JP6127842B2 - Charging system, in-vehicle device, and charging method - Google Patents

Description

  The present invention relates to a system for charging a battery mounted on an electric vehicle.

  Electric mobile bodies have been developed that run on electricity from an electric source such as a plug-in hybrid vehicle or an electric vehicle equipped with a battery, and an electric motor as a power source. Charging the battery of the electric vehicle is performed using a charging facility installed in a general household or a charging facility installed by various business operators.

  Regarding the charging of the battery of the electric vehicle, the identification information of the electric vehicle is transmitted to a taxing server that imposes a tax according to the amount of charge, and the taxing server permits charging of the electric vehicle based on the identification information A technique is known (see, for example, Patent Document 1).

  In addition, a technique is known in which a power supply device is specified by access from a terminal device to an authentication server, user authentication is performed, and power supply of the power supply device is started (for example, see Patent Document 2). After the power supply is completed, a usage fee including a power fee corresponding to the amount of power used is calculated by the authentication server, and the usage fee is transmitted to the terminal device, and the user is charged by a usage fee settlement process.

JP 2011-128793 A JP 2011-34500 A

  After the charging of the battery of the electric mobile body is completed, mutual authentication is performed between the charging server and the electric mobile body when charging for the power charge according to the amount of charged power is performed. For example, when authentication is performed between a billing server and an electric vehicle by a public key cryptosystem, a secret key is held in the electric vehicle. In order to conceal the secret key held in the electric vehicle, a security chip having tamper resistance is required. In other words, it is difficult to operate securely without a security chip. Since a security chip is required, the cost of the electric vehicle is increased.

  Moreover, in order to conceal the private key held in the electric vehicle, it is necessary to create and register a public key certificate for the electric vehicle in advance, which is troublesome.

  An object of the present invention is to easily and securely charge a battery mounted on an electric vehicle.

A charging system according to an embodiment of the disclosure includes:
A charging system comprising an in-vehicle device mounted on an electric vehicle, a portable terminal that performs wireless communication with the in-vehicle device, and a server for registering a user,
The portable terminal is
A first control unit that requests authentication of the user from the server and acquires authentication information indicating that the user has been authenticated when the user is authenticated by the server;
The server
In response to a user authentication request from the mobile terminal, the user authentication process is executed, and when the authentication is successful, the second control unit transmits the authentication information to the mobile terminal.
The in-vehicle device is
When charging a battery that stores electric power mounted on the electric vehicle, the authentication information is acquired from the portable terminal,
A third control unit configured to request charging of the battery by transmitting the authentication information acquired from the portable terminal to a charging device that charges the battery;

  According to the disclosed embodiment, it is possible to easily and securely charge a battery mounted on an electric vehicle.

It is a figure which shows one Example of a charging system. It is a figure which shows one Example of an authentication server. It is a figure which shows an example of user registration information. It is a figure which shows an example of an authentication ticket. It is a figure which shows one Example of a charging device. It is a figure which shows one Example of vehicle equipment. It is a figure which shows one Example of a portable terminal. It is a sequence chart which shows one Example (the 1) of operation | movement of a charging system. It is a sequence chart which shows one Example (the 2) of operation | movement of a charging system. It is a figure which shows the modification of a charging system. It is a figure which shows the modification of onboard equipment. It is a sequence chart which shows one modification of operation | movement of a charging system.

Next, the form for implementing this invention is demonstrated, referring drawings based on the following Examples. Examples described below are merely examples, and embodiments to which the present invention is applied are not limited to the following examples.
In all the drawings for explaining the embodiments, the same reference numerals are used for those having the same function, and repeated explanation is omitted.

<Example>
<Charging system>
FIG. 1 shows an embodiment of a charging system.

  The charging system includes a settlement center 100, an authentication server 200, a charging device 300, an in-vehicle device 400, and a mobile terminal 500. The settlement center 100, the authentication server 200, and the charging device 300 are connected via the communication network 50. The communication network 50 is the Internet, a short-range wireless network, a wireless LAN, Ethernet (registered trademark), or the like. The in-vehicle device 400 is mounted on an electric vehicle.

  The user accesses the authentication server 200 using the portable terminal 500, transmits user information using a secure communication technology such as TLS (Transport Layer Security), and requests user registration. The portable terminal 500 is a communication device that can be carried and used. For example, the mobile terminal 500 is an information terminal or a smartphone that can be connected to a network. The user information includes a user ID, a password, a credit card number, a vehicle number, a maximum charge amount, and the like. Further, the user information includes restriction information such as a credit card expiration date, a credit card type, and a billing expiration date. The vehicle unit ID may be used instead of the vehicle number or together with the vehicle number.

  Mutual authentication processing is performed between the portable terminal 500 and the in-vehicle device 400, and after establishing communication, user information is transmitted from the portable terminal 500 to the in-vehicle device 400. The mutual authentication process is executed according to a public key cryptosystem using a set of a public key and a private key held by each of the mobile terminal 500 and the in-vehicle device 400.

