Information processing method, information processing device, and information processing program

Abstract

An information processing method according to the present disclosure is executed in an information processing device that transmits log information indicating a log related to communication performed between a first power facility configured to be capable of executing at least one of power supply and power reception with a connected charging / discharging device, and a second power facility for controlling the first power facility. The information processing method includes performing control of a transmission interval for transmitting the log information on the basis of information pertaining to a power urgency degree indicating a degree of urgency of the power demand.

Description

Information processing method, information processing device, and information processing program

[0001] The present disclosure relates to an information processing method, an information processing device, and an information processing program.

[0002] In the case of power plants, electric vehicle charging stations, and other electric power facilities, if they are subjected to a cyberattack, there is a risk that excessive loads may occur, causing damage or fraud. For this reason, as countermeasures against cyberattacks targeting power facilities, the installation of intrusion detection systems (IDS) that detect cyberattacks and the introduction of security monitoring systems are being considered, or are being considered.

[0003] For example, Patent Document 1 discloses a technology aimed at reducing the amount of communication data sent from an on-board system in a security monitoring system that monitors a vehicle. When there is no abnormality in the vehicle, a sampling log of the communication data is acquired for the on-board system installed in the vehicle. On the other hand, when an abnormality such as a cyber attack occurs in the vehicle, all logs of the communication data are acquired.

[0004] International Publication No. 2018 / 105321

[0005] However, if a security monitoring system for charging equipment samples communication logs and reduces the amount of data, it becomes difficult for the security monitoring system to monitor the behavior of the charging equipment. Furthermore, for example, if a cyberattack occurs against power equipment during a power shortage situation where power demand is high and power supply is tight, the damage may be exacerbated. Therefore, reducing the amount of data by sampling communication data is not suitable for security monitoring of charging equipment. Therefore, there is room for improvement in the method of acquiring logs acquired by security monitoring systems for charging equipment.

[0006] One of the problems that the present disclosure aims to solve is to appropriately deal with abnormalities in power facilities even in a power shortage situation.

[0007] The information processing method of the present disclosure is an information processing method executed in an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception between a connected charging / discharging device and a second power facility that controls the first power facility, and includes controlling the transmission interval for transmitting the log information based on information related to a power pressure level that indicates the degree of pressure on power demand.

[0008] According to the present disclosure, abnormalities in power facilities can be dealt with appropriately even in a power shortage situation.

[0009] FIG. 1 is a block diagram showing an example of the configuration of a charging system according to a first embodiment. FIG. 2 is a block diagram showing an example of the functional configuration of a charging device according to the first embodiment. FIG. 3 is a block diagram showing an example of the functional configuration of a charging station management server according to the first embodiment. FIG. 4 is a table showing an example of charging history information according to the first embodiment. FIG. 5 is a table showing an example of charging facility management information according to the first embodiment. FIG. 6 is a block diagram showing an example of the functional configuration of a switching hub according to the first embodiment. FIG. 7 is a block diagram showing an example of the functional configuration of a log transmission device according to the first embodiment. FIG. 8 is a block diagram showing an example of the functional configuration of a security monitoring server according to the first embodiment. FIG. 9 is a table showing an example of security event information according to the first embodiment. FIG. 10 is a table showing an example of threat information according to the first embodiment. FIG. 11 is a flowchart showing an example of the flow of processing executed by the log transmission device according to the first embodiment. FIG. 12 is a sequence diagram showing an example of the flow of processing executed by the charging system according to the first embodiment. FIG. 13 is a block diagram showing an example of the configuration of a charging system according to a second embodiment. FIG. 14 is a block diagram showing an example of the hardware configuration of a charging system according to an embodiment.

[0010] Hereinafter, with reference to the drawings, embodiments of an information processing method, an information processing device (log transmission device), and an information processing program according to the present disclosure will be described.

[0011] In the description of the present disclosure, components having the same or substantially the same functions as those described above with respect to the previously-mentioned drawings may be given the same reference numerals, and descriptions thereof may be omitted as appropriate. Furthermore, even when the same or substantially the same parts are shown, the dimensions and proportions may be different depending on the drawing. Furthermore, for example, in order to ensure the visibility of the drawings, reference numerals may be given to only the main components in the description of each drawing, and reference numerals may not be given to components having the same or substantially the same functions as those described above with respect to the previously-mentioned drawings.

[0012] In the description of the present disclosure, components having the same or substantially the same functions may be distinguished by adding an alphanumeric character to the end of the reference symbol. Alternatively, when multiple components having the same or substantially the same functions are not distinguished, they may be collectively described by omitting the alphanumeric character at the end of the reference symbol.

[0013] The description of this disclosure exemplifies a charging system that provides charging services and electricity sales services to mobile objects such as electric vehicles that are configured to be powered using power from an onboard battery, using power equipment installed in a charging station (electric power infrastructure).

[0014] Here, the charging service is, for example, a service of supplying power from a charging station to a mobile body to charge a battery mounted on the mobile body, such as selling power to a user of the mobile body. Also, the power selling service is, for example, a service of purchasing power from a user of the mobile body, discharging the battery mounted on the mobile body, using the power from the mobile body to charge a battery at a charging station, or supplying power from the mobile body to an upstream power grid (system).

[0015] Here, the mobile object is an example of a charging / discharging device that is equipped with a battery (storage battery) and is configured to charge the battery using power supplied from an external source and discharge the power from the battery to an external source. Any battery, such as a lithium-ion battery, a nickel-metal hydride battery, or an all-solid-state battery, can be used as the battery for this charging / discharging device. The mobile object may be any type of electric vehicle, such as an electric vehicle (EV) driven by a motor as a power source, or a hybrid vehicle driven by both an internal combustion engine and a motor as a power source.

[0016] Furthermore, the mobile body may be, for example, a passenger car, truck, motorcycle, or other automobile, but may also be an electric bicycle, electric kick scooter, electric wheelchair, construction machine, agricultural machine, ship, train, airplane, or other such vehicle. The mobile body is not limited to a passenger vehicle, but may also be a cargo vehicle such as a luggage transport vehicle. The mobile body may be configured to be capable of autonomous travel, or may be configured to be capable of travel in response to direct or remote operation by a driver.

[0017] The technology disclosed herein is not limited to mobile objects such as electric vehicles, but can also be applied to various types of power devices and power facilities in which the output or input of power is controlled by communication, such as power storage devices, power generation devices, and charging devices at charging stations.

