Communication monitoring method, communication monitoring device, and communication monitoring program

Abstract

A communication monitoring method according to an embodiment is executed by a communication monitoring device (80) that monitors communication information within a charging system (1), which includes a charger (60) for supplying electric power to a moving body (5) and is connected to an electrical grid (4). The communication monitoring method includes a power stringency determination step for determining the power stringency of the electrical grid (4) connected to the charging system (1), and an abnormality determination step for determining an abnormality in communication information on the basis of the power stringency.

Description

Communication monitoring method, communication monitoring device, and communication monitoring program

[0001] The present disclosure relates to a communication monitoring method, a communication monitoring device, and a communication monitoring program.

[0002] Charging systems, such as electric vehicle (EV) charging stations equipped with chargers, are known. In the charging systems, power is supplied to a vehicle connected to the charger to charge the battery or the like (see, for example, Patent Document 1). Furthermore, techniques have been disclosed for further stabilizing a power grid connected to the charging system so as to be capable of charging and discharging, in conjunction with the supply of power to the electric vehicle by the charging system. For example, Patent Document 2 discloses a technique for causing the charging system to execute a demand response that takes into account the responsiveness of the mobile object to be charged.

[0003] JP 2023-006755 A JP 2022-116975 A

[0004] In this case, a cyber attack on the charging system or the like may cause an unstable state in the power grid connected to the charging system. However, conventional technologies have not considered communication abnormalities within the charging system that may affect the power grid.

[0005] The problem that the present disclosure aims to solve is to provide a communication monitoring method, a communication monitoring device, and a communication monitoring program that can detect communication abnormalities in a charging system that may affect the power grid.

[0006] The communication monitoring method disclosed herein is a communication monitoring method executed by a communication monitoring device that monitors communication information within a charging system including a charger that supplies power to a mobile object, and includes a power pressure determination step that determines the power pressure of a power system connected to the charging system, and an abnormality determination step that determines an abnormality in the communication information based on the power pressure.

[0007] The communication monitoring method, communication monitoring device, and communication monitoring program according to the present disclosure can detect a communication abnormality in a charging system that may affect the power grid.

[0008] FIG. 1 is a schematic diagram of an example of a power system according to an embodiment. FIG. 2 is a block diagram of an example of the functional configuration of a system controller. FIG. 3 is a schematic diagram of an example of the data configuration of a switching rule DB. FIG. 4 is a functional block diagram of an example of the functional configuration of a communication monitoring device. FIG. 5A is a schematic diagram of an example of the data configuration of a congestion log. FIG. 5B is a schematic diagram of an example of the data configuration of a device status management DB. FIG. 5C is a schematic diagram of an example of the data configuration of an abnormality determination rule DB. FIG. 6 is a schematic diagram of an example of a display screen. FIG. 7 is a flowchart showing an example of the flow of information processing executed by a processing unit of the communication monitoring device. FIG. 8 is a sequence diagram showing an example of the flow of information processing executed in a charging system. FIG. 9 is a sequence diagram showing an example of the flow of information processing executed in a charging system. FIG. 10 is a sequence diagram showing an example of the flow of information processing executed in a charging system. FIG. 11 is a sequence diagram showing an example of the flow of information processing executed in a charging system. FIG. 12 is a sequence diagram showing an example of the flow of information processing executed in a charging system. FIG. 13 is a block diagram showing an example of a hardware configuration.

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of a communication monitoring method, a communication monitoring device, and a communication monitoring program according to the present disclosure will be described with reference to the accompanying drawings.

[0010] FIG. 1 is a schematic diagram of an example of a power system 6 according to the present embodiment.

[0011] The power system 6 includes a charging system 1, a management server 2, a distributed energy resource management system 3, and a power grid 4. The charging system 1, the management server 2, and the distributed energy resource management system 3 are connected to each other so as to be able to communicate with each other via a network NW or the like. The distributed energy resource management system 3 and the power grid 4 are connected to each other so as to be able to monitor the power state of the power grid 4. The charging system 1 and the power grid 4 are also connected to each other so as to be able to charge and discharge power.

[0012] The management server 2 is an information processing device that comprehensively manages one or more charging systems 1. The management server 2 is managed by, for example, a management company or the like.

[0013] In this embodiment, the management server 2 receives information such as the power pressure level and power generation plan of the power grid 4 from the distributed energy resource management system 3, and transmits system control information required for controlling the charging system 1 in accordance with the received information to the charging system 1. In this embodiment, the system control information includes at least information indicating the power pressure level of the power grid 4.

[0014] The degree of power tightness represents the degree of tightness in the supply and demand of power in the power system 4. In other words, the degree of power tightness represents the degree of tightness in the power supply due to an increase in the demand for power in the power system 4, etc.

[0015] The distributed energy resource management system 3 monitors the power supply and demand situation in the power grid 4, and outputs information indicating the power tightness according to the monitored power supply and demand situation to the management server 2. The distributed energy resource management system 3 also manages the predicted distribution of power obtained from consumers such as power plants and charging systems 1, and controls the power grid 4 by notifying consumers of the power that can be distributed. The distributed energy resource management system 3 is managed, for example, by an electric power company.

[0016] The charging system 1 is a charging facility for supplying power to one or more mobile objects 5. The charging system 1 may also be called a charging station, a charging spot, a charging stand, or the like.

[0017] The mobile object 5 is an object that moves using electric power as its power source. The mobile object 5 may be an object in which at least a part of its configuration operates electrically or physically using electric power as its power source, and is not limited to an object that includes a drive unit for moving its position. The mobile object 5 may be, for example, an electric vehicle, a robot, a mobile terminal, a drone, etc. In this embodiment, the mobile object 5 is described assuming that it is an electric vehicle.

[0018] The charging system 1 controls charging and discharging of at least one of the power grid 4 and the mobile object 5 based on system control information received from the management server 2 .

[0019] The charging system 1 includes a communication device 10, a system controller 20, a switching hub 30, a power generation device 40, a power storage device 50, a charger 60, a power meter 70, and a communication monitoring device 80. The communication device 10, the system controller 20, the power generation device 40, the power storage device 50, the charger 60, the power meter 70, and the communication monitoring device 80 are connected to each other via the switching hub 30 so as to be able to communicate with each other.

[0020] The communication device 10 is a communication device for communicating with an external device of the charging system 1 .

[0021] The system controller 20 is an information processing device that manages the charging and discharging of the charging system 1 based on the system control information received from the management server 2 .

[0022] The switching hub 30 relays all communication information transmitted and received within the charging system 1 between a source and a destination. The switching hub 30 also executes a mirroring process to notify the communication monitoring device 80 of all communication information transmitted and received within the charging system 1.

[0023] The power generation device 40 is a renewable energy power source. The power generation device 40 is, for example, a solar power generation device. The power generation device 40 may also be a renewable energy power source that utilizes the environment or resources present in nature, such as geothermal energy, wind, or water. The power generation device 40 may also be a mixture of multiple types of renewable energy power sources.

[0024] In this embodiment, the power generation device 40 transmits power generation rate information indicating the power generation rate of the power generation device 40 to the system controller 20 at predetermined time intervals or when a request for power generation rate information is received from the system controller 20. The power generation rate is the ratio of the current power generation amount to the maximum power generation amount that the power generation device 40 can generate. The power generation device 40 may transmit power generation amount information to the system controller 20 instead of the power generation rate.

[0025] In addition, the power generation device 40 can be switched, under the control of the system controller 20, between a discharge state in which the power generated by the power generation is discharged to at least one of the storage device 50, the charger 60, and the power grid 4, and a discharge-limited state in which the power is discarded without being discharged.

[0026] The power storage device 50 is a device equipped with a storage battery that charges and discharges power. The power storage device 50 is charged with power generated by the power generation device 40, power supplied from the power grid 4, etc. The power storage device 50 also discharges the stored power to the mobile object 5 or the power grid 4 via the charger 60.

[0027] In this embodiment, the power storage device 50 is controlled by the system controller 20 to switch between a charging state in which power is charged and a discharging state in which power is discharged to at least one of the charger 60 and the power grid 4. The power storage device 50 also transmits charging rate information indicating the charging rate of the storage battery of the power storage device 50 to the system controller 20 at predetermined time intervals, at predetermined timings such as after switching between the charging and discharging states, or when a request for charging rate information is received from the system controller 20. The charging rate is the ratio of the current charged amount to the maximum amount of power that can be stored in the storage battery. The power storage device 50 may transmit charging amount information to the system controller 20 instead of the charging rate. The charging amount may also be referred to as the stored amount.