  When the electric vehicle needs to be charged, the in-vehicle device 400 or the portable terminal 500 transmits a user ID and a password to the authentication server 200 and receives an authentication ticket from the authentication server 200. The authentication ticket is information indicating that the user has been authenticated. A user ID, a vehicle number, an expiration date of the authentication ticket, and the like are added to the authentication ticket. The authentication ticket is transmitted with the electronic signature St added to the authentication ticket created using the secret key skk of the authentication server 200.

  The user connects the charging device 300 and a battery mounted on the electric vehicle. The in-vehicle device 400 or the portable terminal 500 requests charging of the battery mounted on the electric vehicle by transmitting an authentication ticket to the charging device 300. Here, when transmitting the authentication ticket from the portable terminal 500 to the charging device 300, the authentication ticket is transmitted via the in-vehicle device 400.

  The charging device 300 confirms the validity of the authentication ticket from the in-vehicle device 400, and starts charging when it is valid. The validity of the authentication ticket can be confirmed by verifying the electronic signature St with the public key of the authentication server 200.

  After the charging of the battery is completed, the charging device 300 transmits billing information including a power charge corresponding to the amount of charged power together with the authentication ticket to the authentication server 200 via the communication network 50.

  The authentication server 200 confirms the validity of the authentication ticket from the charging apparatus 300, and transmits the charging information to the settlement center 100 if it is valid.

  Payment center 100 charges the user of mobile terminal 500 based on the charging information from authentication server 200.

<Authentication server>
FIG. 2 shows an embodiment of the authentication server 200.

  The authentication server 200 includes a communication unit 202, a control unit 204, and a storage unit 212.

  The communication unit 202 connects the settlement center 100 and the charging device 300 by wire or wireless. For example, when connecting wirelessly, the communication unit 202 wirelessly connects to a wireless LAN base station (not shown) connected to the communication network 50.

The storage unit 212 stores various programs. The storage unit 212 stores user registration information 214. The user registration information 214 is stored when the user performs user registration with the mobile terminal 500.
FIG. 3 shows an example of the user registration information 214.

  The user registration information 214 includes a user ID, a password, a credit card number, a credit card expiration date, a credit card type, a vehicle number, a maximum billing amount, a billing expiration date, and the like. The in-vehicle device ID may be stored in the storage unit 212 as the user registration information 214 together with the vehicle number or instead of the vehicle number. Further, the user registration information 214 includes a vehicle ID, a maximum usage amount, a maximum usage amount per time, a remaining usage amount, an expiration date of the authentication ticket, an authentication ticket valid facility list, an authentication server address, and the like.

  The user ID is a user identifier.

  The password is a list of characters and numerical values for authenticating the user by the authentication server 200, and is associated with the user ID.

  The credit card number is a credit card number that is used when the user pays a charging fee including a power fee corresponding to the amount of charging power after the charging is completed.

  The expiration date of the credit card is a time limit for using the credit card.

  The type of credit card is a type of credit card used when the user pays a billing charge including a power charge corresponding to the amount of charge power after the end of charging. For example, the credit card type is the name of a credit card company.

  The vehicle number is a vehicle identification number. For example, the vehicle number is a license plate number.

  The maximum charge amount is the maximum charge amount per predetermined period. That is, the maximum charge amount is an amount that can be charged per predetermined period. Here, the predetermined period is set in advance such as one month.

  The expiration date of the billing is the date when the authentication ticket can be used.

  The vehicle ID is an identifier used when the in-vehicle device 400 mounted on the vehicle (electric vehicle) identifies the authentication ticket. The vehicle ID is created when an authentication ticket is issued. The vehicle ID may be associated with the user ID.

  The maximum usage amount is the maximum usable amount per month permitted by the authentication ticket. That is, the maximum usage amount is the amount of power that can be supplied per month. The amount of power that can be supplied may be set for a combination of a user ID and a vehicle ID. In this case, even if the user ID is the same, the maximum usage amount may be different if the vehicle ID is different. Here, one month is an example and can be set as appropriate. The maximum usage amount may be represented by a charge amount.

  The maximum usage amount per time is the maximum value of the usage amount allowed per time by the authentication ticket. That is, the maximum usage amount per time is a power supply amount allowed per time. Here, one time is an example and can be set as appropriate. The maximum usage amount per time may be represented by a charge amount.

  The remaining usable amount is an amount that is not yet supplied among the maximum value (maximum used amount) of the usable amount per month permitted by the authentication ticket. That is, the remaining usable amount is an amount that can be fed before the expiration date of the authentication ticket. The remaining usable amount may be represented by a charge amount.

  The authentication ticket expiration date is a date when the authentication ticket can be used. The expiration date of the authentication ticket is preferably about one day. However, the expiration date of the authentication ticket can be set by the user depending on environmental factors such as a radio wave condition between the in-vehicle device 400 or the portable terminal 500 and the authentication server 200.

  The authentication ticket valid facility list is a list of facility locations where the authentication ticket can be used.