[0018] First Embodiment Fig. 1 is a block diagram showing an example of the configuration of a charging system 1 according to a first embodiment. As shown in Fig. 1, the charging system 1 includes a charging station 3, a security monitoring server 7, and an analyst terminal 9. The charging station 3 is a facility (electricity infrastructure) for providing a charging service or an electricity selling service to a visiting vehicle 5 (mobile object). The charging station 3 includes a charging device 31, a charging station management server 32, a power meter 33, a switching hub 34, and a log transmission device 35.

[0019] 1 , the charging device 31, the charging station management server 32, and the security monitoring server 7 are communicatively connected via an external network N, which is, for example, a telecommunications line such as the Internet. The security monitoring server 7 and the analyst terminal 9 are also communicatively connected via the external network N. The charging device 31 is connected to an upstream power grid (not shown) via, for example, a power transmission grid such as an electric wire, so as to be able to exchange power with the charging device 31.

[0020] The charging device 31 is configured to be operable in accordance with instructions (control messages) from the charging station management server 32. The charging device 31 is configured to be able to perform at least one of power supply and power reception with the connected vehicle 5. The charging device 31 is an example of a first power facility.

[0021] For example, the charging device 31 is configured to be able to execute an operation related to a charging service in which, in response to a request from a user of the vehicle 5, the charging device 31 supplies (sells) power to the connected vehicle 5 and charges the battery mounted on the vehicle 5. Furthermore, for example, the charging device 31 is configured to be able to execute an operation related to a power selling service in which, in response to a request from the charging station management server 32 or the power grid, the charging device 31 receives power discharged from the battery mounted on the connected vehicle 5 and discharges the battery mounted on the vehicle 5.

[0022] The power selling service may be provided in response to a request from the user of the vehicle 5. The charging device 31 capable of operating in the normal mode and the suppressed mode and the charging device 31 capable of operating in the power selling mode may be configured as independent devices. Here, the functional configuration of the charging device 31 will be described.

[0023] 2 is a block diagram showing an example of the functional configuration of the charging device 31 according to the first embodiment. As shown in FIG. 2, the charging device 31 includes a charging control unit 311 and a communication unit 312.

[0024] The charging control unit 311 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or may realize two or more of the units.

[0025] The charging control unit 311 controls charging and discharging of the connected vehicle 5 in accordance with the control of the charging station management server 32. The charging control unit 311 operates the charging device 31 in one of a plurality of charging control modes including at least a normal mode, a suppression mode, and a power selling mode. In this way, the charging control unit 311 realizes the charging and discharging function of the charging device 31. As an example, the charging control unit 311 controls the charging control mode of the charging device 31 in accordance with an instruction (control message) from a charging control instruction unit 321 installed in the charging station management server 32.

[0026] The charge control mode of the charging device 31 is information indicating the degree of tightness of power demand. The charge control mode of the charging device 31 includes at least a normal mode and a suppressed mode in which the charging device 31 performs operations related to the charging service. The charge control mode of the charging device 31 may further include a power selling mode in which the charging device 31 performs operations related to the power selling service. Furthermore, the charge control mode of the charging device 31 may further include an operation mode of the charging device 31 other than the normal mode, suppressed mode, and power selling mode, for example, a non-operation mode in which the charging device 31 is not operating.

[0027] For example, the normal mode is an operation mode in which charging is performed without any restriction on the charging upper limit. Specifically, the normal mode is an operation mode in which power is supplied to the vehicle 5 without any restriction on the power supply due to a power shortage, such as when there is no tight power demand. Here, the restriction on the power supply due to a power shortage means setting upper limits (thresholds) for the power supply amount, power supply speed, number of power supplies, and power supply frequency, or reducing the set upper limits.

[0028] For example, the suppression mode is an operation mode in which charging is performed with a restriction imposed on the upper limit of charging. Specifically, the suppression mode is an operation mode in which, when power demand is tight, for example, in response to a request from the charging station management server 51 or the power grid, power is supplied to the vehicle 5 in a state in which power supply is limited due to the power tightness.

[0029] For example, the power selling mode is an operation mode in which power is supplied from the vehicle 5 to the charging device 31. Specifically, the power selling mode is an operation mode in which, when power demand is tight, for example, in response to a request from the charging station management server 51 or the power grid, the battery mounted on the vehicle 5 connected to the charging device 31 is discharged and the discharged power is supplied from the battery.

[0030] The communication unit 312 is a communication circuit that communicates with the outside of the charging device 31. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 312. As a communication circuit for wireless communication, a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication can be used as appropriate.

[0031] Returning to Fig. 1 , the charging station management server 32 controls the charging device 31. The charging station management server 32 is an example of a second power facility. For example, the charging station management server 32 is configured to be able to control both the power supply to the vehicle 5 by the charging device 31 and the power discharge by the vehicle 5, i.e., the power reception from the vehicle 5. Here, the functional configuration of the charging station management server 32 will be described.

[0032] Fig. 3 is a block diagram showing an example of the functional configuration of the charging station management server 32 according to the first embodiment. As shown in Fig. 3, the charging station management server 32 includes a charging control instruction unit 321, a notification unit 322, a storage unit 323, and a communication unit 324.

[0033] The charging control instruction unit 321 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0034] The charge control instruction unit 321 controls the operation of the charge device 31 through communication with the charge device 31. For example, the charge control instruction unit 321 transmits a control message (transmission / reception information) for controlling the operation of the charge device 31 via the communication unit 324. Also, for example, the charge control instruction unit 321 receives a message (transmission / reception information) from the charge device 31 via the communication unit 324.

[0035] As an example, the message transmitted to the charging device 31 includes a control message for controlling power supply to the connected vehicle 5. As an example, the message transmitted to the charging device 31 includes a control message for controlling discharge from the connected vehicle 5. As an example, the message received from the charging device 31 includes a message indicating that the transmitted control message has been received. As an example, the message received from the charging device 31 includes a message indicating the status of power supply or discharge, such as the amount of power supplied or discharged, start time, end time, duration, and remaining battery capacity.

[0036] For example, the message received from the charging device 31 includes a message indicating the state of the charging device 31 during power supply or discharge, such as an observed value of temperature, communication bandwidth, etc. Note that these messages (transmitted / received information) may include a message for instructing the charging device 31 to select a charge control mode (operation mode), or a message for notifying the charging device 31 of a charge control mode that is being executed or has been executed.

[0037] The notification unit 322 notifies the log transmission device 35 of various pieces of information stored in the storage unit 323 through communication with the log transmission device 35. As an example, when the log transmission device 35 inquires about the charge control mode of the charging device 31, the notification unit 322 provides notification regarding the charge control mode item of the charging history information stored in the storage unit 323. As another example, when the log transmission device 35 inquires about vulnerability information, the notification unit 322 provides notification regarding the vulnerability information item of the charging facility management information stored in the storage unit 323. The charging history information and the charging facility management information will be described in detail later.

