Information processing method, information processing device, and program

Abstract

This information processing method acquires power supply information indicating supplied power supplied by a power supply facility to an electric vehicle, and charging information indicating charging power with which the electric vehicle is charged upon receiving the supply of power from the power supply facility (steps S303, S311), executes determination processing for determining whether a difference between the supplied power indicated by the power supply information and the charging power indicated by the charging information is within an appropriate range (step S322), and in a case where it is determined that the difference is not within the appropriate range, performs control to stop the supply of power from the power supply facility to the electric vehicle (step S324).

Description

Information processing method, information processing device, and program

[0001] The present invention relates to an information processing method, an information processing device, and a program.

[0002] 2. Description of the Related Art There is a technology relating to an information processing device that can realize a charging environment for charging an electric vehicle (EV) (see Patent Document 1).

[0003] International Publication No. 2022 / 149243

[0004] If the appropriate power supply to an electric vehicle is interrupted, the electric vehicle may be prevented from running properly.

[0005] Therefore, the present invention provides an information processing method and the like that contributes to an appropriate power supply to an electric vehicle.

[0006] An information processing method according to one aspect of the present invention is an information processing method used by an information processing device, which acquires power supply information indicating the supply power supplied by a power supply facility to an electric vehicle and charging information indicating the charging power with which the electric vehicle is charged by receiving power from the power supply facility, executes a determination process to determine whether the difference between the supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range, and if it is determined that the difference is not within the appropriate range, performs control to stop power supply from the power supply facility to the electric vehicle.

[0007] These comprehensive or specific aspects may be realized as a system, an apparatus, an integrated circuit, a computer program, or a computer-readable recording medium such as a CD-ROM, or may be realized as any combination of a system, an apparatus, an integrated circuit, a computer program, and a recording medium.

[0008] The present invention can contribute to an appropriate supply of power to an electric vehicle.

[0009] 1 is a schematic diagram showing the overall configuration of an information processing system in embodiment 1. FIG. 2 is a block diagram showing the functional configuration of the information processing system in embodiment 1. FIG. 3 is a first flowchart showing processing of a power supply facility in embodiment 1. FIG. 4 is a second flowchart showing processing of a power supply facility in embodiment 1. FIG. 5 is an explanatory diagram showing power supply information in embodiment 1. FIG. 6 is a first flowchart showing processing of a vehicle in embodiment 1. FIG. 7 is a second flowchart showing processing of a vehicle in embodiment 1. FIG. 8 is an explanatory diagram showing charging information in embodiment 1. FIG. 9 is a first flowchart showing processing of a server in embodiment 1. FIG. 10 is a second flowchart showing processing of a server in embodiment 1. FIG. 11 is a third flowchart showing processing of a server in embodiment 1. FIG. 12 is an explanatory diagram showing a power supply log in embodiment 1. FIG. 13 is an explanatory diagram showing a charging log in embodiment 1. FIG. 14 is an explanatory diagram of supplied power and supplied power amount in embodiment 1. FIG. 15 is an explanatory diagram of charged power and charged amount in embodiment 1. FIG. 16 is a sequence diagram showing processing of an information processing system in embodiment 1. FIG. 17 is an explanatory diagram showing a first example of a display by a terminal in embodiment 1. FIG. 18 is an explanatory diagram showing a second example of a display by a terminal in embodiment 1. FIG. 19 is an explanatory diagram showing a first example of a display by a security management system in embodiment 1. FIG. 10 is an explanatory diagram showing a second example of a display by the security management system in embodiment 1. FIG. 11 is a block diagram showing the functional configuration of an information processing system in embodiment 2. FIG. 12 is a flow diagram showing vehicle processing in embodiment 2. FIG. 13 is an explanatory diagram showing charging information in embodiment 2. FIG. 14 is an explanatory diagram showing operation information in embodiment 2. FIG. 15 is a first flow diagram showing server processing in embodiment 2. FIG. 16 is a second flow diagram showing server processing in embodiment 2. FIG. 17 is a third flow diagram showing server processing in embodiment 2. FIG. 18 is a fourth flow diagram showing server processing in embodiment 2. FIG. 19 is an explanatory diagram showing a charging log in embodiment 2. FIG. 20 is an explanatory diagram showing an operation log in embodiment 2. FIG. 21 is an explanatory diagram of power consumption and power consumption amount in embodiment 2. FIG. 22 is a block diagram showing the functional configuration of an information processing system in embodiment 3. FIG. 23 is a block diagram showing the configuration of a ledger system in embodiment 3.1 is a block diagram showing the functional configuration of a ledger server in embodiment 3. FIG. 2 is a block diagram showing the functional configuration of a ledger system in embodiment 3. FIG. 3 is a flow diagram showing the processing of the ledger system in embodiment 3. FIG. 4 is a sequence diagram showing the processing of the ledger system and server in embodiment 3. FIG. 5 is an explanatory diagram showing the data structure of a blockchain, which is an example of a distributed ledger. FIG. 6 is an explanatory diagram showing the data structure of transaction data. FIG. 7 is an explanatory diagram showing transaction data related to the execution of a smart contract. FIG. 8 is an explanatory diagram showing the processing related to the execution of a smart contract.

[0010] (Findings that form the basis of the present invention) The present inventor has found the following problems with the technology related to charging of electric vehicles (in other words, supplying power (also called power feeding) to electric vehicles) described in the "Background Art" section.

[0011] A power supply facility that supplies electric power to an electric vehicle counts the amount of power supplied to the electric vehicle (also referred to as the power supply amount). The power supply amount is used in a settlement process for settling the price of the supplied power.

[0012] The amount of power supplied by a power supply facility is generally counted by a computer installed in the power supply facility. If the computer installed in the power supply facility has security vulnerabilities, a security attack may be made to prevent the power supply facility from properly performing its operations.

[0013] In addition, power supply equipment may be connected to a network. In such cases, security threats may infiltrate the power supply equipment via the network, increasing the risk of disrupting the proper processing of the power supply equipment.

[0014] If the security of the power supply facility is breached due to a security attack on the power supply facility, for example, the proper power supply to an electric vehicle may be hindered or an unauthorized power supply to the electric vehicle may be made. If the proper power supply to an electric vehicle is hindered or an unauthorized power supply to the electric vehicle is made, the electric vehicle may be prevented from running properly.

[0015] For example, if the actual amount of power supply is less than the amount of power supply counted by the power supply equipment, an electric vehicle that is scheduled to travel a distance corresponding to the amount of power supply counted by the power supply equipment may not be able to travel that distance due to insufficient battery charge. Also, if the actual amount of power supply is more than the amount of power supply counted by the power supply equipment, the battery may become overcharged, which may accelerate battery deterioration.

[0016] Furthermore, for example, if the amount charged to a driver of an electric vehicle for power supply is based on the amount of power supply or the time of power supply counted and reported by the power supply equipment, the infringing power supply equipment may report an amount of power supply or time of power supply that is different from the actual amount (i.e., larger or smaller than the actual amount), which may result in the driver being charged an incorrect amount.

[0017] Therefore, the present invention provides an information processing method and the like that contributes to an appropriate power supply to an electric vehicle. For example, the present invention can contribute to an appropriate power supply to an electric vehicle by suppressing interruptions to the appropriate power supply to the electric vehicle.

[0018] Below, examples of inventions that can be obtained from the disclosure of this specification will be given, and the effects and the like that can be obtained from these inventions will be explained.

[0019] (1) An information processing method used by an information processing device, the information processing method comprising: acquiring power supply information indicating the power supply that a power supply facility supplies to an electric vehicle; and charging information indicating the charging power that the electric vehicle is charging by receiving power from the power supply facility; executing a determination process to determine whether a difference between the power supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range; and, if it is determined that the difference is not within the appropriate range, performing control to stop power supply from the power supply facility to the electric vehicle.

[0020] According to the above aspect, by determining whether the difference between the feed power and the charging power is within an appropriate range, it is possible to determine whether the power supply, i.e., the power supply, to the electric vehicle is appropriate. When a vehicle receives power supply from the power supply equipment and charges, it is appropriate for the difference between the feed power and the charging power to be within the appropriate range. If the difference between the feed power and the charging power is not within the appropriate range, it is determined that the power supply to the electric vehicle is inappropriate. Then, if it is determined that the power supply to the electric vehicle is inappropriate, the above information processing method stops the inappropriate power supply, thereby contributing to an appropriate power supply to the electric vehicle. In this way, the above information processing method contributes to an appropriate power supply to the electric vehicle.

[0021] (2) The information processing method according to (1), wherein, when acquiring the power supply information, one or more pieces of power supply information indicating the power supply power for each first time interval are acquired sequentially, and when acquiring the charging information, one or more pieces of charging information including the charging power for each second time interval are acquired sequentially, and the execution of the determination process includes repeatedly executing the determination process, and in the determination process, the earlier of the latest time included in the one or more first time intervals at which the power supply power indicated in the one or more pieces of power supply information was supplied and the latest time included in the one or more second time intervals at which charging was performed with the charging power indicated in the one or more pieces of charging information is identified as a specific time, and when it is determined in a previous determination process that the difference is within the appropriate range, the determination process is executed using the power supply power and the charging power for the period from the specific time identified in the previous determination process to the specific time identified in the determination process.

[0022] According to the above aspect, the determination as to whether the difference between the power supply power and the charging power is within the appropriate range is made using the power supply power and the charging power obtained sequentially during a period when both are available. In other words, the determination is not made using the power supply power or the charging power during a period when only one of the power supply power and the charging power is available. Therefore, it is possible to more appropriately determine whether the power supply is appropriate. Therefore, the above information processing method more appropriately contributes to the appropriate supply of power to an electric vehicle.

[0023] (3) The information processing method according to (1) or (2), further comprising: acquiring an operation log of equipment of the electric vehicle; and, in the determination process, calculating power consumption, which is the power consumed by the equipment, using the acquired operation log; and executing the determination process by adding the calculated power consumption to the acquired charging power, using the resulting power as new charging power.

[0024] According to the above aspect, a determination is made as to whether the difference between the supply power and the charging power is within an appropriate range using new charging power obtained by adding the power consumption of the vehicle's equipment to the charging power of the vehicle. This makes it possible to more appropriately determine whether power supply is appropriate by taking the power consumption of the equipment into consideration. This is because, when the vehicle's equipment is consuming power, it is appropriate for the difference between the power supplied by the power supply equipment and the sum of the charging power and the power consumption to be within the appropriate range. Therefore, the above information processing method more appropriately contributes to an appropriate power supply to an electric vehicle.

[0025] (4) The information processing method further acquires related information related to the electric vehicle, and in the determination process, executes the determination process using, as new charging power, a corrected charging power output by inputting the charging power and the related information into a trained model, and the trained model is a model trained to output, when training charging power and training related information are input, received power, which is power received by the training electric vehicle from the power supply equipment, as training corrected charging power when the charging power of a battery provided in the training electric vehicle related to the training related information is the training charging power, as training corrected charging power.

[0026] According to the above aspect, the corrected charging power output by the trained model is used to determine whether the difference between the supplied power and the charging power (i.e., the corrected charging power) is within an appropriate range, thereby making it possible to more appropriately determine whether the power supply is appropriate. The trained model may be a model that has been trained to output an appropriate value for the supplied power of a vehicle being charged by receiving power from a power supply facility and related information. This makes it possible to more appropriately determine whether the difference between the supplied power and the charging power is within an appropriate range. Therefore, the above information processing method more appropriately contributes to the appropriate supply of power to electric vehicles.

[0027] (5) The information processing method according to (4), wherein the related information includes at least a total travel distance of the electric vehicle, or a remaining battery capacity, a total charging time, a number of charges, or a charge / discharge efficiency of a battery provided in the electric vehicle.

