Information processing method, information processing device, and information processing program

Abstract

An information processing method according to the present disclosure is implemented in an information processing device that transmits log information indicating a log related to communication performed between a first power facility configured to be capable of performing at least one of power supply and power reception between a charging / discharging device connected to the first power facility and a second power facility that controls the first power facility, and the information processing method includes controlling the setting of a transmission priority indicating a type of a transmission destination to which the log information is to be transmitted on the basis of information on a degree of power tightness indicating a degree of tightness of power demand.

Description

Information processing method, information processing device, and information processing program

[0001] The present disclosure relates to an information processing method, an information processing device, and an information processing program.

[0002] In the case of power plants, electric vehicle charging stations, and other electric power facilities, if they are subjected to a cyberattack, there is a risk that excessive loads may occur, causing damage or fraud. For this reason, as countermeasures against cyberattacks targeting power facilities, the installation of intrusion detection systems (IDS) that detect cyberattacks and the introduction of security monitoring systems are being considered, or are being considered.

[0003] For example, Patent Document 1 discloses a technology in which an on-board device detects abnormalities in logs to be sent outside the vehicle in which the on-board device is installed, and determines the priority for sending the logs based on the detection results.

[0004] JP 2022-24266 A JP 2022-17118 A

[0005] For example, if a cyberattack occurs against power facilities during a power shortage situation where power demand is high and power supply is tight, the damage could be exacerbated. Furthermore, for example, a cyberattack against power facilities could place a load on the network, slowing communication speeds. Therefore, in order to deal with such a cyberattack, a security monitoring system needs to analyze detailed logs more quickly than the logs of the target being attacked. Therefore, logs of power facilities in a power shortage situation need to be received more quickly to ensure the security of the power facilities, and there is room for improvement.

[0006] One of the problems that the present disclosure aims to solve is to appropriately deal with abnormalities in power facilities even in a power shortage situation.

[0007] The information processing method of the present disclosure is an information processing method executed in an information processing device that transmits log information indicating a log related to communication between a first power equipment configured to be able to perform at least one of power supply and power reception between a connected charging / discharging device and a second power equipment that controls the first power equipment, and includes determining a transmission priority indicating the priority of transmitting the log information based on information related to a power pressure level indicating the degree of pressure in power demand.

[0008] According to the present disclosure, abnormalities in power facilities can be dealt with appropriately even in a power shortage situation.

[0009] FIG. 1 is a block diagram showing an example of the configuration of a charging system according to the first embodiment. FIG. 2 is a block diagram showing an example of the functional configuration of a charging device according to the first embodiment. FIG. 3 is a block diagram showing an example of the functional configuration of a charging station management server according to the first embodiment. FIG. 4 is a table showing an example of charging history information according to the first embodiment. FIG. 5 is a table showing an example of charging equipment management information according to the first embodiment. FIG. 6 is a block diagram showing an example of the functional configuration of a switching hub according to the first embodiment. FIG. 7 is a block diagram showing an example of the functional configuration of a log transmission device according to the first embodiment. FIG. 8 is a block diagram showing an example of the functional configuration of a security monitoring server according to the first embodiment. FIG. 9 is a table showing an example of security event information according to the first embodiment. FIG. 10 is a schematic diagram for explaining the log transmission control process of the log transmission device according to the first embodiment. FIG. 11 is a schematic diagram for explaining the log transmission control process of the log transmission device according to the first embodiment. FIG. 12 is a schematic diagram for explaining the log transmission control process of the log transmission device according to the first embodiment. FIG. 13 is a table showing an example of threat information according to the first embodiment. FIG. 14 is a flowchart showing an example of the flow of processing executed by the log transmission device according to the first embodiment. Fig. 15 is a flowchart showing an example of the flow of processing executed by the log transmission device according to the first embodiment. Fig. 16 is a sequence diagram showing an example of the flow of processing executed by the charging system according to the first embodiment. Fig. 17 is a flowchart showing an example of the flow of processing executed by the log transmission device according to a fourth modified example. Fig. 18 is a block diagram showing an example of the configuration of the charging system according to the second embodiment. Fig. 19 is a block diagram showing an example of the hardware configuration of the charging system according to the embodiment.

[0010] Hereinafter, with reference to the drawings, embodiments of an information processing method, an information processing device (log transmission device), and an information processing program according to the present disclosure will be described.

[0011] In the description of the present disclosure, components having the same or substantially the same functions as those described above with respect to the previously-mentioned drawings may be given the same reference numerals, and descriptions thereof may be omitted as appropriate. Furthermore, even when the same or substantially the same parts are shown, the dimensions and proportions may be different depending on the drawing. Furthermore, for example, in order to ensure the visibility of the drawings, reference numerals may be given to only the main components in the description of each drawing, and reference numerals may not be given to components having the same or substantially the same functions as those described above with respect to the previously-mentioned drawings.

[0012] In the description of the present disclosure, components having the same or substantially the same functions may be distinguished by adding an alphanumeric character to the end of the reference symbol. Alternatively, when multiple components having the same or substantially the same functions are not distinguished, they may be collectively described by omitting the alphanumeric character at the end of the reference symbol.

[0013] The description of this disclosure exemplifies a charging system that provides charging services and electricity sales services to mobile objects such as electric vehicles that are configured to be powered using power from an onboard battery, using power equipment installed in a charging station (electric power infrastructure).

[0014] Here, the charging service is, for example, a service of supplying power from a charging station to a mobile body to charge a battery mounted on the mobile body, such as selling power to a user of the mobile body. Also, the power selling service is, for example, a service of purchasing power from a user of the mobile body, discharging the battery mounted on the mobile body, using the power from the mobile body to charge a battery at a charging station, or supplying power from the mobile body to an upstream power grid (system).

[0015] Here, the mobile object is an example of a charging / discharging device that is equipped with a battery (storage battery) and is configured to charge the battery using power supplied from an external source and discharge the power from the battery to an external source. Any battery, such as a lithium-ion battery, a nickel-metal hydride battery, or an all-solid-state battery, can be used as the battery for this charging / discharging device. The mobile object may be any type of electric vehicle, such as an electric vehicle (EV) driven by a motor as a power source, or a hybrid vehicle driven by both an internal combustion engine and a motor as a power source.

[0016] Furthermore, the mobile body may be, for example, a passenger car, truck, motorcycle, or other automobile, but may also be an electric bicycle, electric kick scooter, electric wheelchair, construction machine, agricultural machine, ship, train, airplane, or other such vehicle. The mobile body is not limited to a passenger vehicle, but may also be a cargo vehicle such as a luggage transport vehicle. The mobile body may be configured to be capable of autonomous travel, or may be configured to be capable of travel in response to direct or remote operation by a driver.

[0017] The technology disclosed herein is not limited to mobile objects such as electric vehicles, but can also be applied to various types of power devices and power facilities in which the output or input of power is controlled by communication, such as power storage devices, power generation devices, and charging devices at charging stations.

[0018] First Embodiment Fig. 1 is a block diagram showing an example of the configuration of a charging system 1 according to a first embodiment. As shown in Fig. 1, the charging system 1 includes a charging station 3, a security monitoring server 7, and an analyst terminal 9. The charging station 3 is a facility (electricity infrastructure) for providing a charging service or an electricity selling service to a visiting vehicle 5 (mobile object). The charging station 3 includes a charging device 31, a charging station management server 32, a power meter 33, a switching hub 34, and a log transmission device 35.

[0019] 1 , the charging device 31, the charging station management server 32, and the security monitoring server 7 are communicatively connected via an external network N, which is, for example, a telecommunications line such as the Internet. The security monitoring server 7 and the analyst terminal 9 are also communicatively connected via the external network N. The charging device 31 is connected to an upstream power grid (not shown) via, for example, a power transmission grid such as an electric wire, so as to be able to exchange power with the charging device 31.

[0020] The charging device 31 is configured to be operable in accordance with instructions (control messages) from the charging station management server 32. The charging device 31 is configured to be able to perform at least one of power supply and power reception with the connected vehicle 5. The charging device 31 is an example of a first power facility.

[0021] For example, the charging device 31 is configured to be able to execute an operation related to a charging service in which, in response to a request from a user of the vehicle 5, the charging device 31 supplies (sells) power to the connected vehicle 5 and charges the battery mounted on the vehicle 5. Furthermore, for example, the charging device 31 is configured to be able to execute an operation related to a power selling service in which, in response to a request from the charging station management server 32 or the power grid, the charging device 31 receives power discharged from the battery mounted on the connected vehicle 5 and discharges the battery mounted on the vehicle 5.

[0022] The power selling service may be provided in response to a request from the user of the vehicle 5. The charging device 31 capable of operating in the normal mode and the suppressed mode and the charging device 31 capable of operating in the power selling mode may be configured as independent devices. Here, the functional configuration of the charging device 31 will be described.

[0023] 2 is a block diagram showing an example of the functional configuration of the charging device 31 according to the first embodiment. As shown in FIG. 2, the charging device 31 includes a charging control unit 311 and a communication unit 312.