[0038] The storage unit 323 is a storage medium or storage device that stores control programs, parameters, data being processed, and data resulting from processing, related to each process executed by the charging station management server 32. The storage unit 323 is, for example, a random access memory (RAM), a semiconductor memory element such as a flash memory, a hard disk, or an optical disk. The storage unit 323 may be a storage device provided outside the charging device 31. The storage unit 323 may also be a storage medium that stores or temporarily stores programs and various pieces of information downloaded via a local area network (LAN), the Internet, or the like.

[0039] As an example, the storage unit 323 stores charging history information indicating the history of charging and discharging performed by the managed charging device 31. Here, the charging history information will be described.

[0040] Fig. 4 is a table showing an example of charging history information according to the first embodiment. Table T1 shown in Fig. 4 is a table in which the following items are associated with each other: "charging start time," "charging end time," "charging device ID," "supply power (kW)," "power consumption (kW)," and "charging control mode." The "charging start time" and "charging end time" items store information indicating the times when charging and discharging started and ended, respectively. The "charging device ID" item stores an identifier for uniquely identifying the charging device 31 that performed charging and discharging.

[0041] The "Supplied Power (kW)" item stores the value of the amount of power from the power grid (system) used during charging. Therefore, the "Supplied Power (kW)" item stores a value of 0 or greater during charging, but stores a value of zero (0) during power sale. The "Power Consumption (kW)" item stores the value of the amount of power supplied from the charging device 31 to the battery of the vehicle 5 during charging or discharging. Therefore, the "Power Consumption (kW)" item stores a positive value of 0 or greater during charging, but stores a negative value during power sale.

[0042] Here, the power consumption during charging of vehicle 5 may be all or a part of the supplied power. In other words, not all of the power supplied from the power grid to charging device 31 needs to be supplied directly to vehicle 5, and the power consumption will be a value of the amount of power with the supplied power as the upper limit.

[0043] The "Charge control mode" field stores information indicating which charge control mode the charging device 31 is in during charging and discharging. Here, the information indicating which charge control mode the charging device 31 is in is information indicating the degree of tightness of power demand in the upstream power network and other charging stations 3 in the common power network, including the charging station itself, and is an example of information related to the degree of power tightness.

[0044] Note that when a portion of the power supplied to the vehicle 5 is used as power consumption during charging, the remaining power may be stored in a storage battery mounted on or adjacent to the charging device 31. Similarly, power expressed as negative power consumption during discharging of the vehicle 5 is supplied to the power grid, for example, but some or all of it may be stored in the storage battery of the charging device 31.

[0045] Note that, when power discharged from the vehicle 5 is stored in the storage battery of the charging device 31, a negative value rather than "0" may be stored in the supply power field. Note that the power supplied to the battery of the vehicle 5 from the power grid or the power supplied from the vehicle 5 to the power grid may or may not pass through the storage battery of the charging device 31. Furthermore, the power supplied to the vehicle 5 as consumed power when the vehicle 5 is being charged may be power from the storage battery of the charging device 31 in addition to or instead of power from the power grid. As the storage battery (battery) mounted on or attached to the charging device 31, any battery, such as a lithium-ion battery, a nickel-metal hydride battery, or an all-solid-state battery, may be used as appropriate.

[0046] In the charging station management server 32, the charging control instruction unit 321 stores and manages the charging and discharging history of the managed charging devices 31 in charging history information stored in the storage unit 323. As an example, each time charging and discharging is performed in the managed charging devices 31, the charging control instruction unit 321 stores information about each charging and discharging in the charging history information.

[0047] As an example, the charge control instruction unit 321 stores information about each charge and discharge in the charge history information every time the charge control mode is switched in the managed charging device 31. Note that it may be configured such that other items of the "charge control mode" are recorded every time charging or discharging is performed in the managed charging device 31, and the "charge control mode" item is recorded every time the charge control mode is switched.

[0048] Moreover, as an example, the storage unit 323 stores charging facility management information indicating management of the charging facility including the charging device 31 and the charging station management server 32. Here, the charging facility management information will be described.

[0049] Fig. 5 is a table showing an example of charging facility management information according to the first embodiment. Table T2 shown in Fig. 5 is a table in which the following items are associated with each other: "Device ID," "Model Type," "Model Number," "Firmware Version," "Latest Firmware Version," and "Unaddressed Vulnerabilities." The "Device ID" item stores a device ID indicating the identifier of the charging device 31 or the charging station management server 32. The "Model Type" item stores a device type indicating the name of the charging device 31 or the charging station management server 32 corresponding to the "Device ID."

[0050] The "Model Number" field stores the model number that indicates the model number corresponding to the "Device ID" and "Model Type." The "Firmware Version" field stores the firmware version that indicates the version of the firmware installed in the "Device ID." The "Latest Firmware Version" field stores the latest firmware version that has already been released that corresponds to the "Model Number."

[0051] The "Unaddressed Vulnerabilities" item stores difference information indicating the difference between the "firmware version" and the "latest firmware version." For example, if there is no difference between the "firmware version" and the "latest firmware version," the "Unaddressed Vulnerabilities" item stores "- (none)," indicating that there is no difference. Also, if there is a difference between the "firmware version" and the "latest firmware version," the "Unaddressed Vulnerabilities" item stores vulnerability information indicating the vulnerabilities listed in the release notes of the firmware version published by the vendor that corresponds to the "firmware version."

[0052] 3 , the communication unit 324 is a communication circuit that communicates with the outside of the charging station management server 32. A communication circuit for wired or wireless communication can be used as appropriate as the communication unit 324. A communication circuit for wireless communication can be used as appropriate as a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication.

[0053] The charging station management server 32 may be installed, for example, inside the charging station 3 together with the charging device 31, or may be installed outside the charging station 3. The charging station management server 32 may also control the charging device 31 of another charging station 3. In this case, the other charging station 3 may not be provided with the charging station management server 32.

[0054] 1 , the power meter 33 measures the amount of power consumed by the charging system 1 and the charging device 31. Specifically, the power meter 33 measures the amount of power supplied per unit time to the charging system 1 from the total power consumption per unit time consumed by the charging system 1. The power meter 33 also measures the total power consumption per unit time consumed by the charging device 31. Furthermore, the power meter 33 transmits the power measurement results to the charging station management server 32 and the log transmission device 35 at predetermined time intervals or when power measurement result acquisition request information is received from the charging station management server 32 or the log transmission device 35.