[0028] According to the above aspect, by using at least the total mileage of the electric vehicle, or the remaining battery capacity, total charging time, number of charges, or charge / discharge efficiency of the battery provided in the electric vehicle as related information, it is possible to more easily determine whether the difference between the feed power and the charging power is within an appropriate range. Thus, the above information processing method more easily contributes to an appropriate power supply to the electric vehicle.

[0029] (6) The information processing method described in (4) or (5), wherein the trained models are a plurality of trained models including a trained model that is associated with the vehicle type or battery model number of the electric vehicle and is trained to output the training corrected charging power when the training charge amount and training related information of the electric vehicle are input, and in the judgment process, one trained model corresponding to the vehicle type or battery model number of the electric vehicle is selected from the plurality of trained models, and the judgment process is performed using the selected one trained model.

[0030] According to the above aspect, it is possible to more appropriately determine whether the difference between the supply power and the charging power is within an appropriate range by using the corrected charging power output by one trained model selected from a plurality of trained models and corresponding to the vehicle model or battery model number of the electric vehicle. Because the corrected charging power is the charging power appropriate for the electric vehicle being charged, the above determination can be made more appropriately. Therefore, the above information processing method more appropriately contributes to the appropriate supply of power to the electric vehicle.

[0031] (7) An information processing method according to any one of (1) to (6), in which, when the power supply information and the charging information are acquired, the acquired power supply information and the charging information are stored in a distributed ledger, and in the determination process, the power supply information and the charging information are read from the distributed ledger, and the determination process is executed using the read power supply information and the charging information.

[0032] According to the above aspect, since the power supply information and the charging information are stored in a distributed ledger, tampering of the power supply information and the charging information is substantially suppressed. Furthermore, since the power supply information and the charging information that are substantially suppressed from being tampered with are used to determine whether the difference between the power supply power and the charging power is within an appropriate range, the determination can be made more appropriately. Therefore, the above information processing method more appropriately contributes to the appropriate supply of power to electric vehicles.

[0033] (8) The information processing method according to (7), further comprising reading the power supply information from the distributed ledger and executing a billing process for the price of the power supply indicated in the read power supply information.

[0034] According to the above aspect, the invoicing process for the price of the supplied power is executed by using the power supply information that is substantially prevented from being tampered with by being stored in the distributed ledger. Therefore, the above information processing method contributes to the appropriate supply of power to the electric vehicle and enables the appropriate invoicing process for the price of the appropriate power supply to be executed.

[0035] (9) An information processing method described in any of (1) to (8), wherein the control further includes sending notification information to the terminal indicating that the difference is not within the appropriate range, thereby causing the terminal to present the notification information.

[0036] According to the above aspect, when the difference between the supplied power and the charging power is not within the appropriate range, the terminal presents presentation information to inform the user that the power supply is inappropriate, which contributes to encouraging the user to take action against the inappropriate power supply. Thus, the above information processing method contributes to more appropriately supplying power to an electric vehicle.

[0037] (10) An information processing method described in any of (1) to (9), wherein the control further includes sending notification information to a security management system indicating that the difference is not within the appropriate range, thereby causing the security management system to present the notification information.

[0038] According to the above aspect, when the difference between the supplied power and the charging power is not within the appropriate range, the security management system can present presentation information to inform the security manager that the power supply is inappropriate, which contributes to encouraging the security manager to take action against the inappropriate power supply. Thus, the above information processing method contributes to more appropriately supplying power to electric vehicles.

[0039] (11) An information processing device including: a holding unit that acquires power supply information indicating power supply that a power supply facility supplies to an electric vehicle; and charging information indicating charging power that the electric vehicle is charging by receiving power from the power supply facility; and a power supply control unit that executes a determination process that determines whether a difference between the power supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range; and that controls the power supply facility to stop supplying power to the electric vehicle when it is determined that the difference is not within the appropriate range.

[0040] According to the above aspect, the same effects as those of the above information processing method are achieved.

[0041] (12) A program that causes a computer to execute the information processing method described in (1).

[0042] According to the above aspect, the same effects as those of the above information processing method are achieved.

[0043] These comprehensive or specific aspects may be realized as a system, an apparatus, an integrated circuit, a computer program, or a recording medium such as a computer-readable CD-ROM, or may be realized as any combination of a system, an apparatus, an integrated circuit, a computer program, or a recording medium.

[0044] Hereinafter, the embodiments will be specifically described with reference to the drawings.

[0045] The embodiments described below are all comprehensive or specific examples. The numerical values, shapes, materials, components, component placement and connection configurations, steps, and step order shown in the following embodiments are merely examples and are not intended to limit the present invention. Furthermore, among the components in the following embodiments, components that are not described in the independent claims that represent the highest concepts are described as optional components.

[0046] First Embodiment In this embodiment, an information processing method and an information processing system that contribute to an appropriate power supply to an electric vehicle will be described.

[0047] FIG. 1 is a schematic diagram showing the overall configuration of an information processing system 1 according to the present embodiment.

[0048] 1, the information processing system 1 includes at least a server 10 and a power supply facility 50. The information processing system 1 may further include at least one of a terminal 20, a security management system 30, a terminal 40, and a vehicle 60. Each of the above devices is connected to a network N and is capable of communicating via the network N. Note that the physical locations where each of the above devices is located may be anywhere.

[0049] The server 10 is an information processing device that contributes to an appropriate power supply to an electric vehicle (e.g., vehicle 60). When the power supply equipment 50 supplies power to the vehicle 60, in other words, when the vehicle 60 is charging by receiving power from the power supply equipment 50, the server 10 can perform control to suppress the power supply if it detects an inappropriate power supply to the vehicle 60 based on the amount of power supplied by the power supply equipment 50 and the amount of charge of the vehicle 60. The processing of the server 10 will be described in detail later.

[0050] Terminal 20 is an information terminal (also simply referred to as a terminal) used for authentication when vehicle 60 is charged. Terminal 20 may be, for example, a terminal (specifically, a personal computer, a smartphone, a tablet, or the like) owned by the user of vehicle 60, but is not limited to this. Terminal 20 performs authentication processing together with server 10, power supply equipment 50, and vehicle 60 when charging vehicle 60, and controls charging of vehicle 60 if authentication is successful.

[0051] The security management system 30 is a system that manages the security of the power supply facility 50 or a system including the power supply facility 50 and the vehicle 60. The security management system 30 may correspond to a general SIM (Security Information Management), SEM (Security Event Management), or SIEM (Security Information and Event Management). The security management system 30 is expected to be visually recognized by a security administrator. For example, when the security management system 30 presents notification information indicating that power supply is inappropriate, the security administrator visually recognizes the notification information, which contributes to encouraging the security administrator to take action regarding the inappropriate power supply.

[0052] The terminal 40 is a terminal used to present information to a user. The presentation of information by the terminal 40 is performed, for example, by displaying an image on a display screen. This case will be described as an example, but is not limited to this. The terminal 40 may also present information by outputting sound from a speaker.

[0053] Terminal 40 may be, for example, a terminal (specifically, a personal computer, a smartphone, a tablet, or the like) owned by the user of vehicle 60, but is not limited to this. Terminal 40 may also serve as terminal 20. It is assumed that terminal 40 is visually recognized by the user of vehicle 60. For example, when terminal 40 presents notification information indicating that power supply is inappropriate, the user of vehicle 60 visually recognizes the notification information, which contributes to encouraging the user to take action against the inappropriate power supply.

[0054] The power supply equipment 50 is equipment that charges the vehicle 60 by supplying power to the vehicle 60. The power supply equipment 50 is also generally called a charger. When the power supply equipment 50 supplies power to the vehicle 60, the power supply equipment 50 counts the amount of power supplied, which is the amount of power supplied, and transmits the counted amount of power supplied to the server 10. The power supply from the power supply equipment 50 to the vehicle 60 may be limited, or more specifically, may be stopped, under the control of the server 10.

[0055] Vehicle 60 is an electric vehicle (also simply referred to as a vehicle) that is driven by electricity. Vehicle 60 includes a battery 69, and receives power from power supply equipment 50 to charge battery 69. When vehicle 60 charges battery 69, vehicle 60 counts the charge amount, which is the amount of power charged, and transmits the counted charge amount to server 10. Charging of vehicle 60 may be limited, or more specifically, may be stopped, under the control of server 10.

[0056] The network N is a network to which devices included in the information processing system 1 are connected. The network N may be configured from any communication line or network, and may include, for example, the Internet, a mobile phone carrier network, a wide area network, or a local area network.

[0057] 2 is a block diagram showing the functional configuration of information processing system 1 according to the present embodiment. The functions of server 10, power supply equipment 50, and vehicle 60 will be mainly described with reference to FIG.

[0058] 2, the server 10 includes, as functional units, a communication unit 11, an authentication unit 12, a storage unit 13, and a power supply control unit 14. At least some of the functional units included in the server 10 can be realized by a processor (e.g., a CPU (Central Processing Unit)) included in the server 10 executing a program using a memory.

[0059] The communication unit 11 is a communication interface communicatively connected to the network N. The communication unit 11 may be a communication interface for a wired communication standard (e.g., Ethernet (registered trademark) or the like), or may be a communication interface for a wireless communication standard (e.g., Wi-Fi (registered trademark) or the like, or a mobile communication system (3G, 4G, 5G, or the like)). The communication unit 11 is used when the functional units included in the server 10 communicate with other devices.

[0060] The authentication unit 12 is a processing unit that executes authentication processing. Specifically, the authentication processing executed by the authentication unit 12 is authentication processing that authenticates a user who uses the power supply equipment 50 and the vehicle 60 when power is supplied from the power supply equipment 50 to the vehicle 60. The authentication processing is, for example, password authentication, and this case will be described as an example, but is not limited to this. For example, user authentication using a challenge-response method can also be used as the authentication processing. The authentication processing also includes generation and transmission of a power supply equipment temporary key and a vehicle temporary key.

[0061] The holding unit 13 acquires power supply information indicating the power supply that the power supply equipment 50 is supplying to the vehicle 60 and charging information indicating the charging power that the vehicle 60 is charging by receiving power from the power supply equipment 50, and stores and holds the information in a storage device (not shown). The holding unit 13 can acquire the power supply information from the power supply equipment 50 via the network N. The holding unit 13 can also acquire the charging information from the vehicle 60 via the network N.

[0062] The holding unit 13 sequentially acquires, as the power supply information, one or more pieces of power supply information indicating the power supply for each time interval (corresponding to the first time interval). The holding unit 13 sequentially acquires, as the charging information, one or more pieces of charging information including the charging power for each time interval (corresponding to the second time interval).

[0063] The first time interval and the second time interval are independent of each other, i.e., they may be the same or different. In general, the first time interval is determined by the power supply facility 50 and the second time interval is determined by the vehicle 60, and the determination of the first time interval by the power supply facility 50 and the determination of the second time interval by the vehicle 60 are made independently.

[0064] The power supply control unit 14 controls power supply from the power supply equipment 50 to the vehicle 60 using the power supply information and charging information acquired and stored by the storage unit 13. Specifically, when user authentication by the authentication unit 12 is successful, the power supply control unit 14 controls to start power supply from the power supply equipment 50 to the vehicle 60. Furthermore, the power supply control unit 14 executes a determination process to determine whether the difference between the power supply power indicated in the power supply information stored in the storage unit 13 and the charging power indicated in the charging information stored in the storage unit 13 is within an appropriate range. When the power supply control unit 14 determines that the difference is not within the appropriate range (i.e., deviates from the appropriate range), it controls to stop power supply from the power supply equipment 50 to the vehicle 60.