[0024] The charging control unit 311 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or may realize two or more of the units.

[0025] The charging control unit 311 controls charging and discharging of the connected vehicle 5 in accordance with the control of the charging station management server 32. The charging control unit 311 operates the charging device 31 in one of a plurality of charging control modes including at least a normal mode, a suppression mode, and a power selling mode. In this way, the charging control unit 311 realizes the charging and discharging function of the charging device 31. As an example, the charging control unit 311 controls the charging control mode of the charging device 31 in accordance with an instruction (control message) from a charging control instruction unit 321 installed in the charging station management server 32.

[0026] The charge control mode of the charging device 31 is information indicating the degree of tightness of power demand. The charge control mode of the charging device 31 includes at least a normal mode and a suppressed mode in which the charging device 31 performs operations related to the charging service. The charge control mode of the charging device 31 may further include a power selling mode in which the charging device 31 performs operations related to the power selling service. Furthermore, the charge control mode of the charging device 31 may further include an operation mode of the charging device 31 other than the normal mode, suppressed mode, and power selling mode, for example, a non-operation mode in which the charging device 31 is not operating.

[0027] For example, the normal mode is an operation mode in which charging is performed without any restriction on the charging upper limit. Specifically, the normal mode is an operation mode in which power is supplied to the vehicle 5 without any restriction on the power supply due to a power shortage, such as when there is no tight power demand. Here, the restriction on the power supply due to a power shortage means setting upper limits (thresholds) for the power supply amount, power supply speed, number of power supplies, and power supply frequency, or reducing the set upper limits.

[0028] For example, the suppression mode is an operation mode in which charging is performed with a restriction imposed on the upper limit of charging. Specifically, the suppression mode is an operation mode in which, when power demand is tight, for example, in response to a request from the charging station management server 51 or the power grid, power is supplied to the vehicle 5 in a state in which power supply is limited due to the power tightness.

[0029] For example, the power selling mode is an operation mode in which power is supplied from the vehicle 5 to the charging device 31. Specifically, the power selling mode is an operation mode in which, when power demand is tight, for example, in response to a request from the charging station management server 51 or the power grid, the battery mounted on the vehicle 5 connected to the charging device 31 is discharged and the discharged power is supplied from the battery.

[0030] The communication unit 312 is a communication circuit that communicates with the outside of the charging device 31. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 312. As a communication circuit for wireless communication, a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication can be used as appropriate.

[0031] Returning to Fig. 1 , the charging station management server 32 controls the charging device 31. The charging station management server 32 is an example of a second power facility. For example, the charging station management server 32 is configured to be able to control both the power supply to the vehicle 5 by the charging device 31 and the power discharge by the vehicle 5, i.e., the power reception from the vehicle 5. Here, the functional configuration of the charging station management server 32 will be described.

[0032] Fig. 3 is a block diagram showing an example of the functional configuration of the charging station management server 32 according to the first embodiment. As shown in Fig. 3, the charging station management server 32 includes a charging control instruction unit 321, a notification unit 322, a storage unit 323, and a communication unit 324.

[0033] The charging control instruction unit 321 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0034] The charge control instruction unit 321 controls the operation of the charge device 31 through communication with the charge device 31. For example, the charge control instruction unit 321 transmits a control message (transmission / reception information) for controlling the operation of the charge device 31 via the communication unit 324. Also, for example, the charge control instruction unit 321 receives a message (transmission / reception information) from the charge device 31 via the communication unit 324.

[0035] As an example, the message transmitted to the charging device 31 includes a control message for controlling power supply to the connected vehicle 5. As an example, the message transmitted to the charging device 31 includes a control message for controlling discharge from the connected vehicle 5. As an example, the message received from the charging device 31 includes a message indicating that the transmitted control message has been received. As an example, the message received from the charging device 31 includes a message indicating the status of power supply or discharge, such as the amount of power supplied or discharged, start time, end time, duration, and remaining battery capacity.

[0036] For example, the message received from the charging device 31 includes a message indicating the state of the charging device 31 during power supply or discharge, such as an observed value of temperature, communication bandwidth, etc. Note that these messages (transmitted / received information) may include a message for instructing the charging device 31 to select a charge control mode (operation mode), or a message for notifying the charging device 31 of a charge control mode that is being executed or has been executed.

[0037] The notification unit 322 notifies the log transmission device 35 of various pieces of information stored in the storage unit 323 through communication with the log transmission device 35. As an example, when the log transmission device 35 inquires about the charge control mode of the charging device 31, the notification unit 322 provides notification regarding the charge control mode item of the charging history information stored in the storage unit 323. As another example, when the log transmission device 35 inquires about vulnerability information, the notification unit 322 provides notification regarding the vulnerability information item of the charging facility management information stored in the storage unit 323. The charging history information and the charging facility management information will be described in detail later.

[0038] The storage unit 323 is a storage medium or storage device that stores control programs, parameters, data being processed, and data resulting from processing, related to each process executed by the charging station management server 32. The storage unit 323 is, for example, a random access memory (RAM), a semiconductor memory element such as a flash memory, a hard disk, or an optical disk. The storage unit 323 may be a storage device provided outside the charging device 31. The storage unit 323 may also be a storage medium that stores or temporarily stores programs and various pieces of information downloaded via a local area network (LAN), the Internet, or the like.

[0039] As an example, the storage unit 323 stores charging history information indicating the history of charging and discharging performed by the managed charging device 31. Here, the charging history information will be described.

[0040] FIG. 4 is a table showing an example of charging history information according to the first embodiment. Table T1 shown in FIG. 4 is a table in which the following items are associated with each other: "charging start time," "charging end time," "charging device ID," "supply power (kW)," "power consumption (kW)," and "charging control mode." The "charging start time" and "charging end time" items store information indicating the times when charging and discharging started and ended, respectively. The charging start time and charging end time are collectively referred to as the start / end of a charging transaction. The "charging device ID" item stores an identifier for uniquely identifying the charging device 31 that performed charging and discharging.

[0041] The "Supplied Power (kW)" item stores the value of the amount of power from the power grid (system) used during charging. Therefore, the "Supplied Power (kW)" item stores a value of 0 or greater during charging, but stores a value of zero (0) during power sale. The "Power Consumption (kW)" item stores the value of the amount of power supplied from the charging device 31 to the battery of the vehicle 5 during charging or discharging. Therefore, the "Power Consumption (kW)" item stores a positive value of 0 or greater during charging, but stores a negative value during power sale.

[0042] Here, the power consumption during charging of vehicle 5 may be all or a part of the supplied power. In other words, not all of the power supplied from the power grid to charging device 31 needs to be supplied directly to vehicle 5, and the power consumption will be a value of the amount of power with the supplied power as the upper limit.

[0043] The "Charge control mode" field stores information indicating which charge control mode the charging device 31 is in during charging and discharging. Here, the information indicating which charge control mode the charging device 31 is in is information indicating the degree of tightness of power demand in the upstream power network and other charging stations 3 in the common power network, including the charging station itself, and is an example of information related to the degree of power tightness.

[0044] Note that when a portion of the power supplied to the vehicle 5 is used as power consumption during charging, the remaining power may be stored in a storage battery mounted on or adjacent to the charging device 31. Similarly, power expressed as negative power consumption during discharging of the vehicle 5 is supplied to the power grid, for example, but some or all of it may be stored in the storage battery of the charging device 31.

[0045] Note that, when power discharged from the vehicle 5 is stored in the storage battery of the charging device 31, a negative value rather than "0" may be stored in the supply power field. Note that the power supplied to the battery of the vehicle 5 from the power grid or the power supplied from the vehicle 5 to the power grid may or may not pass through the storage battery of the charging device 31. Furthermore, the power supplied to the vehicle 5 as consumed power when the vehicle 5 is being charged may be power from the storage battery of the charging device 31 in addition to or instead of power from the power grid. As the storage battery (battery) mounted on or attached to the charging device 31, any battery, such as a lithium-ion battery, a nickel-metal hydride battery, or an all-solid-state battery, may be used as appropriate.

[0046] In the charging station management server 32, the charging control instruction unit 321 stores and manages the charging and discharging history of the managed charging devices 31 in charging history information stored in the storage unit 323. As an example, each time charging and discharging is performed in the managed charging devices 31, the charging control instruction unit 321 stores information about each charging and discharging in the charging history information.

[0047] As an example, the charge control instruction unit 321 stores information about each charge and discharge in the charge history information every time the charge control mode is switched in the managed charging device 31. Note that it may be configured such that other items of the "charge control mode" are recorded every time charging or discharging is performed in the managed charging device 31, and the "charge control mode" item is recorded every time the charge control mode is switched.

[0048] Moreover, as an example, the storage unit 323 stores charging facility management information indicating management of the charging facility including the charging device 31 and the charging station management server 32. Here, the charging facility management information will be described.

