Authentication system and authentication method

Abstract

This authentication system comprises an authentication medium to be provided to a user, an apparatus that is enabled to execute a specific operation when the user is authenticated successfully through communication with the authentication medium, and a server device that receives, from a terminal device of the user, authentication medium identification information input to the terminal device and input information input to the terminal device as membership information relating to the user. The server device comprises a first storage unit that stores the membership information relating to the user in advance, and an authentication medium registration unit that registers, as an effective authentication medium, the authentication medium of the user if the input information received from the terminal device matches the membership information stored in the first storage unit. The apparatus comprises an authentication unit that authenticates the user of the authentication medium by communicating with the authentication medium registered as the effective authentication medium.

Description

[Technical Field]

[0001] The present invention relates to an authentication system and an authentication method. [Background technology]

[0002] A battery sharing service (hereinafter referred to as a "battery exchange service") has been provided under the premise of battery exchange, in which a charged detachable battery is removed from a container and attached to a mobile object such as an electric scooter. For example, this service involves installing battery exchange devices at multiple locations in a local area, allowing users to exchange their detachable batteries by visiting the charging and exchange devices.

[0003] Regarding such battery exchange services, an authentication system has been proposed that enables battery exchange by performing user authentication (see, for example, Patent Document 1). Patent Document 1 describes that communication is performed between an authentication medium and a battery exchange device, and if the ID information matches, battery exchange is enabled.

[0004] However, in conventional authentication systems, when a user applied to use a battery exchange service, the battery exchange service provider had to link the user who applied with the authentication medium to be supplied to that user, which could have increased the management burden associated with providing the service. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent Publication No. 2021-078175 Summary of the Invention [Problem to be solved by the invention]

[0006] The present invention has been made in consideration of the above circumstances, and one of its objects is to provide an authentication system and authentication method that can reduce the management load related to service provision. [Means for solving the problem]

[0007] The authentication system and authentication method according to the present invention employ the following configuration.

[0008] (1): An authentication system according to one embodiment of the present invention comprises an authentication medium provided to a user; a target device that is capable of executing a predetermined operation when authentication of the user is successful through communication with the authentication medium; and a server device that receives from the user's terminal device identification information of the authentication medium entered into the user's terminal device and input information entered into the terminal device as the user's membership information, wherein the server device comprises a first memory unit that pre-stores the user's membership information, and an authentication medium registration unit that registers the user's authentication medium as a valid authentication medium when the input information received from the terminal device matches the membership information stored in the first memory unit, and the target device comprises an authentication unit that authenticates the user of the authentication medium by communicating with the authentication medium registered as the valid authentication medium.

[0009] (2): In the above aspect (1), in the server device, the authentication medium registration unit transmits identification information of the authentication medium registered as the valid authentication medium to the target device, and the target device further includes a second memory unit that stores the identification information received from the server device, and the authentication unit authenticates the user of the authentication medium when the identification information obtained from the authentication medium through communication with the authentication medium matches the identification information stored in the second memory unit.

[0010] (3): In the above aspect (2), the authentication medium registration unit transmits to the target device at a predetermined frequency the identification information of the authentication medium that has been registered as the valid authentication medium and has not yet been transmitted to the target device.

[0011] (4): In the above aspect (1), in the server device, the authentication medium registration unit records the identification information of the authentication medium registered as the valid authentication medium in the first memory unit, and in the target device, the authentication unit inquires of the server device whether the identification information obtained from the authentication medium through communication with the authentication medium matches the identification information stored in the first memory unit, and if they match, authenticates the user of the authentication medium.

[0012] (5): In any of the above aspects (1) to (4), the authentication medium further includes a display unit that displays a figure in which the identification information is encoded, and the terminal device includes an imaging unit that captures an image of the figure, a reading unit that decodes the image of the figure captured by the imaging unit to obtain the identification information, and a transmitting unit that transmits the identification information obtained by the reading unit to the server device as the input information.

[0013] (6): In any of the above aspects (1) to (5), the target device further includes a battery replacement unit that collects used batteries and replaces them with charged batteries, and a near-field communication unit that wirelessly communicates with an authentication medium located within a predetermined distance from the target device, and the authentication unit enables the battery replacement unit to replace the battery when the user of the authentication medium is authenticated by communication between the near-field communication unit and the authentication medium.

[0014] (7): In the above aspect (6), the target device further includes a detection unit that detects the amount of usage of the battery when the battery is returned, and the battery replacement unit transmits to the server device identification information of the authentication medium obtained in the authentication related to the return of the battery and information on the amount of usage of the battery, and the server device further includes a usage fee calculation unit that identifies the user of the battery based on the identification information of the authentication medium received from the target device and calculates the usage fee for the battery used by the user over a specified period based on the usage information.

[0015] (8): An authentication system according to one embodiment of the present invention comprises an authentication medium provided to a user, a target device that is capable of executing a predetermined operation if authentication of the user is successful, and a server device that receives from the user's terminal device identification information of the authentication medium entered into the user's terminal device and input information entered into the terminal device as the user's membership information, wherein the server device comprises a first memory unit that pre-stores the user's membership information, and an authentication medium registration unit that registers the user's authentication medium as a valid authentication medium if the input information received from the terminal device matches the membership information stored in the first memory unit, and the target device comprises an authentication unit that authenticates the user of the authentication medium if identification information read from the authentication medium matches the identification information of the authentication medium registered as the valid authentication medium.

[0016] (9): An authentication method according to one embodiment of the present invention is a method for authenticating a user using a target device that is capable of executing a predetermined operation when authentication of the user is successful through communication with an authentication medium provided to the user, and a server device that receives from the user's terminal device identification information of the authentication medium entered into the user's terminal device and input information entered into the terminal device as the user's membership information, wherein the server device pre-stores the user's membership information in a first memory unit, and when the input information received from the terminal device matches the membership information stored in the first memory unit, registers the user's authentication medium as a valid authentication medium, and the target device authenticates the user of the authentication medium by communicating with the authentication medium registered as the valid authentication medium.

[0017] (10): An authentication method according to one aspect of the present invention is a method for authenticating a user using an authentication medium provided to the user, a target device that can perform a predetermined operation if authentication of the user is successful, and a server device that receives from the user's terminal device identification information of the authentication medium entered into the user's terminal device and input information entered into the terminal device as the user's membership information, wherein the server device pre-stores the user's membership information in a first memory unit, and when the input information received from the terminal device matches the membership information stored in the first memory unit, registers the user's authentication medium as a valid authentication medium, and the target device authenticates the user of the authentication medium when the identification information read from the authentication medium matches the identification information of the authentication medium registered as the valid authentication medium. [Effects of the Invention]

[0018] According to the above aspects (1) to (10), it is possible to reduce the management burden on the business operator in providing the battery exchange service. Specifically, according to aspects (1), (8) to (10), the business operator does not need to perform the work of linking the authentication medium with the user, so the business operator can register the authorized user to the authentication medium while suppressing the operating costs.

[0019] Furthermore, according to the above aspects (2) and (3), even when the target device and the server device are offline, the target device alone can authenticate the user, thereby improving the convenience of the battery exchange service.

[0020] Furthermore, according to the above aspect (4), it is possible to always perform user authentication in the latest state without taking into consideration the time lag until the information of the server device is reflected in the target device.

[0021] Furthermore, according to the above aspect (5), it is possible to prevent the authentication medium from being erroneously registered due to manual input by the user, and also to reduce the complexity of input.

[0022] Furthermore, according to the above aspect (6), the above authentication system can be suitably applied to the authentication of a battery exchange device.

