Information processing method, computer program, and information processing device

Abstract

An information processing method according to the present invention is an information processing method executed by an information processing device mounted on a mobile body that is driven by using electric power, said method involving: acquiring current value information indicating the current value when a drive battery of the mobile body is charged by using a charger (20), and parameter information indicating parameters of the drive battery at the start of charging; determining, on the basis of the parameters indicated by the acquired parameter information, monitoring conditions for the monitoring of the current value (S103); detecting, on the basis of the determined monitoring conditions and the acquired current value information, an abnormality in the current value (S207); and, if an abnormality has been detected, outputting abnormality information indicating that an abnormality has been detected.

Description

Information Processing Method, Computer Program, and Information Processing Apparatus

[0001] The present disclosure relates to an information processing method, a computer program, and an information processing apparatus.

[0002] Patent Document 1 discloses a method for detecting an abnormality in a mobile object such as a vehicle, particularly an abnormality in an in-vehicle network.

[0003] Japanese Unexamined Patent Application Publication No. 2014-146868

[0004] Meanwhile, it is desired to accurately detect an abnormality in charging of a drive battery of a mobile object driven by electric power.

[0005] Accordingly, the present disclosure provides an information processing method, a computer program, and an information processing apparatus that can accurately detect an abnormality in charging of a drive battery of a mobile object.

[0006] An information processing method according to one aspect of the present disclosure is an information processing method executed by an information processing apparatus mounted on a mobile object driven by electric power, the method comprising: acquiring current value information indicating a current value when a drive battery of the mobile object is charged by a charger, and parameter information indicating a parameter of the drive battery at the start of charging; determining a monitoring condition for monitoring the current value based on the parameter indicated by the acquired parameter information; detecting an abnormality in the current value based on the determined monitoring condition and the acquired current value information; and outputting abnormality information indicating that the abnormality has been detected when the abnormality is detected.

[0007] A computer program according to one aspect of the present disclosure is a computer program for causing a computer to execute the above information processing method.

[0008] An information processing device according to one aspect of the present disclosure is an information processing device mounted on a power-driven mobile body, comprising: a communication unit that acquires current value information indicating the current value when the drive battery of the mobile body is charged by a charger, and parameter information indicating the parameters of the drive battery at the start of charging; a determination unit that determines monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information; and an abnormality detection unit that detects an abnormality in the current value based on the determined monitoring conditions and the acquired current value information, wherein the communication unit outputs abnormality information indicating that an abnormality has been detected when an abnormality is detected.

[0009] These comprehensive or specific embodiments may be implemented as a system, method, integrated circuit, computer program, or recording medium such as a computer-readable CD-ROM (Compact Disc-Read Only Memory), or as any combination of a system, method, integrated circuit, computer program, and recording medium.

[0010] According to one aspect of this disclosure, it is possible to realize an information processing method, etc., that can accurately detect abnormalities in the charging of the drive battery of a mobile device.

[0011] Figure 1 is a block diagram showing the functional configuration of an information processing system according to an embodiment. Figure 2 is a block diagram showing the functional configuration of a mobile body according to an embodiment. Figure 3 is a block diagram showing the functional configuration of an information processing device according to an embodiment. Figure 4 is a block diagram showing the functional configuration of a monitoring rule management unit according to an embodiment. Figure 5 is a diagram showing a table indicating monitoring rules according to an embodiment. Figure 6 is a diagram showing a table indicating multiple monitoring conditions according to an embodiment. Figure 7 is a sequence diagram of operation example 1 performed by the information processing system according to an embodiment. Figure 8 is a sequence diagram of operation example 2 performed by the information processing system according to an embodiment. Figure 9 is a flowchart of operation examples 1 and 2 performed by the information processing device according to an embodiment. Figure 10 is a flowchart of the process of step S103 performed by the information processing device according to an embodiment. Figure 11 is a flowchart of the process of step S301 performed by the information processing device according to an embodiment. Figure 12 is a diagram showing a table indicating two communication data exchanged between a vehicle and a charger according to an embodiment. Figure 13 is a diagram showing a table indicating the abnormality determination result by the abnormality detection unit according to an embodiment. Figure 14 is a diagram showing an image displayed on the display unit according to an embodiment. Figure 15 is a flowchart of the process performed in step S210 by the information processing device according to the embodiment. Figure 16 is a block diagram showing the functional configuration of the information processing system according to a modified example of the embodiment. Figure 17 is a block diagram showing the functional configuration of the mobile body according to a modified example of the embodiment. Figure 18 is a block diagram showing the functional configuration of the management server according to a modified example of the embodiment. Figure 19 is a block diagram showing the functional configuration of the information processing device according to a modified example of the embodiment. Figure 20 is a block diagram showing the functional configuration of the monitoring rule management unit according to a modified example of the embodiment. Figure 21 is a sequence diagram of operation example 3 performed by the information processing system according to a modified example of the embodiment. Figure 22 is a flowchart of operation example 3 performed by the information processing device according to a modified example of the embodiment. Figure 23 is a diagram showing a table showing charge amount information according to a modified example of the embodiment. Figure 24 is a diagram showing a table showing state information according to a modified example of the embodiment. Figure 25 is a flowchart of the processes performed in steps S1102 and S1103 by the management server according to a modified example of the embodiment.Figure 26 is a table showing the correspondence between the degradation state stored in the server storage unit according to a modified embodiment and multiple monitoring conditions (multiple functions). Figure 27 is a table showing the updated multiple monitoring conditions according to a modified embodiment.

[0012] (Knowledge forming the basis of this disclosure) In recent years, the use of electric-powered mobile devices has been increasing. Such mobile devices are, for example, vehicles, and the drive batteries of these vehicles need to be charged by a charger.

[0013] Incidentally, this charger may have vulnerabilities in its communication network. In this case, these vulnerabilities could allow attacks such as overcharging attacks or charging interference attacks to occur, potentially leading to unauthorized control.

[0014] For example, in the event of an overcharge attack, one example of unauthorized control is the overcharging of the drive battery. Overcharging can cause the drive battery to ignite, leading to problems such as a major fire. In the event of a charging disruption attack, another example of unauthorized control is the disruption of charging by reducing the current value when the drive battery is charged by the charger to an extremely low value, for example, to zero. If the charge for charging is determined by the charging time, an extremely low current value can lead to problems such as the battery not charging for a long time while the charge continues to increase.

[0015] When attacks such as overcharging attacks or charging interference attacks occur, the current value when the drive battery is charged by the charger may show an abnormal value. Therefore, it is expected that an attack will occur by monitoring this current value. However, because the current value when charging differs depending on the drive battery's parameters at the start of charging, it is difficult to determine whether the current value is abnormal or not, and it has been difficult to accurately detect abnormalities in drive battery charging.

[0016] Therefore, there is a need to accurately detect abnormalities in the charging of the power batteries of electric-powered mobile devices.

[0017] Therefore, the information processing method according to the first aspect of the present disclosure is an information processing method performed by an information processing device mounted on a mobile body driven by electricity, which acquires current value information indicating the current value when the drive battery of the mobile body is charged by a charger, and parameter information indicating the parameters of the drive battery at the start of charging, determines monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information, detects an abnormality in the current value based on the determined monitoring conditions and the acquired current value information, and outputs abnormality information indicating that an abnormality has been detected when an abnormality is detected.

[0018] This allows monitoring of the current value using monitoring conditions determined based on the parameters of the drive battery at the start of charging, and enables accurate detection of abnormalities in the current value. Therefore, an information processing method is realized that can accurately detect abnormalities in the charging of a mobile device's drive battery.

[0019] For example, in the information processing method according to the second aspect of this disclosure, the parameter is the charge level of the drive battery, in the information processing method according to the first aspect.

[0020] This allows the charge level of the drive battery to be used as a parameter, enabling more accurate detection of abnormal current values. Therefore, an information processing method is realized that can more accurately detect abnormalities in the charging of the drive battery of a mobile device.

[0021] For example, in the information processing method according to the third aspect of this disclosure, in the information processing method according to the first or second aspect, the monitoring condition is a function that indicates a threshold, and in the detection of the abnormality, an overcharge abnormality is detected as the abnormality when the current value is greater than or equal to the threshold indicated by the function.

[0022] This allows the use of a function that indicates a threshold as a monitoring condition, enabling more accurate detection of abnormal current values. As a result, an information processing method is realized that can more accurately detect abnormalities in the charging of the power battery of a mobile device.

[0023] For example, in the information processing method according to the fourth aspect of this disclosure, the function is a function in which the threshold value changes according to the elapsed time from the time when charging of the drive battery by the charger is started.

[0024] This allows the use of a function where the threshold changes depending on the elapsed time from the relevant time as a monitoring condition, enabling more accurate detection of abnormal current values. Therefore, an information processing method is realized that can more accurately detect abnormalities in the charging of a mobile device's drive battery.

