JP2017195769A - Power management system, apparatus, and power management method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a control system, an apparatus, a control device, and a control method in which security can be improved.SOLUTION: At a consumer 10, a control system includes: an apparatus 300; and an EMS 200 which performs control and/or management of the apparatus 300 by transmitting/receiving a message having a composition compliant to predetermined communication protocol to/from the apparatus 300 through a network. The EMS 200 transmits a request message which requests execution of processing to the apparatus 300, to the apparatus 300. The apparatus 300 includes a control section which determines execution of the processing requested in the request message when predetermined authentication information is included in the request message.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a control system, a device, a control device, and a control method applied to a network provided in a power consumer.

  2. Description of the Related Art In recent years, a control system including a control device that controls and manages devices via a network provided to a power consumer has become widespread (for example, Patent Document 1). For example, a control device used in a network provided in a house or the like is called a HEMS (Home Energy Management System). The device is, for example, a load (for example, home appliances) that operates by consuming electric power, or a distributed power source (for example, a solar cell device, a storage battery device, or a fuel cell device) that outputs electric power.

  In such a control system, the control device performs control and management of the device and the like by transmitting and receiving messages having a configuration conforming to a predetermined communication protocol between the device and the control device. In a control system applied to a network, for example, a communication protocol such as ECHONET Lite is used.

JP 2010-128810 A

  For example, when a device that supports ECHONET Lite receives a message having a configuration conforming to ECHONET Lite from the control device, the device operates according to the content of the received message. Specifically, the device executes processing for information specified by the received message. However, for example, even when a message having a configuration conforming to ECHONET Lite is received from a control device intended to illegally control the device, a device that supports ECHONET Lite operates according to the content of the received message. There is a risk.

  Therefore, the present invention has been made to solve the above-described problems, and an object thereof is to provide a control system, a device, a control device, and a control method that can improve security.

  The control system according to the first feature is configured to control and / or control the device by transmitting / receiving a message having a configuration conforming to a predetermined communication protocol to / from the device via a network provided in a power consumer. And a control device that performs management. The control device transmits a request message for requesting execution of processing to the device to the device. The device includes a control unit that determines execution of processing requested by the request message when predetermined authentication information is included in the request message.

  1st characteristic WHEREIN: The said request message is a message which requests | requires execution of the process with respect to the 1 or several information designated from the some information which the said apparatus has, Comprising: The said control part is the said request message. When predetermined authentication information is included, execution of processing for the designated information is determined.

  In the first feature, the device further includes a storage unit that stores authentication information used for authentication of the control device, and the control unit stores the predetermined authentication information included in the request message in the storage unit. In the case of corresponding to the authentication information to be executed, the execution of the processing for the designated information is determined.

  In the first feature, when the request message does not include the predetermined authentication information, the control unit determines not to perform processing for the specified information.

  In the first feature, the storage unit stores a plurality of pieces of authentication information in which an authentication level is set, and the control unit includes the request message including the predetermined authentication information, and the predetermined authentication information is stored in the storage unit. In the case of corresponding to any of the authentication information stored in the unit, execution of processing for the information selected from the designated information is determined according to the authentication level set in the corresponding authentication information.

  In the first feature, when the request message includes the predetermined authentication information and requests reading and writing with respect to the specified information, the control unit performs authentication corresponding to the predetermined authentication information. When the level is lower than a predetermined authentication level, it is determined to execute the reading of the specified information and not to execute the writing to the specified information.

  1st characteristic WHEREIN: The said control part performs a different process according to whether the said request message contains the remote information which shows that it is a message by remote operation.

  In the first feature, when the request message includes the remote information, the control unit includes the request message within a range that is more restrictive than a processing range that can be instructed by operating an operation unit or a remote controller of the device. The execution of the requested process is determined.

  In the first feature, the predetermined communication protocol is ECHONET Lite, and the device is a load or a distributed power supply device provided in the consumer.

  The device according to the second feature receives control and / or management of the control device by transmitting and receiving a message having a configuration conforming to a predetermined communication protocol to and from the control device via a network provided in a consumer. When the device receives a request message for requesting execution of processing for its own device from the control device, and the request message includes predetermined authentication information, the device executes the processing requested by the request message. The control part to determine is provided.

  The control device according to the third feature controls and / or manages the device by transmitting / receiving a message having a configuration conforming to a predetermined communication protocol to / from the device via a network provided in the consumer. The control device includes a control unit that generates a request message for requesting execution of processing for the device, and a storage unit that stores predetermined authentication information used for authentication of the own device, and the control unit includes the predetermined unit Is included in the request message.

