [Patent Document 2] JP 2019-192630 A Summary of the Invention [Problem to be solved by the invention]

[0004] Incidentally, disclosure of an index indicating the state of a battery may be required by laws and regulations, etc. Here, a party that is required to disclose the index indicating the state of a battery (for example, an automobile manufacturer that provides a vehicle equipped with a battery) desires to conceal information used to calculate the index (the calculation formula and / or the original data used for the calculation) when disclosing the index.

[0005] However, when only the indicators indicating the battery state are disclosed, it is difficult to prove that the disclosed indicators indicating the battery state are appropriate and have not been tampered with, etc. It is desirable to establish a method that can guarantee the non-tampering of the disclosed indicators indicating the battery state while concealing the information for calculating the indicators indicating the battery state (the calculation formula and / or the original data for the calculation).

[0006] The present disclosure has been made to solve the above-mentioned problems, and a purpose of the present disclosure is to ensure that, when disclosing an indicator indicating the state of a battery, the disclosed indicator indicating the state of a battery cannot be tampered with while keeping information for calculating the indicator indicating the state of the battery confidential. [Means for solving the problem]

[0007] (1) A data management system according to an aspect of the present disclosure is a data management system that provides an index indicating a battery state to a disclosure server that discloses the index. The data management system includes a data management device that acquires battery data and stores transaction data including information related to the acquired battery data in a distributed ledger, and a calculation device that acquires the battery data from the data management device and calculates the index using the battery data and a predetermined calculation formula. The calculation device provides the index to the disclosure server.

[0008] According to the above configuration, an indicator indicating the battery state is provided from the calculation device to the disclosure server. Since the battery data and the predetermined arithmetic expression, which are information for calculating the indicator indicating the battery state, are not provided to the disclosure server, the battery data and the predetermined arithmetic expression can be kept secret from the disclosure server. In addition, for example, if the indicator indicating the battery state to be disclosed and either one of the battery data and the predetermined arithmetic expression (for example, the battery data which is the original data for the calculation) is disclosed, the other (for example, the arithmetic expression for deriving the indicator indicating the battery state) may be guessed. By providing the disclosure server with an indicator indicating the battery state, that is, by not providing both the battery data and the predetermined arithmetic expression to the disclosure server, the information for calculating the indicator indicating the battery state can be more appropriately kept secret from the disclosure server. Furthermore, the data management device stores transaction data including information regarding the battery data in the distributed ledger. This makes it possible to detect the tampering when the battery data is tampered with. In this way, by managing the battery data using the distributed ledger technology, it is possible to ensure the non-tampering of the battery data. Therefore, it is possible to increase the reliability of the indicator indicating the battery state calculated using the battery data.

[0009] (2) In one embodiment, the data management server further includes a storage device that accumulates battery data in chronological order. The calculation device calculates the index by using the battery data accumulated in the storage device and a predetermined calculation formula.

[0010] (3) In one embodiment, the information about the battery data is a hash value obtained by hashing the battery data.

[0011] According to the above configuration, the hash value of the battery data is stored in the distributed ledger. Since the battery data itself is not stored in the distributed ledger, it is possible to prevent the battery data from being disclosed to other devices (nodes) having the distributed ledger. Therefore, the hash value of the battery data is stored in the distributed ledger to ensure the non-tampering of the battery data, while keeping the battery data itself secret from other nodes. In addition, the hash value of the battery data has a smaller data capacity than the battery data. Therefore, the data capacity stored in the distributed ledger can be reduced compared to when transaction data including the battery data itself is stored in the distributed ledger.

[0012] (4) In one embodiment, when the computing device obtains battery data from the data management device, it compares a hashed value of the obtained battery data with information about the battery data stored in the distributed ledger.

[0013] If the battery data is tampered with, the hash value of the tampered battery data will not match the information (hash value) related to the battery data stored in the distributed ledger. According to the above configuration, tampering of the battery data can be detected by comparing the hash value of the battery data acquired from the data management device with the information (hash value) related to the battery data stored in the distributed ledger.

[0014] (5) In one embodiment, the data management system further comprises a disclosure server.

[0015] (6) A disclosure server according to another aspect of the present disclosure is a disclosure server that uses distributed ledger technology to manage data of a battery installed in a vehicle and discloses an index indicating the state of the battery. The disclosure server includes a storage device having a storage area including a first tier for storing disclosable data and a second tier for storing confidential data, and a control device. The control device acquires battery data from the vehicle, stores transaction data including information on the battery data in the distributed ledger, calculates the index using the battery data and a predetermined arithmetic expression, stores the index in the first tier, and stores the battery data and the predetermined arithmetic expression in the second tier.

[0016] According to the above configuration, the storage device has a storage area including a first layer for storing disclosable data and a second layer for storing confidential data, and an indicator indicating the state of the battery is stored in the first layer, and the battery data and the predetermined arithmetic formula are stored in the second layer. By appropriately disclosing the indicator indicating the state of the battery while storing the battery data and the predetermined arithmetic formula in the second layer, the battery data and the predetermined arithmetic formula can be appropriately concealed. Furthermore, the disclosure server stores transaction data including information on the battery data in the distributed ledger. This makes it possible to detect the tampering when the battery data is tampered with. In this way, by managing the battery data using the distributed ledger technology, it is possible to ensure the non-tampering of the battery data.

[0017] (7) In one embodiment, the storage device stores battery data in chronological order in the second layer. The control device calculates an index indicating the above-mentioned state using the battery data stored in the second layer and a predetermined arithmetic expression.

[0018] (8) In one embodiment, the information about the battery data is a hash value obtained by hashing the battery data.

[0019] (9) A method according to another aspect of the present disclosure is a computer-executed method for providing an indicator indicating a battery state to a disclosure server that discloses the indicator. The method includes the steps of acquiring battery data and storing transaction data including information regarding the acquired battery data in a distributed ledger, calculating the indicator using the battery data and a predetermined arithmetic expression, and providing the indicator to the disclosure server.

[0020] (10) A disclosure method according to another aspect of the present disclosure is a disclosure method executed by a disclosure server that manages battery data using distributed ledger technology and discloses an index indicating a battery state. The disclosure server includes a storage device having a storage area including a first tier for storing disclosable data and a second tier for storing confidential data, and a control device. The disclosure method includes the steps of acquiring battery data, storing transaction data including information about the battery data in the distributed ledger, calculating the index using the battery data and a predetermined arithmetic expression, and storing the index in the first tier and storing the battery data and the predetermined arithmetic expression in the second tier.

[0021] (11) A program according to another aspect of the present disclosure is a program for causing a computer to execute a process of providing an indicator indicating a battery state to a disclosure server that discloses the indicator. The program includes steps of acquiring battery data and storing transaction data including information regarding the acquired battery data in a distributed ledger, calculating the indicator using the battery data and a predetermined arithmetic expression, and providing the indicator to the disclosure server.

[0022] (12) A program according to another aspect of the present disclosure is a program executed by a disclosure server that manages battery data using distributed ledger technology and discloses an index indicating a battery state. The disclosure server includes a storage device having a storage area including a first tier for storing disclosable data and a second tier for storing confidential data, and a control device. The program includes a step of acquiring battery data, a step of storing transaction data including information related to the battery data in the distributed ledger, a step of calculating the index using the battery data and a predetermined arithmetic expression, and a step of storing the index in the first tier and storing the battery data and the predetermined arithmetic expression in the second tier. Effect of the Invention

[0023] According to the present disclosure, when disclosing an indicator of a battery state, it is possible to ensure that the disclosed indicator of the battery state is not tampered with while keeping information for calculating the indicator of the battery state confidential. [Brief description of the drawings]

[0024] [Figure 1] FIG. 1 is a diagram showing a schematic configuration of a data management system according to a first embodiment. [Diagram 2] FIG. 4 is a diagram for explaining an example of battery information. [Diagram 3] FIG. 2 is a diagram for explaining an example of BLC data. [Figure 4] FIG. 11 is a diagram for explaining an example of calculation information. [Diagram 5] 2 is a functional block diagram of a control device of the data management device and a control device of the arithmetic device. FIG. [Figure 6] 13 is a flowchart showing a procedure of a process executed in the data management device. [Figure 7] 4 is a flowchart showing a procedure of a process executed by a computing device. [Figure 8] FIG. 11 is a diagram showing a schematic configuration of a data management system according to a second embodiment. [Figure 9] FIG. 2 is a diagram illustrating a storage area of ​​a storage device. [Figure 10] 2 is a functional block diagram of a control device of the disclosure server. [Figure 11] 13 is a flowchart showing a procedure of a process executed by a disclosure server. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In the drawings, the same or corresponding parts are denoted by the same reference characters, and the description thereof will not be repeated.

