Information processing method, information processing apparatus, and information processing program

Abstract

An information processing method according to one aspect of the present disclosure is an information processing method executed by a computer of an information processing apparatus that draws up an update plan of distributed energy resources (DER) or a device constituting the DER. The computer manages device update information related to the time required for updating the device, holds prediction information on operation of the device and cost information related to the cost required at the time of operation, and determines the update start time of one or more devices that need to be updated on the basis of the device update information and the cost information.

Description

Information processing method, information processing device, and information processing program

[0001] The present disclosure relates to an information processing method, an information processing device, and an information processing program.

[0002] Power grids are vulnerable to security risks such as cyberattacks, and regular security updates are required to address these risks. However, these updates can cause grid congestion and supply shortages in specific areas due to the associated downtime.

[0003] Patent No. 6507895

[0004] Distributed energy resources (DER) often include power generation equipment and power storage equipment, and downtime of these devices often directly leads to energy loss. Therefore, it is desirable to perform update processes that cause downtime, such as security patches, in a way that minimizes energy loss as much as possible.

[0005] For example, Patent Document 1 proposes a method of using an alternative device when updating a device, but if each device is an expensive piece of equipment, this solution is costly and not realistic.

[0006] The present disclosure provides an information processing method, an information processing device, and an information processing program that can perform update processing without significantly deteriorating the cost reduction effect and grid maintenance capability of DER.

[0007] An information processing method according to one aspect of the present disclosure is an information processing method executed by a computer of an information processing device that formulates an update plan for Distributed Energy Resources (DER) or devices that constitute the DER, in which the computer manages device update information related to the time required for updating the devices, retains device operation prediction information and cost information related to the costs required for operation, and determines the update start time for one or more devices that require updating based on the device update information and the cost information.

[0008] According to the present disclosure, the update process can be performed without significantly deteriorating the cost reduction effect and grid maintenance capability of DER.

[0009] FIG. 1 is an overall configuration diagram showing a system configuration in which a DER device update system according to an embodiment is used. FIG. 2 is a block diagram showing a system configuration in which a DER device update system according to an embodiment is used. FIG. 3 is a graph showing the transition of the amount of power generated, consumed, and stored by devices in customer equipment according to an embodiment. FIG. 4 is a graph showing the power cost per unit time of devices in customer equipment according to an embodiment. FIG. 5 is a graph showing fluctuations in cost and risk according to the update start time of a specific device in customer equipment according to an embodiment. FIG. 6 is a graph showing changes in the probability of being attacked versus the elapsed time from the start time of update patch distribution according to an embodiment. FIG. 7 is a diagram showing a device update schedule created by an update planning unit according to an embodiment. FIG. 8 is a diagram showing an optimization problem that the update planning unit according to an embodiment needs to solve when creating a device update schedule. FIG. 9 is a diagram showing a table of estimated and actual values ​​of downtime during device update stored in a DER device update information storage unit according to an embodiment. FIG. 10 is a flowchart showing the overall operation of a DER device update system according to an embodiment. Fig. 11 is a flowchart for extracting and estimating information required for formulating a device update plan after obtaining device update information in a DER device update system according to an embodiment. Fig. 12 is a flowchart for formulating and selecting a device update plan in a DER device update system according to an embodiment. Fig. 13 is a flowchart for starting a device update plan in a DER device update system according to an embodiment and modifying the plan as necessary. Fig. 14 is a block diagram showing an example of the hardware configuration of a DER device update system and customer equipment according to an embodiment.

[0010] (Background to the Achievement of One Aspect of the Present Disclosure) While DER (Distributed Energy Resources) is a very effective means for addressing energy issues, it may cause grid congestion or may be subject to control that causes frequency abnormalities in the event of a cyberattack. While there are concerns about the damage to the power grid caused by cyberattacks, performing security updates to prevent cyberattacks in advance inevitably results in downtime during the updates, which may lead to increased operating costs for DER and an increased risk of grid congestion.

[0011] The inventors therefore conducted extensive research to solve this problem, and discovered that because devices within a DER and other DER devices can function complementarily, the costs and risks associated with downtime can be minimized by systematically updating devices within a DER or between multiple DERs.

[0012] Therefore, this disclosure provides specific procedures for solving these problems.