[0028] The charger 60 is a device that supplies power supplied from at least one of the power storage device 50 and the power grid 4 to the mobile object 5, thereby charging the mobile object 5. The charger 60 supplies power supplied from at least one of the power grid 4, the power storage device 50, and the power generation device 40 to the mobile object 5, depending on, for example, the billing status of a service user or the like who operates the mobile object 5.

[0029] In this embodiment, the charger 60 is controlled by the system controller 20 to switch between a rapid charging state in which rapid charging is possible, and a normal charging state in which normal charging is possible but rapid charging is prohibited.

[0030] Rapid charging is a charging state in which the charger 60 supplies power equal to or greater than the first threshold to the mobile object 5. Normal charging is a charging state in which the charger 60 supplies power less than the first threshold to the mobile object 5. The first threshold may be set in advance according to the type of mobile object 5 that the charger 60 is compatible with. The first threshold may also be changeable as needed based on a user's operation instruction of the system controller 20 or system control information received from the management server 2.

[0031] By rapid charging, high power is supplied from the charger 60 to the mobile object 5 in a shorter time than in the normal state, and the mobile object 5 is fully charged in a shorter time than in the normal state.

[0032] The power meter 70 measures the amount of power consumed by the charging system 1. Specifically, the power meter 70 measures the total power consumption per unit time consumed by the charging system 1, the amount of power supplied per unit time from the power grid 4 to the charging system 1, etc. Furthermore, the power meter 70 transmits the power measurement results to the system controller 20 at predetermined time intervals or when power measurement result acquisition request information is received from the system controller 20.

[0033] The communication monitoring device 80 is an information processing device that monitors communication information within the charging system 1 connected to the power grid 4. The communication information is information communicated within the charging system 1, and may be any of packets, signals, commands, etc.

[0034] Next, the functional configuration of the system controller 20 will be described.

[0035] FIG. 2 is a block diagram showing an example of the functional configuration of the system controller 20. As shown in FIG.

[0036] The system controller 20 includes a communication unit 22, a UI (user interface) unit 24, a storage unit 26, and a processing unit 28. The communication unit 22, the UI unit 24, the storage unit 26, and the processing unit 28 are communicatively connected via a bus or the like.

[0037] The communication unit 22 is a communication function unit for communicating with various devices and apparatuses within the charging system 1. The UI unit 24 has a display function and an input function. The display function displays various types of information. Examples of the display function include a display, a projection device, etc. The input function accepts operation input by the user. Examples of the input function include a pointing device such as a mouse or a touchpad, a keyboard, etc. A touch panel that integrates the display function and the input function may also be used. The memory unit 26 stores various types of information.

[0038] The UI unit 24 and the storage unit 26 may be configured to be communicably connected to the processing unit 28 via a wired or wireless connection. At least one of the UI unit 24 and the storage unit 26 may be configured to be provided outside the system controller 20 or the charging system 1, and at least one of the UI unit 24 and the storage unit 26 may be connected to the processing unit 28 via a network NW or the like.

[0039] The storage unit 26 stores various types of data. In this embodiment, the storage unit 26 pre-stores a switching rule DB (database) 26A. The data structure of the switching rule DB 26A is not limited to a database.

[0040] FIG. 3 is a schematic diagram showing an example of the data structure of the switching rule DB 26A.

[0041] The switching rule DB 26A is information that predefines rules for switching the states of the charger 60 and the power storage device 50. The switching rule DB 26A is a database that associates the degree of power pressure with instruction information for each of the charger 60 and the power storage device 50.

[0042] The switching rule DB 26A predefines switching rules for maintaining the power grid 4 in a stable state according to the degree of power pressure.

[0043] Specifically, switching rule DB 26A specifies that when the power tightness is high, rapid charge prohibition instruction information is transmitted to charger 60 to instruct the charger 60 to prohibit rapid charge, and discharge permission instruction information is transmitted to power storage device 50 to instruct the charger 60 to permit discharge. Furthermore, switching rule DB 26A specifies that when the power tightness is low, rapid charge permission instruction information is transmitted to charger 60 to instruct the charger 60 to permit rapid charge, and charge permission instruction information is transmitted to power storage device 50 to permit charging.

[0044] A high level of pressure indicates that the power pressure of the power grid 4 is equal to or higher than a predetermined level. A low level of pressure indicates that the power pressure of the power grid 4 is lower than the predetermined level. The value of the predetermined level of pressure may be set in advance according to a threshold value or the like that indicates whether or not charging or discharging of the charging system 1 affects the power pressure of the power grid 4. The value of the predetermined level of pressure may also be changeable as appropriate according to a user's operation instruction on the UI unit 24, an instruction to change the predetermined level of pressure included in the system control information received from the management server 2, or the like.

[0045] The switching rule DB 26A may further define a switching rule for the state of the power generation device 40. In this case, the switching rule DB 26A may define that, when the power pressure level is high, discharge permission instruction information is to be transmitted to the power generation device 40 to instruct the power generation device 40 to permit discharge, and that, when the power pressure level is low, power generation permission instruction information is to be transmitted to the power generation device 40 to instruct the power generation device 40 to permit power generation.

[0046] The processing unit 28 executes information processing in the system controller 20. The processing unit 28 executes the information processing by causing a processor such as a CPU (Central Processing Unit) to execute a program, that is, by using software.

[0047] In this embodiment, the processing unit 28 manages the charging and discharging of the charging system 1 by transmitting the above-mentioned various instruction information to the devices in the charging system 1 based on the switching rule DB 26A in accordance with the degree of congestion in the power grid 4.

[0048] Next, the functional configuration of the communication monitoring device 80 will be described.

[0049] FIG. 4 is a functional block diagram showing an example of the functional configuration of the communication monitoring device 80. As shown in FIG.

[0050] The communication monitoring device 80 includes a communication unit 82, a UI unit 84, a storage unit 86, and a processing unit 88. The communication unit 82, the UI unit 84, the storage unit 86, and the processing unit 88 are communicatively connected via a bus or the like.

[0051] The communication unit 82 is a communication function unit for communicating with various devices and apparatuses in the charging system 1. The UI unit 84 has a display function and an input function. The display function and the input function are the same as those described above. The storage unit 86 stores various types of information.

[0052] The UI unit 84 and the storage unit 86 may be configured to be communicatively connected to the processing unit 88 via a wired or wireless connection. At least one of the UI unit 84 and the storage unit 86 may be configured to be provided outside the communication monitoring device 80 or the charging system 1, and at least one of the UI unit 84 and the storage unit 86 may be communicatively connected to the processing unit 88 via a network NW or the like.

[0053] The storage unit 86 stores various types of data. In this embodiment, the storage unit 86 stores a pressure level log 86A, an appliance status management DB 86B, and an abnormality determination rule DB 86C.

[0054] FIG. 5A is a schematic diagram showing an example of the data configuration of the pressure level log 86A.

[0055] The pressure tightness log 86A is data that chronologically records the power pressure of the power system 4. For example, the pressure tightness log 86A is data that associates a timestamp with the power pressure of the power system 4 at the date and time represented by the timestamp. The pressure tightness log 86A is updated each time the power pressure is determined by processing by the processing unit 88, which will be described later.

[0056] FIG. 5B is a schematic diagram showing an example of the data configuration of the device status management DB 86B.

[0057] The device status management DB 86B is data that chronologically stores the transition of the status of each of the devices included in the charging system 1. In detail, the device status management DB 86B is a database that records the status of each of the devices included in the charging system 1, namely, the power generation device 40, the power storage device 50, the charger 60, and the wattmeter 70, in association with a timestamp. Note that the data format of the device status management DB 86B is not limited to a database.

[0058] Specifically, the device status management DB 86B stores a timestamp, device identification information, an item, and a status, all of which are associated with each other. Fig. 5B shows an example of device name as device identification information. The item and status represent the status of the corresponding device.

[0059] The items represent the status of the devices. The items representing the status include, but are not limited to, quick charge permission, quick charge prohibition, charging rate, power generation rate, discharge permission, charge permission, total power consumption, etc. The status is information representing the specific status of the corresponding item of the corresponding device. The latest status of each device included in the charging system 1 is sequentially registered in the device status management DB 86B by processing by the processing unit 88, which will be described later.

[0060] FIG. 5C is a schematic diagram showing an example of the data configuration of the abnormality determination rule DB 86C.

[0061] The abnormality determination rule DB 86C is a database that associates the power pressure level with an abnormality determination rule. Note that the data format of the abnormality determination rule DB 86C is not limited to a database.

[0062] The abnormality determination rule is information that defines a rule for determining that communication information communicated within the charging system 1 is abnormal. In the abnormality determination rule DB 86C, rules for determining that communication information that may cause the power grid 4 to become unstable is abnormal are registered in advance for each power tightness level.