  The control method according to the fourth feature is a control method for the control device to control and / or manage the device by transmitting and receiving a message having a configuration conforming to a predetermined communication protocol via a network. In the control method, the control device transmits a request message requesting execution of processing for the device to the device, and the device determines whether or not the received request message includes predetermined authentication information. And a step in which the device determines execution of the process requested by the request message when predetermined authentication information is included in the request message.

  ADVANTAGE OF THE INVENTION According to this invention, the control system, apparatus, control apparatus, and control method which can improve security can be provided.

FIG. 1 is a diagram illustrating a control system according to the present embodiment. FIG. 2 is a diagram illustrating details of the consumer according to the present embodiment. FIG. 3 is a block diagram showing the EMS according to the present embodiment. FIG. 4 is a block diagram showing a device according to the present embodiment. FIG. 5 is a diagram showing a message structure according to the present embodiment. FIG. 6 is a diagram showing a message structure according to the present embodiment. FIG. 7 is a sequence diagram illustrating a control method according to the present embodiment. FIG. 8 is a diagram illustrating a table stored in the storage unit of the EMS according to the first modification. FIG. 9 is a block diagram illustrating an EMS according to the second modification. FIG. 10 is a diagram illustrating a message configuration according to the second modification.

  Hereinafter, a control system according to an embodiment of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

  However, it should be noted that the drawings are schematic and ratios of dimensions and the like are different from actual ones. Therefore, specific dimensions and the like should be determined in consideration of the following description. Moreover, it is a matter of course that portions having different dimensional relationships and ratios are included between the drawings.

[Outline of Embodiment]
The control system according to the embodiment performs control and / or management of the device by transmitting and receiving the device and a message having a configuration conforming to a predetermined communication protocol via a network provided in a power consumer. And a control device for performing. The control device transmits a request message for requesting execution of processing to the device to the device. The device includes a control unit that determines execution of processing requested by the request message when predetermined authentication information is included in the request message.

  In the embodiment, the device includes a control unit that determines execution of processing for specified information when the request message includes second authentication information corresponding to the first authentication information. Therefore, it is possible to provide a control system, a device, a control device, and a control method that can improve security.

[This embodiment]
(Control system)
Below, the control system which concerns on this embodiment is demonstrated. FIG. 1 is a diagram illustrating a control system 100 according to the present embodiment.

  As shown in FIG. 1, the control system 100 includes a customer 10, a CEMS 20, a substation 30, a server 40, and a power plant 50. The customer 10, the CEMS 20, the substation 30 and the server 40 are connected by an external network 60.

  The consumer 10 includes, for example, a power generation device and a power storage device. The power generation device is a device that outputs electric power using fuel gas, such as a fuel cell. The power storage device is a device that stores electric power, such as a secondary battery.

  The consumer 10 may be a single-family house, a store such as a convenience store or a supermarket, a commercial facility such as a building, or a factory.

  In the present embodiment, a customer group 10 </ b> A and a customer group 10 </ b> B are configured by a plurality of consumers 10. The consumer group 10A and the consumer group 10B are classified by, for example, a geographical area.

  The CEMS 20 controls interconnection between the plurality of consumers 10 and the power system. The CEMS 20 may be referred to as a CEMS (Cluster / Community Energy Management System) in order to manage a plurality of consumers 10. Specifically, the CEMS 20 disconnects between the plurality of consumers 10 and the power system at the time of a power failure or the like. On the other hand, the CEMS 20 interconnects the plurality of consumers 10 and the power system when power is restored.

  In the present embodiment, CEMS 20A and CEMS 20B are provided. For example, the CEMS 20A controls interconnection between the customer 10 included in the customer group 10A and the power system. For example, the CEMS 20B controls interconnection between the customer 10 included in the customer group 10B and the power system.

  The substation 30 supplies electric power to the plurality of consumers 10 via the distribution line 31. Specifically, the substation 30 steps down the voltage received from the power plant 50.

  In the present embodiment, a substation 30A and a substation 30B are provided. For example, the substation 30A supplies power to the consumers 10 included in the consumer group 10A via the distribution line 31A. For example, the substation 30B supplies power to the consumers 10 included in the consumer group 10B via the distribution line 31B.

  The server 40 manages a plurality of CEMSs 20 (here, CEMS 20A and CEMS 20B). The server 40 also manages a plurality of substations 30 (here, the substation 30A and the substation 30B). In other words, the server 40 comprehensively manages the customers 10 included in the customer group 10A and the customer group 10B. For example, the server 40 has a function of balancing the power to be supplied to the consumer group 10A and the power to be supplied to the consumer group 10B.

  The power plant 50 generates power using thermal power, sunlight, wind power, hydraulic power, nuclear power, or the like. The power plant 50 supplies power to the plurality of substations 30 (here, the substation 30A and the substation 30B) via the power transmission line 51.