[0065] The power supply control unit 14 repeatedly executes the above-described determination process. In the determination process, the power supply control unit 14 identifies, as the specific time, the latest time included in one or more first time intervals in which one or more power amounts have been supplied, or the latest time included in one or more second time intervals in which one or more charge amounts have been charged. Then, when it is determined in the previous determination process that the charge amount is within the appropriate range, the power supply control unit 14 can execute the above-described determination process using the power supply amount and the charge amount during the period from the specific time identified in the previous determination process (also referred to as the previous match time) to the specific time identified in the current determination process.

[0066] 2 , the power supply equipment 50 includes, as functional units, a communication unit 51, an authentication unit 52, a power supply unit 53, a power supply amount measurement unit 54, and a power supply control unit 55. At least some of the functional units included in the power supply equipment 50 can be realized by a processor (e.g., a CPU) included in the power supply equipment 50 executing a program using a memory.

[0067] The communication unit 51 is a communication interface communicatively connected to the network N. The communication unit 51 may be a communication interface for a wired communication standard (e.g., Ethernet (registered trademark) or the like), or may be a communication interface for a wireless communication standard (e.g., Wi-Fi (registered trademark) or the like, or a mobile communication system (3G, 4G, 5G, or the like)). The communication unit 51 is used when a functional unit included in the power supply equipment 50 communicates with another device.

[0068] The authentication unit 52 is a processing unit that executes authentication processing. Specifically, the authentication processing executed by the authentication unit 52 is processing that verifies the validity of the power supply equipment temporary key when power is supplied from the power supply equipment 50 to the vehicle 60.

[0069] Power supply unit 53 supplies power to vehicle 60. A charging cable is connected to power supply unit 53, and power supply unit 53 is connected to charging unit 63 via the charging cable. Power supply unit 53 supplies power to charging unit 63 via the charging cable and can communicate with charging unit 63. Power supply unit 53 can exchange information regarding the start and stop of power supply with charging unit 63 using the communication.

[0070] The power supply amount measuring unit 54 measures the power supply being supplied from the power supply unit 53 to the charging unit 63, and provides the measured power supply to the power supply control unit 55. The power supply amount measuring unit 54 has, for example, a current sensor, and measures the power supply amount by multiplying the current value measured by the current sensor for the current flowing from the power supply unit 53 to the charging unit 63 by a voltage value.

[0071] The power supply control unit 55 controls the power supply unit 53 to supply power to the charging unit 63 based on control by the server 10. The power supply control includes control of starting and stopping the power supply. The process of controlling the start and stop of the power supply will be described in detail later.

[0072] 2, vehicle 60 includes, as functional units, a communication unit 61, an authentication unit 62, a charging unit 63, a charge amount measurement unit 64, and a charge control unit 65. Vehicle 60 also includes a battery 69. At least some of the functional units included in vehicle 60 can be realized by a processor (e.g., a CPU) included in vehicle 60 executing a program using a memory.

[0073] The communication unit 61 is a communication interface that is communicatively connected to the network N. The communication unit 61 may be a communication interface of a wireless communication standard (for example, Wi-Fi (registered trademark) or a mobile communication system (3G, 4G, 5G, or the like)). The communication unit 61 is used when a functional unit included in the vehicle 60 communicates with another device.

[0074] The authentication unit 62 is a processing unit that executes an authentication process. Specifically, the authentication process executed by the authentication unit 62 is a process of verifying the validity of the vehicle temporary key when power is supplied from the power supply equipment 50 to the vehicle 60.

[0075] Charging unit 63 receives power from power supply equipment 50 and charges battery 69. A charging cable extending from power supply unit 53 is connected to charging unit 63, and charging unit 63 is connected to power supply unit 53 via the charging cable. Charging unit 63 receives power from power supply unit 53 via the charging cable and can communicate with power supply unit 53. Using the communication, charging unit 63 can exchange information regarding the start and stop of power supply with power supply unit 53.

[0076] Charge amount measurement unit 64 measures the charging power with which charging unit 63 charges battery 69 by receiving power from power supply unit 53, and provides the measured charging power to charging control unit 65. Charge amount measurement unit 64 has, for example, a current sensor, and measures the charging power by multiplying the current value measured by the current sensor regarding the current flowing from charging unit 63 to battery 69 by the voltage value.

[0077] The charging control unit 65 transmits charging information indicating the charging power provided by the charging amount measurement unit 64 to the server 10. The charging control unit 65 also controls charging of the battery 69 by the charging unit 63 based on control by the server 10. The control of charging includes control of starting and stopping charging. The process of controlling the start and stop of charging will be described in detail later.

[0078] The battery 69 outputs electric power as a power source for driving the vehicle 60. The battery 69 is charged by receiving electric power from the charging unit 63. The battery 69 outputs electric power and supplies the electric power to a motor that drives the vehicle 60, etc., via an inverter.

[0079] Note that if the communication path connecting the communication unit 61 and the network N and the communication path connecting the communication unit 51 and the network N at least partially overlap (in other words, match), there is a risk that both the power supply information and the charging information may be tampered with by a security threat in the event that a security threat intrudes into either the power supply equipment 50 or the vehicle 60. Therefore, by separating the communication path connecting the communication unit 61 and the network N from the communication path connecting the communication unit 51 and the network N, there is an advantage in that it is possible to prevent both the power supply information and the charging information from being tampered with by a security threat.

[0080] The following describes the processing of the power supply equipment 50. Specifically, the processing of the power supply equipment 50 supplying power to the vehicle 60 and transmitting power supply information to the server 10 will be described.

[0081] Fig. 3 is a first flow diagram showing the processing of the power supply equipment 50 in this embodiment. Fig. 4 is a second flow diagram showing the processing of the power supply equipment 50 in this embodiment. Fig. 5 is an explanatory diagram showing the power supply information in this embodiment. The processing of the power supply equipment 50 will be described with reference to Figs. 3 to 5.

[0082] In step S101, power supply equipment 50 is physically connected to vehicle 60. Specifically, power supply unit 53 of power supply equipment 50 and charging unit 63 of vehicle 60 are physically connected by a charging cable, and power supply equipment 50 detects that the physical connection with vehicle 60 has been established.

[0083] In step S102, the authentication unit 52 executes authentication processing, which will be described with reference to FIG.

[0084] In step S121 (see FIG. 4), the authentication unit 52 receives an authentication request from the terminal 20. The received authentication request includes the temporary key for the power supply equipment that the terminal 20 obtained from the server 10 (step S402 (see FIG. 16)). The temporary key for the power supply equipment is an encryption key used to encrypt the power supply information that the power supply equipment 50 transmits to the server 10. A digital signature of the server 10 is attached to the temporary key for the power supply equipment.

[0085] In step S122, the authentication unit 52 acquires the power supply equipment temporary key included in the authentication request received in step S121.

[0086] In step S123, the authentication unit 52 determines whether the power supply equipment temporary key acquired in step S122 is valid. Specifically, the authentication unit 52 can verify the validity of the power supply equipment temporary key acquired in step S122 using the digital signature of the server 10 that is assigned to the power supply equipment temporary key. Furthermore, the authentication unit 52 can determine that the power supply equipment temporary key acquired in step S122 is invalid if the power supply equipment temporary key acquired in step S122 has exceeded a predetermined validity period. If the authentication unit 52 determines that the power supply equipment temporary key is valid (Yes in step S123), the process proceeds to step S124. If not (No in step S123), the authentication fails, and the series of processes shown in FIGS. 3 and 4 are terminated.

[0087] In step S124, the authentication unit 52 transmits an authentication response to the terminal 20. The authentication response may be transmitted as a response to the authentication request received in step S121. After step S124 is completed, the authentication is considered to have been successful, and the process proceeds to step S103.

[0088] In step S103, the power supply equipment 50 starts supplying power to the vehicle 60. Specifically, the power supply unit 53 starts supplying power to the charging unit 63 based on control by the power supply control unit 55. The power supply control unit 55 also determines the timing of transmitting the power supply information. For example, the power supply control unit 55 can determine the time when a time equivalent to the transmission interval has elapsed from the current time as the transmission timing, but this is not limited to this. The transmission interval can be, for example, approximately 1 minute to 10 minutes, and more specifically, approximately 4 to 5 minutes. The transmission interval may vary for each transmission.

[0089] In step S104, the power supply control unit 55 determines whether any of the following events (1) to (3) has occurred: If event (1) has occurred, the process proceeds to step S105; if event (2) or (3) has occurred, the process proceeds to step S111.

[0090] (1) Transmission timing arrives. (2) Stop command is received. (3) Power supply is completed.

[0091] Regarding (1) above, when the power supply control unit 55 determines that the current time being updated by the power supply equipment 50 is after the time set as the timing for transmitting power supply information, it can determine that the event of “arrival of transmission timing” has occurred.

[0092] Regarding the above (2), when the power supply control unit 55 receives a stop command transmitted by the server 10, it can determine that the event of "receiving a stop command" has occurred.

[0093] Regarding the above (3), the power supply control unit 55 can determine that the event of “completion of power supply” has occurred when the power supply unit 53 receives information indicating that charging is complete from the charging unit 63 via the charging cable.

[0094] In step S105, the power supply amount measurement unit 54 acquires the supply power being supplied by the power supply unit 53 and provides it to the power supply control unit 55. At this time, the power supply amount measurement unit 54 acquires the supply power in one or more time intervals before the time interval including the current time point and in which the power supply amount measurement unit 54 has not transmitted supply power to the server 10 (step S106) up to the current time point, and provides it to the power supply control unit 55.

[0095] In step S106, the power supply control unit 55 generates power supply information including the power supply amount acquired by the power supply amount measurement unit 54 in step S105, and transmits the generated power supply information to the server 10. The power supply information may include, in addition to the power supply power acquired in step S105, a user ID that identifies the user who charged the vehicle 60, a period during which the power supply equipment 50 supplied power (also referred to as a power supply period), and a power supply equipment ID that identifies the vehicle 60 (see FIG. 5 ). The power supply information is encrypted by the power supply control unit 55 using the power supply equipment temporary key acquired in step S122. The power supply control unit 55 also determines the next transmission timing of the power supply information. For example, the power supply control unit 55 can determine the next transmission timing to be the point in time when a time corresponding to the transmission interval has elapsed since the last time the power supply information was transmitted. After completing step S106, the process proceeds to step S104.

[0096] In step S111 , the power feeding control unit 55 controls the power feeding unit 53 to stop feeding power to the charging unit 63 .

[0097] In step S112, the power supply control unit 55 performs control to stop other tasks being executed between the power supply equipment 50 and the vehicle 60, among the tasks being executed by the power supply equipment 50.

[0098] In step S113 , the power feeding equipment 50 releases the physical connection with the vehicle 60 .

[0099] Through the series of processes shown in FIGS. 3 and 4 , power supply equipment 50 supplies power to vehicle 60 and transmits power supply information to server 10 .

[0100] The following describes the processing of vehicle 60. Specifically, the processing of vehicle 60 receiving power supply from power supply equipment 50 to charge vehicle 60 and transmitting charging information to server 10 will be described.

[0101] Fig. 6 is a first flowchart showing the processing of vehicle 60 in this embodiment. Fig. 7 is a second flowchart showing the processing of vehicle 60 in this embodiment. Fig. 8 is an explanatory diagram showing charging information in this embodiment.

[0102] In step S201, vehicle 60 is physically connected to power supply equipment 50. Specifically, charging unit 63 of vehicle 60 and power supply unit 53 of power supply equipment 50 are physically connected by a charging cable, and vehicle 60 detects that the physical connection with power supply equipment 50 has been established.

[0103] In step S202, the authentication unit 62 executes authentication processing, which will be described with reference to FIG.