[0026] [Embodiment 1] 1 is a diagram showing a schematic configuration of a data management system 1 according to the first embodiment. The data management system 1 according to the first embodiment is a system for disclosing an index indicating the state of a battery mounted in a vehicle. There are cases where disclosure of an index indicating the state of the battery is required by laws and regulations, etc. The data management system 1 according to the first embodiment is a system configured to be able to meet such a request.

[0027] The data management system 1 manages an index indicating the battery state for each battery ID attached to the battery, and discloses the index indicating the battery state in response to an external request. In the first embodiment, as an example, an example will be described in which the index indicating the battery state is SOH (State Of Health). SOH is a value indicating the deterioration state of the battery. Note that the data managed by the data management system 1 is not limited to the index indicating the battery state, and may be various data.

[0028] The data management system 1 includes a disclosure server 30 and a data management server 100. The disclosure server 30 is a server that discloses information that is required to be disclosed by laws and regulations (SOH in the first embodiment). Specifically, the disclosure server 30 stores the SOH for each battery ID, and discloses the SOH in response to a disclosure request from an external device 50 that specifies the battery ID. The disclosure server 30 may be, for example, a server that belongs to a country or an organization certified by a country.

[0029] The data management server 100 is a server belonging to Company A, which is a vehicle manufacturer. The data management server 100 receives information on the battery 45 mounted on the vehicle 40 (details of which will be described later) provided by Company A, and calculates the SOH of the battery 45. The data management server 100 then transmits the calculated SOH to the disclosure server 30. Note that although one vehicle 40 is shown in FIG. 1, there may be multiple vehicles 40.

[0030] There is a desire to keep information that is not required to be disclosed, such as an arithmetic formula for calculating the SOH, secret from outside the company. In the data management system 1 according to the first embodiment, a data management server 100 is provided to prevent information on the battery 45 from the vehicle 40 from being directly input to the disclosure server 30, and only the SOH, which is information that is required to be disclosed by laws and regulations, is sent from the data management server 100 to the disclosure server 30. This allows the SOH to be appropriately disclosed, while the arithmetic formula for calculating the SOH, etc., to be kept secret within Company A. The configuration of each server will be specifically described below.

[0031] <Data management server> The data management server 100 includes a data management device 10 and a calculation device 20. In the first embodiment, a configuration in which the data management device 10 and the calculation device 20 are provided separately will be described, but it is also possible to provide a single device having the functions of the data management device 10 and the calculation device 20.

[0032] <<Data management device>> The data management device 10 includes a control device 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a communication device 14, and a storage device 15. The control device 11, the ROM 12, the RAM 13, the communication device 14, and the storage device 15 are connected to a bus 19. A storage device 18 is also communicatively connected to the data management device 10. Although details will be described later, blockchain-based software is installed in the data management device 10, and the installed blockchain-based software functions to cause the data management device 10 to function as a node in the blockchain network.

[0033] The control device 11 is configured, for example, by an integrated circuit including a CPU (Central Processing Unit). The control device 11 loads various programs stored in the ROM 12 into the RAM 13 and executes them. The various programs include an operating system, etc. The RAM 13 functions as a working memory and temporarily stores various data required for executing the various programs.

[0034] The communication device 14 is configured to be able to communicate with the vehicle 40. The communication device 14 is also configured to be able to communicate with the arithmetic device 20. The communication between the communication device 14 and the vehicle 40 or the arithmetic device 20 is performed using the Internet, a wide area network (WAN), a local area network (LAN), an Ethernet (registered trademark) network, a public network, a private network, a wired network, a wireless network, or the like, or a combination of these.

[0035] Vehicle 40 is, for example, a vehicle provided by company A, which is a vehicle manufacturer. Vehicle 40 is an electric vehicle equipped with battery 45 as its power source. Note that vehicle 40 may be any vehicle equipped with battery 45, and may be, for example, a plug-in hybrid vehicle, a hybrid vehicle, or a fuel cell vehicle.

[0036] Vehicle 40 transmits information 17 of battery 45 (hereinafter also referred to as "battery information") to data management device 10. For example, vehicle 40 transmits battery information 17 to data management device 10 at a predetermined cycle. Vehicle 40 may be configured to transmit battery information 17 at a predetermined cycle regardless of whether it is at startup or in sleep mode, or may be configured to internally store battery information 17 at sleep mode and transmit all battery information 17 stored at startup mode. In the first embodiment, as an example, it is assumed that vehicle 40 transmits battery information 17 at a predetermined cycle regardless of whether it is at startup or in sleep mode.

[0037] The control device 11 stores the battery information 17 received from the vehicle 40 via the communication device 14 in the storage device 18. The storage device 18 stores the newly received battery information 17 in accordance with a control signal from the data management device 10 (control device 11). The storage device 18 stores the battery information 17 in chronological order for each battery ID included in the battery information 17, for example. The storage device 18 can also be provided as a storage device within the data management device 10. Furthermore, the control device 11 transmits the battery information 17 to the calculation device 20 via the communication device 14.

[0038] 2 is a diagram for explaining an example of the battery information 17. The battery information 17 includes a battery ID, a vehicle ID, temperature information, and SOC (State Of Charge) information. Note that the information included in the battery information 17 is not limited to the above information, and may include various other information related to the battery 45.

[0039] The battery ID is identification information for identifying the battery 45. The battery ID is assigned to the battery 45, for example, when the battery 45 is manufactured.

[0040] The vehicle ID is identification information for identifying the vehicle 40. For example, the vehicle ID is assigned to the vehicle 40 when the vehicle 40 is manufactured. The battery information 17 includes the vehicle ID of the vehicle 40 in which the battery 45 is mounted.

[0041] The temperature information is information indicating the temperature of the battery 45. The temperature information indicates, for example, the temperature of the battery 45 at the time when the vehicle 40 creates the battery information 17.

[0042] The SOC information is information indicating the SOC of the battery 45. The SOC information indicates, for example, the SOC of the battery 45 at the time when the vehicle 40 creates the battery information 17.

[0043] Referring again to FIG. 1, the data management device 10 forms a blockchain network NW1 with three data management devices 10A belonging to other companies different from the A company. Blockchain-based software is installed in each of the three data management devices 10A, similar to the data management device 10. The three data management devices 10A are data management devices belonging to B company, C company, and D company, respectively. B company, C company, and D company are, for example, supplier manufacturers that supply parts, etc. to A company. Note that B company, C company, and D company are not limited to the above-mentioned corporate categories. For example, B company, C company, and D company may be vehicle manufacturers.

[0044] In the first embodiment, each of the data management devices 10 and 10A manages data by a distributed ledger technology using a blockchain. Each of the data management devices 10 and 10A stores a distributed ledger using a blockchain (hereinafter also referred to as "BLC data") 16. The BLC data 16 stores information including a hash value of battery information 17 transmitted by the data management device 10 to the blockchain network NW1 from the start of operation of the data management system 1 to the present. The BLC data 16 also stores information including a hash value of various information related to the battery 45 transmitted by the data management device 10A to the blockchain network NW1 from the start of operation of the data management system 1 to the present. The various information related to the battery 45 may be, for example, composition information of the battery 45, information of each part constituting the battery 45, disassembly information of the battery 45, and / or technical information (test results and test reports at the time of manufacturing the battery 45), etc. In addition, when Company B, Company C, and Company D are vehicle manufacturers, each of the data management devices 10A transmits information including a hash value of the battery information of the vehicle provided by the data management device 10 to the blockchain network NW1, similar to the data management device 10. Details of the BLC data 16 will be described later. In addition, in the first embodiment, an example in which four data management devices 10 and 10A form the blockchain network NW1 will be described, but the number of data management devices forming the blockchain network NW1 is arbitrary, and may be, for example, less than four or five or more.

[0045] Blockchain-based software is stored in the ROM 12. The control device 11 executes the blockchain-based software stored in the ROM 12 to function as a node in the blockchain network NW1.

[0046] The storage device 15 includes a storage medium such as a hard disk or a flash memory. The storage device 15 stores the BLC data 16. Note that the storage location of the BLC data 16 is not limited to the storage device 15. The BLC data 16 may be stored in the ROM 12 or the storage device 18.