  The external network 60 is connected to each device via a signal line. The external network 60 is, for example, the Internet, a wide area network, a narrow area network, a mobile phone network, or the like.

(Customer)
Below, the consumer 10 which concerns on this embodiment is demonstrated. FIG. 2 is a diagram illustrating details of the customer 10 according to the present embodiment.

  As shown in FIG. 2, the customer 10 includes a distribution board 110, a load 120, a PV device 130, a storage battery device 140, a fuel cell device 150, a hot water storage device 160, and an EMS 200. Hereinafter, the load 120, the PV device 130, the storage battery device 140, the fuel cell device 150, and the hot water storage device 160 are collectively referred to as “apparatus 300” as appropriate.

  Distribution board 110 is connected to distribution line 31 (system). Distribution board 110 is connected to load 120, PV device 130, storage battery device 140, and fuel cell device 150 via a power line. Each device may be connected to the power line in any order.

  The load 120 is a device that consumes power supplied via a power line. For example, the load 120 includes household electrical appliances such as a refrigerator, a freezer, lighting, and an air conditioner.

  The PV device 130 includes a PV 131 and a PCS 132. The PV 131 is an example of a power generation device, and is a solar power generation device that generates power in response to reception of sunlight. The PV 131 outputs the generated DC power. The amount of power generated by the PV 131 changes according to the amount of solar radiation applied to the PV 131. The PCS 132 is a device (Power Conditioning System) that converts DC power output from the PV 131 into AC power. The PCS 132 outputs AC power to the distribution board 110 via the power line.

  The storage battery device 140 includes a storage battery 141 and a PCS 142. The storage battery 141 is a device that stores electric power. The PCS 142 is a device (Power Conditioning System) that converts AC power supplied from the system 31 into DC power. Further, the PCS 142 converts DC power output from the storage battery 141 into AC power.

The fuel cell device 150 includes a fuel cell 151 and a PCS 152. The fuel cell 151 is an example of a power generation device, and is a device that generates electric power using fuel (for example, gas). The fuel cell 151 is, for example, a SOFC (Solid Oxide Fuel Cell).
It may be PEFC (Polymer Electrolyte Fuel Cell). The PCS 152 is a device (Power Conditioning System) that converts DC power output from the fuel cell 151 into AC power.

  The hot water storage device 160 is a device that generates hot water using fuel or maintains the water temperature. Specifically, the hot water storage device 160 has a hot water storage tank, and warms water supplied from the hot water storage tank by heat generated by combustion of fuel or exhaust heat generated by operation (power generation) of the fuel cell 151. Specifically, the hot water storage device 160 warms the water supplied from the hot water storage tank and returns the heated hot water to the hot water storage tank. The fuel cell device 150 and the hot water storage device 160 constitute a hot water supply device (hot water supply system).

  The EMS 200 is an example of a control device (Energy Management System) that controls and manages the device 300. In the present embodiment, the EMS 200 and the device 300 are connected via a network provided in the customer 10. The network is, for example, a home area network, which may be wired or wireless.

  In the present embodiment, the EMS 200 and the device 300 transmit and receive messages that comply with a predetermined communication protocol. Thereby, the EMS 200 controls and manages the device 300. An example of the predetermined communication protocol is ECHONET Lite. The EMS 200 and the device 300 that support the Echonet Lite correspond to an Echonet Lite node defined in the ECHONET Lite.

  The EMS 200 controls the power consumption of the load 120 by controlling the operation mode of the load 120. The EMS 200 controls the power output from the PV device 130, the storage battery device 140, and the fuel cell device 150 by controlling the operation modes of the PV device 130, the storage battery device 140, and the fuel cell device 150. The EMS 200 controls the amount of hot water stored in the hot water storage device 160 by controlling the operation mode of the hot water storage device 160.

  The EMS 200 manages the device 300 by acquiring the specifications and status of the device 300. The specifications of the device 300 include, for example, a manufacturer code, a serial number, a model, a rated output or rated power consumption, and a type of operation mode. The status of the device 300 includes statuses such as a power source, a set temperature, an output or power consumption, and an operation mode.

  The EMS 200 is connected to various servers via the external network 60. The EMS 200 acquires, for example, information from various servers, such as a purchase unit price of power supplied from the grid 1, a sale unit price of power received from the grid 1, and a purchase price of fuel gas.

(Configuration of EMS)
Hereinafter, the EMS according to the present embodiment will be described. FIG. 3 is a block diagram showing the EMS 200 according to the present embodiment.

  As illustrated in FIG. 3, the EMS 200 includes a reception unit 210, a transmission unit 220, a control unit 230, and a storage unit 240.