[0063] In this embodiment, the abnormality determination rule DB 86C has registered therein abnormality determination rules corresponding to high and low power pressure levels. Note that the power pressure level may be subdivided into three or more levels, and the abnormality determination rule may be registered therein for each of these levels.

[0064] In this embodiment, the abnormality determination rule DB86C has pre-registered abnormality determination rules corresponding to each of high and low levels of pressure, which correspond to the source of the communication information, the destination of the communication information, and the communication content for determining that the communication information sent from the source to the destination is abnormal.

[0065] The abnormality determination rule corresponding to the high level of pressure is a rule that determines that communication information relating to at least one of an increase in power consumption of the charging system 1 and a limit on discharge from the charging system 1 to the power grid 4 is abnormal.

[0066] The abnormality determination rule corresponding to a high level of pressure indicates that communication information relating to at least one of the following communication contents is considered abnormal: permission for rapid charging to supply power above a first threshold from the charger 60 to the mobile object 5; discharge restriction on the storage device 50 provided in the charging system 1; discharge restriction on the power generation device 40 provided in the charging system 1; and power measurement results indicating a sudden increase in the total power consumption within the charging system 1.

[0067] In detail, the abnormality determination rule corresponding to a high level of pressure indicates that communication information relating to at least one of the following cases is considered abnormal: the communication content from the system controller 20 to the charger 60 is permission for rapid charging, which supplies power equal to or greater than a first threshold value from the charger 60 to the mobile object 5; the communication content from the system controller 20 to the power storage device 50 is a discharge restriction on the power storage device 50 provided in the charging system 1; the communication content from the system controller 20 to the power generation device 40 is a discharge restriction on the power generation device 40 provided in the charging system 1; and the communication content from the power meter 70 to the system controller 20 is a power measurement result indicating a sudden increase in the total power consumption within the charging system 1.

[0068] A sudden increase in total power consumption means that the total power consumption per unit time in the charging system 1 increases to or exceeds a second threshold. The second threshold may be set in advance according to a threshold value that determines whether an increase in total power consumption in the charging system 1 affects the power pressure in the power grid 4. The second threshold may be changeable as appropriate according to system control information received from the management server 2 or a user's operation instruction for the system controller 20.

[0069] The abnormality determination rule corresponding to the low pressure level is a rule that determines that communication information relating to at least one of a reduction in power consumption by the charging system 1 and an increase in discharge power from the charging system 1 to the power grid 4 is abnormal.

[0070] The abnormality determination rule corresponding to a low level of pressure indicates that communication information relating to at least one of the following communication contents is considered abnormal: charging restriction from the charger 60 to the mobile body 5, discharging of the storage device 50 when the charging rate is below a predetermined charging rate, and discharging of the power generation device 40 when the power generation rate is below a predetermined power generation rate.

[0071] In detail, the abnormality determination rule corresponding to a low level of pressure indicates that communication information relating to at least one of the following is abnormal: communication content from the system controller 20 to the charger 60 is a charge restriction from the charger 60 to the mobile object 5; communication content from the system controller 20 to the power storage device 50 is discharging of the power storage device 50 when the charging rate is below a predetermined charging rate; and communication content from the system controller 20 to the power generation device 40 is discharging of the power generation device 40 when the power generation rate is below a predetermined power generation rate.

[0072] The predetermined charging rate may be set in advance to a value equal to or greater than the lowest charging rate at which the minimum power required to maintain the function of the charging system 1 can be supplied from the power storage device 50 to the charging system 1. The predetermined charging rate may be changeable as appropriate by the user operating the system controller 20 or by system control information received from the management server 2.

[0073] The predetermined power generation rate may be set in advance to a value equal to or greater than the lowest power generation rate at which the minimum power required to maintain the function of the charging system 1 can be supplied from the power generation device 40 to the charging system 1. The predetermined power generation rate may be changeable as appropriate by the user operating the system controller 20 or by system control information received from the management server 2.

[0074] Returning to FIG. 4, the description will continue.

[0075] The processing unit 88 executes information processing in the communication monitoring device 80. The processing unit 88 includes a power tightness determination unit 88A, an abnormality determination rule specification unit 88B, a communication information acquisition unit 88C, an abnormality determination unit 88D, and an output control unit 88E.

[0076] The power pressure determination unit 88A, the abnormality determination rule identification unit 88B, the communication information acquisition unit 88C, the abnormality determination unit 88D, and the output control unit 88E are realized, for example, by one or more processors. For example, each of the above units may be realized by causing a processor such as a CPU (Central Processing Unit) to execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units. Furthermore, at least one of the above units may be provided in an external device communicatively connected to the processing unit 88.

[0077] The power pressure level determination unit 88A determines the power pressure level of the power system 4. The power pressure level determination unit 88A determines the power pressure level of the power system 4 using information indicating the power pressure level included in the system control information received from the management server 2 via the communication device 10 and the switching hub 30.

[0078] In this embodiment, the power pressure level determination unit 88A determines whether the power pressure level of the power system 4 is high or low.

[0079] The distributed energy resource management system 3 may output power supply and demand state information representing the state of power supply and demand in the power grid 4 to the management server 2. In this case, the management server 2 transmits system control information including the power supply and demand state information to the charging system 1. The power tightness determination unit 88A may then determine the power tightness in the power grid 4 by analyzing the power supply and demand state information included in the system control information. That is, the power tightness determination unit 88A may determine the power tightness in the power grid 4 based on the power supply and demand state information representing the state of power supply and demand in the power grid 4.

[0080] The abnormality determination rule identifying unit 88B identifies, from the abnormality determination rule DB 86C, an abnormality determination rule that corresponds to the power pressure level determined by the power pressure level determining unit 88A.

[0081] The communication information acquisition unit 88C acquires communication information communicated within the charging system 1. The communication information acquisition unit 88C receives mirrored communication information from the switching hub 30, thereby acquiring communication information within the charging system 1.

[0082] The abnormality determination unit 88D determines an abnormality in the communication information based on the power pressure level of the power grid 4 connected to the charging system 1. The abnormality determination unit 88D determines an abnormality in the communication information acquired by the communication information acquisition unit 88C based on the abnormality determination rule identified by the abnormality determination rule identification unit 88B.

[0083] That is, the abnormality determination unit 88D determines that the communication information is abnormal if the communication information satisfies the abnormality determination rule according to the power pressure level, and determines that the communication information is normal if the communication information does not satisfy the abnormality determination rule according to the power pressure level.

[0084] In detail, when the power pressure level determined by the abnormality determination rule specifying unit 88B indicates a high pressure level and the communication information satisfies the abnormality determination rule corresponding to the high pressure level, the abnormality determination unit 88D determines that the communication information is abnormal.

[0085] Specifically, when the power pressure indicates a high pressure level, the abnormality determination unit 88D determines that communication information regarding at least one of the following is abnormal: permission for rapid charging from the charger 60 to the mobile object 5, discharge restriction of the storage device 50, discharge restriction of the power generation device 40, and power measurement results indicating an increase in total power consumption within the charging system 1 above a second threshold value.

[0086] For example, when the power pressure is high, the abnormality determination unit 88D determines that the rapid charge permission instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is information regarding "rapid charge permission" of the charger 60 as defined in the abnormality determination rules, and determines that the communication information is abnormal. The rapid charge permission instruction information is instruction information transmitted from the system controller 20 to the charger 60 when instructing the charger 60 to switch from a normal charging state to a rapid charging state.

[0087] Furthermore, for example, when the power pressure is high, the abnormality determination unit 88D determines that the rapid charge prohibition instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is not information regarding "rapid charge permission" of the charger 60 as defined in the abnormality determination rules, and determines the communication information to be normal. The rapid charge prohibition instruction information is instruction information transmitted from the system controller 20 to the charger 60 when instructing the charger 60 to switch from a rapid charge state to a normal charge state.

[0088] Furthermore, for example, when the power pressure is high, the abnormality determination unit 88D determines that the charge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50, is information relating to the "discharge limit" of the power storage device 50 as defined in the abnormality determination rules, and determines that the communication information is abnormal. The charge permission instruction information is instruction information transmitted from the system controller 20 to the power storage device 50 when instructing the power storage device 50 to switch from a discharging state to a charging state.

[0089] Furthermore, for example, when the power tightness is high, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50, is not information related to the "discharge restriction" of the power storage device 50 as defined in the abnormality determination rules, and determines that the communication information is normal. The charge permission instruction information is instruction information transmitted from the system controller 20 to the power storage device 50 when instructing the power storage device 50 to switch from a charging state to a discharging state.

[0090] Furthermore, for example, when the degree of power shortage is high, the abnormality determination unit 88D determines that the communication information transmitted from the system controller 20 to the power generation device 40, which is discard instruction information instructing the discarding of generated power or power generation prohibition instruction information instructing the prohibition of power generation, is information regarding the "discharge limit" of the power generation device 40 as specified in the abnormality determination rules, and determines that the communication information is abnormal.