[0104] In step S221 (see FIG. 7 ), the authentication unit 62 receives an authentication request from the terminal 20. The received authentication request includes the temporary vehicle key that the terminal 20 has acquired from the server 10. The temporary vehicle key is an encryption key used to encrypt the charging information that the vehicle 60 transmits to the server 10. A digital signature of the server 10 is attached to the temporary vehicle key.

[0105] In step S222, the authentication unit 62 acquires the temporary vehicle key from the authentication request received in step S221.

[0106] In step S223, the authentication unit 62 determines whether the temporary vehicle key acquired in step S222 is valid. Specifically, the authentication unit 62 can verify the validity of the temporary vehicle key acquired in step S222 by using the digital signature of the server 10 that is assigned to the temporary vehicle key. Furthermore, the authentication unit 62 can determine that the temporary vehicle key acquired in step S222 is invalid if the temporary vehicle key has exceeded a predetermined validity period. If the authentication unit 62 determines that the temporary vehicle key is valid (Yes in step S223), the process proceeds to step S224. If not (No in step S222), the authentication is considered to have failed, and the series of processes shown in FIGS. 6 and 7 are terminated.

[0107] In step S224, the authentication unit 62 transmits an authentication response to the terminal 20. The authentication response may be transmitted as a response to the authentication request received in step S221. After step S224 is completed, the authentication is considered to have been successful, and the process proceeds to step S203.

[0108] In step S203, the vehicle 60 receives power from the power supply equipment 50 and starts charging. Specifically, the charging unit 63 starts charging based on control by the charging control unit 65 of the vehicle 60. The charging control unit 65 also determines the timing of transmitting the charging information. For example, the charging control unit 65 can determine the time when a time equivalent to the transmission interval has elapsed from the current time as the transmission timing, but this is not limited to this. The transmission interval can be, for example, about 1 to 10 minutes, and more specifically, about 4 to 5 minutes. The transmission interval may vary for each transmission.

[0109] In step S204, the charging control unit 65 determines whether any of the following events (1) to (3) has occurred: If event (1) has occurred, the process proceeds to step S205; if event (2) or (3) has occurred, the process proceeds to step S211.

[0110] (1) Transmission timing arrives. (2) Stop command is received. (3) Charging is completed.

[0111] Regarding (1) above, when the charging control unit 65 determines that the current time being updated by the vehicle 60 is after the time set as the timing for transmitting charging information, it can determine that the event of “arrival of transmission timing” has occurred.

[0112] Regarding the above (2), when the charging control unit 65 receives a stop command transmitted by the server 10, it can determine that the event of "receiving a stop command" has occurred.

[0113] Regarding (3) above, when the charging control unit 65 detects that the charging unit 63 has become fully charged (or has reached the target remaining battery capacity) as a result of charging, it can determine that a "charging completion" event has occurred.

[0114] In step S205, the charge amount measurement unit 64 acquires the charging power being charged by the charging unit 63 and provides it to the charge control unit 65. At this time, the charge amount measurement unit 64 acquires the charging power in one or more time intervals before the time interval including the current time point and in which the charging power has not been transmitted to the server 10 (step S206) up to the current time point, and provides it to the charge control unit 65.

[0115] In step S206, the charging control unit 65 generates charging information including the charging power acquired by the charging amount measurement unit 64 in step S205, and transmits the generated charging information to the server 10. The charging information may include, in addition to the charging power acquired in step S205, a user ID that is identification information of the user who charged the vehicle 60, a period during which the vehicle 60 was charged (also referred to as a charging period), and a vehicle ID that is identification information of the vehicle 60 (see FIG. 8 ). The charging information is encrypted by the charging control unit 65 with the vehicle temporary key acquired in step S222. The charging control unit 65 also determines the next transmission timing of the charging information. For example, the charging control unit 65 determines the next transmission timing to be the point at which a time corresponding to the transmission interval has elapsed since the point at which the charging information was transmitted. After completing step S206, the process proceeds to step S204.

[0116] In step S211, the charging control unit 65 controls the charging unit 63 to stop charging.

[0117] In step S212, charging control unit 65 performs control to stop other tasks being executed between vehicle 60 and power feeding equipment 50, among the tasks being executed by vehicle 60.

[0118] In step S213, vehicle 60 releases the physical connection with power feeding equipment 50.

[0119] Through the series of processes shown in FIGS. 6 and 7, vehicle 60 receives power from power supply equipment 50 to charge, and also transmits charging information to server 10.

[0120] The following describes the processing of the server 10. Specifically, when the power supply equipment 50 supplies power and the vehicle 60 is charging, the server 10 determines whether the amount of power supplied matches the amount of charge, and stops the power supply or charging.

[0121] Fig. 9 is a first flow diagram showing the processing of the server 10 in this embodiment. Fig. 10 is a second flow diagram showing the processing of the server 10 in this embodiment. Fig. 11 is a third flow diagram showing the processing of the server 10 in this embodiment. Fig. 12 is an explanatory diagram showing a power supply log in this embodiment. Fig. 13 is an explanatory diagram showing a charging log in this embodiment.

[0122] In step S301, the server 10 executes authentication processing. The steps included in the authentication processing will be described with reference to FIG.

[0123] In step S331 (see FIG. 10 ), the authentication unit 12 receives an authentication request from the terminal 20. The authentication request includes information necessary for authentication. If the authentication method is password authentication, the authentication request includes the username and password of the user of the vehicle 60. This case will be described as an example.

[0124] In step S332, the authentication unit 12 determines whether the combination of the user name and password included in the authentication request received in step S331 is valid. If it is determined that the combination of the user name and password is valid (Yes in step S332), the process proceeds to step S333. If not (No in step S332), the authentication is considered to have failed and the series of processes shown in Figures 10 to 12 is terminated.

[0125] In step S333, the authentication unit 12 generates a temporary key for the power supply equipment. The temporary key for the power supply equipment may be information arbitrarily determined by the authentication unit 12, and more specifically, may be information determined by a random number.

[0126] In step S334, the authentication unit 12 generates a temporary vehicle key. The temporary vehicle key may be information arbitrarily determined by the authentication unit 12, and more specifically, may be information determined by a random number.

[0127] In step S335, the authentication unit 12 transmits an authentication response to the power supply equipment 50. The authentication response may be transmitted as a response to the authentication request received in step S331. The authentication response transmitted by the authentication unit 12 includes the power supply equipment temporary key generated in step S333 and the vehicle temporary key generated in step S334. After completing the processing of step S335, the authentication is considered to have been successful, and the process proceeds to step S302.

[0128] In step S302 (see FIG. 9), the power supply control unit 14 determines whether any of the following events (1) to (3) has occurred: If event (1) has occurred, the process proceeds to step S303; if event (2) has occurred, the process proceeds to step S311; and if event (3) has occurred, the process proceeds to step S321.

[0129] (1) Receive power supply information. (2) Receive charging information. (3) The time to make a decision arrives.

[0130] Regarding the above (1), when the power supply control unit 14 receives the power supply information transmitted by the power supply equipment 50 (step S106), it can determine that the event of "receiving power supply information" has occurred.

[0131] Regarding the above (2), when the power supply control unit 14 receives the charging information transmitted by the vehicle 60 (step S206), the power supply control unit 14 can determine that an event of "receiving charging information" has occurred.

[0132] Regarding the above (3), when the power supply control unit 14 determines that the current time updated by the server 10 is after the time set as the timing for determining the amount of power supply and the amount of charge, the power supply control unit 14 can determine that the event of “arrival of the determination timing” has occurred.

[0133] In step S303, the power supply control unit 14 stores the received power supply information in the storage unit 13. Specifically, the power supply control unit 14 decrypts the received power supply information using the power supply equipment temporary key and stores the decrypted information in the power supply log stored in the storage unit 13. An example of the power supply log is shown in FIG. 12. The power supply log includes a user ID, a power supply period, a power supply equipment ID, and supplied power in chronological order. The content of the information included in the power supply log is the same as the information included in the power supply information, so a detailed description will be omitted. After step S303 is completed, the process proceeds to step S302.

[0134] In step S303, the power supply control unit 14 may generate drawing information including the power supply period and the supplied power included in the power supply log as drawing information for an image to be displayed on the display screen 41 of the terminal 40, and transmit the generated drawing information to the terminal 40. In this case, the terminal 40 can receive the transmitted drawing information and display the supplied power for each hour (for example, line 411 in FIG. 17 ) on the display screen 41. The power supply control unit 14 may do the same for the drawing information for an image to be displayed on the display screen 31 of the security management system 30, and in this case, the security management system 30 can receive the transmitted drawing information and display the supplied power for each hour (for example, line 311 in FIG. 19 ) on the display screen 31.

[0135] In step S311, the power supply control unit 14 stores the received charging information in the holding unit 13. Specifically, the power supply control unit 14 decrypts the received charging information with the vehicle temporary key and stores the decrypted information in the charging log stored in the holding unit 13. An example of the charging log is shown in FIG. 13. The charging log includes a user ID, a charging period, a vehicle ID, and charging power in chronological order. The content of the information included in the charging log is the same as the information included in the charging information, and therefore a detailed description thereof will be omitted. After step S311 is completed, the process proceeds to step S302.

[0136] In step S311, the power supply control unit 14 may generate drawing information including the charging period and charging power included in the charging log as drawing information for an image to be displayed on the display screen 41 of the terminal 40, and transmit the generated drawing information to the terminal 40. The terminal 40 can receive the transmitted drawing information and display the charging power for each hour (for example, line 412 in FIG. 17 ) on the display screen 41. The power supply control unit 14 may do the same for the drawing information for an image to be displayed on the display screen 31 of the security management system 30, and in this case, the security management system 30 can receive the transmitted drawing information and display the charging power for each hour (for example, line 312 in FIG. 19 ) on the display screen 31.

[0137] In step S321 , the power supply control unit 14 acquires the power supply information and the charging information stored in the holding unit 13 .

[0138] In step S322, the power supply control unit 14 executes a process for determining whether the amount of power supply and the amount of charge during the target period match. The process included in the process for determining whether the amount of power supply and the amount of charge match will be described with reference to FIG.

[0139] In step S341, the power supply control unit 14 acquires the last match time. The last match time is the specific time determined in the previous match determination process when the power supply control unit 14 determines in the previous match determination process that the difference between the power supply amount and the charge amount is within the appropriate range.

[0140] In step S342, the power supply control unit 14 specifies the earlier of the latest time in the power supply log and the latest time in the charging log as the specific time. For example, since the latest time in the power supply log shown in Fig. 12 is "November 1, 11:13," and the latest time in the charging log shown in Fig. 13 is "November 1, 11:16," the power supply control unit 14 specifies the earlier of these times, "November 1, 11:13," as the specific time.

[0141] In step S343, the power supply control unit 14 calculates the amount of power supply for the target period (i.e., the period from the last match time to the specific time) by referring to the power supply log. Specifically, the power supply control unit 14 can calculate the amount of power supply for the target period by integrating the supplied power from the last match time to the specific time. The amount of power supply is calculated as the area of ​​a figure sandwiched between the line indicating the supplied power and the time axis in a graph with the vertical axis representing the supplied power and the horizontal axis representing time (see FIG. 14 ).

[0142] In step S344, the power supply control unit 14 calculates the charge amount for the target period by referring to the charge log. Specifically, the power supply control unit 14 can calculate the charge amount for the target period by integrating the charge power from the previous coincidence time to the specific time. The charge amount is calculated as the area of ​​a figure sandwiched between the line indicating the charge power and the time axis in a graph with the vertical axis representing the charge power and the horizontal axis representing the time (see FIG. 15 ).

[0143] In step S345, the power supply control unit 14 determines whether the difference between the power supply amount calculated in step S343 and the charge amount calculated in step S344 is within an appropriate range. The appropriate range may be, for example, about 1% to 5% of the power supply amount or the charge amount.