[0013] An update system according to one aspect of the present disclosure is an update system that formulates an update plan for updating DERs (Distributed Energy Resources) or devices that constitute the DERs, and includes: a DER device update information storage unit that manages device update information related to the time required for updating the devices; an operation information storage unit that holds device operation prediction information and cost information related to the costs required for operation; and an update plan formulation unit that determines the update start time for one or more devices that require updating, based on the device update information stored in the DER device update information storage unit and the cost information stored in the operation information storage unit.

[0014] According to the above-described update system, when it becomes necessary to update the DER or the devices that make up the DER, it is possible to update the entire device while minimizing the impact of device downtime and minimizing the risk of system congestion or supply shortages.

[0015] Specific examples of a DER or a system and method for updating a device constituting a DER according to one aspect of the present disclosure will be described below with reference to the drawings. Each of the embodiments shown here represents a specific example of the present disclosure. Therefore, the numerical values, shapes, components, component arrangements and connection configurations, steps (processes), and step order shown in the following embodiments are merely examples and do not limit the present disclosure. Among the components in the following embodiments, components not recited in independent claims are optional components that can be added. Furthermore, each figure is a schematic diagram and is not necessarily an exact representation.

[0016] (Embodiment) Hereinafter, a description will be given of a DER or a device update system and method constituting the DER according to an embodiment. The DER or the device update system and method constituting the DER adjusts the update start time when a device needs to be updated.

[0017] 1 is an overall configuration diagram showing a system configuration in which a DER device update system 100 according to this embodiment is used. Each component in FIG. 1 will be described. The customer facility 200 includes a storage battery (BESS) 203, a photovoltaic (PV) power generation device 204, a hydrogen fuel cell (FC) 205, an electric vehicle (EVSE) charging equipment (EVSE) 206 connected to a vehicle (Vehicle) 500, a point of connection (PCC) 202 that is a connection point with a power grid (Grid) 400, a gateway device (GW) 201 that relays communication between each facility and with the DER device update system 100, and a load (Load) 207 that consumes power within the DER.

[0018] 2 is a block diagram showing a system configuration in which a DER device update system 100 according to this embodiment is used. The DER device update system 100 is an example of an information processing device. As shown in FIG. 2, the DER device update system 100 includes an update information acquisition unit 101, an update plan formulation unit 102, an update information transmission / reception unit 103, an update time recording / estimation unit 104, an intra-DER device update information accumulation unit 110, and a DER operation information accumulation unit 120. Each DER device, such as a storage battery 203, a solar power generation device 204, a hydrogen fuel cell 205, or an EV charging device 206, includes an update command reception unit 211 and an update information notification unit 212, regardless of the device type.

[0019] The update information acquisition unit 101 acquires device update information from the Internet 300, and if update information exists for the DER or a device that constitutes the DER, it acquires information such as the model number of the device to be updated and the ID of the security patch (see FIG. 9 ). The update plan creation unit 102 determines the update start time for one or more devices that require updating based on the device update information and cost information. Specifically, the update plan creation unit 102 creates an appropriate device update plan based on information from the DER device update information storage unit 110 and the DER operation information storage unit 120, and issues update commands to each device via the update information transmission / reception unit 103 in accordance with the created plan.

[0020] Furthermore, when an update plan is executed, the update plan formulation unit 102 has the devices that have completed the update transmit actual update information through the update information notification unit 212, acquires information on the difference from the estimated required update time, determines whether the device update plan needs to be revised, and if necessary, formulates a new plan and carries out the update in accordance with the plan. Note that the functions configured by the DER device update system 100 and the DER devices are not limited to these.

[0021] 3 is a graph showing the transition of the amount of power generated, consumed, and stored by devices in customer facility 200 according to the embodiment. In the BESS graph, a positive value indicates discharging, and a negative value indicates storing.

[0022] As shown in Figure 3, if the load consumed within the DER is concentrated during the daytime, the total cost can be reduced by storing electricity in the BESS in advance during the daytime or at night when commercial electricity can be procured cheaply, and discharging it during the daytime when power consumption peaks, or by using FC during times when the BESS and PV cannot cover the demand.

[0023] FIG. 4 is a graph showing the power cost per unit time of devices in customer facility 200 according to the embodiment.

[0024] 4, the cost of commercial electricity is higher during the day and lower at night, but the cost of hydrogen fuel cells 205 remains constant regardless of the time of day. This is because demand for commercial electricity is higher during the day and the cost of hydrogen fuel cells 205 depends on the costs of generating and transporting hydrogen, so there are few factors that cause fluctuations depending on the time of day.