[0047] The storage device 15 also stores the private key and public key generated by the control device 11. The storage device 15 may store an electronic certificate issued by a certification authority (not shown). The certification authority is a certification organization that issues electronic certificates. An applicant for an electronic certificate (the data management device 10 in the first embodiment) generates a private key and a public key, and transmits the generated public key to the certification authority. The certification authority generates an electronic certificate for the public key received from the applicant, and issues the electronic certificate to the applicant. Alternatively, the certification authority may generate a private key, a public key, and an electronic certificate in response to a request from the applicant (the data management device 10 in the first embodiment), and issue them to the applicant. The certification authority issues, for example, an electronic certificate including information on the public key. For example, when the control device 11 first participates in the block chain network NW1, the control device 11 executes a process of applying for and obtaining an electronic certificate. Furthermore, the storage device 15 stores an electronic certificate of the data management device 10A that forms the block chain network NW1. Note that the private key, the public key, the electronic certificate, and the electronic certificate of the data management device 10A are not limited to be stored in the storage device 15. The private key, the public key, the electronic certificate, and the electronic certificate of the data management device 10A may be stored in the ROM 12 or the storage device 18.

[0048] When the control device 11 acquires the battery information 17 from the vehicle 40, it stores the battery information 17 in the storage device 18 and generates a hash value of the battery information 17. The hash value is a numerical value obtained as a result of hashing the data (battery information 17) using a hash function. The control device 11 generates transaction data (described later) including the generated hash value, and transmits the generated transaction data to the blockchain network NW1.

[0049] <<<BLCデータ> >> Fig. 3 is a diagram for explaining an example of the BLC data 16. As shown in Fig. 3, the BLC data 16 is composed of a plurality of connected blocks 160. Each of the blocks 160 includes transaction data including a hash value of the battery information 17 and the like. The BLC data 16 stores a record history of the battery information 17 from when the data management system 1 was started to operate to the present.

[0050] The BLC data 16 is stored in all data management devices 10 and 10A that form the blockchain network NW1. As a result, even if the BLC data 16 of the data management device 10 is tampered with by a certain user, the tampering is suppressed based on the BLC data 16 of the other multiple data management devices 10A.

[0051] Specifically, when new battery information 17 is received from the vehicle 40, the data management device 10 stores the battery information 17 in the storage device 18 and generates transaction data (transaction data) indicating this process. The control device 11 hashes the battery information 17 received from the vehicle 40 using a hash function, and generates transaction data including a numerical value (hash value) obtained as a result of the hashing. The control device 11 transmits the generated transaction data to the blockchain network NW1 via the communication device 14. This transaction data is compiled into a new block 160 (Bn+1). Then, when certain conditions are met, the new block 160 (Bn+1) is added to the BLC data 16.

[0052] Note that transaction data is not recognized as valid just by being distributed to the blockchain network NW1. Transaction data becomes valid only after being added to the BLC data 16 held in each of the data management devices 10 and 10A. Unauthenticated transaction data is collected into a new block 160 (Bn+1), and the new block 160 (Bn+1) is added to the BLC data 16 by a mining process called POW (Proof of Work), for example.

[0053] POW is a mechanism in which multiple nodes (data management devices 10, 10A) compete to add a new block 160 (Bn+1). Nodes participating in POW are generally called miners. A reward may be given to the miner who generates the new block 160 (Bn+1) the fastest. A consensus formation algorithm using such a mechanism ensures the resistance of the BLC data 16 to tampering.

[0054] The consensus algorithm is not limited to POW. For example, Proof of Stake (POS) or Practical Byzantine Fault Tolerance (PBFT) can also be used as the consensus algorithm.

[0055] <<<Transaction Data>>> The transaction data includes, for example, a transaction ID for identifying the transaction data, a hash value of the battery information 17, a battery ID corresponding to the battery information 17, time information for broadcasting the transaction data to the blockchain network NW1 (transmitting the transaction data to the blockchain network NW1), sender information of the transaction data, and an electronic signature, etc. Note that the time information included in the transaction data may be time information indicating the occurrence time of a process corresponding to the transaction data (for example, a process for recording the battery information 17 in the storage device 18).

[0056] For example, if the transaction data is transaction data transmitted by the data management device 10 to the blockchain network NW1, the sender information of the transaction data is information indicating Company A. In addition, in more detail, the sender information of the transaction data may be information indicating the department (a division of Company A) that executed the operation of transmitting the transaction data to the blockchain network NW1, or information indicating an individual (an employee of Company A) that executed the operation of transmitting the transaction data to the blockchain network NW1.

[0057] By storing and managing the hash value of the battery information 17 in the BLC data 16 as described above, it is possible to improve the resistance of the battery information 17 to tampering.

[0058] <<Arithmetic device>> 1, the arithmetic device 20 includes a control device 21, a ROM 22, a RAM 23, a communication device 24, and a storage device 25. The control device 21, the ROM 22, the RAM 23, the communication device 24, and the storage device 25 are connected to a bus 29.

[0059] The control device 21 is formed, for example, by an integrated circuit including a CPU. The control device 21 loads various programs stored in the ROM 22 into the RAM 23 and executes them. The various programs include an operating system, etc. The RAM 23 functions as a working memory and temporarily stores various data required for the execution of the various programs.

[0060] The communication device 24 is configured to be able to communicate with the data management device 10. The communication device 24 is also configured to be able to communicate with the disclosure server 30. The communication between the communication device 24 and the data management device 10 or the disclosure server 30 is performed using the Internet, a wide area network (WAN), a local area network (LAN), an Ethernet (registered trademark) network, a public network, a private network, a wired network, a wireless network, or the like, or a combination of these.

[0061] The storage device 25 includes a storage medium such as a hard disk or a flash memory. The storage device 25 stores the calculation information 26 and the calculation formula 27. Note that the calculation information 26 and the calculation formula 27 are not limited to be stored in the storage device 25, and may be stored in the ROM 22, for example.

[0062] The control device 21 receives the battery information 17 from the data management device 10 via the communication device 24. The calculation information 26 is the battery information 17 accumulated for each battery ID in time series. The calculation formula 27 is a formula for deriving the SOH using the calculation information 26.

[0063] Fig. 4 is a diagram for explaining an example of the calculation information 26. As shown in Fig. 4, the calculation information 26 is configured by accumulating battery information 17 for each battery ID. Furthermore, the battery information 17 is accumulated in chronological order. For example, when battery information 17 indicating the battery ID of B1 is newly received, the battery information 17 is accumulated in the calculation information 26 as the most recent battery ID of B1.

[0064] 1 again, the control device 21 calculates the SOH for each battery ID (that is, for each battery) using the calculation information 26 and the calculation formula 27. Here, it is assumed that the SOH of the battery 45 is calculated.

[0065] The arithmetic expression 27 includes, for example, a function f(TB, TIME1) of the battery temperature and time, and a function f(SOC, TIME2) of the SOC and time, and is expressed, for example, by the following equation (1).

[0066] SOH=1-{∫f(TB,TIME1)dTB+∫f(SOC,TIME2)dSOOC}···(1) TB is the battery temperature, TIME1 is the time the battery is maintained at that battery temperature TB, and TIME2 is the time the battery is maintained at that SOC.

[0067] As described above, the temperature information and SOC information included in the battery information 17 are data acquired at predetermined intervals by the vehicle 40. Therefore, it is possible to estimate the time TIME1 during which the battery 45 is maintained at a certain temperature and the time TIME2 during which the battery 45 is maintained at a certain SOC from the calculation information 26 in which the battery information 17 is accumulated in chronological order.

[0068] It should be noted that the arithmetic formula 27 for deriving the SOH is not limited to the above formula (1). For example, a function of the charging current value and time and / or a function of the discharging current value and time may be further used. Furthermore, the arithmetic formula 27 may be prepared for each type of battery identified by, for example, a model number. In this case, for example, a battery ID and the arithmetic formula 27 may be linked in advance, and the arithmetic formula 27 to be used may be identified based on the battery ID.

[0069] After calculating the SOH of the battery 45, the control device 21 transmits output information 36 including the calculated SOH to the disclosure server 30 via the communication device 24. The output information 36 includes the battery ID and SOH information of the battery 45.

[0070] Battery information 17 is also accumulated for each battery ID and in chronological order in storage device 18 connected to data management device 10. Thus, calculation device 20 may be configured to obtain data corresponding to calculation information 26 from data management device 10 and calculate SOH each time calculation of SOH is performed, without storing calculation information 26.

[0071] <Disclosure server> The disclosure server 30 includes a control device 31, a ROM 32, a RAM 33, a communication device 34, and a storage device 35. The control device 31, the ROM 32, the RAM 33, the communication device 34, and the storage device 35 are connected to a bus 39.