  The address of the authentication server is address information such as the IP address and MAC address of the authentication server 200.

  The signature is an electronic signature St for an authentication ticket created using the secret key skk of the authentication server 200.

  The control unit 204 is realized by a CPU and functions as a user registration unit 206, an authentication processing unit 208, and a charging processing unit 210. When the CPU operates in accordance with a program (firmware) stored in the CPU or a program stored in the storage unit 212, the CPU functions as a user registration unit 206, an authentication processing unit 208, and a charging processing unit 210.

  When there is a user registration request from the mobile terminal 500 and user information is transmitted from the user terminal 500, the user registration unit 206 registers the user information in the user registration information 214 of the storage unit 212.

  When registering user information, the user registration unit 206 may notify the user of a place where there is a charging device that can be handled by an authentication ticket and a list of commercial names where the charging device is installed.

  Users who have been notified of the location of charging devices that can be supported by the authentication ticket or a list of commercial names where charging devices are installed, refer to the list when charging the electric vehicle and charge the nearest Can go straight to the device. For example, although it is connected to a charging device that cannot be handled by an authentication ticket, it is not possible to authenticate.

  The authentication processing unit 208 determines the legitimacy of the user based on the user ID and password from the in-vehicle device 400 or the portable terminal 500. The authentication processing unit 208 refers to the user registration information 214 stored in the storage unit 212, and whether or not the combination of the user ID and password from the in-vehicle device 400 matches the combination of the user ID and password of the user registration information 214. Determine whether. If they match, the authentication processing unit 208 determines that the user is valid. The authentication processing unit 208 issues an authentication ticket based on the user registration information 214 when it is determined that the user is valid. The authentication processing unit 208 creates an electronic signature St for the authentication ticket using the secret key skk of the authentication server 200, adds the electronic signature St to the authentication ticket, and transmits it.

  The authentication processing unit 208 may issue a plurality of authentication tickets for the same user ID. The user can select an authentication ticket to be used from a plurality of authentication tickets. For example, authentication tickets with different maximum usage per time are issued.

  FIG. 4 shows an example of an authentication ticket.

  Authentication ticket includes user ID (ID), vehicle ID, maximum usage, maximum usage per usage (fee), remaining usable amount (fee), certification ticket expiration date, certification ticket valid facility list, authentication Server address and signature are added.

  By adding the maximum usage amount to the authentication ticket and setting the amount of power that can be supplied per month, it is possible to supply power up to that amount of power, as if using a prepaid card for the user Service can be provided.

  In addition, the maximum usage amount per time is added to the authentication ticket, and the power supply amount permitted per time is set, so that the user can be supplied with power systematically and be paid systematically. Service can be provided.

  Further, a vehicle number may be added to the authentication ticket. In this case, when determining the validity of the authentication ticket, the charging device 300 determines whether or not the vehicle number added to the authentication ticket matches the vehicle number of the electric vehicle connected to the plug. If not, it is preferable to judge that it is not effective. When determining the validity of the authentication ticket, the validity of the authentication ticket is determined by determining whether the vehicle number added to the authentication ticket matches the vehicle number of the electric vehicle connected to the plug. Accuracy can be improved.

  Further, the location information of the in-vehicle device 400 or the portable terminal 500 when the authentication ticket is issued may be added to the authentication ticket. In this case, the in-vehicle device 400 or the portable terminal 500 transmits the position information to the authentication server 200 together with the user ID and the password.

  When determining the validity of the authentication ticket, the charging device 300 calculates the distance between the charging device 300 and the in-vehicle device 400 or the portable terminal 500, and determines that it is not valid if the distance is equal to or greater than a threshold value. Is preferred. The threshold is preferably a municipal level distance such as several kilometers. This is because it is assumed that the distance between the charging device 300 and the in-vehicle device 400 or the portable terminal 500 is often short when charging the electric vehicle. By determining the validity of the authentication ticket based on the distance between the charging device 300 and the portable terminal 500, the accuracy of determining the validity of the authentication ticket can be improved.

  The authentication processing unit 208 transmits the authentication ticket added with the electronic signature St to the in-vehicle device 400 or the portable terminal 500.

  An authentication ticket and charging information from the charging device 300 are input to the charging processing unit 210. The billing processing unit 210 confirms the validity of the authentication ticket, and transmits the billing information to the settlement center 100 if it is valid. The validity of the authentication ticket can be confirmed by verifying the electronic signature St with the public key of the authentication server 200.

  The charging processing unit 210 updates the user registration information 214 based on the charging information. Specifically, it is preferable that the billing processing unit 210 updates at least the remaining usable amount in the user registration information 214.

<Charging device 300>
FIG. 5 shows an embodiment of the charging device 300.

  The charging device 300 includes a communication unit 302, an input / output unit 304, a power supply unit 306, and a control unit 308.

  The communication unit 302 communicates with the authentication server 200 and the in-vehicle device 400 via the communication network 50. For example, the communication unit 302 performs wireless communication using a wireless LAN, and wirelessly connects to a wireless LAN base station (not shown) connected to the communication network 50.