[0049] Fig. 5 is a table showing an example of charging facility management information according to the first embodiment. Table T2 shown in Fig. 5 is a table in which the following items are associated with each other: "Device ID," "Model Type," "Model Number," "Firmware Version," "Latest Firmware Version," and "Unaddressed Vulnerabilities." The "Device ID" item stores a device ID indicating the identifier of the charging device 31 or the charging station management server 32. The "Model Type" item stores a device type indicating the name of the charging device 31 or the charging station management server 32 corresponding to the "Device ID."

[0050] The "Model Number" field stores the model number that indicates the model number corresponding to the "Device ID" and "Model Type." The "Firmware Version" field stores the firmware version that indicates the version of the firmware installed in the "Device ID." The "Latest Firmware Version" field stores the latest firmware version that has already been released that corresponds to the "Model Number."

[0051] The "Unaddressed Vulnerabilities" item stores difference information indicating the difference between the "firmware version" and the "latest firmware version." For example, if there is no difference between the "firmware version" and the "latest firmware version," the "Unaddressed Vulnerabilities" item stores "- (none)," indicating that there is no difference. Also, if there is a difference between the "firmware version" and the "latest firmware version," the "Unaddressed Vulnerabilities" item stores vulnerability information indicating the vulnerabilities listed in the release notes of the firmware version published by the vendor that corresponds to the "firmware version."

[0052] 3 , the communication unit 324 is a communication circuit that communicates with the outside of the charging station management server 32. A communication circuit for wired or wireless communication can be used as appropriate as the communication unit 324. A communication circuit for wireless communication can be used as appropriate as a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication.

[0053] The charging station management server 32 may be installed, for example, inside the charging station 3 together with the charging device 31, or may be installed outside the charging station 3. The charging station management server 32 may also control the charging device 31 of another charging station 3. In this case, the other charging station 3 may not be provided with the charging station management server 32.

[0054] 1 , the power meter 33 measures the amount of power consumed by the charging system 1 and the charging device 31. Specifically, the power meter 33 measures the amount of power supplied per unit time to the charging system 1 from the total power consumption per unit time consumed by the charging system 1. The power meter 33 also measures the total power consumption per unit time consumed by the charging device 31. Furthermore, the power meter 33 transmits the power measurement results to the charging station management server 32 and the log transmission device 35 at predetermined time intervals or when power measurement result acquisition request information is received from the charging station management server 32 or the log transmission device 35.

[0055] The switching hub 34 relays all communication information transmitted and received within the charging system 1 between a source and a destination. The switching hub 34 also executes a mirroring process to notify the log transmitting device 35 of all communication information transmitted and received within the charging system 1. Here, the functional configuration of the switching hub 34 will be described.

[0056] 6 is a block diagram showing an example of the functional configuration of the switching hub 34 according to the first embodiment. As shown in FIG. 6, the switching hub 34 includes a transfer unit 341 and a communication unit 342.

[0057] The transfer unit 341 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0058] The transfer unit 341 transfers the log information received from the charging device 31 and the charging station management server 32 to the log transmission device 35. The log information includes charging history information, authentication information, audit log information, and setting change information. The authentication information is information used for authentication between the charging device 31 and the vehicle 5 connected to the charging device 31.

[0059] The audit log information is information relating to audit items for vulnerabilities of the charging device 31 and the charging station management server 32. The audit items for vulnerabilities include, for example, the usage history of the CPU and memory of the charging device 31, the communication history and communication traffic of external devices, the file access history, and the authority change history. The setting change information is information relating to setting changes of the charging device 31 and the charging station management server 32. The setting change is, for example, a change to update to the latest firmware in response to a known vulnerability. Note that the log information is not limited to this.

[0060] The transfer unit 341 then performs log mirroring for the log transmission device 35. Here, log mirroring is a process of checking whether the log transmission device 35 has transmitted the transferred log information within a predetermined time to the security monitoring server 7. Note that, if the log transmission device 35 has not transmitted the transferred log information within a predetermined time to the security monitoring server 7 after performing log mirroring, the transfer unit 341 may transmit the transferred log information within a predetermined time to the security monitoring server 7 instead of the log transmission device 35.

[0061] The communication unit 342 is a communication circuit that communicates with the outside of the switching hub 34. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 342. A communication circuit for wireless communication can be used as appropriate for communication circuits that comply with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication.

[0062] 1 , the log transmission device 35 transmits log information to the security monitoring server 7 based on a predetermined transmission timing. For example, the log transmission device 35 acquires log information from the charging device 31 or the charging station management server 32 at predetermined time intervals, and transmits the acquired log information to the security monitoring server 7 based on the predetermined transmission timing. Here, the functional configuration of the log transmission device 35 will be described.

[0063] 7 is a block diagram showing an example of the functional configuration of the log transmission device 35 according to the first embodiment. As shown in FIG. 7, the log transmission device 35 includes a log transmission control unit 351, a storage unit 352, a communication unit 353, and a priority determination unit 354.

[0064] The log transmission control unit 351 and the priority determination unit 354 are realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0065] The log transmission control unit 351 transmits the acquired log information to the security monitoring server 7 based on a predetermined transmission timing. Specifically, the log transmission control unit 351 acquires log information indicating a log related to communication between the charging device 31 configured to be able to perform at least one of power supply and power reception with the connected charging / discharging device and the charging station management server 32 that controls the charging device 31, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals.

[0066] For example, the log transmission control unit 351 acquires log information indicating a log related to communication between the charging device 31 and the charging station management server 32 that controls the charging device 31 at the start timing of timer charging, which is set when the charging device 31 starts charging the charging / discharging device, or at the time when the charging device 31 finishes charging the charging / discharging device, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals. The predetermined time intervals are set according to the state of the charging device 31. The predetermined time intervals can be set arbitrarily.

[0067] The storage unit 352 is a storage medium or storage device that stores control programs and parameters, data being processed, and data resulting from processing, related to each process executed by the log transmission device 35. The storage unit 352 is, for example, a random access memory (RAM), a semiconductor memory element such as a flash memory, a hard disk, an optical disk, etc. The storage unit 352 may be a storage device provided outside the log transmission device 35. The storage unit 352 may also be a storage medium that stores or temporarily stores programs and various information downloaded via a local area network (LAN), the Internet, etc.

[0068] As an example, the storage unit 352 stores the log information acquired by the log transmission device 35. The storage unit 352 also stores transmission interval information indicating the transmission interval at which the log information acquired by the log transmission control unit 351 is transmitted to the security monitoring server 7.

[0069] The communication unit 353 is a communication circuit that communicates with the outside of the log transmission device 35. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 353. As a communication circuit for wireless communication, a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication can be used as appropriate.

[0070] The priority determination unit 354 determines the transmission priority indicating the priority for transmitting the log information. Specifically, the priority determination unit 354 determines the transmission priority indicating the priority for transmitting the log information acquired by the log transmission control unit 351 to the security monitoring server 7.

[0071] 1 , the security monitoring server 7 monitors the two-way communication between the charging device 31 and the charging station management server 32. The security monitoring server 7 also detects security events indicating abnormalities or the possibility of such abnormalities associated with cyber-attacks based on control messages transmitted and received in this communication. Here, the functional configuration of the security monitoring server 7 will be described.

[0072] 8 is a block diagram showing an example of the functional configuration of the security monitoring server 7 according to the first embodiment. As shown in FIG. 8, the security monitoring server 7 includes an anomaly detection unit 71, an analysis unit 72, a threat information management unit 73, a storage unit 74, a communication unit 75, and a display unit 76.

[0073] The anomaly detection unit 71, the analysis unit 72, and the threat information management unit 73 are realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0074] The anomaly detection unit 71 detects an anomaly related to charging or discharging at the charging station 3 based on transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32. For example, the anomaly detection unit 71 determines whether a received message (transmission and reception information) from the charging device 31 is normal, and if it is not normal (abnormal), detects it as a detected event, which is a security event. Furthermore, if the anomaly detection unit 71 detects a security event, it outputs detection information indicating the detection result to the storage unit 74 or to an external device. As an example, the anomaly detection unit 71 determines that the control target determined by the received message to be abnormal is a target of attack, and transmits the detection information to the log transmission device 35.

[0075] The anomaly detection unit 71 may perform anomaly detection based not only on a received message from the charging device 31 but also on a transmitted message (transmitted / received information) transmitted from the device itself to the charging device 31 or the like. The anomaly detection unit 71 may also perform anomaly detection based on any transmitted / received information indicated in the transmitted / received message, such as the control content, the control value, the observed value (actually measured value), or the predicted value, not only on the control target (attack target). The anomaly detection unit 71 may also be installed outside the security monitoring server 7, for example, in the charging device 31 or the charging station management server 32.

[0076] The analysis unit 72 analyzes the detection event. Specifically, the analysis unit 72 analyzes the detection event, which is a security event detected by the anomaly detection unit 71. Here, security event information indicating a security event will be described.