  The receiving unit 210 receives a message conforming to a predetermined communication protocol from the device 300 connected via the network. The receiving unit 210 passes the received message to the control unit 220.

  The receiving unit 210 may receive information necessary for control and management of the device 300 from various servers via an external network. For example, the receiving unit 210 receives information such as the power purchase unit price from the grid 1, the power sale unit price to the grid 1, the predicted power consumption and the predicted output power of the customer 10 from various servers via the external network. Also good.

  The transmission unit 220 transmits the message generated by the control unit 230 to the device 300 connected via the network.

  The control unit 230 controls the reception unit 210, the transmission unit 220, and the storage unit 240.

  In addition, the control unit 230 generates a message that conforms to a predetermined communication protocol. For example, when requesting execution of a predetermined process for information specified from information included in the device 300 (hereinafter referred to as “specified information”), the control unit 230 conforms to a predetermined communication protocol. Generate a request message with the configured configuration. Further, when notifying the device 300 of information held by the own device in response to a request from the device 300 or voluntarily, the control unit 230 generates a notification message having a configuration conforming to a predetermined communication protocol. .

  Here, it should be noted that the information included in the device 300 is information that can be controlled and managed by the EMS 200 (control unit 230). In addition, the information included in the device 300 includes not only information defined in advance by a predetermined communication protocol (for example, manufacturer code, serial number, and model) but also information defined by the user (for example, the device 300). It should be noted that the code indicating the operation mode can also be controlled and managed by the EMS 200.

  The storage unit 240 stores information necessary for control and management of the device 300. For example, the storage unit 240 stores the specifications and status of the device 300 acquired from the device 300. In the present embodiment, the storage unit 240 stores second authentication information used for authentication of the own device.

(Device configuration)
Hereinafter, a device according to the present embodiment will be described. FIG. 4 is a block diagram showing the device 300 according to the present embodiment.

  As illustrated in FIG. 4, the device 300 includes a reception unit 310, a transmission unit 320, a control unit 330, and a storage unit 340.

  The receiving unit 310 receives a message having a configuration conforming to a predetermined communication protocol from the EMS 200 connected via the network. The receiving unit 310 passes the received message to the control unit 320.

  The transmission unit 320 transmits the message generated by the control unit 330 to the EMS 200 via the network.

  The control unit 330 controls the reception unit 310, the transmission unit 320, and the storage unit 340.

  In the present embodiment, the control unit 330 generates a message having a configuration conforming to a predetermined communication protocol. Specifically, when the control unit 330 receives a request message from the EMS 200, the control unit 330 generates a response message corresponding to the request message. Alternatively, the control unit 330 may send a notification message for notifying other nodes connected to the network of the specifications of the device (for example, manufacturer code, model, serial number, etc.) at the time of startup or initial connection to the network. Generate.

  The storage unit 340 stores information that the device 300 has. For example, the storage unit 340 stores the specifications and status of the device 300.

  In the present embodiment, the storage unit 340 stores first authentication information used for authentication of the EMS 200.

(Message structure)
In the following, the configuration of a message according to the present embodiment will be described. 5 to 6 are diagrams showing the structure of the message according to this embodiment.

  As shown in FIG. 5, a request message having a configuration conforming to a predetermined communication protocol has a message type field and a plurality of information designation fields corresponding to the message type field.

  The message type field indicates the message type. For example, a message in which a value indicating a read request (Get_Req) is specified in the message type field is a reference request message for requesting reading of specified information. A message in which a value indicating a write request (Set_Req) is specified in the message type field is a control request message for requesting writing to specified information.

  The plurality of information designation fields indicate one or more pieces of information designated from among a plurality of pieces of information that the device 300 has. Specifically, the EMS 200 designates information requesting execution of reading or writing from among a plurality of pieces of information that the device 300 has, and indicates the designated information in the information designation field.

  The reference request message is classified into a spec reference request message or a status reference request message depending on whether the specified information is a specification or a status. The control request message is a message for requesting execution of writing to the status, and corresponds to a status control request message.

  For example, in the message shown in FIG. 5, a value indicating a read request (Get_Req) is specified in the message type field, and an instance list (that is, a spec list) is specified in the information specifying field 1. Therefore, this message corresponds to an instance list reference request message (spec reference request message). In the message shown in FIG. 5, the power supply is further designated in the information designation field 2. Therefore, this message also corresponds to a power status reference request message (status reference request message).

  In the message shown in FIG. 6, a value indicating a write request (Set_Req) is specified in the message type field, and a power supply (status: ON) is specified in the information specifying field 1. Therefore, this message corresponds to a control request message (status control request message) for turning on the power supply status.

  In the present embodiment, the control unit 330 may combine the reference request message and the control request message into a single request message. In such a case, the request message has fields of two message types (Get_Req and Set_Req) and an information designation field corresponding to each message type field.