[0023] Furthermore, according to the above aspect (7), the charges for each user can be easily managed using the authentication medium. [Brief explanation of the drawings]

[0024] [Figure 1] 1 is a diagram illustrating an example of an overall configuration diagram of a battery exchange system according to an embodiment; [Figure 2] 1 is a diagram illustrating an example of a configuration of an electric vehicle according to an embodiment; [Figure 3] 1 is a block diagram showing an example of the configuration of a detachable battery according to an embodiment; [Figure 4] 1 is a diagram illustrating an example of a configuration of a battery exchange device according to an embodiment; [Figure 5] FIG. 2 illustrates an example of a configuration of a management server according to an embodiment. [Figure 6] FIG. 10 is a diagram illustrating an example of the contents of a user management table. [Figure 7] FIG. 10 is a diagram illustrating an example of the contents of a state table. [Figure 8] FIG. 2 is a diagram illustrating an example of a configuration of a user card according to an embodiment. [Figure 9] 10 is a flowchart illustrating an example of a flow of pre-use processing executed by the battery exchange system of the embodiment. [Figure 10] 10 is a flowchart illustrating an example of the flow of a service providing process executed by the battery exchange system of the embodiment. [Figure 11] FIG. 1 is a first diagram showing an example of a viewing screen for information regarding usage fees. [Figure 12] FIG. 2 is a second diagram showing an example of a viewing screen for information regarding usage fees. DETAILED DESCRIPTION OF THE INVENTION

[0025] Hereinafter, with reference to the drawings, embodiments of the authentication system and authentication method of the present invention will be described. In the following description, the battery exchange system manages multiple battery exchange devices (charging / discharging stations) that accept the return and rental of removable batteries that supply power for electric vehicles. The electric vehicles are equipped with one or more removable batteries rented from the battery exchange devices and run on the power supplied from the installed removable batteries. The electric vehicles may also be hybrid electric vehicles or fuel cell vehicles that run on a combination of a removable battery and an internal combustion engine such as a diesel engine or a gasoline engine. In addition to electric motorcycles, electric vehicles that can be applied to the battery exchange system may also include vehicles such as electric bicycles, electric tricycles, electric four-wheeled vehicles, hybrid vehicles, electric kick scooters, or robots. The multiple removable batteries installed in the electric vehicles may be rented to users as a battery unit.

[0026] <Overall configuration of battery exchange system 1> FIG. 1 is a diagram illustrating an example of the overall configuration of a battery exchange system 1 according to an embodiment. The battery exchange system 1 is a system that provides a battery exchange service to a user U. The battery exchange service is a service that charges and exchanges (returns or lends) removable batteries 100, which are the driving sources of electric vehicles 10. The battery exchange system 1 includes, for example, a plurality of removable batteries 100, a plurality of battery exchange devices 200, and a management server 300. A user terminal device 400 is an information processing device used by a user U of the battery exchange system 1. The management server 300 is communicably connected to the plurality of battery exchange devices 200 and the user terminal device 400 via a network NW. The electric vehicle 10 may be communicably connected to the network NW. The network NW includes, for example, the Internet, a cellular network, a Wi-Fi network, a wide area network (WAN), a local area network (LAN), Bluetooth (registered trademark), and the like. The management server 300 is an example of a "server device."

[0027] The battery exchange device 200 is a device that charges and exchanges (returns or lends) the detachable battery 100 that is the driving source of the electric vehicle 10. The detachable battery 100 is detachably attached to the electric vehicle 10. The detachable battery 100 may be a power supply device used for applications such as a mobile portable power source. The battery exchange device 200 may also discharge the detachable battery 100 for grid connection or the like.

[0028] In the battery exchange system 1 shown in the example of FIG. 1 , a user U uses a user terminal device 400 to apply for a battery exchange service to the management server 300. When the management server 300 accepts the application from the user U, it notifies the product provider D of this fact. Upon receiving this notification, the product provider D delivers products for using the battery exchange service to the user U who has applied for the service related to the notification. The product provider D is, for example, a dealer that sells the electric vehicle 10 or a leasing company that rents the electric vehicle 10. The product provider D may also be the manufacturer of the electric vehicle 10. The product provider D delivers the electric vehicle 10, the detachable battery 100, and the user card 30 to the user U as products for using the battery exchange service. If the user U owns an electric vehicle 10 that can use the detachable battery 100, the product provider D may deliver the detachable battery 100 and the user card 30 to the user U as products for using the battery exchange service. A user U can use the battery exchange service by activating the provided user card 30 in the battery exchange system 1. The battery exchange service is performed by the battery exchange system 1 shown in the example of Figure 1. Each component will be explained below in order.

[0029] [Electric Vehicle 10] The electric vehicle 10 is a vehicle that detachably mounts a removable battery 100. The example in FIG. 1 shows a saddle-ride type electric vehicle (electric two-wheeler) 10-1 and an in-cabin type electric vehicle (electric four-wheeler) 10-2, both of which travel using an electric motor driven by power supplied by a power storage unit 120 (described below) of the removable battery 100. For example, the electric vehicle 10-1 shown in FIG. 1 can be equipped with two removable batteries 100, and the electric vehicle 10-2 can be equipped with three removable batteries 100. In this way, the number of removable batteries that can be mounted varies depending on the type and shape of the electric vehicle 10. Furthermore, the removable batteries that can be used may differ depending on the vehicle model. In the following description, the electric two-wheeler will mainly be referred to as the "electric vehicle 10."

[0030] 2 is a diagram showing an example of the configuration of an electric vehicle 10 according to an embodiment. The electric vehicle 10 includes, for example, a battery connection unit 12, a vehicle control unit 14, a driving force output device 16, a vehicle sensor 18, and an HMI (Human Machine Interface) 20. 、G The device includes an NSS (Global Navigation Satellite System) receiver 22 and a communication unit 24 .

[0031] The battery connector 12 is electrically connected to a connector 150 (described later) of the removable battery 100 when the removable battery 100 is attached to the electric vehicle 10. The battery connector 12 includes, for example, a connection terminal (battery terminal) of a power line for receiving power supply from the removable battery 100, a connection terminal of a communication line for performing data communication between the removable battery 100 and the vehicle control unit 14, and the like.

[0032] The vehicle control unit 14 acquires measurement results from the vehicle sensors 18, acquires a value indicating the state of charge (SOC: State of Charge) of the power storage unit 120 from a BMU (Battery Management Unit) 110 (described later) of the removable battery 100, and acquires the position of the electric vehicle 10 from the GNSS receiver 22. Based on the acquired data, the vehicle control unit 14 controls the driving force output device 16 in response to an operation on an operator (not shown) or by autonomous driving. The vehicle control unit 14 may output the position information of the electric vehicle 10 acquired from the GNSS receiver 22 to the removable battery 100 via the battery connector 12.

[0033] The traveling driving force output device 16 includes, for example, an electric motor, an inverter, and an ECU (Electronic Control Unit) that controls the inverter. The ECU controls the power supplied to the electric motor from the detachable battery 100, for example, by controlling the inverter. In this way, the ECU controls the driving force (torque) that the electric motor outputs to the drive wheels. Furthermore, the traveling driving force output device 16 controls the output frequency of the inverter to be lower than the rotation speed of the drive wheels, thereby causing the electric motor to operate as a regenerative brake, converting the braking energy of the drive wheels into electrical energy, and charging the detachable battery 100.

[0034] The vehicle sensors 18 include various sensors such as a speed sensor, an acceleration sensor, a rotational speed sensor, an odometer, and the like, which are mounted on the electric vehicle 10. The vehicle sensors 18 output the measurement results to the vehicle control unit 14.

[0035] The HMI 20 outputs various information to the user of the electric vehicle 10 and accepts input operations by the occupant. The HMI 20 includes, for example, various display devices (which may be touch panels) such as a HUD (Head Up Display) and a meter display unit, a speaker, etc.

[0036] The GNSS receiver 22 measures the position of the electric vehicle 10 based on radio waves received from GNSS satellites such as GPS satellites.