[0025] For example, in the information processing method according to the fifth aspect of the present disclosure, in the information processing method according to any one aspect of the first to fourth aspects, when outputting the abnormal information, the abnormal information is output to a display unit provided by the mobile body, and the display unit that has received the outputted abnormal information displays that the abnormality has occurred and the countermeasures to the abnormality.

[0026] This allows users of mobile devices to become aware of an anomaly and take corrective action.

[0027] For example, in the information processing method according to the sixth aspect of this disclosure, if the abnormality is detected in the information processing method according to any one of the first to fifth aspects, a charging termination instruction is output to the charger to instruct it to terminate charging.

[0028] This ensures that charging is terminated even if an abnormality is detected, thus suppressing ignition and fire accidents caused by overcharging of the drive battery.

[0029] For example, in the information processing method according to the seventh aspect of this disclosure, in the information processing method according to the sixth aspect, if charging continues after the charging termination instruction has been output, the circuit between the drive battery and the charger is interrupted.

[0030] As a result, even if charging continues after a charging termination signal has been issued, the circuit will be forcibly shut off, further suppressing ignition and fire accidents.

[0031] For example, in the information processing method according to the eighth aspect of this disclosure, in the information processing method according to any one aspect of the first to seventh aspects, the deterioration state of the drive battery is estimated based on the electrical characteristics of the drive battery, the stored plurality of monitoring conditions are updated to a plurality of monitoring conditions corresponding to the estimated deterioration state, and in determining the monitoring conditions, the monitoring condition for monitoring the current value is determined from among the updated plurality of monitoring conditions based on the parameters indicated by the acquired parameter information.

[0032] This allows monitoring conditions to be used that correspond to the degradation state of the drive battery, enabling more accurate detection of abnormal current values. Therefore, an information processing method is realized that can more accurately detect abnormalities in the charging of the drive battery of a mobile device.

[0033] For example, in the information processing method according to the ninth aspect of this disclosure, in the information processing method according to the eighth aspect, a plurality of monitoring conditions corresponding to the estimated deterioration state are obtained from the management server of the information processing device.

[0034] This enables an information processing method that can obtain multiple monitoring conditions corresponding to the estimated deterioration state from the management server.

[0035] For example, a computer program relating to the tenth aspect of this disclosure is a computer program that causes a computer to execute an information processing method relating to any one aspect of the first to ninth aspects.

[0036] This allows a computer to execute the above information processing method according to a computer program.

[0037] For example, an information processing device according to an eleventh aspect of the present disclosure is an information processing device mounted on a mobile body powered by electricity, comprising: a communication unit that acquires current value information indicating the current value when the drive battery of the mobile body is charged by a charger, and parameter information indicating the parameters of the drive battery at the start of charging; a determination unit that determines monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information; and an abnormality detection unit that detects an abnormality in the current value based on the determined monitoring conditions and the acquired current value information, wherein the communication unit outputs abnormality information indicating that an abnormality has been detected when an abnormality is detected.

[0038] This allows monitoring of the current value using monitoring conditions determined based on the parameters of the drive battery at the start of charging, and enables accurate detection of abnormalities in the current value. Therefore, an information processing device capable of accurately detecting abnormalities in the charging of a mobile vehicle's drive battery is realized.

[0039] These comprehensive or specific embodiments may be implemented as a system, method, integrated circuit, computer program, or recording medium such as a computer-readable CD-ROM, or as any combination of a system, method, integrated circuit, computer program, or recording medium.

[0040] The embodiments will be described in detail below with reference to the drawings.

[0041] The embodiments described below are all comprehensive or specific examples. The numerical values, shapes, materials, components, arrangement and connection configurations of components, steps, and the order of steps shown in the following embodiments are examples only and are not intended to limit this disclosure. Furthermore, any components in the following embodiments that are not described in an independent claim will be described as optional components.

[0042] Please note that each figure is a schematic diagram and not necessarily a strictly accurate representation. Furthermore, in each figure, substantially identical components are denoted by the same reference numerals, and redundant explanations may be omitted or simplified.

[0043] Further, in the present specification, ordinal numbers such as "first" and "second" do not indicate the number or order of components unless otherwise specified, and are used for the purpose of avoiding confusion between components of the same type and distinguishing them.

[0044] (Embodiment) [Configuration] Hereinafter, an information processing system 1 according to the present embodiment will be described.

[0045] First, the configuration of the information processing system 1 according to the present embodiment will be described with reference to Figure 1 and Figure 2. Figure 1 is a block diagram showing the functional configuration of the information processing system 1 according to the present embodiment. Figure 2 is a block diagram showing the functional configuration of the mobile object according to the present embodiment.

[0046] As shown in Figure 1, the information processing system 1 includes a vehicle 10 and a charger 20. The information processing system 1 is a system for detecting an abnormality in charging of a drive battery 301 of the vehicle 10, which is an example of a mobile object driven by electric power. Further, the information processing system 1 is a system that presents countermeasures for the detected abnormality to a user (for example, a driver) of the vehicle 10.

[0047] In the present embodiment, the vehicle 10 is an electric vehicle. More specifically, the vehicle 10 is, for example, a plug-in hybrid vehicle (PHV) or a battery electric vehicle (BEV).

[0048] Further, the mobile object is not limited to the vehicle 10. The mobile object may be any object driven by electric power, and may be, for example, an electric motorcycle, an electric kickboard (also referred to as a specified small motorized bicycle), or an aircraft that flies by a drive battery.

[0049] As shown in Figure 2, the vehicle 10 includes a display unit 100, an information processing device 200, a battery unit 300, and a charging connector connection unit 400.

[0050] The display unit 100 is a display device that displays images indicating an abnormality in the charging of the vehicle's drive battery 301 and countermeasures for this abnormality. This notifies the user of the vehicle 10 (e.g., the driver) of the abnormality and its countermeasures. The display unit 100 is implemented by a display panel such as a liquid crystal panel or an organic EL (Electroluminescence) panel, but is not limited to these. The display unit 100 is an example of a display unit provided in the vehicle 10.

[0051] The information processing device 200 is a device mounted on a mobile body and is a processing device that controls the charging of the drive battery 301 of the battery unit 300 and monitors the status of the drive battery 301.

[0052] The battery unit 300 includes a drive battery 301 and a sensor 302, and is a processing unit that transmits information from the drive battery 301 to the information processing device 200.

[0053] The drive battery 301 is a secondary battery such as a lithium-ion battery, but is not limited to this.

[0054] Sensor 302 is a device that senses the current value when the drive battery 301 is being charged by the charger 20. The current value sensed by sensor 302 is output to the information processing device 200. More specifically, first current value information indicating the sensed current value is output from the battery unit 300 to the information processing device 200. It is preferable that sensor 302 senses the current value at a predetermined period. The predetermined period may be, for example, several milliseconds or more and tens of seconds or less, for example, 1 second. It is preferable that first current value information indicating the sensed current value is output each time sensor 302 senses. The first current value information is an example of current value information.

[0055] Furthermore, the sensor 302 may also sense the voltage value when the drive battery 301 is being charged by the charger 20, and voltage information indicating this voltage value may be output from the battery unit 300 to the information processing device 200. The sensor 302 may also sense the temperature of the drive battery 301, and temperature information indicating this temperature may be output from the battery unit 300 to the information processing device 200.

[0056] Sensor 302 may sense the electrical characteristics of the drive battery 301. The battery unit 300 may calculate the charge level of the drive battery 301. For example, the battery unit 300 may calculate the charge level of the drive battery 301 from the electrical characteristics sensed by sensor 302. Charge level information indicating this charge level may be output from the battery unit 300 to the information processing device 200.

[0057] Furthermore, the battery unit 300 may output parameter information to the information processing device 200 indicating the parameters of the drive battery 301 at the start of charging by the charger 20. In this embodiment, the parameter is the charge rate of the drive battery 301, and the parameter information is charge rate information indicating the charge rate of the drive battery 301 at the start of charging by the charger 20. Note that the start of charging is not limited to the exact moment when charging begins, but also includes, for example, the time from when the information processing device 200 instructs the charger 20 to start charging until charging actually begins.

[0058] The charging connector connection section 400 is a charging port connected to the charger 20. The charging connector connection section 400 and the information processing device 200 are connected by a communication line, i.e., they can communicate with each other. The charging connector connection section 400 and the battery section 300 are connected by a power line. Furthermore, the charging connector connection section 400 and the charger 20 are connected by a communication line, i.e., they can communicate with each other.

[0059] The charging connector connection section 400 has a shut-off section that physically interrupts the power supply from the charger 20 to the battery section 300. This shut-off section is, for example, a fuse, but is not limited to that. The shut-off section is located in the electrical circuit between the drive battery 301 and the charger 20 and can interrupt the electrical circuit.