  In the present embodiment, the control unit 230 of the EMS 200 may include second authentication information used for authentication of the own device in the request message. Specifically, for example, the control unit 230 generates a control request message that includes the second authentication information in the information designation field.

  The control unit 230 may encrypt the second authentication information with a hash function or the like and include the encrypted second authentication information in the request message.

  In the present embodiment, the control unit 330 of the device 300 determines the execution of the process for the specified information when the request message includes the second authentication information corresponding to the first authentication information. Specifically, the control unit 330 confirms whether the request message includes the second authentication information. Furthermore, the control unit 330 performs authentication of the EMS 200 by, for example, a common key method. Specifically, when the second authentication information included in the request message matches the first authentication information stored in the storage unit 340, it is confirmed that the EMS 200 is a reliable node.

  In the present embodiment, the control unit 330 generates a response message corresponding to the request message when the execution of the process for the specified information is determined. Specifically, the control unit 330 generates a response message including the read information for the reference request message. Alternatively, in response to the control request message, the control unit 330 generates a response message indicating that the specified information has been written.

  On the other hand, when the request message does not include the second authentication information, the control unit 330 determines not to execute processing for the specified information. Specifically, when the request message does not include the second authentication information, or when the authentication information included in the request message does not match the first authentication information, the control unit 330 processes the specified information. Is generated, and a response message indicating that is generated.

(Control method)
Hereinafter, a control method according to the present embodiment will be described. FIG. 7 is a sequence diagram illustrating a control method according to the present embodiment.

  As illustrated in FIG. 7, in step S <b> 10, the EMS 200 transmits a specification reference request message to the device 300. Hereinafter, the specification reference request message will be described as a message requesting reading of the instance list.

  In step S20, the device 300 executes authentication of the EMS 200. Specifically, the device 300 confirms whether or not the specification reference request message includes second authentication information corresponding to the first authentication information. When the specification reference request message includes the second authentication information corresponding to the first authentication information, the device 300 determines to execute reading of the instance list. On the other hand, when the specification reference request message does not include the second authentication information, or when the authentication information included in the specification reference request message does not correspond to the first authentication information, the device 300 reads the instance list. Decide not to run.

  In step S30, the device 300 transmits a response message corresponding to the specification reference request message to the EMS 200. For example, when it is determined in step S20 to execute reading of the instance list, the device 300 transmits a response message including the read instance list to the EMS 200. Alternatively, in step S20, when it is determined not to read the instance list, the device 300 transmits a response message indicating that to the EMS 200.

  In step S <b> 40, the EMS 200 transmits a status reference request message to the device 300. In the following description, it is assumed that the status reference request message is a message requesting reading of the status of the power supply.

  In step S50, the device 300 performs authentication of the EMS 200. Specifically, the device 300 confirms whether or not the status reference request message includes second authentication information corresponding to the first authentication information. When the status reference request message includes the second authentication information corresponding to the first authentication information, the device 300 determines to execute the reading of the power supply status. On the other hand, when the status reference request message does not include the second authentication information, or when the authentication information included in the status reference request message does not correspond to the first authentication information, the device 300 reads the power status. Decide not to run.

  In step S60, the device 300 transmits a response message corresponding to the status reference request message to the EMS 200. For example, when it is determined in step S50 to execute the reading of the power supply status, the device 300 transmits a response message including the read power supply status (for example, power-on) to the EMS 200. Alternatively, when it is determined in step S50 not to read the status of the power supply, the device 300 transmits a response message indicating that to the EMS 200.

  In step S <b> 70, the EMS 200 transmits a status control request message to the device 300. In the following description, it is assumed that the status control request message is a message requesting writing to the power supply status, particularly a control request message instructing power off in this example.

  In step S80, the device 300 performs authentication of the EMS 200. Specifically, the device 300 confirms whether or not the status control request message includes second authentication information corresponding to the first authentication information. When the status control request message includes the second authentication information corresponding to the first authentication information, the device 300 determines execution of writing to the status of the power supply. Specifically, the device 300 turns off its own power supply and changes the power supply status to power off. On the other hand, when the status control request message does not include the second authentication information, or when the authentication information included in the status control request message does not correspond to the first authentication information, the device 300 does not switch the power state. Further, it is determined not to execute the writing for the power supply status.

  In step S90, the device 300 transmits a response message corresponding to the status control request message to the EMS 200. For example, if it is determined in step S80 that writing to the power status is to be executed, the device 300 transmits a response message including the power status (for example, power off) after writing to the EMS 200. Alternatively, when it is determined in step S80 that writing to the power supply status is not performed, the device 300 transmits a response message indicating that to the EMS 200.