[0077] Fig. 9 is a table showing an example of security event information according to the first embodiment. Table T3 shown in Fig. 9 is a table in which the following items are associated with each other: "Event ID," "Time of last event occurrence," "Device ID," "Attack method," "Target of attack," and "Event status." The "Event ID" item stores an event ID indicating the identifier of a security event. The "Time of last event occurrence" item corresponds to the "Event ID" and stores the time when the last security event occurred. The "Device ID" item corresponds to the "Device ID" shown in Fig. 5.

[0078] The "attack method" field stores information about the attack method of the security event. The "attack target" field stores information about the attack target of the security event. The "event status" field stores information about the status of the security event. For example, if a security event is active, the analysis unit 72 stores "occurring" in the "event status" field, indicating that the event is continuing to occur. For example, if a predetermined time has passed and no unauthorized communication has occurred, the analysis unit 72 stores "- (none)" in the "security event" field, indicating that the event has ended.

[0079] When the analysis unit 72 analyzes that the event is a detected event, it compares, for example, the charging device ID of the attack target with the attack method and the attack target, and if the events are highly similar, it considers them to be the same security event, and if the events are low in similarity, it adds security event information as a new event. Note that the comparison items are not limited to those described above, and may include information effective for identifying attacks, such as vulnerability numbers, based on the results of anomaly detection and analysis.

[0080] The analysis unit 72 also notifies the log transmission device 35 of the result of the inquiry regarding the security event information corresponding to the analyzed detection event.

[0081] The priority determination unit 354 of the log transmission device 35 determines a transmission priority indicating the priority for transmitting the log information based on the detected event, which is a security event detected based on the transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32, and information on the power pressure level indicating the level of pressure on power demand at the time of detection. The higher the transmission priority, the earlier the timing for transmitting the log information is set.

[0082] For example, the log transmission control unit 351 of the log transmission device 35 makes an inquiry to the security monitoring server 7 regarding security event information, and if, as a result of the inquiry, the security monitoring server 7 notifies the security monitoring server 7 of a detection event that is a security event, the priority determination unit 354 of the log transmission device 35 determines a higher transmission priority for the detection event than for the power selling mode.

[0083] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and as a result of the inquiry, if the charging control mode is the suppression mode, the priority determination unit 354 determines a transmission priority for the suppression mode that is higher than the transmission priority for the normal mode.

[0084] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and as a result of the inquiry, if the charging control mode is a power selling mode, the priority determination unit 354 determines a transmission priority for the power selling mode that is higher than that for the suppression mode.

[0085] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and as a result of the inquiry, if the charging control mode is the normal mode, the priority determination unit 354 determines a transmission priority for the normal mode that is higher than the transmission priority for the non-operating mode.

[0086] For example, the log transmission control unit 351 makes an inquiry to the charging station management server 32 regarding vulnerability information of the charging device 31, and if the result of the inquiry indicates that the charging device 31 has an unaddressed vulnerability, the priority determination unit 354 determines the same transmission priority as that of the detected event when the charging device 31 is in power selling mode and an unaddressed vulnerability exists.

[0087] For example, the log transmission control unit 351 makes an inquiry to the charging station management server 32 regarding vulnerability information of the charging device 31, and if the result of the inquiry indicates that the charging device 31 has an unaddressed vulnerability, the priority determination unit 354 determines a higher transmission priority for the case in which the charging device 31 is in power selling mode and an unaddressed vulnerability exists than for the case in which the charging device 31 is in power selling mode and an unaddressed vulnerability does not exist.

[0088] For example, the log transmission control unit 351 inquires of the charging station management server 32 about vulnerability information of the charging device 31, and if the inquiry results in the existence of an unaddressed vulnerability in the charging device 31, the priority determination unit 354 determines a higher transmission priority for the case in which the charging device 31 is in suppression mode and the unaddressed vulnerability exists than for the case in which the charging device 31 is in suppression mode and the unaddressed vulnerability does not exist. For example, the priority determination unit 354 determines the same transmission priority for the case in which the charging device 31 is in suppression mode and the unaddressed vulnerability exists as for the case in which the charging device 31 is in power selling mode and the unaddressed vulnerability does not exist.

[0089] That is, the transmission priority is set in the following order: detected event > power selling mode > suppressed mode > normal mode > non-operating mode, with the transmission priority being higher. For example, the transmission priority is set as follows: first priority for detected event, second priority for power selling mode, third priority for suppressed mode, fourth priority for normal mode, and fifth priority for non-operating mode. The above-mentioned transmission priority is set in advance for each combination of each operating mode, detected event, and transmission timing, and is stored in the storage unit 352 as transmission priority information indicating the transmission priority. Note that the transmission priority can be set arbitrarily.

[0090] The log transmission control unit 351 also controls the transmission order, which indicates the order in which log information is transmitted, based on the transmission priority determined by the priority determination unit 354. For example, the log transmission control unit 351 updates the log transmission period, which indicates the period for transmitting log information, if the end time of the log transmission period is before the current time. For example, the log transmission control unit 351 discards log information for which the current time falls outside the log transmission period if the end time of the log transmission period is after the current time.

[0091] Furthermore, for example, if the current time is within the log transmission period, the log transmission control unit 351 calculates an estimated transmission time indicating an estimated time for transmitting log information, and if the calculated estimated transmission time is outside the log transmission period, updates the log transmission period. Then, for example, if the current time is within the log transmission period, the log transmission control unit 351 calculates an estimated transmission time indicating an estimated time for transmitting log information, and if the calculated estimated transmission time is within the log transmission period, sets the transmission order based on the transmission priority.

[0092] Here, the control of the transmission order, which indicates the order in which the log transmission control unit 351 transmits log information, will be described with reference to Fig. 10 to Fig. 12. Fig. 10 to Fig. 12 are schematic diagrams for explaining the log transmission control process of the log transmission device according to the first embodiment.

[0093] In the schematic diagram 100 shown in Fig. 10, a transmission waiting list indicating transmission waiting is arranged in chronological order of log information A, log information B, log information C, log information D, log information E, log information F, and log information G. Log information A, log information D, and log information G correspond to the log information of the first charging device. Log information B and log information E correspond to the log information of the second charging device. Furthermore, log information C and log information F correspond to the log information of the third charging device.

[0094] 10, the operation modes of the first charger, the second charger, and the third charger from time t1 to time t2 are the normal mode, the suppression mode, and the charge mode, respectively. Furthermore, the operation modes of the first charger, the second charger, and the third charger from time t2 onwards are the power selling mode, the normal mode, and the normal mode, respectively.

[0095] 11 is a table that associates the transmission state for transmitting log information, the estimated log transmission time [minutes] for transmitting the log information, and the transmission time [minutes] available for transmission within the log transmission period indicating the period for transmitting the log information. The times corresponding to the first, second, third, fourth, fifth, sixth, seventh, and eighth transmission states shown in Table T4 are "9:30," "9:31," "9:32," "9:36," "9:42," "9:45," "9:46," and "10:00," respectively.

[0096] The predicted log transmission time in Table T4 indicates the result of calculation of the predicted log transmission time corresponding to each transmission state by the log transmission control unit 351. Furthermore, the transmission time available for transmission within the log transmission period in Table T4 is the time obtained by subtracting the time corresponding to each transmission state from the current time by the log transmission control unit 351.

[0097] Next, an example of control of the transmission order, which indicates the order in which the log transmission control unit 351 transmits log information, will be described with reference to the above-mentioned Figures 10 and 11. Here, a schematic diagram 101 shown in Figure 12 explains the control of the transmission order when there are no security events and no unaddressed vulnerabilities. Also, it is assumed that the log transmission period end time is updated every hour. The log transmission control unit 351 controls the transmission order, which indicates the order in which the log information is transmitted, based on the operation mode of the charging device.

[0098] Schematic diagram 101 shows a log transmission waiting list for transmitting log information. Here, it is assumed that there is no unsent rig information as of time "9:30." Also, the first to eighth states in schematic diagram 101 correspond to the first to eighth states shown in FIG. 11.

[0099] In the first state, since there is no log information waiting to be sent, the log transmission control unit 351 adds log information A to position "0" in the log transmission list and performs the transmission process. Next, in the second state, since log information A is being sent, the log transmission control unit 351 adds log information B to position "1" in the log transmission waiting list.

[0100] Next, in the third state, the log transmission control unit 351 inserts log information C, which is the second priority log information C in the power selling mode of the third charging device, into the "first" position in the log transmission list, before log information B, which is the third priority log information B in the suppression mode of the second charging device. As a result, log information B becomes "second" in the log transmission waiting list in the third state. In other words, if the current time is within the log transmission period, the log transmission control unit 351 calculates an expected transmission time indicating an expected time to transmit the log information, and if the calculated expected transmission time is within the log transmission period, sets the transmission order based on the transmission priority.

[0101] In the fourth state, since log information A has been sent to the security monitoring server 7, the "0" position on the log transmission waiting list in the fourth state is log information C, and the "1" position on the log transmission waiting list in the fifth state is log information B. In the fifth state, since log information C has been sent to the security monitoring server 7, the "0" position on the log transmission waiting list in the fifth state is log information B.