[0072] The control device 31 is formed, for example, by an integrated circuit including a CPU. The control device 31 loads various programs stored in the ROM 32 into the RAM 33 and executes them. The various programs include an operating system and the like. The RAM 33 functions as a working memory and temporarily stores various data required for the execution of the various programs.

[0073] The communication device 34 is configured to be able to communicate with the computing device 20. The communication between the communication device 34 and the computing device 20 is performed using the Internet, a wide area network (WAN), a local area network (LAN), an Ethernet network, a public network, a private network, a wired network, a wireless network, or the like, or a combination thereof.

[0074] The storage device 35 includes a storage medium such as a hard disk or a flash memory. The storage device 35 stores the output information 36 received from the arithmetic device 20. Note that the storage location of the output information 36 is not limited to the storage device 35, and the output information 36 may be stored in the ROM 32, for example.

[0075] The communication device 34 is also configured to be able to communicate with an external device 50. The external device 50 is, for example, an information processing terminal belonging to a business operator or a user who wishes to disclose the SOH of the battery 45. The external device 50 is, for example, a desktop personal computer (PC), a notebook PC, a tablet terminal, a smartphone, or other information processing terminal having a communication function. The external device 50 may be, for example, a device belonging to a secondary user who runs a battery recycling business.

[0076] The external device 50 designates a battery ID and requests the disclosure server 30 to disclose the SOH of the battery identified by the battery ID. In response to the request, the control device 31 reads the output information 36 including the requested battery ID from the storage device 35 and discloses the read output information 36 (SOH) to the external device 50.

[0077] As described above, the data management server 100 appropriately discloses the output information 36 (SOH) to the disclosure server 30 and the external device 50 outside the A company, but does not disclose the battery information 17 except the arithmetic formula 27 and the battery ID. For example, even if the arithmetic formula 27 is kept secret, if the SOH and the battery information 17, which is the original data from which the SOH is derived, are disclosed, the arithmetic formula 27 may be guessed. Similarly, if the battery information 17 is kept secret and the SOH and the arithmetic formula 27 are disclosed, the battery information 17 may be guessed. By keeping the battery information 17 except the arithmetic formula 27 and the battery ID secret, the arithmetic formula 27 can be appropriately kept secret. Furthermore, if the battery information 17 itself is stored in the BLC data 16 in order to prevent tampering with the battery information 17, the battery information 17 will be disclosed to the data management devices 10A of the B company, the C company, and the D company. By storing the hash value of the battery information 17 in the BLC data 16, it is possible to ensure resistance to tampering of the battery information 17 while keeping the battery information 17 secret from the data management devices 10A of companies B, C, and D.

[0078] <Function block> Fig. 5 is a functional block diagram of control device 11 of data management device 10 and control device 21 of arithmetic device 20. Referring to Fig. 5, control device 11 of data management device 10 includes information acquisition unit 111, registration unit 112, hash generation unit 113, transaction data generation unit 114, digital signature unit 115, transaction data transmission unit 116, data transmission unit 117, response unit 118, and notification unit 119. Control device 11 functions as information acquisition unit 111, registration unit 112, hash generation unit 113, transaction data generation unit 114, digital signature unit 115, transaction data transmission unit 116, data transmission unit 117, response unit 118, and notification unit 119, for example, by executing a program stored in ROM 12. In addition, the information acquisition unit 111, the registration unit 112, the hash generation unit 113, the transaction data generation unit 114, the electronic signature unit 115, the transaction data transmission unit 116, the data transmission unit 117, the response unit 118, and the notification unit 119 may be realized, for example, by dedicated hardware (electronic circuits).

[0079] The information acquisition unit 111 acquires the battery information 17 from the vehicle 40 via the communication device 14. Upon acquiring the battery information 17, the information acquisition unit 111 outputs the acquired battery information 17 to the registration unit 112, the hash generation unit 113, and the data transmission unit 117.

[0080] The registration unit 112 stores the battery information 17 received from the information acquisition unit 111 in the storage device 18. Specifically, the registration unit 112 identifies a battery ID from the battery information 17. Then, the registration unit 112 outputs a control signal to the storage device 18 for storing the battery information 17 for each battery ID in chronological order.

[0081] The hash generation unit 113 hashes the battery information 17 received from the information acquisition unit 111 using a hash function, and generates a hash value (hereinafter also referred to as a “battery hash”) of the battery information 17. The hash generation unit 113 outputs the battery hash to the transaction data generation unit 114.

[0082] The transaction data generation unit 114 generates transaction data to be transmitted to the block chain network NW1. More specifically, the transaction data generation unit 114 generates transaction data for including the battery hash received from the hash generation unit 113 in the BLC data 16.

[0083] Furthermore, transaction data generation unit 114 receives a digital signature from digital signature unit 115. Transaction data generation unit 114 includes the digital signature in the transaction data.

[0084] The electronic signature unit 115 reads the private key from the storage device 15. The electronic signature unit 115 encrypts the battery hash using the private key to generate an electronic signature. The electronic signature unit 115 outputs the generated electronic signature to the transaction data generation unit 114.

[0085] The transaction data generation unit 114 includes the electronic signature in the transaction data. The transaction data generation unit 114 also includes a battery ID corresponding to the battery hash, the time information, and the sender information in the transaction data. Then, the transaction data generation unit 114 outputs the transaction data to the transaction data transmission unit 116.

[0086] The transaction data transmission unit 116 outputs a control signal for transmitting the transaction data to the block chain network NW1 to the communication device 14. As a result, the transaction data is transmitted to the block chain network NW1 via the communication device 14.

[0087] The data transmission unit 117 outputs a control signal for transmitting the battery information 17 received from the information acquisition unit 111 to the calculation device 20 to the communication device 14. As a result, the battery information 17 is transmitted to the calculation device 20 via the communication device 14.

[0088] The response unit 118 receives a transmission request for the hash value (battery hash) of the battery information 17 transmitted by the data transmission unit 117 from the calculation device 20 (specifically, the hash request unit 212 described below). The response unit 118 identifies transaction data that stores the battery hash that is the subject of the request, for example, based on a battery ID corresponding to the battery hash that is the subject of the request. Then, the response unit 118 extracts transaction data that stores the subject battery hash from the BLC data 16, for example, based on the transaction ID of the identified transaction data. The response unit 118 acquires the battery hash from the extracted transaction data, and returns the acquired battery hash to the calculation device 20 (the hash request unit 212).

[0089] When a data inconsistency is detected in a verification process to be described later in the computing device 20, the notification unit 119 receives a report from the computing device 20 (specifically, the report unit 218 to be described later) that the inconsistency has been detected. Although details will be described later, when a data inconsistency is detected in the verification process, there is a possibility that the battery information 17 has been tampered with. Therefore, when the notification unit 119 receives a report that an inconsistency has been detected (that the battery information 17 may have been tampered with), it outputs a message to a notification device (not shown) that there is a possibility of tampering. The notification device includes, for example, a display device and / or an audio output device, and displays a warning on the display device and / or issues a warning via the audio output device.

[0090] The control device 21 of the calculation device 20 includes an information acquisition unit 211, a hash request unit 212, a verification unit 213, an update unit 214, a read unit 215, a calculation unit 216, an output unit 217, and a report unit 218. The control device 21 functions as the information acquisition unit 211, the hash request unit 212, the verification unit 213, the update unit 214, the read unit 215, the calculation unit 216, the output unit 217, and the report unit 218, for example, by executing a program stored in the ROM 22. Note that the information acquisition unit 211, the hash request unit 212, the verification unit 213, the update unit 214, the read unit 215, the calculation unit 216, the output unit 217, and the report unit 218 may be realized by, for example, dedicated hardware (electronic circuit).

[0091] The information acquiring unit 211 acquires the battery information 17 from the data management device 10 (the data transmitting unit 117). The information acquiring unit 211 outputs the acquired battery information 17 to the verifying unit 213 and the updating unit 214. When the information acquiring unit 211 acquires the battery information 17, it notifies the hash requesting unit 212 of the acquisition.

[0092] The hash request unit 212 requests the data management device 10 (response unit 118) to transmit a hash value (battery hash) of the battery information 17 acquired by the information acquisition unit 211 and stored in the BLC data 16. The hash request unit 212 acquires the battery hash from the data management device 10 (response unit 118) as a response to the request. The hash request unit 212 outputs the acquired battery hash to the verification unit 213.