  As described above, in the present embodiment, the device 300 changes the response to the request message according to the presence / absence of the second authentication information. That is, the device 300 determines whether to receive control and management of the EMS 200 according to the reliability of the EMS 200. Therefore, it is possible to provide a control system, a device, a control device, and a control method that can improve security.

[Modification 1]
Hereinafter, the control system according to the first modification of the present embodiment will be described focusing on differences from the control system according to the present embodiment. FIG. 8 is a diagram illustrating a table stored in the storage unit 340 of the device 300 according to the first modification.

  In the first modification, the storage unit 340 stores a plurality of first authentication information for which authentication levels are set. When the request message includes the second authentication information, the control unit 330 selects from the specified information according to the authentication level set in the first authentication information corresponding to the second authentication information. To execute the processing for the information.

  In the first modification, when the request message includes the second authentication information and requests reading and writing with respect to the specified information, the control unit 330 has an authentication level corresponding to the second authentication information. When the authentication level is lower than the predetermined authentication level, it is determined to execute reading of the specified information, and not to execute writing to the specified information.

  Here, it should be noted that the following description is for the case where the request message includes the second authentication information. When the request message does not include the second authentication information, the control unit 330 determines not to execute the process for the specified information as in the present embodiment.

  In the first modification, as illustrated in FIG. 8, the storage unit 340 stores a table that defines the correspondence for each authentication level when the specification reference request message, the status and reference request message, or the status control request message is received. To do.

  First, when the authentication level is “high”, it is determined that any of the specification reference request message, the status reference request message, and the status control request message is received. Therefore, when the second authentication information included in the request message corresponds to the first authentication information of the authentication level “high”, the control unit 330 determines to execute all the specified processes.

  Second, when the authentication level is “medium”, it is determined that the specification reference request message and the status reference request message are received, but the response is partially accepted when the status control request message is received. It is stipulated. Therefore, when the second authentication information included in the status control request message corresponds to the first authentication information of the authentication level “medium”, the control unit 330 has a high importance in the designated information. For information (for example, power supply), it is determined not to execute writing, and for only information (for example, set temperature) having low importance in the designated information, execution of writing is determined.

  Third, in the case of the authentication level “low”, when the specification reference request message and the status reference request message are received, it is determined that a part can be supported, but when the status control request message is received, the response is not possible. It is stipulated. Therefore, when the second authentication information included in the specification reference request message or the status reference request message corresponds to the first authentication information of the authentication level “low”, the control unit 330 includes the specified information. For information with high importance (for example, operation mode), it is decided not to execute reading, and information with low importance in specified information (for example, manufacturer code, serial number, and model) Only for the above, the execution of reading is determined. Further, when the second authentication information included in the status control request message corresponds to the first authentication information of the authentication level “low”, the control unit 330 executes writing on the specified information. Decide not to.

  As described above, in the first modification, the device 300 is specified according to the authentication level corresponding to the second authentication information, the requested processing type, and the importance of the specified information. Only the process selected from the selected information is executed. That is, the device 300 determines the degree to accept the control and management of the EMS 200 according to the reliability of the EMS 200. Therefore, it is possible to provide a control system, a device, a control device, and a control method that can improve security.

[Modification 2]
In the first modification, an example has been described in which when the device 300 receives a request message from the EMS 200, the authentication level is confirmed for the second authentication information. An example in which remote information indicating whether or not is included in the information designation field of the request message will be described. FIG. 9 is a block diagram illustrating an EMS according to the second modification. FIG. 10 is a diagram illustrating a message configuration according to the second modification.

  As shown in FIG. 9, in addition to the receiving unit 210 and the transmitting unit 220 shown in FIG. 3, the EMS 1200 includes an in-home communication unit 250 that supports near field communication such as WiFi, and a public communication method such as Ethernet (registered trademark). And a public communication unit 260 corresponding to the above.

  In the second modification, the EMS 1200 can perform direct communication using the in-home communication unit 250 with a mobile terminal 500 (for example, a smartphone or a tablet PC) in the short-range wireless communication area.

  In the second modification, the EMS 1200 is connected to the external network 60 via the public communication unit 260 or connected to the external network 60 via the router installed in the home communication unit 250 and the customer 10. Communication with the server 40 is possible. The server 40 can communicate with the mobile terminal 500 via the external network 60. That is, the EMS 1200 can perform indirect communication with the mobile terminal 500 via the external network 60.

  Therefore, the EMS 1200 is one of two systems, a system for direct communication using the in-home communication unit 250 and a system for indirect communication via the server 400 via the public communication unit 250 or the router. Can communicate with. That is, the portable terminal 500 is connected to the EMS 1200 by two systems of communication.