[0102] Because log information B is being transmitted in the sixth state, the log transmission control unit 351 adds log information D to the first position in the log transmission waiting list. Next, in the seventh state, the log transmission control unit 351 inserts log information E, which is in the suppressed mode and has the third priority, into the first position in the log transmission list, ahead of log information D, which is in the normal mode and has the fourth priority, and has the first charging device operating in the normal mode. As a result, log information D is now in the second position in the log transmission waiting list in the seventh state.

[0103] Here, for the seventh state and beyond, the log transmission control unit 351 cannot add log information F to the log transmission waiting list because there is no transmission time available to add during the log transmission period. In other words, in the seventh state shown in table T4 in FIG. 11 , the time "14" stored in the log transmission period estimated time and the time "14" stored in the transmission time that can pass within the log transmission period are the same value, the log transmission period is updated to "0," and log information F cannot be added. In other words, when the current time is within the log transmission period, the log transmission control unit 351 calculates the estimated transmission time indicating the estimated time for transmitting the log information, and when the calculated estimated transmission time is outside the log transmission period, updates the log transmission period.

[0104] Furthermore, the log transmission control unit 351 discards log information F without adding it to the log transmission waiting list. In other words, if the end time of the log transmission period is after the current time, the log transmission control unit 351 discards log information whose current time is outside the log transmission period.

[0105] In the eighth state, the log transmission control unit 351 enters the next transmission period, so it updates the log transmission period end time and becomes able to add log information to the log transmission waiting list again. That is, the log transmission control unit 351 updates the log transmission period when the end time of the log transmission period, which indicates the period for transmitting log information, is before the current time. Then, in the eighth state, since there is no log information waiting for log transmission, the log transmission control unit 351 adds log information G to position "0" in the log transmission list and performs transmission processing. From the eighth state onwards, the log transmission control unit 351 makes similar determinations and sets the transmission order, which indicates the order in which log information is to be transmitted.

[0106] Therefore, the log transmission control unit 351 transmits the log information to the security monitoring server 7 based on the transmission order that indicates the order in which the log information is to be transmitted.

[0107] 8, the threat information management unit 73 is installed in the charging station 3 and manages threat information indicating threats to the devices that it manages. The threat information will now be described.

[0108] Fig. 13 is a table showing an example of threat information according to the first embodiment. Table T5 shown in Fig. 13 is a table for managing threat information, and is used to identify a threat from a model number and obtain vulnerabilities associated with the threat. Table T5 associates the following items: "Threat ID," "Target Device," "Model Number," "Attack / Damage," "Monitoring Item," and "Vulnerability." The "Threat ID" item stores a threat ID that indicates the identifier of the threat. The "Target Device" item stores the name of the target device corresponding to the threat ID.

[0109] The "Model Number" field stores the model number of the target device. The "Attack / Damage" field stores details about the attack / damage corresponding to the threat ID. The "Monitoring Item" field stores the details to be monitored for the threat ID. The "Vulnerability" field stores the name of the vulnerability related to the threat ID.

[0110] The threat information management unit 73 manages, for example, threats and vulnerabilities to devices installed in the charging station 30, and can determine the vulnerability details and monitoring items from the model number.

[0111] 8 , the storage unit 74 is a storage medium or storage device that stores control programs, parameters, data being processed, and data on processing results related to each process executed by the security monitoring server 7. As an example, the storage unit 74 stores security event information in which the output results of the anomaly detection unit 71 and the analysis unit 72 are stored, and threat information managed by the threat information management unit 73.

[0112] The communication unit 75 is a communication circuit that communicates with the outside of the security monitoring server 7. A communication circuit for wired or wireless communication can be used as the communication unit 75. A communication circuit for wireless communication can be used as appropriate, such as a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), or infrared communication.

[0113] The display unit 76 is a display that displays various images. As this display, a display device such as a liquid crystal display (LCD), an organic electroluminescence (EL) display, a projector, etc. can be used as appropriate. As an example, the display unit 76 displays security event information and threat information stored in the memory unit 74.

[0114] Returning to FIG. 1 , the analyst terminal 9 is an information processing device used by the analyst who performs the analysis. The analyst terminal 9 is configured to be able to execute analysis processing on the determination results of the anomaly detection processing according to the first embodiment, i.e., on the detected event. As an example, the analyst terminal 9 receives an analysis request from the security monitoring server 7. For example, this analysis request is sent to the analyst terminal 9 used by the analyst whose allocation has been determined by the security monitoring server 7. The analysis request may include various types of information related to the detected event to be analyzed. For example, the analysis request may include some or all of the items of security event information and threat information.

[0115] Furthermore, for example, the analysis request may include information about the device in which the detection event to be analyzed occurred and the devices connected to that device, such as the name and type of the charging device 31, the charging station management server 32, the vehicle 5, the installed application programs, and the versions of each application program. As an example, the analyst terminal 9 displays various display screens, such as a notification screen that notifies the analyst of the detection event to be analyzed and an input screen that accepts input of the analysis results by the analyst, on a display equipped with the analyst terminal 9 or a connected display. As an example, the analyst terminal 9 transmits the analysis results input by the analyst to the security monitoring server 7.

[0116] The analyst terminal 9 may be configured to perform the analysis itself, or may be configured to perform analysis assistance by generating information to assist the analyst in the analysis. In this case, the analyst terminal 9 may perform the analysis or analysis assistance using a machine learning model whose parameters are determined to output analysis results or assisting information in response to input information about the detection event to be analyzed. The parameters of this machine learning model may be determined by learning using, for example, accumulated information about past detection events and past analysis results by analysts for each detection event as training data. Any machine learning model, such as a convolutional neural network (CNN), can be used as this machine learning model. The analyst terminal 9 may also be provided outside the charging system 1.

[0117] Note that two or more devices included in the charging system 1 according to the first embodiment described above may be configured as an integrated unit. For example, the charging device 31 and the charging station management server 32 may be configured as an integrated unit. Alternatively, the charging station management server 32 may be realized by the cooperation of two or more charging devices 31. For example, the security monitoring server 7 and the analyst terminal 9 may be configured as an integrated unit. Alternatively, the security monitoring server 7 may be realized by the cooperation of two or more analyst terminals 9.

[0118] Next, a process flow executed by the log transmitting device 35 according to the first embodiment will be described. Fig. 14 is a flowchart showing an example of a process flow executed by the log transmitting device 35 according to the first embodiment. The process shown in Fig. 14 will be described as a process related to determining a transmission priority for log information transmitted by the log transmitting device 35 to the security monitoring server 7.

[0119] The log transmission control unit 351 makes an inquiry to the security monitoring server 7 regarding security event information (step S111). The log transmission control unit 351 then acquires the result of the inquiry. Next, the priority determination unit 354 determines whether the result of the inquiry is a security event (step S112). If the priority determination unit 354 determines that the result of the inquiry is a security event (step S112: Yes), the process proceeds to step S121. On the other hand, if the priority determination unit 354 determines that the result of the inquiry is not a security event (step S112: No), the process proceeds to step S113.

[0120] In step S113, the log transmission control unit 351 inquires of the charging station management server 32 about the charge control mode of the charging device 31 (step S113). Then, the log transmission control unit 351 acquires the result of the inquiry. Next, the priority determination unit 354 determines, as a result of the inquiry, whether the charging device 31 is in the power selling mode (step S114).

[0121] If the priority determination unit 354 determines that the result of the inquiry indicates that the charging device 31 is in the power selling mode (step S114: Yes), the process proceeds to step S119. On the other hand, if the priority determination unit 354 determines that the result of the inquiry indicates that the charging device 31 is not in the power selling mode (step S114: No), the process proceeds to step S115.

[0122] In step S115, the priority determination unit 354 determines, as a result of the inquiry, whether the charging device 31 is in the suppression mode (step S115). If the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 is in the suppression mode (step S115: Yes), the process proceeds to step S117. On the other hand, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 is not in the power selling mode (step S115: No), the process proceeds to step S116.

[0123] In step S116, the priority determination unit 354 determines, as a result of the inquiry, whether the charging device 31 is in the normal mode (step S116). If the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 is in the normal mode (step S116: Yes), the process proceeds to step S122. On the other hand, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 is not in the normal mode (step S116: No), the process proceeds to step S121.

[0124] In step S117, the log transmission control unit 351 makes an inquiry to the charging station management server 32 about vulnerability information of the charging device 31 (step S117). Then, the log transmission control unit 351 acquires the result of the inquiry. Next, the priority determination unit 354 determines, as a result of the inquiry, whether the charging device 31 has any unaddressed vulnerabilities (step S118).

[0125] Here, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 has an unaddressed vulnerability (step S118: Yes), the process proceeds to step S124. On the other hand, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 does not have an unaddressed vulnerability (step S118: No), the process proceeds to step S123.