  The input / output unit 304 is a terminal component that supplies electric power to an electric vehicle connected to a plug (not shown). When the input / output unit 304 detects that the electric vehicle is connected to the plug, the input / output unit 304 notifies the control unit 308. Also, the input / output unit 304 transmits information to the electric vehicle connected to the plug, and receives information from the electric vehicle connected to the plug.

  The power supply unit 306 is a power source (power generation means or battery) for supplying power to the electric vehicle connected to the plug.

  The control unit 308 controls the communication unit 302, the input / output unit 304, and the power supply unit 306. When the connection of the electric vehicle is notified from the input / output unit 304, the control unit 308 controls the communication unit 302 to establish a communication path with the authentication server 200.

  The control unit 308 is realized by a CPU and functions as an authentication processing unit 310 and a charging control unit 312. When the CPU operates according to a program (firmware) stored in the CPU or a program stored in a storage unit (not shown), functions as the authentication processing unit 310 and the charging control unit 312 are executed.

  The authentication processing unit 310 receives an authentication ticket from the in-vehicle device 400 connected by wireless LAN. The authentication processing unit 310 confirms the validity of the authentication ticket by verifying the electronic signature St with the public key of the authentication server 200. The public key of the authentication server 200 is notified from the authentication server 200 to the charging device 300 in advance. The authentication processing unit 310 inputs a confirmation result as to whether or not the authentication ticket is valid to the charging control unit 312.

  In addition, the authentication processing unit 310 sets the address of the authentication server that issues the authentication ticket when the charging apparatus 300 and the in-vehicle device 400 are connected before the authentication ticket is transmitted from the in-vehicle device 400. May be notified. In this case, the authentication server address is set in the in-vehicle device 400. The user can be notified of the authentication server trusted by the charging device 300, and the user can be notified of the authentication server in which user information such as a credit card is registered. When there are a plurality of authentication servers, the user can select an authentication server that transmits a user ID and a password.

  When it is notified from the authentication processing unit 310 that the authentication ticket is valid, the charging control unit 312 supplies power to the battery of the electric mobile body connected to the plug from the power supply unit 306 via the input / output unit 304. Control to supply. After the charging of the battery of the electric vehicle is completed, the charging control unit 312 controls charging information including a power charge corresponding to the amount of charged power together with the authentication ticket from the communication unit 302 to the authentication server 200.

<In-vehicle device 400>
FIG. 6 shows an embodiment of the in-vehicle device 400.

  The in-vehicle device 400 includes an input / output unit 402, a wireless communication unit 404, a short-range wireless communication unit 406, and a control unit 408. The control unit 408 has a storage unit 410.

  The input / output unit 402 is configured by, for example, a keyboard or the like, and is a device for inputting instructions to the in-vehicle device 400 and inputting data. The input / output unit 402 may be configured with a touch panel.

  In addition, the input / output unit 402 is configured by, for example, a microphone, and inputs sound emitted by the user. The voice is, for example, a message to a person who gets on the electric vehicle or an instruction to the in-vehicle device 400. The instruction may be for an application.

  Further, the input / output unit 402 is configured by a display, for example, and displays a processing state and a processing result by the in-vehicle device 400. The display may be a liquid crystal display (LCD), an organic EL (Electro-Luminescence) display, or the like.

  Further, the input / output unit 402 may be configured by a speaker, for example, and output sound to the user.

  The wireless communication unit 404 performs wireless communication between the authentication server 200 and the charging device 300 via the communication network 50 by a predetermined wireless communication method. For example, the wireless communication unit 404 may be configured with a data communication module (DCM). By configuring with the data communication module, it is possible to connect to the communication network 50 without using the portable terminal 500. Examples of the predetermined wireless communication system include GS (Global System for Mobile Communication) (GSM), Wideband Code Division Multiple Access (WCDMA), and Long Term Evolution (LTE).

  The short-range wireless communication unit 406 performs wireless communication with all or any one of the authentication server 200, the charging device 300, and the portable terminal 500. The short-range wireless communication unit 406 performs wireless communication using a short-range wireless communication technology such as a wireless LAN, ZigBee (registered trademark), or Bluetooth (registered trademark). Information for configuring the short-range wireless communication network is set in advance and stored in the memory 410.

  The control unit 408 is realized by a CPU and functions as a user information processing unit 412 and a charge control unit 414. When the CPU operates in accordance with a program (firmware) stored in the CPU or a program stored in the storage unit 410, functions as the user information processing unit 412 and the charging control unit 414 are executed.

  User information from the mobile terminal 500 is input to the user information processing unit 412. The in-vehicle device 400 and the portable terminal 500 are connected by a short-range wireless communication technology. The user information processing unit 312 stores user information input from the short-range wireless communication unit 406 in the storage unit 410.