  In the second modification, the portable terminal 500 presents an input screen for inputting a processing instruction for the device 300 to the user. When the user inputs a processing instruction according to the input screen, the mobile terminal 500 transmits the processing instruction to the EMS 1200 by one of the two communication systems, and the request message corresponding to the content of the processing instruction from the EMS 1200. Is transmitted to the device 300.

  Here, when the EMS 1200 transmits a request message to the device 300, if the processing instruction that triggers the request message transmission is transmitted from the mobile terminal 500, direct communication using the in-home communication unit 250 is performed. Or indirect communication via the external network 60, that is, a processing instruction by remote operation.

  First, in the case of direct communication using the in-home communication unit 250, since the EMS 1200 and the portable terminal 500 are in the same local area (in the range of short-range wireless communication), the EMS 1200 transmits the processing instruction transmission source (the portable terminal 500). ) Can be grasped in advance. Therefore, the EMS 1200 can immediately determine that it is a processing instruction by direct communication if it is a processing instruction transmitted from a known IP address.

  On the other hand, in the case of indirect communication via the external network 60, the processing instruction is transmitted from the server 40 on the portable terminal 500 or the external network 60 to the EMS 1200 in the Push format or the processing instruction transmitted from the portable terminal 500. There are at least two cases in which the EMS 1200 is stored in the server 40 as a queue, and the EMS 1200 periodically accesses the server 40 and receives the unprocessed queue if it is received in the Pull format. In the former case, if the source IP address of the processing instruction is the IP address of the server 40, the EMS 1200 can immediately determine that the processing instruction is indirect communication. In the latter case, since the EMS 1200 accesses the server 40 and acquires a processing instruction, the EMS 1200 can naturally determine that the processing instruction is based on indirect communication.

  With the above method, the EMS 1200 determines whether the received processing instruction is based on indirect communication or direct communication. As shown in FIG. 10, when receiving a processing instruction by indirect communication, that is, remote operation, the EMS 1200 includes remote information indicating that the processing instruction is by remote operation in the information designation field of the request message. On the other hand, if the received processing instruction is a processing instruction by direct communication, the EMS 1200 does not include remote information in the information designation field.

  On the other hand, when the device 300 receives the request message from the EMS 1200 as in steps S10, 40, and 70 in FIG. 7, the device 300 authenticates the EMS 1200 with the second authentication information, and the remote information is the request message. It is determined whether it is included in the information designation field. When the device 300 can authenticate the EMS 1200 and the remote message is not included in the request message, the device 300 performs processing instructed by the request message. However, when the remote information is included in the request message, the device 300 not only performs the process instructed by the request message, but also notifies that it is a processing instruction by remote operation. Specifically, the device 300 includes an indicator such as a light emitting diode, and when the remote message is not included in the request message, for example, the indicator 300 emits blue light. On the other hand, when remote information is included in the request message, the device 300 indicates that the remote operation is performed by notifying in a manner different from the case where the remote information is included, such as blinking the indicator in red. Express.

  By the way, depending on the type of the device 300, the device 300 itself may have an operation unit, or may have a separate infrared communication type or wired type remote controller. When the processing is instructed by operating the operation unit of the device 300 or the remote controller, it is clear that the operation is in the home (that is, in the same local area). Therefore, in such a case, the device 300 may perform the same notification as when the request message received from the EMS 200 does not include remote information. Alternatively, in such a case, the device 300 may perform notification in a third notification mode that differs depending on whether the request message includes remote information or not.

  Furthermore, the authentication message described in the first modification may be made to correspond to the case where the request message includes remote information and the case where remote information is not included. For example, when the remote information is included in the request message, the device 300 receives the request message including the second authentication information with the authentication level “low” in the first modification, and the importance level For high information (for example, operation mode), it is determined not to execute reading, and only for information with low importance (for example, manufacturer code, serial number, and model), execution of reading is determined. .

  As described above, for example, when turning on the power of a home appliance such as a TV by operating the mobile terminal 500 or the like, when the user gives an instruction for processing via short-range wireless communication at home, and when the external network 60 is connected from outside the home. When the remote control is performed via the home appliance, the home appliance performs notification in a different mode. That is, the user can determine whether the operation is from the home or the remote operation by confirming the notification mode when the home appliance operates.

  Furthermore, the authentication message described in the first modification may be made to correspond to the case where the request message includes remote information and the case where remote information is not included. For example, when remote information is included in the reference request message, the device 300 receives the request message including the second authentication information with the authentication level “low” in the first modification, and the importance level For high information (for example, operation mode), it is determined not to execute reading, and only for information with low importance (for example, manufacturer code, serial number, and model) is determined to execute reading. To do. As a result, in the case of a processing instruction by remote operation, highly important information is not sent to the mobile terminal 500. In other words, although a less important operation can be performed from the portable terminal 500 or the like regardless of inside the house, it is possible to prevent a highly important operation from being performed remotely. That is, an operation similar to the operation of the operation unit of the device 300 or the remote controller (the operation is in-home, and no special operation restriction is provided) can be performed in the home using the mobile terminal 500 or the like. .