[0091] Also, for example, when the power shortage level is high, the abnormality determination unit 88D determines that the power generation permission instruction information, which is communication information transmitted from the system controller 20 to the power generation device 40, is not information regarding the "discharge limit" of the power generation device 40 as specified in the abnormality determination rules, and determines that the communication information is normal.

[0092] On the other hand, if the power pressure level determined by the abnormality determination rule specifying unit 88B indicates a low pressure level and the communication information satisfies the abnormality determination rule corresponding to the low pressure level, the abnormality determination unit 88D determines that the communication information is abnormal.

[0093] Specifically, when the power pressure level indicates a low pressure level, the abnormality determination unit 88D determines that communication information relating to at least one of the following is abnormal: charging restriction from the charger 60 to the mobile body 5, discharging of the storage device 50 whose charging rate is below a predetermined charging rate, and discharging of the power generation device 40 whose power generation rate is below a predetermined power generation rate.

[0094] For example, when the power pressure level is low, the abnormality determination unit 88D determines that the rapid charging prohibition instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is information regarding the "charging restriction" of the charger 60 as specified in the abnormality determination rules, and determines that the communication information is abnormal.

[0095] Also, for example, when the power pressure level is low, the abnormality determination unit 88D determines that the rapid charging permission instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is not information regarding the "charging restriction" specified in the abnormality determination rules, and determines that the communication information is normal.

[0096] Also, for example, when the power pressure is low, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the storage device 50 whose charge rate is below a predetermined charge rate, is information regarding "discharging at a state where the charge rate is below a predetermined charge rate" of the storage device 50 as specified in the abnormality determination rules, and determines that the communication information is abnormal.

[0097] Furthermore, for example, when the level of power tightness is low, the abnormality determination unit 88D determines that the charge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50 whose charging rate is equal to or lower than a predetermined charging rate, is not information regarding "discharging at or below a predetermined charging rate" of the power storage device 50 as defined in the abnormality determination rules, and determines that the communication information is normal. Furthermore, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50 whose charging rate exceeds a predetermined charging rate, is not information regarding "discharging at or below a predetermined charging rate" of the power storage device 50 as defined in the abnormality determination rules, and determines that the communication information is normal.

[0098] Furthermore, for example, when the degree of power pressure is low, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the power generation device 40 whose power generation rate is below a predetermined power generation rate, is information regarding "discharge at a state where the power generation rate is below a predetermined power generation rate" of the power generation device 40 as specified in the abnormality determination rules, and determines that the communication information is abnormal.

[0099] Also, for example, when the power pressure level is low, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the power generation device 40 whose power generation rate exceeds the predetermined charging rate, is not information regarding "discharging at a power generation rate below the predetermined power generation rate" of the power generation device 40 as specified in the abnormality determination rules, and determines that the communication information is normal.

[0100] The output control unit 88E outputs the determination result of the communication information made by the abnormality determination unit 88D.

[0101] For example, the output control unit 88E outputs a display screen showing the determination result of the communication information by the abnormality determination unit 88D to the UI unit 84. Note that the output control unit 88E may output the display screen to at least one of the UI unit 84, the UI unit 24 of the system controller 20, and an information processing terminal external to the charging system 1.

[0102] 6 is a schematic diagram of an example of a display screen 90 output by the output control unit 88 E. For example, the output control unit 88 E outputs the display screen 90 in which an abnormality determination ID, a determination result, a timestamp, a determination rule item ID, a source IP (Internet Protocol) address, a source device, a destination IP address, and a destination device are associated with each other.

[0103] The abnormality judgment ID is identification information of the abnormality judgment result of the communication information. The judgment result is the judgment result of whether the communication information is abnormal or normal. The judgment rule item ID is identification information of the abnormality judgment rule used to judge the communication information. The source IP address is the IP address of the device that sent the communication information used for the judgment. The source device is information that represents the device that sent the communication information used for the judgment. The destination IP address is the IP address of the device to which the communication information used for the judgment was sent. The destination device is information that represents the device to which the communication information used for the judgment was sent.

[0104] The display screen 90 is only required to include at least the abnormality determination result of the communication information, and the display format is not limited to the format shown in FIG.

[0105] Furthermore, the output control unit 88E may output information relating to communication information determined to be abnormal in an output format that is more emphasized than information relating to communication information determined to be normal. The emphasized output format may be an output format that is more effective in giving the user a stronger attention, such as a visual or auditory effect. For example, the output control unit 88E displays information relating to communication information determined to be abnormal in red, bold, flashing, etc., and displays information relating to communication information determined to be normal in black, thin, lit, etc.

[0106] Furthermore, the output control unit 88E may output information about communication information determined to be abnormal to more output devices than information about communication information determined to be normal. For example, the output control unit 88E may output information about communication information determined to be normal only to the display of the UI unit 24, and output information about communication information determined to be abnormal to multiple output devices, such as the display of the UI unit 24, a microphone included in the UI unit 24, a light included in the UI unit 24, the UI unit 24 of the system controller 20, and an external device such as a mobile terminal connected via the network NW.

[0107] Furthermore, when the output control unit 88E determines that the communication information is abnormal, it may further execute processing related to recovery from the abnormality.

[0108] For example, if the output control unit 88E determines that the communication information is abnormal, it may transmit invalidation request information to the device to which the communication information is sent, requesting that the instruction represented by the communication information be invalidated. The device that receives the invalidation request information may execute a process to invalidate the instruction represented by the communication information received immediately before the communication information and to validate the instruction represented by the communication information received before the communication information.

[0109] For example, assume that the communication information that is the rapid charge permission instruction information received by the power storage device 50 is determined to be abnormal, and invalid request information is transmitted from the output control unit 88E to the power storage device 50. In this case, the power storage device 50 may execute a process to switch the rapid charge state, which was switched to upon receiving the rapid charge permission instruction information, to the normal charge state.

[0110] Furthermore, for example, when the output control unit 88E determines that the communication information is abnormal, it may control the switching hub 30 or the like to temporarily cut off communication between the system controller 20 and devices external to the system controller 20.

[0111] Next, an example of the flow of information processing executed by the processing unit 88 of the communication monitoring device 80 of this embodiment will be described.

[0112] FIG. 7 is a flowchart showing an example of the flow of information processing executed by the processing unit 88 of the communication monitoring device 80 of this embodiment.

[0113] The power pressure level determination unit 88A determines the power pressure level of the power system 4 (step S100). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the power pressure level determined in step S100 from the abnormality determination rule DB 86C (step S102).

[0114] The communication information acquisition unit 88C acquires communication information communicated within the charging system 1 (step S104).

[0115] The abnormality determination unit 88D determines whether the communication information acquired in step S104 satisfies the abnormality determination rule identified in step S102 (step S106). If it is determined that the communication information acquired in step S104 satisfies the abnormality determination rule (step S106: Yes), the abnormality determination unit 88D determines that the communication information acquired in step S104 is abnormal (step S108). Then, the process proceeds to step S112, which will be described later. If it is determined that the communication information acquired in step S104 does not satisfy the abnormality determination rule (step S106: No), the abnormality determination unit 88D determines that the communication information acquired in step S104 is abnormal (step S108).

[0116] The output control unit 88E outputs the determination result of step S108 or step S110 (step S112), and then ends this routine.

[0117] The processing unit 88 of the communication monitoring device 80 may execute the processes of steps S100 to S112 every time it determines a new level of power tightness or acquires new communication information from the switching hub 30.

[0118] Next, the flow of information processing executed by the charging system 1 will be described.

[0119] 8 to 12 are sequence diagrams showing an example of the flow of information processing executed in the charging system 1. FIG.

[0120] First, an example of monitoring communication information communicated between the system controller 20 and the charger 60 when the power pressure level of the power grid 4 is high will be described.

[0121] FIG. 8 shows an example of the flow of information processing when the communication monitoring device 80 monitors communication information between the system controller 20 and the charger 60 when the power pressure level of the power grid 4 is high.

[0122] The management server 2 transmits system control information including power pressure information indicating a high level of power pressure to the system controller 20 of the charging system 1 (step S200).

[0123] The switching hub 30 of the charging system 1 transmits the power pressure information received from the management server 2 via the communication device 10 to the system controller 20 and the communication monitoring device 80, which is the mirroring destination (steps S202, S204, and S206).

[0124] The power pressure level determination unit 88A of the communication monitoring device 80 determines that the power pressure level of the power system 4 is high based on the received power pressure level information (step S208). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the high pressure level determined in step S208 from the abnormality determination rule DB 86C (step S210).