[0126] In step S119, the log transmission control unit 351 makes an inquiry to the charging station management server 32 regarding vulnerability information of the charging device 31 (step S119). Then, the log transmission control unit 351 acquires the result of the inquiry. Next, the priority determination unit 354 determines, as a result of the inquiry, whether the charging device 31 has any unaddressed vulnerabilities (step S120).

[0127] Here, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 has an unaddressed vulnerability (step S120: Yes), the process proceeds to step S125. On the other hand, if the priority determination unit 354 determines, as a result of the inquiry, that the charging device 31 does not have an unaddressed vulnerability (step S120: No), the process proceeds to step S124.

[0128] In step S121, the priority determination unit 354 determines the transmission priority to be the fifth priority when the charging device 31 is in the non-operating mode (step S121). In step S122, the priority determination unit 354 determines the transmission priority to be the fourth priority when the charging device 31 is in the normal mode (step S122). In step S123, the priority determination unit 354 determines the transmission priority to be the third priority when the charging device 31 is in the suppressed mode and there is no unaddressed vulnerability (step S120).

[0129] In step S124, the priority determination unit 354 determines the transmission priority to be the second type when the charging device 31 is in the suppression mode and an unaddressed vulnerability exists, or when the charging device 31 is in the power selling mode and an unaddressed vulnerability does not exist (step S124). In step S125, the log transmission control unit 351 sets the transmission priority to the first priority when the charging device 31 has detected an event or when the charging device 31 is in the power selling mode and an unaddressed vulnerability exists (step S125). When one of the processes from step S121 to step S125 is completed, the log transmission device 35 ends this process.

[0130] 15 is a flowchart showing an example of the flow of processing executed by the log transmission device 35 according to the first embodiment. The processing shown in FIG. 15 explains processing related to control of the transmission order of log information transmitted by the log transmission device 35 to the security monitoring server 7.

[0131] The log transmission control unit 351 determines whether the log transmission period end time is earlier than the current time (step S161). If the log transmission control unit 351 determines that the log transmission period end time is not earlier than the current time (step S161: No), the process proceeds to step S163. On the other hand, if the log transmission control unit 351 determines that the log transmission period end time is earlier than the current time (step S161: Yes), the process proceeds to step S162.

[0132] In step S162, the log transmission control unit 351 updates the log transmission period (step S162). In step S163, the log transmission control unit 351 determines whether the current time is within the log transmission period (step S163). If the log transmission control unit 351 determines that the current time is outside the log transmission period (step S163: No), the process proceeds to step S171. On the other hand, if the log transmission control unit 351 determines that the current time is within the log transmission period (step S163: Yes), the process proceeds to step S164.

[0133] In step S164, the log transmission control unit 351 calculates an estimated transmission time based on the current time (step S164). Subsequently, the log transmission control unit 351 determines whether the log to be transmitted can be transmitted within the log transmission period (step S165). If the log transmission control unit 351 determines that the log to be transmitted cannot be transmitted within the log transmission period (step S165: No), the process proceeds to step S170. On the other hand, if the log transmission control unit 351 determines that the log to be transmitted can be transmitted within the log transmission period (step S165: Yes), the process proceeds to step S166.

[0134] In step S166, the log transmission control unit 351 determines whether the priority of the log to be transmitted is the first priority (step S166). If the log transmission control unit 351 determines that the priority of the log to be transmitted is the first priority (step S166: Yes), the process proceeds to step S172. On the other hand, if the log transmission control unit 351 determines that the priority of the log to be transmitted is not the first priority (step S166: No), the process proceeds to step S167.

[0135] In step S167, the log transmission control unit 351 determines whether the priority of the log to be transmitted is the second priority (step S167). If the log transmission control unit 351 determines that the priority of the log to be transmitted is the second priority (step S167: Yes), the process proceeds to step S173. On the other hand, if the log transmission control unit 351 determines that the priority of the log to be transmitted is not the second priority (step S167: No), the process proceeds to step S168.

[0136] In step S168, the log transmission control unit 351 determines whether the priority of the log to be transmitted is third (step S168). If the log transmission control unit 351 determines that the priority of the log to be transmitted is third (step S168: Yes), the process proceeds to step S174. On the other hand, if the log transmission control unit 351 determines that the priority of the log to be transmitted is not third (step S168: No), the process proceeds to step S169.

[0137] In step S169, the log transmission control unit 351 determines whether the priority of the log to be transmitted is the fourth priority (step S169). If the log transmission control unit 351 determines that the priority of the log to be transmitted is the fourth priority (step S169: Yes), the process proceeds to step S175. On the other hand, if the log transmission control unit 351 determines that the priority of the log to be transmitted is not the fourth priority (step S169: No), the process proceeds to step S176.

[0138] In step S170, the log transmission control unit 351 updates the log transmission period (step S170). In step S171, the log transmission control unit 351 discards logs to be transmitted that cannot be transmitted within the log transmission period (step S171). In step S172, the log transmission control unit 351 adds logs to be transmitted that can be transmitted within the log transmission period to the end of the first-priority log information in the log transmission waiting list (step S172).

[0139] In step S173, the log transmission control unit 351 adds the logs to be transmitted that can be transmitted within the log transmission period to the end of the log information of second priority that exists in the log transmission waiting list (step S173). In step S174, the log transmission control unit 351 adds the logs to be transmitted that can be transmitted within the log transmission period to the end of the log information of third priority that exists in the log transmission waiting list (step S174). In step S175, the log transmission control unit 351 adds the logs to be transmitted that can be transmitted within the log transmission period to the end of the log information of fourth priority that exists in the log transmission waiting list (step S175).

[0140] In step S176, the log transmission control unit 351 adds the logs to be transmitted that can be transmitted within the log transmission period to the end of the log information of the fifth priority that exists in the log transmission waiting list (step S176). When one of the processes from step S171 to step S176 is completed, the log transmission device 35 ends this process.

[0141] Next, a flow of processing executed by the charging system 1 according to the first embodiment will be described. Fig. 16 is a sequence diagram showing an example of the flow of processing executed by the charging system 1 according to the first embodiment. Note that the sequence diagram shown in Fig. 16 explains the content of processing in a state where a security event has occurred in the charging station 3.

[0142] In step S131, the transfer unit 341 of the switching hub 34 performs log mirroring for the log transmission device 35. In step S132, the log transmission control unit 351 of the log transmission device 35 acquires log information indicating a log related to communication between the charging device 31 and the charging station management server 32 that controls the charging device 31 at the start timing of timer charging, which is set by the charging device 31 to start charging the charging / discharging device, or at the end timing of charging the charging / discharging device by the charging device 31. Here, acquisition of log information by the log transmission control unit 351 of the log transmission device 35 is also referred to as a log transmission process trigger.

[0143] In step S133, the log transmission control unit 351 of the log transmission device 35 makes an inquiry regarding security event information to the security monitoring server 7. In step S134, the analysis unit 72 of the security monitoring server 7 analyzes the detection event, which is the security event detected by the anomaly detection unit 71. In step S135, the analysis unit 72 notifies the log transmission device 35 of the inquiry result regarding the security event information corresponding to the analyzed detection event.

[0144] In step S136, the log transmission control unit 351 of the log transmission device 35 makes an inquiry to the charging station management server 32 about the charge control mode of the charging device 31. In step S137, the notification unit 322 of the charging station management server 32 makes a notification about the charge control mode item of the charging history information stored in the storage unit 323.

[0145] In step S138, the log transmission control unit 351 of the log transmission device 35 makes an inquiry to the charging station management server 32 about the charge control mode of the charging device 31. In step S139, the notification unit 322 of the charging station management server 32 makes a notification about the vulnerability information item of the charging facility management information stored in the storage unit 323.

[0146] In step S140, the priority determination unit 354 of the log transmission device 35 determines a transmission priority indicating the priority for transmitting log information based on a detected event, which is a security event detected based on transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32, and information on the power tightness indicating the degree of tightness in power demand at the time of detection. In step S141, the log transmission control unit 351 controls the transmission order, which indicates the order in which log information is transmitted, based on the transmission priority determined by the priority determination unit 354. In step S142, the log transmission control unit 351 transmits the log information to the security monitoring server 7 based on the transmission order.

[0147] The detailed processing contents of step S140 shown in Fig. 16 correspond to the processing contents of steps S114, S115, S116, S118, S120, and steps S121 to S125 shown in Fig. 14. The detailed processing contents of step S141 shown in Fig. 16 correspond to the processing contents of steps S161 to S176 shown in Fig. 15.

[0148] As described above, the information processing method executed by the log transmission control unit 351 of the log transmission device 35 of this embodiment is an information processing method executed in an information processing device that transmits log information indicating a log related to communication between a first power equipment configured to be able to perform at least one of power supply and power reception between a connected charging / discharging device and a second power equipment that controls the first power equipment, and includes determining a transmission priority indicating the priority of transmitting the log information based on a detected event, which is a security event detected based on the transmission and reception information transmitted and received between the first power equipment and the second power equipment, and information regarding the power tightness indicating the degree of tightness in power demand at the time of detection.