[0144] If it is determined that the difference is within the appropriate range (Yes in step S345), it is determined that there is a "match" (i.e., the power supply amount and the charging amount match), and the process shown in Fig. 11 ends and proceeds to step S323; if not (No in step S345), it is determined that there is a "mismatch" (i.e., the power supply amount and the charging amount do not match), and the process shown in Fig. 11 ends and proceeds to step S323. Note that, as described above, the word "match" means that the difference between the power supply amount and the charging amount is within the appropriate range, and in other words, it does not simply mean that the power supply amount and the charging amount strictly match.

[0145] In step S323, the power supply control unit 14 branches the process depending on the result of the match determination process in step S322. If it is determined in the match determination process in step S322 that the amount of power supply and the amount of charge during the target period match (Yes in step S323), the process proceeds to step S302, and if not (No in step S323), the process proceeds to step S324.

[0146] In step S324, the power supply control unit 14 transmits a stop command to the power supply equipment 50 and the vehicle 60. If the transmitted stop command is received by the power supply equipment 50, the power supply control unit 55 determines in step S104 that the event "(2) A stop command is received" has occurred, and executes processing such as stopping power supply (steps S111 to S113). If the transmitted stop command is received by the vehicle 60, the charging control unit 65 determines in step S204 that the event "(2) A stop command is received" has occurred (steps S211 to S213).

[0147] In step S325, the power supply control unit 14 transmits notification information indicating that the difference between the power supply amount and the charging amount is not within the appropriate range (in other words, notification information indicating the occurrence of a mismatch) to the security management system 30 and the terminal 40. When the security management system 30 receives the transmitted notification information, the security management system 30 presents the notification information to the user by displaying an image indicating the occurrence of a mismatch (e.g., image 303 in FIG. 20 ) on the display screen 31. When the terminal 40 receives the transmitted notification information, the terminal 40 presents the notification information to the user by displaying an image indicating the occurrence of a mismatch (e.g., image 403 in FIG. 18 ) on the display screen 41.

[0148] Through the series of processes shown in Figure 10, when the power supply equipment 50 is supplying power and the vehicle 60 is charging, the server 10 can determine whether the amount of power supply and the amount of charge match, and stop the power supply or charging.

[0149] In step S342, the current time may be specified as the specific time. If the latest time in the power supply log does not match the current time, the amount of power supply between the latest time in the power supply log and the current time may be compensated for using an estimated value. For example, if the current time is "November 1, 11:14" and the latest power supply period in the power supply log shown in FIG. 12 is "November 1, 11:09 to November 1, 11:13," the estimated value of the amount of power supply between "November 1, 11:13 to November 1, 11:14" may be considered to be 21 W (=87 kW / 4 min). Similarly, the amount of power supply between the latest time in the charging log and the current time may be compensated for using an estimated value.

[0150] The processing of the information processing system 1 will be described below.

[0151] Fig. 16 is a sequence diagram showing the processing of the information processing system 1 in this embodiment. The processing shown in Fig. 16 partially overlaps with the processing of the power supply facility 50 (see Figs. 3 and 4), the processing of the vehicle 60 (see Figs. 6 and 7), and the processing of the server 10 (see Figs. 9 to 11). Fig. 16 shows an example of the processing when authentication of the server 10, the power supply facility 50, and the vehicle 60 is successful.

[0152] In step S401, terminal 20 transmits an authentication request to server 10. The transmission of the authentication request by terminal 20 may be performed, for example, in response to the user of vehicle 60 operating terminal 20 when the user intends to charge vehicle 60 using power supply equipment 50. Server 10 receives the transmitted authentication request. Receiving the authentication request corresponds to step S331 (see FIG. 10 ).

[0153] In step S402, the server 10 transmits an authentication response to the terminal 20. The authentication response may be transmitted as a response to the authentication request received in step S401. The authentication response includes the power supply equipment temporary key and the vehicle temporary key. The transmission of the authentication response corresponds to step S335 (see FIG. 10 ).

[0154] In step S403, the terminal 20 transmits an authentication request to the vehicle 60. The vehicle 60 receives the transmitted authentication request. The authentication request transmitted by the terminal 20 includes the temporary vehicle key that the terminal 20 obtained from the server 10 in step S402. The vehicle 60 obtains and verifies the temporary vehicle key from the received authentication request, thereby achieving successful authentication. Receiving the authentication request corresponds to step S221 (see FIG. 7).

[0155] In step S404, the vehicle 60 transmits an authentication response to the terminal 20. The transmission of the authentication response may be made as a response to the authentication request received in step S403. The transmission of the authentication response corresponds to step S224 (see FIG. 7).

[0156] In step S405, the terminal 20 transmits an authentication request to the power supply equipment 50. The power supply equipment 50 receives the transmitted authentication request. The authentication request transmitted by the terminal 20 includes the power supply equipment temporary key that the terminal 20 obtained from the server 10 in step S402. The power supply equipment 50 obtains and verifies the power supply equipment temporary key from the received authentication request, thereby achieving successful authentication. Receiving the authentication request corresponds to step S121 (see FIG. 4).

[0157] In step S406, the power supply equipment 50 transmits an authentication response to the terminal 20. The transmission of the authentication response may be made as a response to the authentication request received in step S405. The transmission of the authentication response corresponds to step S124 (see FIG. 4).

[0158] In step S407, the power supply equipment 50 starts power supply in response to successful authentication in step S405. Step S407 corresponds to step S103 (see FIG. 3 ). After starting power supply, the power supply equipment 50 transmits power supply information to the server 10 every time a predetermined transmission timing arrives while power is being supplied (step S411, corresponding to step S106 (see FIG. 3 )). The server 10 receives the transmitted power supply information (corresponding to step S303 (see FIG. 9 )).

[0159] In step S408, in response to successful authentication in step S403, vehicle 60 receives power supply from power supply equipment 50, which was started in step S407, and starts charging. Step S408 corresponds to step S203 (see FIG. 6 ). After starting charging, vehicle 60 transmits charging information to server 10 every time a predetermined transmission timing arrives during charging (step S412, which corresponds to step S206 (see FIG. 6 )). Server 10 receives the transmitted charging information (corresponding to step S311 (see FIG. 9 )).

[0160] The timing of transmitting the power supply information and the timing of transmitting the charging information are independent of each other; in other words, the timing of transmitting the power supply information and the timing of transmitting the charging information may coincide or may differ.

[0161] In step S413, the server 10 executes a charging control process including a matching determination process, which corresponds to the processes in steps S321 to S325.

[0162] Thereafter, as long as charging and power supply are continued, power supply information is transmitted (step S411), charging information is transmitted (step S412), and a charging control process is executed (step S413).

[0163] Next, an example of display on the terminal 40 will be described.

[0164] FIG. 17 is an explanatory diagram showing a first example of a display on the terminal 40 in this embodiment.

[0165] FIG. 17 shows a first example of an image displayed on the display screen 41 of the terminal 40 when the vehicle 60 is receiving power supply from the power supply equipment 50 and is being charged.

[0166] The image shown in FIG. 17 includes an image 401 showing a power graph, and an image 402 showing information about the power supply equipment 50 that is supplying power and the vehicle 60 that is being charged.

[0167] Specifically, image 401 includes a line 411 indicating the power supply versus elapsed time and a line 412 indicating the charging power versus elapsed time. Image 401 may be an image drawn based on drawing information received from server 10 (e.g., step S303 or step S311 (see FIG. 9 )). Image 401 can be updated to an image based on new drawing information received from server 10.

[0168] Specifically, image 402 includes the power supply equipment ID of the power supply equipment 50 that is supplying power ("EVSE001" in FIG. 17) and the vehicle ID of the vehicle 60 that is receiving power from the power supply equipment 50 and charging ("EV001" in FIG. 17).

[0169] 18 is an explanatory diagram showing a second example of a display by terminal 40 in the present embodiment. Fig. 18 shows a second example of an image displayed on display screen 41 of terminal 40 when vehicle 60 is receiving power supply from power supply equipment 50 and charging.

[0170] The images shown in FIG. 18 include an image 403 showing a mismatch between the power supply and the charging power, as well as an image 401 and an image 402 similar to those in FIG.

[0171] Specifically, image 403 includes a frame indicating the portion of line 411 indicating the supply power where the difference between the supply power and the charging power exceeds the appropriate range, and the words "Mismatch Occurred." Image 403 is an example of an image displayed by terminal 40 based on notification information indicating the occurrence of a mismatch (step S325 (see FIG. 9 )) transmitted from server 10.

[0172] Next, an example of a display by the security management system 30 will be described.

[0173] FIG. 19 is an explanatory diagram showing a first example of a display by the security management system 30 according to this embodiment.

[0174] FIG. 19 shows a first example of an image displayed on the display screen 31 of the security management system 30 when the vehicle 60 is receiving power from the power supply equipment 50 and charging.

[0175] The image shown in FIG. 19 includes an image 301 showing a power graph, and an image 302 showing information about the power supply equipment 50 that is supplying power and the vehicle 60 that is being charged.

[0176] Image 301 includes a line 311 indicating the power supply versus elapsed time and a line 312 indicating the charging power versus elapsed time, similar to image 401 displayed on display screen 41 of terminal 40. Image 301 may be an image drawn based on drawing information received from server 10 (e.g., step S303 or step S311 (see FIG. 9 )), and can be updated to an image based on new drawing information received from server 10.

[0177] In addition to the image contained in image 402 displayed on display screen 41 of terminal 40, image 302 includes information indicating the destination for contact regarding power supply equipment 50 and information indicating the destination for contact regarding vehicle 60.

[0178] 20 is an explanatory diagram showing a second example of a display by the security management system 30 in this embodiment. Fig. 20 shows a second example of an image displayed on the display screen 31 of the security management system 30 when the vehicle 60 is being charged by receiving power from the power supply equipment 50.

[0179] The images shown in FIG. 20 include an image 303 showing a mismatch between the power supply and the charging power, as well as an image 301 and an image 302 similar to those in FIG.

[0180] Specifically, image 303 includes a frame indicating the portion of line 311 indicating the supply power where the difference with the charging power exceeds the appropriate range, and the words "Mismatch Occurred." Image 303 is an example of an image displayed by the security management system 30 based on notification information indicating the occurrence of a mismatch (step S325 (see FIG. 9 )) transmitted from server 10.

[0181] Second Embodiment In this embodiment, an information processing method and an information processing system that contribute to an appropriate power supply to an electric vehicle will be described, which are different from those in the first embodiment.

[0182] In this embodiment, server 10 in the first embodiment is replaced with server 10A, and vehicle 60 in the first embodiment is replaced with vehicle 60A. The other devices are the same as those in the first embodiment, and therefore detailed description thereof will be omitted.

[0183] The information processing system 1A includes at least a server 10A and a power supply facility 50. The information processing system 1A may further include at least one of a terminal 20, a security management system 30, a terminal 40, and a vehicle 60A. Each of the above devices is connected to a network N and is capable of communicating with each other via the network N.

[0184] 21 is a block diagram showing the functional configuration of an information processing system 1A according to the present embodiment. The functions of a server 10A and a vehicle 60A will be mainly described with reference to FIG. 21. The description of the functions of other components may be omitted.

[0185] 21 , the server 10A includes a holding unit 13A and a power supply control unit 14A as functional units, instead of the holding unit 13 and the power supply control unit 14 of the first embodiment. The holding unit 13A or the power supply control unit 14A can be realized by a processor (e.g., a CPU) included in the server 10A executing a program using a memory.