[0037] The communication unit 24 communicates with the management server 300 via the network NW. For example, the communication unit 24 transmits to the management server 300 position information of the electric vehicle 10 measured by the GNSS receiver 22 together with a vehicle ID serving as identification information for identifying the vehicle at an arbitrary timing. Here, the arbitrary timing refers to, for example, every predetermined time interval or every predetermined mileage, when the electric vehicle 10 is started or stopped, or at a predetermined time. The communication unit 24 may also transmit the position of the electric vehicle 10 to the management server 300 when an inquiry about the position of the electric vehicle 10 is received from the management server 300. The communication unit 24 may also transmit to the management server 300 the charge states of the two removable batteries 100 mounted on the electric vehicle 10 in addition to the position information of the electric vehicle 10. The communication unit 24 may also communicate with the battery exchange apparatus 200 via the network NW.

[0038] [Detachable Battery 100] 3 is a block diagram showing an example of the configuration of the detachable battery 100 according to the embodiment. The detachable battery 100 includes, for example, a power storage unit 120, a BMU 110, and a connection unit 150. The BMU 110 also includes a measurement sensor 130 and a storage unit 140.

[0039] The BMU 110 controls charging and discharging of the power storage unit 120, performs cell balancing, detects abnormalities in the power storage unit 120, derives the cell temperature of the power storage unit 120, derives the charge / discharge current of the power storage unit 120, and estimates the SOC of the power storage unit 120. The BMU 110 stores abnormalities, failures, etc. of the power storage unit 120, which are identified based on the measurement results of the measurement sensor 130, in the memory unit 140 as battery state information.

[0040] The power storage unit 120 is, for example, a battery pack in which a plurality of cells are connected in series. The cells constituting the power storage unit 120 are, for example, lithium-ion secondary batteries (LIBs), nickel-metal hydride batteries, all-solid-state batteries, etc.

[0041] The measurement sensor 130 is a voltage sensor, a current sensor, a temperature sensor, etc. for measuring the state of charge of the power storage unit 120. The measurement sensor 130 outputs the measurement results of the measured voltage, current, temperature, etc. to the BMU 110.

[0042] The storage unit 140 includes a non-volatile storage device such as a flash memory. The storage unit 140 stores battery status information. The storage unit 140 may also store a battery ID assigned to the removable battery 100.

[0043] The connection unit 150 is electrically connected to the battery connection unit 12 when the removable battery 100 is attached to the electric vehicle 10. Furthermore, when the removable battery 100 is accommodated in one of a plurality of slots 210 present in the battery exchange apparatus 200, the connection unit 150 is electrically connected to the battery exchange apparatus 200 and receives a supply of power from the battery exchange apparatus 200 to charge the power storage unit 120. The connection unit 150 includes, for example, a connection terminal for a power line (battery terminal) and a connection terminal for a communication line so as to correspond to the battery connection unit 12 and the connection unit 220 (described later).

[0044] [Battery exchange device 200] 4 is a diagram illustrating an example of the configuration of a battery exchange device 200 according to an embodiment. The battery exchange device 200 includes, for example, a plurality of slots 210, a plurality of connection units 220, a charger 230, a display unit 235, a reading unit 240, an authentication unit 245, a communication unit 250, and a control unit 260.

[0045] The slot 210 is a mechanism for receiving and charging the removable battery 100. In the battery exchange apparatus 200 shown in the example of FIG. 1, the slots 210 include, for example, an upper slot 210U (see FIG. 1) and a lower slot 210L (see FIG. 1). Each slot includes, for example, a turntable that rotates around a vertical axis. A battery storage section that stores the removable battery 100 is provided on the turntable. The battery storage sections are provided, for example, in each of the four equal areas that are partitioned when viewed from above. Note that the configuration of the battery exchange apparatus 200 for receiving (returning) and lending removable batteries 100 is not limited to this, and may be configured, for example, such that the storage sections for removable batteries are arranged in a matrix. The following description will be given using the above-described turntable-type configuration.

[0046] Before a user returns or lends a removable battery 100, the battery exchange apparatus 200 authenticates the user using the authentication unit 245 (described later). For example, the authentication unit 245 permits a user who has been successfully authenticated to return a used removable battery 100 or lend a charged removable battery 100 (hereinafter referred to as a "charged battery 100"). The battery exchange apparatus 200 also has an outlet on the front side. The outlet may be automatically opened when the authentication unit 245 authorizes the user. The battery storage compartment located at the outlet can be swapped by rotating a turntable. For example, if the authentication unit 245 authorizes the user to use the battery exchange apparatus 200, the battery exchange apparatus 200 positions an empty battery storage compartment at the outlet on the front side, ready to accept the user's return of the removable battery 100. When the removable battery 100 is returned to the battery storage compartment, the battery ID of the removable battery 100 is read. The battery exchange device 200 also rotates the turntable to position the battery storage unit that stores the charged battery 100 at the front outlet. This allows the user to remove the charged battery 100 and attach it to the electric vehicle 10. At the time of this rental, the control unit 260 transmits the user ID of the user and the battery ID of the newly rented removable battery 100 to the management server 300 as usage information.

[0047] A connection section 220 is provided for each slot on the bottom surface of the battery housing section of each of the multiple slots 210. The connection section 220 is electrically connected to the connection section 150 of the removable battery 100 when the removable battery 100 is housed in the battery housing section. The connection section 220 includes, for example, a connection terminal (battery terminal) for a power line for supplying power to the removable battery 100, and a connection terminal for a communication line for performing data communication (e.g., serial communication) between the removable battery 100 and the control section 260.

[0048] The charger 230 is connected to the power storage unit 120 of the removable battery 100 via a plurality of connection units 220. A charger 230 may be provided for each of the plurality of connection units 220, or may be provided as a common configuration for the plurality of connection units 220. A power source for supplying power to the power storage unit 120 is connected to the charger 230. The charger 230 converts the power supplied from the power source into, for example, direct current and supplies it to the power storage unit 120.

[0049] The display unit 235 is, for example, any of various display devices such as an LCD (Liquid Crystal Display) or an organic EL (Electro Luminescence) display. The display unit 235 may also be a touch panel. The display unit 235 displays various information when the user uses the battery exchange apparatus 200, and receives input of predetermined information (for example, authentication information) from the user.

[0050] The reading unit 240 reads authentication information and other information from the user card 30, which is an example of an authentication medium held by the user. The authentication information includes, for example, a card ID and a security code, which are identification information of the user card 30. The reading unit 240 outputs the read authentication information to the control unit 260. Details of the user card 30 will be described later. The reading unit 240 is an example of a "near field communication unit."

[0051] The authentication unit 245 determines whether to permit the user to use the battery exchange apparatus 200 based on the authentication information received from the display unit 235 or read by the reading unit 240. The authentication information may be acquired, for example, from the user's voice collected by a microphone (not shown) of the battery exchange apparatus 200. For example, the authentication unit 245 uses the authentication information to compare it with an authentication list 282 stored in the storage unit 280, and determines that the user has been successfully authenticated if the authentication list 282 contains information matching the authentication information. The authentication list 282 contains authentication information for comparison of one or more users, and is distributed by the management server 300 to each battery exchange apparatus 200 at a predetermined timing or period. The battery exchange apparatus 200 permits the user to use its own apparatus if the authentication list 282 contains authentication information for comparison that matches the authentication information presented by the user (hereinafter referred to as "authentication information"). The storage unit 280 is an example of a "second storage unit."

[0052] The authentication list 282 may include information other than the verification authentication information. For example, the authentication list 282 may include information such as the user ID and password of a user authorized to use the battery exchange apparatus 200, an expiration date, the number of removable batteries 100 that can be rented, and a status. The expiration date is, for example, the last day of the period during which the battery exchange apparatus 200 can be used. The number of removable batteries 100 that can be rented is, for example, the number of removable batteries 100 that can be installed in an electric vehicle 10 associated with the card ID. The status is information indicating the usage status of the battery exchange system 1 in the electric vehicle 10 associated with the card ID. The usage status includes, for example, whether a removable battery 100 is being rented, whether authentication for battery replacement is in progress, or whether usage has been temporarily or permanently suspended due to fraudulent use by a user. By including additional information other than the verification authentication information in the authentication list 282, the battery exchange apparatus 200 can perform processing according to the user authentication result.