[0025] 5 is a graph showing the fluctuations in cost and risk depending on the update start time of a specific device in the customer facility 200 according to an embodiment. For example, as shown in FIG. 3, PV has high power generation capacity during the day and almost zero power generation capacity at night. Therefore, if a PV security update is performed during the day, the PV's power generation capacity will be lost during the downtime during the update, and as a result, the power generation capacity will have to be compensated for with expensive commercial electricity, which will result in significant additional costs. Furthermore, in this case, it will be necessary to purchase a large amount of commercial electricity, which will result in a shortage of supply capacity and an increased risk of frequency drop.

[0026] 6 is a graph showing the change in attack probability over time from the start of patch distribution in an embodiment. Since it is difficult to precisely quantify the attack probability, it is necessary to estimate the change in probability in advance using some method.

[0027] The attack probability in Figure 6 can be used, for example, in cases where a successful attack would always result in the attacker reducing the device's power generation or storage capacity to zero. In this case, the additional cost of an attack occurring during a period when no patches have been applied would be added, and a solution to the optimization problem that includes this factor would exert pressure to expedite the update plan. There are various ways to reflect this in an actual optimization problem, but the simplest approach would be to set the additional cost of an attack at a constant value (for example, 10 million yen).

[0028] 7 is a diagram showing a device update schedule created by the update plan creation unit 102 according to the embodiment. When multiple devices need to be updated, a plan is set to minimize the increase in costs and risks associated with the updates, and the updates are performed according to the plan.

[0029] 8 is a diagram showing an optimization problem that needs to be solved when the update planning unit 102 according to the embodiment creates a device update schedule. The DER device update information accumulation unit 110 manages device update information related to the time required for device updates. The DER operation information accumulation unit 120 holds device operation prediction information and cost information related to the costs required for operation. The DER operation information accumulation unit 120 also holds predicted transition information related to predicted transitions in one or more of DER power generation, consumption, and storage.

[0030] In this example, the problem that needs to be solved is shown to minimize the expected additional cost compared to not updating while minimizing the risk of grid congestion and supply shortages, using the estimated time required for updating recorded in the DER device update information storage unit 110, the estimated trends in daily power consumption and PV power generation recorded in the DER operation information storage unit 120, and the estimated cost per unit of commercial power.

[0031] For example, Figure 8 shows the following assumptions: "The expected time required for each step required for updating follows the estimated values ​​stored in the device update information storage unit in the DER. The predicted power consumption and PV power generation for a specified period follow the data stored in the DER operation information storage unit." It also shows the following conditions to be met: "Key updating for all devices subject to key updating in DER1 and DER2 is completed by YYYY / MM / DD. The grid congestion risk parameter value p1 must be maintained below 0.00001. The supply shortage risk parameter value p2 must be maintained below 0.00001. Scheduling of devices at times when updating is not possible is avoided." Furthermore, the parameter to be minimized is "expected additional cost."

[0032] Here, the additional cost refers to the additional cost incurred compared to not updating the device. In the above, the grid congestion risk parameter value and the supply shortage risk parameter value are included in the constraints (requirements to be satisfied), but this is not limiting. For example, the economic loss in the event of grid congestion or supply shortage risk, or the economic loss in the event of a cyberattack, may be included in an objective function (parameters to be minimized). In this case, for example, as shown in FIG. 6 , the probability of being attacked increases with the time elapsed since the patch was distributed, and the expected economic loss due to a cyberattack increases as time passes, so it is expected that a schedule will be developed to complete the update early.

[0033] This problem can be solved using a linear programming solver or by providing the same conditions and objective function to a prompt and outputting the language model as a script.

[0034] The language model may be a large-scale language model, a generative language model (e.g., a Generative Pretrained Transformer (GPT)), a representational language model (e.g., a Bidirectional Encoder Representations from Transformers (BERT)), and / or any other type of language model. When using a known language model, additional discriminatory expertise may be learned from training data.

[0035] 9 is a diagram showing a table of estimated and actual values ​​of downtime during device updates stored in the DER device update information storage unit 110 according to an embodiment. The device update information includes ID information according to the device update content, and either the required update time or downtime. The device update information also includes ID information according to the device update content, CPU usage rate, and memory usage rate. The update time recording and estimation unit 104 uses the device update information to estimate the required time or device downtime.