[0125] The processing unit 28 of the system controller 20 transmits, to the charger 60 as a destination, rapid charging prohibition instruction information, which is communication information for instructing "prohibition of rapid charging" corresponding to the high pressure level, based on the switching rule DB 26A (step S212). The switching hub 30 transmits the rapid charging prohibition instruction information received from the system controller 20 to the charger 60 as a destination and to the communication monitoring device 80 as a mirroring destination (steps S214 and S216).

[0126] The process of step S214 switches the charger 60 to a rapid charge off state in which rapid charging is prohibited (step S218). That is, the process of step S218 switches the charger 60 from a rapid charge state in which rapid charging is possible to a normal charge state in which normal charging is possible but rapid charging is prohibited. Note that if the charger 60 had already switched to the normal charge state before the process of step S218, the charger 60 may simply maintain the normal charge state.

[0127] By the process of step S216, the communication information acquisition unit 88C of the communication monitoring device 80 receives the rapid charge prohibition instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S210 (step S220).

[0128] If the power pressure is high, the abnormality determination unit 88D determines that the rapid charge prohibition instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is not information regarding "rapid charge permission" of the charger 60 as defined in the abnormality determination rules, and determines that the communication information is normal (step S222). The output control unit 88E outputs the determination result of step S222 to the display screen 90 or the like (step S224).

[0129] Here, assume that an attacker seizes the operating authority of the system controller 20 and transmits rapid charging permission instruction information, which is communication information for instructing the charger 60 to "permit rapid charging," to the charger 60 as the destination (steps S226 and S228).

[0130] The switching hub 30 transmits the rapid charging permission instruction information received from the system controller 20 to the charger 60 as the destination and the communication monitoring device 80 as the mirroring destination (steps S230 and S232).

[0131] The process of step S230 switches the charger 60 to a rapid charge on state in which rapid charging is permitted (step S234). That is, the process of step S234 switches the charger 60 from a normal charging state in which normal charging is permitted but rapid charging is prohibited to a rapid charging state in which rapid charging is permitted.

[0132] Through the process of step S232, the communication information acquisition unit 88C of the communication monitoring device 80 receives the rapid charge permission instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S210 (step S236).

[0133] If the power pressure level is high, the abnormality determination unit 88D determines that the rapid charge permission instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is information regarding "rapid charge permission" for the charger 60 as defined in the abnormality determination rules, and determines that the communication information is abnormal (step S238). The output control unit 88E outputs the determination result of step S238 to the display screen 90 or the like (step S240). Then, this sequence ends.

[0134] Next, an example of monitoring communication information communicated between the system controller 20 and the power storage device 50 when the power pressure level of the power grid 4 is high will be described.

[0135] FIG. 9 shows an example of the flow of information processing when the communication monitoring device 80 monitors communication information between the system controller 20 and the power storage device 50 when the power tightness level of the power grid 4 is high.

[0136] The management server 2 transmits system control information including power pressure information indicating a high level of power pressure to the system controller 20 of the charging system 1 (step S300).

[0137] The switching hub 30 of the charging system 1 transmits the power pressure information received from the management server 2 via the communication device 10 to the system controller 20 and the communication monitoring device 80, which is the mirroring destination (steps S302, S304, and S306).

[0138] The power pressure level determination unit 88A of the communication monitoring device 80 determines that the power pressure level of the power system 4 is high based on the received power pressure level information (step S308). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the high pressure level determined in step S308 from the abnormality determination rule DB 86C (step S310).

[0139] The processing unit 28 of the system controller 20 transmits, based on the switching rule DB 26A, discharge permission instruction information, which is communication information for instructing "discharge permission" corresponding to the high tightness level, to the power storage device 50 as the destination (step S312). The switching hub 30 transmits the discharge permission instruction information received from the system controller 20 to the power storage device 50 as the destination and the communication monitoring device 80 as the mirroring destination (steps S314 and S316).

[0140] By receiving the discharge permission instruction information in step S314, the power storage device 50 is switched from the charging state to the discharging state (step S318). That is, by the processing of step S318, the power storage device 50 is switched to the discharging state in which it discharges power to at least one of the charger 60 and the power grid 4. Note that if the power storage device 50 has already been switched to the discharging state before the processing of step S318, it is sufficient for the power storage device 50 to maintain the discharging state.

[0141] By the process of step S316, the communication information acquisition unit 88C of the communication monitoring device 80 receives the discharge permission instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process (step S320) to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S310.

[0142] If the power tightness is high, the abnormality determination unit 88D determines that the discharge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50, is not information related to the "discharge limit" of the power storage device 50 as defined in the abnormality determination rule, and determines that the communication information is normal (step S322). The output control unit 88E outputs the determination result of step S322 to the display screen 90 or the like (step S324).

[0143] Here, assume that an attacker seizes the operating authority of the system controller 20 and sends charging permission instruction information, which is communication information from the system controller 20 to instruct the storage device 50 to "permit charging," to the storage device 50 as the destination (steps S326, S328).

[0144] The switching hub 30 transmits the charge permission instruction information received from the system controller 20 to the power storage device 50 as the destination and the communication monitoring device 80 as the mirroring destination (steps S330 and S332).

[0145] By receiving the charge permission instruction information in step S330, the power storage device 50 is switched to a charging state in which power is charged (step S334). That is, by the process of step S334, the power storage device 50 is switched from a discharging state to a charging state.

[0146] By the process of step S332, the communication information acquisition unit 88C of the communication monitoring device 80 receives the charge permission instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S310 (step S336).

[0147] If the power tightness level is high, the abnormality determination unit 88D determines that the charge permission instruction information, which is communication information transmitted from the system controller 20 to the power storage device 50, is information related to the "discharge limit" of the power storage device 50 as defined in the abnormality determination rule, and determines that the communication information is abnormal (step S338). The output control unit 88E outputs the determination result of step S338 to the display screen 90 or the like (step S340). Then, this sequence ends.

[0148] Next, an example of monitoring communication information communicated between the system controller 20 and the power meter 70 when the power pressure level of the power grid 4 is high will be described.

[0149] FIG. 10 shows an example of the flow of information processing when the communication monitoring device 80 monitors communication information between the system controller 20 and the power meter 70 when the power tightness level of the power grid 4 is high.

[0150] The management server 2 transmits system control information including power pressure information indicating a high level of power pressure to the system controller 20 of the charging system 1 (step S400).

[0151] The switching hub 30 of the charging system 1 transmits the power pressure information received from the management server 2 via the communication device 10 to the system controller 20 and the communication monitoring device 80, which is the mirroring destination (steps S402, S404, and S406).

[0152] The power pressure level determination unit 88A of the communication monitoring device 80 determines that the power pressure level of the power system 4 is high based on the received power pressure level information (step S408). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the high pressure level determined in step S408 from the abnormality determination rule DB 86C (step S410).

[0153] The following description will be continued assuming that the power meter 70 measures 50 kW as the total power consumption of the charging system 1 and sequentially outputs the power measurement results to the system controller 20 via the switching hub 30 .

[0154] The processing unit 28 of the system controller 20 transmits the power measurement result request information, which is communication information, to the power meter 70 as the destination (step S414). The switching hub 30 transmits the power measurement result request information received from the system controller 20 to the power meter 70 as the destination and to the communication monitoring device 80 as the mirroring destination (steps S416 and S418).

[0155] Upon receiving the power measurement result request information, the power meter 70 measures the total power consumption of the charging system 1 (step S420). For example, the explanation will continue assuming that the power meter 70 measures 100 kW as the total power consumption of the charging system 1. The power meter 70 transmits the power measurement result to the system controller 20 as the transmission destination (step S422).

[0156] The switching hub 30 transmits the communication information, which is the power measurement result received from the power meter 70, to the system controller 20, which is the destination, and to the communication monitoring device 80, which is the mirroring destination (steps S424 and S426).

[0157] By the process of step S426, the communication information acquisition unit 88C of the communication monitoring device 80 receives the power measurement result as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S410 (step S428).

[0158] If the level of power tightness is high, the abnormality determination unit 88D determines that the communication information transmitted from the power meter 70 to the system controller 20 is normal because the total power consumption represented by the power measurement result does not represent a sudden increase, and therefore determines that the communication information is not information related to a "power measurement result representing a sudden increase in total power consumption" as defined in the abnormality determination rules (step S430).The abnormality determination unit 88D determines whether the communication information is normal by determining, based on the device status management DB 86B, whether the difference between the power value represented by the status corresponding to the device "power meter" and the item "total power consumption" that corresponds to the timestamp immediately before the reception time of the currently received power measurement result and the power value represented by the currently received power measurement result is equal to or greater than a second threshold.