[0053] For example, when it is determined that the authentication of a user has been successful, the authentication unit 245 can determine whether the user satisfies predetermined conditions for use. The predetermined conditions for use are, for example, that the current date (date of use) is not past the expiration date included in the authentication list 282. The predetermined conditions for use may also include that the user has not engaged in unauthorized use or the like and is in an unusable state (suspension of use). For example, the authentication unit 245 may permit the user to use (return and lend) the battery exchange apparatus 200 when the current date is not past the expiration date included in the authentication list 282.

[0054] Furthermore, if the authentication list 282 does not contain any matching authentication information that matches the authentication information, the authentication unit 245 may transmit the authentication information from the communication unit 250 to the management server 300 to inquire about authentication. In this case, the authentication unit 245 may obtain an authentication result and additional information from the management server 300 as the inquiry result, and if the authentication of the user is successful, may use the additional information to determine whether or not predetermined usage conditions are met. Furthermore, the authentication unit 245 may permit the user to use the battery exchange apparatus 200 if the predetermined usage conditions are met.

[0055] Furthermore, if the authentication of the user is not successful or if the predetermined conditions for use are not met, the authentication unit 245 may notify the user by displaying information on the display unit 235 indicating that the device is not usable. Note that the authentication of the user using the authentication information described above does not necessarily need to be performed every time the removable battery 100 is replaced. Furthermore, instead of (or in addition to) the authentication described above, the authentication unit 245 may perform biometric authentication using biometric information such as the user's fingerprint information, voiceprint information, or iris information. In this case, biometric information for comparison may be stored in the authentication list 282, and the authentication unit 245 may perform authentication by comparing the biometric information with the biometric information for comparison.

[0056] In the following, a case will be described where the above-mentioned authentication information for verification is a card ID as identification information of the user card 30, but information other than a card ID may be used as the authentication information for verification as long as it is information that can identify the user and is recognized by the user card 30. For example, if a user ID or password is displayed or recorded on the user card 30, this information may be used as the authentication information for verification.

[0057] The communication unit 250 includes a wired communication device such as a terminal adapter or an Ethernet (registered trademark) communication device, or a wireless communication device such as a Wi-Fi adapter or 3G / LTE, 4G, or Bluetooth, and communicates with the management server 300, terminal devices, etc. via the network NW.

[0058] The control unit 260 includes, for example, an exchange control unit 262, a charging control unit 264, an authentication list acquisition unit 266, a battery information upload unit 268, a usage information upload unit 270, and a storage unit 280. The exchange control unit 262, the charging control unit 264, the authentication list acquisition unit 266, the battery information upload unit 268, and the usage information upload unit 270 are realized by, for example, a hardware processor such as a CPU (Central Processing Unit) executing a program (software). Furthermore, some or all of the functions may be realized by hardware such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a GPU (Graphics Processing Unit), or may be realized by a combination of software and hardware. The above-mentioned program may be stored in advance in a storage device (a storage device with a non-transitory storage medium) such as an HDD or flash memory of the battery exchange device 200, or may be stored in a removable storage medium such as a DVD, CD-ROM, or memory card, and installed in the storage device of the battery exchange device 200 by inserting the storage medium (non-transitory storage medium) into a drive device, card slot, etc.

[0059] The storage unit 280 may be realized by the various storage devices described above, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a ROM (Read Only Memory), or a RAM (Random Access Memory). The storage unit 280 stores, for example, an authentication list 282, battery information 284, programs, and various other information. The authentication list 282 is distributed by the management server 300. The battery information 284 stores battery IDs assigned to one or more removable batteries 100 managed in the battery exchange apparatus 200, and SOC information (an example of the battery status) for each removable battery 100.

[0060] Based on the authentication result by the authentication unit 245, the replacement control unit 262 controls the return of a used removable battery 100 (hereinafter referred to as "used battery 100") mounted on the electric vehicle 10 and the lending of a charged battery 100. For example, the replacement control unit 262 opens the slot 210 for storing the used battery 100 when returning the battery, and opens the slot 210 in which the charged battery 100 is stored when lending the battery. The replacement control unit 262 may also determine whether the stored used battery 100 is a genuine (genuine) removable battery. In this case, the replacement control unit 262 acquires the battery ID of the stored removable battery 100 and makes an inquiry to the management server 300 based on the acquired battery ID and user information (user ID, card ID). The management server 300 compares the battery ID and user information acquired from the battery exchange device 200 with the user management table 352, etc., and determines that the battery is a genuine removable battery if matching information is found. Otherwise, it determines that the battery is not a genuine removable battery. Examples of cases where the battery is not a genuine removable battery include a battery that is not a genuine product or a removable battery returned by a user other than the one who originally rented it. If the battery is not a genuine removable battery, the management server 300 temporarily or permanently suspends subsequent use by that user. The management server 300 transmits the above-described processing details to the battery exchange device 200 as an inquiry result. If the battery 100 is a genuine removable battery based on the received inquiry result, the replacement control unit 262 performs the above-described rental control. If the battery 100 is not a genuine removable battery, the replacement control unit 262 does not perform rental control, but instead notifies the user of error information or returns the stored used removable battery. The combination of the exchange control unit 262 and the plurality of slots 210 is an example of a "battery exchange unit."

[0061] The charging control unit 264 controls the charger 230 so that the power storage unit 120 is charged to a predetermined state of charge (for example, SOC) based on the state of charge of the power storage unit 120 acquired via a signal line from the removable battery 100. The SOC of the power storage unit 120 is, for example, sequentially transmitted to the charging control unit 264, and the charging control unit 264 associates the battery ID and SOC information of the removable battery 100 with each other and stores them in the storage unit 280 as battery information 284.

[0062] The authentication list acquisition unit 266 records the authentication list delivered from the management server 300 in the storage unit 280 as the authentication list 282. For example, when a new authentication list is delivered from the management server 300, the authentication list acquisition unit 266 replaces the authentication list 282 stored in the storage unit 280 with the newly acquired authentication list.

[0063] Furthermore, for example, if the authentication list distributed from the management server 300 is difference information relative to the authentication list 282 already distributed to the battery exchange apparatus 200, the authentication list acquisition unit 266 updates the authentication list 282 based on the difference information. For example, if the difference information includes additional user information, the authentication list acquisition unit 266 adds verification authentication information for the additional user to the authentication list 282. Furthermore, if the difference information includes a specific user, the authentication list acquisition unit 266 deletes the verification authentication list for the specific user from the authentication list 282. A specific user is, for example, a user whose validity period for using the battery exchange apparatus 200 has expired, a user who has committed fraudulent use, or a user whose usage fee has not been paid and is in arrears. Furthermore, a specific user may include a user who has not used the battery exchange apparatus 200 for a predetermined period of time or more since their last use. As described above, by distributing difference information and updating the authentication list 282, the amount of communication data required for updating can be reduced.

[0064] The battery information uploading unit 268 counts the number of removable batteries 100 that have been fully charged (charged to a predetermined SOC) at, for example, any given timing, and transmits this count to the management server 300 along with its own device ID (identification information for identifying the battery exchange apparatus 200) and battery ID. The "any given timing" here includes, for example, the timing when charging of a removable battery 100 is completed (or when the battery has been charged to a desired SOC) or the timing when a removable battery 100 is lent out. In other words, the "any given timing" may be the timing when a change occurs in the number of removable batteries or the number of charged batteries stored in the battery exchange apparatus 200. Furthermore, the battery information uploading unit 268 may include in the information to be transmitted the "remaining time required for charging" calculated from the charging speed, capacity, etc., for each removable battery 100 that is currently being charged. The combination of the charging control unit 264 and the battery information uploading unit 268 is an example of a "detection unit."