[0055] The switching hub 34 relays all communication information transmitted and received within the charging system 1 between a source and a destination. The switching hub 34 also executes a mirroring process to notify the log transmitting device 35 of all communication information transmitted and received within the charging system 1. Here, the functional configuration of the switching hub 34 will be described.

[0056] 6 is a block diagram showing an example of the functional configuration of the switching hub 34 according to the first embodiment. As shown in FIG. 6, the switching hub 34 includes a transfer unit 341 and a communication unit 342.

[0057] The transfer unit 341 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0058] The transfer unit 341 transfers the log information received from the charging device 31 and the charging station management server 32 to the log transmission device 35. The log information includes charging history information, authentication information, audit log information, and setting change information. The authentication information is information used for authentication between the charging device 31 and the vehicle 5 connected to the charging device 31.

[0059] The audit log information is information relating to audit items for vulnerabilities of the charging device 31 and the charging station management server 32. The audit items for vulnerabilities include, for example, the usage history of the CPU and memory of the charging device 31, the communication history and communication traffic of external devices, the file access history, and the authority change history. The setting change information is information relating to setting changes of the charging device 31 and the charging station management server 32. The setting change is, for example, a change to update to the latest firmware in response to a known vulnerability. Note that the log information is not limited to this.

[0060] The transfer unit 341 then performs log mirroring for the log transmission device 35. Here, log mirroring is a process of checking whether the log transmission device 35 has transmitted the transferred log information within a predetermined time to the security monitoring server 7. Note that, if the log transmission device 35 has not transmitted the transferred log information within a predetermined time to the security monitoring server 7 after performing log mirroring, the transfer unit 341 may transmit the transferred log information within a predetermined time to the security monitoring server 7 instead of the log transmission device 35.

[0061] The communication unit 342 is a communication circuit that communicates with the outside of the switching hub 34. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 342. A communication circuit for wireless communication can be used as appropriate for communication circuits that comply with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication.

[0062] 1 , the log transmission device 35 transmits log information to the security monitoring server 7 based on a predetermined transmission timing. For example, the log transmission device 35 acquires log information from the charging device 31 or the charging station management server 32 at predetermined time intervals, and transmits the acquired log information to the security monitoring server 7 based on the predetermined transmission timing. Here, the functional configuration of the log transmission device 35 will be described.

[0063] 7 is a block diagram showing an example of the functional configuration of the log transmission device 35 according to the first embodiment. As shown in FIG. 7, the log transmission device 35 includes a log transmission control unit 351, a storage unit 352, and a communication unit 353.

[0064] The log transmission control unit 351 is realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0065] The log transmission control unit 351 transmits the acquired log information to the security monitoring server 7 based on a predetermined transmission timing. Specifically, the log transmission control unit 351 acquires log information indicating a log related to communication between the charging device 31 configured to be able to perform at least one of power supply and power reception with the connected charging / discharging device and the charging station management server 32 that controls the charging device 31, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals.

[0066] For example, the log transmission control unit 351 acquires log information indicating a log related to communication between the charging device 31 and the charging station management server 32 that controls the charging device 31 at the start timing of timer charging, which is set when the charging device 31 starts charging the charging / discharging device, or at the time when the charging device 31 finishes charging the charging / discharging device, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals. The predetermined time intervals are set according to the state of the charging device 31. The predetermined time intervals can be set arbitrarily.

[0067] The storage unit 352 is a storage medium or storage device that stores control programs and parameters, data being processed, and data resulting from processing, related to each process executed by the log transmission device 35. The storage unit 352 is, for example, a random access memory (RAM), a semiconductor memory element such as a flash memory, a hard disk, an optical disk, etc. The storage unit 352 may be a storage device provided outside the log transmission device 35. The storage unit 352 may also be a storage medium that stores or temporarily stores programs and various information downloaded via a local area network (LAN), the Internet, etc.

[0068] As an example, the storage unit 352 stores the log information acquired by the log transmission device 35. The storage unit 352 also stores transmission interval information indicating the transmission interval at which the log information acquired by the log transmission control unit 351 is transmitted to the security monitoring server 7.

[0069] The communication unit 353 is a communication circuit that communicates with the outside of the log transmission device 35. A communication circuit for wired or wireless communication can be used as appropriate for the communication unit 353. As a communication circuit for wireless communication, a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), and infrared communication can be used as appropriate.

[0070] 1 , the security monitoring server 7 monitors the two-way communication between the charging device 31 and the charging station management server 32. The security monitoring server 7 also detects security events indicating abnormalities or the possibility of such abnormalities associated with cyber-attacks based on control messages transmitted and received in this communication. Here, the functional configuration of the security monitoring server 7 will be described.

[0071] 8 is a block diagram showing an example of the functional configuration of the security monitoring server 7 according to the first embodiment. As shown in FIG. 8, the security monitoring server 7 includes an anomaly detection unit 71, an analysis unit 72, a threat information management unit 73, a storage unit 74, a communication unit 75, and a display unit 76.

[0072] The anomaly detection unit 71, the analysis unit 72, and the threat information management unit 73 are realized by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) execute a program, i.e., by software. Each of the above units may be realized by a processor such as a dedicated IC, i.e., by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0073] The anomaly detection unit 71 detects an anomaly related to charging or discharging at the charging station 3 based on transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32. For example, the anomaly detection unit 71 determines whether a received message (transmission and reception information) from the charging device 31 is normal, and if it is not normal (abnormal), detects it as a detected event, which is a security event. Furthermore, if the anomaly detection unit 71 detects a security event, it outputs detection information indicating the detection result to the storage unit 74 or to an external device. As an example, the anomaly detection unit 71 determines that the control target determined by the received message to be abnormal is a target of attack, and transmits the detection information to the log transmission device 35.

[0074] The anomaly detection unit 71 may perform anomaly detection based not only on a received message from the charging device 31 but also on a transmitted message (transmitted / received information) transmitted from the device itself to the charging device 31 or the like. The anomaly detection unit 71 may also perform anomaly detection based on any transmitted / received information indicated in the transmitted / received message, such as the control content, the control value, the observed value (actually measured value), or the predicted value, not only on the control target (attack target). The anomaly detection unit 71 may also be installed outside the security monitoring server 7, for example, in the charging device 31 or the charging station management server 32.

[0075] The analysis unit 72 analyzes the detection event. Specifically, the analysis unit 72 analyzes the detection event, which is a security event detected by the anomaly detection unit 71. Here, security event information indicating a security event will be described.