[0159] The output control unit 88E updates the status in the device status management DB 86B (step S432). Specifically, the output control unit 88E records the value of the power measurement result as a status corresponding to the "total power consumption" item of the "power meter" device in the device status management DB 86B, in association with a timestamp indicating the time at which the power measurement result was received. The output control unit 88E then outputs the determination result of step S430 to the display screen 90 (step S434).

[0160] As shown in step S412, each time the power measurement result is transmitted from the power meter 70 to the system controller 20, the processes of steps S422 to S434 are similarly executed.

[0161] Here, it is assumed that an attacker seizes the authority to operate the charger 60 and starts stealing power from the charger 60 of the charging system 1 (step S436).

[0162] At this stage, it is assumed that the processing unit 28 of the system controller 20 has transmitted communication information, which is a power measurement result request information, to the power meter 70 as the destination (step S438). The switching hub 30 transmits the power measurement result request information received from the system controller 20 to the power meter 70 as the destination and to the communication monitoring device 80 as the mirroring destination (steps S440 and S442).

[0163] Upon receiving the power measurement result request information, the power meter 70 measures the total power consumption of the charging system 1 (step S444). For example, the explanation will continue assuming that the power meter 70 measures 900 kW as the total power consumption of the charging system 1. The power meter 70 transmits the power measurement result to the system controller 20 as the transmission destination (step S446).

[0164] The switching hub 30 transmits the communication information, which is the power measurement result received from the power meter 70, to the system controller 20, which is the destination, and to the communication monitoring device 80, which is the mirroring destination (steps S448 and S450).

[0165] By the process of step S450, the communication information acquisition unit 88C of the communication monitoring device 80 receives the power measurement result as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S410 (step S452).

[0166] If the level of power pressure is high, the abnormality determination unit 88D determines that the communication information transmitted from the power meter 70 to the system controller 20 indicates a sudden increase in total power consumption, and therefore determines that the communication information is not information related to a "power measurement result indicating a sudden increase in total power consumption" as defined in the abnormality determination rules, and determines that the communication information is abnormal (step S454). The abnormality determination unit 88D may determine whether the total power consumption indicates a sudden increase by determining whether the difference between the power value indicated by the status for the device "power meter" and the item "total power consumption" corresponding to the timestamp immediately before the reception time of the currently received power measurement result is equal to or greater than a second threshold.

[0167] If the communication information is determined to be abnormal, the output control unit 88E omits updating the status in the device status management DB 86B. Then, the output control unit 88E outputs the determination result of step S454 to the display screen 90 (step S456). Then, this sequence ends.

[0168] Next, an example of monitoring the communication information communicated between the system controller 20 and the charger 60 when the power pressure level of the power grid 4 is low will be described.

[0169] FIG. 11 shows an example of the flow of information processing when the communication monitoring device 80 monitors communication information between the system controller 20 and the charger 60 when the power tightness level of the power grid 4 is low.

[0170] The management server 2 transmits system control information including power pressure information indicating a low level of power pressure to the system controller 20 of the charging system 1 (step S500).

[0171] The switching hub 30 of the charging system 1 transmits the power pressure information received from the management server 2 via the communication device 10 to the system controller 20 and the communication monitoring device 80, which is the mirroring destination (steps S502, S504, and S506).

[0172] The power pressure level determination unit 88A of the communication monitoring device 80 determines that the power pressure level of the power system 4 is low based on the received power pressure level information (step S508). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the low pressure level determined in step S508 from the abnormality determination rule DB 86C (step S510).

[0173] The processing unit 28 of the system controller 20 transmits, to the charger 60 as a destination, rapid charging permission instruction information, which is communication information for instructing "rapid charging permission" corresponding to the low tightness level, based on the switching rule DB 26A (step S512). The switching hub 30 transmits the rapid charging permission instruction information received from the system controller 20 to the charger 60 as a destination and to the communication monitoring device 80 as a mirroring destination (steps S514 and S516).

[0174] The process of step S514 switches the charger 60 to a rapid charge on state in which rapid charging is permitted (step S518). That is, the process of step S518 switches the charger 60 from a normal charging state in which normal charging is permitted but rapid charging is prohibited to a rapid charging state in which rapid charging is permitted. Note that if the charger 60 had already been switched to the rapid charging state before the process of step S518, the charger 60 may simply maintain the rapid charging state.

[0175] By the process of step S516, the communication information acquisition unit 88C of the communication monitoring device 80 receives the rapid charging permission instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process (step S520) to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S510.

[0176] If the power tightness is low, the abnormality determination unit 88D determines that the rapid charge permission instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is not information related to the "charging limit" of the charger 60 as defined in the abnormality determination rules, and determines that the communication information is normal (step S522). The output control unit 88E outputs the determination result of step S522 to the display screen 90 or the like (step S524).

[0177] Here, it is assumed that an attacker has seized the operating authority of the system controller 20, and that the system controller 20 transmits rapid charging prohibition instruction information, which is communication information for instructing the charger 60 to "prohibit rapid charging," to the charger 60 as the destination (steps S526 and S528).

[0178] The switching hub 30 transmits the rapid charging prohibition instruction information received from the system controller 20 to the charger 60 as the destination and the communication monitoring device 80 as the mirroring destination (steps S530 and S532).

[0179] The process of step S530 switches the charger 60 to a quick charge off state in which quick charging is prohibited (step S534). That is, the process of step S534 switches the charger 60 from a quick charge state in which quick charging is possible to a normal charge state in which normal charging is possible but quick charging is prohibited.

[0180] Through the process of step S532, the communication information acquisition unit 88C of the communication monitoring device 80 receives the rapid charge prohibition instruction information as communication information. The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether the acquired communication information satisfies the abnormality determination rule identified in step S510 (step S536).

[0181] If the power tightness is low, the abnormality determination unit 88D determines that the rapid charge prohibition instruction information, which is communication information transmitted from the system controller 20 to the charger 60, is information relating to the "charging limit" of the charger 60 as defined in the abnormality determination rules, and determines that the communication information is abnormal (step S538). The output control unit 88E outputs the determination result of step S538 to the display screen 90 or the like (step S540). Then, this sequence ends.

[0182] Next, an example of monitoring communication information communicated between the system controller 20 and the power storage device 50 when the power pressure level of the power grid 4 is low will be described.

[0183] FIG. 12 shows an example of the flow of information processing when the communication monitoring device 80 monitors communication information between the system controller 20 and the power storage device 50 when the power tightness level of the power grid 4 is low.

[0184] The management server 2 transmits system control information including power pressure information indicating a low level of power pressure to the system controller 20 of the charging system 1 (step S600).

[0185] The switching hub 30 of the charging system 1 transmits the power pressure information received from the management server 2 via the communication device 10 to the system controller 20 and the communication monitoring device 80, which is the mirroring destination (steps S602, S604, and S606).

[0186] The power pressure level determination unit 88A of the communication monitoring device 80 determines that the power pressure level of the power system 4 is low based on the received power pressure level information (step S608). The abnormality determination rule identification unit 88B identifies an abnormality determination rule corresponding to the low pressure level determined in step S308 from the abnormality determination rule DB 86C (step S610).

[0187] The processing unit 28 of the system controller 20 transmits, based on the switching rule DB 26A, charging permission instruction information, which is communication information for instructing "charging permission" corresponding to the low tightness level, to the power storage device 50 as the destination (step S612). The switching hub 30 transmits the charging permission instruction information received from the system controller 20 to the power storage device 50 as the destination and the communication monitoring device 80 as the mirroring destination (steps S614 and S616).

[0188] By receiving the discharge permission instruction information in step S614, the power storage device 50 is switched from the discharging state to the charging state (step S618). That is, the power storage device 50 is switched to the charging state by the processing of step S618. Note that if the power storage device 50 has already been switched to the charging state before the processing of step S618, the power storage device 50 may be maintained in the charging state.

[0189] The power storage device 50 then transmits charging rate information indicating the charging rate of the storage battery to the system controller 20 as the destination (step S620). As described above, the power storage device 50 transmits charging rate information to the system controller 20 at predetermined time intervals, etc. Here, a situation will be described in which the power storage device 50 transmits charging rate information indicating that the storage battery is at 0% charging rate. The switching hub 30 transmits the charging rate information received from the power storage device 50 to the system controller 20 as the destination and to the communication monitoring device 80 as the mirroring destination (steps S622 and S624).

[0190] Meanwhile, in step S616, the communication information acquisition unit 88C of the communication monitoring device 80 receives the charge permission instruction information as the communication information. In addition, in step S624, the communication information acquisition unit 88C of the communication monitoring device 80 receives the charging rate information indicating a charging rate of 0% as the communication information.

[0191] The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether or not the acquired communication information satisfies the abnormality determination rule identified in step S610 (step S626).