[0060] The charger 20 is a device for charging the drive battery 301 of the mobile vehicle. The charger 20 is also equipped with a charging cable and a connector, and when the charger 20 is connected to the vehicle 10 (more specifically, the charging connector connection part 400) via the connector, the drive battery 301 of the vehicle 10 is charged.

[0061] The charger 20 may output charging data to the charging connector connection section 400 at the predetermined intervals described above. The charging data includes information that the charger that output the charging data is the charger 20, second current value information, and voltage value information. The second current value information indicates the current value when the drive battery 301 is charged by the charger 20. More specifically, the second current value information indicates the current value when it is supplied from the charger 20 to the charging connector connection section 400. The second current value information is an example of current value information. The voltage value information included in the charging data indicates the voltage value when the drive battery 301 is charged by the charger 20. More specifically, this voltage value information indicates the voltage value when it is supplied from the charger 20 to the charging connector connection section 400.

[0062] Furthermore, the information processing device 200 according to this embodiment will be described with reference to Figure 3.

[0063] Figure 3 is a block diagram showing the functional configuration of the information processing device 200 according to this embodiment.

[0064] The information processing device 200 includes a communication unit 210, a power control unit 220, a monitoring rule management unit 230, an anomaly detection unit 240, and an anomaly response unit 250.

[0065] The communication unit 210 is a processing unit for the information processing device 200 to communicate with the display unit 100, the battery unit 300, and the charging connector connection unit 400. The communication unit 210, for example, acquires first current value information and parameter information (charge rate information) from the battery unit 300. The communication unit 210 may acquire first current value information each time the sensor 302 senses something. The communication unit 210 acquires charging data from the charging connector connection unit 400.

[0066] The power control unit 220 is a processing unit that controls the charging of the drive battery 301 and manages the state of the drive battery 301.

[0067] The monitoring rule management unit 230 is a processing unit that manages the monitoring rules applied to the information processing device 200. Monitoring rules are rules for detecting attacks against the charger 20. More specifically, monitoring rules include rules for detecting overcharge attacks or rules for detecting charging interference attacks. For example, the monitoring rule management unit 230 applies rules for detecting overcharge attacks to the information processing device 200. In this embodiment, an example in which rules for detecting overcharge attacks are applied to the information processing device 200 will be described below.

[0068] Furthermore, the monitoring rule management unit 230 may also acquire parameter information obtained by the communication unit 210. Based on the parameters indicated by the acquired parameter information, the monitoring rule management unit 230 determines the monitoring conditions for monitoring the current value.

[0069] The monitoring rule management unit 230 will be explained in more detail using Figure 4.

[0070] Figure 4 is a block diagram showing the functional configuration of the monitoring rule management unit 230 according to this embodiment.

[0071] The monitoring rule management unit 230 includes a monitoring rule output unit 232, a monitoring rule storage unit 233, a determination unit 234, and a function list storage unit 235.

[0072] The monitoring rule storage unit 233 is a storage device that stores monitoring rules applied to the information processing device 200. Figure 5 is a diagram showing a table of monitoring rules according to this embodiment. For example, the table shown in Figure 5 is stored in the monitoring rule storage unit 233.

[0073] Figure 5 shows the names of the two monitoring rules mentioned above. Furthermore, Figure 5 includes the abnormal conditions, which indicate the conditions for detecting an anomaly, and the abnormal handling procedures, which indicate how to handle an anomaly when it occurs.

[0074] For example, if the monitoring rule is to detect an overcharge attack, the abnormal condition is that the current value is above a threshold. The abnormal processing involves outputting a charge termination command to the charger 20 to stop charging, and outputting abnormal information to the display unit 100. The abnormal information indicates that an abnormality has been detected.

[0075] If the monitoring rule is to detect a charging interference attack, the abnormal condition is that the current value is less than 10% of the threshold for one hour or more. In addition, the abnormal processing involves outputting a charging termination command to the charger 20 to stop charging, and outputting abnormal information to the display unit 100.

[0076] Furthermore, as described above, in this embodiment, the information processing device 200 is subject to a rule for detecting overcharge attacks, and the monitoring rule storage unit 233 also stores that the rule has been applied to the information processing device 200.

[0077] The determination unit 234 is a processing unit that determines monitoring conditions for monitoring the current value when the drive battery 301 is being charged by the charger 20. The determination unit 234 may acquire parameter information obtained by the communication unit 210. Based on the parameters indicated by the acquired parameter information, the determination unit 234 determines the monitoring conditions for monitoring the current value. In this embodiment, the monitoring conditions are functions that indicate thresholds.

[0078] The function list storage unit 235 is a storage device that stores functions indicating thresholds, which are monitoring conditions. Here, the monitoring conditions according to this embodiment will be explained with reference to Figure 6.

[0079] Figure 6 is a diagram showing a table illustrating multiple monitoring conditions according to this embodiment. More specifically, Figure 6 shows multiple monitoring conditions when the monitoring rule is the detection of an overcharge attack.

[0080] In this embodiment, the determination unit 234 determines the monitoring conditions for monitoring the current value based on the parameters indicated by the parameter information. More specifically, the parameter is the charge rate of the drive battery 301, and the parameter information is charge rate information indicating the charge rate of the drive battery 301 at the start of charging by the charger 20. Therefore, the determination unit 234 determines the monitoring conditions for monitoring the current value based on the charge rate of the drive battery 301 at the start of charging, as indicated by the charge rate information. The monitoring conditions are a function that indicates a threshold. This function is also a time function that changes over time.

[0081] The determination unit 234 determines a monitoring condition function based on the charge rate of the drive battery 301 at the start of charging (hereinafter sometimes referred to as the initial charge rate). As shown in Figure 6, the function list storage unit 235 stores a set of the initial charge rate and the function corresponding to that initial charge rate. For example, the function corresponding to an initial charge rate of 0% is f0(t), and the function corresponding to an initial charge rate of 98% is f98(t). In the function, the number following f indicates the value of the initial charge rate. Also, in Figure 6, the functions f0(t), f1(t), f98(t), and f99(t), which correspond to initial charge rates of 0%, 1%, 98%, and 99%, respectively, are shown, but the function list storage unit 235 also stores functions corresponding to initial charge rates of 2% to 97%. t represents time. More specifically, t is the elapsed time with the time when charging started being 0 seconds. In each of the multiple functions shown in Figure 6, a current value is shown every second. This current value is the threshold value shown in the monitoring condition function. In other words, the monitoring condition function is a function in which the threshold value changes depending on the elapsed time since the charging of the drive battery 301 by the charger 20 began.

[0082] Thus, the function list storage unit 235 stores multiple functions, that is, multiple monitoring conditions.

[0083] The determination unit 234 determines one monitoring condition from a plurality of monitoring conditions stored in the function list storage unit 235 based on the initial charge level. For example, when the initial charge level is 0%, the determination unit 234 determines the function f0(t) as one monitoring condition.

[0084] Figure 6 shows the monitoring conditions (multiple monitoring conditions) when the monitoring rule is for detecting overcharge attacks. However, if the monitoring rule is for detecting charging interference attacks, different monitoring conditions (multiple monitoring conditions) than those shown in Figure 6 should be used. Therefore, it can be said that the determination unit 234 determines the monitoring conditions for monitoring the current value based on the parameters indicated by the parameter information and the monitoring rule applied to the information processing device 200. Unless otherwise specified, the following description will focus on an example where the monitoring rule is for detecting overcharge attacks.

[0085] The monitoring rule output unit 232 then outputs the determined monitoring conditions.

[0086] Let's go back to Figure 3 and explain again.

[0087] The anomaly detection unit 240 is a processing unit that detects anomalies. The anomaly detection unit 240 may acquire first current value information and charging data (second current value information) acquired by the communication unit 210. The anomaly detection unit 240 may acquire monitoring conditions output by the monitoring rule output unit 232 of the monitoring rule management unit 230. The anomaly detection unit 240 detects anomalies in the current value based on the determined monitoring conditions and the acquired current value information. When a monitoring rule is applied to the information processing device 200 by the monitoring rule management unit 230, the anomaly detection unit 240 detects an anomaly related to the applied rule. For example, when a rule for detecting an overcharge attack is applied to the information processing device 200 by the monitoring rule management unit 230, the anomaly detection unit 240 detects an anomaly related to the overcharge attack.

[0088] The current value information used by the abnormality detection unit 240 to detect abnormalities may be either the first current value information or the second current value information included in the charging data.

[0089] The anomaly response unit 250 is a processing unit that outputs anomaly information indicating that an anomaly has been detected when an anomaly is detected by the anomaly detection unit 240. For example, the anomaly response unit 250 controls the communication unit 210 to output the anomaly information to the display unit 100. The display unit 100, having received the outputted anomaly information, displays that an anomaly has occurred and the countermeasures to address the anomaly.