[0065] The usage information upload unit 270 transmits the usage status of the battery exchange device 200 for each user and its own device ID as usage information to the management server 300 at any timing. Here, the arbitrary timing is, for example, the timing when authentication by the authentication unit 245 is permitted and the replacement of the removable battery (e.g., return or rental) is performed. The usage status may include, for example, the user ID, card ID, battery ID of the returned removable battery 100, battery ID of the rented removable battery 100, date and time of replacement (date and time of use), etc. Information uploaded at any timing by the battery information upload unit 268 or the usage information upload unit 270 may be temporarily stored in the storage unit 280.

[0066] [Administration Server 300] FIG. 5 is a diagram illustrating an example of the configuration of the management server 300 according to the embodiment. The management server 300 includes, for example, a communication unit 310, a management unit 320, a distribution unit 330, a usage fee calculation unit 340, and a storage unit 350. The management unit 320 and the distribution unit 330 are implemented by, for example, a hardware processor such as a CPU executing a program (software). Some or all of their functions may be implemented by hardware such as an LSI, ASIC, FPGA, or GPU, or may be implemented by a combination of software and hardware. The above-described program may be stored in advance in a storage device (a storage device having a non-transitory storage medium) such as an HDD or flash memory of the management server 300, or may be stored in a removable storage medium such as a DVD, CD-ROM, or memory card, and installed in the storage device of the management server 300 by inserting the storage medium (non-transitory storage medium) into a drive device, card slot, or the like.

[0067] The storage unit 350 may be realized by the various storage devices described above, or an EEPROM, a ROM, a RAM, etc. The storage unit 350 stores, for example, a user management table 352, a status table 354, map information 356, billing information 358, programs, and various other information.

[0068] 6 is a diagram showing an example of the contents of user management table 352. User management table 352 contains information in which a user ID and a card ID are associated with a password, expiration date, number of mountable batteries, usable battery type, status, loaned battery ID, usage history, detailed information, etc. For example, a card ID is an example of information required for user authentication.

[0069] The expiration date is set, for example, at the time of registration for use of the battery exchange system 1 or at the time of payment of the usage fee. The expiration date may be, for example, a fixed period (e.g., one year from the time of registration or renewal), or may be a date set in association with the expiration date (vehicle inspection date) determined by the vehicle inspection (vehicle renewal inspection established by the government, etc.) of the electric vehicle 10. The number of mountable batteries is the number of batteries that can be mounted on the electric vehicle 10 associated with the card ID. The type of usable battery is information such as the type, size, model number, etc. of the removable battery 100 that can be used by the electric vehicle 10 associated with the card ID.

[0070] The loaned battery ID is identification information of the removable battery 100 currently being loaned to the electric vehicle 10 associated with the card ID. The usage history is information relating to the past usage history of the battery exchange system 1 associated with the user ID and the card ID. The usage history includes, for example, the device ID of the battery exchange device 200 used, the date and time of use, etc. The usage history may also include, for example, information uploaded by the usage information upload unit 270. The detailed information includes, for example, personal information such as the user's address, age, and gender obtained at the time of user registration. The detailed information may also include performance information and vehicle model information of the electric vehicle 10 associated with the card ID. The performance information of the electric vehicle 10 is, for example, the mileage when one charged battery 100 is installed.

[0071] FIG. 7 is a diagram showing an example of the contents of the status table 354. The status table 354 stores information about the status of multiple battery exchange apparatuses 200 managed by the battery exchange system 1. The status table 354 may include, for example, information uploaded by the battery information upload unit 268. The status table 354 is information in which, for example, an apparatus ID, the number of charged batteries in the battery exchange apparatus 200 associated with the apparatus ID and the location of the battery exchange apparatus 200 are associated. If the uploaded information includes the remaining time required to charge each removable battery 100 as described above, the status table 354 may also include information about the number of removable batteries 100 being charged and the remaining time for each removable battery 100. The status table 354 may also include performance information about the removable batteries 100. The performance information about the removable batteries 100 includes, for example, the amount of power when fully charged, the number of times the battery has been charged, the degree of deterioration, and the like.

[0072] The map information 356 may include, for example, information on the position of the battery exchange apparatus 200 in map coordinates, as well as facility information (POI: Points of Interest) such as convenience stores, restaurants, accommodations, and various activity facilities. The map coordinates are, for example, a three-dimensional or two-dimensional coordinate system measured by a GNSS receiver. The map information 356 may also include the position of roads in the map coordinates and other road information. The road information may include, for example, road type (e.g., general road or expressway), number of lanes, traffic regulation information, installed road signs, legal speed limits, radius of curvature (or curvature), width, gradient, unevenness, etc. The map information 356 may be updated as needed by communicating with other devices via the communication unit 310.

[0073] The communication unit 310 includes a wired communication device such as a terminal adapter or an Ethernet (registered trademark) communication device, or a wireless communication device such as a Wi-Fi adapter or 3G / LTE, 4G, or Bluetooth, and communicates with the battery exchange device 200, the electric vehicle 10, etc. via the network NW.

[0074] The management unit 320 manages the usage status (including authentication, etc.) of the user when replacing the removable battery 100 shown in Fig. 6. For example, the management unit 320 manages the content of verification authentication information required when performing authentication in each battery exchange apparatus 200, and manages the timing of delivering the verification authentication information, etc. Furthermore, when an authentication inquiry is made from the battery exchange apparatus 200, the management unit 320 may perform authentication using the authentication information acquired together with the inquiry and the user management table 352, and transmit the authentication result and verification authentication information based on the authentication result to the battery exchange apparatus 200.

[0075] The management unit 320 also accepts new user registrations (applications for use) and requests to change the registered content, and updates the user management table 352 based on the accepted information. New registrations and changes to registered content are performed, for example, by the user communicating with the management server 300 from a terminal device or the like. The management unit 320 also updates the status table 354 based on upload information acquired from the battery exchange device 200. The management unit 320 may also manage, for example, the billing status and expiration date for each user ID or card ID.

[0076] The distribution unit 330 generates an authentication list based on information contained in the user management table 352 and information about the battery obtained from the battery exchange apparatus 200, etc., and distributes the generated authentication list to multiple battery exchange apparatuses.

[0077] The distribution unit 330 generates an authentication list for each battery exchange apparatus 200 and distributes the generated verification authentication information to the corresponding battery exchange apparatus 200. The distribution unit 330 may generate an authentication list including the verification authentication information of all users as an authentication list common to all battery exchange apparatuses 200. While standardizing the authentication list reduces the management load, it may also lead to an increase in the size of the authentication list. Therefore, whether to standardize the authentication list should be selected based on the amount of effort, time, and resource consumption allowed for distributing the authentication list. The distribution unit 330 may store information about the distributed authentication list in the storage unit 350 as a distribution history.

[0078] The distribution unit 330 distributes the generated authentication list at an arbitrary timing. The arbitrary timing may be, for example, a predetermined time (e.g., 10:00 and 20:00 every day) or a predetermined cycle (e.g., half a day, a day, or a week). For example, the distribution unit 330 may execute the process up to generating the above-described authentication list a predetermined time before the distribution timing.

[0079] The distribution unit 330 may generate and distribute the authentication list at any timing. However, the convenience of the battery exchange service can be improved by performing the generation and distribution of the authentication list at the following timing. For example, the distribution unit 330 may be configured to distribute the authentication list using difference information frequently (e.g., every 10 minutes) and distribute the entire authentication list less frequently (e.g., once a day). For example, by updating the authentication list by distributing difference information during times when the communication bandwidth is relatively congested, such as during the day, it is possible to enable new users to start using the service promptly after activating the user card 30. Furthermore, by updating the authentication list by distributing the entire authentication list during times when the communication bandwidth is relatively less congested, such as at night, it is possible to reliably reflect updates that occurred during a day, for example, in the battery exchange device 200.

[0080] The usage fee calculation unit 340 identifies the user of the returned used battery 100 based on the card information received from the battery exchange device 200, and calculates the usage fee for the removable battery 100 used by the user during a predetermined period based on the battery information of the used battery 100. The usage fee calculation unit 340 generates billing information 358 regarding the fee to be billed to the user based on the calculated usage fee, and stores the generated billing information 358 in the storage unit 350.