[0036] The downtime estimate can be estimated, for example, by linear regression using the model number, patch ID, CPU usage rate, and memory usage rate. The column for actual downtime records the actual amount of downtime that occurred for devices for which updates have actually been completed. If multiple patches need to be applied, the total downtime can be simply calculated by adding up the downtime estimates for the multiple patches.

[0037] FIG. 10 is a flowchart showing the overall operation of the DER device update system 100 according to the embodiment.

[0038] 10 , first, the update information acquisition unit 101 acquires information about the device in the DER to be updated (step S1100). Next, the update information acquisition unit 101 formulates a device update plan based on the update information acquired in the DER device update information accumulation unit 110 in step S1100 and the information recorded in the DER operation information accumulation unit 120 (step S1200). Finally, the update information acquisition unit 101 carries out the actual update procedure based on the formulated plan, and modifies and re-executes the plan as necessary (step S1300).

[0039] FIG. 11 is a flowchart showing the process of extracting and estimating information required for creating a device update plan after obtaining device update information in the DER device update system 100 according to the embodiment.

[0040] 11 , in device update information acquisition step S1100, the update planning unit 102 acquires update information for devices in the DER that are to be updated (step S1101). The update planning unit 102 also estimates the amount of downtime required for the update-target devices by linear regression or other methods based on past cases and examples (step S1102). The update planning unit 102 then determines the attack probability and its impact corresponding to the downtime for each device from given parameters or other factors (step S1103).

[0041] FIG. 12 is a flowchart showing how a device update plan is created and selected in the DER device update system 100 according to the embodiment.

[0042] 12 , in device update plan formulation step S1200, the update plan formulation unit 102 first acquires information on estimated downtime of the device to be updated, impact information due to cyberattacks, and information on DER operation forecasts stored in the DER operation information accumulation unit 120 (step S1201). The update plan formulation unit 102 then formulates an optimization problem that minimizes the increase in cost when updating a device compared to when the update is not performed. For example, the update plan formulation unit 102 incorporates, into the optimization problem, an estimate of damage cost for the device based on the elapsed time since the start time of update patch distribution, the time of vulnerability disclosure, or the time of verification code publication, thereby accelerating the update plan compared to when the damage cost estimate is not incorporated.

[0043] The update planning unit 102 formulates an optimization problem, including premise information, requirements to be satisfied, parameters to be minimized, and the like, as shown in FIG. 8 , and then solves the optimization problem using a linear programming solver or the like (step S1202). While a unique solution to the optimization problem may be determined, multiple candidate solutions close to the optimal solution may emerge. Because there may be conditions not reflected in the formulation of the optimization problem, and a non-optimal solution may be a more preferable solution, the update information transmitting / receiving unit 103 presents multiple candidate solutions (step S1203). The update planning unit 102 then selects one update plan from the multiple candidate solutions selected by the user and starts executing the update plan (step S1204). Note that a system with a user interface is assumed.

[0044] FIG. 13 is a flowchart showing how to start a device update plan in the DER device update system 100 according to an embodiment and modify the plan as necessary.

[0045] 13 , in device update / plan correction step S1300, first, the update planning unit 102 performs update processing according to the plan determined in step S1200 (step S1301). After that, the update planning unit 102 determines the need for plan correction based on the actual downtime value of the device when the update is actually completed during the update processing, the difference between the predicted value of the DER operating status and the current status, and the like (S1302).

[0046] Here, possible methods include a method in which the plan correction is always performed periodically, or a method in which the plan correction is performed when the integrated value of the difference between the initially assumed operating status and the current status exceeds a given threshold. Next, if the update planning unit 102 determines that the plan needs to be corrected (step S1303), it again performs the device update plan formulation in step S1200 and restarts the device update / plan correction step S1300 based on the plan. If it determines that the plan does not need to be corrected, the update is performed as is, and the device update is completed.

[0047] (Hardware Configuration) FIG. 14 is a block diagram showing an example of the hardware configuration of the DER device update system 100 and the customer facility 200 according to the embodiment.

[0048] The DER device update system 100, the storage battery 203, the solar power generation device 204, the hydrogen fuel cell 205 and the EV charging device 206 of the customer facility 200 in the above embodiment have a hardware configuration using a conventional computer, in which the CPU 10, the ROM 12, the RAM 14 and the I / F unit 16 are interconnected by a bus 18.