[0090] Next, we will describe operation examples 1 and 2 relating to the information processing method executed by the information processing system 1 (more specifically, the information processing device 200) according to this embodiment.

[0091] Note that the processes in Operation Example 1 and Operation Example 2 are performed each time the drive battery 301 is charged, meaning they are performed multiple times. Therefore, it is possible that the same process as in Operation Example 1 may have already been performed before Operation Example 1 is executed.

[0092] [Operation Example 1] Operation Example 1 is an example of operation in which no abnormality in the charging of the drive battery 301 was detected.

[0093] Figure 7 is a sequence diagram of an example operation 1 performed by the information processing system 1 according to this embodiment.

[0094] First, the information processing device 200 instructs the charger 20 to charge via the charging connector connection section 400 (S101). For example, after the user of vehicle 10 connects the connector of the charger 20 to the charging connector connection section 400, the power control unit 220 of the information processing device 200 controls the communication unit 210 to output a charging instruction to the charger 20. This charging instruction includes a current command value, which is the current value for charging. The charging instruction also indicates that the vehicle that output the charging instruction is vehicle 10, a voltage command value, which is the voltage value for charging, and the charge level of the vehicle 10's drive battery 301.

[0095] The information processing device 200 acquires the parameters of the drive battery 301, more specifically, the charge level of the drive battery 301 (S102). Here, the information processing device 200 acquires parameter information indicating the parameters, and more specifically, charge level information indicating the charge level at the start of charging, from the battery unit 300. It can also be said that in step S102, the information processing device 200 confirms the charge level of the drive battery 301.

[0096] The monitoring rule management unit 230 of the information processing device 200 determines the monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information (S103). Here, the determination unit 234 of the monitoring rule management unit 230 determines the monitoring conditions for monitoring the current value based on the charge rate of the drive battery 301 at the start of charging, as indicated by the charge rate information.

[0097] As mentioned above, there are cases where the same process as in Operation Example 1 shown in Figure 7 is performed before Operation Example 1 is performed. In this case, it is preferable that the monitoring conditions determined in the previous operation are stored in the monitoring rule storage unit 233, and further, that the monitoring conditions determined in the previous operation are modified (updated) by the monitoring conditions determined in step S103 shown in Operation Example 1. It is also preferable that the charge rate used to determine the monitoring conditions in the previous operation, that is, the charge rate of the drive battery 301 at the start of charging in the previous operation, is also stored in the monitoring rule storage unit 233.

[0098] The monitoring rule output unit 232 outputs the determined monitoring conditions, and the anomaly detection unit 240 acquires the outputted monitoring conditions. The anomaly detection unit 240 also acquires the current value information obtained by the communication unit 210.

[0099] Then, the charger 20 starts charging the drive battery 301 (S104), and the abnormality detection unit 240 of the information processing device 200 monitors the charging status of the drive battery 301 (S105).

[0100] In step S105, the abnormality detection unit 240 determines whether or not there is an abnormality in the current value when the drive battery 301 is being charged, based on the monitoring conditions determined by the determination unit 234 and the current value information acquired by the communication unit 210.

[0101] While the drive battery 301 is being charged, charge rate information is sequentially output from the battery unit 300 to the information processing device 200. The power control unit 220 of the information processing device 200 then acquires the outputted charge rate information and determines whether the charge rate indicated by the charge rate information has reached the target value.

[0102] When the charge level reaches the target value, the power control unit 220 of the information processing device 200 instructs the charger 20 to complete charging normally via the charging connector connection unit 400 (S106). For example, the power control unit 220 controls the communication unit 210 to output a normal completion instruction that instructs the charger 20 to complete charging normally. The normal completion instruction is an instruction to control the charger 20 to complete charging normally. The normal completion instruction may also include information indicating that charging has been completed normally. When the charger 20 receives the normal completion instruction, it terminates charging the drive battery 301 (S107).

[0103] [Operation Example 2] Operation Example 2 is an example of an operation in which an abnormality in the charging of the drive battery 301 is detected.

[0104] Figure 8 is a sequence diagram of an example operation 2 performed by the information processing system 1 according to this embodiment.

[0105] As shown in Figure 8, the process from steps S101 to S105 is carried out in the same manner as in Figure 7.

[0106] Then, due to a vulnerability in the communication network of the charger 20, the charger 20 is subjected to unauthorized control, and an overcharge attack is initiated (S206). In this case, the charger 20 charges the drive battery 301 with a current value greater than the current command value included in the charging instruction output in step S101.

[0107] The abnormality detection unit 240 detects an abnormality (S207). Here, the abnormality detection unit 240 detects that there is an abnormality in the current value when the drive battery 301 is being charged, based on the determined monitoring conditions and the acquired current value information.

[0108] When an anomaly is detected by the anomaly detection unit 240, the anomaly response unit 250 outputs anomaly information. For example, the anomaly response unit 250 controls the communication unit 210 to output the anomaly information to the display unit 100. As a result, the display unit 100 displays that an anomaly has occurred (S208). In other words, the anomaly information also serves as instruction information to display an anomaly alert on the display unit 100.

[0109] The power control unit 220 of the information processing device 200 instructs the charger 20 to terminate charging via the charging connector connection unit 400 (S209). For example, the power control unit 220 controls the communication unit 210 to output a charge termination instruction to the charger 20. The charge termination instruction is an instruction to control the charger 20 to terminate charging. The charge termination instruction may also include information indicating that an abnormality has occurred during charging.

[0110] As described above, the information processing method according to this embodiment outputs a charging termination instruction to the charger 20 when an abnormality is detected, instructing it to terminate charging.

[0111] This ensures that charging is terminated even if an abnormality is detected, thereby suppressing ignition and fire accidents caused by overcharging of the drive battery 301.

[0112] Note that even if the charger 20 receives a charging completion instruction, it may not terminate charging of the drive battery 301.

[0113] The power control unit 220 of the information processing device 200 instructs the charging connector connection unit 400 to forcibly terminate charging (S210) if charging to the drive battery 301 continues after the charging termination instruction in step S209 is output. For example, the power control unit 220 controls the communication unit 210 to output a forced termination instruction to the charging connector connection unit 400 to forcibly terminate charging. When the charging connector connection unit 400 receives the forced termination instruction, it uses the interruption unit of the charging connector connection unit 400 to interrupt the electrical circuit between the drive battery 301 and the charger 20.

[0114] As described above, the information processing method according to this embodiment disconnects the electrical circuit between the drive battery 301 and the charger 20 when charging continues after a charging completion instruction has been output.

[0115] This ensures that even if charging continues after a charging termination signal is issued, the electrical circuit is forcibly shut off, further reducing the risk of ignition and fire accidents.

[0116] Furthermore, examples 1 and 2 of operation will be explained using Figure 9.

[0117] Figure 9 is a flowchart showing examples 1 and 2 of operations performed by the information processing device 200 according to this embodiment. In other words, Figure 9 is a diagram that provides a more detailed explanation of the operations of the information processing device 200 in operation example 1 shown in Figure 7 and operation example 2 shown in Figure 8.

[0118] First, steps S101 and S102 are performed.

[0119] Then the process in step S103 is performed.

[0120] Figure 10 is a flowchart of the process in step S103 performed by the information processing device 200 according to this embodiment.

[0121] As described above, the same processing as in Operation Example 1 shown in Figures 7 and 9 may have already been performed before Operation Example 1 is executed. In this case, the monitoring conditions determined in the previous operation are stored in the monitoring rule storage unit 233. In addition, the charge level used to determine the monitoring conditions in the previous operation, that is, the charge level of the drive battery 301 at the start of charging in the previous operation (hereinafter sometimes referred to as the charge level in the previous operation), is also stored in the monitoring rule storage unit 233.

[0122] The determination unit 234 determines whether the charge level in the previous operation is different from the charge level at the start of charging, which is shown in the charge level information obtained in step S102 shown in Figure 9 (hereinafter sometimes referred to as the charge level in the current operation) (S401).

[0123] If the charge level in the previous operation is different from the charge level in the current operation (Yes in step S401), the determination unit 234 of the monitoring rule management unit 230 performs the following processing. That is, the determination unit 234 determines the monitoring conditions for monitoring the current value based on the charge level of the drive battery 301 at the start of charging, as indicated by the charge level information acquired in step S102 (S402).

[0124] The determination unit 234 determines one monitoring condition from a plurality of monitoring conditions stored in the function list storage unit 235 based on the initial charge level. The determined monitoring condition is then stored in the monitoring rule storage unit 233. In other words, it is desirable that the monitoring condition determined in the previous operation be changed (updated) by the monitoring condition determined in step S402.

[0125] In step S402, as an example, if the charge rate of the drive battery 301 at the start of charging (initial charge rate) indicated by the charge rate information is 90%, the determination unit 234 determines f90(t), which is a function corresponding to an initial charge rate of 90%, as the monitoring condition. If the answer in step S401 is No, the process in step S402 is not performed.