[0093] The verification unit 213 executes a verification process to confirm the consistency between the battery information 17 acquired from the data management device 10 by the information acquisition unit 211 and the battery hash acquired from the data management device 10 by the hash request unit 212. Specifically, the verification unit 213 hashes the battery information 17 acquired from the data management device 10 by the information acquisition unit 211 using a hash function. Then, the verification unit 213 compares the hashed hash value with the battery hash acquired from the data management device 10 by the hash request unit 212. If the two pieces of data match, the verification unit 213 determines that the two pieces of data are consistent and that the battery information 17 has not been tampered with (tampering not detected). On the other hand, if the two pieces of data do not match, the verification unit 213 determines that the two pieces of data are inconsistent and that the battery information 17 may have been tampered with (tampering detected). The verification unit 213 outputs the result of the verification process to the update unit 214 and the report unit 218. If verification unit 213 does not detect tampering, it may output the result of the verification process to update unit 214, and if it detects tampering, it may output the result of the verification process to report unit 218. If verification unit 213 determines that there is a possibility that battery information 17 has been tampered with, calculation information 26 is not updated using that battery information 17, and battery information 17 is discarded.

[0094] When the updating unit 214 receives a result indicating that tampering has not been detected from the verifying unit 213, the updating unit 214 adds the battery information 17 received from the information acquiring unit 211 to the calculation information 26 stored in the storage device 25, and updates the calculation information 26. The updating unit 214 outputs to the reading unit 215 a message indicating that the calculation information 26 has been updated. Note that when the updating unit 214 receives a result indicating that tampering has been detected from the verifying unit 213, the updating unit 214 discards the battery information 17 without updating the calculation information 26.

[0095] The reading unit 215 reads the calculation information 26 and the calculation formula 27 from the storage device 25. The reading unit 215 outputs the read calculation information 26 and the calculation formula 27 to the calculation unit 216.

[0096] The calculation unit 216 calculates the SOH of the battery 45 by using the calculation information 26 and the calculation formula 27. The calculation unit 216 outputs the calculated SOH to the output unit 217.

[0097] The output unit 217 creates output information 36 including the SOH information received from the calculation unit 216 and a battery ID for identifying the battery 45. Then, the output unit 217 outputs a control signal to the communication device 24 for transmitting the output information 36 to the disclosure server 30. As a result, the output information 36 is transmitted to the disclosure server 30 via the communication device 24.

[0098] When the report unit 218 receives a result indicating that tampering has been detected from the verification unit 213, the report unit 218 reports to the data management device 10 (notification unit 119) that the battery information 17 may have been tampered with.

[0099] <Flowchart> Fig. 6 is a flowchart showing the procedure of processing executed by the data management device 10. The processing of the flowchart shown in Fig. 6 is executed by the control device 11 of the data management device 10 at predetermined intervals. Each step (hereinafter, steps are abbreviated as "S") of the flowchart shown in Fig. 6 will be described as being realized by software processing by the control device 11, but some or all of it may be realized by hardware (electronic circuitry) created within the control device 11.

[0100] In S1, the control device 11 acquires the battery information 17 from the vehicle 40. In a case where the vehicle 40 is configured not to output the battery information 17 during sleep, when the battery information 17 is not transmitted because the vehicle 40 is in a sleep state, the process returns to RETURN.

[0101] In S2, the control device 11 stores the battery information 17 acquired in S1 in the storage device 18. The storage device 18 stores the battery information 17 for each battery ID in chronological order in accordance with a control signal from the control device 11.

[0102] In S3, the control device 11 hashes the battery information 17 acquired in S1 using a hash function to generate a battery hash.

[0103] In S4, the control device 11 reads the private key from the storage device 15. Then, the control device 11 uses the private key to encrypt the battery hash generated in S3 to generate a digital signature.

[0104] In S5, the control device 11 generates transaction data including the battery hash and the electronic signature. In addition to the above, the control device 11 includes in the transaction data a battery ID corresponding to the battery hash, time information for broadcasting the transaction data to the blockchain network NW1 (which may be time information indicating the time of occurrence of the process corresponding to the transaction data), and sender information of the transaction data.

[0105] In S6, the control device 11 outputs a control signal for transmitting the generated transaction data to the block chain network NW1 to the communication device 14. As a result, the transaction data is transmitted to the block chain network NW1 via the communication device 14.

[0106] In S7, the control device 11 outputs to the communication device 14 a control signal for transmitting the battery information 17 acquired in S1 to the arithmetic device 20. As a result, the battery information 17 is transmitted to the arithmetic device 20 via the communication device 14.

[0107] Fig. 7 is a flowchart showing the procedure of processing executed by the arithmetic device 20. The processing of the flowchart shown in Fig. 7 is executed by the control device 21 of the arithmetic device 20 at predetermined intervals. Each step of the flowchart shown in Fig. 7 will be described as being realized by software processing by the control device 21, but some or all of it may be realized by hardware (electronic circuitry) created within the control device 21.

[0108] In S10, the control device 21 acquires the battery information 17 from the data management device 10. In a case where the vehicle 40 is configured not to output the battery information 17 during sleep, if the battery information 17 is not transmitted from the data management device 10 due to the vehicle 40 being in a sleep state, the process returns to RETURN.

[0109] In S11, the control device 21 requests the data management device 10 to transmit a hash value (battery hash) of the battery information 17 acquired in S10 and stored in the BLC data 16, and acquires the battery hash from the data management device 10.

[0110] In S12, the control device 21 hashes the battery information 17 acquired in S10 using a hash function to generate a hash value.

[0111] In S13, the control device 21 compares the battery hash acquired in S11 with the hash value hashed in S12, and judges whether the two pieces of data match, i.e., whether there is a possibility that the battery information 17 acquired in S10 has been tampered with. If the two pieces of data match, the control device 21 judges that the battery information 17 acquired in S10 has not been tampered with (NO in S13), and proceeds to the process of S14. If the two pieces of data do not match, the control device 21 judges that there is a possibility that the battery information 17 acquired in S10 has been tampered with (YES in S13), and proceeds to the process of S19.

[0112] In S14, the control device 11 adds the battery information 17 acquired in S10 to the calculation information 26 stored in the storage device 25, and updates the calculation information 26.

[0113] In S15, the control device 11 reads out from the storage device 25 the calculation information 26 updated in S14 and the calculation formula 27.

[0114] In S16, the control device 11 calculates the SOH of the battery 45 using the calculation information 26 and the calculation formula 27 read in S15.

[0115] In S17, the control device 11 generates output information 36 including the SOH information calculated in S16 and a battery ID for identifying the battery 45.

[0116] In S18, the control device 11 outputs a control signal to the communication device 24 for transmitting the output information 36 to the disclosure server 30. As a result, the output information 36 is transmitted to the disclosure server 30 via the communication device 24.

[0117] In S19, the control device 11 reports to the data management device 10 that the battery information 17 may have been tampered with.

[0118] As described above, in the data management system 1 according to the first embodiment, the data management server 100 receives the battery information 17 from the vehicle 40, and calculates the SOH of the battery 45 using the calculation information 26 in which the battery information 17 is accumulated in a time series and the calculation formula 27. The data management server 100 provides the SOH to the disclosure server 30, but does not provide the battery information 17 excluding the calculation formula 27 and the battery ID to the disclosure server 30. For example, even if the calculation formula 27 is kept secret, if the SOH and the battery information 17, which is the original data from which the SOH is derived, are disclosed, the calculation formula 27 may be guessed. By keeping the battery information 17 excluding the calculation formula 27 and the battery ID secret, the calculation formula 27 can be appropriately kept secret. That is, according to the data management system 1 according to the first embodiment, the SOH, which is information subject to disclosure due to laws and regulations, can be appropriately disclosed, while the calculation formula 27, which the A company wishes to keep secret, can be appropriately kept secret from outside the A company.

[0119] In addition, blockchain-based software is introduced into the data management device 10 of the data management server 100. By functioning the blockchain-based software, the data management device 10 functions as a node and forms a blockchain network NW1 with a data management device 10A belonging to another company. The data management device 10 generates transaction data including a battery hash obtained by hashing the battery information 17 acquired from the vehicle 40, and transmits the transaction data to the blockchain network NW1. By storing the battery hash in the BLC data 16, the tamper resistance of the battery information 17 can be improved. Therefore, the reliability of the SOH of the battery 45 calculated using the battery information 17 can be improved.

[0120] Furthermore, if the battery information 17 itself were stored in the BLC data 16, the battery information 17 would be disclosed to the data management devices 10A of companies B, C, and D. By storing the hash value of the battery information 17 in the BLC data 16, it is possible to ensure resistance to tampering of the battery information 17 while keeping the battery information 17 secret from the data management devices 10A of companies B, C, and D.