[0049] The CPU 10 is a computing device that controls the DER device update system 100, the storage battery 203, the solar power generation device 204, the hydrogen fuel cell 205, and the EV charging device 206 of the above embodiment. The ROM 12 stores programs and the like that realize information processing by the CPU 10. The RAM 14 stores data necessary for various processes by the CPU 10. The I / F unit 16 is an interface that is connected to the storage unit, input unit, display unit, sensor, communication unit, etc., and is used to send and receive data.

[0050] In the DER device update system 100, storage battery 203, solar power generation device 204, hydrogen fuel cell 205 and EV charging device 206 of the above embodiment, the CPU 10 reads a program from ROM 12 onto RAM 14 and executes it, thereby realizing each of the above functional units on the computer.

[0051] The programs for executing the above-described processes executed by the DER device update system 100, the storage battery 203, the solar power generation device 204, the hydrogen fuel cell 205, and the EV charging device 206 according to the above-described embodiment may be stored in an HDD (hard disk drive). Also, the programs for executing the above-described processes executed by the DER device update system 100, the storage battery 203, the solar power generation device 204, the hydrogen fuel cell 205, and the EV charging device 206 according to the above-described embodiment may be provided by being pre-installed in the ROM 12.

[0052] In addition, the programs for executing the above processes executed by the DER device update system 100, storage battery 203, solar power generation device 204, hydrogen fuel cell 205, and EV charging device 206 of the above embodiment may be stored in an installable or executable file format on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD (Digital Versatile Disk), or flexible disk (FD) and provided as a computer program product.

[0053] Furthermore, the programs for executing the information processing executed by the DER device update system 100, storage battery 203, solar power generation device 204, hydrogen fuel cell 205, and EV charging device 206 according to the above-described embodiments may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Furthermore, the programs for executing the information processing executed by the DER device update system 100, storage battery 203, solar power generation device 204, hydrogen fuel cell 205, and EV charging device 206 according to the above-described embodiments may be provided or distributed via a network such as the Internet.

[0054] (Supplementary Note) As described above, the embodiments have been described as examples of the technology disclosed in this application. However, the technology according to the present disclosure is not limited to these, and can be applied to embodiments in which modifications, substitutions, additions, omissions, etc. are made as appropriate.

[0055] Examples of modified examples of the present disclosure are listed below.

[0056] (1) In the embodiment, each device does not necessarily have to include the update command receiving unit 211 and the update information notifying unit 212. In other words, device updates and notification of update information do not necessarily have to be performed directly between the device and the DER device update system 100.

[0057] (2) In the embodiment, in step S1203, candidate device update plans are presented, and execution begins when one is selected. However, it is also possible to automatically select and execute one plan without necessarily presenting the plans.

[0058] (3) In the embodiment, the determination by the update planning unit 102 in step S1302 of the need to revise the device update plan may be made each time the update process for each device is completed, or may be made every hour. The plan revision is determined based on, for example, the following factors. First, it may be the case that the downtime during the update of a specific device is longer than expected, making it difficult to carry out the update according to the original update plan. Second, it may be the case that, as a result of resolving the optimization problem in FIG. 8 , it is possible to achieve an update at a cost that is T% lower than the original plan (T is a constant).

[0059] (4) The implementation plan is written assuming only the case where the device is updated, but it is also possible to incorporate the assumption that a rollback will be performed if updating the device interferes with the normal operation of the system.

[0060] (5) In the embodiments, each component of the security monitoring device may be individually integrated into a single chip using a semiconductor device such as an IC (Integrated Circuit) or an LSI (Large Scale Integration), or may be integrated into a single chip to include some or all of the components. Furthermore, the integrated circuit method is not limited to LSI, and may be realized using a dedicated circuit or a general-purpose processor. It is also possible to use a field programmable gate array (FPGA), which can be programmed after LSI manufacturing, or a reconfigurable processor, which allows the connections and settings of circuit cells within the LSI to be reconfigured. Furthermore, if an integrated circuit technology that can replace LSI emerges due to advances in semiconductor technology or a derivative technology, that technology may be used to integrate functional blocks. Biotechnology, etc., is also a possibility.

[0061] According to at least one of the embodiments described above, the update process can be performed without significantly deteriorating the cost reduction effect and grid maintenance capability of the DER.

[0062] The present disclosure is applicable to systems for updating devices in distributed energy resources.

[0063] [Supplementary Note] Various aspects of the present disclosure will be summarized below as supplementary notes.