[0186] Similar to the holding unit 13 in the first embodiment, the holding unit 13A acquires power supply information indicating the power supply that is being supplied to the vehicle 60A by the power supply equipment 50, and stores and holds the information in a storage device (not shown). The holding unit 13A also acquires charging information indicating the charging power that is being charged to the vehicle 60A by receiving power supply from the power supply equipment 50, and related information related to the vehicle 60A, and stores and holds the information in a storage device (not shown). The holding unit 13A can acquire the power supply information from the power supply equipment 50 via the network N. The holding unit 13A can also acquire the charging information and the related information from the vehicle 60A via the network N.

[0187] The power supply control unit 14A controls power supply from the power supply equipment 50 to the vehicle 60A using the power supply information and charging information acquired and stored by the storage unit 13A. The charging information includes related information and operation information. Specifically, when user authentication by the authentication unit 12 is successful, the power supply control unit 14A controls to start power supply from the power supply equipment 50 to the vehicle 60A. Furthermore, the power supply control unit 14A executes a determination process to determine whether a difference between the power supply power indicated in the power supply information stored by the storage unit 13A, the charging information stored by the storage unit 13A, and the charging power (corresponding to corrected charging power) calculated from the related information included in the charging information is within an appropriate range. Then, when the power supply control unit 14A determines that the difference is not within the appropriate range (i.e., deviates from the appropriate range), the power supply control unit 14A controls to stop power supply from the power supply equipment 50 to the vehicle 60A.

[0188] The power supply control unit 14A calculates the power consumption of the equipment included in the vehicle 60A using the operation log of the equipment, and performs the determination process using the power obtained by adding the power consumption to the charging power as new charging power. The equipment included in the vehicle 60A may be, for example, an air conditioner, lights, or a navigation system.

[0189] Furthermore, the corrected charging power acquired by the power supply control unit 14A is power output by inputting the charging power and related information into the trained model. The trained model is a model that is trained so that, when the charging power (also referred to as training charging power) and related information (also referred to as training related information) are input, the trained model outputs, as the corrected charging power (also referred to as training corrected charging power), the received power that is the power that the training electric vehicle receives from the power supply equipment 50 when the charging power of the battery provided in the vehicle (also referred to as training electric vehicle) related to the training related information is the training charging power. The trained model is, for example, a neural network model.

[0190] Note that a plurality of trained models may be prepared in advance. In this case, the power supply control unit 14A may select and use one trained model from the plurality of trained models prepared in advance.

[0191] For example, the trained model may be a plurality of trained models including a trained model that is associated with the vehicle model of the vehicle 60A or the model number of the battery 69 included in the vehicle 60A and that is trained to output training corrected charging power when the training charge amount and training related information of the vehicle 60A are input. In this case, in the determination process, the power supply control unit 14A can select one trained model from the plurality of trained models that corresponds to the vehicle model or the model number of the battery of the electric vehicle, and perform the determination process using the selected one trained model.

[0192] Vehicle 60A includes, as functional units, an information acquisition unit 66 and a charge control unit 65A, instead of charge amount measurement unit 64 and charge control unit 65 of embodiment 1. Information acquisition unit 66 or charge control unit 65A can be realized by a processor (e.g., a CPU) included in vehicle 60A executing a program using a memory.

[0193] Similar to the charge amount measurement unit 64 in the first embodiment, the information acquisition unit 66 measures the charging power that is being charged by the charging unit 63 when it receives power from the power supply unit 53, and provides the measured charging power to the charging control unit 65A. Furthermore, the information acquisition unit 66 acquires relevant information related to the vehicle 60A, and provides the acquired relevant information to the charging control unit 65A. Furthermore, the information acquisition unit 66 acquires operation information related to the operation of the equipment provided in the vehicle 60A, and provides the acquired operation information to the charging control unit 65A.

[0194] The charging control unit 65A transmits to the server 10A charging information indicating the charging power provided by the information acquisition unit 66. The charging control unit 65A transmits the charging information together with the related information and operation information provided by the information acquisition unit 66 to the server 10A. The charging control unit 65A also controls the power supply to the charging unit 63 by the power supply unit 53 based on the control by the server 10A. The process by which the charging control unit 65A controls the start and end of power supply will be described in detail later.

[0195] The following describes the processing of vehicle 60A. Specifically, the processing will be described in which vehicle 60A receives power supply from power supply equipment 50 to charge, and vehicle 60A transmits charging information to server 10A.

[0196] Fig. 22 is a flow diagram showing processing of vehicle 60A in this embodiment. Fig. 23 is an explanatory diagram showing charging information in this embodiment. Fig. 24 is an explanatory diagram showing operation information in this embodiment.

[0197] The processes of steps S201 to S205 and steps S211 to S213 shown in FIG. 22 are the same as the processes of the same names shown in FIG. 6, and therefore description thereof will be omitted.

[0198] In step S205A, the information acquisition unit 66 acquires information about the vehicle 60A or related information related to the battery 69 included in the vehicle 60A. The related information includes at least the total travel distance of the vehicle 60A, or the remaining battery capacity (in other words, the SoC (State of Charge)) of the battery 69 included in the vehicle 60A, the total charging time, the number of charges, or the charge / discharge efficiency.

[0199] In step S205B, information acquisition unit 66 acquires operation information relating to the operation of the equipment equipped in vehicle 60A.

[0200] In step S206A, similar to step S206 in embodiment 1, the charging control unit 65A generates charging information including the charging power acquired by the information acquisition unit 66 in step S205, and transmits the generated charging information to the server 10A.

[0201] Here, charging control unit 65A includes the related information acquired by information acquisition unit 66 in step S205A in the generated charging information. An example of charging information and related information is shown in FIG. 23. The user ID, charging period, vehicle ID, and charging power shown in FIG. 23 are the same as those included in the charging information shown in FIG. 8. Furthermore, FIG. 23 shows, as related information, the vehicle type and total mileage of vehicle 60A, as well as the total charging time and charge / discharge efficiency of battery 69 provided in vehicle 60A.

[0202] Furthermore, charging control unit 65A generates charging information that includes the operation information acquired by information acquisition unit 66 in step S205B. The operation information may include a user ID that is identification information of the user of vehicle 60A, a period during which the equipment of vehicle 60A was operating (also referred to as an operation period), and power consumption of the equipment during the operation period (see FIG. 24 ).

[0203] After step S206A is completed, the process proceeds to step S204.

[0204] Through the series of processes shown in FIG. 22, vehicle 60A receives power supply from power supply equipment 50 to charge, and also transmits charging information to server 10A.

[0205] The following describes the processing of server 10A. Specifically, when power supply equipment 50 is supplying power and vehicle 60A is charging, the processing further uses operation information and related information to determine whether the amount of power supply and the amount of charge match, and stops power supply or charging.

[0206] 25 to 28 are first to fourth flowcharts showing the processing of the server 10A in this embodiment.

[0207] The processes of steps S301, S303, and S323 to S325 shown in FIG. 25 are the same as the processes of the same names shown in FIG. 9, and therefore description thereof will be omitted.

[0208] In step S302A, the power supply control unit 14A determines whether any of the following events (1) to (3) has occurred, similarly to step S302 (see FIG. 9). Here, the charging information in (2) below differs from step S302 (see FIG. 9) in that related information and operation information are included.

[0209] (1) Receive power supply information. (2) Receive charging information. (3) The time to make a decision arrives.

[0210] In step S311A, the power supply control unit 14A stores the received charging information, which includes related information and operation information, in the holding unit 13A. Specifically, the power supply control unit 14A stores the information included in the received charging information and the related information in a charging log stored in the holding unit 13A. An example of the charging log is shown in FIG. 29. In addition to a user ID, a charging period, a vehicle ID, and charging power, the charging log also includes, as related information, the vehicle type and total mileage of the vehicle 60A, and the total charging time and charge / discharge efficiency of the battery provided in the vehicle 60A, in chronological order. The content of the information included in the charging log is similar to the information included in the charging information and the related information, and therefore a detailed description thereof will be omitted.

[0211] The power supply control unit 14A also stores the received operation information in the equipment operation log stored in the holding unit 13A. An example of the equipment operation log is shown in FIG. 30. The operation log includes a user ID, an operation period, and the power consumption of the equipment in chronological order. The content of the information included in the operation log is similar to the information included in the operation information, so a detailed description will be omitted.

[0212] After step S311A is completed, the process proceeds to step S302A.

[0213] In step S321A, the power supply control unit 14A acquires the power supply information and the charging information stored in the holding unit 13A. The charging information includes related information and operation information.

[0214] In step S322A, the power supply control unit 14A executes a process for determining whether the amount of power supply and the amount of charge during the target period match. The process included in the process for determining whether the amount of power supply and the amount of charge match will be described with reference to FIG.

[0215] The processes in steps S341 to S344 shown in FIG. 26 are the same as the processes with the same names shown in FIG. 11, and therefore the description thereof will be omitted.

[0216] In step S351, the power supply control unit 14A calculates the power consumption of the equipment for the target period. The processing included in step S351 will be described with reference to FIG. 27 . That is, the power supply control unit 14A determines whether or not it is possible to acquire an operation log of the equipment of the vehicle 60A (step S361). If it is determined that it is possible to acquire the operation log of the equipment of the vehicle 60A (Yes in step S361), it calculates the amount of power consumption of the equipment for the target period by referring to the operation log stored in the retention unit 13A (step S362). If it is not possible to acquire the operation log of the equipment of the vehicle 60A (No in step S361), it sets the power consumption of the equipment for the target period to 0.

[0217] The power supply control unit 14A calculates the amount of power consumption of the equipment for the target period by integrating the power consumption of the equipment from the previous coincidence time to the specific time. The amount of power consumption is calculated as the area of ​​the figure between the line indicating power consumption and the time axis in a graph with the vertical axis representing power consumption and the horizontal axis representing time (see FIG. 31 ).

[0218] In step S352 (see FIG. 26), the power supply control unit 14A corrects the charge amount for the target period. The process included in step S352 will be described with reference to FIG.

[0219] In step S371, the power supply control unit 14A calculates a new amount of charge by adding the amount of power consumption of the equipment to the amount of charge for the target period calculated in step S344.

[0220] In step S372, the power supply control unit 14A determines whether or not the vehicle model of the vehicle 60A can be acquired. If it is determined that the vehicle model of the vehicle 60A can be acquired (Yes in step S372), the process proceeds to step S373. If not (No in step S372), the process proceeds to step S381.

[0221] In step S373, the power supply control unit 14A selects a learned model corresponding to the vehicle type of the vehicle 60A as the learned model that outputs the corrected charge amount.

[0222] In step S381, the power supply control unit 14A determines whether or not it is possible to acquire the model number of the battery of the vehicle 60A. If it is determined that it is possible to acquire the model number of the battery of the vehicle 60A (Yes in step S381), the process proceeds to step S382, and if it is not possible to acquire the model number of the battery of the vehicle 60A (No in step S381), the process proceeds to step S391.

[0223] In step S382, the power supply control unit 14A selects a learned model corresponding to the model number of the battery of the vehicle 60A as the learned model that outputs the corrected charge amount.

[0224] In step S391, the power supply control unit 14A selects a general-purpose learned model as the learned model that outputs the corrected charge amount.

[0225] In step S374, the power supply control unit 14A inputs the new charge amount calculated in step S371 and the related information acquired in step S321A into the trained model selected in step S373, S382, or S391.

[0226] In step S375, the power supply control unit 14A acquires, as a corrected charge amount, the charge amount output as a result of inputting the new charge amount and related information into the learned model in step S374.

[0227] Through the series of processes shown in Figure 28, when the power supply equipment 50 is supplying power and the vehicle 60A is charging, the server 10A can further use the operation information and related information to determine the consistency between the amount of power supply and the amount of charging, and can stop the power supply or charging.

[0228] Third Embodiment In this embodiment, an information processing method and an information processing system that contribute to an appropriate power supply to an electric vehicle will be described, which are different from those in the first or second embodiment.