[0121] In the above, a configuration has been described in which both the arithmetic formula 27 and the battery information 17 excluding the battery ID are kept secret from the disclosure server 30. However, it is also possible to adopt a configuration in which at least one of the arithmetic formula 27 and the battery information 17 excluding the battery ID are kept secret from the disclosure server 30. For example, when it is desired to keep the arithmetic formula 27 secret, the arithmetic formula 27 is kept secret from the disclosure server 30. In general, in order to analyze the arithmetic formula 27 from the SOH and the battery information, a high level of analysis processing is required. Therefore, if at least one of the arithmetic formula 27 and the battery information 17 excluding the battery ID is not provided to the disclosure server 30, the information to be kept secret can be kept secret unless it is intentionally analyzed by a high level of analysis processing. In the above-mentioned first embodiment, by keeping both the arithmetic formula 27 and the battery information 17 excluding the battery ID secret, even if an intentional analysis using a high level of analysis processing is performed, the analysis of the information to be kept secret by the analysis can be suppressed.

[0122] [Variation 1] In the first embodiment, an example has been described in which the indicator of the battery state is SOH. However, the indicator of the battery state is not limited to SOH. The indicator of the battery state may be, for example, the internal resistance value, impedance, full charge capacity, or capacity maintenance rate of battery 45. Note that the first modification can be combined with the second to fourth modifications and the second embodiment described later.

[0123] [Variation 2] In the data management system 1 according to the first embodiment, an example has been described in which blockchain-based software is introduced into the data management server 100, and a blockchain network NW1 is formed with the data management device 10A belonging to another company to manage information (battery information 17). However, instead of the blockchain-based distributed ledger technology, other distributed ledger technologies can also be applied. For example, a distributed ledger technology using a Directed Acyclic Graph (DAG) may be applied. To give a specific example, for example, CORDA (registered trademark) or Scalar DLT may be adopted as the distributed ledger platform introduced into the data management server 100. Note that the second modification can also be combined with the above-mentioned first modification, the later-described third and fourth modifications, and the second embodiment.

[0124] [Variation 3] In the first embodiment, when the data management device 10 acquires the battery information 17 from the vehicle 40, the calculation information 26 of the arithmetic device 20 is updated, and the SOH of the battery 45 is calculated using the updated calculation information 26 and the arithmetic expression 27. However, the arithmetic device 20 may store the time TIME1 during which the battery 45 is maintained at a certain temperature and the time TIME2 during which the battery 45 is maintained at a certain SOC each time the arithmetic device 20 calculates the SOH from the arithmetic expression 27 when new battery information 17 is received, by updating the stored times TIME1 and TIME2 from the battery information 17.

[0125] [Embodiment 2] In the data management system 1 according to the first embodiment, a data management server 100 is provided so that the battery information 17 output from the vehicle 40 is not directly input to the disclosure server 30. In the data management system 1 according to the first embodiment, the battery information 17 output from the vehicle 40 is used in the data management server 100 of the A company to calculate the SOH of the battery 45, and the calculated SOH is sent to the disclosure server 30. As a result, information that is required to be disclosed (for example, SOH) is disclosed, while information that is not required to be disclosed (the calculation formula 27 for calculating the SOH and the battery information 17) is concealed from outside the A company. In the second embodiment, a data management system 2 that does not include the data management server 100 and conceals information that is not required to be disclosed from the external device 50 will be described. Note that the same symbols are used for the configurations already described in the first embodiment, and the description thereof will not be repeated.

[0126] Fig. 8 is a diagram showing a schematic configuration of a data management system 2 according to the second embodiment. The data management system 2 includes four disclosure servers 80. The four disclosure servers 80 are, for example, servers belonging to different countries (e.g., countries A, B, C, and D). In Fig. 8, the disclosure server 80 in country A is represented as disclosure server 80, and the disclosure servers 80 in countries B, C, and D are represented as disclosure server 80A.

[0127] In each of countries A, B, C, and D, the disclosure of an index indicating the battery state is required by the laws and regulations of each country. In the second embodiment, as in the first embodiment, an example will be described in which the index indicating the battery state is the SOH of the battery. The disclosure server 80 receives the battery information 17 from the vehicle 40 present in the country A. Similarly, the disclosure server 80A in the country B receives the battery information 17 from the vehicle 40A present in the country B, the disclosure server 80A in the country C receives the battery information 17 from the vehicle 40A present in the country C, and the disclosure server 80A in the country D receives the battery information 17 from the vehicle 40A present in the country D. The disclosure servers 80 and 80A calculate the SOH of the batteries 45 and 45A and disclose them to the external device 50. In the data management system 2 according to the second embodiment, the storage area for storing information is made into a hierarchical structure, so that the storage hierarchy of the information to be disclosed and the information to be kept secret is separated, and the information to be kept secret is kept secret from the outside. In the following, the disclosure server 80 of the company A will be described as a representative example, but the disclosure server 80A has the same function. The disclosure server 80 corresponds to an example of a "disclosure server that manages data on a battery installed in a vehicle using distributed ledger technology and discloses indicators indicating the state of the battery" according to the present disclosure.

[0128] The disclosure server 80 includes a control device 81, a ROM 82, a RAM 83, a communication device 84, a storage device 85, and a storage device 86. The control device 81, the ROM 82, the RAM 83, the communication device 84, the storage device 85, and the storage device 86 are connected to a bus 89. The disclosure server 80 is also communicatively connected to a storage device 88. The disclosure server 80 also has blockchain-based software installed therein, and the installed blockchain-based software functions to cause the disclosure server 80 to function as a node in the blockchain network.

[0129] The control device 81 is formed, for example, by an integrated circuit including a CPU. The control device 81 loads various programs stored in the ROM 82 into the RAM 83 and executes them. The various programs include an operating system and the like. The RAM 83 functions as a working memory and temporarily stores various data required for the execution of the various programs.

[0130] The communication device 84 is configured to be able to communicate with the vehicle 40. The communication device 14 is configured to be able to communicate with the disclosure server 80A. The communication between the communication device 84 and the vehicle 40 or the disclosure server 80A is performed using the Internet, a wide area network (WAN), a local area network (LAN), an Ethernet (registered trademark) network, a public network, a private network, a wired network, a wireless network, or the like, or a combination thereof.

[0131] The control device 81 stores the battery information 17 received from the vehicle 40 via the communication device 84 in the storage device 88. The storage area for storing information in the storage device 88 has multiple hierarchical levels. The control device 81 specifies the hierarchical level in which to store the battery information 17, and outputs a control signal for storing the battery information 17 in the specified hierarchical level. The storage device 88 stores the newly received battery information 17 in accordance with the control signal from the disclosure server 80 (control device 81). As with the storage device 18 according to the first embodiment, the storage device 88 stores the battery information 17 in chronological order for each battery ID included in the battery information 17. The storage device 88 can also be provided as a storage device within the disclosure server 80.

[0132] Fig. 9 is a diagram showing a schematic diagram of a storage area of ​​storage device 88. Storage device 88 has a multi-layer structure. In Fig. 9, storage device 88 has three layers, a first layer, a second layer, and a third layer. Note that the number of layers in storage device 88 is not limited to three, and may be, for example, two, or four or more.

[0133] Different authority information is set for the first to third hierarchical levels. In the second embodiment, first, second and third rank authority information is set for the first, second and third hierarchical levels, respectively. The first rank is a level at which information is disclosed in response to a disclosure request specifying a battery ID. The second rank is a level at which information is disclosed in response to a disclosure request from a specified business specifying a battery ID. Specified businesses include businesses that use, manufacture and / or recycle batteries. The third rank is a level at which information is disclosed in response to a disclosure request from a certification organization specifying a battery ID. A certification organization is an organization that certifies a notified business as a specified business.

[0134] In the second embodiment, the storage device 88 stores the output information 36 in the first layer. The storage device 88 stores the battery information 17 in the second layer. The storage device 88 may further store, in the second layer, composition information of the battery 45, information on each part constituting the battery 45, contact information for the supplier, dismantling information for the battery 45, and the like. The storage device 88 stores technical information such as test results and test reports at the time of manufacturing the battery 45 in the third layer.

[0135] Referring again to FIG. 8, each of the disclosure servers 80, 80A manages data by a distributed ledger technology using a blockchain. The four disclosure servers 80, 80A form a blockchain network NW2. Each of the disclosure servers 80, 80A stores BLC data 16. The BLC data 16 stores information including hash values ​​of battery information 17 transmitted by the disclosure servers 80, 80A to the blockchain network NW2 from the start of operation of the data management system 2 to the present. Furthermore, the BLC data 16 may store information including hash values ​​of other data stored in the storage device 88 (output information 36, technical information, composition information of the battery 45, information of each part constituting the battery 45, contact information of the supplier, dismantling information of the battery 45, etc.).