[0126] Let's go back to Figure 9 and explain again.

[0127] Then, the process in step S105 is performed.

[0128] Next, the abnormality detection unit 240 determines whether or not an abnormality has occurred (S301). That is, the abnormality detection unit 240 determines whether or not an abnormality has been detected.

[0129] Figure 11 is a flowchart of the process of step S301 performed by the information processing device 200 according to this embodiment.

[0130] First, the communication unit 210 acquires the charging data output from the charger 20 (S501).

[0131] Next, the abnormality detection unit 240 determines whether the current value indicated by the second current value information included in the acquired charging data is equal to or greater than the threshold value indicated by the monitoring condition function determined in step S402 (S502). The abnormality detection unit 240 determines that an abnormality has occurred if the current value is equal to or greater than the threshold value, and more specifically, determines that an overcharge abnormality has occurred. The abnormality detection unit 240 also determines that it is normal if the current value is less than the threshold value.

[0132] Figure 12 is a diagram showing a table containing two communication data sets exchanged between the vehicle 10 and the charger 20 according to this embodiment.

[0133] Figure 12 shows the communication data output from the vehicle 10 to the charger 20, and the charging data, which is the communication data output from the charger 20 to the vehicle 10. The communication data output from the vehicle 10 to the charger 20 is data indicating the charging instruction.

[0134] The abnormality detection unit 240 performs the process in step S502 each time charging data is acquired, for example, every second.

[0135] In step S502, the abnormality detection unit 240 calculates a threshold value indicated by the function f90(t) determined in step S402 every second, and determines whether the current value indicated by the second current value information is greater than or equal to the calculated threshold value.

[0136] Figure 13 is a table showing the abnormality determination results by the abnormality detection unit 240 according to this embodiment. Figure 13 is also a table showing the state transitions in abnormality detection.

[0137] The time shown in Figure 13 indicates the current time when charging is taking place and is used to calculate the elapsed time since the start of charging in step S104. The flag shown in Figure 13 indicates the charging status at that time. The charging start time (17:00:00 in Figure 13) and the charging start flag are linked and stored, for example, in the memory of the abnormality detection unit 240, and used to calculate the elapsed time. The charging current value shown in Figure 13 indicates the current value indicated by the second current value information included in the charging data at that time. The charging voltage value shown in Figure 13 indicates the voltage value indicated by the voltage value information included in the charging data at that time. The charge rate of the drive battery shown in Figure 13 indicates the charge rate indicated by the charge rate information at that time. The function shown in Figure 13 indicates the function determined in step S402. The threshold value shown in Figure 13 indicates the threshold value indicated by the function at that time. The abnormality judgment result shown in Figure 13 indicates the result of the abnormality judgment by the abnormality detection unit 240 at that time. In Figure 13, if an abnormality is detected, the abnormality detection result is indicated as "abnormal," and if the system is determined to be normal, the abnormality detection result is indicated as "normal."

[0138] Let's return to Figure 11 and explain again.

[0139] As described above, in step S502, the abnormality detection unit 240 determines whether the current value indicated by the second current value information is equal to or greater than the threshold indicated by the function which is the monitoring condition. If the current value is less than the threshold (No in step S502), the abnormality detection unit 240 determines that it is normal (S503).

[0140] Furthermore, the power control unit 220 determines whether the charge rate indicated by the charge rate information acquired by the communication unit 210 has reached the target value, that is, whether charging has been completed (S505).

[0141] When the charge level reaches the target value (Yes in step S505), the power control unit 220 instructs the charger 20 to complete charging normally via the charging connector connection unit 400, as shown in step S106, and the process ends.

[0142] If the charge level has not reached the target value (No in step S505), the process from step S501 onwards is repeated.

[0143] Furthermore, if the current value indicated by the second current value information is greater than or equal to the threshold (Yes in step S502), the abnormality detection unit 240 determines that an abnormality has occurred (S504). Then, the processing from step S208 onwards is carried out.

[0144] Furthermore, the process in step S504 can be described in more detail as follows.

[0145] Figure 13 indicates that an abnormality has been determined to have occurred at the time 17:01:06. However, the processing from step S208 onward, such as the output of the charging end instruction and forced termination instruction in steps S209 and S210 of Figure 8, does not necessarily have to be performed at the same time that an abnormality is determined to have occurred. For example, if the period during which an abnormality is determined to have occurred is longer than a predetermined time, the processing from step S208 onward may be performed. The predetermined time is, for example, a few seconds to a dozen seconds or less. In Figure 13, an abnormality is determined to have occurred from the time 17:01:06 to 17:01:10, but the processing from step S208 onward does not necessarily have to be performed.

[0146] Let's go back to Figure 9 and explain again.

[0147] Next, in step 208, the display unit 100 displays that an abnormality has occurred.

[0148] Figure 14 shows an image displayed on the display unit 100 according to this embodiment.

[0149] In step S504, if it is determined that an abnormality has occurred, the abnormality response unit 250 controls the communication unit 210 to output abnormality information to the display unit 100. The display unit 100, having received the outputted abnormality information, displays that an abnormality has occurred and the countermeasures for the abnormality. As an example, the display unit 100 displays the image shown in Figure 14.

[0150] In other words, the display unit 100 displays a message indicating that an abnormality has occurred and that the device is being overcharged. The display unit 100 also displays a message indicating that it will stop charging as a countermeasure against the abnormality and that it will advise the user not to use the charger 20.

[0151] As described above, the information processing method according to this embodiment outputs abnormal information to a display unit (display unit 100) provided by the mobile device, and the display unit that receives the outputted abnormal information displays that an abnormality has occurred and the countermeasures to address the abnormality.

[0152] This allows users of mobile devices to become aware of an anomaly and take corrective action.

[0153] Then, the processes shown in steps S209 and S210 in Figure 9 are carried out.

[0154] Figure 15 is a flowchart of the process in step S210 performed by the information processing device 200 according to this embodiment.

[0155] The power control unit 220 determines whether charging of the drive battery 301 continues even after the charging termination instruction in step S209 is output (S601). The power control unit 220 performs the processing in step S601 based on the current value indicated by the second current value information included in the charging data acquired by the communication unit 210.

[0156] The power control unit 220 determines that charging is continuing if the current value indicated by the second current value information included in the charging data acquired by the communication unit 210 is greater than 0, and determines that charging has ended if the current value is 0.

[0157] If it is determined that charging is continuing (Yes in step S601), the power control unit 220 instructs the charging connector connection unit 400 to forcibly terminate charging, that is, outputs a forced termination instruction to the charging connector connection unit 400. When the charging connector connection unit 400 receives the forced termination instruction, it uses the interruption unit of the charging connector connection unit 400 to interrupt the circuit between the drive battery 301 and the charger 20. That is, the charging connector connection unit 400 blows the fuse (S602). If the answer in step S601 is No, the process in step S602 is not performed.

[0158] As described above, the information processing method executed by the information processing device 200 according to this embodiment acquires current value information and parameter information, and determines monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information. Furthermore, the information processing method according to this embodiment detects an abnormality in the current value based on the determined monitoring conditions and the acquired current value information, and outputs abnormality information indicating that an abnormality has been detected.

[0159] This allows monitoring of the current value using monitoring conditions determined based on the parameters of the drive battery 301 at the start of charging, and enables accurate detection of abnormalities in the current value. Therefore, an information processing method and information processing device 200 are realized that can accurately detect abnormalities in the charging of the drive battery 301 of a mobile device.

[0160] Furthermore, the parameter is the charge level of the drive battery 301.

[0161] This allows the charge level of the drive battery 301 to be used as a parameter, enabling more accurate detection of abnormalities in the current value.

[0162] Furthermore, the monitoring condition is a function that indicates a threshold, and in anomaly detection, an overcharge anomaly is detected when the current value is greater than or equal to the threshold indicated by the function.

[0163] This allows for the use of a function that indicates a threshold as a monitoring condition, enabling more accurate detection of abnormal current values.

[0164] (Modifications) Modifications of the embodiment will be described below. In the following, the differences from the embodiment will be the main focus of the explanation, and the similarities will be omitted or simplified.

[0165] Figure 16 is a block diagram showing the functional configuration of the information processing system 1a according to this modified example. Figure 17 is a block diagram showing the functional configuration of the mobile body according to this modified example.

[0166] As shown in Figure 16, the information processing system 1a comprises a vehicle 10a, a charger 20, and a management server 30.

[0167] First, let me explain the outline of this modified example.

[0168] In this modified example, the process involves estimating the degradation state of the drive battery 301 based on its electrical characteristics, and updating the stored monitoring conditions to match the estimated degradation state. Furthermore, from among the updated monitoring conditions, the process determines which monitoring condition monitors the current value based on the parameters indicated by the acquired parameter information.