[0081] [User Card 30] FIG. 8 is a diagram showing an example of the configuration of a user card 30 according to an embodiment. The user card 30 is an example of an authentication medium held by a user. The user card 30 is a medium storing authentication information and other information. The authentication information includes, for example, a card ID and a security code. The user card 30 is, for example, a contactless IC card. Alternatively, the user card 30 may be a contact IC card. For example, the user card 30 is issued for each battery exchange service contract. The contract includes the number of removable batteries 100 to be used and is associated with the electric vehicle 10 that uses the removable battery 100. In this case, the authentication information includes a card ID and a vehicle ID as identification information for identifying the user card 30. The authentication medium held by the user may be an electronic device such as a smartphone or a tablet terminal. The reader 240 may acquire the authentication information not only through communication but also by optically reading information from a code image such as a QR code (registered trademark, the same applies hereinafter).

[0082] The user card 30 also includes a display unit 31 that displays card information. The card information is information that is required when a user activates the user card 30 that has been provided to the user when the user begins using the battery exchange service. The card information includes, for example, identification information for the user card 30 (hereinafter referred to as "card ID") and a security code. FIG. 8 shows an example of a user card 30 in which the display unit 31 displays a QR code 31A indicating card information, a card ID 31B (e.g., 10-digit alphanumeric characters), and a security code 31C (e.g., a 4-digit number).

[0083] For example, the display unit 31 is a medium such as paper or a sticker that is affixed to the surface of the user card 30. Also, for example, the display unit 31 may be an area on the surface of the user card 30 where card information is printed or engraved. Also, if the user card 30 is equipped with a display device such as a liquid crystal display or an organic EL display, the display unit 31 may display the card information using such a display device. Also, the shape of the user card 30 may be a general card shape such as a cash card or credit card, or may be another shape. For example, the user card 30 may be a so-called key holder that can be attached to the key of the electric vehicle 10. and electronic tags may be.

[0084] In the battery exchange system 1 according to the embodiment having such a configuration, for example, a user can read the QR code 31A displayed on his / her user card 30 using the user terminal device 400 and transmit the card information read from the QR code 31A to the management server 300, thereby activating the user card 30. Alternatively, for example, a user can manually input the card ID 31B and security code 31C displayed on his / her user card 30 into the user terminal device 400, and then transmit the input card information to the management server 300, thereby activating the user card 30. In this way, a character string indicating the card information is displayed on the user card 30 in addition to the encoded card information, allowing the user to activate the user card 30 even if the QR code 31A cannot be read. The battery exchange system 1 may also be configured to require the user to manually input the security code 31C even when the card information is read from the QR code 31A.

[0085] In order to enable the user to activate the user card 30, the user terminal device 400 is assumed to include a camera 410 for capturing an image of the QR code 31A, a function for recognizing and decoding the QR code from the image captured by the camera 410, an input unit (such as a touch panel or keyboard) for inputting card information as a character string, and a communication unit (an example of a transmission unit) for transmitting the input card information to the management server 300. The camera 410 is an example of an "imaging unit."

[0086] Furthermore, the user card 30 may be configured to store the card information together with the authentication information in addition to displaying the card information on the display unit 31. In this case, the user terminal device 400 may be configured to include a reading unit that reads information from the memory unit of the user card 30 and to transmit the card information read by the reading unit to the management server 300.

[0087] [Processing flow] The following describes the flow of processing executed by the battery exchange system 1 of the embodiment. The processing executed by the battery exchange system 1 is broadly divided into processing from when a user applies for use of the battery exchange service until the user card 30 is activated (hereinafter referred to as "pre-use processing"), and processing performed when the user uses the activated user card 30 to use the battery exchange service (hereinafter referred to as "service provision processing"). Therefore, the following will explain each type of processing separately.

[0088] [Pre-use process] FIG. 9 is a flowchart showing an example of the flow of pre-use processing executed by the battery exchange system 1 of the embodiment. In the example of FIG. 9, first, a user uses the user terminal device 400 to apply for the battery exchange service to a service provider (hereinafter simply referred to as the "provider") of the battery exchange service (step S101: membership). Specifically, the user transmits his / her personal information to the management server 300, and the application is accepted (step S102). Upon accepting the application, the provider assigns membership information to the user. The management server 300 stores the assigned membership information in the storage unit 350 (first storage unit). The personal information includes, for example, a copy of identification documents (such as a driver's license or health insurance card). Here, it is assumed that the provider is a business entity that serves as a contact point for providing the battery exchange service to users, commissioned by the main operator of the battery exchange service (hereinafter simply referred to as the "service vendor"). The provider coordinates various information between the user and the service vendor. The service vendor may also include a provider, in which case the provider's processing may be executed by the management server 300 .

[0089] Next, the provider verifies the identity of the user based on the personal information uploaded from the user terminal device 400 (step S103). If the identity cannot be verified, the provider returns the process to step S102. On the other hand, if the identity is verified in step S103, the provider prompts the user to add a contract plan, and the user adds the desired contract plan in response (step S104). The process up to this point is the enrollment process for the battery exchange service, and is carried out between the user and the provider.

[0090] When the enrollment process is complete, the management server 300 (service vendor) is notified of the completion of the enrollment process. In response to this notification, the management unit 320 in the management server 300 confirms that the service can be provided for the contract plan added by the user (step S105), and then registers user information related to the provision of the battery exchange service under that contract plan in the user management table 352 (step S106). For example, the management unit 320 registers the user information after confirming the availability of items necessary for service provision and the user's eligibility to use the contract plan. Upon completing the registration of the user information, the management unit 320 notifies the user of a notice to pay the fee required to start using the battery exchange service under that contract plan (hereinafter referred to as the "initial fee") (step S107). After notifying the user of the notice to pay the initial fee in step S107, the management unit 320 waits for the user to make the payment (step S108). If the payment is confirmed, the management unit 320 prompts the user to activate the user card 30. If the deposit cannot be confirmed here, the management unit 320 will continue to wait for the deposit to be made by sending another deposit notification or the like.

[0091] On the other hand, after adding a contract plan in step S104, the user receives a notification from management server 300 informing them of the payment of the initial fee. Upon receiving this notification, the user pays the initial fee (step S109). When management server 300 confirms this payment, management server 300 notifies the user that the battery exchange service will become available upon activation of user card 30. On the other hand, product provider D is notified that the initial fee has been paid, and product provider D delivers to the user a product for using the battery exchange service. The user uses the delivered user card 30 to activate the user card 30 (step S110).

[0092] Specifically, the user logs in to the management server 300 by inputting their own membership information (user ID and password) provided as a result of the identity verification in step S103 into the user terminal device 400, and transmits card information readable from the user card 30 to the management server 300. The reading and input of the card information may be achieved by a reading function of the user terminal device 400, or may be achieved by the user manually inputting information read visually from the user card 30. In the management server 300, the management unit 320 refers to the user management table 352 based on the card information and membership information received from the user terminal device 400, selects a record of the user card 30 to be activated, and updates the status value in the selected record to a value indicating that the battery replacement service is available, thereby activating the target user card 30.

[0093] When activating the user card 30 described above, the management unit 320 provides a login function based on member information to the user who accesses the management server 300. This login function allows the user to transmit member information by logging in to the management server 300. In this way, by having the user transmit card information while logged in, the effort of having the user transmit member information can be eliminated.

[0094] When activating the user card 30, it is possible that a third party who obtains the user's card ID may submit a fraudulent application for use. To prevent such fraudulent applications from being accepted, the management unit 320 may be configured to verify the legitimacy of the requested activation based on the security code 31C included in the received card information. For example, upon accepting a usage application, the management unit 320 issues a security code to be displayed or recorded on the user card 30 of the user who made the usage application and notifies the product provider D. The management unit 320 also stores the issued security code in the memory unit 350 in association with the user ID of the user. In this manner, upon accepting a request to activate the user card 30, the management unit 320 can verify the legitimacy of the activation request by verifying that the security code submitted by the user matches the security code previously stored in the memory unit 350. Since verification of legitimacy using a security code is not essential, if verification of legitimacy is omitted, the security code need not be included in the card information.