[0076] Fig. 9 is a table showing an example of security event information according to the first embodiment. Table T3 shown in Fig. 9 is a table in which the following items are associated with each other: "Event ID," "Time of last event occurrence," "Device ID," "Attack method," "Target of attack," and "Event status." The "Event ID" item stores an event ID indicating the identifier of a security event. The "Time of last event occurrence" item corresponds to the "Event ID" and stores the time when the last security event occurred. The "Device ID" item corresponds to the "Device ID" shown in Fig. 5.

[0077] The "attack method" field stores information about the attack method of the security event. The "attack target" field stores information about the attack target of the security event. The "event status" field stores information about the status of the security event. For example, if a security event is active, the analysis unit 72 stores "occurring" in the "event status" field, indicating that the event is continuing to occur. For example, if a predetermined time has passed and no unauthorized communication has occurred, the analysis unit 72 stores "- (none)" in the "security event" field, indicating that the event has ended.

[0078] When the analysis unit 72 analyzes that the event is a detected event, it compares, for example, the charging device ID of the attack target with the attack method and the attack target, and if the events are highly similar, it considers them to be the same security event, and if the events are low in similarity, it adds security event information as a new event. Note that the comparison items are not limited to those described above, and may include information effective for identifying attacks, such as vulnerability numbers, based on the results of anomaly detection and analysis.

[0079] The analysis unit 72 also notifies the log transmission device 35 of the result of the inquiry regarding the security event information corresponding to the analyzed detection event.

[0080] The log transmission control unit 351 of the log transmission device 35 controls the transmission interval for transmitting log information based on the detected event, which is a security event detected based on the transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32, and information regarding the power pressure level, which indicates the degree of pressure on power demand at the time of detection.

[0081] For example, if the log transmission control unit 351 inquires of the security monitoring server 7 about security event information and, as a result of the inquiry, the security monitoring server 7 notifies the log transmission control unit 351 of a detection event, which is a security event, the log transmission control unit 351 sets a shorter transmission interval for the detection event than for the suppression mode or the power selling mode. Details of the detection event will be described later.

[0082] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and if the result of the inquiry indicates that the charging control mode is suppression mode, it sets a transmission interval for the suppression mode that is shorter than that for the normal mode.

[0083] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and if the result of the inquiry indicates that the charging control mode is a power selling mode, it sets a transmission interval for the power selling mode that is shorter than that for the normal mode.

[0084] For example, the log transmission control unit 351 inquires of the charging station management server 32 about the charging control mode of the charging device 31, and if the result of the inquiry indicates that the charging control mode is normal mode, it sets a shorter transmission interval for the normal mode than for the non-operating mode.

[0085] For example, the log transmission control unit 351 makes an inquiry to the charging station management server 32 regarding vulnerability information of the charging device 31, and if the result of the inquiry indicates that the charging device 31 has an unaddressed vulnerability, the log transmission control unit 351 sets the same transmission interval as for a detected event when the charging device 31 is in suppression mode or power sales mode.

[0086] That is, the transmission interval is set to be longer in the following order: idle mode > normal mode > suppressed mode or power selling mode > detected event. For example, the transmission interval is set to 10 minutes in idle mode, 5 minutes in normal mode, 3 minutes in suppressed mode or power selling mode, and 1 minute in detected event. The above-mentioned transmission interval is set in advance for each combination of operation mode, detected event, and transmission timing, and is stored in the storage unit 352 as transmission interval information indicating the transmission interval. Note that the transmission interval can be set arbitrarily.

[0087] Then, the log transmission control unit 351 divides the acquired log information based on the set transmission interval, and transmits the divided log information to the security monitoring server 7 .

[0088] 8, the threat information management unit 73 is installed in the charging station 3 and manages threat information indicating threats to the devices that it manages. The threat information will now be described.

[0089] FIG. 10 is a table showing an example of threat information according to the first embodiment. Table T4 shown in FIG. 10 is a table for managing threat information, and is used to identify a threat from a model number and obtain vulnerabilities associated with the threat. Table T4 associates the following items: "Threat ID," "Target Device," "Model Number," "Attack / Damage," "Monitoring Item," and "Vulnerability." The "Threat ID" item stores a threat ID that indicates the identifier of the threat. The "Target Device" item stores the name of the target device that corresponds to the threat ID.

[0090] The "Model Number" field stores the model number of the target device. The "Attack / Damage" field stores details about the attack / damage corresponding to the threat ID. The "Monitoring Item" field stores the details to be monitored for the threat ID. The "Vulnerability" field stores the name of the vulnerability related to the threat ID.

[0091] The threat information management unit 73 manages, for example, threats and vulnerabilities to devices installed in the charging station 30, and can determine the vulnerability details and monitoring items from the model number.

[0092] 8 , the storage unit 74 is a storage medium or storage device that stores control programs, parameters, data being processed, and data on processing results related to each process executed by the security monitoring server 7. As an example, the storage unit 74 stores security event information in which the output results of the anomaly detection unit 71 and the analysis unit 72 are stored, and threat information managed by the threat information management unit 73.

[0093] The communication unit 75 is a communication circuit that communicates with the outside of the security monitoring server 7. A communication circuit for wired or wireless communication can be used as the communication unit 75. A communication circuit for wireless communication can be used as appropriate, such as a communication circuit compatible with various standards such as 4G, 5G, 6G, Wi-Fi (registered trademark), Bluetooth (registered trademark), or infrared communication.

[0094] The display unit 76 is a display that displays various images. As this display, a display device such as a liquid crystal display (LCD), an organic electroluminescence (EL) display, a projector, etc. can be used as appropriate. As an example, the display unit 76 displays security event information and threat information stored in the memory unit 74.

[0095] Returning to FIG. 1 , the analyst terminal 9 is an information processing device used by the analyst who performs the analysis. The analyst terminal 9 is configured to be able to execute analysis processing on the determination results of the anomaly detection processing according to the embodiment, i.e., on the detected event. As an example, the analyst terminal 9 receives an analysis request from the security monitoring server 7. For example, this analysis request is transmitted to the analyst terminal 9 used by the analyst whose allocation has been determined by the security monitoring server 7. The analysis request may include various information related to the detected event to be analyzed. For example, the analysis request may include some or all of the items of security event information and threat information.

[0096] Furthermore, for example, the analysis request may include information about the device in which the detection event to be analyzed occurred and the devices connected to that device, such as the name and type of the charging device 31, the charging station management server 32, the vehicle 5, the installed application programs, and the versions of each application program. As an example, the analyst terminal 9 displays various display screens, such as a notification screen that notifies the analyst of the detection event to be analyzed and an input screen that accepts input of the analysis results by the analyst, on a display equipped with the analyst terminal 9 or a connected display. As an example, the analyst terminal 9 transmits the analysis results input by the analyst to the security monitoring server 7.