  The charging control unit 414 performs connection processing with the authentication server 200 by controlling the wireless communication unit 404 or the short-range wireless communication unit 406 when the electric mobile body needs to be charged. Which of the wireless communication unit 404 and the short-range wireless communication unit 406 is used may be set in advance or may be set by a user operation. The charging control unit 414 acquires the user ID and password from the user information stored in the storage unit 410 and transmits the user ID and password from the wireless communication unit 404 to the authentication server 200. In addition, when the user ID and password are notified from the portable terminal 500, the charging control unit 414 notifies the authentication server 200 from the wireless communication unit 404.

  The authentication server 200 executes a user authentication process based on the user ID and the password, and transmits an authentication ticket to the in-vehicle device 400 when the authentication is successful.

  The charging control unit 414 acquires an authentication ticket from the authentication server 200. The charging control unit 414 performs a connection process with the charging device 300 by controlling the short-range wireless communication unit 406. The charging control unit 414 requests charging of the battery mounted on the electric vehicle by transmitting an authentication ticket to the charging device 300.

  The storage unit 410 included in the control unit 408 is, for example, a non-volatile memory, and stores information necessary for configuring a short-range wireless communication network with the authentication server 200, the charging device 300, and the portable terminal 500.

<Mobile terminal 500>
FIG. 7 shows an embodiment of the mobile terminal 500.

  The portable terminal 500 includes an input / output unit 502, a wireless communication unit 504, a short-range wireless communication unit 506, and a control unit 508. The control unit 508 has a storage unit 510.

  The input / output unit 502 is configured by, for example, a keyboard or the like, and is a device for inputting instructions to the mobile terminal 500 and inputting data. The input / output unit 502 may be configured with a touch panel.

  In addition, the input / output unit 502 is configured by a microphone, for example, and inputs a sound uttered by the user. The voice is, for example, a message to the user or an instruction to the portable terminal 500. The instruction may be for an application.

  Further, the input / output unit 502 is configured by, for example, a display, and displays a processing state and a processing result by the mobile terminal 500. The display may be a liquid crystal display, an organic EL display, or the like.

  Further, the input / output unit 502 may be configured by a speaker, for example, and output sound to the user.

  The wireless communication unit 504 performs wireless communication between the authentication server 200 and the in-vehicle device 400 through the communication network 50 by a predetermined wireless communication method. Examples of the predetermined wireless communication method include GS (registered trademark), WMC, LTL, and the like.

  The short-range wireless communication unit 506 performs wireless communication with the in-vehicle device 400. The short-range wireless communication unit 406 performs wireless communication using a short-range wireless communication technology such as a wireless LAN, ZigBee (registered trademark), or Bluetooth (registered trademark). Information for configuring the short-range wireless communication network is set in advance and stored in the memory 510.

  The control unit 508 is realized by a CPU, and functions as a user registration processing unit 512, a user information notification unit 514, and a charge control unit 516. When the CPU operates in accordance with a program (firmware) stored in the CPU or a program stored in the storage unit 510, functions as a user registration processing unit 512, a user information notification unit 514, and a charge control unit 516 are executed. .

  The user registration processing unit 512 accesses the authentication server 200 by controlling the wireless communication unit 504, transmits user information using a secure communication technology such as TLS, and requests user registration.

  The user information notification unit 514 is connected to the in-vehicle device 400 by controlling the short-range wireless communication unit 506 and notifies the in-vehicle device 400 of user information.

  The charging control unit 516 performs connection processing with the authentication server 200 by controlling the wireless communication unit 504 or the short-range wireless communication unit 506 when the electric vehicle needs to be charged. Which of the wireless communication unit 504 and the short-range wireless communication unit 506 is used may be set in advance or may be set by a user operation.

  The storage unit 510 included in the control unit 508 is, for example, a non-volatile memory, and stores information necessary for configuring a short-range wireless communication network with the in-vehicle device 400. The storage unit 510 stores user information.

<Operation of charging system>
FIG. 8 shows an embodiment (part 1) of the operation of the charging system.

  Prior to the operation of the charging system, the public key of the authentication server 200 is notified to the charging device 300. For example, the authentication server 200 creates a public / private key pair and notifies the charging device 300 of the public key.

  In step S <b> 802, the mobile terminal 500 transmits user information to the authentication server 200.

  In step S804, the authentication server 200 registers user information from the portable terminal 500.

  In step S806, after the user registration of the portable terminal 500 by the authentication server 200 is completed, mutual authentication is performed between the portable terminal 500 and the in-vehicle device 400.

  In step S808, the portable terminal 500 transmits user information to the in-vehicle device 400.

  In step S810, the in-vehicle device 400 stores user information from the mobile terminal 500.

  The electric mobile body needs to be charged, and the user connects the electric mobile body to the plug of the charging device 300.

  In step S812, charging device 300 detects that the electric vehicle is connected.

  In step S814, a connection process is executed between charging device 300 and authentication server 200.

  In step S816, the in-vehicle device 400 transmits the user ID and password to the authentication server 200.

  In step S818, the authentication server 200 authenticates the user based on the user ID and password from the in-vehicle device 400.