[0095] Next, in the management server 300, after the user card 30 has been activated, the distribution unit 330 generates an authentication list (step S111). The distribution unit 330 distributes the generated authentication list to each battery exchange apparatus 200 (step S112: data synchronization). By completing the processing up to this point, the user can use the battery exchange apparatus 200 in accordance with the contract plan for which they have applied.

[0096] [Service provision processing] Fig. 10 is a flowchart showing an example of the flow of a service provision process executed by the battery exchange system 1 of the embodiment. In the example of Fig. 10, first, a user presents the user card 30 provided to the user to the battery exchange apparatus 200 to be used (step S201). More specifically, the user brings the user card 30 close to the reading unit 240 of the battery exchange apparatus 200, causing the battery exchange apparatus 200 to read the card information. The battery exchange apparatus 200 reads the card information (card ID, security code) from the presented user card 30 (step S202), and performs authentication processing of the user based on the read card information (step S203).

[0097] Specifically, the authentication unit 245 determines whether the card ID (authentication information) included in the read card information matches any of the card IDs (verification authentication information) included in the authentication list 282. If there is no matching card ID, the authentication unit 245 determines that the authentication has failed, and if there is a matching card ID, the authentication unit 245 determines that the authentication has succeeded. If the authentication has failed, the authentication unit 245 returns the process to step S202, and if the authentication has succeeded, the authentication unit 245 accepts the return of the used battery 100 by the user (step S204) and instructs the replacement control unit 262 to collect the used battery 100. Upon receiving this instruction, the replacement control unit 262 performs the operation of collecting the used battery 100 (step S205).

[0098] After collecting the used battery 100, the exchange control unit 262 then performs an operation of lending a charged battery 100 (step S206). In response to this lending operation, the user acquires the charged battery 100 from the battery exchange device 200 (step S207) and begins using the acquired charged battery 100 (step S208). The charged battery 100 that has been started to be used here is returned to the battery exchange device 200 as a used battery 100 in the same manner the next time the battery is returned, and is replaced with a new charged battery 100.

[0099] On the other hand, when the used battery 100 is collected in step S205, the battery information uploading unit 268 in the battery exchange apparatus 200 uploads the battery information of the returned used battery 100 to the management server 300 (step S209). In response to this upload of the battery information, the usage fee calculation unit 340 in the management server 300 calculates the usage fee to be charged to the user for the battery exchange service based on the uploaded battery information (step S210). For example, the battery information uploading unit 268 can calculate the usage fee by calculating the amount of discharge of the returned used battery 100 due to use by the user based on the SOC information included in the battery information 284, and multiplying this discharge amount by a predetermined unit price. The predetermined unit price may include a unit price for recovering the loss of deterioration due to discharge of the removable battery 100, in addition to the unit price of electricity. Furthermore, if the amount of regenerated power generated by driving the electric vehicle 10 can be obtained in addition to the amount of discharge, the usage fee calculation unit 340 may calculate the usage fee by subtracting the fee for the line power amount from the fee calculated based on the amount of discharge. The usage fee calculation unit 340 notifies the provider of the calculated usage fee for the user.

[0100] Next, the provider bills the user for the usage fee notified by the management server 300 (step S211) and confirms that the billed usage fee has been paid (step S212), thereby completing the use of one cycle of the removable battery 100 and the settlement of the usage fee. Note that, by billing the user for the usage fee in step S211, the provider can provide the user with information related to the billed usage fee (step S213). For example, the provider issues the user an invoice that includes access information to a website that provides information about the usage fee. The invoice may be issued on paper, by email, or as information viewable on the website. In this case, the user can access the website using the user terminal device 400 and view information about the usage fee on screens such as those shown in FIGS. 11 and 12. The user then checks the information about the usage fee and then pays the usage fee (step S214). The website is implemented, for example, by the management unit 320 of the management server 300. The management unit 320 generates a web page based on the usage fee information generated by the usage fee calculation unit 340, and causes the generated web page to be displayed on the user terminal device 400.

[0101] 11 and 12 are diagrams showing examples of viewing screens for information about usage fees. Fig. 11 shows viewing screen D1 that displays billing information for a month specified by the user. Viewing screen D1 has, for example, a display area D11 of a user interface for specifying the month, an area D12 that displays the number of contracts to be billed, an area D13 that displays the total amount of fees to be billed for the specified month (total billed amount), and an area D14 that displays the payment deadline for the total billed amount. Viewing screen D1 is configured so that the number of contracts displayed in area D12, the total billed amount displayed in area D13, and the payment deadline displayed in D14 change depending on the month selected via the user interface in area D11.

[0102] 12 shows a viewing screen D2 that displays detailed information about the bill for the month specified by the user. The viewing screen D2 has, for example, an area D21 that displays detailed information about the charges for the month specified by the user (basic charge, electricity usage charge, etc.), and an area D22 that displays historical information about the user's use of the battery exchange device 200. By checking this viewing screen, the user can check the details of the charges billed by the provider when paying the usage fee.

[0103] [Variations] In the above-described embodiment, the battery exchange apparatus 200 queries the management server 300 for authentication information if the authentication information entered by the user is not stored in the authentication list 282 stored in the storage unit 280. However, there may be cases where communication between the battery exchange apparatus 200 and the management server 300 is disrupted due to a disaster such as a typhoon or earthquake, a system error, or the like, making it impossible to query the management server 300. Therefore, when querying the management server 300 for user authentication information, the battery exchange apparatus 200 may lend out a charged battery 100 if it is unable to communicate with the management server 300 for a predetermined period of time and if certain conditions are met, regardless of whether authentication was successful. Examples of cases where the authentication information entered by the user for user authentication matches the registered user information of the battery exchange system 1 or the authentication information includes a flag that permits lending when communication is unavailable. This allows the removable battery 100 to be lent out without waiting for communication to be restored, even if proper user authentication is not possible due to a communication error or the like.

[0104] When the removable battery 100 is lent using the method described above, the replacement control unit 262 stores the authentication information from the user in the storage unit 280, and after communication is restored, queries the management server 300 about the authentication information in the storage unit 280. If matching authentication information exists in the user management table 352 and the usage conditions are met, the management server 300 updates the usage history for that user. On the other hand, if matching authentication information does not exist in the user management table 352 or if the usage conditions are not met, the management server 300 suspends subsequent usage by the user. In this case, the management server 300 sets the status in the user management table 352 to "suspended use" and prohibits future use of the removable battery.

[0105] Furthermore, the distribution unit 330 may distribute a list of users whose use has been suspended (unavailable list) to the battery exchange apparatus 200 at any timing. Here, the arbitrary timing may be, for example, at predetermined time intervals or when the number of users whose status has been suspended reaches a predetermined number or more. The battery exchange apparatus 200 to which the unavailable list has been distributed may compare the authentication information from the user with the unavailable list during authentication, and if there is no match, may determine that the authentication of the user has been successful.

[0106] Furthermore, the management server 300 may provide a function for changing the enabled status of the user card 30 to a disabled status when the user loses the user card 30. For example, the management unit 320 accepts a user's login using membership information and provides the logged-in user with a user interface that allows the logged-in user to select the user card 30 that they wish to disable from among the user cards 30 under contract. This allows the user to log in to the management server 300 using the user terminal device 400, and the management unit 320 changes the status of the selected user card 30 to a disabled status, thereby disabling the lost user card 30.