[0192] If the power pressure is low, the abnormality determination unit 88D determines that the communication information transmitted from the system controller 20 to the storage device 50, which is the charging permission instruction information transmitted to the storage device 50 when the charging rate is 0%, is not information regarding "discharging at a state below a specified charging rate" of the storage device 50 as specified in the abnormality determination rules, and determines that the communication information is normal (step S628).

[0193] The output control unit 88E updates the status in the device status management DB 86B (step S630). Specifically, the output control unit 88E records the value of the charging rate represented by the charging rate information in association with a timestamp that is the time when the charging rate information was received, as a status corresponding to the item "charging rate" of the device "power storage device" in the device status management DB 86B. Then, the output control unit 88E outputs the determination result of step S628 to the display screen 90 (step S632).

[0194] Here, it is assumed that an attacker has seized the operating authority of the system controller 20, and that discharge permission instruction information, which is communication information for instructing the storage device 50 to "permit discharge," is sent from the system controller 20 to the storage device 50 as the destination (steps S634, S636).

[0195] The switching hub 30 transmits the discharge permission instruction information received from the system controller 20 to the power storage device 50, which is the destination, and to the communication monitoring device 80, which is the mirroring destination (steps S638 and S640).

[0196] By receiving the discharge permission instruction information in step S638, power storage device 50 is switched to a discharging state in which power storage device 50 discharges power to at least one of charger 60 and power grid 4 (step S642). That is, by the processing of step S642, power storage device 50 is switched from a charging state to a discharging state.

[0197] The power storage device 50 then transmits charging rate information indicating the charging rate of the storage battery to the system controller 20 as the destination (step S644). As described above, the power storage device 50 transmits charging rate information to the system controller 20 at predetermined time intervals, etc. Here, a situation will be described in which the power storage device 50 transmits charging rate information indicating that the storage battery is at a charging rate of 10%. The switching hub 30 transmits the charging rate information received from the power storage device 50 to the system controller 20 as the destination and to the communication monitoring device 80 as the mirroring destination (steps S646 and S648).

[0198] Meanwhile, in step S640, the communication information acquisition unit 88C of the communication monitoring device 80 receives the discharge permission instruction information as communication information. In addition, in step S648, the communication information acquisition unit 88C of the communication monitoring device 80 receives the charging rate information indicating a charging rate of 10% as communication information.

[0199] The abnormality determination unit 88D of the communication monitoring device 80 executes an abnormality determination process to determine whether or not the acquired communication information satisfies the abnormality determination rule identified in step S610 (step S650).

[0200] When the power pressure is low, the abnormality determination unit 88D determines that the discharge permission instruction information transmitted from the system controller 20 to the power storage device 50, which is the communication information transmitted to the power storage device 50 when the charge rate is 10%, is information regarding "discharge at a charge rate below a predetermined charge rate" of the power storage device 50 as defined in the abnormality determination rule, and determines that the communication information is abnormal (step S652). Here, the description will be given assuming that the predetermined charge rate is 15%.

[0201] The output control unit 88E outputs the determination result of step S652 to the display screen 90 (step S654), and then ends this sequence.

[0202] In the present embodiment, the communication monitoring device 80 has been described as being provided in the charging system 1, but this is not limiting. The communication monitoring device 80 may be provided in the power system 6, and may be communicably connected to the charging system 1 via the network NW. In other words, the communication monitoring device 80 may be provided independently in the power system 6, or may be provided in the management server 2.

[0203] As described above, the communication monitoring method of this embodiment is a communication monitoring method executed by the communication monitoring device 80 that monitors communication information within the charging system 1 including the charger 60 that supplies power to the mobile object 5. The communication monitoring method includes a power pressure determination step that determines a power pressure level of the power grid 4 connected to the charging system 1, and an abnormality determination step that determines an abnormality in the communication information based on the power pressure level.

[0204] Here, the conventional technology has not considered communication abnormalities within the charging system 1 that may affect the power grid 4. For example, the conventional technology has not considered cases in which communication abnormalities occur within the charging system 1 due to power theft, cyber attacks on the charging system 1 for reasons such as taking down and causing confusion in the charging system 1 for political reasons, or blackmailing a company to extort ransom.

[0205] On the other hand, the communication monitoring method of the present embodiment determines an abnormality in the communication information within the charging system 1 based on the power pressure level of the power grid 4. Therefore, the communication method of the present embodiment can determine that communication information that contradicts the power pressure level of the power grid 4 is abnormal.

[0206] Therefore, the communication monitoring method of the present embodiment can detect a communication abnormality in the charging system 1 that may affect the power grid 4.

[0207] Furthermore, the communication monitoring method of the present embodiment monitors communication information communicated within the charging system 1 and determines an abnormality in the communication information based on the degree of power pressure. Therefore, in addition to the above-described effects, the communication monitoring method of the present embodiment can quickly detect a communication abnormality.

[0208] Furthermore, the communication monitoring method of the present embodiment can improve the overall safety of the charging system 1 and the power grid 4.

[0209] Furthermore, in the communication monitoring method of this embodiment, if the communication information satisfies an abnormality determination rule according to the power pressure level, the communication information is determined to be abnormal.

[0210] Therefore, in the communication monitoring method of this embodiment, by using the anomaly determination rule, in addition to the above effects, communication information that contradicts the power pressure level of the power system 4 can be easily determined to be an anomaly.

[0211] In addition, in the communication monitoring method of this embodiment, if the power tightness indicates a high level of tightness equal to or greater than a predetermined level, and the communication information satisfies an abnormality determination rule corresponding to the high level of tightness, which determines that communication information related to at least one of an increase in power consumption of the charging system 1 and a discharge restriction to the power grid 4 is abnormal, the communication information is determined to be abnormal.

[0212] Therefore, in addition to the above effects, the communication monitoring method of this embodiment makes it possible to determine that communication information regarding at least one of an increase in power consumption in the charging system 1 and a discharge restriction to the power grid 4 is abnormal when the power pressure level indicates a high pressure level equal to or greater than a predetermined pressure level.

[0213] In addition, in the communication monitoring method of this embodiment, if the power tightness indicates a high tightness level equal to or greater than a predetermined tightness level, and the communication information satisfies an abnormality determination rule corresponding to the high tightness level, the communication information is determined to be abnormal if it relates to at least one of the following: permission for rapid charging to supply power equal to or greater than a first threshold from the charger 60 to the mobile body 5; a discharge limit on the storage device 50 provided in the charging system 1; a discharge limit on the power generation device 40 provided in the charging system 1; and a power measurement result indicating an increase in total power consumption within the charging system 1 equal to or greater than a second threshold.

[0214] Therefore, in addition to the above effects, in the communication monitoring method of this embodiment, when the power pressure indicates a high pressure level equal to or greater than a predetermined pressure level, it becomes possible to determine that communication information related to at least one of the following is abnormal: permission for rapid charging to supply power equal to or greater than a first threshold from the charger 60 to the mobile body 5; discharge restriction on the storage device 50 provided in the charging system 1; discharge restriction on the power generation device 40 provided in the charging system 1; and power measurement results indicating an increase in total power consumption within the charging system 1 equal to or greater than a second threshold.

[0215] In addition, in the communication monitoring method of this embodiment, if the power pressure level represents a low pressure level that is less than a predetermined pressure level, and the communication information satisfies an abnormality determination rule corresponding to the low pressure level, which determines that communication information related to at least one of reducing power consumption in the charging system and increasing discharge power to the power grid is abnormal, the communication information is determined to be abnormal.

[0216] Therefore, in addition to the above effects, the communication monitoring method of this embodiment makes it possible to determine that communication information regarding at least one of the reduction in power consumption of the charging system 1 and the increase in discharge power to the power grid 4 is abnormal when the power pressure level indicates a low pressure level that is less than a predetermined pressure level.

[0217] In addition, in the communication monitoring method of this embodiment, the power tightness indicates a low tightness that is less than a predetermined tightness, and if the communication information satisfies an abnormality determination rule corresponding to the low tightness, which determines that the communication information is abnormal regarding at least one of the following: charging restriction from the charger 60 to the mobile body 5, discharging of the storage device 50 provided in the charging system 1 whose charging rate is less than a predetermined charging rate, and discharging of the power generation device 40 provided in the charging system 1 whose power generation rate is less than a predetermined power generation rate.

[0218] Therefore, in addition to the above-mentioned effects, in the communication monitoring method of this embodiment, when the power pressure level indicates a low pressure level that is less than a predetermined pressure level, it becomes possible to determine that communication information related to at least one of the following is abnormal: charging restriction from charger 60 to mobile body 5, discharging of storage device 50 provided in charging system 1 whose charging rate is less than a predetermined charging rate, and discharging of power generation device 40 provided in charging system 1 whose power generation rate is less than a predetermined power generation rate.