[0136] The storage device 85 includes a storage medium such as a hard disk or a flash memory. The storage device 85 stores the BLC data 16. Note that the storage location of the BLC data 16 is not limited to the storage device 85, and the BLC data 16 may be stored in the ROM 82, the storage device 86, or the storage device 88.

[0137] The storage device 85 also stores the private key and public key generated by the control device 81. The storage device 85 may store an electronic certificate issued by a certification authority (not shown). An applicant for an electronic certificate (disclosure server 80 in the second embodiment) generates a private key and a public key and transmits the generated public key to the certification authority. The certification authority generates an electronic certificate for the public key received from the applicant and issues the electronic certificate to the applicant. Alternatively, the certification authority may generate a private key, a public key, and an electronic certificate in response to a request from the applicant (disclosure server 80 in the second embodiment) and issue them to the applicant. The certification authority issues, for example, an electronic certificate including information on the public key. For example, when the control device 81 first participates in the block chain network NW2, the control device 81 executes a process of applying for and obtaining an electronic certificate. Furthermore, the storage device 85 stores an electronic certificate of the disclosure server 80A forming the block chain network NW2. It should be noted that the private key, public key, electronic certificate, and electronic certificate of the disclosure server 80A are not limited to being stored in the storage device 85, but may be stored in the ROM 82, the storage device 86, or the storage device 88.

[0138] The storage device 86 includes a storage medium such as a hard disk or a flash memory. The storage device 86 stores the arithmetic formula 27. Information stored in the storage device 86 is not disclosed to the outside of the disclosure server 80. The arithmetic formula 27 is not limited to be stored in the storage device 86, but may be stored in the ROM 82 or the storage device 88. When the arithmetic formula 27 is stored in the storage device 88, the storage device 88 may store the arithmetic formula 27 in the second or third layer, for example. The storage device 86 and the second and third layers of the storage device 88 correspond to an example of the "second layer of the storage device" according to the present disclosure.

[0139] When the control device 81 acquires the battery information 17 from the vehicle 40, it stores the battery information 17 in the storage device 88 and generates a hash value of the battery information 17. The control device 81 generates transaction data including the generated hash value and transmits the generated transaction data to the blockchain network NW2. The transaction data is added to a block, and the hash value (battery hash) of the battery information 17 is stored in the BLC data 16.

[0140] <Function block> Fig. 10 is a functional block diagram of control device 81 of disclosure server 80. Referring to Fig. 10, control device 81 of disclosure server 80 includes information acquisition unit 811, registration unit 812, hash generation unit 813, transaction data generation unit 814, digital signature unit 815, transaction data transmission unit 816, reading unit 817, calculation unit 818, and registration unit 819. Control device 81 functions as information acquisition unit 811, registration unit 812, hash generation unit 813, transaction data generation unit 814, digital signature unit 815, transaction data transmission unit 816, reading unit 817, calculation unit 818, and registration unit 819 by executing a program stored in ROM 82, for example. In addition, the information acquisition unit 811, registration unit 812, hash generation unit 813, transaction data generation unit 814, electronic signature unit 815, transaction data transmission unit 816, reading unit 817, calculation unit 818, and registration unit 819 may be realized, for example, by dedicated hardware (electronic circuit).

[0141] Information acquisition unit 811 acquires battery information 17 from vehicle 40 via communication device 84. When information acquisition unit 811 acquires battery information 17, it outputs the acquired battery information 17 to registration unit 812 and hash generation unit 813. Note that hash generation unit 813, transaction data generation unit 814, digital signature unit 815, and transaction data transmission unit 816 have the same functions as hash generation unit 113, transaction data generation unit 114, digital signature unit 115, and transaction data transmission unit 116 according to the first embodiment, respectively, and therefore their description will not be repeated.

[0142] The registration unit 812 stores the battery information 17 received from the information acquisition unit 811 in a specified hierarchical level of the storage device 88. Specifically, the registration unit 812 outputs a control signal to the storage device 88, specifying that the battery information 17 is to be stored in the second hierarchical level. More specifically, the registration unit 812 identifies a battery ID from the battery information 17 received from the information acquisition unit 811, and outputs a control signal to the storage device 88 for storing the battery information 17 in chronological order in the second hierarchical level. When the registration unit 812 finishes storing the battery information 17 in the storage device 88, it outputs a notification indicating this to the reading unit 817.

[0143] The reading unit 817 reads out the battery information 17 including the battery ID of the battery 45 accumulated in chronological order from the storage device 88 based on the battery ID, and also reads out the arithmetic expression 27 from the storage device 86. Hereinafter, the battery information 17 (including the battery ID of the battery 45) that has been read out collectively will also be referred to as a "battery information group." The reading unit 817 outputs the read battery information group and the arithmetic expression 27 to the arithmetic unit 818.

[0144] The calculation unit 818 calculates the SOH of the battery 45 by using the battery information group and arithmetic expression 27. The calculation unit 818 outputs the calculated SOH to the registration unit 819.

[0145] The registration unit 819 creates output information 36 including the SOH information received from the calculation unit 818 and a battery ID for identifying the battery 45. Then, the registration unit 819 specifies the hierarchical level in which to store the output information 36, and stores it in the storage device 88. Specifically, the registration unit 819 outputs a control signal specifying that the output information 36 is to be stored in the first hierarchical level, to the storage device 88. Note that, if the storage device 88 has already stored the output information 36 including the battery ID of the battery 45, it overwrites the already stored output information 36 with the newly received output information 36.

[0146] <Flowchart> Fig. 11 is a flowchart showing the procedure of processing executed by the disclosure server 80. The processing of the flowchart shown in Fig. 11 is executed by the control device 81 of the disclosure server 80 at predetermined intervals. Each step of the flowchart shown in Fig. 11 will be described as being realized by software processing by the control device 81, but a part or all of it may be realized by hardware (electronic circuitry) created within the control device 81.

[0147] In S30, the control device 81 acquires the battery information 17 from the vehicle 40. In a case where the vehicle 40 is configured not to output the battery information 17 during sleep, when the battery information 17 is not transmitted because the vehicle 40 is in a sleep state, the process returns to RETURN.

[0148] In S31, the control device 81 determines the hierarchical level of the storage device 88 in which to store the battery information 17 acquired in S30. Specifically, the control device 81 determines the hierarchical level of the storage device 88 in which to store the information based on the type of information. Since the information to be stored is the battery information 17, the control device 81 determines that this information (battery information 17) is to be stored in the second hierarchical level of the storage device 88.

[0149] In S32, the control device 81 stores the battery information 17 acquired in S30 in the second layer of the storage device 88. In accordance with a control signal from the control device 11, the storage device 88 stores the battery information 17 in the second layer for each battery ID and in chronological order.

[0150] In S33, the control device 81 hashes the battery information 17 acquired in S30 using a hash function to generate a battery hash.

[0151] In S34, the control device 81 reads the private key from the storage device 85. Then, the control device 81 uses the private key to encrypt the battery hash generated in S33 to generate a digital signature.

[0152] In S35, the control device 81 generates transaction data including the battery hash and the electronic signature. In addition to the above, the control device 81 includes in the transaction data a battery ID corresponding to the battery hash, time information for broadcasting the transaction data to the blockchain network NW2 (which may be time information indicating the occurrence time of the process corresponding to the transaction data), and sender information of the transaction data.

[0153] In S36, the control device 81 outputs a control signal for transmitting the generated transaction data to the block chain network NW2 to the communication device 84. As a result, the transaction data is transmitted to the block chain network NW2 via the communication device 84.

[0154] In S37, the control device 81 reads out from the storage device 88 all the battery information 17 (battery information group) including the battery ID of the battery 45 that has been accumulated in chronological order in the storage device 88, and also reads out the arithmetic expression 27 from the storage device 86.

[0155] In S38, the control device 81 calculates the SOH of the battery 45 using the battery information group read out in S36 and the arithmetic expression 27.

[0156] In S39, the control device 81 creates output information 36 including the SOH information calculated in S37 and a battery ID for identifying the battery 45.

[0157] In S40, the control device 11 determines the hierarchical level of the storage device 88 in which to accumulate the output information 36 created in S39. Specifically, the control device 81 determines the hierarchical level of the storage device 88 in which to store the information, based on the type of information. Since the information to be stored is the output information 36, the control device 81 determines that this information (output information 36) is to be stored in the first hierarchical level of the storage device 88.