[0107] As described above, the battery exchange system 1 (an example of an authentication system) of the embodiment includes a user card 30 (an example of an authentication medium) provided to a user, a battery exchange device 200 (an example of a target device) that can execute a predetermined operation when the user is successfully authenticated through communication with the user card 30, and a management server 300 (an example of a server device) that receives, from the user terminal device 400, identification information of the user card 30 recognized by the user terminal device 400 and input information entered into the user terminal device 400 as the user's membership information. In the battery exchange system 1 of the embodiment, the management server 300 includes a memory unit 350 (an example of a first memory unit) and a management unit 320 (an example of an authentication medium registration unit), and the battery exchange device 200 includes an authentication unit 245. The memory unit 350 stores the user's membership information in advance, and the management unit 320 registers the user's user card 30 as a valid authentication medium when the input information received from the user terminal device 400 matches the membership information stored in the memory unit 350. In addition, the authentication unit 245 authenticates the user of the user card 30 by communicating with the user card 30 registered as a valid authentication medium.

[0108] According to the battery exchange system 1 of this embodiment configured as described above, the user who has applied to use the battery exchange service can take the initiative in linking the user with the authentication medium to be supplied to that user, thereby reducing the management burden on the operator involved in providing the battery exchange service.

[0109] The above describes the form for carrying out the present invention using an embodiment, but the present invention is not limited to such an embodiment, and various modifications and substitutions can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0110] 1... Battery exchange system, 10... Electric vehicle, 12... Battery connection unit, 14... Vehicle control unit, 16... Driving force output device, 18... Vehicle sensor, 22... GNSS (Global Navigation Satellite System) receiver, 24... Communication unit, 30... User card, 31... Display unit, 31A... QR code, 31B... Card ID, 31C... Security code, 100... Detachable battery, 110... BMU (Battery Management Unit) Unit), 120... power storage unit, 130... measurement sensor, 140... memory unit, 150... connection unit, 200... battery exchange device, 210... multiple slots, 210U... upper slot, 210L... lower slot, 220... multiple connection units, 230... charger, 235... display unit, 240... reading unit, 245... authentication unit, 250... communication unit, 260... control unit, 262... exchange control unit, 264... charging control unit, 266... ​​authentication list acquisition unit, 268... battery information upload unit, 270...Usage information upload unit, 280...Memory unit, 282...(Authentication information) is an authentication list, 282...Verification authentication information related to authentication list, 282...Authentication list, 284...Battery information, 300...Management server, 310...Communication unit, 320...Management unit, 330...Distribution unit, 340...Usage fee calculation unit, 350...Memory unit, 352...User management table, 354...Status table, 356...Map information, 358...Billing information, 400...User terminal device, 410...Camera

Claims

1. an authentication medium provided to a user for authenticating the user; a target device that is capable of executing a predetermined operation when the authentication of the user using the authentication medium is successful; a server device that receives, from a terminal device of a user, identification information of an authentication medium that has been input into the terminal device of the user before the user uses the medium for authentication, and input information that has been input into the terminal device as membership information of the user; Equipped with The server device a first storage unit that pre-stores a group of member information items that are a plurality of pieces of member information for a plurality of users including the one user; an authentication medium registration unit that, when the member information of the one user included in the input information received from the terminal device matches one piece of member information included in the member information group stored in the first storage unit, newly registers the one authentication medium of the one user as a valid authentication medium and transmits valid identification information, which is the one identification information of the one authentication medium registered as the valid authentication medium, to the target device; Equipped with The target device is a second storage unit that stores the valid identification information received from the server device; an authentication unit that authenticates a user of the target device using the authentication medium registered as a valid authentication medium; Equipped with the authentication unit authenticates the one user when the one identification information acquired from the one authentication medium matches the valid identification information stored in the second storage unit; Authentication system.

2. the authentication medium registration unit transmits, to the target device, the valid identification information of the valid authentication medium that has not yet been transmitted to the target device at a predetermined frequency; The authentication system of claim 1 .

3. the server device records the valid identification information of the valid authentication medium in the first storage unit; the authentication unit of the target device inquires of the server device whether the one identification information acquired from the one authentication medium matches the valid identification information stored in the first storage unit, and authenticates the one user if they match; The authentication system of claim 1 .

4. the authentication medium further includes a display unit that displays a graphic in which the identification information is encoded, The terminal device an imaging unit that captures an image of the figure; a reading unit that decodes the graphic image captured by the imaging unit to obtain the identification information; a transmitting unit that transmits the identification information acquired by the reading unit to the server device as the input information; Equipped with An authentication system according to any one of claims 1 to 3.

5. The target device is A battery exchange device further comprising a battery exchange unit that collects used batteries and provides a stored battery for exchange, The battery exchange unit of the battery exchange device When the user is authenticated by the authentication unit, the used battery is replaced with the stored battery. An authentication system according to any one of claims 1 to 4.

6. the battery exchange device further includes a detection unit that detects the amount of use of the used battery when the used battery is collected; the battery replacement unit transmits to the server device the identification information of the authentication medium acquired in the authentication of the user by the authentication unit and information on the amount of use of the used battery detected by the detection unit. The authentication system according to claim 5 .

7. The server device is an identification unit that identifies a user of the used battery based on the identification information of the authentication medium received from the battery exchange device; The authentication system of claim 6.

8. The invention further comprises a usage fee calculation unit that calculates a usage fee for the used battery used by the user identified by the identification unit based on the information on the amount of usage. The authentication system of claim 7.

9. An authentication medium provided to a user for authenticating the user; a target device that is capable of executing a predetermined operation when the authentication of the user using the authentication medium is successful; a server device that receives, from the terminal device, the identification information of the authentication medium that has been input to the terminal device of the user and the input information that has been input to the terminal device as the member information of the user; Equipped with The server device a first storage unit that stores in advance a group of member information that is a plurality of pieces of member information of a plurality of users including the user; an authentication medium registration unit that, when the member information included in the input information received from the terminal device matches one piece of member information included in the member information group stored in the first storage unit, registers the authentication medium of the user as a valid authentication medium and transmits valid identification information, which is the identification information of the authentication medium registered as the valid authentication medium, to the target device; Equipped with The target device is a second storage unit that stores the valid identification information received from the server device; an authentication unit that authenticates the user using the authentication medium that has been registered as the valid authentication medium; Equipped with the authentication unit authenticates the user when the identification information acquired from the authentication medium matches the valid identification information stored in the second storage unit; The target device is A battery exchange device further comprising a battery exchange unit that collects used batteries and provides a stored battery for exchange, The battery exchange unit of the battery exchange device When the user is authenticated by the authentication unit, the used battery is replaced with the stored battery. Authentication system.

10. The battery exchange device further includes a detection unit that detects the amount of use of the used battery when the used battery is collected, the battery replacement unit transmits to the server device the identification information of the authentication medium acquired in the authentication of the user by the authentication unit and information on the amount of use of the used battery detected by the detection unit. The authentication system of claim 9.

11. The server device: an identification unit that identifies a user of the used battery based on the identification information of the authentication medium received from the battery exchange device; The authentication system of claim 10.

12. The invention further comprises a usage fee calculation unit that calculates a usage fee for the used battery used by the user identified by the identification unit based on the information on the amount of usage. The authentication system of claim 11.

13. An authentication method for authenticating a user using a target device that is capable of executing a predetermined operation when authentication of the user using an authentication medium provided to the user for authenticating the user is successful, and a server device that receives, from a terminal device of the user, one piece of identification information of one authentication medium that has been input into the terminal device of the user before the user used it for authentication, and input information that has been input into the terminal device as membership information of the user, comprising: The server device: A first storage unit stores in advance a group of member information, which is a plurality of pieces of member information of a plurality of users including the one user; If the member information of the one user included in the input information received from the terminal device matches one piece of member information included in the member information group stored in the first storage unit, newly registering the one authentication medium of the one user as a valid authentication medium; transmitting valid identification information, which is the one identification information of the one authentication medium registered as the valid authentication medium, to the target device; The target device is storing the valid identification information received from the server device in a second storage unit; a method for authenticating a user of the target device using an authentication medium registered as the valid authentication medium, and authenticating the user when the identification information acquired from the authentication medium matches the valid identification information stored in the second storage unit; Authentication method.

Images