[0229] Fig. 32 is a block diagram showing the functional configuration of an information processing system 2 according to this embodiment. Fig. 33 is a block diagram showing the configuration of a ledger system 70 according to this embodiment.

[0230] 32 , the information processing system 2 includes at least a ledger system 70, a power supply facility 50, and a server 80. The information processing system 2 may further include at least one of a terminal 20, a security management system 30, a terminal 40, and a vehicle 60. Each of the above devices is connected to a network N and is capable of communicating via the network N.

[0231] In other words, in the information processing system 2 of the present embodiment, the server 10 of the information processing system 1 of the first embodiment is replaced with a ledger system 70, and a server 80 is added. The other devices are the same as those of the first embodiment, and therefore detailed description thereof will be omitted.

[0232] The ledger system 70 is an information processing system that contributes to the appropriate supply of power to an electric vehicle (e.g., vehicle 60). When the power supply equipment 50 supplies power to the vehicle 60, the ledger system 70 can perform control to suppress the power supply if it detects an interruption to the appropriate power supply to the vehicle 60 based on the amount of power supplied by the power supply equipment 50 and the amount of charge of the vehicle 60.

[0233] The ledger system 70 stores information using a distributed ledger. The distributed ledger of the ledger system 70 stores power supply information related to power supply by the power supply equipment 50 and charging information related to charging of the vehicle 60.

[0234] Furthermore, the ledger system 70 can execute processing through smart contracts using a distributed ledger. The ledger system 70 can perform the above-mentioned control using processing through smart contracts. The processing of the ledger system 70 will be described in detail later.

[0235] The ledger system 70 includes ledger servers 71, 72, and 73 (also referred to as ledger servers 71, etc.) as a group of servers that hold a distributed ledger (see FIG. 33). The ledger servers 71, etc. are connected via a network N. The ledger servers 71, etc. may be located anywhere physically.

[0236] When at least one of the ledger servers 71, etc. receives transaction data, the transaction data is shared by all of the ledger servers 71, etc. and stored in the distributed ledger. Note that the number of ledger servers included in the server group is not limited to three, and may be two or more than three.

[0237] The ledger server 71 is a computer server that holds and manages the distributed ledger. The ledger server 71 holds the distributed ledger and updates it while synchronizing with other ledger servers (specifically, ledger servers 72 and 73).

[0238] Ledger servers 72 and 73 are each a server similar to ledger server 71 and operate independently of ledger server 71 .

[0239] The server 80 is an information processing device that executes billing processing. The billing processing is processing for billing for the power supply that the power supply facility 50 supplies to the vehicle 60, in other words, processing for billing the user for the transfer of value information as compensation for the power supply that the power supply facility 50 supplies to the vehicle 60.

[0240] FIG. 34 is a block diagram showing the functional configuration of the ledger server 71 in this embodiment.

[0241] 34, the ledger server 71 includes, as functional units, a communication unit 701, a ledger processing unit 702, an execution unit 703, and a storage unit 704. At least some of the functional units included in the ledger server 71 are realized by a processor (e.g., a CPU) included in the ledger server 71 executing a program using a memory.

[0242] The communication unit 701 is a communication interface communicatively connected to the network N. The communication unit 701 may be a communication interface for a wired communication standard (e.g., Ethernet (registered trademark) or the like), or may be a communication interface for a wireless communication standard (e.g., Wi-Fi (registered trademark) or the like, or a mobile communication system (3G, 4G, 5G, or the like)). The communication unit 701 is used when the functional units included in the ledger server 71 communicate with other devices.

[0243] The ledger processing unit 702 performs processing related to the distributed ledger 711 and transaction data. Specifically, when the ledger processing unit 702 receives transaction data, it verifies the digital signature included in the received transaction data and controls storage of successfully verified transaction data in the distributed ledger 711 held by the storage unit 704. When storing transaction data in the distributed ledger 711, the ledger processing unit 702 generates a block including the transaction data to be stored, and can control storage of the generated block in the distributed ledger 711 when consensus is reached with the ledger processing units 702 of the other ledger servers, ledger servers 72 and 73.

[0244] The transaction data received by the ledger processing unit 702 includes at least transaction data including power supply information transmitted by the power supply equipment 50 and transaction data including charging information transmitted by the vehicle 60. The ledger processing unit 702 stores the received transaction data in the distributed ledger 711, thereby storing the power supply information and charging information in the distributed ledger 711.

[0245] The execution unit 703 executes information processing. The execution unit 703 can execute information processing by executing a smart contract using, for example, the distributed ledger 711. The information processing executed by the execution unit 703 will be described in detail later. Note that when the execution unit 703 does not use a smart contract, it executes information processing according to normal program code.

[0246] The storage unit 704 is a storage device that stores information. The storage unit 704 stores the distributed ledger 711. The storage unit 704 is realized by a non-volatile storage device (such as an SSD (Solid State Drive) or an HDD (Hard Disk Drive)) or the like.

[0247] The distributed ledger 711 stores data having a structure in which blocks, each containing one or more transaction data, are linked in a chain. The one or more transaction data stored in the distributed ledger 711 may include transaction data containing the contract code of a smart contract, transaction data containing instructions for executing a smart contract, or transaction data containing other information.

[0248] FIG. 35 is a block diagram showing the functional configuration of a ledger system 70 according to this embodiment.

[0249] 35 , the ledger system 70 includes, as functional units, a communication unit 721, an authentication unit 722, a storage unit 723, a power supply control unit 724, and a billing processing unit 725. At least some of the functional units included in the ledger system 70 can be realized by information processing executed by the execution unit 703.

[0250] The communication unit 721 is a communication interface that is communicatively connected to the network N. Specifically, the communication unit 721 corresponds to the communication unit 701 that is provided in each of the ledger servers 71, etc. The communication unit 721 is used when the functional units provided in the ledger system 70 communicate with other devices.

[0251] The authentication unit 722 is a processing unit that executes authentication processing. The authentication processing executed by the authentication unit 722 is similar to the authentication processing executed by the authentication unit 12 in embodiment 1. The authentication unit 722 can be realized by the execution unit 703 provided in each of the ledger servers 71, etc.

[0252] The holding unit 723 acquires power supply information indicating the power supply that the power supply equipment 50 is supplying to the vehicle 60 and charging information indicating the charging power that the vehicle 60 is charging by receiving power from the power supply equipment 50, and stores and holds the information in the distributed ledger 711. The holding unit 723 can acquire the power supply information from the power supply equipment 50 via the network N. The holding unit 723 can also acquire the charging information from the vehicle 60 via the network N. The processing executed by the holding unit 723 is similar to the processing executed by the holding unit 13 in the first embodiment. The holding unit 723 can be realized by the execution unit 703 and the storage unit 704 that are included in each of the ledger servers 71, etc.

[0253] The power supply control unit 724 controls the power supply from the power supply equipment 50 to the vehicle 60, using the power supply information and charging information acquired and held by the holding unit 723. The control executed by the power supply control unit 724 is similar to the control executed by the power supply control unit 14 of the first embodiment, except that the power supply information and charging information held by the holding unit 723 are the power supply information and charging information stored in the distributed ledger 711.

[0254] The billing processing unit 725 executes processing for billing for value information equivalent to the price for the amount of power supplied from the power supply equipment 50 to the vehicle 60. Specifically, the billing processing unit 725 refers to the distributed ledger 711 and identifies the amount of power supply confirmed to match the amount of power supplied during the target period and the amount of charging. Furthermore, the billing processing unit 725 transmits billing information including the identified amount of power supply as the amount of power supply to be billed to the server 80.

[0255] FIG. 36 is a flow diagram showing the processing of the ledger system 70 in this embodiment.

[0256] In step S701, the ledger system 70 executes authentication processing. The processing in step S701 is the same as the authentication processing executed in step S301 in the first embodiment.

[0257] In step S702, the ledger system 70 executes a determination process to determine whether any of the events (1) to (3) has occurred. The process in step S702 is the same as the determination process executed in step S302 in the first embodiment.

[0258] In step S703, the power supply control unit 724 stores the received power supply information in the distributed ledger 711 serving as the storage unit 723. The power supply information to be stored and accumulated in the distributed ledger 711 is the same as the power supply log (see FIG. 12 ) in embodiment 1. After step S703 is completed, the process proceeds to step S702.

[0259] In step S711, the ledger system 70 stores the received charging information in the distributed ledger 711 serving as the holding unit 723. The charging information to be stored and accumulated in the distributed ledger 711 is similar to the charging log (see FIG. 13 ) in embodiment 1. After step S711 is completed, the process proceeds to step S702.

[0260] In step S721, the power supply control unit 724 reads and acquires the power supply information and charging information stored in the distributed ledger 711 serving as the holding unit 723.

[0261] In steps S722 to S725, the power supply control unit 724 executes a process for determining whether the amount of power supplied and the amount of charge during the target period match, and if the amount of power supplied and the amount of charge do not match, sends a stop command and notification information. Steps S722 to S725 are the same as steps S322 to S325 executed by the server 10 in embodiment 1. When the processes of steps S722 to S725 are executed using a smart contract, the processes are executed with high efficiency, and there is an effect of suppressing tampering of information indicating the results of the processes.

[0262] The processing of steps S721 to S725 may be executed by a smart contract. In this case, the power supply control unit 724 stores transaction data including an instruction to execute the smart contract in the distributed ledger 711 when the determination timing arrives, and executes the processing in accordance with the instruction in response to storing the transaction data in the distributed ledger 711.

[0263] The billing process will be described below.

[0264] FIG. 37 is a sequence diagram showing the processing of the ledger system 70 and the server 80 in this embodiment.

[0265] In step S801A, the authentication unit 722 executes authentication processing. Specifically, the authentication processing executed by the authentication unit 722 is authentication processing for authenticating a user (also referred to as a requesting user) who executes the requesting processing. The authentication processing is, for example, password authentication, and this case will be described as an example, but is not limited to this. For example, user authentication using a challenge-response method can also be used as the authentication processing.

[0266] In step S801B, the server 80 executes authentication processing. The authentication processing executed by the server 80 includes processing for sending an authentication request including information required for authentication (in the case of password authentication, the user name and password of the requesting user) to the ledger system 70 and receiving a response to the sent authentication request.

[0267] In step S802, the server 80 transmits request information requesting the amount of power supply to be billed for each user to the ledger system 70. The ledger system 70 receives the transmitted request information.

[0268] In step S803, in response to receiving the request information in step S802, the billing processing unit 725 refers to the distributed ledger 711 and identifies the amount of power supply that has been confirmed to match the amount of power charged during the target period.

[0269] In step S804, the billing processing unit 725 transmits billing information including the power supply amount identified in step S803 as the power supply amount to be billed to the server 80. The server 80 receives the transmitted billing information.

[0270] In step S805, the server 80 executes a billing process for the user using the billing information received in step S805. The billing process executed by the server 80 includes transmitting billing information requesting the user to transfer value information equivalent to the price of the supplied power. The billing process executed by the server 80 may also include a process of receiving a transfer of value information from the user to the server 80 (or an administrator of the server 80) in response to the billing information.

[0271] The processing of steps S803 and S804 may be executed by a smart contract. In this case, when the request information is received in step S802, the billing processing unit 725 stores transaction data including an instruction to execute the smart contract in the distributed ledger 711, and executes the processing in accordance with the instruction in response to storing the transaction data in the distributed ledger 711.

[0272] (Explanation of the Distributed Ledger System) The ledger system 70 (also called the distributed ledger system) described above will be explained in detail below.

[0273] A distributed ledger system is a system that stores and maintains information using P2P (peer-to-peer) network technology connected to multiple nodes. A node is an information processing device that performs predetermined processing by using a processor (e.g., a CPU) to execute a program using memory.