  In step S820, if the user is authenticated in step S818, the authentication server 200 issues an authentication ticket and creates an electronic signature St for the authentication ticket using the secret key skk of the authentication server 200. And the authentication server 200 transmits the authentication ticket which added the electronic signature St to the vehicle equipment 400. FIG.

  In step S822, the in-vehicle device 400 requests the charging of the battery of the electric vehicle by transmitting an authentication ticket to the charging device 300.

  In step S824, charging device 300 confirms the validity of the authentication ticket from in-vehicle device 400.

  In step S826, when the validity of the authentication ticket can be confirmed, the charging device 300 performs a process for charging the battery of the electric vehicle.

  In step S828, after the charging process of the battery of the electric vehicle is completed, the charging device 300 transmits to the authentication server 200 billing information including a power charge according to the amount of charge power and an authentication ticket.

  In step S830, authentication server 200 confirms the validity of the authentication ticket from charging device 300.

  In step S832, the authentication server 200 transmits the billing information to the settlement center 100 when the validity of the authentication ticket from the charging device 300 can be confirmed.

  In step S834, the settlement center 100 performs a charging process on the user's credit card based on the charging information from the authentication server 200.

  FIG. 9 shows an embodiment (part 2) of the operation of the charging system.

  Prior to the operation of the charging system, the public key of the authentication server 200 is notified to the charging device 300. For example, the authentication server 200 creates a public / private key pair and notifies the charging device 300 of the public key.

  In step S <b> 902, the mobile terminal 500 transmits user information to the authentication server 200.

  In step S904, the authentication server 200 registers user information from the portable terminal 500.

  The electric mobile body needs to be charged, and the user connects the battery of the electric mobile body to the plug of the charging device 300.

  In step S <b> 906, charging device 300 detects that the battery of the electric vehicle is connected to the plug of charging device 300.

  In step S908, connection processing is executed between the charging apparatus 300 and the authentication server 200.

  In step S910, the mobile terminal 500 transmits the user ID and password to the in-vehicle device 400.

  In step S912, the in-vehicle device 400 transmits (transfers) the user ID and password from the portable terminal 500 to the authentication server 200.

  In step S914, the authentication server 200 performs user authentication based on the user ID and password from the in-vehicle device 400.

  In step S916, when the user is authenticated in step S914, the authentication server 200 issues an authentication ticket, and creates an electronic signature St for the authentication ticket using the secret key skk of the authentication server 200. And the authentication server 200 transmits the authentication ticket which added the electronic signature St to the vehicle equipment 400. FIG.

  In step S918, the in-vehicle device 400 requests the charging of the battery of the electric vehicle by transmitting an authentication ticket to the charging device 300.

  In step S920, charging device 300 confirms the validity of the authentication ticket from in-vehicle device 400.

  In step S922, when the validity of the authentication ticket can be confirmed, the charging device 300 performs a charging process for the electric vehicle.

  In step S924, after the charging process of the electric vehicle is completed, charging device 300 transmits charging information including an electricity charge corresponding to the amount of charging power and an authentication ticket to authentication server 200.

  In step S <b> 926, authentication server 200 confirms the validity of the authentication ticket from charging device 300.

  In step S <b> 928, the authentication server 200 transmits billing information to the settlement center 100 when the validity of the authentication ticket from the charging device 300 is confirmed.

  In step S930, the settlement center 100 performs a charging process on the user's credit card based on the charging information from the authentication server 200.

  According to one embodiment of the charging system, by issuing an authentication ticket from the authentication server 200, the authentication server 200 and the charging device 300 can exclude an in-vehicle device that illegally requests charging of the battery.

  Since it is not necessary to confirm the user ID and password with the authentication server 200 each time and adopt the public key encryption method between the in-vehicle device 400 and the charging device 300, it is necessary to mount a security chip for concealing the encryption key. Absent.

  Furthermore, by setting the amount of power that can be supplied by adding the maximum usage amount to the authentication ticket, damage can be minimized even if the authentication ticket information is stolen.

  Since the expiration date is set (determined) by adding an expiration date to the authentication ticket, the risk of the authentication ticket being stolen and the user ID and password leaked is low and the damage is minimal Can be suppressed.

  Instead of transferring the user ID and password to the authentication server 200 via the in-vehicle device 400, the user ID and password may be transmitted directly from the portable terminal 500 to the authentication server 200. In this case, the mobile terminal 400 receives the authentication ticket directly from the authentication server 200 and transmits the authentication ticket to the charging device 300 via the in-vehicle device 400. The charging device 300 transmits an authentication ticket to the authentication server 200.

<Modification>
<Charging system>
FIG. 10 shows a modification of the charging system.

  The charging system includes a settlement center 100, an authentication server 200, a charging device 300, and an in-vehicle device 600. The settlement center 100, the authentication server 200, and the charging device 300 are connected via the communication network 50. The in-vehicle device 400 is mounted on an electric vehicle.