[0149] As a result, the log transmission device 35 of this embodiment can determine a transmission priority indicating the priority of transmitting log information indicating logs related to communication between the charging device 31 and the charging station management server 32, for example, when the charging station 3 is subjected to a cyber attack, depending on the power shortage level indicating the degree of power demand in the charging device 31.

[0150] For example, if a cyber-attack occurs against the power equipment of the charging station 3 during a power shortage situation where power demand is high and power supply is tight, the damage may spread. Therefore, the security monitoring server 7 analyzes detailed logs to deal with the cyber-attack. At this time, the log transmission device 35 determines a priority and transmits the log of the target under attack in order to send the log as quickly as possible. The security monitoring server 7 then uses the log information transmitted from the log transmission device 35 to deal with the cyber-attack so as to prevent the damage to the power equipment from spreading.

[0151] Therefore, the security monitoring server 7 can receive log information from the log transmission device 35 more quickly and perform monitoring and analysis regarding how to deal with cyber attacks, thereby ensuring the security of the power equipment. Therefore, the log transmission device 35 can appropriately deal with abnormalities in the power equipment even when there is a power shortage.

[0152] Other embodiments of the charging system 1 according to the present disclosure will be described below with reference to the drawings. In the following description of each embodiment, differences will be mainly described, and descriptions of content that overlaps with the above-described content will be omitted as appropriate.

[0153] (First Modification) For example, when there is a cyber-attack on the charging station 3 and the security monitoring server 7 detects a security event, the charging station management server 32 may disconnect the charging device 31 from the network. Specifically, when the security monitoring server 7 detects a security event, the communication unit 324 of the charging station management server 32 may cut off communication with the communication unit 312 of the charging device 31 and disconnect the charging device 31 from the network. Then, when the security monitoring server 7 has completed dealing with the cyber-attack, the communication unit 324 of the charging station management server 32 may connect to the network and start communication with the communication unit 312 of the charging device 31 again in order to restore communication with the communication unit 312 of the charging device 31.

[0154] (Second Modification) In the above-described embodiment, the log transmission device 35 transmits log information to the security monitoring server 7 based on the transmission order, but the present invention is not limited to this. For example, the log transmission device 35 may transmit acquired log information to the security monitoring server 7 based on the transmission priority. Specifically, the log transmission control unit 351 of the log transmission device 35 may transmit the acquired log information to the security monitoring server 7 based on a detected event, which is a security event detected based on transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32, information on the power pressure level indicating the level of pressure on power demand at the time of detection, and the transmission priority determined by the priority determination unit 354.

[0155] (Third Modification) For example, the log transmission device 35 may add a log to be transmitted to the log transmission waiting list based on the transmission priority, and if the added log to be transmitted is not included in the log target period, delete log information with a low priority. For example, the log transmission device 35 may add a log to be transmitted to the log transmission waiting list based on the transmission priority, and if the added log to be transmitted is not included in the log target period, compare the priority of the log information in the log transmission waiting list with the priority of the log to be transmitted, and if the priority of the log to be transmitted is high, delete log information with a low priority included in the log transmission waiting list.

[0156] (Fourth Modification) In the above-described embodiment, the information on the power pressure level is information indicating the operation mode of the charging device 31, but this is not limiting. The information on the power pressure level according to the fourth modification may be measurement value information indicating a measurement value acquired from the power meter 33 included in the charging station 3. Specifically, the priority determination unit 354 of the log transmission device 35 may determine the transmission priority of the log information when a large change occurs in the amount of power consumption of the measurement value acquired from the power meter 33.

[0157] For example, the priority determination unit 354 inquires of the power meter 33 regarding the power usage status, and as a result of the inquiry, finds that there has been a large change in the amount of power consumed during the log acquisition period, and inquires of the charging station management server 32 regarding vulnerability information of the charging device 31, and as a result of the inquiry, when the charging device 31 has an unaddressed vulnerability, determines a transmission priority that is higher than the transmission priority when there has been a large change in the amount of power consumed during the log acquisition period and there is no unaddressed vulnerability.

[0158] Furthermore, for example, in a case where there is a large change in the amount of power consumption during the log acquisition period and there is no unaddressed vulnerability, the priority determination unit 354 determines a transmission priority that is higher than the transmission priority in a case where there is no large change in the amount of power consumption during the log acquisition period and the charging device 31 is charging. Here, the case where the charging device 31 is charging means, for example, a state in which the charging station management server 32 controls the charging device 31 in at least one charge control mode out of the normal mode, the suppression mode, and the power selling mode.

[0159] Furthermore, for example, in a case where there is no large change in the amount of power consumption during the log acquisition period and the charging device 31 is charging, the priority determination unit 354 determines a transmission priority that is higher than a case where there is no large change in the amount of power consumption during the log acquisition period and the charging device 31 is not charging. Here, the case where the charging device 31 is not charging means, for example, a state where the charging station management server 32 is not controlling the charging device 31.

[0160] Note that the transmission priority according to the fourth modification is set in the following order: detected event > presence of an unaddressed vulnerability regardless of whether a charge control mode is in effect > charge control mode without an unaddressed vulnerability > non-operating mode. For example, the transmission priority is set as follows: first priority for a detected event, second priority for a presence of an unaddressed vulnerability, third priority for a charge control mode without an unaddressed vulnerability, and fourth priority for the non-operating mode.

[0161] Fig. 17 is a flowchart showing an example of the flow of processing executed by the log transmission device 35 according to the fourth modification. Here, steps S111, S112, S119, S120, S124, and S125 shown in Fig. 17 are similar to steps S111, S112, S119, S120, S124, and S125 shown in Fig. 14, and therefore description of the processing contents will be omitted.

[0162] In step S126, the priority determination unit 354 of the log transmission device 35 inquires of the power meter 33 about the power usage status (step S126). Next, the priority determination unit 354 determines whether there has been a large change in power consumption during the log acquisition period (step S127). If the priority determination unit 354 determines that there has been a large change in power consumption during the log acquisition period (step S127: Yes), the process proceeds to step S119. On the other hand, if the priority determination unit 354 determines that there has not been a large change in power consumption during the log acquisition period (step S127: No), the process proceeds to step S128.

[0163] In step S128, the priority determination unit 354 inquires of the charging station management server 32 about the charge control mode of the charging device 31, and determines, as a result of the inquiry, whether the charging device 31 is currently charging (step S128). If the priority determination unit 354 determines that the charging device 31 is currently charging (step S128: Yes), the process proceeds to step S130. On the other hand, if the priority determination unit 354 determines that the charging device 31 is not currently charging (step S128: No), the process proceeds to step S129.

[0164] In step S129, the priority determination unit 354 determines the transmission priority to be the fourth priority when the charging device 31 is in the non-operating mode and not operating (step S129). In step S130, the priority determination unit 354 determines the transmission priority to be the third priority when the charging device 31 is in the charging control mode and operating (step S130). When one of the processes in steps S124, S125, S129, and S130 is completed, the log transmission device 35 ends this process.

[0165] As described above, the log transmission device 35 according to the fourth modification determines the transmission priority of the log information when there is a large change in the amount of power consumption measured from the power meter 33. This allows the log transmission device 35 to transmit the log of the charging device that should be monitored with a higher priority, and the security monitoring server 7 can perform analysis and monitoring to ensure the security of the power equipment.

[0166] Second Embodiment Fig. 18 is a block diagram showing an example of the configuration of a charging system 11 according to a second embodiment. As shown in Fig. 18 , the charging system 11 includes a power generation plant 6, a security monitoring server 7, a factory 8, and an analyst terminal 9. The power generation plant 6 is a facility (power infrastructure) for providing an electricity selling service to the factory 8. The power generation plant 6 includes a power meter 33, a switching hub 34, a log transmission device 35, a hydrogen fuel cell 61, a storage battery 62, a solar power generation system 63, and a power control server 64.

[0167] The hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 are one type of distributed energy resources (DER) and generate electric power. The hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 are an example of a first power facility. The storage battery 62 is, for example, a lithium-ion battery storage system, but is not limited to this and may be another energy storage system. In this embodiment, the hydrogen fuel cell 61 and the storage battery 62 are collectively referred to as a power storage system.

[0168] The power control server 64 controls the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. The power control server 64 is an example of a second power facility. For example, the power control server 64 is configured to be able to control the power supply to the factory 8 from at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63.

[0169] The power meter 33 measures the amount of power consumed by the factory 8, the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. Specifically, the power meter 33 measures the amount of power supplied per unit time to the factory 8 from the total power consumption per unit time consumed in the factory 8. The power meter 33 also measures the total power consumption per unit time consumed by the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. Furthermore, the power meter 33 transmits the power measurement results to the log transmission device 35 at predetermined time intervals or when power measurement result acquisition request information is received from the log transmission device 35.