[0169] Here, the information processing device 1200 in the vehicle 10a estimates the degradation state of the drive battery 301 based on its electrical characteristics. The information processing device 1200 outputs status information indicating the estimated degradation state to the management server 30. The management server 30 is a server device that manages the information processing device 1200.

[0170] The management server 30 acquires the outputted status information. Based on the acquired status information, the management server 30 determines whether or not it is necessary to update the monitoring conditions used for detecting abnormalities. If it is determined that it is necessary, the management server 30 determines the monitoring conditions (multiple monitoring conditions) based on the deterioration state indicated by the acquired status information. The monitoring conditions based on the deterioration state are the monitoring conditions to be used after the update. If it is determined that it is necessary, the management server 30 outputs an update instruction to the vehicle 10a to instruct it to update. This update instruction indicates multiple monitoring conditions corresponding to the estimated deterioration state, that is, multiple monitoring conditions to be used after the update.

[0171] Then, in vehicle 10a, multiple monitoring conditions are updated based on the update instructions output from the management server 30.

[0172] The information processing system 1a related to this modified example will be described in detail below.

[0173] The management server 30 is a server device that acquires status information indicating the status of the drive battery 301 output from the vehicle 10a.

[0174] Figure 18 is a block diagram showing the functional configuration of the management server 30 according to this modified example. The management server 30 includes a communication unit 310, an update determination unit 320, and a server storage unit 330.

[0175] The communication unit 310 is a processing unit that enables the management server 30 to communicate with the vehicle 10a. For example, the communication unit 310 acquires status information from the vehicle 10a and outputs an update instruction to the vehicle 10a.

[0176] The update determination unit 320 determines whether or not it is necessary to update the monitoring conditions based on the status information acquired from the vehicle 10a. If it is determined that an update is necessary, the update determination unit 320 determines monitoring conditions (more specifically, multiple monitoring conditions) based on the deterioration state indicated by the acquired status information.

[0177] The server memory unit 330 is a memory device that stores functions that indicate thresholds, which are monitoring conditions. More specifically, the server memory unit 330 stores multiple monitoring conditions, i.e., multiple functions. Furthermore, in the server memory unit 330, the multiple functions are stored in multiple sets. Each of the multiple sets corresponds to a degradation state indicated by the state information. For example, the server memory unit 330 stores a first set 331 corresponding to a first degradation state and a second set 332 corresponding to a second degradation state different from the first degradation state. The first set 331 contains multiple monitoring conditions (multiple functions), and the second set 332 contains other multiple monitoring conditions (other multiple functions).

[0178] The update determination unit 320 determines one set from among multiple sets stored in the server storage unit 330 based on the degradation state indicated by the status information. That is, the update determination unit 320 determines this one set (multiple functions) as monitoring conditions (more specifically, multiple monitoring conditions) based on the degradation state.

[0179] Next, let's describe vehicle 10a.

[0180] Vehicle 10a includes a display unit 100, an information processing device 1200, a battery unit 300, a charging connector connection unit 400, and a server connection unit 1500.

[0181] The server connection unit 1500 is a processing unit for the information processing device 1200 to communicate with the management server 30. The server connection unit 1500 outputs the status information to the management server 30. Furthermore, the server connection unit 1500 acquires update instructions output from the management server 30.

[0182] Furthermore, the information processing device 1200 will be explained with reference to Figures 19 and 20.

[0183] Figure 19 is a block diagram showing the functional configuration of the information processing device 1200 according to this modified example. Figure 20 is a block diagram showing the functional configuration of the monitoring rule management unit 1230 according to this modified example.

[0184] The information processing device 1200 has the same configuration as the information processing device 200, except that it has a monitoring rule management unit 1230 instead of a monitoring rule management unit 230. The communication unit 210 in this modified example is a processing unit for the information processing device 200 to communicate with the display unit 100, the battery unit 300, the charging connector connection unit 400, and the server connection unit 1500.

[0185] The monitoring rule management unit 1230 can perform the same processing as the monitoring rule management unit 230 according to the embodiment. The monitoring rule management unit 1230 further updates a plurality of monitoring conditions stored in the function list storage unit 235 based on an update instruction output from the management server 30.

[0186] The monitoring rule management unit 1230 has the same configuration as the monitoring rule management unit 230, except that it also includes an update unit 1236.

[0187] The update unit 1236 updates the monitoring conditions based on the update instruction output from the management server 30 and acquired by the communication unit 210. More specifically, the update unit 1236 updates the multiple monitoring conditions stored in the function list storage unit 235 before the update instruction was acquired to the multiple monitoring conditions indicated by the acquired update instruction. Therefore, after the update, the function list storage unit 235 stores the multiple monitoring conditions indicated by the update instruction.

[0188] Next, we will describe an example of operation 3 relating to the information processing method executed by the information processing system 1a (more specifically, the information processing device 1200) related to this modified example.

[0189] [Operation Example 3] Operation Example 3 is, for example, a process performed after Operation Examples 1 and 2 according to the embodiment have been performed, but is not limited to this. Operation Example 3 is an operation example in which a plurality of monitoring conditions stored in the function list storage unit 235 before Operation Example 3 is performed are updated based on an update instruction output from the management server 30 in Operation Example 3.

[0190] Figure 21 is a sequence diagram of an example operation 3 performed by the information processing system 1a according to this modified form.

[0191] First, the vehicle 10a estimates the degradation state of the drive battery 301 and outputs status information indicating the estimated degradation state to the management server 30 (S1101). The management server 30 acquires the outputted status information.

[0192] Next, the management server 30 determines, based on the acquired status information, whether or not it is necessary to update the multiple monitoring conditions stored in the function list storage unit 235 of the monitoring rule management unit 1230 of the information processing device 1200 provided by the vehicle 10a (S1102).

[0193] If deemed necessary, the management server 30 determines several monitoring conditions based on the degradation status indicated by the acquired status information.

[0194] The management server 30 then outputs an update instruction to the vehicle 10a to instruct it to perform the update (S1103).

[0195] Furthermore, the information processing device 1200 of the vehicle 10a updates the monitoring conditions (multiple monitoring conditions) based on the update instruction output from the management server 30 (S1104).

[0196] Subsequently, the vehicle 10a and the charger 20 perform the processing of operation example 1 or operation example 2.

[0197] Furthermore, we will explain example 3 of the operation using Figure 22.

[0198] Figure 22 is a flowchart of operation example 3 performed by the information processing device 1200 according to this modified example.

[0199] First, the process in step S1101 is performed.

[0200] More specifically, in step S1101, first, the sensor 302 of the battery unit 300 senses the charge level of the drive battery 301. The battery unit 300 outputs charge level information to the information processing device 200 (more specifically, the communication unit 210), which indicates the charge level of the drive battery 301 of the battery unit 300, that is, the charge level sensed by the sensor 302.

[0201] Figure 23 is a diagram showing a table containing charge amount information related to this modified example. The charge amount information is communication data output from the battery unit 300 to the information processing device 1200. The charge amount information shows the voltage, charge amount, and charge rate of the drive battery 301 sensed by the sensor 302. The charge amount information can also be said to be information that shows the electrical characteristics of the drive battery 301.

[0202] The communication unit 210 then acquires charge amount information output from the battery unit 300. The power control unit 220 estimates the degradation state of the drive battery 301 based on the acquired charge amount information, i.e., the electrical characteristics of the drive battery 301.

[0203] Here, the power control unit 220 calculates the maximum charge amount of the drive battery 301 using the charge amount and charge rate indicated by the charge amount information. The maximum charge amount is calculated by the following formula.

[0204] Maximum charge amount = Charge amount / (Charge rate / 100)

[0205] For example, in the charge amount information shown in Figure 23, the calculated maximum charge amount is 70 kWh.

[0206] In this modified example, the maximum charge level is used as an indicator of the degradation state. A smaller maximum charge level indicates that the capacity of the drive battery 301 has decreased due to degradation, meaning the degree of degradation is greater. Conversely, a larger maximum charge level indicates that the degradation has not progressed significantly and the capacity of the drive battery 301 remains large, meaning the degree of degradation is less.

[0207] The status information indicates the estimated degradation state, and more specifically, the maximum charge level. In step S1101, this status information is output.

[0208] Figure 24 is a diagram showing a table representing the status information related to this modified example. The status information is communication data output from the vehicle 10a (information processing device 1200) to the management server 30. As shown in Figure 24, the status information includes the maximum charge amount. The status information may also include a function label. The function label indicates the monitoring conditions determined in step S103 of operation examples 1 and 2, which were performed before operation example 3. Here, the function label indicates the initial charge rate (t), and for example, it indicates one of the multiple functions shown in Figure 6.

[0209] Furthermore, if Operation Examples 1 and 2 have not been performed even once before Operation Example 3 is performed, the function label will be blank.