[0097] The analyst terminal 9 may be configured to perform the analysis itself, or may be configured to perform analysis assistance by generating information to assist the analyst in the analysis. In this case, the analyst terminal 9 may perform the analysis or analysis assistance using a machine learning model whose parameters are determined to output analysis results or assisting information in response to input information about the detection event to be analyzed. The parameters of this machine learning model may be determined by learning using, for example, accumulated information about past detection events and past analysis results by analysts for each detection event as training data. Any machine learning model, such as a convolutional neural network (CNN), can be used as this machine learning model. The analyst terminal 9 may also be provided outside the charging system 1.

[0098] Note that two or more devices included in the charging system 1 according to the above-described embodiment may be configured as an integrated unit. For example, the charging device 31 and the charging station management server 32 may be configured as an integrated unit. Alternatively, the charging station management server 32 may be realized by the cooperation of two or more charging devices 31. For example, the security monitoring server 7 and the analyst terminal 9 may be configured as an integrated unit. Alternatively, the security monitoring server 7 may be realized by the cooperation of two or more analyst terminals 9.

[0099] Next, a process flow executed by the log transmitting device 35 according to the first embodiment will be described. Fig. 11 is a flowchart showing an example of a process flow executed by the log transmitting device 35 according to the first embodiment. The process shown in Fig. 11 explains a process related to setting a transmission interval for log information transmitted by the log transmitting device 35 to the security monitoring server 7.

[0100] The log transmission control unit 351 makes an inquiry to the security monitoring server 7 regarding security event information (step S111). The log transmission control unit 351 then acquires the result of the inquiry. Next, the log transmission control unit 351 determines whether the result of the inquiry is a security event (step S112). If the log transmission control unit 351 determines that the result of the inquiry is a security event (step S112: Yes), the process proceeds to step S121. On the other hand, if the log transmission control unit 351 determines that the result of the inquiry is not a security event (step S112: No), the process proceeds to step S113.

[0101] In step S113, the log transmission control unit 351 inquires of the charging station management server 32 about the charge control mode of the charging device 31 (step S113). Then, the log transmission control unit 351 acquires the result of the inquiry. Next, the log transmission control unit 351 determines, as a result of the inquiry, whether the charging device 31 is in the power selling mode or the suppression mode (step S114).

[0102] If the log transmission control unit 351 determines that the result of the inquiry indicates that the charging device 31 is in the power selling mode or the power saving mode (step S114: No), the process proceeds to step S115. On the other hand, if the log transmission control unit 351 determines that the result of the inquiry indicates that the charging device 31 is not in the power selling mode or the power saving mode (step S114: Yes), the process proceeds to step S116.

[0103] In step S115, the log transmission control unit 351 determines, as a result of the inquiry, whether the charging device 31 is in normal mode (step S115). If the log transmission control unit 351 determines, as a result of the inquiry, that the charging device 31 is in normal mode (step S115: Yes), the process proceeds to step S119. On the other hand, if the log transmission control unit 351 determines, as a result of the inquiry, that the charging device 31 is not in normal mode (step S115: No), the process proceeds to step S118.

[0104] In step S116, the log transmission control unit 351 makes an inquiry to the charging station management server 32 regarding vulnerability information of the charging device 31 (step S116). Then, the log transmission control unit 351 acquires the result of the inquiry. Next, the log transmission control unit 351 determines, as a result of the inquiry, whether the charging device 31 has any unaddressed vulnerabilities (step S117).

[0105] Here, if the log transmission control unit 351 determines, as a result of the inquiry, that the charging device 31 has an unaddressed vulnerability (step S117: Yes), the process proceeds to step S121. On the other hand, if the log transmission control unit 351 determines, as a result of the inquiry, that the charging device 31 does not have an unaddressed vulnerability (step S117: No), the process proceeds to step S120.

[0106] In step S118, the log transmission control unit 351 sets the transmission interval to 10 minutes when the charging device 31 is in the non-operating mode (step S118). In step S119, the log transmission control unit 351 sets the transmission interval to 5 minutes when the charging device 31 is in the normal mode (step S119). In step S120, the log transmission control unit 351 sets the transmission interval to 3 minutes when the charging device 31 is in the power selling mode or the suppression mode (step S120).

[0107] In step S121, the log transmission control unit 351 sets the transmission interval to one minute when the charging device 31 detects an event or when the charging device 31 has an unaddressed vulnerability (step S121). In step S122, the log transmission control unit 351 divides the acquired log information based on the set transmission interval and transmits the divided log information to the security monitoring server 7 (step S122). When the processing of step S122 ends, the log transmission device 35 ends this processing.

[0108] Next, a flow of processing executed by the charging system 1 according to the first embodiment will be described. Fig. 12 is a sequence diagram showing an example of the flow of processing executed by the charging system 1 according to the first embodiment. Note that the sequence diagram shown in Fig. 12 explains the content of processing in a state where a security event has occurred in the charging station 3.

[0109] In step S131, the transfer unit 341 of the switching hub 34 performs log mirroring for the log transmission device 35. In step S132, the log transmission control unit 351 of the log transmission device 35 acquires log information indicating a log related to communication between the charging device 31 and the charging station management server 32 that controls the charging device 31 at the start timing of timer charging, which is set by the charging device 31 to start charging the charging / discharging device, or at the end timing of charging the charging / discharging device by the charging device 31. Here, acquisition of log information by the log transmission control unit 351 of the log transmission device 35 is also referred to as a log transmission process trigger.

[0110] In step S133, the log transmission control unit 351 of the log transmission device 35 makes an inquiry regarding security event information to the security monitoring server 7. In step S134, the analysis unit 72 of the security monitoring server 7 analyzes the detection event, which is the security event detected by the anomaly detection unit 71. In step S135, the analysis unit 72 notifies the log transmission device 35 of the inquiry result regarding the security event information corresponding to the analyzed detection event.

[0111] In step S136, the log transmission control unit 351 of the log transmission device 35 makes an inquiry to the charging station management server 32 about the charge control mode of the charging device 31. In step S137, the notification unit 322 of the charging station management server 32 makes a notification about the charge control mode item of the charging history information stored in the storage unit 323.

[0112] In step S138, the log transmission control unit 351 of the log transmission device 35 makes an inquiry to the charging station management server 32 about the charge control mode of the charging device 31. In step S139, the notification unit 322 of the charging station management server 32 makes a notification about the vulnerability information item of the charging facility management information stored in the storage unit 323.