[0064] [Supplementary Note 1] An information processing method executed by a computer of an information processing device that formulates an update plan for DER (Distributed Energy Resources) or a plan for updating devices that constitute DER, wherein the computer manages device update information related to the time required for updating the devices, retains operation prediction information for the devices and cost information related to the costs required for operation, and determines an update start time for one or more devices that require updating based on the device update information and the cost information. [Supplementary Note 2] The information processing method according to Supplementary Note 1, wherein the device update information includes ID information according to the update content of the device, and either the time required for the update or downtime. [Supplementary Note 3] The information processing method according to Supplementary Note 1, wherein the device update information includes ID information according to the update content of the device, a CPU usage rate, and a memory usage rate, and the computer uses the device update information to estimate the time required or the downtime of the device. [Supplementary Note 4] The information processing method according to Supplementary Note 1, wherein the computer holds predicted trend information regarding predicted trends in one or more of power generation, consumption, and storage of the DER. [Supplementary Note 5] The information processing method according to Supplementary Note 1, wherein the computer formulates an optimization problem that minimizes a cost increase related to a cost increase when updating the device compared to when the update is not performed. [Supplementary Note 6] The information processing method according to Supplementary Note 5, wherein the computer incorporates into the optimization problem an estimate of damage cost according to the time elapsed since the start time of update patch distribution, the time of vulnerability disclosure, or the time of vulnerability verification code disclosure for the device, thereby accelerating the update plan compared to when the damage cost estimate is not incorporated.[Supplementary Note 7] An information processing device that formulates an update plan for a DER or devices that constitute a DER, the information processing device managing device update information related to the time required for updating the devices, retaining operation prediction information for the devices and cost information related to the costs required for operation, and determining an update start time for one or more devices that require updating based on the device update information and the cost information. [Supplementary Note 8] An information processing program that causes a computer to execute the steps of managing device update information related to the time required for updating the DER or devices that constitute a DER, retaining operation prediction information for the devices and cost information related to the costs required for operation, and determining an update start time for one or more devices that require updating based on the device update information and the cost information.

[0065] REFERENCE SIGNS LIST 100 DER device update system 101 Update information acquisition unit 102 Update plan formulation unit 103 Update information transmission / reception unit 104 Update time recording / estimation unit 200 Customer equipment 201 Gateway device 202 Grid connection point 203 Storage battery 204 Photovoltaic power generation device 205 Hydrogen fuel cell 206 EV charging device 207 Load 211 Update command reception unit 212 Update information notification unit 300 Internet 400 Power system 500 Vehicle

Claims

1. An information processing method executed by a computer of an information processing device that formulates an update plan for DER (Distributed Energy Resources) or devices that constitute DER, wherein the computer: manages device update information relating to the time required to update the devices; retains operation prediction information for the devices and cost information relating to the costs required for operation; and determines the update start time for one or more devices that require updating based on the device update information and the cost information.

2. The information processing method according to claim 1, wherein the device update information includes ID information according to the update content of the device, and either the time required for the update or downtime.

3. The information processing method according to claim 1, wherein the device update information includes ID information according to the update content of the device, CPU usage rate, and memory usage rate, and the computer uses the device update information to estimate the required time or downtime of the device.

4. The information processing method according to claim 1, wherein the computer holds forecast transition information regarding forecast transitions of one or more of power generation, consumption, and storage of the DER.

5. The information processing method according to claim 1, wherein the computer formulates an optimization problem that minimizes the increase in cost when updating the device compared to when the update is not performed.

6. The information processing method according to claim 5, wherein the computer incorporates in the optimization problem an estimate of damage costs according to the time elapsed since the start of distribution of update patches, the time of vulnerability disclosure, or the time of vulnerability verification code disclosure for the device, thereby accelerating the update plan compared to when the estimate of damage costs is not incorporated.

7. An information processing device that formulates an update plan for a DER or devices that constitute a DER, the information processing device managing device update information relating to the time required to update the devices, retaining operation prediction information for the devices and cost information relating to the costs required for operation, and determining the update start time for one or more devices that require updating based on the device update information and the cost information.

8. An information processing program for causing a computer to execute the following: managing device update information relating to the time required to update a DER or a device constituting a DER; retaining operation forecast information for said devices and cost information relating to the costs required for operation; and determining the start time of updating one or more devices that require updating based on said device update information and said cost information.

Images