[0210] Then, the monitoring rule management unit 1230 determines whether the communication unit 210 has received the update instruction output from the management server 30 (S1202). In other words, the monitoring rule management unit 1230 determines whether the server connection unit 1500 has received the update instruction and whether the communication unit 210 has received it.

[0211] If an update instruction is received by the communication unit 210 (Yes in step S1202), the process in step S1104 is performed. That is, the information processing device 1200 updates the monitoring conditions (multiple monitoring conditions) based on the update instruction output from the management server 30 (S1104). More specifically, the update unit 1236 of the monitoring rule management unit 1230 updates the multiple monitoring conditions that were stored in the function list storage unit 235 before the update instruction was received to the multiple monitoring conditions indicated by the received update instruction.

[0212] In other words, the information processing method according to this modified example obtains multiple monitoring conditions corresponding to the estimated deterioration state from the management server 30. Here, the communication unit 210 obtains an update instruction from the management server 30 indicating multiple monitoring conditions corresponding to the estimated deterioration state.

[0213] This enables an information processing method that can obtain multiple monitoring conditions corresponding to the estimated deterioration state from the management server 30.

[0214] Then, the vehicle 10a and the charger 20 perform the processing of operation example 1 or operation example 2. For example, in step S103 of operation examples 1 and 2, the determination unit 234 determines the monitoring condition for monitoring the current value from among the updated plurality of monitoring conditions, based on the parameters indicated by the acquired parameter information. That is, the determination unit 234 determines the monitoring condition from among the updated plurality of monitoring conditions stored in the function list storage unit 235.

[0215] Furthermore, if an update instruction is not received by the communication unit 210 (No in step S1202), the process in step S1104 is not performed, and the processes in operation examples 1 and 2 are performed instead.

[0216] Figure 25 is a flowchart of the processes performed by the management server 30 in this modified example in steps S1102 and S1103.

[0217] The communication unit 310 of the management server 30 acquires the outputted status information (S1301). As described above, the status information is information indicating the estimated degradation state, more specifically, information indicating the maximum charge amount. The status information also indicates the function label.

[0218] The update determination unit 320 determines whether the correspondence between the maximum charge amount indicated by the status information and the function label is inconsistent, or whether the function label is blank (S1302).

[0219] First, let's explain an example in which the update determination unit 320 determines whether or not there is a mismatch between the maximum charge amount indicated by the status information and the function label. In this example, the update determination unit 320 determines whether or not there is a mismatch between the maximum charge amount indicated by the status information and the monitoring condition (function) indicated by the function label indicated by the status information.

[0220] Figure 26 is a diagram showing a table illustrating the correspondence between the degradation status stored in the server storage unit 330 according to this modified example and multiple monitoring conditions (multiple functions).

[0221] Figure 26 shows a first set 331 corresponding to the first degradation state and a second set 332 corresponding to the second degradation state. In each of the sets, the maximum charge level of the drive battery 301 and multiple monitoring conditions are linked on a one-to-one basis.

[0222] In Figure 26, the first degradation state corresponds to a state where the maximum charge capacity of the drive battery 301 is 70 kWh or more but less than 80 kWh, and the second degradation state corresponds to a state where the maximum charge capacity of the drive battery 301 is 60 kWh or more but less than 70 kWh.

[0223] In the first set 331, a maximum charge amount of 70 kWh or more but less than 80 kWh is linked to multiple monitoring conditions including f0(t), f1(t)...f98(t) and f99(t). In the second set 332, a maximum charge amount of 60 kWh or more but less than 70 kWh is linked to multiple monitoring conditions including f'0(t), f'1(t)...f'98(t) and f'99(t).

[0224] The update determination unit 320 determines, based on the table shown in Figure 26, whether or not there is a mismatch between the maximum charge amount indicated by the status information and the function label. In other words, the update determination unit 320 determines whether or not the maximum charge amount indicated by the status information and the function indicated by the function label indicated by the status information match the maximum charge amount in a set and one of the functions associated with that maximum charge amount.

[0225] The status information shown in Figure 24 indicates the initial charge level (t) (for example, f0(t)) and the maximum charge amount of 70 kWh. In this case, the maximum charge amount and the function indicated in the function label match the maximum charge amount of 70 kWh or more and less than 80 kWh in the first set 331 and f0(t). In this case, the update determination unit 320 determines that the correspondence between the maximum charge amount indicated in the status information and the function label is not inconsistent, that is, they match.

[0226] If the status information shown in Figure 24 indicates the initial charge rate (t) (for example, f0(t)) and the maximum charge amount of 65 kWh, the update determination unit 320 determines that the correspondence between the maximum charge amount indicated by the status information and the function label is inconsistent.

[0227] Furthermore, the update determination unit 320 determines whether the function label is blank or not. The update determination unit 320 determines whether the function label of the acquired state information is blank or not, that is, whether operation examples 1 and 2 have never been performed and therefore no monitoring conditions have been set.

[0228] If the correspondence between the maximum charge amount indicated by the status information and the function label is inconsistent, or if the function label is blank (Yes in step S1302), the communication unit 310 of the management server 30 outputs an update instruction to the server connection unit 1500 of the vehicle 10a (S1103). If the answer in step S1302 is No, the process in step S1103 is not performed.

[0229] As mentioned above, this update instruction specifies several monitoring conditions to be used after the update.

[0230] For example, before step S1103, the update determination unit 320 performs the following processing. The update determination unit 320 determines a plurality of monitoring conditions (a plurality of functions) corresponding to the maximum charge amount indicated by the status information, and the update instruction should indicate the determined plurality of monitoring conditions (a plurality of functions). If, for example, the status information shown in Figure 24 indicates a maximum charge amount of 65 kWh, the update determination unit 320 determines a plurality of monitoring conditions (f'0(t), f'1(t)...f'98(t) and f'99(t)) corresponding to a maximum charge amount of 60 kWh or more and less than 70 kWh in Figure 26 as the plurality of monitoring conditions to be used after the update. Then, in step S1103, the communication unit 310 outputs an update instruction indicating the determined plurality of monitoring conditions to the server connection unit 1500.

[0231] In this case, after step S1103, when the process of step S1104 is performed as shown in Figure 21, the multiple monitoring conditions stored in the function list storage unit 235 are updated to the multiple monitoring conditions indicated by the update instruction. Figure 27 is a diagram showing a table showing the multiple monitoring conditions after the update according to this modified example. After the process of step S1104, the multiple monitoring conditions shown in Figure 27 are stored in the function list storage unit 235.

[0232] Then, as shown in Figure 21, the processing of operation example 1 or operation example 2 is performed in the vehicle 10a and the charger 20. For example, in step S103 of operation examples 1 and 2, the determination unit 234 determines the monitoring condition for monitoring the current value from among the updated plurality of monitoring conditions, based on the parameters indicated by the acquired parameter information.

[0233] As described above, the information processing method according to this modified example estimates the degradation state of the drive battery 301 based on the electrical characteristics of the drive battery 301, and updates the stored monitoring conditions to monitor conditions corresponding to the estimated degradation state. Then, from among the updated monitoring conditions, the information processing method according to this modified example determines the monitoring condition for monitoring the current value based on the parameters indicated by the acquired parameter information.

[0234] This allows monitoring conditions corresponding to the degradation state of the drive battery 301 to be used as monitoring conditions, thereby enabling more accurate detection of abnormal current values. As a result, an information processing method and information processing device 1200 are realized that can more accurately detect abnormal charging of the drive battery 301 of a mobile device.

[0235] (Other Embodiments) The above has described an information processing device, etc., according to one or more embodiments, based on embodiments and modifications of embodiments (embodiments, etc.). However, this disclosure is not limited to these embodiments, etc. Without departing from the spirit of this disclosure, various modifications that a person skilled in the art could conceive of may be applied to these embodiments, and forms constructed by combining components from different embodiments may also be included in this disclosure.

[0236] In the embodiments described above, a function indicating a threshold was used as the monitoring condition, but this is not limited to this. For example, the monitoring condition may be a predictive value function determined based on the parameters of the drive battery at the start of charging (e.g., the initial charge rate). The predictive value function may be a function that shows the time change of a predetermined current value linked to the parameter. The time change of the predetermined current value is the time change of an appropriate current value determined based on the parameter, or in other words, the time change of the current value when the drive battery is being charged normally. That is, the time change of the predetermined current value is the time change of the current value supplied to the drive battery when the charger is not subjected to attacks such as overcharging attacks or charging interference attacks.

[0237] In step S105, when the charging status of the drive battery is monitored, the abnormality detection unit may detect an abnormality based on a predicted value function and a predetermined threshold. For example, the abnormality detection unit may detect an abnormality when the difference between the current value indicated by the current value information and the current value indicated by the predicted value function is greater than a predetermined threshold. When this difference is greater than a predetermined threshold, it corresponds to a situation where the current value indicated by the current value information is significantly larger or smaller than the current value when normal charging is performed, as indicated by the predicted value function. In other words, there is a high possibility that the charger is being attacked, such as an overcharge attack or a charging interference attack. This information processing method can also accurately detect abnormalities in the current value by monitoring the current value using monitoring conditions determined based on the parameters of the drive battery at the start of charging.