  The user accesses the authentication server 200 using the in-vehicle device 600, transmits user information using a secure communication technology such as TLS, and performs user registration.

  When the electric vehicle needs to be charged, the in-vehicle device 600 transmits a user ID and a password to the authentication server 200 and receives an authentication ticket from the authentication server 200.

  The in-vehicle device 600 requests charging of a battery mounted on the electric vehicle by transmitting an authentication ticket to the charging device 300.

  The charging device 300 confirms the validity of the authentication ticket from the in-vehicle device 600, and starts charging when it is valid. The validity of the authentication ticket can be confirmed by verifying the electronic signature St with the public key of the authentication server 200. After the charging of the battery is completed, the charging device 300 transmits billing information including a power charge corresponding to the amount of charged power together with the authentication ticket to the authentication server 200 via the communication network 50.

  The authentication server 200 confirms the validity of the authentication ticket from the charging apparatus 300, and transmits the charging information to the settlement center 100 if it is valid.

  The settlement center 100 charges the user of the in-vehicle device 600, that is, the user's credit card, based on the charging information from the authentication server 200.

<In-vehicle device 600>
FIG. 11 shows an embodiment of the in-vehicle device 600.

  The in-vehicle device 600 includes an input / output unit 602, a wireless communication unit 604, a short-range wireless communication unit 606, and a control unit 608. The control unit 608 has a storage unit 610.

  The in-vehicle device 600 differs from the in-vehicle device 400 described above in that the control unit 608 functions as the user registration processing unit 612 and the charging control unit 614. When the CPU operates according to a program (firmware) stored in the CPU or a program stored in the storage unit 610, functions as the user registration processing unit 612 and the charge control unit 614 are executed.

  The user registration processing unit 612 controls the wireless communication unit 504 to access the authentication server 200, transmits user information using a secure communication technology such as TLS, and requests user registration.

  The charging control unit 614 performs connection processing with the authentication server 200 by controlling the wireless communication unit 604 when the electric vehicle needs to be charged. The charging control unit 614 acquires a user ID and password from the user information stored in the storage unit 610 and transmits the user ID and password from the wireless communication unit 604 to the authentication server 200. The authentication server 200 authenticates the user based on the user ID and password, and transmits an authentication ticket to the in-vehicle device 600.

  The charging control unit 604 acquires an authentication ticket from the authentication server 200. The charging control unit 604 requests charging of the battery mounted on the electric vehicle by transmitting an authentication ticket to the charging device 300.

<Operation of charging system>
FIG. 12 shows an embodiment of the operation of the charging system.

  In step S <b> 1202, the in-vehicle device 600 transmits user information to the authentication server 200.

  In step S1204, the authentication server 200 registers user information from the in-vehicle device 600.

  The electric mobile body needs to be charged, and the user connects the electric mobile body to the plug of the charging device 300.

  In step S1206, charging device 300 detects that the electric vehicle is connected.

  In step S1208, connection processing is executed between charging device 300 and authentication server 200.

  In step S <b> 1210, the in-vehicle device 600 transmits the user ID and password to the authentication server 200.

  In step S <b> 1212, the authentication server 200 performs user authentication based on the user ID and password from the in-vehicle device 600.

  In step S <b> 1214, when the user is authenticated in step S <b> 1212, the authentication server 200 issues an authentication ticket and creates an electronic signature St for the authentication ticket using the secret key skk of the authentication server 200. And the authentication server 200 transmits the authentication ticket which added the electronic signature St to the vehicle equipment 600. FIG.

  In step S <b> 1216, the in-vehicle device 600 requests the charging of the battery of the electric vehicle by transmitting an authentication ticket to the charging device 300.

  In step S1218, charging apparatus 300 confirms the validity of the authentication ticket from in-vehicle device 600.

  In step S1220, when the validity of the authentication ticket can be confirmed, the charging device 300 performs a charging process for the electric vehicle.

  In step S1222, the charging device 300 transmits, to the authentication server 200, billing information including an electricity fee corresponding to the amount of charge power and an authentication ticket after the electric mobile body is charged.

  In step S <b> 1224, authentication server 200 confirms the validity of the authentication ticket from charging device 300.

  In step S <b> 1226, the authentication server 200 transmits billing information to the settlement center 100 when the validity of the authentication ticket from the charging device 300 can be confirmed.

  In step S <b> 1228, payment center 100 performs a charging process for the user's credit card based on the charging information from authentication server 200.

  According to a modification of the charging system, as in the above-described embodiment, the authentication server 200 and the charging device 300 illegally request charging of the battery by issuing an authentication ticket from the authentication server 200. You can eliminate the machine.

  Since it is not necessary to confirm the user ID and password with the authentication server 200 each time and to adopt the public key encryption method between the in-vehicle device 600 and the charging device 300, it is necessary to mount a security chip for concealing the encryption key. Absent.

  Furthermore, by setting the amount of power that can be supplied by adding the maximum usage amount to the authentication ticket, damage can be minimized even if the authentication ticket information is stolen. By adding an expiration date to the authentication ticket, damage can be minimized even if the authentication ticket information is stolen.