[0274] In a distributed ledger system, multiple nodes autonomously hold copies of information and keep them synchronized. This allows the system to properly store information while substantially preventing tampering, without using a privileged node (e.g., a centralized server or a server in a client-server model).

[0275] Furthermore, a device attempting to access the distributed ledger only needs to access one of the multiple nodes included in the distributed ledger system; in other words, there is no need to access a small number of devices, such as a centralized server. This avoids the concentration of communication or processing load on the centralized server, which can occur in a centralized system. This has the advantage that nodes do not require particularly high specifications for their resources (CPU, memory, etc.), and that communication lines connecting the nodes do not require particularly large communication capacities. This allows the distributed ledger system to be configured using general (or general-purpose) nodes or communication lines, which can contribute to reducing the required computer or communication resources and the costs required for nodes and communication lines.

[0276] Furthermore, a distributed ledger system can store information with high fault tolerance and can also access information with high fault tolerance. Generally, the multiple nodes included in a distributed ledger system are physically or network-distributedly located. If all of the multiple nodes included in a distributed ledger system stop, the distributed ledger system will stop. However, since it is rare for all of the multiple nodes that are physically or network-distributedly located to stop, the distributed ledger system rarely stops. This can be said to be an advantage over a centralized system, where if a centralized server stops, information cannot be stored or accessed.

[0277] With reference to Figures 38 to 41, we will explain the data structure of a distributed ledger and the execution of smart contracts.

[0278] FIG. 38 is an explanatory diagram showing the data structure of a blockchain, which is an example of a distributed ledger.

[0279] A blockchain is a chain of blocks, which are units of record. Each block contains multiple transaction data and the hash value of the previous block.

[0280] Figure 38 shows blocks B1, B2, and B3 included in the blockchain.

[0281] For example, block B2 contains the hash value of the previous block B1, which is calculated by performing a hash algorithm on the contents of block B1.

[0282] Furthermore, block B3 includes, as the hash value of block B2, a hash value calculated from multiple transaction data included in block B2 and the hash value of block B1.

[0283] In this way, a blockchain is structured so that blocks containing the contents of the previous block as a hash value are connected in a chain, which effectively prevents tampering with the recorded transaction data.

[0284] If past transaction data is changed (in other words, tampered with), the hash value of the block containing that transaction data will be different from the value before the change. In that case, to make the block containing the changed transaction data appear correct, all blocks after that block in the distributed ledger stored on multiple servers would have to be recreated, which is extremely difficult in reality. This feature makes it virtually impossible to tamper with transaction data contained in the blockchain.

[0285] When a node stores transaction data in a blockchain, it generates a block containing the transaction data to be stored and attempts to reach consensus on the generated block by executing processing based on a consensus algorithm with other nodes. Then, when consensus is reached, the node controls the storage of the block in the blockchain. This allows multiple nodes operating in an autonomous and decentralized manner to connect legitimate blocks to the blockchain. As a consensus algorithm, PBFT (Practical Byzantine Fault Tolerance), PoW (Proof of Work), PoS (Proof of Stake), or the like may be used. When Hyperledger Fabric is used as an example of a distributed ledger technology, a consensus algorithm does not need to be executed.

[0286] FIG. 39 is an explanatory diagram showing the data structure of transaction data.

[0287] The transaction data shown in Figure 39 includes a transaction body BP1 and a digital signature BP2 (also simply referred to as a signature). The transaction body BP1 is the data body included in the transaction data. The digital signature BP2 is generated by encrypting the hash value of the transaction body BP1 with the signature key (in other words, the private key) of the creator of the transaction data.

[0288] A node that receives transaction data can verify that the transaction body BP1 is legitimate (in other words, that it has not been tampered with) using the digital signature BP2 included in the transaction data. This makes it virtually impossible to tamper with the data included in the transaction body BP1. Furthermore, by storing successfully verified transaction data in the blockchain, the legitimacy of the transaction data stored in the blockchain can be maintained.

[0289] As described above, transaction data included in the blockchain is stored in a chain using the hash values ​​of the transaction data and the hash values ​​of the blocks. This allows the transaction data included in the blockchain to be stored and maintained substantially without being tampered with. This is an advantage over databases or distributed databases that simply store a collection of data.

[0290] Figure 40 is an explanatory diagram showing transaction data related to the execution of a smart contract. Figure 41 is an explanatory diagram showing processing related to the execution of a smart contract.

[0291] A series of processes related to the execution of a smart contract using a distributed ledger will be described with reference to Figures 40 and 41.

[0292] In step SB1, the node stores transaction data B11, including contract code B12 that describes the processing of the smart contract, in the distributed ledger B10. For example, the node acquires transaction data B11 by receiving the transaction data B11 from an information processing device via communication or by the node itself generating the transaction data B11, and stores the acquired transaction data B11 in the distributed ledger B10. Step SB1 is performed before executing the smart contract.

[0293] In step SB2, the node stores transaction data B15, including instructions B16 for executing the smart contract, in the distributed ledger B10. For example, the node receives transaction data B15 from an information processing device via communication and stores the received transaction data B15 in the distributed ledger B10.

[0294] In step SB3, in response to the transaction data B15 including the instruction B16 being stored in the distributed ledger B10 in step SB2, the node reads the contract code B12 from the distributed ledger B10 and executes processing based on the contract code B12. The results of the processing may be included in the transaction data and stored in the distributed ledger B10.

[0295] Through the above series of processes, when the distributed ledger system receives transaction data B15 including instructions B16 for executing a smart contract, it automatically (i.e., without manual intervention) executes the processing in accordance with the instructions B16, enabling highly efficient (i.e., high speed or short processing time). Achieving highly efficient processing has the effect of reducing power consumption. Furthermore, since no manual intervention is required, it is possible to prevent human tampering with information, fraud, or human error. Furthermore, since the results of the processing thus executed are stored in the blockchain, it is virtually impossible to tamper with the results of the processing.

[0296] In the above-described embodiments, each component may be configured with dedicated hardware, or may be realized by executing a software program suitable for each component. Each component may be realized by a program execution unit such as a CPU or processor reading and executing a software program recorded on a recording medium such as a hard disk or semiconductor memory. Here, the software that realizes the information processing device of the above-described embodiments is the following program.

[0297] That is, this program causes a computer to execute an information processing method used by an information processing device, which acquires power supply information indicating the power supply that is being supplied to an electric vehicle by a power supply facility and charging information indicating the charging power that is being charged by the electric vehicle by receiving power from the power supply facility, executes a determination process to determine whether the difference between the power supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range, and if it is determined that the difference is not within the appropriate range, performs control to stop power supply from the power supply facility to the electric vehicle.

[0298] Although the information processing method according to one or more aspects has been described based on the embodiments, the present invention is not limited to these embodiments. As long as it does not deviate from the spirit of the present invention, various modifications conceivable by those skilled in the art to the present embodiments, or forms constructed by combining components of different embodiments, may also be included within the scope of one or more aspects.

[0299] The present invention can be used in a system for managing the supply of power to or charging of an electric vehicle.

[0300] 1, 1A, 2 Information processing system 10, 10A, 80 Server 11, 51, 61, 701, 721 Communication unit 12, 52, 62, 722 Authentication unit 13, 13A, 723 Storage unit 14, 14A, 55, 724 Power supply control unit 20, 40 Terminal 30 Security management system 31, 41 Display screen 50 Power supply equipment 53 Power supply unit 54 Power supply amount measurement unit 60, 60A Vehicle 63 Charging unit 64 Charging amount measurement unit 65, 65A Charging control unit 66 Information acquisition unit 69 Battery 70 Ledger system 71, 72, 73 Ledger server 301, 302, 303, 401, 402, 403 Image 311, 312, 411, 412 Line 702 Ledger processing unit 703 Execution unit 704 Storage unit 711, B10 Distributed ledger 725 Billing processing unit B1, B2, B3 Block B11, B15 Transaction data B12 Contract code B16 Instruction BP1 Transaction body BP2 Digital signature N Network

Claims

1. An information processing method used by an information processing device, comprising: acquiring power supply information indicating the power supply that a power supply facility supplies to an electric vehicle; and charging information indicating the charging power that the electric vehicle is charging by receiving power from the power supply facility; executing a determination process to determine whether the difference between the power supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range; and, if it is determined that the difference is not within the appropriate range, performing control to stop power supply from the power supply facility to the electric vehicle.

2. The information processing method according to claim 1, wherein when acquiring the power supply information, one or more pieces of power supply information indicating the power supply power for each first time interval are acquired sequentially, and when acquiring the charging information, one or more pieces of charging information including the charging power for each second time interval are acquired sequentially, and executing the determination process includes repeatedly executing the determination process, and in the determination process, the earlier of the latest time included in one or more first time intervals at which the power supply power indicated in the one or more pieces of power supply information was supplied and the latest time included in one or more second time intervals at which charging was performed with the charging power indicated in the one or more pieces of charging information is identified as the specific time, and when it is determined in the previous determination process that the difference is within the appropriate range, the determination process is executed using the power supply power and the charging power for the period from the specific time identified in the previous determination process to the specific time identified in the current determination process.

3. The information processing method according to claim 1 or 2, further comprising: acquiring an operation log of equipment possessed by the electric vehicle; and, in the determination process, calculating the power consumption, which is the power consumed by the equipment, using the acquired operation log; and executing the determination process using the power obtained by adding the calculated power consumption to the acquired charging power as new charging power.

4. The information processing method according to claim 1 or 2, further comprising: acquiring related information relating to the electric vehicle; and executing the determination process using, as new charging power, a corrected charging power output by inputting the charging power and the related information into a trained model; and the trained model is a model trained to, when training charging power and training related information are input, output, as training corrected charging power, received power, which is power received by the training electric vehicle from the power supply equipment when the charging power of a battery provided in the training electric vehicle related to the training related information is the training charging power.

5. The information processing method according to claim 4, wherein the related information includes at least the total distance traveled by the electric vehicle, or the remaining battery charge, total charging time, number of charges, or charge / discharge efficiency of the battery provided in the electric vehicle.

6. The information processing method according to claim 4, wherein the trained models are a plurality of trained models including a trained model that is associated with the vehicle type or battery model number of the electric vehicle and is trained to output the training corrected charging power when the training charge amount and training related information of the electric vehicle are input, and wherein the determination process selects one trained model from the plurality of trained models that corresponds to the vehicle type or battery model number of the electric vehicle, and executes the determination process using the selected one trained model.

7. An information processing method according to claim 1 or 2, wherein, when the power supply information and the charging information are acquired, the acquired power supply information and the charging information are stored in a distributed ledger, and in the determination process, the power supply information and the charging information are read from the distributed ledger, and the determination process is executed using the read power supply information and the charging information.

8. The information processing method according to claim 7, further comprising: reading the power supply information from the distributed ledger; and executing a billing process for the price of the power supply indicated in the read power supply information.

9. An information processing method according to claim 1 or 2, further comprising the step of: transmitting notification information to the terminal indicating that the difference is not within the appropriate range, thereby causing the terminal to present the notification information.

10. An information processing method as described in claim 1 or 2, wherein the control further comprises sending notification information to a security management system indicating that the difference is not within the appropriate range, thereby causing the security management system to present the notification information.

11. An information processing device comprising: a holding unit that acquires power supply information indicating the power supply that is being supplied to an electric vehicle by a power supply facility and charging information indicating the charging power that is being charged by the electric vehicle by receiving power from the power supply facility; and a power supply control unit that executes a determination process that determines whether the difference between the power supply power indicated in the power supply information and the charging power indicated in the charging information is within an appropriate range, and that controls the power supply from the power supply facility to the electric vehicle to be stopped when it is determined that the difference is not within the appropriate range.

12. A program that causes a computer to execute the information processing method according to claim 1.

Images