[0170] The switching hub 34 relays all communication information transmitted and received within the charging system 1 between a source and a destination. The switching hub 34 also executes a mirroring process of notifying the log transmitting device 35 of all communication information transmitted and received within the charging system 1.

[0171] The log transmission control unit 351 of the log transmission device 35 acquires log information indicating logs related to communication between the hydrogen fuel cell 61, storage battery 62, and solar power generation system 63, which are configured to be able to supply power to the connected factory 8, and the power control server 64 that controls the hydrogen fuel cell 61, storage battery 62, and solar power generation system 63, and transmits the acquired log information to the security monitoring server 7 at predetermined intervals.

[0172] For example, the log transmission control unit 351 acquires log information indicating a log related to communication between at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 and the power control server 64 that controls the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 at the start timing when at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 starts supplying power to the factory 8, or at the end timing when at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 stops supplying power to the factory 8, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals. The predetermined time intervals are set according to the states of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63. The predetermined time intervals can be set arbitrarily.

[0173] The priority determination unit 354 of the log transmission device 35 determines a transmission priority indicating the priority for transmitting log information based on a power supply ratio indicating the ratio of the maximum amount of power to the supplyable power of the first power facility. Specifically, the priority determination unit 354 of the log transmission device 35 determines a transmission priority indicating the priority for transmitting log information based on a power supply ratio indicating the ratio of the maximum amount of power to the supplyable power of each facility. Here, the facilities are the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 included in the power plant 6 described above. The power supply ratio is the supplyable power / maximum amount of power of the facility.

[0174] For example, the priority determination unit 354 of the log transmission device 35 compares a predetermined ratio with the power supply ratio of each facility, and when the power supply ratio is higher than the predetermined ratio, determines a higher transmission priority than when the power supply ratio is lower than the predetermined ratio. The predetermined ratio may be a threshold value corresponding to the power supply ratio of each facility, or may be a threshold value corresponding to the total value of the power supply ratios of all the facilities.

[0175] As described above, the log transmission device 35 according to the second embodiment determines a transmission priority indicating the priority for transmitting log information based on the power supply ratio indicating the ratio of the maximum amount of power to the available power of the first power facility. Furthermore, determining the transmission priority includes determining a higher transmission priority for a power supply ratio higher than a predetermined ratio than for a power supply ratio lower than the predetermined ratio. This allows the log transmission device 35 to transmit logs from the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 with increased priority, depending on the power supply ratio of the first power facility.

[0176] (Fifth Modification) Although the charging system 11 of the second embodiment has been described as including one power generation plant 6, the present invention is not limited to this. For example, the charging system 11 of the fifth modification may include a plurality of power generation plants 6. Furthermore, the priority determination unit 354 of the log transmission device 35 may determine a transmission priority indicating the priority of transmitting log information for the plurality of power generation plants 6 based on a power supply ratio indicating the ratio of the maximum amount of power to the available power supply of each facility.

[0177] Next, an example of the hardware configuration of the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, and log transmission device 35 of the above embodiment will be described.

[0178] FIG. 19 is a block diagram showing an example of the hardware configuration of the charging system 1 and the charging system 11 according to the embodiment.

[0179] In the above embodiment, the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63 and power control server 64 are configured as hardware using a conventional computer, with the CPU 10, ROM 12, RAM 14 and I / F unit 16 etc. connected to each other via a bus 18.

[0180] The CPU 10 is a computing device that controls the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63, and power control server 64 in the above embodiment. The ROM 12 stores programs and the like that realize information processing by the CPU 10. The RAM 14 stores data necessary for various processes by the CPU 10. The I / F unit 16 is an interface that is connected to the storage unit, input unit, display unit, sensor, communication unit, etc., and is used to send and receive data.

[0181] In the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63, and power control server 64 of the above embodiment, the CPU 10 reads a program from ROM 12 onto RAM 14 and executes it, thereby realizing each of the above functional units on the computer.

[0182] The programs for executing the above-described processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above-described embodiment may be stored in an HDD (hard disk drive). Also, the programs for executing the above-described processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above-described embodiment may be provided by being pre-installed in ROM 12.

[0183] Furthermore, the programs for executing the above processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above embodiments may be stored in an installable or executable file format on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD (Digital Versatile Disk), or flexible disk (FD), and provided as a computer program product.

[0184] Furthermore, the programs for executing the information processing executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation system 63, and power control server 64 in the above-described embodiments may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Furthermore, the programs for executing the information processing executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation system 63, and power control server 64 in the above-described embodiments may be provided or distributed via a network such as the Internet.

[0185] According to at least one of the embodiments described above, it is possible to appropriately deal with abnormalities in power facilities even in a power shortage state.

[0186] Although the above describes an embodiment, the embodiment is presented as an example and is not intended to limit the scope of the invention. This novel embodiment can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. This embodiment and its modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims.

[0187] REFERENCE SIGNS LIST 1 Charging system 3 Charging station 5 Vehicle 7 Security monitoring server 9 Analyst terminal 10 CPU 11 Charging system 12 ROM 14 RAM 16 I / F unit 18 Bus 31 Charging device 32 Charging station management server 33 Power meter 34 Switching hub 35 Log transmission device 61 Hydrogen fuel cell 62 Storage battery 63 Solar power generation 64 Power control server 71 Anomaly detection unit 72 Analysis unit 73 Threat information management unit 74 Memory unit 75 Communication unit 76 Display unit 311 Charging control unit 312 Communication unit 321 Charging control instruction unit 322 Notification unit 323 Memory unit 324 Communication unit 341 Transfer unit 342 Communication unit 351 Log transmission control unit 352 Memory unit 353 Communication unit 354 Priority determination unit N External network

Claims

1. An information processing method executed by an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing method including determining a transmission priority indicating the priority of transmitting the log information based on information related to a power pressure level indicating the degree of pressure on power demand.

2. The information processing method of claim 1, wherein the information relating to the power tightness is information indicating an operating mode of the first power facility, the operating modes including at least a normal mode in which the first power facility supplies power to the charging / discharging device without restricting the power supply, and a suppression mode in which the first power facility supplies power to the charging / discharging device with restricting the power supply, and determining the transmission priority includes determining a higher transmission priority for the suppression mode than for the normal mode.

3. The information processing method of claim 2, wherein when the first power equipment has an unaddressed vulnerability, determining the transmission priority includes determining a higher transmission priority when the first power equipment is in the suppression mode and the unaddressed vulnerability exists than when the first power equipment is in the suppression mode and the unaddressed vulnerability does not exist.

4. The information processing method of claim 3, wherein the operating modes further include a power selling mode in which the first power facility receives power from the charging / discharging device, and determining the transmission priority includes: determining a transmission priority that is higher when the power selling mode and the unaddressed vulnerability are present than when the power selling mode and the unaddressed vulnerability are not present, and determining a transmission priority that is the same as when the suppression mode and the unaddressed vulnerability are present when the power selling mode and the unaddressed vulnerability are not present.

5. The information processing method of claim 4, wherein determining the transmission priority includes determining the transmission priority based on a detected event, which is a security event detected based on transmission / reception information transmitted and received between the first power equipment and the second power equipment, and information regarding the power tightness.

6. The information processing method according to claim 5, wherein determining the transmission priority includes determining the same transmission priority in the case of the detected event as in the case where the power selling mode and the unaddressed vulnerability exist.

7. The information processing method according to any one of claims 1 to 6, further comprising controlling a transmission order that indicates an order in which the log information is to be transmitted.

8. The information processing method of claim 7, wherein controlling the transmission order includes: updating a log transmission period indicating a period for transmitting the log information when the end time of the log transmission period is before the current time; and discarding the log information whose current time is outside the log transmission period when the end time of the log transmission period is after the current time.

9. The information processing method of claim 8, wherein controlling the transmission order includes: calculating an expected transmission time indicating an expected time for transmitting the log information when the current time is within a log transmission period; and updating the log transmission period when the calculated expected transmission time is outside the log transmission period.

10. The information processing method of claim 9, wherein controlling the transmission order includes calculating an expected transmission time indicating an expected time for transmitting the log information when the current time is within the log transmission period, and setting the transmission order based on the transmission priority when the calculated expected transmission time is within the log transmission period.

11. An information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing device having at least one processor configured to determine a transmission priority indicating the priority of transmitting the log information based on information related to a power pressure level indicating the degree of pressure on power demand.

12. An information processing program for causing a computer that realizes an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device and a second power facility that controls the first power facility to determine a transmission priority indicating the priority for transmitting the log information based on information related to the power tightness that indicates the degree of tightness in power demand.

13. An information processing method executed by an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing method including determining a transmission priority indicating the priority of transmitting the log information based on a power supply ratio indicating the ratio of the maximum amount of power to the available power of the first power facility.

14. The information processing method according to claim 13, wherein determining the transmission priority includes, when the power supply ratio is higher than a predetermined ratio, determining the transmission priority to be higher than the power supply ratio lower than the predetermined ratio.

Images