[0113] In step S140, the log transmission control unit 351 of the log transmission device 35 controls the transmission interval for transmitting log information based on a detected event, which is a security event detected based on transmission and reception information transmitted and received between the charging device 31 and the charging station management server 32, and information on the power pressure level, which indicates the level of pressure on power demand at the time of detection. In step S141, the log transmission control unit 351 divides the log information based on the control of the transmission interval. In step S142, the log transmission control unit 351 transmits the divided log information to the security monitoring server 7.

[0114] The detailed processing contents of step S140 shown in FIG. 12 correspond to the processing contents of steps S112, S114, S115, and steps S117 to S121 shown in FIG.

[0115] As described above, the information processing method executed by the log transmission control unit 351 of the log transmission device 35 of this embodiment is an information processing method executed in an information processing device that transmits log information indicating a log related to communication between a first power equipment configured to be able to perform at least one of power supply and power reception between a connected charging / discharging device and a second power equipment that controls the first power equipment, and includes controlling the transmission interval for transmitting the log information based on a detected event, which is a security event detected based on the transmission and reception information transmitted and received between the first power equipment and the second power equipment, and information related to the power tightness indicating the degree of tightness in power demand at the time of detection.

[0116] As a result, the log transmission device 35 of this embodiment can control the transmission interval for transmitting log information indicating logs related to communication between the charging device 31 and the charging station management server 32, for example, when the charging station 3 is subjected to a cyber attack, depending on the power shortage level indicating the degree of power demand in the charging device 31.

[0117] For example, even if the network is overloaded due to an external cyber attack and the network bandwidth is narrow, the log transmission device 35 can transmit log information to the security monitoring server 7 more quickly than before because the file size of the transmitted log information is smaller due to the shorter transmission interval for transmitting log information.

[0118] Furthermore, the security monitoring server 7 receives log information from the log transmitting device 35 more quickly than before, allowing it to monitor and analyze how to deal with cyber-attacks. Therefore, the log transmitting device 35 can appropriately deal with abnormalities in the power equipment even when there is a power shortage.

[0119] Other embodiments of the charging system 1 according to the present disclosure will be described below with reference to the drawings. In the following description of each embodiment, differences will be mainly described, and descriptions of content that overlaps with the above-described content will be omitted as appropriate.

[0120] (First Modification) For example, when there is a cyber-attack on the charging station 3 and the security monitoring server 7 detects a security event, the charging station management server 32 may disconnect the charging device 31 from the network. Specifically, when the security monitoring server 7 detects a security event, the communication unit 324 of the charging station management server 32 may cut off communication with the communication unit 312 of the charging device 31 and disconnect the charging device 31 from the network. Then, when the security monitoring server 7 has completed dealing with the cyber-attack, the communication unit 324 of the charging station management server 32 may connect to the network and start communication with the communication unit 312 of the charging device 31 again in order to restore communication with the communication unit 312 of the charging device 31.

[0121] (Second Modification) In the above-described embodiment, the information on the power pressure level is information indicating the operation mode of the charging device 31. However, the information on the power pressure level according to the second modification may be measurement value information indicating a measurement value acquired from the power meter 33 included in the charging station 3.

[0122] Second Embodiment Fig. 13 is a block diagram showing an example of the configuration of a charging system 11 according to a second embodiment. As shown in Fig. 13, the charging system 11 includes a power generation plant 6, a security monitoring server 7, a factory 8, and an analyst terminal 9. The power generation plant 6 is a facility (power infrastructure) for providing an electricity selling service to the factory 8. The power generation plant 6 includes a power meter 33, a switching hub 34, a log transmission device 35, a hydrogen fuel cell 61, a storage battery 62, a solar power generation system 63, and a power control server 64.

[0123] The hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 are one type of distributed energy resources (DER) and generate electric power. The hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 are an example of a first power facility. The storage battery 62 is, for example, a lithium-ion battery storage system, but is not limited to this and may be another energy storage system. In this embodiment, the hydrogen fuel cell 61 and the storage battery 62 are collectively referred to as a power storage system.

[0124] The power control server 64 controls the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. The power control server 64 is an example of a second power facility. For example, the power control server 64 is configured to be able to control the power supply to the factory 8 from at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63.

[0125] The power meter 33 measures the amount of power consumed by the factory 8, the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. Specifically, the power meter 33 measures the amount of power supplied per unit time to the factory 8 from the total power consumption per unit time consumed in the factory 8. The power meter 33 also measures the total power consumption per unit time consumed by the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63. Furthermore, the power meter 33 transmits the power measurement results to the log transmission device 35 at predetermined time intervals or when power measurement result acquisition request information is received from the log transmission device 35.

[0126] The switching hub 34 relays all communication information transmitted and received within the charging system 1 between a source and a destination. The switching hub 34 also executes a mirroring process of notifying the log transmitting device 35 of all communication information transmitted and received within the charging system 1.

[0127] The log transmission control unit 351 of the log transmission device 35 acquires log information indicating logs related to communication between the hydrogen fuel cell 61, storage battery 62, and solar power generation system 63, which are configured to be able to supply power to the connected factory 8, and the power control server 64 that controls the hydrogen fuel cell 61, storage battery 62, and solar power generation system 63, and transmits the acquired log information to the security monitoring server 7 at predetermined intervals.

[0128] For example, the log transmission control unit 351 acquires log information indicating a log related to communication between at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 and the power control server 64 that controls the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 at the start timing when at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 starts supplying power to the factory 8, or at the end timing when at least one of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63 stops supplying power to the factory 8, and transmits the acquired log information to the security monitoring server 7 at predetermined time intervals. The predetermined time intervals are set according to the states of the hydrogen fuel cell 61, the storage battery 62, and the solar power generation unit 63. The predetermined time intervals can be set arbitrarily.

[0129] The log transmission control unit 351 of the log transmission device 35 controls the transmission interval for transmitting log information based on a power supply ratio indicating the ratio of the maximum amount of power to the supplyable power of the first power facility. Specifically, the log transmission control unit 351 of the log transmission device 35 controls the transmission interval for transmitting log information based on a power supply ratio indicating the ratio of the maximum amount of power to the supplyable power of each facility. Here, the facilities are the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 included in the power plant 6 described above. The power supply ratio is the supplyable power / maximum amount of power of the facility.

[0130] For example, the log transmission control unit 351 of the log transmission device 35 compares a predetermined ratio with the power supply ratio of each facility, and when the power supply ratio is higher than the predetermined ratio, controls the transmission interval to be shorter than when the power supply ratio is lower than the predetermined ratio. The predetermined ratio may be a threshold value corresponding to the power supply ratio of each facility, or may be a threshold value corresponding to the total value of the power supply ratios of all facilities.