[0158] In S41, the control device 81 stores the output information 36 in the first hierarchical layer of the storage device 88. The storage device 88 stores the output information 36 in the first hierarchical layer in accordance with a control signal from the control device 11.

[0159] As described above, in the data management system 2 according to the second embodiment, the disclosure server 80 receives the battery information 17 from the vehicle 40. The storage device 88 connected to the disclosure server 80 has three hierarchical levels, the first to third hierarchical levels, in which the authority information is set differently in the storage area. The disclosure server 80 stores the battery information 17 received from the vehicle 40 in the second hierarchical level, in which the disclosure range is limited to a specific business operator. The disclosure server 80 then calculates the SOH from the battery information 17 (battery information group) and the arithmetic expression 27 stored in the storage device 86, and stores the calculated SOH (output information 36) in the first hierarchical level of the storage device 88. Since the SOH is stored in the first hierarchical level, which discloses information in response to a disclosure request that specifies a battery ID, the SOH, which is information that is required to be disclosed by laws and regulations, can be appropriately disclosed. On the other hand, while arithmetic formula 27 can be estimated from the input (battery information 17) and output (SOH), arithmetic formula 27 can be appropriately concealed by storing the input (battery information 17) in the second hierarchical layer of storage device 88 and arithmetic formula 27 in storage device 86. This makes it possible to prevent arithmetic formula 27 from being known outside company A (except for disclosure server 80). Note that the input (battery information 17) may be concealed even from specified business operators by storing battery information 17 in the third hierarchical layer.

[0160] Also, similar to the data management device 10 according to the first embodiment, blockchain-based software is introduced into the disclosure server 80. By the functioning of the blockchain-based software, the disclosure server 80 functions as a node and forms a blockchain network NW2 together with the disclosure server 80A. The disclosure server 80 generates transaction data including a battery hash obtained by hashing the battery information 17 acquired from the vehicle 40, and transmits the transaction data to the blockchain network NW2. By storing the battery hash in the BLC data 16, the tamper resistance of the battery information 17 can be improved. Therefore, the reliability of the SOC of the battery 45 calculated using the battery information 17 can be improved. Therefore, the reliability of the SOH of the battery 45 calculated using the battery information 17 can be improved.

[0161] Furthermore, if the battery information 17 itself is stored in the BLC data 16, the battery information 17 will be disclosed to the disclosure servers 80A in countries B, C, and D. By storing the hash value of the battery information 17 in the BLC data 16, it is possible to ensure resistance to tampering of the battery information 17 while keeping the battery information 17 secret from the disclosure servers 80A in countries B, C, and D.

[0162] [Variation 4] In the first and second embodiments and the first to third modifications, the data management systems 1 and 2 manage and disclose an index indicating the state of a battery mounted on a vehicle. However, the index managed and disclosed by the data management systems 1 and 2 is not limited to that of a battery mounted on a vehicle. The data management systems 1 and 2 can be applied to manage and disclose indexes indicating the state of various batteries. The data management systems 1 and 2 can also be applied to manage and disclose an index indicating the state of a stationary battery, for example. Furthermore, the data management systems 1 and 2 can also be applied to manage and disclose indexes indicating the state of a plurality of types of batteries, such as an index indicating the state of a battery mounted on a vehicle and an index indicating the state of a stationary battery.

[0163] The embodiments disclosed herein should be considered to be illustrative and not restrictive in all respects. The scope of the present disclosure is defined by the claims, not by the description of the embodiments described above, and is intended to include all modifications within the meaning and scope of the claims. [Explanation of symbols]

[0164] 1,2 Data management system, 10,10A Data management device, 11 Control device, 12 ROM, 13 RAM, 14 Communication device, 15 Storage device, 16 BLC data, 17 Battery information, 18 Storage device, 19 Bus, 20 Arithmetic device, 21 Control device, 22 ROM, 23 RAM, 24 Communication device, 25 Storage device, 26 Arithmetic information, 27 Arithmetic formula, 29 Bus, 30 Disclosure server, 31 Control device, 32 ROM, 33 RAM, 34 Communication device, 35 Storage device, 36 Output information, 39 Bus, 40,40A Vehicle, 45,45A Battery, 50 External device, 80,80A Disclosure server, 81 Control device, 82 ROM, 83 RAM, 84 Communication device, 85,86 Storage device, 88 Storage device, 89 Bus, 100 Data management server, 111 Information acquisition unit, 112 Registration unit, 113 hash generation unit, 114 transaction data generation unit, 115 electronic signature unit, 116 transaction data transmission unit, 117 data transmission unit, 118 response unit, 119 notification unit, 160 block, 211 information acquisition unit, 212 hash request unit, 213 verification unit, 214 update unit, 215 reading unit, 216 calculation unit, 217 output unit, 218 reporting unit, 811 information acquisition unit, 812 registration unit, 813 hash generation unit, 814 transaction data generation unit, 815 electronic signature unit, 816 transaction data transmission unit, 817 reading unit, 818 calculation unit, 819 registration unit, NW1, NW2 blockchain network.

Claims

1. 1. A data management system that provides an indicator of a battery state to a disclosure server that discloses the indicator, a data management device that acquires data of the battery and stores transaction data including a hash value obtained by hashing the acquired data of the battery in a distributed ledger; a calculation device that acquires the battery data from the data management device and calculates the index using the battery data and a predetermined calculation formula; The computing device provides the index to the disclosure server, while concealing the battery data and the predetermined computational formula from the disclosure server.

2. a storage device that accumulates data of the battery in chronological order; The data management system according to claim 1 , wherein the calculation device calculates the index using the battery data stored in the storage device and the predetermined calculation formula.

3. 2. The data management system according to claim 1, wherein when the computing device acquires the battery data from the data management device, the computing device compares a hashed value of the acquired battery data with a hash value of the battery data stored in the distributed ledger.

4. The data management system according to claim 1 , further comprising the disclosure server.

5. A disclosure server that manages battery data using a distributed ledger technology and discloses an indicator of the state of the battery, A storage device having a storage area including a first layer for storing disclosable data and a second layer for storing confidential data; a control device; The control device includes: acquiring data of the battery; storing transaction data including a hash value obtained by hashing the data of the battery in a distributed ledger; Calculating the index using data of the battery and a predetermined calculation formula; a disclosure server that stores the index in the first hierarchical layer, and stores the battery data and the predetermined arithmetic expression in the second hierarchical layer.

6. the storage device stores the battery data in chronological order in the second layer; The disclosure server according to claim 5 , wherein the control device calculates the index by using the battery data accumulated in the second layer and the predetermined arithmetic expression.

7. 1. A computer-implemented method for providing an indication of a battery condition to a disclosure server that discloses the indication, the method comprising: acquiring data of the battery, and storing transaction data including a hash value obtained by hashing the acquired data of the battery in a distributed ledger; calculating the index using data of the battery and a predetermined calculation formula; providing the indicator to the disclosure server while concealing the battery data and the predetermined calculation formula from the disclosure server.

8. A disclosure method executed by a disclosure server that manages battery data using distributed ledger technology and discloses an indicator of the state of the battery, comprising: The disclosure server includes: A storage device having a storage area including a first layer for storing disclosable data and a second layer for storing confidential data; a control device; The disclosed method comprises: acquiring data of the battery; storing transaction data including a hash value obtained by hashing the data of the battery in a distributed ledger; calculating the index using data of the battery and a predetermined calculation formula; storing the indicator in the first hierarchical layer, and storing the battery data and the predetermined arithmetic expression in the second hierarchical layer.

9. A program for causing a computer to execute a process of providing an indicator indicating a battery state to a disclosure server that discloses the indicator, the program comprising: acquiring data of the battery, and storing transaction data including a hash value obtained by hashing the acquired data of the battery in a distributed ledger; calculating the index using data of the battery and a predetermined calculation formula; providing the indicator to the disclosure server while concealing the battery data and the predetermined arithmetic expression from the disclosure server.

10. A program executed by a disclosure server that manages battery data using a distributed ledger technology and discloses an indicator of the state of the battery, The disclosure server includes: A storage device having a storage area including a first layer for storing disclosable data and a second layer for storing confidential data; a control device; The program is acquiring data of the battery; storing transaction data including a hash value obtained by hashing the data of the battery in a distributed ledger; calculating the index using data of the battery and a predetermined calculation formula; storing the index in the first hierarchical layer, and storing the battery data and the predetermined arithmetic expression in the second hierarchical layer.

Images