[0219] Furthermore, the communication monitoring method of this embodiment outputs the judgment result of the communication information.

[0220] Therefore, in addition to the above-mentioned effects, the communication monitoring method of this embodiment can provide the determination results to the user.

[0221] In the present embodiment, the charging system 1 is described as including the communication monitoring device 80. However, the communication monitoring device 80 may be provided outside the charging system 1. In this case, the switching hub 30 may be configured to transfer all of the communication information communicated within the charging system 1 to the communication monitoring device 80 provided outside the charging system 1.

[0222] Next, the hardware configuration of the system controller 20 and the communication monitoring device 80 of this embodiment will be described.

[0223] FIG. 13 is a block diagram showing an example of the hardware configuration of the system controller 20 and the communication monitoring device 80 of this embodiment.

[0224] The system controller 20 and communication monitoring device 80 of this embodiment include a control device such as a CPU (Central Processing Unit) 7A, a storage device such as a ROM (Read Only Memory) 7B and a RAM (Random Access Memory) 7C, an I / F 7D that connects to a network and communicates, and a bus 7E that connects each part.

[0225] The programs executed by the system controller 20 and the communication monitoring device 80 of this embodiment are provided in advance in the ROM 7B or the like.

[0226] The programs executed by the system controller 20 and communication monitoring device 80 of this embodiment may be configured to be provided as a computer program product by being recorded in an installable or executable file format on a computer-readable recording medium such as a CD-ROM (Compact Disk Read Only Memory), a flexible disk (FD), a CD-R (Compact Disk Recordable), or a DVD (Digital Versatile Disk).

[0227] Furthermore, the programs executed by the system controller 20 and the communication monitoring device 80 of this embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Also, the programs executed by the system controller 20 and the communication monitoring device 80 of this embodiment may be provided or distributed via a network such as the Internet.

[0228] The programs executed by the system controller 20 and the communication monitoring device 80 of this embodiment can cause a computer to function as the system controller 20 and the communication monitoring device 80 described in this embodiment. In this computer, the CPU 7A can read the programs from a computer-readable storage medium onto the main storage device and execute them.

[0229] The present technology can also be configured as follows.

[0230] (1) A communication monitoring method executed by a communication monitoring device that monitors communication information in a charging system including a charger that supplies power to a mobile object, the communication monitoring method including: a power pressure determination step of determining a power pressure of an electric power grid connected to the charging system; and an abnormality determination step of determining an abnormality in the communication information based on the power pressure. (2) The communication monitoring method according to (1), wherein the abnormality determination step determines the communication information to be abnormal if the communication information satisfies an abnormality determination rule corresponding to the power pressure. (3) The communication monitoring method according to (2), wherein the abnormality determination step determines the communication information to be abnormal if the power pressure indicates a high pressure that is equal to or greater than a predetermined pressure, and the communication information related to at least one of an increase in power consumption of the charging system and a limit on discharge to the electric power grid is abnormal. (4) The communication monitoring method according to (2) or (3), wherein the abnormality determination step determines the communication information to be abnormal when the power tightness indicates a high level of tightness equal to or higher than the predetermined level, and the communication information satisfies the abnormality determination rule corresponding to the high level of tightness, the abnormality being determined to be abnormal for at least one of permission for rapid charging to supply power equal to or higher than a first threshold from the charger to the mobile body, a discharge limit on a power storage device provided in the charging system, a discharge limit on a power generation device provided in the charging system, and a power measurement result indicating an increase in total power consumption in the charging system equal to or higher than a second threshold. (5) The communication monitoring method according to any one of (2) to (4), wherein the abnormality determination step determines the communication information as abnormal when the power pressure level represents a low pressure level that is less than a predetermined pressure level, and the communication information satisfies the abnormality determination rule corresponding to the low pressure level, which determines the communication information as abnormal when the communication information relates to at least one of a reduction in power consumption of the charging system and an increase in discharge power to the power grid.(6) The communication monitoring method according to any one of (2) to (5), wherein the abnormality determination step determines the communication information to be abnormal if the communication information satisfies the abnormality determination rule corresponding to the low power tightness, wherein the abnormality determination step determines the communication information to be abnormal if the communication information relates to at least one of a charge restriction from the charger to the mobile object, discharge of a power storage device provided in the charging system whose charging rate is equal to or lower than a predetermined charging rate, and discharge of a power generation device provided in the charging system whose power generation rate is equal to or lower than a predetermined power generation rate. (7) The communication monitoring method according to any one of (1) to (6), including an output control step of outputting a determination result of the communication information. (8) A communication monitoring device monitoring communication information in a charging system including a charger that supplies power to a mobile object, the communication monitoring device comprising: a power tightness determination unit that determines a power tightness of a power grid connected to the charging system; and an abnormality determination unit that determines an abnormality in the communication information based on the power tightness. (9) A communication monitoring program executed by a computer that monitors communication information within a charging system including a charger that supplies power to a mobile object, the communication monitoring program including: a power pressure determination step that determines a power pressure level of a power system connected to the charging system; and an abnormality determination step that determines an abnormality in the communication information based on the power pressure level.

[0231] Although the embodiments of the present disclosure have been described, the above embodiments are presented as examples and are not intended to limit the scope of the invention. The above novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. The above embodiments are included within the scope and spirit of the invention, and are also included in the scope of the inventions and their equivalents as defined in the claims.

[0232] REFERENCE SIGNS LIST 1 Charging system 4 Power system 5 Mobile object 40 Power generation device 50 Power storage device 60 Charger 70 Power meter 80 Communication monitoring device 88A Power pressure determination unit 88B Abnormality determination rule specification unit 88C Communication information acquisition unit 88D Abnormality determination unit 88E Output control unit

Claims

1. A communications monitoring method executed by a communications monitoring device that monitors communications information within a charging system including a charger that supplies power to a mobile object, the communications monitoring method including: a power pressure determination step of determining a power pressure of a power grid connected to the charging system; and an abnormality determination step of determining an abnormality in the communications information based on the power pressure.

2. The communication monitoring method according to claim 1, wherein the abnormality determination step determines that the communication information is abnormal if the communication information satisfies an abnormality determination rule corresponding to the degree of power pressure.

3. The communication monitoring method of claim 2, wherein the abnormality determination step determines the communication information to be abnormal when the power tightness indicates a high level of tightness equal to or higher than a predetermined level, and the communication information satisfies the abnormality determination rule corresponding to the high level of tightness, which determines the communication information relating to at least one of an increase in power consumption of the charging system and a limit on discharge to the power grid to be abnormal.

4. The communication monitoring method of claim 2, wherein the abnormality determination step determines the communication information to be abnormal if the power tightness indicates a high tightness level equal to or greater than a predetermined tightness level, and the communication information satisfies the abnormality determination rule corresponding to the high tightness level, which determines the communication information to be abnormal regarding at least one of the following: permission for quick charging to supply power equal to or greater than a first threshold value from the charger to the mobile body, a discharge limit for a storage device provided in the charging system, a discharge limit for a power generation device provided in the charging system, and a power measurement result indicating an increase in total power consumption in the charging system equal to or greater than a second threshold value.

5. The communication monitoring method of claim 2, wherein the abnormality determination step determines the communication information to be abnormal if the power tightness level represents a low tightness level that is less than a predetermined tightness level, and the communication information satisfies the abnormality determination rule corresponding to the low tightness level, which determines the communication information related to at least one of a reduction in power consumption of the charging system and an increase in discharge power to the power grid to be abnormal.

6. The communication monitoring method of claim 2, wherein the abnormality determination step determines the communication information to be abnormal if the power tightness indicates a low tightness level that is less than a predetermined tightness level, and the communication information satisfies the abnormality determination rule corresponding to the low tightness level, which determines the communication information to be abnormal regarding at least one of a charging restriction from the charger to the mobile body, discharging of a power storage device provided in the charging system whose charging rate is equal to or less than a predetermined charging rate, and discharging of a power generation device provided in the charging system whose power generation rate is equal to or less than a predetermined power generation rate.

7. The communication monitoring method according to claim 1, further comprising an output control step of outputting the judgment result of the communication information.

8. A communication monitoring device that monitors communication information within a charging system including a charger that supplies power to a mobile object, the communication monitoring device comprising: a power pressure determination unit that determines a power pressure of a power system connected to the charging system; and an abnormality determination unit that determines an abnormality in the communication information based on the power pressure.

9. A communication monitoring program executed by a computer that monitors communication information within a charging system including a charger that supplies power to a mobile object, the communication monitoring program including: a power pressure determination step for determining a power pressure of a power system connected to the charging system; and an abnormality determination step for determining an abnormality in the communication information based on the power pressure.

Images