[0238] In the embodiments described above, an example was shown in which rules for detecting overcharge attacks are applied. However, these rules may be applied, for example, at the time of vehicle shipment. Furthermore, these rules may be applied or updated based on information output from an information terminal such as a smartphone or tablet owned by the vehicle user.

[0239] Furthermore, while Figure 6 shows multiple functions such as f0(t), f1(t), f98(t), and f99(t), it is not limited to these. For example, based on the output (power) of the charger, multiple functions different from the above multiple functions, such as g0(t), g1(t), g98(t), and g99(t), may be used. It is also preferable that such multiple functions different from the above multiple functions are stored in the function list storage unit.

[0240] In the embodiments described above, the parameter was the charge level of the drive battery at the start of charging by the charger, but it is not limited to this. For example, the parameter may be the temperature of the drive battery sensed by the sensor, that is, the temperature of the drive battery at the start of charging by the charger.

[0241] In this case, the determination unit determines a function that indicates a threshold, which is a monitoring condition, based on the temperature of the drive battery at the start of charging (start temperature). The function list storage unit stores a pair of the start temperature and the function corresponding to that start temperature.

[0242] In the embodiments described above, the abnormality detection unit 240 determined in step S502 whether the current value indicated by the second current value information was equal to or greater than the calculated threshold, but it is not limited to this. For example, the abnormality detection unit 240 may use the first current value information instead of the second current value information. That is, in step S502, it may determine whether the current value indicated by the first current value information was equal to or greater than the calculated threshold.

[0243] Due to vulnerabilities in the charger's communication network, the charging data (more specifically, the second current value information included in the charging data), which is communication data output from the charger to the vehicle, may be tampered with. In this case, if the current value indicated by the second current value information is used in step S502, accurate anomaly detection may become difficult. In this case, it is preferable to use the current value indicated by the first current value information in step S502. For example, if an attack such as an overcharge attack or a charging interference attack is detected, the current value indicated by the first current value information may be used in step S502.

[0244] Furthermore, if the monitoring rule is to detect a charging interference attack, for example in step S502, it is determined whether the current value has been below 10% of the threshold for one hour or more. That is, the abnormality detection unit determines that an abnormality has occurred if the current value has been below 10% of the threshold for one hour or more, and determines that it is normal if the current value has been below 10% of the threshold for less than one hour.

[0245] Furthermore, in the above embodiments, each component may be implemented by being composed of dedicated hardware or by executing a software program suitable for each component. Each component may also be implemented by a program execution unit such as a CPU or processor reading and executing a software program recorded on a recording medium such as a hard disk or semiconductor memory.

[0246] Furthermore, the order in which each step in the flowchart is performed is illustrative for the purpose of specifically illustrating this disclosure, and may be in a different order. Also, some of the above steps may be performed simultaneously (in parallel) with other steps, and some of the above steps may not be performed.

[0247] Furthermore, the division of functional blocks in the block diagram is just one example; multiple functional blocks can be implemented as a single functional block, a single functional block can be divided into multiple parts, or some functions can be moved to other functional blocks. In addition, the functions of multiple functional blocks with similar functions can be processed in parallel or time-sharing by a single piece of hardware or software.

[0248] Furthermore, the information processing device, etc., according to the above embodiments may be implemented as a single device or as a plurality of devices. When the information processing device, etc., is implemented as a plurality of devices, the individual components of the information processing device, etc., may be distributed among the plurality of devices in any manner. When the information processing device, etc., is implemented as a plurality of devices, the method of communication between the plurality of devices is not particularly limited and may be wireless communication or wired communication. In addition, wireless communication and wired communication may be combined between the devices.

[0249] Furthermore, each component described in the above embodiments may be implemented as software, or typically as an integrated circuit (LSI). These may be individually integrated onto a single chip, or some or all of them may be integrated onto a single chip. Here, we refer to it as an LSI, but depending on the degree of integration, it may also be called an IC, system LSI, super LSI, or ultra LSI. Moreover, the method of integrated circuit implementation is not limited to LSIs; it may also be implemented using a dedicated circuit (a general-purpose circuit that executes a dedicated program) or a general-purpose processor. After LSI manufacturing, a programmable FPGA (Field Programmable Gate Array) or a reconfigurable processor that can reconfigure the connections or settings of circuit cells inside the LSI may be used. Furthermore, if an integrated circuit implementation technology that replaces LSIs emerges due to advances in semiconductor technology or other derived technologies, it is natural that the components may be integrated using that technology.

[0250] A system LSI is a highly functional LSI manufactured by integrating multiple processing units onto a single chip. Specifically, it is a computer system composed of a microprocessor, ROM, RAM, and other components. The ROM stores the computer program. The system LSI achieves its function by having the microprocessor operate according to the computer program.

[0251] Furthermore, one aspect of this disclosure may be a computer program that causes a computer to perform each of the characteristic steps included in the above-described information processing method.

[0252] Furthermore, for example, the program may be a program to be executed by a computer. Also, in one aspect of this disclosure, such a program may be recorded on a computer-readable non-temporary recording medium. For example, such a program may be recorded on a recording medium and distributed or made available. For example, by installing the distributed program on a device having another processor and having that processor execute the program, it becomes possible to have that device perform the above-mentioned processes.

[0253] This disclosure is useful for information processing devices, etc., for detecting abnormalities in the charging of a mobile device's drive battery.

[0254] 1, 1a Information processing system 10, 10a Vehicle 20 Charger 30 Management server 100 Display unit 200, 1200 Information processing device 210 Communication unit 220 Power control unit 230, 1230 Monitoring rule management unit 232 Monitoring rule output unit 233 Monitoring rule storage unit 234 Decision unit 235 Function list storage unit 240 Anomaly detection unit 250 Anomaly response unit 300 Battery unit 301 Drive battery 302 Sensor 310 Communication unit 320 Update determination unit 330 Server storage unit 331 First set 332 Second set 400 Charging connector connection unit 1236 Update unit 1500 Server connection unit

Claims

1. An information processing method performed by an information processing device mounted on an electric-powered mobile body, comprising: acquiring current value information indicating the current value when the mobile body's drive battery is charged by a charger, and parameter information indicating the parameters of the drive battery at the start of charging; determining monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information; detecting an abnormality in the current value based on the determined monitoring conditions and the acquired current value information; and outputting abnormality information indicating that an abnormality has been detected when such an abnormality is detected.

2. The information processing method according to claim 1, wherein the parameter is the charge level of the drive battery.

3. The information processing method according to claim 1, wherein the monitoring condition is a function that indicates a threshold, and in detecting the abnormality, an overcharge abnormality is detected as the abnormality when the current value is greater than or equal to the threshold indicated by the function.

4. The information processing method according to claim 3, wherein the function is a function in which the threshold changes depending on the elapsed time since the time when charging of the drive battery by the charger was started.

5. The information processing method according to claim 1, wherein, in outputting the abnormal information, the abnormal information is output to a display unit provided on the mobile body, and the display unit that has received the outputted abnormal information displays that the abnormality has occurred and the countermeasures to be taken against the abnormality.

6. The information processing method according to claim 1, wherein when the abnormality is detected, a charging termination instruction is output to the charger to instruct it to terminate charging.

7. The information processing method according to claim 6, wherein if charging continues after the charging completion instruction has been output, the circuit between the drive battery and the charger is interrupted.

8. An information processing method according to claim 1, comprising: estimating the degradation state of the drive battery based on the electrical characteristics of the drive battery; updating a plurality of stored monitoring conditions to a plurality of monitoring conditions corresponding to the estimated degradation state; and determining the monitoring conditions, from among the updated plurality of monitoring conditions, determining the monitoring condition for monitoring the current value based on the parameters indicated by the acquired parameter information.

9. The information processing method according to claim 8, wherein a plurality of monitoring conditions corresponding to the estimated deterioration state are obtained from the management server of the information processing device.

10. A computer program for causing a computer to execute the information processing method described in any one of claims 1 to 9.

11. An information processing device mounted on a mobile body powered by electricity, comprising: a communication unit that acquires current value information indicating the current value when the mobile body's drive battery is charged by a charger, and parameter information indicating the parameters of the drive battery at the start of charging; a determination unit that determines monitoring conditions for monitoring the current value based on the parameters indicated by the acquired parameter information; and an abnormality detection unit that detects an abnormality in the current value based on the determined monitoring conditions and the acquired current value information, wherein the communication unit outputs abnormality information indicating that an abnormality has been detected when an abnormality is detected.

Images