[Other Embodiments]
Although the present invention has been described with reference to the above-described embodiments, it should not be understood that the descriptions and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples and operational techniques will be apparent to those skilled in the art.

  In the embodiment, ECHONET Lite is exemplified as the predetermined communication protocol. However, the embodiment is not limited to this, and a communication protocol other than ECHONET Lite (for example, ZigBee (registered trademark) or KNX) may be used as the predetermined communication protocol. Alternatively, ECHONET Lite and another communication protocol may be used in combination as a predetermined communication protocol.

  Although not particularly mentioned in the embodiment, the message conforming to the predetermined communication protocol includes the identification information of the transmission source and the transmission destination node, the reference number of the message, etc. in addition to the message type field and the information designation field. Note that it further has a field indicating.

  The EMS 200 may be a HEMS (Home Energy Management System), a SEMS (Store Energy Management System), a BEMS (Building Energy Management System), or an FEM. There may be.

  In the embodiment, the customer 10 has been described as including the load 120, the PV device 130, the storage battery device 140, the fuel cell device 150, and the hot water storage device 160. However, the consumer 10 should just have the load 120 at least. Alternatively, when the fuel cell device 150 and the hot water storage device 160 constitute a hot water supply device, the fuel cell device 150 may send and receive messages regarding the hot water storage device 160 with the EMS 200 on behalf of the hot water storage device 160.

  DESCRIPTION OF SYMBOLS 10 ... Consumer, 20 ... CEMS, 30 ... Substation, 31 ... Distribution line, 40 ... Server, 50 ... Power plant, 51 ... Power transmission line, 60 ... External network, 100 ... Control system, 110 ... Distribution board, 120 ... Load, 130 ... PV device, 131 ... PV, 132 ... PCS, 140 ... Storage battery device, 141 ... Storage battery, 142 ... PCS, 150 ... Fuel cell device, 151 ... Fuel cell, 152 ... PCS, 160 ... Hot water storage device, 200 ... EMS, 210 ... reception unit, 220 ... transmission unit, 230 ... control unit, 240 ... storage unit, 250 ... home communication unit, 260 ... public communication unit, 300 ... device, 310 ... reception unit, 320 ... transmission unit, 330 ... Control unit, 340 ... Storage unit, 500 ... Mobile terminal, 1200 ... EMS

Claims (9)

A power management system comprising a device connected to a predetermined network conforming to a predetermined protocol, and a control device capable of communicating with the predetermined network and a network other than the predetermined network,
When the device receives a message including an information element of remote information from the control device in a manner capable of identifying whether the processing instruction for the device is via a network other than the predetermined network, the processing instruction Is a power management system that informs whether or not a network other than the predetermined network is routed.   The power management system according to claim 1, wherein the control device transmits a message including an information element requesting execution of processing for the device and an information element of the remote information to the device.   The power management system according to claim 1 or 2, wherein the information element of the remote information is an information element indicating that the processing instruction is via a public network.   The said control apparatus judges that the process by the said process instruction is a process from the facility which has the said apparatus, when the said process instruction is via networks other than the said predetermined network. 4. The power management system according to any one of 3.   The power management system according to any one of claims 1 to 4, wherein the device executes different processes depending on whether the processing instruction passes through a network other than the predetermined network.   The power management according to any one of claims 1 to 5, wherein the device changes an authentication level of a message received from the control device depending on whether or not an information element of the remote information is included. system.   The device transmits a message including an information element of at least one of a manufacturer code, a serial number, and a model of the device to the control device when the information element of the remote information is included. The power management system according to claim 6. A device that communicates with a control device that can communicate with a predetermined network conforming to a predetermined protocol and a network other than the predetermined network via the predetermined network,
When a message including an information element of remote information is received from the control device in a manner capable of identifying whether or not a processing instruction for the device is via a network other than the predetermined network, the processing instruction is received from the predetermined network. A device comprising an informing unit for informing whether or not a network other than the above is passed. There is a power management method used in a power management system including a device connected to a predetermined network conforming to a predetermined protocol, and a control device capable of communicating with the predetermined network and a network other than the predetermined network,
When the device receives a message including an information element of remote information from the control device in a manner capable of identifying whether the processing instruction for the device is via a network other than the predetermined network, the processing instruction A power management method comprising a step of notifying whether or not the network is going through a network other than the predetermined network.

Images