[0131] As described above, the log transmission device 35 according to the second embodiment controls the transmission interval for transmitting log information based on the power supply ratio, which indicates the ratio of the maximum amount of power to the available power of the first power facility. Controlling the transmission interval also includes controlling the transmission interval to be shorter when the power supply ratio is higher than a predetermined ratio than when the power supply ratio is lower than the predetermined ratio. This allows the log transmission device 35 to transmit logs for the hydrogen fuel cell 61, the storage battery 62, and the solar power generation system 63 at an increased frequency depending on the power supply ratio of the first power facility.

[0132] (Third Modification) Although the charging system 11 of the second embodiment has been described as including one power generation plant 6, the present invention is not limited to this. For example, the charging system 11 of the third modification may include a plurality of power generation plants 6. Furthermore, the log transmission control unit 351 of the log transmission device 35 may control the transmission interval for transmitting log information for the plurality of power generation plants 6 based on a power supply ratio indicating the ratio of the maximum amount of power to the suppliable power of each facility.

[0133] Next, an example of the hardware configuration of the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, and log transmission device 35 of the above embodiment will be described.

[0134] FIG. 14 is a block diagram showing an example of the hardware configuration of the charging system 1 and the charging system 11 according to the embodiment.

[0135] In the above embodiment, the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63 and power control server 64 are configured as hardware using a conventional computer, with the CPU 10, ROM 12, RAM 14 and I / F unit 16 etc. connected to each other via a bus 18.

[0136] The CPU 10 is a computing device that controls the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63, and power control server 64 in the above embodiment. The ROM 12 stores programs and the like that realize information processing by the CPU 10. The RAM 14 stores data necessary for various processes by the CPU 10. The I / F unit 16 is an interface that is connected to the storage unit, input unit, display unit, sensor, communication unit, etc., and is used to send and receive data.

[0137] In the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation 63, and power control server 64 of the above embodiment, the CPU 10 reads a program from ROM 12 onto RAM 14 and executes it, thereby realizing each of the above functional units on the computer.

[0138] The programs for executing the above-described processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above-described embodiment may be stored in an HDD (hard disk drive). Also, the programs for executing the above-described processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above-described embodiment may be provided by being pre-installed in ROM 12.

[0139] Furthermore, the programs for executing the above processes executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation device 63, and power control server 64 in the above embodiments may be stored in an installable or executable file format on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD (Digital Versatile Disk), or flexible disk (FD), and provided as a computer program product.

[0140] Furthermore, the programs for executing the information processing executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation system 63, and power control server 64 in the above-described embodiments may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Furthermore, the programs for executing the information processing executed by the security monitoring server 7, analyst terminal 9, charging device 31, charging station management server 32, switching hub 34, log transmission device 35, hydrogen fuel cell 61, storage battery 62, solar power generation system 63, and power control server 64 in the above-described embodiments may be provided or distributed via a network such as the Internet.

[0141] According to at least one of the embodiments described above, it is possible to appropriately deal with abnormalities in power facilities even in a power shortage state.

[0142] Although the above describes an embodiment, the embodiment is presented as an example and is not intended to limit the scope of the invention. This novel embodiment can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. This embodiment and its modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims.

[0143] REFERENCE SIGNS LIST 1 Charging system 3 Charging station 5 Vehicle 7 Security monitoring server 9 Analyst terminal 10 CPU 11 Charging system 12 ROM 14 RAM 16 I / F unit 18 Bus 31 Charging device 32 Charging station management server 33 Power meter 34 Switching hub 35 Log transmission device 61 Hydrogen fuel cell 62 Storage battery 63 Solar power generation 64 Power control server 71 Anomaly detection unit 72 Analysis unit 73 Threat information management unit 74 Memory unit 75 Communication unit 76 Display unit 311 Charging control unit 312 Communication unit 321 Charging control instruction unit 322 Notification unit 323 Memory unit 324 Communication unit 341 Transfer unit 342 Communication unit 351 Log transmission control unit 352 Memory unit 353 Communication unit N External network

Claims

1. An information processing method executed by an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing method including controlling the transmission interval for transmitting the log information based on information related to a power pressure level indicating the degree of pressure on power demand.

2. The information processing method of claim 1, wherein the information relating to the power tightness is information indicating an operating mode of the first power equipment, and the operating mode includes at least a normal mode in which the first power equipment supplies power to the charging / discharging equipment without restricting the power supply, and a suppressed mode in which the first power equipment supplies power to the charging / discharging equipment with restricting the power supply, and controlling the transmission interval includes setting the transmission interval in the suppressed mode to be shorter than in the normal mode.

3. The information processing method according to claim 2, wherein the operating modes further include a power selling mode in which the first power equipment receives power from the charging / discharging device, and controlling the transmission interval includes setting the transmission interval in the power selling mode to be shorter than in the normal mode.

4. The information processing method of claim 3, wherein controlling the transmission interval includes controlling the transmission interval based on a detected event, which is a security event detected based on transmission and reception information transmitted and received between the first power facility and the second power facility, and information regarding a power tightness indicating the degree of tightness in power demand at the time of detection.

5. The information processing method according to claim 4, wherein controlling the transmission interval includes setting the transmission interval in the case of the detected event to be shorter than in the case of the suppression mode or the power selling mode.

6. The information processing method of claim 5, wherein, when an unaddressed vulnerability exists in the first power equipment, controlling the transmission interval includes setting the transmission interval for the suppression mode or the power selling mode to the same as for the detected event.

7. An information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing device having at least one processor configured to control the transmission interval for transmitting the log information based on information related to a power pressure level indicating the degree of pressure in power demand.

8. An information processing program for causing a computer that realizes an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device and a second power facility that controls the first power facility to control the transmission interval for transmitting the log information based on information related to the power tightness that indicates the degree of tightness in power demand.

9. An information processing method executed in an information processing device that transmits log information indicating a log related to communication between a first power facility configured to be able to perform at least one of power supply and power reception with a connected charging / discharging device, and a second power facility that controls the first power facility, the information processing method including controlling the transmission interval for transmitting the log information based on a power supply ratio indicating the ratio of the maximum amount of power to the available power of the first power facility.

10. The information processing method according to claim 9, wherein controlling the transmission interval includes controlling the transmission interval to be shorter when the power supply ratio is higher than a predetermined ratio than when the power supply ratio is lower than the predetermined ratio.

Images