  Since the expiration date is set (determined) by adding an expiration date to the authentication ticket, the risk of the authentication ticket being stolen and the user ID and password leaked is low and the damage is minimal Can be suppressed.

  Furthermore, it is realizable without using a portable terminal.

  Although the present invention has been described above with reference to specific embodiments and modifications, the embodiments and modifications are merely examples, and those skilled in the art will recognize various modifications, modifications, alternatives, and substitutions. You will understand examples. For convenience of explanation, an apparatus according to an embodiment of the present invention has been described using a functional block diagram, but such an apparatus may be implemented in hardware, software, or a combination thereof. The present invention is not limited to the above-described embodiments, and various variations, modifications, alternatives, substitutions, and the like are included without departing from the spirit of the present invention.

DESCRIPTION OF SYMBOLS 50 Communication network 100 Settlement center 200 Authentication server 202 Communication part 204 Control part 206 User registration part 208 Authentication processing part 210 Charge processing part 212 Storage part 214 User registration information 300 Charging apparatus 302 Communication part 304 Input / output part 306 Power supply part 308 Control Unit 310 authentication processing unit 312 charge control unit 400 vehicle-mounted device 402 input / output unit 404 wireless communication unit 406 short-range wireless communication unit 408 control unit 410 storage unit 412 user information processing unit 414 charge control unit 500 portable terminal 502 input / output unit 504 wireless Communication unit 506 Short-range wireless communication unit 508 Control unit 510 Storage unit 512 User registration processing unit 514 User information notification unit 516 Charge control unit 600 On-vehicle device 602 Input / output unit 604 Wireless communication unit 606 Short-range wireless communication unit 608 Control unit 610 Storage Part 12 user registration processing unit 614 charging control unit

Claims (10)

A charging system comprising an in-vehicle device mounted on an electric vehicle, a portable terminal that performs wireless communication with the in-vehicle device, and a server for registering a user,
The portable terminal is
A first control unit that requests authentication of the user from the server and acquires authentication information indicating that the user has been authenticated when the user is authenticated by the server;
The server
In response to a user authentication request from the mobile terminal, the user authentication process is executed, and when the authentication is successful, the second control unit transmits the authentication information to the mobile terminal.
The in-vehicle device is
When charging a battery that stores electric power mounted on the electric vehicle, the authentication information is acquired from the portable terminal,
A charging system comprising: a third control unit that requests charging of the battery by transmitting the authentication information acquired from the portable terminal to a charging device that charges the battery. The charging device determines whether or not to charge the battery based on the authentication information;
The charging system according to claim 1, wherein the authentication information is transmitted to the server after charging of the battery is completed. The second control unit creates an electronic signature for the authentication information using a secret key of the server, and transmits the authentication information with the electronic signature added to the portable terminal,
3. The charging system according to claim 1, wherein the charging device determines whether or not to charge the battery by verifying the electronic signature added to the authentication information using a public key of the server. . The charging system according to any one of claims 1 to 3, wherein the charging device notifies the in- vehicle device of address information of the server.   5. The charging according to claim 1, wherein the first control unit obtains information representing a place where a charging device capable of requesting charging of a battery with the authentication information is installed from the server. system.   The charging according to any one of claims 1 to 5, wherein information indicating a charge amount permitted during a predetermined period or information indicating an amount that can be charged during the predetermined period is added to the authentication information. system.   The charging according to any one of claims 1 to 6, wherein information indicating a charge amount permitted in one charge or information indicating a chargeable amount in one charge is added to the authentication information. system. The authentication information is added with location information of the mobile terminal,
The charging system according to any one of claims 1 to 7, wherein the charging device determines whether to charge the battery based on position information of the mobile terminal. An in-vehicle device mounted on an electric vehicle,
An authentication ticket indicating that the user has been authenticated by the server that registers the user is acquired by the mobile terminal,
The in-vehicle device is
A wireless communication unit for performing wireless communication with the mobile terminal;
When charging a battery that stores electric power mounted on the electric vehicle, the authentication ticket is acquired from the portable terminal by controlling the wireless communication unit,
An in-vehicle device that requests charging of the battery by transmitting the authentication ticket acquired from the portable terminal to a charging device that charges the battery. A charging method executed by a charging system including an in-vehicle device mounted on an electric vehicle, a portable terminal that performs wireless communication with the in-vehicle device, and a server that registers a user,
The portable terminal is
Requesting the server to authenticate the user and obtaining authentication information indicating that the user has been authenticated when the user is authenticated by the server;
The server
In response to a user authentication request from the mobile terminal, the user authentication process is executed, and if the authentication is successful, the authentication information is transmitted to the mobile terminal,
The in-vehicle device is
When charging a battery that stores electric power mounted on the electric vehicle, the authentication information is acquired from the portable terminal,
Requesting charging of the battery by transmitting the authentication information acquired from the mobile terminal to a charging device for charging the battery;
Charging method.

Images